Repository navigation
chore(deps-dev): bump lucide-react from 1.61.0 to 1.65.0 - #972
Conversation
Bumps [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) from 1.61.0 to 1.65.0. - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.65.0/packages/lucide-react) --- updated-dependencies: - dependency-name: lucide-react dependency-version: 1.65.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
|
Important Review skippedBot user detected. To trigger a single review, invoke the
|
|
Thanks @dependabot[bot] for keeping our dependencies current! 🙌 |
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
hermes-exosphere
left a comment
There was a problem hiding this comment.
Automated approval: trivial dependency update.
Only lucide-react 1.61.0 → 1.65.0 actually changes. All four intervening releases and both published tarballs were checked: repository usage remains compatible, license/runtime requirements are unchanged, and no install hooks or transitive dependencies were added. Tarball integrity matches the lockfile, the version satisfies the existing manifest range, and no Actions pins change.
Bumps
lucide-react1.61.0 → 1.65.0 (Minor)nuxt4.5.1 → 4.6.2 (Minor)react-native-svg15.15.5 → 15.16.0 (Minor)vite8.3.2 → 8.3.3 (Patch)
Findings
- info
nuxt, react-native-svg, vite: These are upstream development-dependency updates mentioned in Lucide's release notes, not changes in this PR. Nuxt and react-native-svg are absent from the root lockfile; Vite remains at 8.1.6. - info
lucide-react: The new exports map supports existing repository imports. The ArchiveRestore rename retains compatibility aliases, all public exports remain available, and icons used here have unchanged implementations.
Checked: allowlisted bot author, only dependency files, patch/minor bumps, green CI on this commit, no merge conflicts; then a supply-chain review by gpt-6.1-sol (changelogs, install scripts, lockfile, action pins).
pr-autopilot · Codex in a locked-down container · traced by failproofai
Bumps lucide-react from 1.61.0 to 1.65.0.
Release notes
Sourced from lucide-react's releases.
... (truncated)
Commits
1668a0cchore(deps): bump rollup to 4.65.1 and keep typescript on v6 (#5110)e8f86fcfix(lucide-react): ignore stale DynamicIcon loads after the name changes (#5060)6657faachore(deps-dev): bump vite from 8.3.2 to 8.3.3 (#5052)1802f33feat(lucide-react): add package exports for per-icon imports without changing...20aef31chore(packages): Update sponsors (#5034)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)