Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.
## 📋 Pull Request Information
**Original PR:** https://github.com/fosrl/pangolin/pull/3180
**Author:** [@dependabot[bot]](https://github.com/apps/dependabot)
**Created:** 5/28/2026
**Status:** ✅ Merged
**Merged:** 5/28/2026
**Merged by:** [@oschwartz10612](https://github.com/oschwartz10612)
**Base:** `main` ← **Head:** `dependabot/npm_and_yarn/prod-patch-updates-203742b32f`
---
### 📝 Commits (1)
- [`80f4dd0`](https://github.com/fosrl/pangolin/commit/80f4dd0e608107184127d46a13d81d4e2053a5b6) Bump the prod-patch-updates group across 1 directory with 5 updates
### 📊 Changes
**2 files changed** (+30 additions, -39 deletions)
<details>
<summary>View changed files</summary>
📝 `package-lock.json` (+25 -34)
📝 `package.json` (+5 -5)
</details>
### 📄 Description
Bumps the prod-patch-updates group with 5 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [@simplewebauthn/server](https://github.com/MasterKale/SimpleWebAuthn/tree/HEAD/packages/server) | `13.3.0` | `13.3.1` |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.100.10` | `5.100.14` |
| [nodemailer](https://github.com/nodemailer/nodemailer) | `8.0.7` | `8.0.9` |
| [resend](https://github.com/resend/resend-node) | `6.12.3` | `6.12.4` |
| [semver](https://github.com/npm/node-semver) | `7.8.0` | `7.8.1` |
Updates `@simplewebauthn/server` from 13.3.0 to 13.3.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/MasterKale/SimpleWebAuthn/releases">@simplewebauthn/server's releases</a>.</em></p>
<blockquote>
<h2>v13.3.1</h2>
<p><strong>Changes:</strong></p>
<ul>
<li><strong>[server]</strong> Fixed an issue with <code>verifyRegistrationResponse()</code> failing to verify some Packed and SafetyNet statements (<a href="https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/767">#767</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/MasterKale/SimpleWebAuthn/blob/master/CHANGELOG.md">@simplewebauthn/server's changelog</a>.</em></p>
<blockquote>
<h2>v13.3.1</h2>
<p><strong>Changes:</strong></p>
<ul>
<li><strong>[server]</strong> Fixed an issue with <code>verifyRegistrationResponse()</code> failing to verify some Packed and
SafetyNet statements (<a href="https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/767">#767</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/MasterKale/SimpleWebAuthn/commit/615538fb1a80d95f9cbb5790a670e5ae1146d455"><code>615538f</code></a> Update version to 13.3.1</li>
<li><a href="https://github.com/MasterKale/SimpleWebAuthn/commit/61601dd1b665aef19ff611f271beebe226673d71"><code>61601dd</code></a> Ignore E2E test for now</li>
<li><a href="https://github.com/MasterKale/SimpleWebAuthn/commit/6c43af766a6432d4e4ab65495bda9427e1650bfd"><code>6c43af7</code></a> Use attStmt.alg in Safety Net and Packed Full</li>
<li>See full diff in <a href="https://github.com/MasterKale/SimpleWebAuthn/commits/v13.3.1/packages/server">compare view</a></li>
</ul>
</details>
<br />
Updates `@tanstack/react-query` from 5.100.10 to 5.100.14
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/TanStack/query/releases">@tanstack/react-query's releases</a>.</em></p>
<blockquote>
<h2><code>@tanstack/react-query-devtools</code><a href="https://github.com/5"><code>@5</code></a>.100.14</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies [<a href="https://github.com/TanStack/query/commit/ed20b6d7541c908033acfcad92b0cd112930d1c3"><code>ed20b6d</code></a>]:
<ul>
<li><code>@tanstack/react-query</code><a href="https://github.com/5"><code>@5</code></a>.100.14</li>
<li><code>@tanstack/query-devtools</code><a href="https://github.com/5"><code>@5</code></a>.100.14</li>
</ul>
</li>
</ul>
<h2><code>@tanstack/react-query-next-experimental</code><a href="https://github.com/5"><code>@5</code></a>.100.14</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies [<a href="https://github.com/TanStack/query/commit/ed20b6d7541c908033acfcad92b0cd112930d1c3"><code>ed20b6d</code></a>]:
<ul>
<li><code>@tanstack/react-query</code><a href="https://github.com/5"><code>@5</code></a>.100.14</li>
</ul>
</li>
</ul>
<h2><code>@tanstack/react-query-persist-client</code><a href="https://github.com/5"><code>@5</code></a>.100.14</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies [<a href="https://github.com/TanStack/query/commit/ed20b6d7541c908033acfcad92b0cd112930d1c3"><code>ed20b6d</code></a>]:
<ul>
<li><code>@tanstack/react-query</code><a href="https://github.com/5"><code>@5</code></a>.100.14</li>
<li><code>@tanstack/query-persist-client-core</code><a href="https://github.com/5"><code>@5</code></a>.100.14</li>
</ul>
</li>
</ul>
<h2><code>@tanstack/react-query</code><a href="https://github.com/5"><code>@5</code></a>.100.14</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p>fix(react-query): do not go into optimistic fetching state when not subscribed (<a href="https://redirect.github.com/TanStack/query/pull/10759">#10759</a>)</p>
</li>
<li>
<p>Updated dependencies []:</p>
<ul>
<li><code>@tanstack/query-core</code><a href="https://github.com/5"><code>@5</code></a>.100.14</li>
</ul>
</li>
</ul>
<h2><code>@tanstack/react-query-devtools</code><a href="https://github.com/5"><code>@5</code></a>.100.13</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies []:
<ul>
<li><code>@tanstack/query-devtools</code><a href="https://github.com/5"><code>@5</code></a>.100.13</li>
<li><code>@tanstack/react-query</code><a href="https://github.com/5"><code>@5</code></a>.100.13</li>
</ul>
</li>
</ul>
<h2><code>@tanstack/react-query-next-experimental</code><a href="https://github.com/5"><code>@5</code></a>.100.13</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies []:
<ul>
<li><code>@tanstack/react-query</code><a href="https://github.com/5"><code>@5</code></a>.100.13</li>
</ul>
</li>
</ul>
<h2><code>@tanstack/react-query-persist-client</code><a href="https://github.com/5"><code>@5</code></a>.100.13</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies []:
<ul>
<li><code>@tanstack/query-persist-client-core</code><a href="https://github.com/5"><code>@5</code></a>.100.13</li>
<li><code>@tanstack/react-query</code><a href="https://github.com/5"><code>@5</code></a>.100.13</li>
</ul>
</li>
</ul>
<h2><code>@tanstack/react-query</code><a href="https://github.com/5"><code>@5</code></a>.100.13</h2>
<h3>Patch Changes</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md">@tanstack/react-query's changelog</a>.</em></p>
<blockquote>
<h2>5.100.14</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p>fix(react-query): do not go into optimistic fetching state when not subscribed (<a href="https://redirect.github.com/TanStack/query/pull/10759">#10759</a>)</p>
</li>
<li>
<p>Updated dependencies []:</p>
<ul>
<li><code>@tanstack/query-core</code><a href="https://github.com/5"><code>@5</code></a>.100.14</li>
</ul>
</li>
</ul>
<h2>5.100.13</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies [<a href="https://github.com/TanStack/query/commit/d423168f6261a5cb3d353e53b27c8150cc271151"><code>d423168</code></a>]:
<ul>
<li><code>@tanstack/query-core</code><a href="https://github.com/5"><code>@5</code></a>.100.13</li>
</ul>
</li>
</ul>
<h2>5.100.12</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies []:
<ul>
<li><code>@tanstack/query-core</code><a href="https://github.com/5"><code>@5</code></a>.100.12</li>
</ul>
</li>
</ul>
<h2>5.100.11</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies []:
<ul>
<li><code>@tanstack/query-core</code><a href="https://github.com/5"><code>@5</code></a>.100.11</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a href="https://github.com/TanStack/query/commits/@tanstack/react-query@5.100.14/packages/react-query">compare view</a></li>
</ul>
</details>
<br />
Updates `nodemailer` from 8.0.7 to 8.0.9
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/nodemailer/nodemailer/releases">nodemailer's releases</a>.</em></p>
<blockquote>
<h2>v8.0.9</h2>
<h2><a href="https://github.com/nodemailer/nodemailer/compare/v8.0.8...v8.0.9">8.0.9</a> (2026-05-26)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>two pending security advisories (jsonTransport access bypass, List-* CRLF injection) (<a href="https://redirect.github.com/nodemailer/nodemailer/issues/1820">#1820</a>) (<a href="https://github.com/nodemailer/nodemailer/commit/5f694977da2e0e13dc947037566e8e689a01217e">5f69497</a>)</li>
</ul>
<h2>v8.0.8</h2>
<h2><a href="https://github.com/nodemailer/nodemailer/compare/v8.0.7...v8.0.8">8.0.8</a> (2026-05-23)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>enforce strict TLS for OAuth2 and Ethereal credential requests (<a href="https://redirect.github.com/nodemailer/nodemailer/issues/1818">#1818</a>) (<a href="https://github.com/nodemailer/nodemailer/commit/833d6e58c8b717962bbb1b23e16923cd267c3bc9">833d6e5</a>)</li>
<li>four listener/stream leaks in SMTP transport, connection, pool (<a href="https://redirect.github.com/nodemailer/nodemailer/issues/1817">#1817</a>) (<a href="https://github.com/nodemailer/nodemailer/commit/850bb91bff7707ed498c1424df01c4e5b30ea14b">850bb91</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md">nodemailer's changelog</a>.</em></p>
<blockquote>
<h2><a href="https://github.com/nodemailer/nodemailer/compare/v8.0.8...v8.0.9">8.0.9</a> (2026-05-26)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>two pending security advisories (jsonTransport access bypass, List-* CRLF injection) (<a href="https://redirect.github.com/nodemailer/nodemailer/issues/1820">#1820</a>) (<a href="https://github.com/nodemailer/nodemailer/commit/5f694977da2e0e13dc947037566e8e689a01217e">5f69497</a>)</li>
</ul>
<h2><a href="https://github.com/nodemailer/nodemailer/compare/v8.0.7...v8.0.8">8.0.8</a> (2026-05-23)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>enforce strict TLS for OAuth2 and Ethereal credential requests (<a href="https://redirect.github.com/nodemailer/nodemailer/issues/1818">#1818</a>) (<a href="https://github.com/nodemailer/nodemailer/commit/833d6e58c8b717962bbb1b23e16923cd267c3bc9">833d6e5</a>)</li>
<li>four listener/stream leaks in SMTP transport, connection, pool (<a href="https://redirect.github.com/nodemailer/nodemailer/issues/1817">#1817</a>) (<a href="https://github.com/nodemailer/nodemailer/commit/850bb91bff7707ed498c1424df01c4e5b30ea14b">850bb91</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/nodemailer/nodemailer/commit/07303cb0cb34b97b44856f5de3eff212b63e4567"><code>07303cb</code></a> chore(master): release 8.0.9 (<a href="https://redirect.github.com/nodemailer/nodemailer/issues/1821">#1821</a>)</li>
<li><a href="https://github.com/nodemailer/nodemailer/commit/5f694977da2e0e13dc947037566e8e689a01217e"><code>5f69497</code></a> fix: two pending security advisories (jsonTransport access bypass, List-* CRL...</li>
<li><a href="https://github.com/nodemailer/nodemailer/commit/15138a84c543c20aa399218534cdbbfa2ea1ce55"><code>15138a8</code></a> chore(master): release 8.0.8 (<a href="https://redirect.github.com/nodemailer/nodemailer/issues/1819">#1819</a>)</li>
<li><a href="https://github.com/nodemailer/nodemailer/commit/850bb91bff7707ed498c1424df01c4e5b30ea14b"><code>850bb91</code></a> fix: four listener/stream leaks in SMTP transport, connection, pool (<a href="https://redirect.github.com/nodemailer/nodemailer/issues/1817">#1817</a>)</li>
<li><a href="https://github.com/nodemailer/nodemailer/commit/833d6e58c8b717962bbb1b23e16923cd267c3bc9"><code>833d6e5</code></a> fix: enforce strict TLS for OAuth2 and Ethereal credential requests (<a href="https://redirect.github.com/nodemailer/nodemailer/issues/1818">#1818</a>)</li>
<li>See full diff in <a href="https://github.com/nodemailer/nodemailer/compare/v8.0.7...v8.0.9">compare view</a></li>
</ul>
</details>
<br />
Updates `resend` from 6.12.3 to 6.12.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/resend/resend-node/releases">resend's releases</a>.</em></p>
<blockquote>
<h2>v6.12.4</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(deps): update dependency next to v16.2.6 [security] by <a href="https://github.com/renovate"><code>@renovate</code></a>[bot] in <a href="https://redirect.github.com/resend/resend-node/pull/957">resend/resend-node#957</a></li>
<li>chore(dev-660): harden github actions workflows by <a href="https://github.com/felipefreitag"><code>@felipefreitag</code></a> in <a href="https://redirect.github.com/resend/resend-node/pull/959">resend/resend-node#959</a></li>
<li>chore: add sync-prs-to-linear action by <a href="https://github.com/dielduarte"><code>@dielduarte</code></a> in <a href="https://redirect.github.com/resend/resend-node/pull/961">resend/resend-node#961</a></li>
<li>fix: rename misnamed <code>get-contact.interface.ts</code> to <code>get-topic.interface.ts</code> in topics module by <a href="https://github.com/wesleyramalho"><code>@wesleyramalho</code></a> in <a href="https://redirect.github.com/resend/resend-node/pull/903">resend/resend-node#903</a></li>
<li>fix: avoid mutating payloads in emails, broadcasts, and templates by <a href="https://github.com/Shubhdeep12"><code>@Shubhdeep12</code></a> in <a href="https://redirect.github.com/resend/resend-node/pull/862">resend/resend-node#862</a></li>
<li>feat: add optional baseUrl and userAgent to Resend constructor by <a href="https://github.com/xiaoyu2er"><code>@xiaoyu2er</code></a> in <a href="https://redirect.github.com/resend/resend-node/pull/839">resend/resend-node#839</a></li>
<li>chore: bump public-shared-workflows hash by <a href="https://github.com/dielduarte"><code>@dielduarte</code></a> in <a href="https://redirect.github.com/resend/resend-node/pull/965">resend/resend-node#965</a></li>
<li>chore: bump public-shared-workflows hash by <a href="https://github.com/dielduarte"><code>@dielduarte</code></a> in <a href="https://redirect.github.com/resend/resend-node/pull/966">resend/resend-node#966</a></li>
<li>refactor: align <code>delete</code> method with other HTTP methods in Resend class by <a href="https://github.com/wesleyramalho"><code>@wesleyramalho</code></a> in <a href="https://redirect.github.com/resend/resend-node/pull/904">resend/resend-node#904</a></li>
<li>fix: to support <code>@react-email/render</code> exports across versions in templates by <a href="https://github.com/Shubhdeep12"><code>@Shubhdeep12</code></a> in <a href="https://redirect.github.com/resend/resend-node/pull/863">resend/resend-node#863</a></li>
<li>fix: replace svix with standardwebhooks to reduce install size (<a href="https://redirect.github.com/resend/resend-node/issues/969">#969</a>) by <a href="https://github.com/dielduarte"><code>@dielduarte</code></a> in <a href="https://redirect.github.com/resend/resend-node/pull/970">resend/resend-node#970</a></li>
<li>chore: bump version to 6.12.4 by <a href="https://github.com/dielduarte"><code>@dielduarte</code></a> in <a href="https://redirect.github.com/resend/resend-node/pull/971">resend/resend-node#971</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/resend/resend-node/compare/v6.12.3...v6.12.4">https://github.com/resend/resend-node/compare/v6.12.3...v6.12.4</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/resend/resend-node/commit/58db880a67575d9231bcbc5cae9c438793698f05"><code>58db880</code></a> chore: bump version to 6.12.4 (<a href="https://redirect.github.com/resend/resend-node/issues/971">#971</a>)</li>
<li><a href="https://github.com/resend/resend-node/commit/63f5ddb8fc0d35fa590e27f7ca4d69d3051969db"><code>63f5ddb</code></a> fix: replace svix with standardwebhooks to reduce install size (<a href="https://redirect.github.com/resend/resend-node/issues/969">#969</a>) (<a href="https://redirect.github.com/resend/resend-node/issues/970">#970</a>)</li>
<li><a href="https://github.com/resend/resend-node/commit/45dc73dae27646930d460d52de7528640ba9fb8e"><code>45dc73d</code></a> fix: to support <code>@react-email/render</code> exports across versions in templates (<a href="https://redirect.github.com/resend/resend-node/issues/863">#863</a>)</li>
<li><a href="https://github.com/resend/resend-node/commit/24950d7aa54bf19d929fe26e63557611411938cb"><code>24950d7</code></a> refactor: align <code>delete</code> method with other HTTP methods in Resend class (<a href="https://redirect.github.com/resend/resend-node/issues/904">#904</a>)</li>
<li><a href="https://github.com/resend/resend-node/commit/2759316719f54e602dbf3d0b1fa58703f52b79c0"><code>2759316</code></a> chore: bump public-shared-workflows hash (<a href="https://redirect.github.com/resend/resend-node/issues/966">#966</a>)</li>
<li><a href="https://github.com/resend/resend-node/commit/fa04efcf72a2c1d89a6530ee14ce08986a4c1a08"><code>fa04efc</code></a> chore: bump public-shared-workflows hash (<a href="https://redirect.github.com/resend/resend-node/issues/965">#965</a>)</li>
<li><a href="https://github.com/resend/resend-node/commit/77bbf2d63285a1e527fe3fc85493235a6131d084"><code>77bbf2d</code></a> feat: add optional baseUrl and userAgent to Resend constructor (<a href="https://redirect.github.com/resend/resend-node/issues/839">#839</a>)</li>
<li><a href="https://github.com/resend/resend-node/commit/ebdb2d3f1ad3880ed81e4bb437796577e3e2ab6b"><code>ebdb2d3</code></a> fix: avoid mutating payloads in emails, broadcasts, and templates (<a href="https://redirect.github.com/resend/resend-node/issues/862">#862</a>)</li>
<li><a href="https://github.com/resend/resend-node/commit/674ab1bf6c09ddc1942d317a9e2939692fd32340"><code>674ab1b</code></a> fix: rename misnamed <code>get-contact.interface.ts</code> to <code>get-topic.interface.ts</code> i...</li>
<li><a href="https://github.com/resend/resend-node/commit/ac0c09ffc9dde924b5b147b8767c1b5e636778f6"><code>ac0c09f</code></a> chore: add sync-prs-to-linear action (<a href="https://redirect.github.com/resend/resend-node/issues/961">#961</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/resend/resend-node/compare/v6.12.3...v6.12.4">compare view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a href="https://www.npmjs.com/~dielduarte">dielduarte</a>, a new releaser for resend since your current version.</p>
</details>
<br />
Updates `semver` from 7.8.0 to 7.8.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/npm/node-semver/releases">semver's releases</a>.</em></p>
<blockquote>
<h2>v7.8.1</h2>
<h2><a href="https://github.com/npm/node-semver/compare/v7.8.0...v7.8.1">7.8.1</a> (2026-05-21)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><a href="https://github.com/npm/node-semver/commit/17aa702d91166472b197a2ea768f085083bee2e4"><code>17aa702</code></a> <a href="https://redirect.github.com/npm/node-semver/pull/869">#869</a> strip build metadata before comparator trimming (<a href="https://redirect.github.com/npm/node-semver/issues/869">#869</a>) (<a href="https://github.com/owlstronaut"><code>@owlstronaut</code></a>)</li>
<li><a href="https://github.com/npm/node-semver/commit/5f3ca133e040210b6ea80c350a1d61d9da02e722"><code>5f3ca13</code></a> <a href="https://redirect.github.com/npm/node-semver/pull/867">#867</a> handle prerelease bounds in subset (<a href="https://redirect.github.com/npm/node-semver/issues/867">#867</a>) (<a href="https://github.com/puneetdixit200"><code>@puneetdixit200</code></a>, Puneet Dixit)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/npm/node-semver/blob/main/CHANGELOG.md">semver's changelog</a>.</em></p>
<blockquote>
<h2><a href="https://github.com/npm/node-semver/compare/v7.8.0...v7.8.1">7.8.1</a> (2026-05-21)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><a href="https://github.com/npm/node-semver/commit/17aa702d91166472b197a2ea768f085083bee2e4"><code>17aa702</code></a> <a href="https://redirect.github.com/npm/node-semver/pull/869">#869</a> strip build metadata before comparator trimming (<a href="https://redirect.github.com/npm/node-semver/issues/869">#869</a>) (<a href="https://github.com/owlstronaut"><code>@owlstronaut</code></a>)</li>
<li><a href="https://github.com/npm/node-semver/commit/5f3ca133e040210b6ea80c350a1d61d9da02e722"><code>5f3ca13</code></a> <a href="https://redirect.github.com/npm/node-semver/pull/867">#867</a> handle prerelease bounds in subset (<a href="https://redirect.github.com/npm/node-semver/issues/867">#867</a>) (<a href="https://github.com/puneetdixit200"><code>@puneetdixit200</code></a>, Puneet Dixit)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/npm/node-semver/commit/76416081a8413383cf6e24c82cafa438bd076d41"><code>7641608</code></a> chore: release 7.8.1 (<a href="https://redirect.github.com/npm/node-semver/issues/868">#868</a>)</li>
<li><a href="https://github.com/npm/node-semver/commit/17aa702d91166472b197a2ea768f085083bee2e4"><code>17aa702</code></a> fix: strip build metadata before comparator trimming (<a href="https://redirect.github.com/npm/node-semver/issues/869">#869</a>)</li>
<li><a href="https://github.com/npm/node-semver/commit/5f3ca133e040210b6ea80c350a1d61d9da02e722"><code>5f3ca13</code></a> fix: handle prerelease bounds in subset (<a href="https://redirect.github.com/npm/node-semver/issues/867">#867</a>)</li>
<li>See full diff in <a href="https://github.com/npm/node-semver/compare/v7.8.0...v7.8.1">compare view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions
</details>
---
<sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
📋 Pull Request Information
Original PR: https://github.com/fosrl/pangolin/pull/3180
Author: @dependabot[bot]
Created: 5/28/2026
Status: ✅ Merged
Merged: 5/28/2026
Merged by: @oschwartz10612
Base:
main← Head:dependabot/npm_and_yarn/prod-patch-updates-203742b32f📝 Commits (1)
80f4dd0Bump the prod-patch-updates group across 1 directory with 5 updates📊 Changes
2 files changed (+30 additions, -39 deletions)
View changed files
📝
package-lock.json(+25 -34)📝
package.json(+5 -5)📄 Description
Bumps the prod-patch-updates group with 5 updates in the / directory:
13.3.013.3.15.100.105.100.148.0.78.0.96.12.36.12.47.8.07.8.1Updates
@simplewebauthn/serverfrom 13.3.0 to 13.3.1Release notes
Sourced from @simplewebauthn/server's releases.
Changelog
Sourced from @simplewebauthn/server's changelog.
Commits
615538fUpdate version to 13.3.161601ddIgnore E2E test for now6c43af7Use attStmt.alg in Safety Net and Packed FullUpdates
@tanstack/react-queryfrom 5.100.10 to 5.100.14Release notes
Sourced from @tanstack/react-query's releases.
... (truncated)
Changelog
Sourced from @tanstack/react-query's changelog.
Commits
Updates
nodemailerfrom 8.0.7 to 8.0.9Release notes
Sourced from nodemailer's releases.
Changelog
Sourced from nodemailer's changelog.
Commits
07303cbchore(master): release 8.0.9 (#1821)5f69497fix: two pending security advisories (jsonTransport access bypass, List-* CRL...15138a8chore(master): release 8.0.8 (#1819)850bb91fix: four listener/stream leaks in SMTP transport, connection, pool (#1817)833d6e5fix: enforce strict TLS for OAuth2 and Ethereal credential requests (#1818)Updates
resendfrom 6.12.3 to 6.12.4Release notes
Sourced from resend's releases.
Commits
58db880chore: bump version to 6.12.4 (#971)63f5ddbfix: replace svix with standardwebhooks to reduce install size (#969) (#970)45dc73dfix: to support@react-email/renderexports across versions in templates (#863)24950d7refactor: aligndeletemethod with other HTTP methods in Resend class (#904)2759316chore: bump public-shared-workflows hash (#966)fa04efcchore: bump public-shared-workflows hash (#965)77bbf2dfeat: add optional baseUrl and userAgent to Resend constructor (#839)ebdb2d3fix: avoid mutating payloads in emails, broadcasts, and templates (#862)674ab1bfix: rename misnamedget-contact.interface.tstoget-topic.interface.tsi...ac0c09fchore: add sync-prs-to-linear action (#961)Maintainer changes
This version was pushed to npm by dielduarte, a new releaser for resend since your current version.
Updates
semverfrom 7.8.0 to 7.8.1Release notes
Sourced from semver's releases.
Changelog
Sourced from semver's changelog.
Commits
7641608chore: release 7.8.1 (#868)17aa702fix: strip build metadata before comparator trimming (#869)5f3ca13fix: handle prerelease bounds in subset (#867)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.