chore: bump the production-dependencies group with 4 updates by dependabot[bot] · Pull Request #263 · fells-code/seamless-auth-admin-dashboard

dependabot · 2026-09-13T17:03:19Z

Bumps the production-dependencies group with 4 updates: @seamless-auth/react, lucide-react, react and react-dom.

Updates @seamless-auth/react from 0.9.0 to 0.12.0

Changelog

Sourced from @seamless-auth/react's changelog.

0.12.0

Minor Changes

f59be34: Add a passkey while signed in, and say what a 401 at enrollment means.

registerPasskey is now on useAuth() and on the framework-agnostic session actions, not only on the client. The bundled UI already told users they could "add a passkey later from a device that does", and nothing in the package implemented that: credentials could be listed and deleted but never added. The context version refreshes the session afterwards, so a settings screen renders the new passkey without a reload.

Enrollment now requires a signed-in session, which is a coordinated change with seamless-auth-api and the server adapters. Upgrade all three together: the auth API and the adapter have no safe release order between them, and enrollment answers 401 until both land. The signup flow already satisfies it, because verifying the email OTP issues a session before the passkey screen is reached, so nothing in the bundled views moves. An application that called registerPasskey() before verifying an address has to move that call after it.

A 401 from enrollment now reads "Your session expired before the passkey was saved" rather than the generic "Error registering passkey." It is the session rather than anything about the authenticator, and the generic wording invited the user to retry with the same expired one. isUnauthenticated(error) is exported for callers rendering their own screens.

Corrects a stale README example that still passed a token to registerPasskey, a field removed when the wire contract moved to @seamless-auth/types.

0.11.0

Minor Changes

bd26c22: Read the returnTo an OAuth sign-in asked for, and land on it.

startOAuthLogin has taken a returnTo since OAuth landed here, and nothing ever read one back. The auth server validated it against the configured origins and signed it into the state, but finishOAuthLogin was typed as a bare MessageResult, so the whole callback body was discarded and an adopter had no way to learn where the flow had been asked to end up.

finishOAuthLogin now resolves to FinishOAuthLoginResult, the completed OAuth response minus its session material, for the same reason LoginStartResult drops it: sessions are carried by cookies, so there is no reason to hand an adopter raw tokens. The new field on it is returnTo, absent when the caller asked for nothing.

The bundled OAuthCallback view lands there instead of always going to /. This is the same gap the magic link redirect closed in 0.10.0: the headless client could reach the feature and an application using AuthRoutes could not, which is the audience least likely to be wiring up its own client.

The view only follows a destination on its own origin. That is not the guard against an open

... (truncated)

Commits

See full diff in compare view

Updates lucide-react from 1.40.0 to 1.44.0

Release notes

Sourced from lucide-react's releases.

Version 1.44.0

What's Changed

feat(packages/icons): fixed @lucide/icons rollup config by @karsa-mistmere in lucide-icons/lucide#4824

fix(icons): changed door-open by @karsa-mistmere in lucide-icons/lucide#4826

fix(docs): replace missing LucideIcon icon names in guides by @karsa-mistmere in lucide-icons/lucide#4827

feat(docs): fixed fuse js search by @karsa-mistmere in lucide-icons/lucide#4825

fix(icons): changed satellite-dish icon by @karsa-mistmere in lucide-icons/lucide#4813

fix(icons): arcified flip icons & renamed them by @karsa-mistmere in lucide-icons/lucide#4833

fix(icons): improve legibility of credit card icons by @karsa-mistmere in lucide-icons/lucide#4831

feat(lab): add check-x icon by @ishanbagra18 in lucide-icons/lucide#4737

fix(icons): correct compromised tags in shield icons by @decknamec in lucide-icons/lucide#4835

feat(icons): added toothbrush icon by @karsa-mistmere in lucide-icons/lucide#4755

New Contributors

@ishanbagra18 made their first contribution in lucide-icons/lucide#4737

@decknamec made their first contribution in lucide-icons/lucide#4835

Full Changelog: lucide-icons/lucide@1.43.0...1.44.0

Version 1.43.0

What's Changed

feat(icons): added tic-tac-toe icon by @karsa-mistmere in lucide-icons/lucide#4772

fix(icons): changed id-card icon by @karsa-mistmere in lucide-icons/lucide#4820

fix(icons): changed id-card-lanyard icon by @karsa-mistmere in lucide-icons/lucide#4819

feat(icons): delegate carton/carton-off from lab by @karsa-mistmere in lucide-icons/lucide#4818

Full Changelog: lucide-icons/lucide@1.42.0...1.43.0

Version 1.42.0

What's Changed

feat(docs): added better contribution guide by @karsa-mistmere in lucide-icons/lucide#4746

fix(site): fix HomeHeroIconsCard.data.ts by @karsa-mistmere in lucide-icons/lucide#4805

fix(icons): deprecated swiss franc icons by @karsa-mistmere in lucide-icons/lucide#4799

feat(icons): add gap-horizontal and gap-vertical by @samuelalake in lucide-icons/lucide#4544

feat(icons): added trash-off icon by @lx3133584 in lucide-icons/lucide#4788

feat(icons): added circle-dashed-check icon by @karsa-mistmere in lucide-icons/lucide#4796

feat(icons): added equal-approximately-not icon by @ryck in lucide-icons/lucide#4802

feat(icons): added dome icons by @swastik7805 in lucide-icons/lucide#4261

chore(lucide-react): Add Lucide React integration tests by @ericfennis in lucide-icons/lucide#4804

feat(packages): extract icon build logic into @lucide/shared by @karsa-mistmere in lucide-icons/lucide#4409

fix(icons): changed computer icon by @karsa-mistmere in lucide-icons/lucide#4607

chore(dependencies): Update dependencies by @ericfennis with @Copilot in lucide-icons/lucide#4806

fix(icons): changed table-2 icon by @jguddas in lucide-icons/lucide#4810

feat(icons): added user-group icons by @karsa-mistmere in lucide-icons/lucide#4782

New Contributors

@lx3133584 made their first contribution in lucide-icons/lucide#4788

@ryck made their first contribution in lucide-icons/lucide#4802

... (truncated)

Commits

94e4cb9 chore(dependencies): Update dependencies (#4806)
99d25bd feat(packages): extract icon build logic into @lucide/shared (#4409)
See full diff in compare view

Updates react from 19.2.8 to 19.3.0

Release notes

Sourced from react's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)

Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

Enable Trusted Types API integration (@rickhanlonii #35816)

Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)

Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@hoxyq, @eps1lon: #37104, #37203, #37491)

All Changes

React

Fast Refresh Fixes

Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@sophiebits #36965)

Fix Fast Refresh so edits to a memo() comparison function take effect (@sophiebits #36964)

Fix Fast Refresh crash when an edit changes the kind of a component's type (@sophiebits #36963)

Unify hot reload type resolution for Fast Refresh (@sophiebits #36962)

Fix Fast Refresh to remount correctly when an edit changes the component kind (@sophiebits #36950)

Double invoke effects in StrictMode after Fast Refresh (@eps1lon #35962)

Performance Track Fixes

Prevent crash when accessing $$typeof in Performance Tracks (@eps1lon #35679)

Handle non-string function names in Performance Tracks (@eps1lon #35659)

Use minus (-) instead of en dash for removed props in Performance Tracks (@eps1lon #35649)

Handle arrays with bigints in deep objects in Performance Tracks (@eps1lon #35648)

Don't enumerate typed array props in Performance Tracks in DEV (@UditDewan #36913)

Bail out of diffing wide objects and arrays in Performance Tracks (@eps1lon #34742)

Clear potentially large performance measures in DEV (@hoxyq #34803)

Fix missing else branch for renders with no props change in Performance Tracks (@hoxyq #34837)

Activity Fixes

Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@sophiebits #36947)

Hide portal contents when an Activity is hidden (@acdlite #35091)

Prevent metadata hoisting in hidden <Activity> trees (@ronnakamoto #34983)

Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@acdlite #35074)

Don't unhide a node if a direct parent Offscreen is still hidden (@sebmarkbage #34821)

Don't show internal <Offscreen> component in error messages (@rickhanlonii #35763)

Warn in DEV when a component appears to have been unblocked by a conditional use() (@hoxyq, @eps1lon: #37104, #37203, #37491)

Render transitions independently instead of entangling them into a single render (@acdlite #37290)

... (truncated)

Changelog

Sourced from react's changelog.

19.3.0 (September 9, 2026)

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)

Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

Enable Trusted Types API integration (@rickhanlonii #35816)

Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)

Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@hoxyq, @eps1lon: #37104, #37203, #37491)

All Changes

React

Fast Refresh Fixes

Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@sophiebits #36965)

Fix Fast Refresh so edits to a memo() comparison function take effect (@sophiebits #36964)

Fix Fast Refresh crash when an edit changes the kind of a component's type (@sophiebits #36963)

Unify hot reload type resolution for Fast Refresh (@sophiebits #36962)

Fix Fast Refresh to remount correctly when an edit changes the component kind (@sophiebits #36950)

Double invoke effects in StrictMode after Fast Refresh (@eps1lon #35962)

Performance Track Fixes

Prevent crash when accessing $$typeof in Performance Tracks (@eps1lon #35679)

Handle non-string function names in Performance Tracks (@eps1lon #35659)

Use minus (-) instead of en dash for removed props in Performance Tracks (@eps1lon #35649)

Handle arrays with bigints in deep objects in Performance Tracks (@eps1lon #35648)

Don't enumerate typed array props in Performance Tracks in DEV (@UditDewan #36913)

Bail out of diffing wide objects and arrays in Performance Tracks (@eps1lon #34742)

Clear potentially large performance measures in DEV (@hoxyq #34803)

Fix missing else branch for renders with no props change in Performance Tracks (@hoxyq #34837)

Activity Fixes

Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@sophiebits #36947)

Hide portal contents when an Activity is hidden (@acdlite #35091)

Prevent metadata hoisting in hidden <Activity> trees (@ronnakamoto #34983)

Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@acdlite #35074)

Don't unhide a node if a direct parent Offscreen is still hidden (@sebmarkbage #34821)

Don't show internal <Offscreen> component in error messages (@rickhanlonii #35763)

Warn in DEV when a component appears to have been unblocked by a conditional use() (@hoxyq, @eps1lon: #37104, #37203, #37491)

Render transitions independently instead of entangling them into a single render (@acdlite #37290)

Fix hang when updating a dehydrated boundary inside a hidden tree (@gaearon #37135)

Don't reacquire Host Singletons during dev effect validation (@gnoff #37113)

Only remove properties from Host Singletons on release (@gnoff #37112)

... (truncated)

Commits

2dc7da7 [test] Bump Jest to 30.4 (#37382)
4f93894 docs: remove stale parentType param from validateChildKeys JSDoc (#36928)
dbc3750 Update required references to GitHub repo (#36752)
900ae09 [flow] Bump flow to v0.317.0 (#36701)
fbb1370 [flow] Bump flow to v0.307.1 (#36199)
56922cf [react-native-renderer] Delete Paper (legacy) renderer (#36285)
74568e8 [Flight] Transport AggregateErrors.errors (#36156)
e66ef64 [tests] remove withoutStack from assertConsole helpers (#35498)
db71391 [Fiber] Instrument the lazy initializer thenable in all cases (#35521)
3e1abcc [tests] Require exact error messages in assertConsole helpers (#35497)
Additional commits viewable in compare view

Updates react-dom from 19.2.8 to 19.3.0

Release notes

Sourced from react-dom's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)

Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

Enable Trusted Types API integration (@rickhanlonii #35816)

Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)

Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@hoxyq, @eps1lon: #37104, #37203, #37491)

All Changes

React

Fast Refresh Fixes

Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@sophiebits #36965)

Fix Fast Refresh so edits to a memo() comparison function take effect (@sophiebits #36964)

Fix Fast Refresh crash when an edit changes the kind of a component's type (@sophiebits #36963)

Unify hot reload type resolution for Fast Refresh (@sophiebits #36962)

Fix Fast Refresh to remount correctly when an edit changes the component kind (@sophiebits #36950)

Double invoke effects in StrictMode after Fast Refre...
Description has been truncated

Bumps the production-dependencies group with 4 updates: [@seamless-auth/react](https://github.com/fells-code/seamless-auth-react/tree/HEAD/packages/react), [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react), [react](https://github.com/react/react/tree/HEAD/packages/react) and [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom). Updates `@seamless-auth/react` from 0.9.0 to 0.12.0 - [Release notes](https://github.com/fells-code/seamless-auth-react/releases) - [Changelog](https://github.com/fells-code/seamless-auth-react/blob/main/packages/react/CHANGELOG.md) - [Commits](https://github.com/fells-code/seamless-auth-react/commits/v0.12.0/packages/react) Updates `lucide-react` from 1.40.0 to 1.44.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.44.0/packages/lucide-react) Updates `react` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react) Updates `react-dom` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom) --- updated-dependencies: - dependency-name: "@seamless-auth/react" dependency-version: 0.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: lucide-react dependency-version: 1.44.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: react dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: react-dom dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added the dependencies Dependency updates label Sep 13, 2026

Navigation Menu

Uh oh!

chore: bump the production-dependencies group with 4 updates - #263

chore: bump the production-dependencies group with 4 updates#263
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-3ddd57c5bb

dependabot Bot commented on behalf of github Sep 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 13, 2026

0.12.0

Minor Changes

0.11.0

Minor Changes

Version 1.44.0

What's Changed

New Contributors

Version 1.43.0

What's Changed

Version 1.42.0

What's Changed

New Contributors

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

Notable changes

All Changes

React

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

Notable changes

All Changes

React

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

Notable changes

All Changes

React

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants