chore(deps): bump the patches group across 1 directory with 8 updates by dependabot[bot] · Pull Request #855 · Tietokilta/web

dependabot · 2026-05-25T18:42:32Z

Bumps the patches group with 8 updates in the / directory:

Package	From	To
turbo	`2.9.3`	`2.9.14`
@react-email/components	`1.0.11`	`1.0.12`
payload-oauth2	`1.0.20`	`1.0.21`
qs	`6.15.0`	`6.15.2`
@types/qs	`6.15.0`	`6.15.1`
dotenv	`17.4.0`	`17.4.2`
react-dvd-screensaver	`0.1.1`	`0.1.2`
@types/react	`19.2.14`	`19.2.15`

Updates turbo from 2.9.3 to 2.9.14

Release notes

Sourced from turbo's releases.

Turborepo v2.9.14

[!NOTE] This release contains important security fixes.

High:

GHSA-5xc8-49mv-x4mm: Turborepo VSCode Extension command injection

Low:

GHSA-hcf7-66rw-9f5r: Login callback CSRF/session fixation

GHSA-3qcw-2rhx-2726: Unexpected local code execution during Yarn Berry detection

What's Changed

Changelog

release(turborepo): 2.9.12 by @github-actions[bot] in vercel/turborepo#12774

fix: Restore docs mobile menu by @anthonyshew in vercel/turborepo#12782

ci: Use pull_request for PR title linting by @anthonyshew in vercel/turborepo#12787

ci: Scope GitHub Actions caches by branch by @anthonyshew in vercel/turborepo#12788

test: Validate lockfiles without dependency downloads by @anthonyshew in vercel/turborepo#12789

Removed unneeded import form hash creation script in docs by @dancrumb in vercel/turborepo#12799

fix: Validate auth callback state by @anthonyshew in vercel/turborepo#12802

fix: Harden VS Code extension command execution by @anthonyshew in vercel/turborepo#12800

fix: Avoid project-local Yarn during detection by @anthonyshew in vercel/turborepo#12801

chore: Release 2.9.13 by @anthonyshew in vercel/turborepo#12803

New Contributors

@dancrumb made their first contribution in vercel/turborepo#12799

Full Changelog: vercel/turborepo@v2.9.12...v2.9.14

Turborepo v2.9.13-canary.1

What's Changed

Changelog

release(turborepo): 2.9.11-canary.7 by @github-actions[bot] in vercel/turborepo#12768

fix: Allow $TURBO_EXTENDS$ in LSP diagnostics by @anthonyshew in vercel/turborepo#12770

release(turborepo): 2.9.11 by @github-actions[bot] in vercel/turborepo#12771

fix: Allow transit nodes in LSP diagnostics by @anthonyshew in vercel/turborepo#12773

release(turborepo): 2.9.12 by @github-actions[bot] in vercel/turborepo#12774

fix: Restore docs mobile menu by @anthonyshew in vercel/turborepo#12782

ci: Use pull_request for PR title linting by @anthonyshew in vercel/turborepo#12787

ci: Scope GitHub Actions caches by branch by @anthonyshew in vercel/turborepo#12788

test: Validate lockfiles without dependency downloads by @anthonyshew in vercel/turborepo#12789

Removed unneeded import form hash creation script in docs by @dancrumb in vercel/turborepo#12799

fix: Validate auth callback state by @anthonyshew in vercel/turborepo#12802

fix: Harden VS Code extension command execution by @anthonyshew in vercel/turborepo#12800

fix: Avoid project-local Yarn during detection by @anthonyshew in vercel/turborepo#12801

... (truncated)

Commits

fc62fe0 publish 2.9.14 to registry
fb8c9ae chore: Release 2.9.13 (#12803)
e8e629d fix: Avoid project-local Yarn during detection (#12801)
91c90cb fix: Harden VS Code extension command execution (#12800)
84f4508 fix: Validate auth callback state (#12802)
1779ad7 Removed unneeded import form hash creation script in docs (#12799)
71f8c90 test: Validate lockfiles without dependency downloads (#12789)
5fcb960 ci: Scope GitHub Actions caches by branch (#12788)
4cf9fab ci: Use pull_request for PR title linting (#12787)
859c629 fix: Restore docs mobile menu (#12782)
Additional commits viewable in compare view

Updates @react-email/components from 1.0.11 to 1.0.12

Release notes

Sourced from @react-email/components's releases.

@react-email/components@1.0.12

Patch Changes

Updated dependencies [f6cfef0]

@react-email/render@2.0.6

@react-email/body@0.3.0

@react-email/button@0.2.1

@react-email/code-block@0.2.1

@react-email/code-inline@0.0.6

@react-email/column@0.0.14

@react-email/container@0.0.16

@react-email/font@0.0.10

@react-email/head@0.0.13

@react-email/heading@0.0.16

@react-email/hr@0.0.12

@react-email/html@0.0.12

@react-email/img@0.0.12

@react-email/link@0.0.13

@react-email/markdown@0.0.18

@react-email/preview@0.0.14

@react-email/row@0.0.13

@react-email/section@0.0.17

@react-email/tailwind@2.0.7

@react-email/text@0.1.6

Changelog

Sourced from @react-email/components's changelog.

1.0.12

Patch Changes

Updated dependencies [f6cfef0]

@react-email/render@2.0.6

@react-email/body@0.3.0

@react-email/button@0.2.1

@react-email/code-block@0.2.1

@react-email/code-inline@0.0.6

@react-email/column@0.0.14

@react-email/container@0.0.16

@react-email/font@0.0.10

@react-email/head@0.0.13

@react-email/heading@0.0.16

@react-email/hr@0.0.12

@react-email/html@0.0.12

@react-email/img@0.0.12

@react-email/link@0.0.13

@react-email/markdown@0.0.18

@react-email/preview@0.0.14

@react-email/row@0.0.13

@react-email/section@0.0.17

@react-email/tailwind@2.0.7

@react-email/text@0.1.6

Commits

291aea4 chore(root): version packages (#3117)
See full diff in compare view

Updates payload-oauth2 from 1.0.20 to 1.0.21

Release notes

Sourced from payload-oauth2's releases.

v1.0.21

What's Changed

Bump next from 15.4.7 to 15.4.10 in the npm_and_yarn group across 1 directory by @dependabot[bot] in WilsonLe/payload-oauth2#57

fix: handle Next RSC authorize probes by @WilsonLe in WilsonLe/payload-oauth2#68

test: harden oauth provider testing by @WilsonLe in WilsonLe/payload-oauth2#67

test: cover PKCE callback token exchange by @WilsonLe in WilsonLe/payload-oauth2#69

fix(auth): honor Payload sessions for OAuth tokens by @WilsonLe in WilsonLe/payload-oauth2#70

Full Changelog: WilsonLe/payload-oauth2@v1.0.20...v1.0.21

Commits

c6aab78 v1.0.21
6fc088a fix(auth): honor Payload sessions for OAuth tokens
f60625a test: cover PKCE callback token exchange (#69)
882129c test: harden oauth provider testing
321048e fix: handle Next RSC authorize probes
60cf790 Bump next in the npm_and_yarn group across 1 directory (#57)
See full diff in compare view

Updates qs from 6.15.0 to 6.15.2

Changelog

Sourced from qs's changelog.

6.15.2

[Fix] stringify: skip null/undefined entries in arrayFormat: 'comma' + encodeValuesOnly instead of crashing in encoder

[Fix] stringify: use configured delimiter after charsetSentinel (#555)

[Fix] stringify: apply formatter to encoded key under strictNullHandling (#554)

[Fix] stringify: skip null/undefined filter-array entries instead of crashing in encoder (#551)

[Fix] parse: handle nested bracket groups and add regression tests (#530)

[readme] fix grammar (#550)

[Dev Deps] update @ljharb/eslint-config

[Tests] add regression tests for keys containing percent-encoded bracket text

6.15.1

[Fix] parse: parameterLimit: Infinity with throwOnLimitExceeded: true silently drops all parameters

[Deps] update @ljharb/eslint-config

[Dev Deps] update @ljharb/eslint-config, iconv-lite

[Tests] increase coverage

Commits

9aca407 v6.15.2
5e33d33 [Dev Deps] update @ljharb/eslint-config
21f80b3 [Fix] stringify: skip null/undefined entries in arrayFormat: 'comma' + `e...
a0a81ea [Fix] stringify: use configured delimiter after charsetSentinel
e3062f7 [Fix] stringify: apply formatter to encoded key under strictNullHandling
0c180a4 [Fix] stringify: skip null/undefined filter-array entries instead of crashi...
3a8b94a [Tests] add regression tests for keys containing percent-encoded bracket text
96755ab [readme] fix grammar
a419ce5 [Fix] parse: handle nested bracket groups and add regression tests
3f5e1c5 v6.15.1
Additional commits viewable in compare view

Updates @types/qs from 6.15.0 to 6.15.1

Commits

See full diff in compare view

Updates @types/qs from 6.15.0 to 6.15.1

Commits

See full diff in compare view

Updates dotenv from 17.4.0 to 17.4.2

Changelog

Sourced from dotenv's changelog.

17.4.2 (2026-04-12)

Changed

Improved skill files - tightened up details (#1009)

17.4.1 (2026-04-05)

Changed

Change text injecting to injected (#1005)

Commits

f116f70 17.4.2
3a81612 fix visual order of faq
13f55a8 Merge branch 'skill'
4bbbf73 reorganize faq
c3da64b Merge pull request #1009 from motdotla/skill
6f743b1 update source
fc2c624 update skill
972315b Tighten up skill
2795fce reorganize faq
d5495d4 adjust skill
Additional commits viewable in compare view

Updates react-dvd-screensaver from 0.1.1 to 0.1.2

Commits

See full diff in compare view

Updates @types/react from 19.2.14 to 19.2.15

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the patches group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [turbo](https://github.com/vercel/turborepo) | `2.9.3` | `2.9.14` | | [@react-email/components](https://github.com/resend/react-email/tree/HEAD/packages/components) | `1.0.11` | `1.0.12` | | [payload-oauth2](https://github.com/WilsonLe/payload-oauth2) | `1.0.20` | `1.0.21` | | [qs](https://github.com/ljharb/qs) | `6.15.0` | `6.15.2` | | [@types/qs](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/qs) | `6.15.0` | `6.15.1` | | [dotenv](https://github.com/motdotla/dotenv) | `17.4.0` | `17.4.2` | | [react-dvd-screensaver](https://github.com/samuelweckstrom/react-dvd-screensaver) | `0.1.1` | `0.1.2` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.14` | `19.2.15` | Updates `turbo` from 2.9.3 to 2.9.14 - [Release notes](https://github.com/vercel/turborepo/releases) - [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md) - [Commits](vercel/turborepo@v2.9.3...v2.9.14) Updates `@react-email/components` from 1.0.11 to 1.0.12 - [Release notes](https://github.com/resend/react-email/releases) - [Changelog](https://github.com/resend/react-email/blob/@react-email/components@1.0.12/packages/components/CHANGELOG.md) - [Commits](https://github.com/resend/react-email/commits/@react-email/components@1.0.12/packages/components) Updates `payload-oauth2` from 1.0.20 to 1.0.21 - [Release notes](https://github.com/WilsonLe/payload-oauth2/releases) - [Commits](WilsonLe/payload-oauth2@v1.0.20...v1.0.21) Updates `qs` from 6.15.0 to 6.15.2 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.15.0...v6.15.2) Updates `@types/qs` from 6.15.0 to 6.15.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/qs) Updates `@types/qs` from 6.15.0 to 6.15.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/qs) Updates `dotenv` from 17.4.0 to 17.4.2 - [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md) - [Commits](motdotla/dotenv@v17.4.0...v17.4.2) Updates `react-dvd-screensaver` from 0.1.1 to 0.1.2 - [Commits](https://github.com/samuelweckstrom/react-dvd-screensaver/commits) Updates `@types/react` from 19.2.14 to 19.2.15 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) --- updated-dependencies: - dependency-name: turbo dependency-version: 2.9.14 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patches - dependency-name: "@react-email/components" dependency-version: 1.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: payload-oauth2 dependency-version: 1.0.21 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: qs dependency-version: 6.15.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: "@types/qs" dependency-version: 6.15.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patches - dependency-name: "@types/qs" dependency-version: 6.15.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patches - dependency-name: dotenv dependency-version: 17.4.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patches - dependency-name: react-dvd-screensaver dependency-version: 0.1.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patches - dependency-name: "@types/react" dependency-version: 19.2.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-06-02T12:55:36Z

Looks like these dependencies are no longer updatable, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels May 25, 2026

dependabot Bot mentioned this pull request May 25, 2026

chore(deps-dev): bump turbo from 2.9.3 to 2.9.14 in the turbo group across 1 directory #842

Closed

dependabot Bot closed this Jun 2, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/patches-bb5ea9be3f branch June 2, 2026 12:55

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the patches group across 1 directory with 8 updates#855

chore(deps): bump the patches group across 1 directory with 8 updates#855
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/patches-bb5ea9be3f

dependabot Bot commented on behalf of github May 25, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jun 2, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github May 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Turborepo v2.9.14

High:

Low:

What's Changed

Changelog

New Contributors

Turborepo v2.9.13-canary.1

What's Changed

Changelog

@​react-email/components@​1.0.12

Patch Changes

1.0.12

Patch Changes

v1.0.21

What's Changed

6.15.2

6.15.1

17.4.2 (2026-04-12)

Changed

17.4.1 (2026-04-05)

Changed

Uh oh!

dependabot Bot commented on behalf of github Jun 2, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github May 25, 2026 •

edited

Loading

`@react-email/components@1`.0.12