[PR #384] [MERGED] build(deps): Bump the npm_and_yarn group across 1 directory with 2 updates #404

New issue

Closed

opened 2026-02-26 12:41:16 +03:00 by kerem · 0 comments

kerem commented

2026-02-26 12:41:16 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/community-scripts/ProxmoxVE-Local/pull/384
Author: @dependabot[bot]
Created: 12/3/2025
Status: ✅ Merged
Merged: 12/4/2025
Merged by: @michelroegl-brunner

Base: main ← Head: dependabot/npm_and_yarn/npm_and_yarn-494b550551

📝 Commits (1)

8f0ae3a build(deps): Bump the npm_and_yarn group across 1 directory with 2 updates

📊 Changes

2 files changed (+108 additions, -94 deletions)

View changed files

📝 package-lock.json (+106 -92)
📝 package.json (+2 -2)

📄 Description

Bumps the npm_and_yarn group with 2 updates in the / directory: next and hono.

Updates next from 16.0.6 to 16.0.7

Release notes

Sourced from next's releases.

v16.0.7

Please see CVE-2025-66478 for additional details about this release.

Commits

7492122 v16.0.7
d21259d update version script
b1a04a8 Update React Version (#11)
See full diff in compare view

Updates hono from 4.7.10 to 4.10.6

Release notes

Sourced from hono's releases.

v4.10.6

Deperecated

bearer-auth options

The following options are deprecated and will be removed in a future version:

noAuthenticationHeaderMessage => use noAuthenticationHeader.message

invalidAuthenticationHeaderMessage => use invalidAuthenticationHeader.message

invalidTokenMessage => use invalidToken.message

What's Changed

feat(aws-lambda): handle AWS Lattice events by @anho in honojs/hono#4451

feat(secure-headers): support CSP TrustedTypePolicy by @RosApr in honojs/hono#4500

feat: Improve auth middlewares by @MathurAditya724 in honojs/hono#4485

New Contributors

@anho made their first contribution in honojs/hono#4451

Full Changelog: https://github.com/honojs/hono/compare/v4.10.5...v4.10.6

v4.10.5

What's Changed

docs(CONTRIBUTING): use bun instead of yarn in local development setup by @taichi-1 in honojs/hono#4503

docs: grammar issue by @WuMingDao in honojs/hono#4508

fix(utils/url): make _getQueryParam search behind question mark by @tuzi3040 in honojs/hono#4507

fix(jsx): self-close wrapped empty tags by @jakelee8 in honojs/hono#4511

chore: improve private field removal by @BlankParticle in honojs/hono#4513

fix(middleware/cache): skip caching when Vary: * is present by @pHo9UBenaA in honojs/hono#4504

New Contributors

@taichi-1 made their first contribution in honojs/hono#4503

@WuMingDao made their first contribution in honojs/hono#4508

@tuzi3040 made their first contribution in honojs/hono#4507

@jakelee8 made their first contribution in honojs/hono#4511

@pHo9UBenaA made their first contribution in honojs/hono#4504

Full Changelog: https://github.com/honojs/hono/compare/v4.10.4...v4.10.5

v4.10.4

What's Changed

chore: add a monochrome logo image by @yusukebe in honojs/hono#4487

chore: fix the monochrome logo by @yusukebe in honojs/hono#4488

fix(secure-headers): proposed features typo spelling mistake by @RosApr in honojs/hono#4494

fix(types): preserve handler response typing in createHandlers by @s-junio in honojs/hono#4492

New Contributors

@RosApr made their first contribution in honojs/hono#4494

@s-junio made their first contribution in honojs/hono#4492

Full Changelog: https://github.com/honojs/hono/compare/v4.10.3...v4.10.4

... (truncated)

Commits

4960c06 4.10.6
96d2a89 feat: Improve auth middlewares (#4485)
279184b feat(secure-headers): support CSP TrustedTypePolicy (#4500)
cea3fb0 feat(aws-lambda): handle AWS Lattice events (#4451)
971106d 4.10.5
df85184 fix(middleware/cache): skip caching when Vary: * is present (#4504)
46ec300 chore: improve private field removal (#4513)
c44c5c2 fix(jsx): self-close wrapped empty tags (#4511)
fa8eef7 fix(utils/url): make _getQueryParam search behind question mark (#4507)
d3479a3 docs: grammar issue (#4508)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/community-scripts/ProxmoxVE-Local/pull/384 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 12/3/2025 **Status:** ✅ Merged **Merged:** 12/4/2025 **Merged by:** [@michelroegl-brunner](https://github.com/michelroegl-brunner) **Base:** `main` ← **Head:** `dependabot/npm_and_yarn/npm_and_yarn-494b550551` --- ### 📝 Commits (1) - [`8f0ae3a`](https://github.com/community-scripts/ProxmoxVE-Local/commit/8f0ae3a3410f20e05a35ffc56c09120c2d1891d6) build(deps): Bump the npm_and_yarn group across 1 directory with 2 updates ### 📊 Changes **2 files changed** (+108 additions, -94 deletions) <details> <summary>View changed files</summary> 📝 `package-lock.json` (+106 -92) 📝 `package.json` (+2 -2) </details> ### 📄 Description Bumps the npm_and_yarn group with 2 updates in the / directory: [next](https://github.com/vercel/next.js) and [hono](https://github.com/honojs/hono). Updates `next` from 16.0.6 to 16.0.7 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vercel/next.js/releases">next's releases</a>.</em></p> <blockquote> <h2>v16.0.7</h2> <p>Please see <a href="https://nextjs.org/blog/CVE-2025-66478">CVE-2025-66478</a> for additional details about this release.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vercel/next.js/commit/7492122a3bbc6655b64ccba04076c73ab418cdcc"><code>7492122</code></a> v16.0.7</li> <li><a href="https://github.com/vercel/next.js/commit/d21259d920f666814fa634e744d2c6e797ceae43"><code>d21259d</code></a> update version script</li> <li><a href="https://github.com/vercel/next.js/commit/b1a04a84e991b48b6558d15841b86f3017878607"><code>b1a04a8</code></a> Update React Version (<a href="https://redirect.github.com/vercel/next.js/issues/11">#11</a>)</li> <li>See full diff in <a href="https://github.com/vercel/next.js/compare/v16.0.6...v16.0.7">compare view</a></li> </ul> </details> <br /> Updates `hono` from 4.7.10 to 4.10.6 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/honojs/hono/releases">hono's releases</a>.</em></p> <blockquote> <h2>v4.10.6</h2> <h2>Deperecated</h2> <h3>bearer-auth options</h3> <p>The following options are deprecated and will be removed in a future version:</p> <ul> <li><code>noAuthenticationHeaderMessage</code> => use <code>noAuthenticationHeader.message</code></li> <li><code>invalidAuthenticationHeaderMessage</code> => use <code>invalidAuthenticationHeader.message</code></li> <li><code>invalidTokenMessage</code> => use <code>invalidToken.message</code></li> </ul> <h2>What's Changed</h2> <ul> <li>feat(aws-lambda): handle AWS Lattice events by <a href="https://github.com/anho"><code>@anho</code></a> in <a href="https://redirect.github.com/honojs/hono/pull/4451">honojs/hono#4451</a></li> <li>feat(secure-headers): support CSP TrustedTypePolicy by <a href="https://github.com/RosApr"><code>@RosApr</code></a> in <a href="https://redirect.github.com/honojs/hono/pull/4500">honojs/hono#4500</a></li> <li>feat: Improve auth middlewares by <a href="https://github.com/MathurAditya724"><code>@MathurAditya724</code></a> in <a href="https://redirect.github.com/honojs/hono/pull/4485">honojs/hono#4485</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/anho"><code>@anho</code></a> made their first contribution in <a href="https://redirect.github.com/honojs/hono/pull/4451">honojs/hono#4451</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/honojs/hono/compare/v4.10.5...v4.10.6">https://github.com/honojs/hono/compare/v4.10.5...v4.10.6</a></p> <h2>v4.10.5</h2> <h2>What's Changed</h2> <ul> <li>docs(CONTRIBUTING): use bun instead of yarn in local development setup by <a href="https://github.com/taichi-1"><code>@taichi-1</code></a> in <a href="https://redirect.github.com/honojs/hono/pull/4503">honojs/hono#4503</a></li> <li>docs: grammar issue by <a href="https://github.com/WuMingDao"><code>@WuMingDao</code></a> in <a href="https://redirect.github.com/honojs/hono/pull/4508">honojs/hono#4508</a></li> <li>fix(utils/url): make _getQueryParam search behind question mark by <a href="https://github.com/tuzi3040"><code>@tuzi3040</code></a> in <a href="https://redirect.github.com/honojs/hono/pull/4507">honojs/hono#4507</a></li> <li>fix(jsx): self-close wrapped empty tags by <a href="https://github.com/jakelee8"><code>@jakelee8</code></a> in <a href="https://redirect.github.com/honojs/hono/pull/4511">honojs/hono#4511</a></li> <li>chore: improve private field removal by <a href="https://github.com/BlankParticle"><code>@BlankParticle</code></a> in <a href="https://redirect.github.com/honojs/hono/pull/4513">honojs/hono#4513</a></li> <li>fix(middleware/cache): skip caching when <code>Vary: *</code> is present by <a href="https://github.com/pHo9UBenaA"><code>@pHo9UBenaA</code></a> in <a href="https://redirect.github.com/honojs/hono/pull/4504">honojs/hono#4504</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/taichi-1"><code>@taichi-1</code></a> made their first contribution in <a href="https://redirect.github.com/honojs/hono/pull/4503">honojs/hono#4503</a></li> <li><a href="https://github.com/WuMingDao"><code>@WuMingDao</code></a> made their first contribution in <a href="https://redirect.github.com/honojs/hono/pull/4508">honojs/hono#4508</a></li> <li><a href="https://github.com/tuzi3040"><code>@tuzi3040</code></a> made their first contribution in <a href="https://redirect.github.com/honojs/hono/pull/4507">honojs/hono#4507</a></li> <li><a href="https://github.com/jakelee8"><code>@jakelee8</code></a> made their first contribution in <a href="https://redirect.github.com/honojs/hono/pull/4511">honojs/hono#4511</a></li> <li><a href="https://github.com/pHo9UBenaA"><code>@pHo9UBenaA</code></a> made their first contribution in <a href="https://redirect.github.com/honojs/hono/pull/4504">honojs/hono#4504</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/honojs/hono/compare/v4.10.4...v4.10.5">https://github.com/honojs/hono/compare/v4.10.4...v4.10.5</a></p> <h2>v4.10.4</h2> <h2>What's Changed</h2> <ul> <li>chore: add a monochrome logo image by <a href="https://github.com/yusukebe"><code>@yusukebe</code></a> in <a href="https://redirect.github.com/honojs/hono/pull/4487">honojs/hono#4487</a></li> <li>chore: fix the monochrome logo by <a href="https://github.com/yusukebe"><code>@yusukebe</code></a> in <a href="https://redirect.github.com/honojs/hono/pull/4488">honojs/hono#4488</a></li> <li>fix(secure-headers): proposed features typo spelling mistake by <a href="https://github.com/RosApr"><code>@RosApr</code></a> in <a href="https://redirect.github.com/honojs/hono/pull/4494">honojs/hono#4494</a></li> <li>fix(types): preserve handler response typing in createHandlers by <a href="https://github.com/s-junio"><code>@s-junio</code></a> in <a href="https://redirect.github.com/honojs/hono/pull/4492">honojs/hono#4492</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/RosApr"><code>@RosApr</code></a> made their first contribution in <a href="https://redirect.github.com/honojs/hono/pull/4494">honojs/hono#4494</a></li> <li><a href="https://github.com/s-junio"><code>@s-junio</code></a> made their first contribution in <a href="https://redirect.github.com/honojs/hono/pull/4492">honojs/hono#4492</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/honojs/hono/compare/v4.10.3...v4.10.4">https://github.com/honojs/hono/compare/v4.10.3...v4.10.4</a></p>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/honojs/hono/commit/4960c063938763a9344c554286e72dcd2545b751"><code>4960c06</code></a> 4.10.6</li> <li><a href="https://github.com/honojs/hono/commit/96d2a89c57a20b4c3ef5acbe16c880c71c0df60a"><code>96d2a89</code></a> feat: Improve auth middlewares (<a href="https://redirect.github.com/honojs/hono/issues/4485">#4485</a>)</li> <li><a href="https://github.com/honojs/hono/commit/279184b185eedc6cc8fa7bc95335a4dae61df8e7"><code>279184b</code></a> feat(secure-headers): support CSP TrustedTypePolicy (<a href="https://redirect.github.com/honojs/hono/issues/4500">#4500</a>)</li> <li><a href="https://github.com/honojs/hono/commit/cea3fb09a1d6a6659142555b123cdf80c340f39d"><code>cea3fb0</code></a> feat(aws-lambda): handle AWS Lattice events (<a href="https://redirect.github.com/honojs/hono/issues/4451">#4451</a>)</li> <li><a href="https://github.com/honojs/hono/commit/971106d132ec8a989be12ec5c8e63cfaf597cd4f"><code>971106d</code></a> 4.10.5</li> <li><a href="https://github.com/honojs/hono/commit/df851842a446549a6beb7f35db95cfac9a730cf6"><code>df85184</code></a> fix(middleware/cache): skip caching when <code>Vary: *</code> is present (<a href="https://redirect.github.com/honojs/hono/issues/4504">#4504</a>)</li> <li><a href="https://github.com/honojs/hono/commit/46ec3001265400fe196fe52867994bb5d253b3ca"><code>46ec300</code></a> chore: improve private field removal (<a href="https://redirect.github.com/honojs/hono/issues/4513">#4513</a>)</li> <li><a href="https://github.com/honojs/hono/commit/c44c5c22e542ab832ce382b6af22579a12fa2000"><code>c44c5c2</code></a> fix(jsx): self-close wrapped empty tags (<a href="https://redirect.github.com/honojs/hono/issues/4511">#4511</a>)</li> <li><a href="https://github.com/honojs/hono/commit/fa8eef707990e80a593fa32c2f67713a2ecd2e9b"><code>fa8eef7</code></a> fix(utils/url): make _getQueryParam search behind question mark (<a href="https://redirect.github.com/honojs/hono/issues/4507">#4507</a>)</li> <li><a href="https://github.com/honojs/hono/commit/d3479a37c7a85de3378554dada57599db0ba886d"><code>d3479a3</code></a> docs: grammar issue (<a href="https://redirect.github.com/honojs/hono/issues/4508">#4508</a>)</li> <li>Additional commits viewable in <a href="https://github.com/honojs/hono/compare/v4.7.10...v4.10.6">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/community-scripts/ProxmoxVE-Local/network/alerts). </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>