Skip to content

build(deps): bump the npm-production-dependencies group across 2 directories with 10 updates #18

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
dependabot wants to merge 1 commit into from
Closed

build(deps): bump the npm-production-dependencies group across 2 directories with 10 updates #18

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 10, 2025 •
edited
Loading

Bumps the npm-production-dependencies group with 7 updates in the /src/frontend directory:

Package From To
@grpc/grpc-js 1.12.6 1.14.2
@openfeature/react-sdk 1.0.2 1.1.0
@opentelemetry/auto-instrumentations-node 0.67.1 0.67.2
@tanstack/react-query 5.90.11 5.90.12
next 16.0.4 16.0.8
react 19.2.0 19.2.1
react-dom 19.2.0 19.2.1

Bumps the npm-production-dependencies group with 5 updates in the /src/payment directory:

Package From To
@grpc/grpc-js 1.12.6 1.14.2
@opentelemetry/auto-instrumentations-node 0.67.1 0.67.2
@openfeature/server-sdk 1.20.0 1.20.1
pino 9.14.0 10.1.0
pino-opentelemetry-transport 1.1.0 2.0.0

Updates @grpc/grpc-js from 1.12.6 to 1.14.2

Release notes

Sourced from @​grpc/grpc-js's releases.

@​grpc/grpc-js 1.14.2

@​grpc/grpc-js 1.14.1

  • Fix a regression of the settings used internally for HTTP/2 sessions (#3023)

@​grpc/grpc-js-xds 1.14.0

  • Implement RBAC support (gRFC A41) (#2939, #2945)
  • Add weighted_round_robin to LB policy registry (#3001) (currently experimental, enabled by the environment variable GRPC_EXPERIMENTAL_XDS_WRR_LB)
  • Add wrr_locality to LB policy registry (#3003)

@​grpc/grpc-js 1.14.0

Changelog

  • Add getAuthContext method to client and server call classes (more details can be found in gRFC L35) (#2920)
  • Implement custom backend metrics support (gRFC A51) (#2978, #2983, #2985, #2986, #2999)
  • Add getConnectionInfo method to the ServerInterceptingCall class (#2922)
  • Implement the weighted_round_robin load balancing policy (#2998)
  • Fix jitter behavior for client retries (#2960 contributed by @​ekscentrysytet)
  • Start connecting from a random index in the round_robin LB policy (#2979)
  • Send connection-level WINDOW_UPDATE at session start (#2971 contributed by @​KoenRijpstra)

Experimental API Changes

Added:

  • CHANNEL_ARGS_CONFIG_SELECTOR_KEY
  • StatusOr<T>
  • CallStream
  • statusOrFromValue
  • statusOrFromError

Modified:

  • ResolverListener#onSuccessfulResolution now has the signature (endpointList: StatusOr<Endpoint[]>, attributes: { [key: string]: unknown }, serviceConfig: StatusOr<ServiceConfig> | null, resolutionNote: string): boolean
  • LoadBalancer#updateAddressList now has the signature `updateAddressList(endpointList: StatusOr<Endpoint[]>,lbConfig: TypedLoadBalancingConfig, channelOptions: ChannelOptions, resolutionNote: string): boolean

@​grpc/grpc-js 1.13.4

  • Fix ability to set SNI with ssl_target_name_override option (#2956)

@​grpc/grpc-js 1.13.3

  • Disable Nagle's algorithm (#2936)
  • Avoid calling http2.getDefaultSettings (#2937)

@​grpc/grpc-js 1.13.2

  • Fix a bug that caused clients to be unable to connect through local proxies (#2933)

@​grpc/grpc-js 1.13.1

  • Fix a bug that caused the rejectUnauthorized channel credentials option to be handled incorrectly (#2926)
  • Fix a bug that caused the client to never send retries if any retryThrottling config was set (#2927)

... (truncated)

Commits
  • bf0dc8f Merge pull request #3029 from murgatroid99/grpc-js_keepalive_fix_backport
  • 235474e grpc-js: Bump to 1.14.2
  • 2f090c6 grpc-js: Fix server keep alive timeout not properly destroying connections
  • 425e7cb Merge pull request #3023 from murgatroid99/grpc-js_session_memory_fix
  • dcb2182 grpc-js: Re-add a couple of accidentally removed HTTP/2 session settings
  • 3dd281b Merge pull request #3014 from murgatroid99/grpc-js_v1.14_bump
  • 26c5fe4 grpc-js(-xds): Bump to 1.14.0 and update README
  • a432dbd Merge pull request #3009 from murgatroid99/grpc-js-xds_deexperimentalize_fede...
  • 67154af Merge pull request #3008 from murgatroid99/grpc-js-xds_client_wrr_interop_sup...
  • 82ee40c Merge pull request #3013 from murgatroid99/grpc-tools_mac_build_fix
  • Additional commits viewable in compare view

Updates @openfeature/react-sdk from 1.0.2 to 1.1.0

Release notes

Sourced from @​openfeature/react-sdk's releases.

core: v1.1.0

1.1.0 (2024-04-02)

✨ New Features

web-sdk: v1.1.0

1.1.0 (2024-05-13)

✨ New Features

  • set context during provider init on web (#919) (7e6c1c6)

🐛 Bug Fixes

  • remove export of OpenFeatureClient (#794) (3d197f2)
  • removes exports of OpenFeatureClient class and makes event props readonly (#918) (e9a25c2)
  • run error hook when provider returns reason error or error code (#926) (c6d0b5d)
  • skip reconciling event for synchronous onContextChange operations (#931) (6c25f29)

🧹 Chore

📚 Documentation

  • add tip about supported usage in the install section (#941) (f0de667)

react-sdk: v1.1.0

1.1.0 (2025-12-09)

✨ New Features

  • allow method to be passed into setContext hook (#1301) (279f9bf)

🐛 Bug Fixes

  • await context change in useContextMutator setContext (#1306) (7ef721a)
  • compare full EvaluationDetails to prevent stale data (#1287) (8133a4f)
  • in-line docs, un-needed AbortController creation (#1291) (9b05be9)
  • use actual previous context to noop useContextMutator setContext (#1305) (4d15a86)

... (truncated)

Changelog

Sourced from @​openfeature/react-sdk's changelog.

1.1.0 (2023-01-23)

Features

1.0.1 (2022-12-23)

Bug Fixes

1.0.0 (2022-10-19)

Miscellaneous Chores

0.5.1 (2022-10-11)

Features

0.5.0 (2022-10-03)

⚠ BREAKING CHANGES

  • errorCode as enum, reason as string (#244)

Features

0.4.0 (2022-09-20)

⚠ BREAKING CHANGES

  • improve generic type accuracy (#224)
  • convert to chainable methods (#221)
  • remove flag evaluation options from the provider interface (#185)
  • context transformer and related interfaces removed.

... (truncated)

Commits
  • 6aa669e chore(main): release 1.1.0 (#362)
  • 2396ea6 feat: add STATIC, CACHED reasons (#360)
  • a8c5610 chore: renovate regex manager to monitor test-harness version (#359)
  • 1c70a4b docs: updated API documentation URL
  • f30efb7 chore: update test-harness & fix evaluation integration tests (#357)
  • 0e81b6c chore(main): release 1.0.1 (#356)
  • 11f8efe fix: include types in exports (#355)
  • 9fbb2bd docs: improved the readme (#352)
  • 4d4fca4 chore(deps): update dependency esbuild to ^0.16.0 (#350)
  • 5d87551 chore(deps): update jest monorepo to v29 (major) (#347)
  • Additional commits viewable in compare view

Updates @opentelemetry/auto-instrumentations-node from 0.67.1 to 0.67.2

Release notes

Sourced from @​opentelemetry/auto-instrumentations-node's releases.

auto-instrumentations-node: v0.67.2

0.67.2 (2025-11-26)

Bug Fixes

  • enable programmatic config when environment variables are unset (#2947) (cf80246)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​opentelemetry/instrumentation-aws-lambda bumped from ^0.60.1 to ^0.61.0
Changelog

Sourced from @​opentelemetry/auto-instrumentations-node's changelog.

0.67.2 (2025-11-26)

Bug Fixes

  • enable programmatic config when environment variables are unset (#2947) (cf80246)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​opentelemetry/instrumentation-aws-lambda bumped from ^0.60.1 to ^0.61.0
Commits

Updates @tanstack/react-query from 5.90.11 to 5.90.12

Release notes

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-persist-client@​5.90.12

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.91.9
    • @​tanstack/react-query@​5.90.10

@​tanstack/react-query@​5.90.12

Patch Changes

  • Updated dependencies [72d8ac5]:
    • @​tanstack/query-core@​5.90.12
Changelog

Sourced from @​tanstack/react-query's changelog.

5.90.12

Patch Changes

  • Updated dependencies [72d8ac5]:
    • @​tanstack/query-core@​5.90.12
Commits

Updates next from 16.0.4 to 16.0.8

Release notes

Sourced from next's releases.

v16.0.8

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • Update react version in cna templates (#86950)

Credits

Huge thanks to @​huozhi for helping!

v16.0.7

Please see CVE-2025-66478 for additional details about this release.

v16.0.6

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • bump the browserslist version to silence a warning in CI (#86625)

Credits

Huge thanks to @​lukesandberg for helping!

v16.0.5

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • fix(nodejs-middleware): await for body cloning to be properly finalized (#85418)

Credits

Huge thanks to @​lucasadrianof for helping!

Commits

Updates react from 19.2.0 to 19.2.1

Release notes

Sourced from react's releases.

19.2.1 (December 3rd, 2025)

React Server Components

Changelog

Sourced from react's changelog.

19.2.1 (Dec 3, 2025)

React Server Components

Commits

Updates react-dom from 19.2.0 to 19.2.1

Release notes

Sourced from react-dom's releases.

19.2.1 (December 3rd, 2025)

React Server Components

Changelog

Sourced from react-dom's changelog.

19.2.1 (Dec 3, 2025)

React Server Components

Commits

Updates @grpc/grpc-js from 1.12.6 to 1.14.2

Release notes

Sourced from @​grpc/grpc-js's releases.

@​grpc/grpc-js 1.14.2

@​grpc/grpc-js 1.14.1

  • Fix a regression of the settings used internally for HTTP/2 sessions (#3023)

@​grpc/grpc-js-xds 1.14.0

  • Implement RBAC support (gRFC A41) (#2939, #2945)
  • Add weighted_round_robin to LB policy registry (#3001) (currently experimental, enabled by the environment variable GRPC_EXPERIMENTAL_XDS_WRR_LB)
  • Add wrr_locality to LB policy registry (#3003)

@​grpc/grpc-js 1.14.0

Changelog

  • Add getAuthContext method to client and server call classes (more details can be found in gRFC L35) (#2920)
  • Implement custom backend metrics support (gRFC A51) (#2978, #2983, #2985, #2986, #2999)
  • Add getConnectionInfo method to the ServerInterceptingCall class (#2922)
  • Implement the weighted_round_robin load balancing policy (#2998)
  • Fix jitter behavior for client retries (#2960 contributed by @​ekscentrysytet)
  • Start connecting from a random index in the round_robin LB policy (#2979)
  • Send connection-level WINDOW_UPDATE at session start (#2971 contributed by @​KoenRijpstra)

Experimental API Changes

Added:

  • CHANNEL_ARGS_CONFIG_SELECTOR_KEY
  • StatusOr<T>
  • CallStream
  • statusOrFromValue
  • statusOrFromError

Modified:

  • ResolverListener#onSuccessfulResolution now has the signature (endpointList: StatusOr<Endpoint[]>, attributes: { [key: string]: unknown }, serviceConfig: StatusOr<ServiceConfig> | null, resolutionNote: string): boolean
  • LoadBalancer#updateAddressList now has the signature `updateAddressList(endpointList: StatusOr<Endpoint[]>,lbConfig: TypedLoadBalancingConfig, channelOptions: ChannelOptions, resolutionNote: string): boolean

@​grpc/grpc-js 1.13.4

  • Fix ability to set SNI with ssl_target_name_override option (#2956)

@​grpc/grpc-js 1.13.3

  • Disable Nagle's algorithm (#2936)
  • Avoid calling http2.getDefaultSettings (#2937)

@​grpc/grpc-js 1.13.2

  • Fix a bug that caused clients to be unable to connect through local proxies (#2933)

@​grpc/grpc-js 1.13.1

  • Fix a bug that caused the rejectUnauthorized channel credentials option to be handled incorrectly (#2926)
  • Fix a bug that caused the client to never send retries if any retryThrottling config was set (#2927)

... (truncated)

Commits
  • bf0dc8f Merge pull request #3029 from murgatroid99/grpc-js_keepalive_fix_backport
  • 235474e grpc-js: Bump to 1.14.2
  • 2f090c6 grpc-js: Fix server keep alive timeout not properly destroying connections
  • 425e7cb Merge pull request #3023 from murgatroid99/grpc-js_session_memory_fix
  • dcb2182 grpc-js: Re-add a couple of accidentally removed HTTP/2 session settings
  • 3dd281b Merge pull request #3014 from murgatroid99/grpc-js_v1.14_bump
  • 26c5fe4 grpc-js(-xds): Bump to 1.14.0 and update README
  • a432dbd Merge pull request #3009 from murgatroid99/grpc-js-xds_deexperimentalize_fede...
  • 67154af Merge pull request #3008 from murgatroid99/grpc-js-xds_client_wrr_interop_sup...
  • 82ee40c Merge pull request #3013 from murgatroid99/grpc-tools_mac_build_fix
  • Additional commits viewable in compare view

Updates @opentelemetry/auto-instrumentations-node from 0.67.1 to 0.67.2

Release notes

Sourced from @​opentelemetry/auto-instrumentations-node's releases.

auto-instrumentations-node: v0.67.2

0.67.2 (2025-11-26)

Bug Fixes

  • enable programmatic config when environment variables are unset (#2947) (cf80246)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​opentelemetry/instrumentation-aws-lambda bumped from ^0.60.1 to ^0.61.0
Changelog

Sourced from @​opentelemetry/auto-instrumentations-node's changelog.

0.67.2 (2025-11-26)

Bug Fixes

  • enable programmatic config when environment variables are unset (#2947) (cf80246)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​opentelemetry/instrumentation-aws-lambda bumped from ^0.60.1 to ^0.61.0
Commits

Updates @grpc/grpc-js from 1.12.6 to 1.14.2

Release notes

Sourced from @​grpc/grpc-js's releases.

@​grpc/grpc-js 1.14.2

@​grpc/grpc-js 1.14.1

  • Fix a regression of the settings used internally for HTTP/2 sessions (#3023)

@​grpc/grpc-js-xds 1.14.0

  • Implement RBAC support (gRFC A41) (#2939, #2945)
  • Add weighted_round_robin to LB policy registry (#3001) (currently experimental, enabled by the environment variable GRPC_EXPERIMENTAL_XDS_WRR_LB)
  • Add wrr_locality to LB policy registry (#3003)

@​grpc/grpc-js 1.14.0

Changelog

  • Add getAuthContext method to client and server call classes (more details can be found in gRFC L35) (#2920)
  • Implement custom backend metrics support (gRFC A51) (#2978, #2983, #2985, #2986, #2999)
  • Add getConnectionInfo method to the ServerInterceptingCall class (#2922)
  • Implement the weighted_round_robin load balancing policy (#2998)
  • Fix jitter behavior for client retries (#2960 contributed by @​ekscentrysytet)
  • Start connecting from a random index in the round_robin LB policy (#2979)
  • Send connection-level WINDOW_UPDATE at session start (#2971 contributed by @​KoenRijpstra)

Experimental API Changes

Added:

  • CHANNEL_ARGS_CONFIG_SELECTOR_KEY
  • StatusOr<T>
  • CallStream
  • statusOrFromValue
  • statusOrFromError

Modified:

  • ResolverListener#onSuccessfulResolution now has the signature (endpointList: StatusOr<Endpoint[]>, attributes: { [key: string]: unknown }, serviceConfig: StatusOr<ServiceConfig> | null, resolutionNote: string): boolean
  • LoadBalancer#updateAddressList now has the signature `updateAddressList(endpointList: StatusOr<Endpoint[]>,lbConfig: TypedLoadBalancingConfig, channelOptions: ChannelOptions, resolutionNote: string): boolean

@​grpc/grpc-js 1.13.4

  • Fix ability to set SNI with ssl_target_name_override option (#2956)

@​grpc/grpc-js 1.13.3

  • Disable Nagle's algorithm (#2936)
  • Avoid calling http2.getDefaultSettings (#2937)

@​grpc/grpc-js 1.13.2

  • Fix a bug that caused clients to be unable to connect through local proxies (#2933)

@​grpc/grpc-js 1.13.1

  • Fix a bug that caused the rejectUnauthorized channel credentials option to be handled incorrectly (#2926)
  • Fix a bug that caused the client to never send retries if any retryThrottling config was set (#2927)

... (truncated)

Commits
  • bf0dc8f Merge pull request #3029 from murgatroid99/grpc-js_keepalive_fix_backport
  • 235474e grpc-js: Bump to 1.14.2
  • 2f090c6 grpc-js: Fix server keep alive timeout not properly destroying connections
  • 425e7cb Merge pull request #3023 from murgatroid99/grpc-js_session_memory_fix
  • dcb2182 grpc-js: Re-add a couple of accidentally removed HTTP/2 session settings
  • 3dd281b Merge pull request #3014 from murgatroid99/grpc-js_v1.14_bump
  • 26c5fe4 grpc-js(-xds): Bump to 1.14.0 and update README
  • a432dbd Merge pull request #3009 from murgatroid99/grpc-js-xds_deexperimentalize_fede...
  • 67154af Merge pull request #3008 from murgatroid99/grpc-js-xds_client_wrr_interop_sup...
  • 82ee40c Merge pull request #3013 from murgatroid99/grpc-tools_mac_build_fix
  • Additional commits viewable in compare view

Updates @opentelemetry/auto-instrumentations-node from 0.67.1 to 0.67.2

Release notes

Sourced from @​opentelemetry/auto-instrumentations-node's releases.

auto-instrumentations-node: v0.67.2

0.67.2 (2025-11-26)

Bug Fixes

  • enable programmatic config when environment variables are unset (#2947) (cf80246)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​opentelemetry/instrumentation-aws-lambda bumped from ^0.60.1 to ^0.61.0
Changelog

Sourced from @​opentelemetry/auto-instrumentations-node's changelog.

0.67.2 (2025-11-26)

Bug Fixes

  • enable programmatic config when environment variables are unset (#2947) (cf80246)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​opentelemetry/instrumentation-aws-lambda bumped from ^0.60.1 to ^0.61.0
Commits

Updates @grpc/grpc-js from 1.12.6 to 1.14.2

Release notes

Sourced from @​grpc/grpc-js's releases.

@​grpc/grpc-js 1.14.2

@​grpc/grpc-js 1.14.1

  • Fix a regression of the settings used internally for HTTP/2 sessions (#3023)

@​grpc/grpc-js-xds 1.14.0

  • Implement RBAC support (gRFC A41) (#2939, #2945)
  • Add weighted_round_robin to LB policy registry (#3001) (currently experimental, enabled by the environment variable GRPC_EXPERIMENTAL_XDS_WRR_LB)
  • Add wrr_locality to LB policy registry (#3003)

@​grpc/grpc-js 1.14.0

Changelog

  • Add getAuthContext method to client and server call classes (more details can be found in gRFC L35) (#2920)
  • Implement custom backend metrics support (gRFC A51) (#2978, #2983, #2985, #2986, #2999)
  • Add getConnectionInfo method to the ServerInterceptingCall class (#2922)
  • Implement the weighted_round_robin load balancing policy (#2998)
  • Fix jitter behavior for client retries (#2960 contributed by @​ekscentrysytet)
  • Start connecting from a random index in the round_robin LB policy (#2979)
  • Send connection-level WINDOW_UPDATE at session start (#2971 contributed by @​KoenRijpstra)

Experimental API Changes

Added:

  • CHANNEL_ARGS_CONFIG_SELECTOR_KEY
  • StatusOr<T>
  • CallStream
  • statusOrFromValue
  • statusOrFromError

Modified:

  • ResolverListener#onSuccessfulResolution now has the signature (endpointList: StatusOr<Endpoint[]>, attributes: { [key: string]: unknown }, serviceConfig: StatusOr<ServiceConfig> | null, resolutionNote: string): boolean
  • LoadBalancer#updateAddressList now has the signature `updateAddressList(endpointList: StatusOr<Endpoint[]>,lbConfig: TypedLoadBalancingConfig, channelOptions: ChannelOptions, resolutionNote: string): boolean

@​grpc/grpc-js 1.13.4

  • Fix ability to set SNI with ssl_target_name_override option (#2956)

@​grpc/grpc-js 1.13.3

  • Disable Nagle's algorithm (#2936)
  • Avoid calling http2.getDefaultSettings (#2937)

@​grpc/grpc-js 1.13.2

  • Fix a bug that caused clients to be unable to connect through local proxies (#2933)

@​grpc/grpc-js 1.13.1

  • Fix a bug that caused the rejectUnauthorized channel credentials option to be handled incorrectly (#2926)
  • Fix a bug that caused the client to never send retries if any retryThrottling config was set (#2927)

... (truncated)

Commits
  • bf0dc8f Merge pull request #3029 from murgatroid99/grpc-js_keepalive_fix_backport
  • 235474e grpc-js: Bump to 1.14.2
  • 2f090c6 grpc-js: Fix server keep alive timeout not properly destroying connections
  • 425e7cb Merge pull request #3023 from murgatroid99/grpc-js_session_memory_fix
  • dcb2182 grpc-js: Re-add a couple of accidentally removed HTTP/2 session settings
  • 3dd281b Merge pull request #3014 from murgatroid99/grpc-js_v1.14_bump
  • 26c5fe4 grpc-js(-xds): Bump to 1.14.0 and update README
  • a432dbd Merge pull request #3009 from murgatroid99/grpc-js-xds_deexperimentalize_fede...
  • 67154af Merge pull request #3008 from murgatroid99/grpc-js-xds_client_wrr_interop_sup...
  • 82ee40c Merge pull request #3013 from murgatroid99/grpc-tools_mac_build_fix
  • Additional commits viewable in compare view

Updates @openfeature/server-sdk from 1.20.0 to 1.20.1

Release notes

Sourced from @​openfeature/server-sdk's releases.

server-sdk: v1.20.1

1.20.1 (2025-12-09)

🐛 Bug Fixes

🧹 Chore

  • update copyright to OpenFeature Maintainers (#1283) (d751b8b)

📚 Documentation

  • add Multi-Provider to features list in README's (#1269) (752fa0d)
Commits
  • a0225fb chore(main): release server-sdk 1.20.1 (#1270)
  • 7ef721a fix: await context change in useContextMutator setContext (#1306)
  • 4d15a86 fix: use actual previous context to noop useContextMutator setContext (#1305)
  • b6f80aa chore(deps): update dependency @​types/react to v18.3.27 (#1296)
  • 0b7fcca chore(deps): update dependency @​angular/compiler to v20.3.15 [security] (#1304)
  • 279f9bf feat: allow method to be passed into setContext hook (#1301)
  • 8133a4f fix: compare full EvaluationDetails to prevent stale data (#1287)
  • ...

    Description has been truncated

@dependabot
build(deps): bump the npm-production-dependencies group across 2 dire…
bd5ed2b 
…ctories with 10 updates

Bumps the npm-production-dependencies group with 7 updates in the /src/frontend directory:

| Package | From | To |
| --- | --- | --- |
| [@grpc/grpc-js](https://github.com/grpc/grpc-node) | `1.12.6` | `1.14.2` |
| [@openfeature/react-sdk](https://github.com/open-feature/js-sdk) | `1.0.2` | `1.1.0` |
| [@opentelemetry/auto-instrumentations-node](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/auto-instrumentations-node) | `0.67.1` | `0.67.2` |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.90.11` | `5.90.12` |
| [next](https://github.com/vercel/next.js) | `16.0.4` | `16.0.8` |
| [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.0` | `19.2.1` |
| [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.0` | `19.2.1` |

Bumps the npm-production-dependencies group with 5 updates in the /src/payment directory:

| Package | From | To |
| --- | --- | --- |
| [@grpc/grpc-js](https://github.com/grpc/grpc-node) | `1.12.6` | `1.14.2` |
| [@opentelemetry/auto-instrumentations-node](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/auto-instrumentations-node) | `0.67.1` | `0.67.2` |
| [@openfeature/server-sdk](https://github.com/open-feature/js-sdk) | `1.20.0` | `1.20.1` |
| [pino](https://github.com/pinojs/pino) | `9.14.0` | `10.1.0` |
| [pino-opentelemetry-transport](https://github.com/pinojs/pino-opentelemetry-transport) | `1.1.0` | `2.0.0` |



Updates `@grpc/grpc-js` from 1.12.6 to 1.14.2
- [Release notes](https://github.com/grpc/grpc-node/releases)
- [Commits](https://github.com/grpc/grpc-node/compare/@grpc/grpc-js@1.12.6...@grpc/grpc-js@1.14.2)

Updates `@openfeature/react-sdk` from 1.0.2 to 1.1.0
- [Release notes](https://github.com/open-feature/js-sdk/releases)
- [Changelog](https://github.com/open-feature/js-sdk/blob/v1.1.0/CHANGELOG.md)
- [Commits](open-feature/js-sdk@web-sdk-v1.0.2...v1.1.0)

Updates `@opentelemetry/auto-instrumentations-node` from 0.67.1 to 0.67.2
- [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/auto-instrumentations-node/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/auto-instrumentations-node-v0.67.2/packages/auto-instrumentations-node)

Updates `@tanstack/react-query` from 5.90.11 to 5.90.12
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.90.12/packages/react-query)

Updates `next` from 16.0.4 to 16.0.8
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v16.0.4...v16.0.8)

Updates `react` from 19.2.0 to 19.2.1
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.1/packages/react)

Updates `react-dom` from 19.2.0 to 19.2.1
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.1/packages/react-dom)

Updates `@grpc/grpc-js` from 1.12.6 to 1.14.2
- [Release notes](https://github.com/grpc/grpc-node/releases)
- [Commits](https://github.com/grpc/grpc-node/compare/@grpc/grpc-js@1.12.6...@grpc/grpc-js@1.14.2)

Updates `@opentelemetry/auto-instrumentations-node` from 0.67.1 to 0.67.2
- [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/auto-instrumentations-node/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/auto-instrumentations-node-v0.67.2/packages/auto-instrumentations-node)

Updates `@grpc/grpc-js` from 1.12.6 to 1.14.2
- [Release notes](https://github.com/grpc/grpc-node/releases)
- [Commits](https://github.com/grpc/grpc-node/compare/@grpc/grpc-js@1.12.6...@grpc/grpc-js@1.14.2)

Updates `@opentelemetry/auto-instrumentations-node` from 0.67.1 to 0.67.2
- [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/auto-instrumentations-node/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/auto-instrumentations-node-v0.67.2/packages/auto-instrumentations-node)

Updates `@grpc/grpc-js` from 1.12.6 to 1.14.2
- [Release notes](https://github.com/grpc/grpc-node/releases)
- [Commits](https://github.com/grpc/grpc-node/compare/@grpc/grpc-js@1.12.6...@grpc/grpc-js@1.14.2)

Updates `@openfeature/server-sdk` from 1.20.0 to 1.20.1
- [Release notes](https://github.com/open-feature/js-sdk/releases)
- [Changelog](https://github.com/open-feature/js-sdk/blob/main/release-please-config.json)
- [Commits](open-feature/js-sdk@server-sdk-v1.20.0...server-sdk-v1.20.1)

Updates `@opentelemetry/auto-instrumentations-node` from 0.67.1 to 0.67.2
- [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/auto-instrumentations-node/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/auto-instrumentations-node-v0.67.2/packages/auto-instrumentations-node)

Updates `pino` from 9.14.0 to 10.1.0
- [Release notes](https://github.com/pinojs/pino/releases)
- [Commits](pinojs/pino@v9.14.0...v10.1.0)

Updates `pino-opentelemetry-transport` from 1.1.0 to 2.0.0
- [Release notes](https://github.com/pinojs/pino-opentelemetry-transport/releases)
- [Changelog](https://github.com/pinojs/pino-opentelemetry-transport/blob/main/CHANGELOG.md)
- [Commits](pinojs/pino-opentelemetry-transport@v1.1.0...v2.0.0)

---
updated-dependencies:
- dependency-name: "@grpc/grpc-js"
  dependency-version: 1.14.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production-dependencies
- dependency-name: "@openfeature/react-sdk"
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production-dependencies
- dependency-name: "@opentelemetry/auto-instrumentations-node"
  dependency-version: 0.67.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production-dependencies
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.90.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production-dependencies
- dependency-name: next
  dependency-version: 16.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production-dependencies
- dependency-name: react
  dependency-version: 19.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production-dependencies
- dependency-name: react-dom
  dependency-version: 19.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production-dependencies
- dependency-name: "@grpc/grpc-js"
  dependency-version: 1.14.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production-dependencies
- dependency-name: "@opentelemetry/auto-instrumentations-node"
  dependency-version: 0.67.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production-dependencies
- dependency-name: "@grpc/grpc-js"
  dependency-version: 1.14.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production-dependencies
- dependency-name: "@opentelemetry/auto-instrumentations-node"
  dependency-version: 0.67.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production-dependencies
- dependency-name: "@grpc/grpc-js"
  dependency-version: 1.14.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production-dependencies
- dependency-name: "@openfeature/server-sdk"
  dependency-version: 1.20.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production-dependencies
- dependency-name: "@opentelemetry/auto-instrumentations-node"
  dependency-version: 0.67.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production-dependencies
- dependency-name: pino
  dependency-version: 10.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-production-dependencies
- dependency-name: pino-opentelemetry-transport
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Dec 10, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 15, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Dec 15, 2025
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/src/frontend/npm-production-dependencies-16afb8eda4 branch December 15, 2025 11:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant