Merge pull request #28 from Dargon789/Dargon789-patch-2 (#52)

[Dargon789]

• Merge pull request #25 from Dargon789/main #26 Create config.yml #27 Delete .circleci directory #28 (#26 #27 #28 #29) (#26 #27 #28 (#29) #30)

• Create config.yml

d37b38e

• Update .github/config.yml

• Delete .circleci directory

---

• deps: bump next from 16.0.10 to 16.1.6 (deps: bump next from 16.0.10 to 16.1.6 #39)

Bumps next from 16.0.10 to 16.1.6.

• Release notes
• Changelog
• Commits

---

updated-dependencies:

• dependency-name: next dependency-version: 16.1.6 dependency-type: direct:production ...

• fix: package.json & package-lock.json to reduce vulnerabilities ([Snyk] Security upgrade @arcjet/next from 1.0.0-beta.9 to 1.1.0 #44)

The following vulnerabilities are fixed with an upgrade:

• https://snyk.io/vuln/SNYK-JS-UNDICI-14943963

• deps: bump next-auth from 5.0.0-beta.29 to 5.0.0-beta.30 (deps: bump next-auth from 5.0.0-beta.29 to 5.0.0-beta.30 #45)

Bumps next-auth from 5.0.0-beta.29 to 5.0.0-beta.30.

• Release notes
• Commits

---

updated-dependencies:

• dependency-name: next-auth dependency-version: 5.0.0-beta.30 dependency-type: direct:production ...

• deps: bump the dependencies-minor group across 1 directory with 16 updates (deps: bump the dependencies-minor group across 1 directory with 16 updates #49)

Bumps the dependencies-minor group with 16 updates in the / directory:

Package	From	To
@arcjet/decorate	1.0.0-beta.9	1.1.0

Updates @arcjet/decorate from 1.0.0-beta.9 to 1.1.0

• Release notes
• Changelog
• Commits

Updates @arcjet/env from 1.0.0-beta.9 to 1.1.0

• Release notes
• Changelog
• Commits

Updates @arcjet/ip from 1.0.0-beta.9 to 1.1.0

• Release notes
• Changelog
• Commits

Updates @fontsource-variable/figtree from 5.2.8 to 5.2.10

• Changelog
• Commits

Updates @fontsource/ibm-plex-mono from 5.2.6 to 5.2.7

• Changelog
• Commits

Updates @hookform/resolvers from 5.1.1 to 5.2.2

• Release notes
• Commits

Updates @nosecone/next from 1.0.0-beta.9 to 1.1.0

• Release notes
• Changelog
• Commits

Updates @oddbird/css-anchor-positioning from 0.6.1 to 0.8.0

• Release notes
• Changelog
• Commits

Updates react from 19.2.0 to 19.2.4

• Release notes
• Changelog
• Commits

Updates @types/react from 19.1.8 to 19.2.13

• Release notes
• Commits

Updates react-dom from 19.1.0 to 19.2.4

• Release notes
• Changelog
• Commits

Updates @types/react-dom from 19.1.6 to 19.2.3

• Release notes
• Commits

Updates react-hook-form from 7.60.0 to 7.71.1

• Release notes
• Changelog
• Commits

Updates zod from 4.2.1 to 4.3.6

• Release notes
• Commits

Updates @playwright/test from 1.55.1 to 1.58.2

• Release notes
• Commits

Updates @types/react from 19.1.8 to 19.2.13

• Release notes
• Commits

Updates @types/react-dom from 19.1.6 to 19.2.3

• Release notes
• Commits

Updates sass from 1.89.2 to 1.97.3

• Release notes
• Changelog
• Commits

---

updated-dependencies:

• dependency-name: "@arcjet/decorate" dependency-version: 1.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-minor
• dependency-name: "@arcjet/env" dependency-version: 1.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-minor
• dependency-name: "@arcjet/ip" dependency-version: 1.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-minor
• dependency-name: "@fontsource-variable/figtree" dependency-version: 5.2.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies-minor
• dependency-name: "@fontsource/ibm-plex-mono" dependency-version: 5.2.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies-minor
• dependency-name: "@hookform/resolvers" dependency-version: 5.2.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-minor
• dependency-name: "@nosecone/next" dependency-version: 1.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-minor
• dependency-name: "@oddbird/css-anchor-positioning" dependency-version: 0.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-minor
• dependency-name: react dependency-version: 19.2.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies-minor
• dependency-name: "@types/react" dependency-version: 19.2.13 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies-minor
• dependency-name: react-dom dependency-version: 19.2.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-minor
• dependency-name: "@types/react-dom" dependency-version: 19.2.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies-minor
• dependency-name: react-hook-form dependency-version: 7.71.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-minor
• dependency-name: zod dependency-version: 4.3.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-minor
• dependency-name: "@playwright/test" dependency-version: 1.58.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies-minor
• dependency-name: "@types/react" dependency-version: 19.2.13 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies-minor
• dependency-name: "@types/react-dom" dependency-version: 19.2.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies-minor
• dependency-name: sass dependency-version: 1.97.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies-minor ...

• Merge pull request Merge pull request #25 from Dargon789/main #26 Create config.yml #27 Delete .circleci directory #28 (#26 #27 #28 #29) (#26 #27 #28 (#29) #30) (Merge pull request #26 #27 #28 (#29) (#30)  #50) (Merge pull request #26 #27 #28 (#29) (#30) (#50) #51)

• Delete .circleci directory

• Merge pull request #25 from Dargon789/main #26 Create config.yml #27 Delete .circleci directory #28 (#26 #27 #28 #29) (#26 #27 #28 (#29) #30)

• Create config.yml

d37b38e

• Update .github/config.yml

• Delete .circleci directory

---

• deps: bump next from 16.0.10 to 16.1.6 (deps: bump next from 16.0.10 to 16.1.6 #39)

Bumps next from 16.0.10 to 16.1.6.

• Release notes
• Changelog
• Commits

---

updated-dependencies:

• dependency-name: next dependency-version: 16.1.6 dependency-type: direct:production ...

• fix: package.json & package-lock.json to reduce vulnerabilities ([Snyk] Security upgrade @arcjet/next from 1.0.0-beta.9 to 1.1.0 #44)

The following vulnerabilities are fixed with an upgrade:

• https://snyk.io/vuln/SNYK-JS-UNDICI-14943963

• deps: bump next-auth from 5.0.0-beta.29 to 5.0.0-beta.30 (deps: bump next-auth from 5.0.0-beta.29 to 5.0.0-beta.30 #45)

Bumps next-auth from 5.0.0-beta.29 to 5.0.0-beta.30.

• Release notes
• Commits

---

updated-dependencies:

• dependency-name: next-auth dependency-version: 5.0.0-beta.30 dependency-type: direct:production ...

• deps: bump the dependencies-minor group across 1 directory with 16 updates (deps: bump the dependencies-minor group across 1 directory with 16 updates #49)

Bumps the dependencies-minor group with 16 updates in the / directory:

Package	From	To
@arcjet/decorate	1.0.0-beta.9	1.1.0

Updates @arcjet/decorate from 1.0.0-beta.9 to 1.1.0

• Release notes
• Changelog
• Commits

Updates @arcjet/env from 1.0.0-beta.9 to 1.1.0

• Release notes
• Changelog
• Commits

Updates @arcjet/ip from 1.0.0-beta.9 to 1.1.0

• Release notes
• Changelog
• Commits

Updates @fontsource-variable/figtree from 5.2.8 to 5.2.10

• Changelog
• Commits

Updates @fontsource/ibm-plex-mono from 5.2.6 to 5.2.7

• Changelog
• Commits

Updates @hookform/resolvers from 5.1.1 to 5.2.2

• Release notes
• Commits

Updates @nosecone/next from 1.0.0-beta.9 to 1.1.0

• Release notes
• Changelog
• Commits

Updates @oddbird/css-anchor-positioning from 0.6.1 to 0.8.0

• Release notes
• Changelog
• Commits

Updates react from 19.2.0 to 19.2.4

• Release notes
• Changelog
• Commits

Updates @types/react from 19.1.8 to 19.2.13

• Release notes
• Commits

Updates react-dom from 19.1.0 to 19.2.4

• Release notes
• Changelog
• Commits

Updates @types/react-dom from 19.1.6 to 19.2.3

• Release notes
• Commits

Updates react-hook-form from 7.60.0 to 7.71.1

• Release notes
• Changelog
• Commits

Updates zod from 4.2.1 to 4.3.6

• Release notes
• Commits

Updates @playwright/test from 1.55.1 to 1.58.2

• Release notes
• Commits

Updates @types/react from 19.1.8 to 19.2.13

• Release notes
• Commits

Updates @types/react-dom from 19.1.6 to 19.2.3

• Release notes
• Commits

Updates sass from 1.89.2 to 1.97.3

• Release notes
• Changelog
• Commits

---

updated-dependencies:

• dependency-name: "@arcjet/decorate" dependency-version: 1.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-minor
• dependency-name: "@arcjet/env" dependency-version: 1.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-minor
• dependency-name: "@arcjet/ip" dependency-version: 1.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-minor
• dependency-name: "@fontsource-variable/figtree" dependency-version: 5.2.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies-minor
• dependency-name: "@fontsource/ibm-plex-mono" dependency-version: 5.2.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies-minor
• dependency-name: "@hookform/resolvers" dependency-version: 5.2.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-minor
• dependency-name: "@nosecone/next" dependency-version: 1.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-minor
• dependency-name: "@oddbird/css-anchor-positioning" dependency-version: 0.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-minor
• dependency-name: react dependency-version: 19.2.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies-minor
• dependency-name: "@types/react" dependency-version: 19.2.13 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies-minor
• dependency-name: react-dom dependency-version: 19.2.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-minor
• dependency-name: "@types/react-dom" dependency-version: 19.2.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies-minor
• dependency-name: react-hook-form dependency-version: 7.71.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-minor
• dependency-name: zod dependency-version: 4.3.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-minor
• dependency-name: "@playwright/test" dependency-version: 1.58.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies-minor
• dependency-name: "@types/react" dependency-version: 19.2.13 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies-minor
• dependency-name: "@types/react-dom" dependency-version: 19.2.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies-minor
• dependency-name: sass dependency-version: 1.97.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies-minor ...

---

---

Summary by Sourcery

Update configuration and dependency landscape to modernize the project and address security concerns.

Bug Fixes:

• Resolve undici-related security vulnerability via dependency upgrades.

Enhancements:

• Upgrade Next.js, next-auth, React, React DOM, and various Arcjet and form-related libraries to newer minor/patch versions.
• Refresh Playwright, Sass, and React type definitions to align with updated runtime dependencies.
• Add and update GitHub configuration while removing legacy CircleCI configuration.

CI:

• Introduce and refine GitHub configuration for repository automation.
• Remove obsolete CircleCI configuration directory.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
arcjet-example	Error		Feb 7, 2026 3:49am
arcjet-example-pvhg	Error		Feb 7, 2026 3:49am

[sourcery-ai]

Reviewer's guide (collapsed on small PRs)

Reviewer's Guide

This PR consolidates several dependabot and maintenance changes: it modernizes the dependency stack (Next, React, NextAuth, Arcjet SDK, forms/validation, Playwright, Sass, and related typings), removes the legacy CircleCI configuration, and adds/updates a GitHub configuration file for the repository.

Flow diagram for updated frontend dependency stack

graph TD
  app["Next.js application"]

  subgraph framework["Core framework"]
    next_pkg["next 16.1.6"]
    react_pkg["react 19.2.4"]
    react_dom_pkg["react-dom 19.2.4"]
  end

  subgraph auth["Authentication"]
    next_auth_pkg["next-auth 5.0.0-beta.30"]
  end

  subgraph arcjet["Arcjet security SDK"]
    arcjet_decorate_pkg["@arcjet/decorate 1.1.0"]
    arcjet_env_pkg["@arcjet/env 1.1.0"]
    arcjet_ip_pkg["@arcjet/ip 1.1.0"]
    arcjet_next_pkg["@arcjet/next 1.1.0"]
    nosecone_next_pkg["@nosecone/next 1.1.0"]
  end

  subgraph forms["Forms and validation"]
    rhf_pkg["react-hook-form 7.71.1"]
    resolvers_pkg["@hookform/resolvers 5.2.2"]
    zod_pkg["zod 4.3.6"]
  end

  subgraph styling["Styling and fonts"]
    sass_pkg["sass 1.97.3"]
    figtree_pkg["@fontsource-variable/figtree 5.2.10"]
    ibm_plex_pkg["@fontsource/ibm-plex-mono 5.2.7"]
    anchor_pos_pkg["@oddbird/css-anchor-positioning 0.8.0"]
  end

  subgraph testing["Testing"]
    pw_pkg["@playwright/test 1.58.2"]
  end

  app --> next_pkg
  next_pkg --> react_pkg
  next_pkg --> react_dom_pkg

  app --> next_auth_pkg

  app --> arcjet_next_pkg
  arcjet_next_pkg --> arcjet_decorate_pkg
  arcjet_next_pkg --> arcjet_env_pkg
  arcjet_next_pkg --> arcjet_ip_pkg
  arcjet_next_pkg --> nosecone_next_pkg

  app --> rhf_pkg
  rhf_pkg --> resolvers_pkg
  resolvers_pkg --> zod_pkg

  app --> styling
  styling --> sass_pkg
  styling --> figtree_pkg
  styling --> ibm_plex_pkg
  styling --> anchor_pos_pkg

  app --> testing
  testing --> pw_pkg

Loading

File-Level Changes

Change	Details	Files
Upgrade core framework and runtime dependencies to newer compatible versions.	Bump Next.js from 16.0.10 to 16.1.6. Bump next-auth from 5.0.0-beta.29 to 5.0.0-beta.30. Update React and ReactDOM from 19.2.0/19.1.0 to 19.2.4. Upgrade Arcjet-related packages (@arcjet/decorate, @arcjet/env, @arcjet/ip, @arcjet/next, @nosecone/next) from 1.0.0-beta.9 to 1.1.0.	package.json package-lock.json
Refresh frontend tooling, form/validation libraries, and fonts to current minor/patch versions.	Upgrade react-hook-form to 7.71.1 and @hookform/resolvers to 5.2.2. Upgrade zod to 4.3.6 for schema validation. Update font packages @fontsource-variable/figtree and @fontsource/ibm-plex-mono to latest 5.2.x versions. Update @oddbird/css-anchor-positioning to 0.8.0.	package.json package-lock.json
Update dev tooling and type definitions to current minor versions.	Upgrade @playwright/test from 1.55.1 to 1.58.2. Update @types/react and @types/react-dom to 19.2.13 and 19.2.3, respectively. Update Sass from 1.89.2 to 1.97.3.	package.json package-lock.json
Adjust project CI/configuration to use GitHub config instead of CircleCI.	Add and later refine .github/config.yml for repository-level configuration. Remove the legacy .circleci directory and its configuration files.	.github/config.yml .circleci/config.yml .circleci/*

---

Tips and commands

Interacting with Sourcery

• Trigger a new review: Comment @sourcery-ai review on the pull request.
• Continue discussions: Reply directly to Sourcery's review comments.
• Generate a GitHub issue from a review comment: Ask Sourcery to create an
  issue from a review comment by replying to it. You can also reply to a
  review comment with @sourcery-ai issue to create an issue from it.
• Generate a pull request title: Write @sourcery-ai anywhere in the pull
  request title to generate a title at any time. You can also comment
  @sourcery-ai title on the pull request to (re-)generate the title at any time.
• Generate a pull request summary: Write @sourcery-ai summary anywhere in
  the pull request body to generate a PR summary at any time exactly where you
  want it. You can also comment @sourcery-ai summary on the pull request to
  (re-)generate the summary at any time.
• Generate reviewer's guide: Comment @sourcery-ai guide on the pull
  request to (re-)generate the reviewer's guide at any time.
• Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
  pull request to resolve all Sourcery comments. Useful if you've already
  addressed all the comments and don't want to see them anymore.
• Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
  request to dismiss all existing Sourcery reviews. Especially useful if you
  want to start fresh with a new review - don't forget to comment
  @sourcery-ai review to trigger a new review!

Customizing Your Experience

Access your dashboard to:

• Enable or disable review features such as the Sourcery-generated pull request
  summary, the reviewer's guide, and others.
• Change the review language.
• Add, remove or edit custom review instructions.
• Adjust other review settings.

Getting Help

• Contact our support team for questions or feedback.
• Visit our documentation for detailed guides and information.
• Keep in touch with the Sourcery team by following us on X/Twitter, LinkedIn or GitHub.

[snyk-io]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scanner	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[sourcery-ai]

Hey - I've reviewed your changes and they look great!

---

Sourcery is free for open source - if you like our reviews please consider sharing them ✨

• X
• Mastodon
• LinkedIn
• Facebook

_{Help me be more useful! Please click 👍 or 👎 on each comment and I'll use the feedback to improve your reviews.}

[gemini-code-assist]

Summary of Changes

Hello @Dargon789, I'm Gemini Code Assist¹! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request integrates a series of updates aimed at modernizing the project's dependency stack and enhancing its development infrastructure. It encompasses a broad range of version bumps for core application frameworks and libraries, a comprehensive upgrade of the Arcjet package suite, and improvements to development tooling. Crucially, it also includes a fix for a known vulnerability, contributing to the overall security and maintainability of the codebase.

Highlights

• Core Dependency Updates: Key frameworks and libraries such as Next.js (16.0.10 to 16.1.6), Next-Auth (5.0.0-beta.29 to 5.0.0-beta.30), React (19.2.0 to 19.2.4), React-DOM (19.1.0 to 19.2.4), React Hook Form (7.60.0 to 7.71.1), and Zod (4.2.1 to 4.3.6) have been updated to their latest versions, bringing in new features, performance improvements, and stability.
• Arcjet Ecosystem Upgrade: All Arcjet-related packages, including @arcjet/decorate, @arcjet/env, @arcjet/ip, and @arcjet/next, have been upgraded from 1.0.0-beta.9 to 1.1.0, indicating a significant update across the Arcjet framework components.
• Vulnerability Remediation: A reported vulnerability related to the undici package has been addressed by updating package.json and package-lock.json, which involved removing undici as a direct dependency from @connectrpc/connect-node.
• Development Tooling Enhancements: Development dependencies like @playwright/test (1.55.1 to 1.58.2), @types/react (19.1.8 to 19.2.13), @types/react-dom (19.1.6 to 19.2.3), and sass (1.89.2 to 1.97.3) have been updated, ensuring compatibility and leveraging the latest features in the development workflow.
• CI/CD Configuration Changes: The .circleci directory has been removed, and a config.yml file has been created or updated, suggesting a shift or refinement in the project's continuous integration and deployment setup.

Changelog

• package-lock.json
  • Updated @arcjet/decorate from 1.0.0-beta.9 to 1.1.0
  • Updated @arcjet/env from 1.0.0-beta.9 to 1.1.0
  • Updated @arcjet/ip from 1.0.0-beta.9 to 1.1.0
  • Updated @arcjet/next from 1.0.0-beta.9 to 1.1.0
  • Updated @fontsource-variable/figtree from 5.2.8 to 5.2.10
  • Updated @fontsource/ibm-plex-mono from 5.2.6 to 5.2.7
  • Updated @hookform/resolvers from 5.1.1 to 5.2.2
  • Updated @nosecone/next from 1.0.0-beta.9 to 1.1.0
  • Updated @oddbird/css-anchor-positioning from 0.6.1 to 0.8.0
  • Updated next from 16.0.10 to 16.1.6
  • Updated next-auth from 5.0.0-beta.29 to 5.0.0-beta.30
  • Updated react from 19.1.0 to 19.2.4
  • Updated react-dom from 19.1.0 to 19.2.4
  • Updated react-hook-form from 7.60.0 to 7.71.1
  • Updated zod from 4.2.1 to 4.3.6
  • Updated @playwright/test from 1.54.1 to 1.58.2
  • Updated @types/react from 19.1.8 to 19.2.13
  • Updated @types/react-dom from 19.1.6 to 19.2.3
  • Updated sass from 1.89.2 to 1.97.3
  • Updated typescript from 5.8.3 to 5.9.3
  • Updated @arcjet/analyze from 1.0.0-beta.9 to 1.1.0
  • Updated @arcjet/analyze-wasm from 1.0.0-beta.9 to 1.1.0
  • Updated @arcjet/cache from 1.0.0-beta.9 to 1.1.0
  • Updated @arcjet/duration from 1.0.0-beta.9 to 1.1.0
  • Updated @arcjet/headers from 1.0.0-beta.9 to 1.1.0
  • Updated @arcjet/logger from 1.0.0-beta.9 to 1.1.0
  • Updated @arcjet/protocol from 1.0.0-beta.9 to 1.1.0
  • Updated @arcjet/runtime from 1.0.0-beta.9 to 1.1.0
  • Updated @arcjet/sprintf from 1.0.0-beta.9 to 1.1.0
  • Updated @arcjet/stable-hash from 1.0.0-beta.9 to 1.1.0
  • Updated @arcjet/transport from 1.0.0-beta.9 to 1.1.0
  • Updated @bufbuild/protobuf from 1.10.1 to 2.11.0
  • Updated @connectrpc/connect from 1.6.1 to 2.1.1
  • Updated @floating-ui/core from 1.7.2 to 1.7.4
  • Updated @floating-ui/dom from 1.7.2 to 1.7.5
  • Updated @types/css-tree from 2.3.10 to 2.3.11
  • Updated nanoid from 5.1.5 to 5.1.6
  • Updated playwright from 1.54.1 to 1.58.2
  • Updated playwright-core from 1.54.1 to 1.58.2
  • Updated scheduler from 0.26.0 to 0.27.0
  • Updated csstype from 3.1.3 to 3.2.3
  • Updated arcjet from 1.0.0-beta.9 to 1.1.0
  • Removed undici dependency and its sub-dependency @fastify/busboy.
  • Added new dependency @arcjet/body version 1.1.0.
  • Added new dependency baseline-browser-mapping version 2.9.19.
  • Removed peer and dev flags from various dependency entries for cleaner configuration.
• package.json
  • Updated @arcjet/decorate from 1.0.0-beta.9 to 1.1.0
  • Updated @arcjet/env from 1.0.0-beta.9 to 1.1.0
  • Updated @arcjet/ip from 1.0.0-beta.9 to 1.1.0
  • Updated @arcjet/next from 1.0.0-beta.9 to 1.1.0
  • Updated @fontsource-variable/figtree from 5.2.8 to 5.2.10
  • Updated @fontsource/ibm-plex-mono from 5.2.6 to 5.2.7
  • Updated @hookform/resolvers from 5.1.1 to 5.2.2
  • Updated @nosecone/next from 1.0.0-beta.9 to 1.1.0
  • Updated @oddbird/css-anchor-positioning from 0.6.1 to 0.8.0
  • Updated next from 16.0.10 to 16.1.6
  • Updated next-auth from 5.0.0-beta.29 to 5.0.0-beta.30
  • Updated react from 19.2.0 to 19.2.4
  • Updated react-dom from 19.1.0 to 19.2.4
  • Updated react-hook-form from 7.60.0 to 7.71.1
  • Updated zod from 4.2.1 to 4.3.6
  • Updated @playwright/test from 1.55.1 to 1.58.2
  • Updated @types/react from 19.1.8 to 19.2.13
  • Updated @types/react-dom from 19.1.6 to 19.2.3
  • Updated sass from 1.89.2 to 1.97.3

Activity

• Multiple dependency updates were merged, including Next.js (PR deps: bump next from 16.0.10 to 16.1.6 #39), Next-Auth (PR deps: bump next-auth from 5.0.0-beta.29 to 5.0.0-beta.30 #45), and a group of 16 minor dependency updates (PR deps: bump the dependencies-minor group across 1 directory with 16 updates #49).
• A fix was applied to package.json and package-lock.json to reduce vulnerabilities, specifically addressing an undici related issue (PR [Snyk] Security upgrade @arcjet/next from 1.0.0-beta.9 to 1.1.0 #44).
• CI/CD configuration changes were introduced, involving the creation or update of config.yml and the deletion of the .circleci directory.

Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature	Command	Description
Code Review	/gemini review	Performs a code review for the current pull request in its current state.
Pull Request Summary	/gemini summary	Provides a summary of the current pull request in its current state.
Comment	@gemini-code-assist	Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help	/gemini help	Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Footnotes

1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution. ↩

[gemini-code-assist]

Code Review

This pull request consists of a collection of dependency updates. These changes are beneficial as they resolve a security vulnerability related to undici by updating transitive dependencies, and they also correct a version mismatch between react and react-dom that existed previously. The updates are consistent with the project's use of pre-release packages. I've reviewed the changes and found no issues; they improve the overall dependency health of the project.