fix(deps): update bun minor and patch dependencies by renovate[bot] · Pull Request #1102 · nicotsx/zerobyte

renovate · 2026-08-16T07:33:14Z

This PR contains the following updates:

Package	Change	Age	Confidence
@better-auth/api-key (source)	`1.6.27` → `1.6.29`
@better-auth/passkey (source)	`^1.6.27` → `^1.6.29`
@better-auth/sso (source)	`^1.6.27` → `^1.6.29`
@better-auth/utils	`0.4.2` → `0.5.0`
@cloudflare/vite-plugin (source)	`^1.52.0` → `^1.52.1`
@faker-js/faker (source)	`^10.5.0` → `^10.6.0`
@hookform/resolvers (source)	`^5.7.1` → `^5.9.0`
@scalar/hono-api-reference (source)	`^0.11.13` → `^0.11.14`
@tanstack/react-router (source)	`^1.170.27` → `^1.170.29`
@tanstack/react-start (source)	`^1.168.44` → `^1.168.46`
@tanstack/router-plugin (source)	`^1.168.30` → `^1.168.32`
better-auth (source)	`^1.6.27` → `^1.6.29`
cron-parser	`^5.8.1` → `^5.10.0`
drizzle-kit (source)	`^1.0.0-rc.4-ca0f029` → `^1.0.0-rc.5-ab785fc`
drizzle-orm (source)	`1.0.0-rc.4-5d5b77c` → `1.0.0-rc.5-ab785fc`
fumadocs-core	`^16.14.3` → `^16.14.4`
fumadocs-ui	`^16.14.3` → `^16.14.4`
hono (source)	`^4.13.1` → `^4.13.2`
shadcn (source)	`^4.17.0` → `^4.18.0`
wrangler (source)	`^4.122.0` → `^4.123.0`

Release Notes

better-auth/better-auth (@better-auth/api-key)

`v1.6.29`

Compare Source

Patch Changes

Updated dependencies [e6e1b4e]:
- better-auth@1.6.29
- @better-auth/core@1.6.29

`v1.6.28`

Compare Source

Patch Changes

Updated dependencies [773de54, 2ad2928]:
- better-auth@1.6.28
- @better-auth/core@1.6.28

better-auth/better-auth (@better-auth/passkey)

`v1.6.29`

Compare Source

Patch Changes

Updated dependencies [e6e1b4e]:
- better-auth@1.6.29
- @better-auth/core@1.6.29

`v1.6.28`

Compare Source

Patch Changes

Updated dependencies [773de54, 2ad2928]:
- better-auth@1.6.28
- @better-auth/core@1.6.28

better-auth/better-auth (@better-auth/sso)

`v1.6.29`

Compare Source

Patch Changes

Updated dependencies [e6e1b4e]:
- better-auth@1.6.29
- @better-auth/core@1.6.29

`v1.6.28`

Compare Source

Patch Changes

Updated dependencies [773de54, 2ad2928]:
- better-auth@1.6.28
- @better-auth/core@1.6.28

better-auth/utils (@better-auth/utils)

`v0.5.0`

Compare Source

🐞 Bug Fixes

types: Reject bigint typed arrays in encoders - by @bytaesu in #31 (c17c5)

View changes on GitHub

`v0.4.3`

Compare Source

🐞 Bug Fixes

Handle HMAC signature encodings correctly - by @bytaesu in #30 (d857a)
binary: Bind TextEncoder when encoding - by @bytaesu in #28 (f67b8)

View changes on GitHub

cloudflare/workers-sdk (@cloudflare/vite-plugin)

`v1.52.1`

Compare Source

Patch Changes

Updated dependencies [b8fd112, f0f2054, 339509d]:
- miniflare@5.20260811.1-alpha
- wrangler@4.123.0

faker-js/faker (@faker-js/faker)

`v10.6.0`

Compare Source

New Locales

locale: add 060 Japanese mobile phone number formats (#3922) (afa272d)
locale: add Norwegian (nb_NO) animal module (#3901) (1232937)
locale: add Norwegian (nb_NO) food module (#3900) (bd23594)
locale: add vehicle data for de (#3958) (974490f)
locale: better middle names by gender for en locale (#3932) (aba3fb1)
locale: better organize first_name by gender for en (#3924) (119386b)

Features

introduce NumberRange type (#3838) (acd5fda)
phone: mobile styles for more locales (#3902) (1107eab)

Changed Locales

locale: add en_NP and change ne to Devangari (#3868) (fc788cc)
locale: normalize phone_number data (#3518) (9a1cb7d)

Bug Fixes

apidocs: scope code group tab identifiers (#3976) (3125eaf)
color: give the LCH hue its full 360 degree range (#3978) (1ce5994)
color: stop scaling the HSLA alpha into a percentage (#3979) (1143329)
groupBy handling for prototype property keys (#3906) (c898ff1)
internet: exclude reserved port 0 from internet.port() (#3948) (d4b35a4)
internet: generate long passwords without stack overflow (#3946) (4782978)
internet: validate CIDR prefix length and octet range in ipv4() (#3933) (15cb8fb)
locale: exclude forbidden letter combinations from nl postcodes (#3888) (9bebe67)
locale: only generate valid French postal codes (#3905) (711f36f)
locale: update nl_BE phone number patterns (#3981) (9616076)
locale: use only common surnames for zh_CN last names (#3938) (58394eb)
locale: use only valid letters in en_CA postcodes (#3951) (3b184d6)
string: reject refDates that a ULID timestamp cannot encode (#3982) (81717bc)
vehicle: calculate VIN check digit (#3954) (a4c6757)
word: pick nearest length for closest strategy (#3943) (42fd322)

react-hook-form/resolvers (@hookform/resolvers)

`v5.9.0`

Compare Source

Features

update joi to v18 (#873) (c8159ae)

`v5.8.0`

Compare Source

scalar/scalar (@scalar/hono-api-reference)

`v0.11.14`

TanStack/router (@tanstack/react-router)

`v1.170.29`

Compare Source

Patch Changes

#8073 0fdf9ff - inline isCtrlKey inside Link component for byte shaving
Updated dependencies [4c89b15, cf6ab17, bdaf73a]:
- @tanstack/router-core@1.171.24

`v1.170.28`

Compare Source

Patch Changes

#8055 0c25a7b - Avoid wrapping root components that may render the HTML document in a Suspense boundary during SSR and hydration.
#8054 31882c7 - Reuse resolved lazy route components when revisiting code-split routes, preventing unnecessary pending UI.
Updated dependencies [31882c7]:
- @tanstack/router-core@1.171.23

TanStack/router (@tanstack/react-start)

TanStack/router (@tanstack/router-plugin)

`v1.168.32`

Compare Source

Patch Changes

Updated dependencies [4c89b15, cf6ab17, 0fdf9ff, bdaf73a]:
- @tanstack/router-core@1.171.24
- @tanstack/react-router@1.170.29
- @tanstack/router-generator@1.167.30

`v1.168.31`

Compare Source

Patch Changes

Updated dependencies [0c25a7b, 31882c7]:
- @tanstack/react-router@1.170.28
- @tanstack/router-core@1.171.23
- @tanstack/router-generator@1.167.29

better-auth/better-auth (better-auth)

`v1.6.29`

Compare Source

Patch Changes

#10805 e6e1b4e Thanks @Emmaccen! - Speed up batch session revocation when secondary storage is enabled by deleting sessions in parallel.
Updated dependencies []:
- @better-auth/core@1.6.29
- @better-auth/drizzle-adapter@1.6.29
- @better-auth/kysely-adapter@1.6.29
- @better-auth/memory-adapter@1.6.29
- @better-auth/mongo-adapter@1.6.29
- @better-auth/prisma-adapter@1.6.29
- @better-auth/telemetry@1.6.29

`v1.6.28`

Compare Source

Patch Changes

#10769 773de54 Thanks @bytaesu! - Prevent duplicate session requests during transient remounts while ensuring incomplete refreshes are revalidated.
#10794 2ad2928 Thanks @bytaesu! - Restore client plugin declaration compatibility for downstream TypeScript consumers.
Updated dependencies []:
- @better-auth/core@1.6.28
- @better-auth/drizzle-adapter@1.6.28
- @better-auth/kysely-adapter@1.6.28
- @better-auth/memory-adapter@1.6.28
- @better-auth/mongo-adapter@1.6.28
- @better-auth/prisma-adapter@1.6.28
- @better-auth/telemetry@1.6.28

harrisiirak/cron-parser (cron-parser)

`v5.10.0`

Compare Source

What's Changed

fix: pad short expressions from the leading field slot by @harrisiirak in #443

Full Changelog: harrisiirak/cron-parser@v5.9.0...v5.10.0

`v5.9.0`

Compare Source

What's Changed

fix: pad short expressions from the leading field slot by @harrisiirak in #443

Full Changelog: harrisiirak/cron-parser@v5.9.0...v5.10.0

honojs/hono (hono)

`v4.13.2`

Compare Source

What's Changed

fix(secure-headers): output standard empty parentheses () instead of none for disabled Permissions-Policy directives in #5197
fix(jsx): render async children of document metadata tags instead of [object Promise] in #5204
fix(etag): resolve incorrect incremental hashing for chunked responses in #5199
fix(client): serialize multiple cookies correctly in #5202
fix(etag): stabilize digest across stream chunks in #5205
fix(url): strip trailing question mark correctly for optional params with regex quantifiers in #5209
perf(cors): pre-join static array header options during initialization in #5210
fix(client): send falsy JSON bodies in #5215
feat(secure-headers): add missing W3C Permissions-Policy directives in #5214

Full Changelog: honojs/hono@v4.13.1...v4.13.2

shadcn-ui/ui (shadcn)

`v4.18.0`

Compare Source

Minor Changes

#11501 aef1cdca54e8da689351cdddf959342909e45e76 Thanks @shadcn! - merge registries from package.json and components.json, and support adding registries to package.json when components.json is not present

Patch Changes

#11500 e66b99b14dd9c54afc434dbf5a702f170b1153b0 Thanks @shadcn! - Skip unreadable directories during file scans instead of failing with EACCES.
#11504 9f4e3ff26025d16a243ea03cc891c734c4cf0b59 Thanks @shadcn! - Skip unreadable directories when resolving monorepo targets.
#11502 87d71b3629c34f3c38a353a211ec8591c1ff1721 Thanks @shadcn! - resolve registries declared in package.json when adding components. shadcn add, search, view and init now resolve registries from package.json in memory without persisting them to components.json
#9248 03c45b822e60195796dfd3d2fcf7c223ff4ece86 Thanks @Grafikart! - Fix shadcn for projects with unreadable permission files

cloudflare/workers-sdk (wrangler)

`v4.123.0`

Compare Source

Minor Changes

#15113 b8fd112 Thanks @BSFishy! - Add local dev simulation for Cloudflare Access ctx.access.getIdentity()

You can now configure a mock Cloudflare Access identity in wrangler.json so that ctx.access.getIdentity() returns it during local development.
```
// wrangler.json
{
  "access": {
    "dev": {
      "aud": "my-app-aud-tag",
      "identity": {
        "email": "user@example.com",
        "name": "Test User"
      }
    }
  }
}
```
#15152 f0f2054 Thanks @GregBrimble! - [private beta]: Updates the --ignore-defaults flag to --ignore-base-config on wrangler preview commands.

--ignore-base-config now only takes effect on Preview creation, rather than on each deployment, since Preview base configuration is now copy-on-create rather than inherit-on-deploy.
#14872 339509d Thanks @dario-piotrowicz! - Add automatic update prompts for out-of-date Cloudflare agent skills

When Cloudflare skills were previously installed by Wrangler and the upstream cloudflare/skills repository has newer content, Wrangler now offers to update them after eligible commands complete.

To reduce prompt fatigue, the update check only runs once a month (30 days since the last install or update). Declining suppresses the prompt until the next upstream change.

When declining an update, Wrangler offers the option to permanently disable future update prompts. This preference is stored globally in ~/.wrangler/agents-skills-install.jsonc. The WRANGLER_NO_SKILLS_UPDATE_PROMPTS=true environment variable can also be used to suppress prompts. The --install-skills flag remains available regardless of these settings.

Patch Changes

Updated dependencies [b8fd112]:
- miniflare@5.20260811.1-alpha

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

socket-security · 2026-08-16T07:34:32Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
npm/fumadocs-core@16.14.3 ⏵ 16.14.4	⁺¹
npm/fumadocs-ui@16.14.3 ⏵ 16.14.4	⁺¹	⁺¹
npm/@better-auth/api-key@1.6.27 ⏵ 1.6.29			⁺¹
npm/@better-auth/sso@1.6.27 ⏵ 1.6.29			⁺¹
npm/@tanstack/router-plugin@1.168.30 ⏵ 1.168.32			⁺¹
npm/@faker-js/faker@10.5.0 ⏵ 10.6.0			⁺³
npm/@scalar/hono-api-reference@0.11.13 ⏵ 0.11.14			⁺¹
npm/better-auth@1.6.27 ⏵ 1.6.29	⁺¹	⁺¹	⁺¹
npm/@tanstack/react-router@1.170.27 ⏵ 1.170.29		⁺¹	⁺¹
npm/@cloudflare/vite-plugin@1.52.0 ⏵ 1.52.1		⁺¹
npm/@better-auth/passkey@1.6.27 ⏵ 1.6.29			⁺¹
npm/@tanstack/react-start@1.168.44 ⏵ 1.168.46	⁺¹		⁺¹
npm/drizzle-orm@1.0.0-rc.4-5d5b77c ⏵ 1.0.0-rc.5-ab785fc		⁺¹	⁺¹
npm/shadcn@4.17.0 ⏵ 4.18.0		⁺¹
npm/wrangler@4.122.0 ⏵ 4.123.0		⁺¹
npm/cron-parser@5.8.1 ⏵ 5.10.0		⁺¹	⁺¹
npm/hono@4.13.1 ⏵ 4.13.2	⁺¹	⁺¹
npm/@hookform/resolvers@5.7.1 ⏵ 5.9.0			⁺²

View full report

renovate Bot force-pushed the renovate/bun-minor-and-patch-dependencies branch 11 times, most recently from 8dd9f2b to 5aa28d0 Compare August 17, 2026 14:36

fix(deps): update bun minor and patch dependencies

88133a9

renovate Bot force-pushed the renovate/bun-minor-and-patch-dependencies branch from 5aa28d0 to 88133a9 Compare August 18, 2026 17:05

Navigation Menu

fix(deps): update bun minor and patch dependencies - #1102

fix(deps): update bun minor and patch dependencies#1102
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/bun-minor-and-patch-dependencies

renovate Bot commented Aug 16, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Aug 16, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Aug 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

🐞 Bug Fixes

🐞 Bug Fixes

Patch Changes

New Locales

Features

Changed Locales

Bug Fixes

Features

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

What's Changed

What's Changed

What's Changed

Minor Changes

Patch Changes

Minor Changes

Patch Changes

Configuration

Uh oh!

socket-security Bot commented Aug 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Aug 16, 2026 •

edited

Loading

socket-security Bot commented Aug 16, 2026 •

edited

Loading