Skip to content

pnpm dependency update 2026-10-25 - #64

Merged
gciotola merged 1 commit into
mainfrom
chore/deps-update-202610251005
Oct 29, 2026
Merged

gciotola merged 1 commit into
mainfrom
chore/deps-update-202610251005

Conversation

@commercelayer-ci

Copy link
Copy Markdown
Contributor

Dependency update

Closes #63
Branch: chore/deps-update-202610251005
Based on stable: ``
Prerelease tag: skipped
Node.js: `24.x`
pnpm: `10.x`

Automated dependency update via pnpm. Review the dependency diff and validation output before merging.

Dependency update results

  • Check: success
  • Build: success
  • Test: success

Semver bump log

authentication/nextjs-auth0-sso/package.json
  next       ^15.5.25  →  ^15.5.28
  prettier     ^3.9.6  →   ^3.9.10
  unstorage   ^1.17.5  →   ^1.17.6
  @auth0/nextjs-auth0  ^4.29.0  →  ^4.33.0

cms/nextjs-contentful-store/package.json
  @commercelayer/js-auth             ^8.0.1  →    ^8.0.2
  @commercelayer/react-components    ^5.0.3  →   ^5.0.10
  @types/lodash                    ^4.17.25  →  ^4.17.27
  contentful-import                 ^10.5.2  →   ^10.5.7
  postcss                           ^8.5.28  →   ^8.5.31
  prettier                           ^3.9.6  →   ^3.9.10
  react                             ^19.3.0  →   ^19.3.1
  react-dom                         ^19.3.0  →   ^19.3.1
  @types/node         ^24.13.4  →  ^24.19.2
  eslint-config-next   ^16.3.5  →   ^16.4.3
  next                 ^16.3.5  →   ^16.4.3
  sharp  ^0.35.4  →  ^0.35.5

solutions/commercelayer-slackbot/package.json
  @commercelayer/js-auth  ^8.0.1  →  ^8.0.2
  @supabase/supabase-js  ^2.116.0  →  ^2.118.0
  supabase               ^2.117.0  →  ^2.122.0

solutions/giftcard-tutorial/package.json
  react      ^19.3.0  →  ^19.3.1
  react-dom  ^19.3.0  →  ^19.3.1
  eslint-config-next  ^16.3.5  →  ^16.4.3
  next                ^16.3.5  →  ^16.4.3

solutions/pay-with-tweet/package.json
  @types/node  ^22.20.2  →  ^22.20.5

webhooks/nextjs-signature-verification/package.json
  prettier    ^3.9.6  →  ^3.9.10
  react      ^19.3.0  →  ^19.3.1
  react-dom  ^19.3.0  →  ^19.3.1
  @types/node         ^24.13.4  →  ^24.19.2
  eslint-config-next   ^16.3.5  →   ^16.4.3
  next                 ^16.3.5  →   ^16.4.3

solutions/external-payment-gateway/packages/app/package.json
  @vitejs/plugin-react   ^6.1.1  →   ^6.1.2
  react                 ^19.3.0  →  ^19.3.1
  react-dom             ^19.3.0  →  ^19.3.1
  react-router-dom      ^7.18.3  →  ^7.18.4
  vite                   ^8.3.0  →   ^8.3.5

solutions/external-payment-gateway/packages/mollie-gateway/package.json
  @hono/node-server    ^2.1.1  →    ^2.1.5
  @types/node         ^25.9.6  →   ^25.9.9
  hono                ^4.13.8  →  ^4.13.13  [cooldown] 4.13.14
  tsx                ^4.23.13  →  ^4.23.15

Audit log

No known vulnerabilities found

Major updates log not updated

authentication/nextjs-auth0-sso/package.json
  @babel/core                         ^7.29.7  →   ^8.0.9
  @commercelayer/js-auth               ^7.4.2  →   ^8.0.2
  @commercelayer/react-components     ^4.29.7  →  ^5.0.10
  @commercelayer/sdk                  ^6.58.0  →   ^8.0.3
  @fortawesome/fontawesome-svg-core    ^6.7.2  →   ^7.3.1
  @fortawesome/free-solid-svg-icons    ^6.7.2  →   ^7.3.1
  @fortawesome/react-fontawesome       ^0.2.6  →   ^3.5.0
  @testing-library/jest-dom           ^6.10.0  →   ^7.0.1
  @vitejs/plugin-react                 ^4.7.0  →   ^6.1.2
  auth0                               ^5.14.1  →   ^7.6.0
  babel-jest                          ^29.7.0  →  ^30.5.2
  concurrently                         ^8.2.2  →  ^10.0.6
  dotenv                              ^16.6.1  →  ^18.0.9
  eslint-config-next                   15.5.4  →   16.4.3
  express                             ^4.22.3  →   ^5.3.0
  helmet                               ^7.2.0  →   ^8.3.0
  jest                                ^29.7.0  →  ^30.5.2
  jest-environment-jsdom              ^29.7.0  →  ^30.5.2
  jwks-rsa                             ^3.2.2  →   ^4.1.0
  next                               ^15.5.28  →  ^16.4.3
  react                               ^18.3.1  →  ^19.3.1
  react-dom                           ^18.3.1  →  ^19.3.1
  start-server-and-test                ^2.1.5  →  ^3.0.13
  vitest                               ^3.2.7  →   ^5.0.5

cms/nextjs-contentful-store/package.json
  @types/node  ^24.19.2  →   ^26.6.5
  dotenv        ^17.4.2  →   ^18.0.9
  eslint        ^9.39.5  →  ^10.13.0
  typescript     ^5.9.3  →    ^7.0.2

solutions/commercelayer-slackbot/package.json
  @commercelayer/sdk  ^6.58.0  →   ^8.0.3
  @slack/bolt         ^3.22.0  →   ^5.1.0
  dotenv              ^16.6.1  →  ^18.0.9
  typescript           ^4.9.5  →   ^7.0.2
  @flydotio/dockerfile  ^0.2.16  →  ^0.7.12

solutions/external-payment-gateway/package.json
  typescript  ^6.0.3  →  ^7.0.2

solutions/js-sdk-sandbox/package.json
  @babel/core         ^7.29.7  →  ^8.0.9
  @commercelayer/sdk  ^6.58.0  →  ^8.0.3
  typescript           ^5.9.3  →  ^7.0.2

solutions/giftcard-tutorial/package.json
  @commercelayer/js-auth            ^6.7.2  →   ^8.0.2
  @commercelayer/react-components  ^4.29.7  →  ^5.0.10
  @commercelayer/sdk               ^6.58.0  →   ^8.0.3
  @types/node                          ^20  →      ^26
  eslint                                ^9  →      ^10
  typescript                            ^5  →       ^7

solutions/pay-with-tweet/package.json
  @types/express  ^4.17.25  →   ^5.0.6
  @types/node     ^22.20.5  →  ^26.6.5
  dotenv           ^16.6.1  →  ^18.0.9
  express          ^4.22.3  →   ^5.3.0
  tsc-watch         ^6.3.1  →   ^7.2.1

webhooks/expressjs-signature-verification/package.json
  express  ^4.22.3  →  ^5.3.0

webhooks/nextjs-signature-verification/package.json
  @types/node  ^24.19.2  →   ^26.6.5
  eslint        ^9.39.5  →  ^10.13.0
  typescript     ^5.9.3  →    ^7.0.2

webhooks/sendgrid-templated-emails/package.json
  dotenv   ^16.6.1  →  ^18.0.9
  express  ^4.22.3  →   ^5.3.0

webhooks/twilio-sms-notification/package.json
  dotenv   ^16.6.1  →  ^18.0.9
  express  ^4.22.3  →   ^5.3.0
  twilio   ^5.13.1  →   ^6.2.0

solutions/external-payment-gateway/packages/app/package.json
  @commercelayer/js-auth   ^7.4.2  →  ^8.0.2
  @commercelayer/sdk      ^7.12.1  →  ^8.0.3
  typescript               ^6.0.3  →  ^7.0.2

solutions/external-payment-gateway/packages/mollie-gateway/package.json
  hono  ^4.13.13  →  ^4.13.14
  @commercelayer/js-auth   ^7.4.2  →   ^8.0.2
  @commercelayer/sdk      ^7.12.1  →   ^8.0.3
  @types/node             ^25.9.9  →  ^26.6.5
  typescript               ^6.0.3  →   ^7.0.2

@commercelayer-ci commercelayer-ci added the dependencies Pull requests that update a dependency file label Oct 25, 2026
@commercelayer-ci commercelayer-ci self-assigned this Oct 25, 2026
@netlify

netlify Bot commented Oct 25, 2026 •

Copy link
Copy Markdown

✅ Deploy Preview for cl-nextjs-contentful-store ready!

Name Link
🔨 Latest commit ef12aaf
🔍 Latest deploy log https://app.netlify.com/projects/cl-nextjs-contentful-store/deploys/6addd4f7fc9fba31299050b8
😎 Deploy Preview https://deploy-preview-64--cl-nextjs-contentful-store.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@gciotola
gciotola merged commit 46c36de into main Oct 29, 2026
5 checks passed
@gciotola
gciotola deleted the chore/deps-update-202610251005 branch October 29, 2026 14:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[VANTA] [VULNERABILITY] CODE_REPOSITORY <CRITICAL> CVE-2026-102422, CVE-2026-111755, CVE-2026-111756 and others, fix before 2026-11-08

3 participants