chore(deps)(deps): bump the batched-minor-patch group across 1 directory with 28 updates

[dependabot]

Bumps the batched-minor-patch group with 27 updates in the / directory:

Package	From	To
@radix-ui/themes	3.2.1	3.3.0
@stripe/react-stripe-js	5.3.0	5.6.1
@stripe/stripe-js	8.4.0	8.9.0
@upstash/ratelimit	2.0.7	2.0.8
@upstash/redis	1.35.6	1.37.0
better-auth	1.3.34	1.5.5
lucide-react	0.553.0	0.577.0
next	16.0.3	16.1.6
next-devtools-mcp	0.3.3	0.3.10
otpauth	9.4.1	9.5.0
react	19.2.0	19.2.4
@types/react	19.2.4	19.2.14
react-day-picker	9.11.1	9.14.0
react-dom	19.2.0	19.2.4
react-hook-form	7.66.0	7.71.2
recharts	3.4.1	3.8.0
@axe-core/playwright	4.11.0	4.11.1
@eslint/eslintrc	3.3.1	3.3.5
@playwright/test	1.56.1	1.58.2
@tailwindcss/forms	0.5.10	0.5.11
@tailwindcss/postcss	4.1.17	4.2.1
@testing-library/react	16.3.0	16.3.2
autoprefixer	10.4.22	10.4.27
postcss	8.5.6	8.5.8
prettier	3.6.2	3.8.1
prettier-plugin-tailwindcss	0.7.1	0.7.2
tsx	4.20.6	4.21.0

Updates @radix-ui/themes from 3.2.1 to 3.3.0

Release notes

Sourced from @​radix-ui/themes's releases.

3.3.0

What's Changed

• Add soft variant to the Kbd component (#774)
• Add new layout props to Grid and layout components: alignContent, justifyItems, alignSelf, justifySelf (#744)
• Deprecate breakpoints array. In the next major version, it will be replaced with a Set for easier lookups and comparisons.

Changelog

Sourced from @​radix-ui/themes's changelog.

Release process

This is a work-in-progress document and will be updated as we refine our release process.

Release strategy

We track versions during the pull request process. As features are added, modified or improved it's important to keep track of these via versioning.

Tracking version changes

PRs that fix bugs or add features should include an addition to packages/radix-ui-themes/CHANGELOG.md under a new version heading. The actual release version may differ, so be sure to double check this at publish time.

Publishing a stable release

You must be a maintainer of the repository and have write access to publish a release.

1. Create a new branch for the release. We recommend the branch naming convention release/<version> for this (e.g. release/3.3.0).
2. Update the version in packages/radix-ui-themes/package.json and ensure the changelog is up to date.
3. Add and commit with the commit message of v<version> (e.g. v3.3.0).
4. Push the branch to the repository and create a pull request.
5. When checks pass and the pull request is approved, merge it into main.
6. Create a new tag for the release with the format <version> (e.g. 3.3.0).
   • If you do this locally, be sure to pull the latest changes from main to ensure you have the new version changes from the previous step.
7. Create a new GitHub release from the tag. Use the changelog entry for the version as its release notes.
8. The GitHub action will be triggered by the publish workflow and will automatically publish the package to npm.

To publish a pre-release you must build and publish manually. Use pnpm publish -r --tag <tag>, where <tag> is the pre-release tag (e.g. alpha, beta, rc)

Updating documentation

Our documentation is in a separate repository and updating it is a three step process:

1. Write and update the change log
2. Bump package version/s and create / update the pages for each version change
3. Perform documentation updates and remove live demos from previous versions

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​radix-ui/themes since your current version.

Updates @stripe/react-stripe-js from 5.3.0 to 5.6.1

Release notes

Sourced from @​stripe/react-stripe-js's releases.

v5.6.1

Fixes

• Fail fast if hub GitHub auth is invalid during publish (#656)

Changed

• Bump rollup from 4.22.4 to 4.59.0 (#657)

v5.6.0

New features

• update stripe package (#655)

Changed

• Bump lodash from 4.17.21 to 4.17.23 (#652)

v5.5.0

New features

• Add full PaymentFormElement props and options support (#654)

Fixes

v5.4.1

Changed

• Bump min-document from 2.19.0 to 2.19.2 (#644)
• Bump js-yaml from 3.14.1 to 3.14.2 (#641)

v5.4.0

New features

• Add PaymentForm Element (#643)
• Removes beta comment from CurrencySelector element. (#642)
• Export disclosure components with typing (#640)

Commits

• 3f65623 v5.6.1
• 7ea5857 Bump rollup from 4.22.4 to 4.59.0 (#657)
• 2dcb244 chore(release): verify hub auth before tagging (#656)
• 06bd58b v5.6.0
• 4e81040 update stripe package (#655)
• 12e0b03 Bump lodash from 4.17.21 to 4.17.23 (#652)
• 11040e0 v5.5.0
• 03067cc Add full PaymentFormElement props and options support (#654)
• 8891221 v5.4.1
• 1eb47d2 Bump min-document from 2.19.0 to 2.19.2 (#644)
• Additional commits viewable in compare view

Updates @stripe/stripe-js from 8.4.0 to 8.9.0

Release notes

Sourced from @​stripe/stripe-js's releases.

v8.9.0

New features

• Add types for new Payment Form Element method & change event values 👾 (#878)
• Add buttonColorText and buttonColorBackground Appearance API vars (#876)

Changed

• Bump minimatch from 3.1.2 to 3.1.5 in /examples/rollup (#884)
• Bump minimatch from 3.1.2 to 3.1.5 in /examples/parcel (#882)
• Bump rollup from 2.79.2 to 2.80.0 (#881)

v8.8.0

Fixes

• add confirmAmazonPaySetup to the types (#874)
• Add optional savePaymentMethod property to value (#873)
• publish: preflight hub auth before tagging (#866)

Changed

• Update Payment Form types (#875)
• Add Enums to options.layout.radios (#868)
• Use more specific types for tax ID (#872)
• Add lk_vat to tax id types (#871)
• add paymentFormConfirmEvent to confirm args type (#867)
• Bump lodash from 4.17.21 to 4.17.23 in /examples/rollup (#858)

v8.7.0

New features

• update change event schema for PaymentForm (#864)
• Add syncAddressCheckbox to StripeCheckoutElementsOptions (#863)

Changed

• Bump lodash from 4.17.21 to 4.17.23 (#860)
• Bump lodash from 4.17.21 to 4.17.23 in /examples/parcel (#859)

v8.6.4

Fixes

• fix(types): add adaptivePricing to StripeCheckoutOptions (#850)

Changed

• Update public types for payment form (#861)

... (truncated)

Commits

• e082e40 v8.9.0
• 6beb2e3 Bump minimatch from 3.1.2 to 3.1.5 in /examples/rollup (#884)
• a607fba Bump minimatch from 3.1.2 to 3.1.5 in /examples/parcel (#882)
• 7ccd407 Bump rollup from 2.79.2 to 2.80.0 (#881)
• 870e250 Add types for new Payment Form Element method & change event values 👾 (#878)
• 7789da9 Add buttonColorText and buttonColorBackground Appearance API vars (#876)
• ba1019a v8.8.0
• 7247d4c add confirmAmazonPaySetup to the types (#874)
• 5039102 Update Payment Form types (#875)
• 3ab6635 Add Enums to options.layout.radios (#868)
• Additional commits viewable in compare view

Updates @upstash/ratelimit from 2.0.7 to 2.0.8

Release notes

Sourced from @​upstash/ratelimit's releases.

v2.0.8

What's Changed

• DX-2280: Remove large-group runners by @​CahidArda in upstash/ratelimit-js#144
• Fix React Server Components CVE vulnerabilities by @​vercel[bot] in upstash/ratelimit-js#145
• DX-2316: bump next by @​CahidArda in upstash/ratelimit-js#146
• DX-2254: add global dynamic limit by @​CahidArda in upstash/ratelimit-js#147

New Contributors

• @​vercel[bot] made their first contribution in upstash/ratelimit-js#145

Full Changelog: upstash/ratelimit-js@v2.0.7...v2.0.8

Commits

• a8b1b99 DX-2254: add global dynamic limit (#147)
• 8589adb fix: bump next (#146)
• ade4aa8 Merge pull request #145 from upstash/vercel/react-server-components-cve-vu-qx...
• e19785d Fix React Server Components CVE vulnerabilities
• 67e8bc2 DX-2280: Remove specific runner configuration from test job in GitHub Actions...
• See full diff in compare view

Updates @upstash/redis from 1.35.6 to 1.37.0

Release notes

Sourced from @​upstash/redis's releases.

@​upstash/redis@​1.37.0

Minor Changes

• 6f2a831: Release redis search

Patch Changes

• 3980b45: Add monorepo structure

@upstash/redis@1.37.0-canary-20260312092231-7405c30f6a505815bbeb69b713a22978f104ec1f

What's Changed

• DX-2445: redis package version and changeset for search release by @​CahidArda in upstash/redis-js#1423
• DX-2445: fix redis version, add repository.url to search packages by @​CahidArda in upstash/redis-js#1424
• DX-2445: use pnpm publish for search packages to resolve workspace:* deps by @​CahidArda in upstash/redis-js#1425

Full Changelog: https://github.com/upstash/redis-js/compare/@​upstash/redis@​1.30.3-canary-20260312082754-96a99a4e83fc560b77c36808627213e528c2f110...@​upstash/redis@​1.37.0-canary-20260312092231-7405c30f6a505815bbeb69b713a22978f104ec1f

@​upstash/redis@​1.37.0-canary-20260312084440-fba95e89e54d8ba63f020400247a1ef0dbdd2c84

What's Changed

• DX-2445: redis package version and changeset for search release by @​CahidArda in upstash/redis-js#1423
• DX-2445: fix redis version, add repository.url to search packages by @​CahidArda in upstash/redis-js#1424

Full Changelog: https://github.com/upstash/redis-js/compare/@​upstash/redis@​1.30.3-canary-20260312082754-96a99a4e83fc560b77c36808627213e528c2f110...@​upstash/redis@​1.37.0-canary-20260312084440-fba95e89e54d8ba63f020400247a1ef0dbdd2c84

Commits

• 7e8fbed chore: version packages (#1420)
• 703f6d4 fix: handle FROM field option in SEARCH.DESCRIBE deserialization (#1426)
• 15b4fc9 fix: use pnpm publish for search packages to resolve workspace:* deps (#1425)
• fba95e8 DX-2445: fix redis version, add repository.url to search packages (#1424)
• 6f2a831 fix: redis package version and changeset for search release (#1423)
• 96a99a4 DX-2445: Add new search client packages (#1422)
• efd3bc6 DX-2445: use workflow_run instead of release event for npm publish (#1421)
• 2dc4212 fix: add commit message (#1419)
• 3980b45 DX-2445: Add monorepo structure (#1418)
• 89cc220 DX-2381: Redis Search (#1409)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​upstash/redis since your current version.

Updates better-auth from 1.3.34 to 1.5.5

Release notes

Sourced from better-auth's releases.

v1.5.5

   🚀 Features

• oauth-provider: Pairwise subject identifiers (OIDC Core §8)  -  by @​gustavovalverde and @​himself65 in better-auth/better-auth#8292 (6c09f)

   🐞 Bug Fixes

• Pass user field through idToken sign-in body for Apple name support  -  by @​bytaesu and Copilot in better-auth/better-auth#8417 (d364e)
• Add missing SubpageItem properties for docs-sidebar compatibility  -  by @​bytaesu (6bcd7)
• Add icon prop to SubpageLink component  -  by @​bytaesu (95538)
• Correct sign-in link to dash.better-auth.com  -  by @​bytaesu (058bb)
• Restore features.tsx and align import with canary  -  by @​bytaesu (e5ebb)
• Add suppressHydrationWarning to video elements  -  by @​bytaesu (8e0e5)
• Preserve custom session fields on focus refresh  -  by @​jslno in better-auth/better-auth#8354 (2bd99)
• Throw on duplicate email when autoSignIn: false without requireEmailVerification  -  by @​himself65 in better-auth/better-auth#8521 (e3e66)
• Add origin check middleware to password reset request  -  by @​jslno in better-auth/better-auth#8392 (497b1)
• adapters: Restore deprecated createAdapter and type exports for backcompat  -  by @​himself65 in better-auth/better-auth#8461 (eb848)
• blog: Fix RSS feed link path, image path and blog date  -  by @​0-Sandy in better-auth/better-auth#8483 (67c6d)
• cli: Resolve path aliases from extended tsconfig files  -  by @​himself65 in better-auth/better-auth#8520 (11ef0)
• client: Preserve stale session data on network or server errors  -  by @​bytaesu in better-auth/better-auth#8437 (9a229)
• db: Use CREATE INDEX for postgres migration  -  by @​himself65 in better-auth/better-auth#8538 (b9e54)
• oauth-provider: Avoid fetch redirect CORS after login  -  by @​GautamBytes in better-auth/better-auth#8519 (c0366)
• oidc-provider: Validate redirect_uri for prompt=none  -  by @​jslno in better-auth/better-auth#8398 (ff352)
• organization: Handle multi-role users in invite and member removal checks  -  by @​himself65 and Copilot Autofix powered by AI in better-auth/better-auth#8442 (23f18)
• prisma-adapter: Fall back to updateMany for non-unique updates  -  by @​himself65 in better-auth/better-auth#8524 (3f16e)
• sso: Handle bare domains in domain verification  -  by @​himself65 in better-auth/better-auth#8369 (fb7a0)
• telemetry: Use conditional exports to replace dynamic import hacks  -  by @​himself65 in better-auth/better-auth#8458 (3ecd2)
• two-factor: Wire twoFactorTable option to schema modelName  -  by @​himself65 in better-auth/better-auth#8443 (f4604)

    View changes on GitHub

v1.5.4

   🐞 Bug Fixes

• Move adapter packages to dependencies to fix missing module errors  -  by @​himself65 in better-auth/better-auth#8401 (56857)
• expo: Handle origin override across mutable and immutable requests  -  by @​NathanColosimo, Taesu and @​bytaesu in better-auth/better-auth#8405 (b7a31)

    View changes on GitHub

v1.5.3

   🐞 Bug Fixes

• account: Use accountId instead of id in accountInfo endpoint  -  by @​NathanColosimo and @​himself65 in better-auth/better-auth#8346 (efcc2)
• sso: Use internalAdapter for verification operations  -  by @​himself65 in better-auth/better-auth#8353 (e3bc6)

    View changes on GitHub

v1.5.2

   🐞 Bug Fixes

... (truncated)

Commits

• db5a444 chore: release v1.5.5
• 497b1db fix: add origin check middleware to password reset request (#8392)
• ff352c6 fix(oidc-provider): validate redirect_uri for prompt=none (#8398)
• b9e54c9 fix(db): use CREATE INDEX for postgres migration (#8538)
• c03666a fix(oauth-provider): avoid fetch redirect CORS after login (#8519)
• e3e6664 fix: throw on duplicate email when autoSignIn: false without `requireEmailV...
• b6222b2 chore(client): re-export necessary types (#8497)
• 2bd994b fix: preserve custom session fields on focus refresh (#8354)
• eb848c4 fix(adapters): restore deprecated createAdapter and type exports for backcomp...
• 1221a2b docs(2fa): fix OTP server API method names (#8477)
• Additional commits viewable in compare view

Updates lucide-react from 0.553.0 to 0.577.0

Release notes

Sourced from lucide-react's releases.

Version 0.577.0

What's Changed

• chore(deps): bump rollup from 4.53.3 to 4.59.0 by @​dependabot[bot] in lucide-icons/lucide#4106
• fix(repo): correctly ignore docs/releaseMetadata via .gitignore by @​bhavberi in lucide-icons/lucide#4100
• feat(icons): added ellipse icon by @​KISHORE-KUMAR-S in lucide-icons/lucide#3749

New Contributors

• @​bhavberi made their first contribution in lucide-icons/lucide#4100
• @​KISHORE-KUMAR-S made their first contribution in lucide-icons/lucide#3749

Full Changelog: lucide-icons/lucide@0.576.0...0.577.0

Version 0.576.0

What's Changed

• Added zodiac signs by @​karsa-mistmere in lucide-icons/lucide#712
• fix(icons): fixes guideline violations in package-* icons. by @​karsa-mistmere in lucide-icons/lucide#4074
• fix(icons): changed receipt icon by @​karsa-mistmere in lucide-icons/lucide#4075
• fix(icons): updated cuboid icon tags and categories by @​karsa-mistmere in lucide-icons/lucide#4095
• fix(icons): changed cuboid icon by @​jamiemlaw in lucide-icons/lucide#4098
• fix(lucide-font, lucide-static): Fixing stable code points by @​ericfennis in lucide-icons/lucide#3894
• feat(icons): added fishing-rod icon by @​7ender in lucide-icons/lucide#3839

Full Changelog: lucide-icons/lucide@0.575.0...0.576.0

Version 0.575.0

What's Changed

• feat(icons): added message-square-check icon by @​karsa-mistmere in lucide-icons/lucide#4076
• fix(lucide): Fix ESM Module output path in build by @​ericfennis in lucide-icons/lucide#4084
• feat(icons): added metronome icon by @​edwloef in lucide-icons/lucide#4063
• fix(icons): remove execution permission of SVG files by @​duckafire in lucide-icons/lucide#4053
• fix(icons): changed file-pen-line icon by @​jguddas in lucide-icons/lucide#3970
• feat(icons): added square-arrow-right-exit and square-arrow-right-enter icons by @​EthanHazel in lucide-icons/lucide#3958
• fix(icons): renamed flip-* to square-centerline-dashed-* by @​jguddas in lucide-icons/lucide#3945

New Contributors

• @​edwloef made their first contribution in lucide-icons/lucide#4063
• @​duckafire made their first contribution in lucide-icons/lucide#4053

Full Changelog: lucide-icons/lucide@0.573.0...0.575.0

Version 0.574.0

What's Changed

• fix(icons): changed rocking-chair icon by @​jamiemlaw in lucide-icons/lucide#3445
• fix(icons): flipped coins icon by @​jguddas in lucide-icons/lucide#3158
• feat(icons): added x-line-top icon by @​jguddas in lucide-icons/lucide#2838
• feat(icons): added mouse-left icon by @​marvfash in lucide-icons/lucide#2788
• feat(icons): added mouse-right icon by @​marvfash in lucide-icons/lucide#2787

New Contributors

... (truncated)

Commits

• f6c0d06 chore(deps): bump rollup from 4.53.3 to 4.59.0 (#4106)
• 67c0485 feat(scripts): added helper script to automatically update OpenCollective bac...
• b6ed43d feat(packages): Added aria-hidden fallback for decorative icons to all packag...
• 076e0bb chore(dependencies): Update dependencies (#3809)
• 80d6f73 fix(icons): Rename fingerprint icon to fingerprint-pattern (#3767)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for lucide-react since your current version.

Updates next from 16.0.3 to 16.1.6

Release notes

Sourced from next's releases.

v16.1.6

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

• Upgrade to swc 54 (#88207)
• implement LRU cache with invocation ID scoping for minimal mode response cache (#88509)
• tweak LRU sentinel key (#89123)

Credits

Huge thanks to @​mischnic, @​wyattjoh, and @​ztanner for helping!

v16.1.5

Please refer the following changelogs for more information about this security release:

https://vercel.com/changelog/summaries-of-cve-2025-59471-and-cve-2025-59472 https://vercel.com/changelog/summary-of-cve-2026-23864

v16.0.11

Please see this changelog for more information about this security patch.

Commits

• adf8c61 v16.1.6
• 098c0c0 [backport][ci] Make gh auth status optional when triggering a release (#89100)
• a43df32 Backport/docs fixes jan 25 16.1.x (#89124)
• d6d5734 tweak LRU sentinel cache key (#89123)
• 4324698 backport: implement LRU cache with invocation ID scoping for minimal mode res...
• 23c4649 [backport] Upgrade to swc 54 (#88207) (#89103)
• acba4a6 v16.1.5
• e1d1fc6 Add maximum size limit for postponed body parsing (#88175)
• 500ec83 fetch(next/image): reduce maximumResponseBody from 300MB to 50MB (#88588)
• 1caaca3 feat(next/image)!: add images.maximumResponseBody config (#88183)
• Additional commits viewable in compare view

Updates next-devtools-mcp from 0.3.3 to 0.3.10

Release notes

Sourced from next-devtools-mcp's releases.

v0.3.10

What's Changed

• docs: add Google Antigravity configuration instructions to README by @​0ldh in vercel/next-devtools-mcp#111
• Perf: Optimize doc lookup by @​gaojude in vercel/next-devtools-mcp#112

New Contributors

• @​0ldh made their first contribution in vercel/next-devtools-mcp#111

Full Changelog: vercel/next-devtools-mcp@v0.3.9...v0.3.10

v0.3.8

What's Changed

• fix: filter base64 image from screenshot result by @​Burry in vercel/next-devtools-mcp#105
• fix(init): avoid agent idle caused by strict reply prohibition (fix #109) by @​MapleCity1314 in vercel/next-devtools-mcp#110

New Contributors

• @​Burry made their first contribution in vercel/next-devtools-mcp#105
• @​MapleCity1314 made their first contribution in vercel/next-devtools-mcp#110

Full Changelog: vercel/next-devtools-mcp@v0.3.7...v0.3.8

v0.3.7

Fixes

• fix: upgrade @​modelcontextprotocol/sdk to 1.24.3 (CVE-2025-66414) by @​gaojude in vercel/next-devtools-mcp#107

Misc

• fix: upgrade Next.js to 16.0.7 (CVE-2025-55182) by @​ctate in vercel/next-devtools-mcp#106

• @​ctate made their first contribution in vercel/next-devtools-mcp#106

Full Changelog: vercel/next-devtools-mcp@v0.3.6...v0.3.7

v0.3.6

Improvements

• Fix screenshot action using wrong Playwright MCP tool name by @​gaojude in vercel/next-devtools-mcp#98
• Improve port discovery by @​gaojude in vercel/next-devtools-mcp#101

Misc

• ci: update server.json for mcp registry when bump version by @​huozhi in vercel/next-devtools-mcp#102
• Add troubleshooting section for common user issues by @​gaojude in vercel/next-devtools-mcp#97

Full Changelog: vercel/next-devtools-mcp@v0.3.5...v0.3.6

v0.3.5

What's Changed

• Simplify Next.js server discovery by combining server and tool listing by @​gaojude in vercel/next-devtools-mcp#96

Full Changelog: vercel/next-devtools-mcp@v0.3.4...v0.3.5

... (truncated)

Commits

• d1b3e56 chore: bump version to 0.3.10
• 7330deb simplify docs search (#112)
• 6751777 docs: add Google Antigravity configuration instructions to README (#111)
• 38bf006 chore: bump version to 0.3.9
• edd1acf improve use cache migration (#108)
• af3d601 chore: bump version to 0.3.8
• 19cd8c3 fix: update ai_response_instruction for initialization process (#110)
• 8b8a4e5 fix: filter base64 image from screenshot result (#105)
• 316fcec chore: bump version to 0.3.7
• e869d6e bump mcp sdk (#107)
• Additional commits viewable in compare view

Updates otpauth from 9.4.1 to 9.5.0

Release notes

Sourced from otpauth's releases.

v9.5.0

What's Changed

• Bump the npm-development-minor-patch group across 1 directory with 13 updates by @​dependabot[bot] in hectorm/otpauth#635
• Bump @​noble/hashes from 1.8.0 to 2.0.1 by @​dependabot[bot] in hectorm/otpauth#632
• Bump the github-actions-all group across 1 directory with 5 updates by @​dependabot[bot] in hectorm/otpauth#637
• Bump the npm-development-minor-patch group with 3 updates by @​dependabot[bot] in hectorm/otpauth#636
• Bump glob by @​dependabot[bot] in hectorm/otpauth#645
• Bump js-yaml from 4.1.0 to 4.1.1 by @​dependabot[bot] in hectorm/otpauth#643
• Bump the github-actions-all group across 1 directory with 5 updates by @​dependabot[bot] in hectorm/otpauth#647
• Bump the npm-development-minor-patch group across 1 directory with 14 updates by @​dependabot[bot] in hectorm/otpauth#646
• Bump @​eslint/core from 0.16.0 to 1.0.0 by @​dependabot[bot] in hectorm/otpauth#650
• Bump the github-actions-all group with 5 updates by @​dependabot[bot] in hectorm/otpauth#654
• Bump the npm-development-minor-patch group across 1 directory with 5 updates by @​dependabot[bot] in hectorm/otpauth#653
• Bump the npm-development-minor-patch group across 1 directory with 5 updates by @​dependabot[bot] in hectorm/otpauth#661
• Bump @​types/node from 24.10.1 to 25.0.3 by @​dependabot[bot] in hectorm/otpauth#657
• Bump globals from 16.5.0 to 17.0.0 by @​dependabot[bot] in hectorm/otpauth#656
• Bump the npm-development-minor-patch group with 6 updates by @​dependabot[bot] in hectorm/otpauth#662
• Bump the github-actions-all group with 4 updates by @​dependabot[bot] in hectorm/otpauth#663
• Bump hectorm/ghaction-setup-quickjs from 1.1.0 to 1.2.0 in the github-actions-all group by @​dependabot[bot] in hectorm/otpauth#664
• Add custom HMAC support and bare build, fixes #659 by @​hectorm in hectorm/otpauth#666
• Bump github/codeql-action from 4.32.0 to 4.32.1 in the github-actions-all group by @​dependabot[bot] in hectorm/otpauth#667
• Bump the npm-development-minor-patch group with 6 updates...

  Description has been truncated

[github-actions]

👋 Thanks for opening your first pull request in StormCom!

A maintainer will review your PR soon. Please make sure:

• Your PR follows our
  Contributing Guidelines
• All CI checks pass
• You've added appropriate tests
• Documentation has been updated (if needed)

We appreciate your contribution to making StormCom better! 🚀