Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.
## 📋 Pull Request Information
**Original PR:** https://github.com/fosrl/pangolin/pull/2048
**Author:** [@dependabot[bot]](https://github.com/apps/dependabot)
**Created:** 12/12/2025
**Status:** ❌ Closed
**Base:** `main` ← **Head:** `dependabot/npm_and_yarn/prod-patch-updates-793421fc1e`
---
### 📝 Commits (1)
- [`d795057`](https://github.com/fosrl/pangolin/commit/d795057816c98f315c3f8c1c46f20593d4d5d6fa) Bump the prod-patch-updates group with 4 updates
### 📊 Changes
**2 files changed** (+25 additions, -25 deletions)
<details>
<summary>View changed files</summary>
📝 `package-lock.json` (+21 -21)
📝 `package.json` (+4 -4)
</details>
### 📄 Description
Bumps the prod-patch-updates group with 4 updates: [drizzle-orm](https://github.com/drizzle-team/drizzle-orm), [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next), [react](https://github.com/facebook/react/tree/HEAD/packages/react) and [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom).
Updates `drizzle-orm` from 0.45.0 to 0.45.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/drizzle-team/drizzle-orm/releases">drizzle-orm's releases</a>.</em></p>
<blockquote>
<h2>0.45.1</h2>
<ul>
<li>Fixed pg-native Pool detection in node-postgres transactions breaking in environments with forbidden <code>require()</code> (<a href="https://redirect.github.com/drizzle-team/drizzle-orm/issues/5107">#5107</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/drizzle-team/drizzle-orm/commit/a086f59fba7f46f3a077893ba912c99e91eaa760"><code>a086f59</code></a> Fixed pg-native Pool detection in node-postgres transactions breaking in envi...</li>
<li>See full diff in <a href="https://github.com/drizzle-team/drizzle-orm/compare/0.45.0...0.45.1">compare view</a></li>
</ul>
</details>
<br />
Updates `eslint-config-next` from 16.0.8 to 16.0.10
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/vercel/next.js/releases">eslint-config-next's releases</a>.</em></p>
<blockquote>
<h2>v16.0.10</h2>
<p>Please see the <a href="https://nextjs.org/blog/security-update-2025-12-11">Next.js Security Update</a> for information about this security patch.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/vercel/next.js/commit/581dee67e280b96c0766172cbd5477102c03342b"><code>581dee6</code></a> v16.0.10</li>
<li><a href="https://github.com/vercel/next.js/commit/3f6a39f6f75781f16e1cae0b122ae86150f375be"><code>3f6a39f</code></a> v16.0.9</li>
<li>See full diff in <a href="https://github.com/vercel/next.js/commits/v16.0.10/packages/eslint-config-next">compare view</a></li>
</ul>
</details>
<br />
Updates `react` from 19.2.1 to 19.2.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/facebook/react/releases">react's releases</a>.</em></p>
<blockquote>
<h2>19.2.3 (December 11th, 2025)</h2>
<h2>React Server Components</h2>
<ul>
<li>Add extra loop protection to React Server Functions (<a href="https://github.com/sebmarkbage"><code>@sebmarkbage</code></a> <a href="https://redirect.github.com/facebook/react/pull/35351">#35351</a>)</li>
</ul>
<h2>19.2.2 (December 11th, 2025)</h2>
<h2>React Server Components</h2>
<ul>
<li>Move <code>react-server-dom-webpack/*.unbundled</code> to private <code>react-server-dom-unbundled</code> (<a href="https://github.com/eps1lon"><code>@eps1lon</code></a> <a href="https://redirect.github.com/facebook/react/pull/35290">facebook/react#35290</a>)</li>
<li>Patch Promise cycles and toString on Server Functions (<a href="https://github.com/sebmarkbage"><code>@sebmarkbage</code></a>, <a href="https://github.com/unstubbable"><code>@unstubbable</code></a> <a href="https://redirect.github.com/facebook/react/pull/35289">#35289</a>, <a href="https://redirect.github.com/facebook/react/pull/35345">#35345</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/facebook/react/commit/612e371fb215498edde4c853bd1e0c8e9203808f"><code>612e371</code></a> Version 19.2.3</li>
<li><a href="https://github.com/facebook/react/commit/b910fc15e38d4fa80003819ddb7a928a3c3dca5d"><code>b910fc1</code></a> Version 19.2.2</li>
<li>See full diff in <a href="https://github.com/facebook/react/commits/v19.2.3/packages/react">compare view</a></li>
</ul>
</details>
<br />
Updates `react-dom` from 19.2.1 to 19.2.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/facebook/react/releases">react-dom's releases</a>.</em></p>
<blockquote>
<h2>19.2.3 (December 11th, 2025)</h2>
<h2>React Server Components</h2>
<ul>
<li>Add extra loop protection to React Server Functions (<a href="https://github.com/sebmarkbage"><code>@sebmarkbage</code></a> <a href="https://redirect.github.com/facebook/react/pull/35351">#35351</a>)</li>
</ul>
<h2>19.2.2 (December 11th, 2025)</h2>
<h2>React Server Components</h2>
<ul>
<li>Move <code>react-server-dom-webpack/*.unbundled</code> to private <code>react-server-dom-unbundled</code> (<a href="https://github.com/eps1lon"><code>@eps1lon</code></a> <a href="https://redirect.github.com/facebook/react/pull/35290">facebook/react#35290</a>)</li>
<li>Patch Promise cycles and toString on Server Functions (<a href="https://github.com/sebmarkbage"><code>@sebmarkbage</code></a>, <a href="https://github.com/unstubbable"><code>@unstubbable</code></a> <a href="https://redirect.github.com/facebook/react/pull/35289">#35289</a>, <a href="https://redirect.github.com/facebook/react/pull/35345">#35345</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/facebook/react/commit/612e371fb215498edde4c853bd1e0c8e9203808f"><code>612e371</code></a> Version 19.2.3</li>
<li><a href="https://github.com/facebook/react/commit/b910fc15e38d4fa80003819ddb7a928a3c3dca5d"><code>b910fc1</code></a> Version 19.2.2</li>
<li>See full diff in <a href="https://github.com/facebook/react/commits/v19.2.3/packages/react-dom">compare view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions
</details>
---
<sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
📋 Pull Request Information
Original PR: https://github.com/fosrl/pangolin/pull/2048
Author: @dependabot[bot]
Created: 12/12/2025
Status: ❌ Closed
Base:
main← Head:dependabot/npm_and_yarn/prod-patch-updates-793421fc1e📝 Commits (1)
d795057Bump the prod-patch-updates group with 4 updates📊 Changes
2 files changed (+25 additions, -25 deletions)
View changed files
📝
package-lock.json(+21 -21)📝
package.json(+4 -4)📄 Description
Bumps the prod-patch-updates group with 4 updates: drizzle-orm, eslint-config-next, react and react-dom.
Updates
drizzle-ormfrom 0.45.0 to 0.45.1Release notes
Sourced from drizzle-orm's releases.
Commits
a086f59Fixed pg-native Pool detection in node-postgres transactions breaking in envi...Updates
eslint-config-nextfrom 16.0.8 to 16.0.10Release notes
Sourced from eslint-config-next's releases.
Commits
581dee6v16.0.103f6a39fv16.0.9Updates
reactfrom 19.2.1 to 19.2.3Release notes
Sourced from react's releases.
Commits
612e371Version 19.2.3b910fc1Version 19.2.2Updates
react-domfrom 19.2.1 to 19.2.3Release notes
Sourced from react-dom's releases.
Commits
612e371Version 19.2.3b910fc1Version 19.2.2Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.