This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @react-email/render since your current version.
Fixed sql.identifier(), sql.as() escaping issues. Previously all the values passed to this functions were not properly escaped
causing a possible SQL Injection (CWE-89) vulnerability
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for express-rate-limit since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.
## 📋 Pull Request Information
**Original PR:** https://github.com/fosrl/pangolin/pull/2808
**Author:** [@dependabot[bot]](https://github.com/apps/dependabot)
**Created:** 4/8/2026
**Status:** ❌ Closed
**Base:** `main` ← **Head:** `dependabot/npm_and_yarn/prod-patch-updates-c9865a2238`
---
### 📝 Commits (1)
- [`f38c334`](https://github.com/fosrl/pangolin/commit/f38c33418fdbbcd89b56df41ff036213071385cf) Bump the prod-patch-updates group across 1 directory with 10 updates
### 📊 Changes
**2 files changed** (+88 additions, -88 deletions)
<details>
<summary>View changed files</summary>
📝 `package-lock.json` (+77 -77)
📝 `package.json` (+11 -11)
</details>
### 📄 Description
Bumps the prod-patch-updates group with 10 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [@headlessui/react](https://github.com/tailwindlabs/headlessui/tree/HEAD/packages/@headlessui-react) | `2.2.9` | `2.2.10` |
| [@react-email/components](https://github.com/resend/react-email/tree/HEAD/packages/components) | `1.0.8` | `1.0.11` |
| [@react-email/render](https://github.com/resend/react-email/tree/HEAD/packages/render) | `2.0.4` | `2.0.5` |
| [@react-email/tailwind](https://github.com/resend/react-email/tree/HEAD/packages/tailwind) | `2.0.5` | `2.0.7` |
| [drizzle-orm](https://github.com/drizzle-team/drizzle-orm) | `0.45.1` | `0.45.2` |
| [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) | `8.3.0` | `8.3.2` |
| [ioredis](https://github.com/luin/ioredis) | `5.10.0` | `5.10.1` |
| [maxmind](https://github.com/runk/node-maxmind) | `5.0.5` | `5.0.6` |
| [nodemailer](https://github.com/nodemailer/nodemailer) | `8.0.4` | `8.0.5` |
| [use-debounce](https://github.com/xnimorz/use-debounce) | `10.1.0` | `10.1.1` |
Updates `@headlessui/react` from 2.2.9 to 2.2.10
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/tailwindlabs/headlessui/releases"><code>@headlessui/react</code>'s releases</a>.</em></p>
<blockquote>
<h2><code>@headlessui/react</code><a href="https://github.com/v2"><code>@v2</code></a>.2.10</h2>
<h3>Fixed</h3>
<ul>
<li>Don’t render <code><Portal></code> while hydrating (<a href="https://redirect.github.com/tailwindlabs/headlessui/pull/3825">#3825</a>)</li>
<li>Fix passing props on <code>Fragment</code> error due to <code>Symbol(react.lazy)</code> (<a href="https://redirect.github.com/tailwindlabs/headlessui/pull/3873">#3873</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/tailwindlabs/headlessui/blob/main/packages/@headlessui-react/CHANGELOG.md"><code>@headlessui/react</code>'s changelog</a>.</em></p>
<blockquote>
<h2>[2.2.10] - 2026-04-07</h2>
<h3>Fixed</h3>
<ul>
<li>Don’t render <code><Portal></code> while hydrating (<a href="https://redirect.github.com/tailwindlabs/headlessui/pull/3825">#3825</a>)</li>
<li>Fix passing props on <code>Fragment</code> error due to <code>Symbol(react.lazy)</code> (<a href="https://redirect.github.com/tailwindlabs/headlessui/pull/3873">#3873</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/tailwindlabs/headlessui/commit/d13526d02a2de92c4ad7b62c15cd980636543fe2"><code>d13526d</code></a> 2.2.10 - <code>@headlessui/react</code></li>
<li><a href="https://github.com/tailwindlabs/headlessui/commit/b0dcd8fc6ce78bc80221e602c0b1aa94e304ef81"><code>b0dcd8f</code></a> Handle props on Fragment error due to <code>Symbol(react.lazy)</code> (<a href="https://github.com/tailwindlabs/headlessui/tree/HEAD/packages/@headlessui-react/issues/3873">#3873</a>)</li>
<li><a href="https://github.com/tailwindlabs/headlessui/commit/7baca70434e11432b4210e87558cd452801bb2f9"><code>7baca70</code></a> Don’t render <code>\<Portal></code>s while hydrating (<a href="https://github.com/tailwindlabs/headlessui/tree/HEAD/packages/@headlessui-react/issues/3825">#3825</a>)</li>
<li><a href="https://github.com/tailwindlabs/headlessui/commit/5ef7395d86dc322ea056c4839bfd0910299b3808"><code>5ef7395</code></a> Add <code>RefProp</code> to <code>props</code> (<a href="https://github.com/tailwindlabs/headlessui/tree/HEAD/packages/@headlessui-react/issues/3823">#3823</a>)</li>
<li>See full diff in <a href="https://github.com/tailwindlabs/headlessui/commits/@headlessui/react@v2.2.10/packages/@headlessui-react">compare view</a></li>
</ul>
</details>
<br />
Updates `@react-email/components` from 1.0.8 to 1.0.11
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/resend/react-email/releases"><code>@react-email/components</code>'s releases</a>.</em></p>
<blockquote>
<h2><code>@react-email/components</code><a href="https://github.com/1"><code>@1</code></a>.0.11</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies [5a23505]</li>
<li>Updated dependencies [ecfc141]
<ul>
<li><code>@react-email/tailwind</code><a href="https://github.com/2"><code>@2</code></a>.0.7</li>
<li><code>@react-email/render</code><a href="https://github.com/2"><code>@2</code></a>.0.5</li>
<li><code>@react-email/body</code><a href="https://github.com/0"><code>@0</code></a>.3.0</li>
<li><code>@react-email/button</code><a href="https://github.com/0"><code>@0</code></a>.2.1</li>
<li><code>@react-email/code-block</code><a href="https://github.com/0"><code>@0</code></a>.2.1</li>
<li><code>@react-email/code-inline</code><a href="https://github.com/0"><code>@0</code></a>.0.6</li>
<li><code>@react-email/column</code><a href="https://github.com/0"><code>@0</code></a>.0.14</li>
<li><code>@react-email/container</code><a href="https://github.com/0"><code>@0</code></a>.0.16</li>
<li><code>@react-email/font</code><a href="https://github.com/0"><code>@0</code></a>.0.10</li>
<li><code>@react-email/head</code><a href="https://github.com/0"><code>@0</code></a>.0.13</li>
<li><code>@react-email/heading</code><a href="https://github.com/0"><code>@0</code></a>.0.16</li>
<li><code>@react-email/hr</code><a href="https://github.com/0"><code>@0</code></a>.0.12</li>
<li><code>@react-email/html</code><a href="https://github.com/0"><code>@0</code></a>.0.12</li>
<li><code>@react-email/img</code><a href="https://github.com/0"><code>@0</code></a>.0.12</li>
<li><code>@react-email/link</code><a href="https://github.com/0"><code>@0</code></a>.0.13</li>
<li><code>@react-email/markdown</code><a href="https://github.com/0"><code>@0</code></a>.0.18</li>
<li><code>@react-email/preview</code><a href="https://github.com/0"><code>@0</code></a>.0.14</li>
<li><code>@react-email/row</code><a href="https://github.com/0"><code>@0</code></a>.0.13</li>
<li><code>@react-email/section</code><a href="https://github.com/0"><code>@0</code></a>.0.17</li>
<li><code>@react-email/text</code><a href="https://github.com/0"><code>@0</code></a>.1.6</li>
</ul>
</li>
</ul>
<h2><code>@react-email/components</code><a href="https://github.com/1"><code>@1</code></a>.0.10</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies [444d9df]
<ul>
<li><code>@react-email/tailwind</code><a href="https://github.com/2"><code>@2</code></a>.0.6</li>
</ul>
</li>
</ul>
<h2><code>@react-email/components</code><a href="https://github.com/1"><code>@1</code></a>.0.9</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies [493f367]
<ul>
<li><code>@react-email/body</code><a href="https://github.com/0"><code>@0</code></a>.3.0</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/resend/react-email/blob/canary/packages/components/CHANGELOG.md"><code>@react-email/components</code>'s changelog</a>.</em></p>
<blockquote>
<h2>1.0.11</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies [5a23505]</li>
<li>Updated dependencies [ecfc141]
<ul>
<li><code>@react-email/tailwind</code><a href="https://github.com/2"><code>@2</code></a>.0.7</li>
<li><code>@react-email/render</code><a href="https://github.com/2"><code>@2</code></a>.0.5</li>
<li><code>@react-email/body</code><a href="https://github.com/0"><code>@0</code></a>.3.0</li>
<li><code>@react-email/button</code><a href="https://github.com/0"><code>@0</code></a>.2.1</li>
<li><code>@react-email/code-block</code><a href="https://github.com/0"><code>@0</code></a>.2.1</li>
<li><code>@react-email/code-inline</code><a href="https://github.com/0"><code>@0</code></a>.0.6</li>
<li><code>@react-email/column</code><a href="https://github.com/0"><code>@0</code></a>.0.14</li>
<li><code>@react-email/container</code><a href="https://github.com/0"><code>@0</code></a>.0.16</li>
<li><code>@react-email/font</code><a href="https://github.com/0"><code>@0</code></a>.0.10</li>
<li><code>@react-email/head</code><a href="https://github.com/0"><code>@0</code></a>.0.13</li>
<li><code>@react-email/heading</code><a href="https://github.com/0"><code>@0</code></a>.0.16</li>
<li><code>@react-email/hr</code><a href="https://github.com/0"><code>@0</code></a>.0.12</li>
<li><code>@react-email/html</code><a href="https://github.com/0"><code>@0</code></a>.0.12</li>
<li><code>@react-email/img</code><a href="https://github.com/0"><code>@0</code></a>.0.12</li>
<li><code>@react-email/link</code><a href="https://github.com/0"><code>@0</code></a>.0.13</li>
<li><code>@react-email/markdown</code><a href="https://github.com/0"><code>@0</code></a>.0.18</li>
<li><code>@react-email/preview</code><a href="https://github.com/0"><code>@0</code></a>.0.14</li>
<li><code>@react-email/row</code><a href="https://github.com/0"><code>@0</code></a>.0.13</li>
<li><code>@react-email/section</code><a href="https://github.com/0"><code>@0</code></a>.0.17</li>
<li><code>@react-email/text</code><a href="https://github.com/0"><code>@0</code></a>.1.6</li>
</ul>
</li>
</ul>
<h2>1.0.10</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies [444d9df]
<ul>
<li><code>@react-email/tailwind</code><a href="https://github.com/2"><code>@2</code></a>.0.6</li>
</ul>
</li>
</ul>
<h2>1.0.9</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies [493f367]
<ul>
<li><code>@react-email/body</code><a href="https://github.com/0"><code>@0</code></a>.3.0</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/resend/react-email/commit/1191b35432d7c7b26df2cbbbe760efa14b0c08e0"><code>1191b35</code></a> chore(root): version packages (<a href="https://github.com/resend/react-email/tree/HEAD/packages/components/issues/3084">#3084</a>)</li>
<li><a href="https://github.com/resend/react-email/commit/32b0eba91288d24f682639e966fcff64297f35f6"><code>32b0eba</code></a> chore(root): version packages (<a href="https://github.com/resend/react-email/tree/HEAD/packages/components/issues/3073">#3073</a>)</li>
<li><a href="https://github.com/resend/react-email/commit/197d094d127725c52d6625080a4dc631296d33cd"><code>197d094</code></a> chore: version packages (<a href="https://github.com/resend/react-email/tree/HEAD/packages/components/issues/3035">#3035</a>)</li>
<li><a href="https://github.com/resend/react-email/commit/1f27dcd9c38d50927059dba4f2fb7b59cf7c7ddc"><code>1f27dcd</code></a> feat: pnpm catalogs (<a href="https://github.com/resend/react-email/tree/HEAD/packages/components/issues/3014">#3014</a>)</li>
<li><a href="https://github.com/resend/react-email/commit/11aa935196e3da315be4b4e8711f61efeb5c9f75"><code>11aa935</code></a> chore(deps): update dependency tsdown to v0.19.0 (<a href="https://github.com/resend/react-email/tree/HEAD/packages/components/issues/2857">#2857</a>)</li>
<li>See full diff in <a href="https://github.com/resend/react-email/commits/@react-email/components@1.0.11/packages/components">compare view</a></li>
</ul>
</details>
<br />
Updates `@react-email/render` from 2.0.4 to 2.0.5
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/resend/react-email/releases"><code>@react-email/render</code>'s releases</a>.</em></p>
<blockquote>
<h2><code>@react-email/render</code><a href="https://github.com/2"><code>@2</code></a>.0.5</h2>
<h3>Patch Changes</h3>
<ul>
<li>ecfc141: fix process crashes in client errors</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/resend/react-email/blob/canary/packages/render/CHANGELOG.md"><code>@react-email/render</code>'s changelog</a>.</em></p>
<blockquote>
<h2>2.0.5</h2>
<h3>Patch Changes</h3>
<ul>
<li>ecfc141: fix process crashes in client errors</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/resend/react-email/commit/f6cfef07e1f40680fec66103265a10e0e49a42d8"><code>f6cfef0</code></a> fix(render): await stream.allReady before reading renderToReadableStream outp...</li>
<li><a href="https://github.com/resend/react-email/commit/1191b35432d7c7b26df2cbbbe760efa14b0c08e0"><code>1191b35</code></a> chore(root): version packages (<a href="https://github.com/resend/react-email/tree/HEAD/packages/render/issues/3084">#3084</a>)</li>
<li><a href="https://github.com/resend/react-email/commit/ecfc1415b4389560f790bbbb175d711d5a1be421"><code>ecfc141</code></a> fix: prevent process crash by rejecting error instead of throwing in renderTo...</li>
<li><a href="https://github.com/resend/react-email/commit/1f27dcd9c38d50927059dba4f2fb7b59cf7c7ddc"><code>1f27dcd</code></a> feat: pnpm catalogs (<a href="https://github.com/resend/react-email/tree/HEAD/packages/render/issues/3014">#3014</a>)</li>
<li><a href="https://github.com/resend/react-email/commit/01a424b2631d17edff7e1295ff3c41bcd28d4421"><code>01a424b</code></a> chore(deps): update dependency prettier to v3.8.1 (<a href="https://github.com/resend/react-email/tree/HEAD/packages/render/issues/2839">#2839</a>)</li>
<li><a href="https://github.com/resend/react-email/commit/11aa935196e3da315be4b4e8711f61efeb5c9f75"><code>11aa935</code></a> chore(deps): update dependency tsdown to v0.19.0 (<a href="https://github.com/resend/react-email/tree/HEAD/packages/render/issues/2857">#2857</a>)</li>
<li><a href="https://github.com/resend/react-email/commit/d2972c99cff3c7232a0294e00388ad0e459ce0e9"><code>d2972c9</code></a> fix(render): suspense tests (<a href="https://github.com/resend/react-email/tree/HEAD/packages/render/issues/2964">#2964</a>)</li>
<li><a href="https://github.com/resend/react-email/commit/9015f76aebee40d0e30d4432f0d818055cba4196"><code>9015f76</code></a> chore: update react types (<a href="https://github.com/resend/react-email/tree/HEAD/packages/render/issues/2952">#2952</a>)</li>
<li>See full diff in <a href="https://github.com/resend/react-email/commits/@react-email/render@2.0.5/packages/render">compare view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by [GitHub Actions](<a href="https://www.npmjs.com/~GitHub">https://www.npmjs.com/~GitHub</a> Actions), a new releaser for <code>@react-email/render</code> since your current version.</p>
</details>
<br />
Updates `@react-email/tailwind` from 2.0.5 to 2.0.7
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/resend/react-email/releases"><code>@react-email/tailwind</code>'s releases</a>.</em></p>
<blockquote>
<h2><code>@react-email/tailwind</code><a href="https://github.com/2"><code>@2</code></a>.0.7</h2>
<h3>Patch Changes</h3>
<ul>
<li>5a23505: use unpinned version for tailwindcss again
<ul>
<li><code>@react-email/body</code><a href="https://github.com/0"><code>@0</code></a>.3.0</li>
<li><code>@react-email/button</code><a href="https://github.com/0"><code>@0</code></a>.2.1</li>
<li><code>@react-email/code-block</code><a href="https://github.com/0"><code>@0</code></a>.2.1</li>
<li><code>@react-email/code-inline</code><a href="https://github.com/0"><code>@0</code></a>.0.6</li>
<li><code>@react-email/container</code><a href="https://github.com/0"><code>@0</code></a>.0.16</li>
<li><code>@react-email/heading</code><a href="https://github.com/0"><code>@0</code></a>.0.16</li>
<li><code>@react-email/hr</code><a href="https://github.com/0"><code>@0</code></a>.0.12</li>
<li><code>@react-email/img</code><a href="https://github.com/0"><code>@0</code></a>.0.12</li>
<li><code>@react-email/link</code><a href="https://github.com/0"><code>@0</code></a>.0.13</li>
<li><code>@react-email/preview</code><a href="https://github.com/0"><code>@0</code></a>.0.14</li>
<li><code>@react-email/text</code><a href="https://github.com/0"><code>@0</code></a>.1.6</li>
</ul>
</li>
</ul>
<h2><code>@react-email/tailwind</code><a href="https://github.com/2"><code>@2</code></a>.0.6</h2>
<h3>Patch Changes</h3>
<ul>
<li>444d9df: allow for any peer version on body, button, code-block, code-inline, container, heading, hr, img, link, preview, text</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/resend/react-email/blob/canary/packages/tailwind/CHANGELOG.md"><code>@react-email/tailwind</code>'s changelog</a>.</em></p>
<blockquote>
<h2>2.0.7</h2>
<h3>Patch Changes</h3>
<ul>
<li>5a23505: use unpinned version for tailwindcss again
<ul>
<li><code>@react-email/body</code><a href="https://github.com/0"><code>@0</code></a>.3.0</li>
<li><code>@react-email/button</code><a href="https://github.com/0"><code>@0</code></a>.2.1</li>
<li><code>@react-email/code-block</code><a href="https://github.com/0"><code>@0</code></a>.2.1</li>
<li><code>@react-email/code-inline</code><a href="https://github.com/0"><code>@0</code></a>.0.6</li>
<li><code>@react-email/container</code><a href="https://github.com/0"><code>@0</code></a>.0.16</li>
<li><code>@react-email/heading</code><a href="https://github.com/0"><code>@0</code></a>.0.16</li>
<li><code>@react-email/hr</code><a href="https://github.com/0"><code>@0</code></a>.0.12</li>
<li><code>@react-email/img</code><a href="https://github.com/0"><code>@0</code></a>.0.12</li>
<li><code>@react-email/link</code><a href="https://github.com/0"><code>@0</code></a>.0.13</li>
<li><code>@react-email/preview</code><a href="https://github.com/0"><code>@0</code></a>.0.14</li>
<li><code>@react-email/text</code><a href="https://github.com/0"><code>@0</code></a>.1.6</li>
</ul>
</li>
</ul>
<h2>2.0.6</h2>
<h3>Patch Changes</h3>
<ul>
<li>444d9df: allow for any peer version on body, button, code-block, code-inline, container, heading, hr, img, link, preview, text</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/resend/react-email/commit/1191b35432d7c7b26df2cbbbe760efa14b0c08e0"><code>1191b35</code></a> chore(root): version packages (<a href="https://github.com/resend/react-email/tree/HEAD/packages/tailwind/issues/3084">#3084</a>)</li>
<li><a href="https://github.com/resend/react-email/commit/32b0eba91288d24f682639e966fcff64297f35f6"><code>32b0eba</code></a> chore(root): version packages (<a href="https://github.com/resend/react-email/tree/HEAD/packages/tailwind/issues/3073">#3073</a>)</li>
<li><a href="https://github.com/resend/react-email/commit/444d9df97aa1aaa9954bcc52d20e59a5c2f367fd"><code>444d9df</code></a> fix(tailwind): use caret ranges for internal peer dependencies (<a href="https://github.com/resend/react-email/tree/HEAD/packages/tailwind/issues/3060">#3060</a>)</li>
<li><a href="https://github.com/resend/react-email/commit/1f27dcd9c38d50927059dba4f2fb7b59cf7c7ddc"><code>1f27dcd</code></a> feat: pnpm catalogs (<a href="https://github.com/resend/react-email/tree/HEAD/packages/tailwind/issues/3014">#3014</a>)</li>
<li><a href="https://github.com/resend/react-email/commit/e64cf9ff1f3fb11302c79e199d4446d39ac2ca5c"><code>e64cf9f</code></a> chore: workflow for e2e, only tailwind for now (<a href="https://github.com/resend/react-email/tree/HEAD/packages/tailwind/issues/2998">#2998</a>)</li>
<li><a href="https://github.com/resend/react-email/commit/11aa935196e3da315be4b4e8711f61efeb5c9f75"><code>11aa935</code></a> chore(deps): update dependency tsdown to v0.19.0 (<a href="https://github.com/resend/react-email/tree/HEAD/packages/tailwind/issues/2857">#2857</a>)</li>
<li>See full diff in <a href="https://github.com/resend/react-email/commits/@react-email/tailwind@2.0.7/packages/tailwind">compare view</a></li>
</ul>
</details>
<br />
Updates `drizzle-orm` from 0.45.1 to 0.45.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/drizzle-team/drizzle-orm/releases">drizzle-orm's releases</a>.</em></p>
<blockquote>
<h2>0.45.2</h2>
<ul>
<li>Fixed <code>sql.identifier()</code>, <code>sql.as()</code> escaping issues. Previously all the values passed to this functions were not properly escaped
causing a possible SQL Injection (CWE-89) vulnerability</li>
</ul>
<p>Thanks to <a href="https://github.com/EthanKim88"><code>@EthanKim88</code></a>, <a href="https://github.com/0x90sh"><code>@0x90sh</code></a> and <a href="https://github.com/wgoodall01"><code>@wgoodall01</code></a> for reaching out to us with a reproduction and suggested fix</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/drizzle-team/drizzle-orm/commit/273c78071d4841b497f5144734b38294df7ec64b"><code>273c780</code></a> + 0.45.2 (<a href="https://redirect.github.com/drizzle-team/drizzle-orm/issues/5534">#5534</a>)</li>
<li><a href="https://github.com/drizzle-team/drizzle-orm/commit/4aa6ecfee4b4728dadf6f77f071a149878a3c6c0"><code>4aa6ecf</code></a> Kit updates (<a href="https://redirect.github.com/drizzle-team/drizzle-orm/issues/5490">#5490</a>)</li>
<li><a href="https://github.com/drizzle-team/drizzle-orm/commit/e8e6edfef5ca69c6188d320388ad440265911057"><code>e8e6edf</code></a> feat(drizzle-kit): support d1 via binding (<a href="https://redirect.github.com/drizzle-team/drizzle-orm/issues/5302">#5302</a>)</li>
<li>See full diff in <a href="https://github.com/drizzle-team/drizzle-orm/compare/0.45.1...0.45.2">compare view</a></li>
</ul>
</details>
<br />
Updates `express-rate-limit` from 8.3.0 to 8.3.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/express-rate-limit/express-rate-limit/releases">express-rate-limit's releases</a>.</em></p>
<blockquote>
<h2>v8.3.2</h2>
<p>You can view the changelog <a href="https://express-rate-limit.mintlify.app/reference/changelog">here</a>.</p>
<h2>v8.3.1</h2>
<p>You can view the changelog <a href="https://express-rate-limit.mintlify.app/reference/changelog">here</a>.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/express-rate-limit/express-rate-limit/commit/c4dbb42c1b4891056545e30a9187a64c8bfeb8bc"><code>c4dbb42</code></a> 8.3.2</li>
<li><a href="https://github.com/express-rate-limit/express-rate-limit/commit/8f1cc6639a430d6409e600c8e5434c1bc1e572bf"><code>8f1cc66</code></a> v8.3.2 changelog</li>
<li><a href="https://github.com/express-rate-limit/express-rate-limit/commit/601b87f5d171487ed035ccdfee17ec75f5b22f2d"><code>601b87f</code></a> Fix skipFailedRequests for for connections that close very early (<a href="https://redirect.github.com/express-rate-limit/express-rate-limit/issues/611">#611</a>)</li>
<li><a href="https://github.com/express-rate-limit/express-rate-limit/commit/014c2f32708c0fdb5544834c3e77043e041ae38a"><code>014c2f3</code></a> chore(deps-dev): bump the development-dependencies group with 6 updates (<a href="https://redirect.github.com/express-rate-limit/express-rate-limit/issues/612">#612</a>)</li>
<li><a href="https://github.com/express-rate-limit/express-rate-limit/commit/4e8b18bf972eff2890ed67bd11d8a08a2c6502d5"><code>4e8b18b</code></a> Remove Zuplo sponsorship details from README (<a href="https://redirect.github.com/express-rate-limit/express-rate-limit/issues/613">#613</a>)</li>
<li><a href="https://github.com/express-rate-limit/express-rate-limit/commit/31dab192a3798984b89e78bfacf755f361f29660"><code>31dab19</code></a> test: use numeric range for reset timestamp assertion (<a href="https://redirect.github.com/express-rate-limit/express-rate-limit/issues/610">#610</a>)</li>
<li><a href="https://github.com/express-rate-limit/express-rate-limit/commit/f82ad139611ed69c451f113913f0347ee78d19ec"><code>f82ad13</code></a> chore(deps-dev): bump the development-dependencies group with 2 updates (<a href="https://redirect.github.com/express-rate-limit/express-rate-limit/issues/609">#609</a>)</li>
<li><a href="https://github.com/express-rate-limit/express-rate-limit/commit/fa0b0982049814870faf9d57b7588a0b9acd107f"><code>fa0b098</code></a> docs: fix broken link</li>
<li><a href="https://github.com/express-rate-limit/express-rate-limit/commit/47e5b2952fe697ac0a5f8a6aa86f050f6f2c0ce5"><code>47e5b29</code></a> 8.3.1</li>
<li><a href="https://github.com/express-rate-limit/express-rate-limit/commit/eb61179a49064c7e86f6f8688be742343b1f1b8e"><code>eb61179</code></a> v8.3.1 changelog</li>
<li>Additional commits viewable in <a href="https://github.com/express-rate-limit/express-rate-limit/compare/v8.3.0...v8.3.2">compare view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by [GitHub Actions](<a href="https://www.npmjs.com/~GitHub">https://www.npmjs.com/~GitHub</a> Actions), a new releaser for express-rate-limit since your current version.</p>
</details>
<br />
Updates `ioredis` from 5.10.0 to 5.10.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/luin/ioredis/releases">ioredis's releases</a>.</em></p>
<blockquote>
<h2>v5.10.1</h2>
<h2><a href="https://github.com/luin/ioredis/compare/v5.10.0...v5.10.1">5.10.1</a> (2026-03-19)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>cluster:</strong> lazily start sharded subscribers (<a href="https://redirect.github.com/luin/ioredis/issues/2090">#2090</a>) (<a href="https://github.com/luin/ioredis/commit/4f167bb9f494f0e8200a20dedd8bbdf1810fcd22">4f167bb</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/redis/ioredis/blob/main/CHANGELOG.md">ioredis's changelog</a>.</em></p>
<blockquote>
<h2><a href="https://github.com/luin/ioredis/compare/v5.10.0...v5.10.1">5.10.1</a> (2026-03-19)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>cluster:</strong> lazily start sharded subscribers (<a href="https://redirect.github.com/luin/ioredis/issues/2090">#2090</a>) (<a href="https://github.com/luin/ioredis/commit/4f167bb9f494f0e8200a20dedd8bbdf1810fcd22">4f167bb</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/redis/ioredis/commit/9e26f8b384e9f137c31bb080620c69215880df60"><code>9e26f8b</code></a> chore(release): 5.10.1 [skip ci]</li>
<li><a href="https://github.com/redis/ioredis/commit/4f167bb9f494f0e8200a20dedd8bbdf1810fcd22"><code>4f167bb</code></a> fix(cluster): lazily start sharded subscribers (<a href="https://redirect.github.com/luin/ioredis/issues/2090">#2090</a>)</li>
<li>See full diff in <a href="https://github.com/luin/ioredis/compare/v5.10.0...v5.10.1">compare view</a></li>
</ul>
</details>
<br />
Updates `maxmind` from 5.0.5 to 5.0.6
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/runk/node-maxmind/releases">maxmind's releases</a>.</em></p>
<blockquote>
<h2>v5.0.6</h2>
<h2><a href="https://github.com/runk/node-maxmind/compare/v5.0.5...v5.0.6">5.0.6</a> (2026-04-01)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>deps:</strong> update dependency tiny-lru to v13 (<a href="https://redirect.github.com/runk/node-maxmind/issues/956">#956</a>) (<a href="https://github.com/runk/node-maxmind/commit/91c52eca4a1ce35f8c15d2f769b8efdcce7c6dd8">91c52ec</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/runk/node-maxmind/commit/3b872c32121d26f5cfec936e44b69f1f10a49a43"><code>3b872c3</code></a> chore(deps): update dependency jest to v30.3.0 (<a href="https://redirect.github.com/runk/node-maxmind/issues/954">#954</a>)</li>
<li><a href="https://github.com/runk/node-maxmind/commit/91c52eca4a1ce35f8c15d2f769b8efdcce7c6dd8"><code>91c52ec</code></a> fix(deps): update dependency tiny-lru to v13 (<a href="https://redirect.github.com/runk/node-maxmind/issues/956">#956</a>)</li>
<li><a href="https://github.com/runk/node-maxmind/commit/85ad23eca7d295c44636bf80f8de9f77a8f82839"><code>85ad23e</code></a> chore(deps): update dependency <code>@types/node</code> to v24.12.0 (<a href="https://redirect.github.com/runk/node-maxmind/issues/953">#953</a>)</li>
<li><a href="https://github.com/runk/node-maxmind/commit/bd2c647f35bdad53713c959544af174e0fa21822"><code>bd2c647</code></a> chore(deps): update dependency sinon to v21.0.3 (<a href="https://redirect.github.com/runk/node-maxmind/issues/952">#952</a>)</li>
<li><a href="https://github.com/runk/node-maxmind/commit/08fa0e6907042884ad313af018d5e12e6ac8f1b2"><code>08fa0e6</code></a> chore(deps): update dependency <code>@types/node</code> to v24.11.0 (<a href="https://redirect.github.com/runk/node-maxmind/issues/951">#951</a>)</li>
<li><a href="https://github.com/runk/node-maxmind/commit/3ce1a2d29824bbc588642fc9beade16043522289"><code>3ce1a2d</code></a> chore(deps): update dependency prettier to v3.8.1 (<a href="https://redirect.github.com/runk/node-maxmind/issues/950">#950</a>)</li>
<li>See full diff in <a href="https://github.com/runk/node-maxmind/compare/v5.0.5...v5.0.6">compare view</a></li>
</ul>
</details>
<br />
Updates `nodemailer` from 8.0.4 to 8.0.5
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/nodemailer/nodemailer/releases">nodemailer's releases</a>.</em></p>
<blockquote>
<h2>v8.0.5</h2>
<h2><a href="https://github.com/nodemailer/nodemailer/compare/v8.0.4...v8.0.5">8.0.5</a> (2026-04-07)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>decode SMTP server responses as UTF-8 at line boundary (<a href="https://github.com/nodemailer/nodemailer/commit/95876b103e587e49583e43f88cb2c3a61556f3ac">95876b1</a>)</li>
<li>sanitize CRLF in transport name option to prevent SMTP command injection (GHSA-vvjj-xcjg-gr5g) (<a href="https://github.com/nodemailer/nodemailer/commit/0a43876801a420ca528f492eaa01bfc421cc306e">0a43876</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md">nodemailer's changelog</a>.</em></p>
<blockquote>
<h2><a href="https://github.com/nodemailer/nodemailer/compare/v8.0.4...v8.0.5">8.0.5</a> (2026-04-07)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>decode SMTP server responses as UTF-8 at line boundary (<a href="https://github.com/nodemailer/nodemailer/commit/95876b103e587e49583e43f88cb2c3a61556f3ac">95876b1</a>)</li>
<li>sanitize CRLF in transport name option to prevent SMTP command injection (GHSA-vvjj-xcjg-gr5g) (<a href="https://github.com/nodemailer/nodemailer/commit/0a43876801a420ca528f492eaa01bfc421cc306e">0a43876</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/nodemailer/nodemailer/commit/202cfb3e14010223204e9ba9f7430176be624f0f"><code>202cfb3</code></a> chore(master): release 8.0.5 (<a href="https://redirect.github.com/nodemailer/nodemailer/issues/1809">#1809</a>)</li>
<li><a href="https://github.com/nodemailer/nodemailer/commit/b634abf05959edcc7207cdaba2c6541f92994cbb"><code>b634abf</code></a> docs: add CLAUDE.md with project conventions and release process</li>
<li><a href="https://github.com/nodemailer/nodemailer/commit/95876b103e587e49583e43f88cb2c3a61556f3ac"><code>95876b1</code></a> fix: decode SMTP server responses as UTF-8 at line boundary</li>
<li><a href="https://github.com/nodemailer/nodemailer/commit/0a43876801a420ca528f492eaa01bfc421cc306e"><code>0a43876</code></a> fix: sanitize CRLF in transport name option to prevent SMTP command injection...</li>
<li><a href="https://github.com/nodemailer/nodemailer/commit/08e59e64d0f8595fa535f07061787e0946372657"><code>08e59e6</code></a> chore: update dev dependencies</li>
<li>See full diff in <a href="https://github.com/nodemailer/nodemailer/compare/v8.0.4...v8.0.5">compare view</a></li>
</ul>
</details>
<br />
Updates `use-debounce` from 10.1.0 to 10.1.1
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/xnimorz/use-debounce/blob/master/CHANGELOG.md">use-debounce's changelog</a>.</em></p>
<blockquote>
<h2>10.1.1</h2>
<ul>
<li>replace global with globalThis which is defined in all possible environments (browser, node, workers) to address <a href="https://redirect.github.com/xnimorz/use-debounce/issues/212">xnimorz/use-debounce#212</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a href="https://github.com/xnimorz/use-debounce/commits">compare view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions
</details>
---
<sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
📋 Pull Request Information
Original PR: https://github.com/fosrl/pangolin/pull/2808
Author: @dependabot[bot]
Created: 4/8/2026
Status: ❌ Closed
Base:
main← Head:dependabot/npm_and_yarn/prod-patch-updates-c9865a2238📝 Commits (1)
f38c334Bump the prod-patch-updates group across 1 directory with 10 updates📊 Changes
2 files changed (+88 additions, -88 deletions)
View changed files
📝
package-lock.json(+77 -77)📝
package.json(+11 -11)📄 Description
Bumps the prod-patch-updates group with 10 updates in the / directory:
2.2.92.2.101.0.81.0.112.0.42.0.52.0.52.0.70.45.10.45.28.3.08.3.25.10.05.10.15.0.55.0.68.0.48.0.510.1.010.1.1Updates
@headlessui/reactfrom 2.2.9 to 2.2.10Release notes
Sourced from
@headlessui/react's releases.Changelog
Sourced from
@headlessui/react's changelog.Commits
d13526d2.2.10 -@headlessui/reactb0dcd8fHandle props on Fragment error due toSymbol(react.lazy)(#3873)7baca70Don’t render\<Portal>s while hydrating (#3825)5ef7395AddRefProptoprops(#3823)Updates
@react-email/componentsfrom 1.0.8 to 1.0.11Release notes
Sourced from
@react-email/components's releases.Changelog
Sourced from
@react-email/components's changelog.Commits
1191b35chore(root): version packages (#3084)32b0ebachore(root): version packages (#3073)197d094chore: version packages (#3035)1f27dcdfeat: pnpm catalogs (#3014)11aa935chore(deps): update dependency tsdown to v0.19.0 (#2857)Updates
@react-email/renderfrom 2.0.4 to 2.0.5Release notes
Sourced from
@react-email/render's releases.Changelog
Sourced from
@react-email/render's changelog.Commits
f6cfef0fix(render): await stream.allReady before reading renderToReadableStream outp...1191b35chore(root): version packages (#3084)ecfc141fix: prevent process crash by rejecting error instead of throwing in renderTo...1f27dcdfeat: pnpm catalogs (#3014)01a424bchore(deps): update dependency prettier to v3.8.1 (#2839)11aa935chore(deps): update dependency tsdown to v0.19.0 (#2857)d2972c9fix(render): suspense tests (#2964)9015f76chore: update react types (#2952)Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for
@react-email/rendersince your current version.Updates
@react-email/tailwindfrom 2.0.5 to 2.0.7Release notes
Sourced from
@react-email/tailwind's releases.Changelog
Sourced from
@react-email/tailwind's changelog.Commits
1191b35chore(root): version packages (#3084)32b0ebachore(root): version packages (#3073)444d9dffix(tailwind): use caret ranges for internal peer dependencies (#3060)1f27dcdfeat: pnpm catalogs (#3014)e64cf9fchore: workflow for e2e, only tailwind for now (#2998)11aa935chore(deps): update dependency tsdown to v0.19.0 (#2857)Updates
drizzle-ormfrom 0.45.1 to 0.45.2Release notes
Sourced from drizzle-orm's releases.
Commits
273c780+ 0.45.2 (#5534)4aa6ecfKit updates (#5490)e8e6edffeat(drizzle-kit): support d1 via binding (#5302)Updates
express-rate-limitfrom 8.3.0 to 8.3.2Release notes
Sourced from express-rate-limit's releases.
Commits
c4dbb428.3.28f1cc66v8.3.2 changelog601b87fFix skipFailedRequests for for connections that close very early (#611)014c2f3chore(deps-dev): bump the development-dependencies group with 6 updates (#612)4e8b18bRemove Zuplo sponsorship details from README (#613)31dab19test: use numeric range for reset timestamp assertion (#610)f82ad13chore(deps-dev): bump the development-dependencies group with 2 updates (#609)fa0b098docs: fix broken link47e5b298.3.1eb61179v8.3.1 changelogMaintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for express-rate-limit since your current version.
Updates
ioredisfrom 5.10.0 to 5.10.1Release notes
Sourced from ioredis's releases.
Changelog
Sourced from ioredis's changelog.
Commits
9e26f8bchore(release): 5.10.1 [skip ci]4f167bbfix(cluster): lazily start sharded subscribers (#2090)Updates
maxmindfrom 5.0.5 to 5.0.6Release notes
Sourced from maxmind's releases.
Commits
3b872c3chore(deps): update dependency jest to v30.3.0 (#954)91c52ecfix(deps): update dependency tiny-lru to v13 (#956)85ad23echore(deps): update dependency@types/nodeto v24.12.0 (#953)bd2c647chore(deps): update dependency sinon to v21.0.3 (#952)08fa0e6chore(deps): update dependency@types/nodeto v24.11.0 (#951)3ce1a2dchore(deps): update dependency prettier to v3.8.1 (#950)Updates
nodemailerfrom 8.0.4 to 8.0.5Release notes
Sourced from nodemailer's releases.
Changelog
Sourced from nodemailer's changelog.
Commits
202cfb3chore(master): release 8.0.5 (#1809)b634abfdocs: add CLAUDE.md with project conventions and release process95876b1fix: decode SMTP server responses as UTF-8 at line boundary0a43876fix: sanitize CRLF in transport name option to prevent SMTP command injection...08e59e6chore: update dev dependenciesUpdates
use-debouncefrom 10.1.0 to 10.1.1Changelog
Sourced from use-debounce's changelog.
Commits
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.