fix(deps): bump the prod-minor-patch group across 1 directory with 14 updates

[dependabot]

Bumps the prod-minor-patch group with 14 updates in the / directory:

Package	From	To
@ably/chat	1.3.1	1.4.0
@inquirer/prompts	8.4.2	8.5.2
@oclif/core	4.11.1	4.13.2
@oclif/plugin-autocomplete	3.2.48	3.2.54
@oclif/plugin-warn-if-update-available	3.1.63	3.1.70
ably	2.21.0	2.26.0
ora	9.4.0	9.4.1
react	19.2.6	19.2.8
react-dom	19.2.6	19.2.8
smol-toml	1.6.1	1.7.1
tar	7.5.21	7.5.22
ws	8.20.0	8.21.1
lucide-react	1.14.0	1.28.0
tailwind-merge	3.5.0	3.6.0

Updates @ably/chat from 1.3.1 to 1.4.0

Release notes

Sourced from @​ably/chat's releases.

V1.4.0

What's Changed

• Fix: "types" condition should come first in "exports" in package.json by @​VeskeR in ably/ably-chat-js#725
• fix: bump ws to 8.20.1 to resolve GHSA-58qx-3vcg-4xpx by @​splindsay-92 in ably/ably-chat-js#727
• feat: add opt-in idempotent REST publishing for chat requests by @​splindsay-92 in ably/ably-chat-js#726
• feat: add getVersions() to retrieve full message version history by @​splindsay-92 in ably/ably-chat-js#730
• chore: release 1.4.0 by @​splindsay-92 in ably/ably-chat-js#729

New Contributors

• @​VeskeR made their first contribution in ably/ably-chat-js#725

Full Changelog: ably/ably-chat-js@1.3.1...1.4.0

Changelog

Sourced from @​ably/chat's changelog.

1.4.0 (2026-05-28)

New Features

• Message Version History: Added room.messages.getVersions(serial) to retrieve the full version history of a message — the original create followed by any updates and deletes — in oldest-first order. #730
• Idempotent REST Publishing: Added an opt-in idempotentRestPublishing flag on ChatClientOptions (default false). When enabled, the SDK attaches an idempotencyKey to send, update, and delete message requests so the server can deduplicate retried publish attempts. #726

Bug Fixes

• Package Exports: Reordered the "types" condition to appear first in package.json exports so type resolution works correctly across bundlers. #725
• Security: Bumped ws to 8.20.1 to resolve GHSA-58qx-3vcg-4xpx. #727

Commits

• 1c9b068 Merge pull request #729 from ably/release/1.4.0
• 89e560c chore: release 1.4.0
• 47e4211 chore: release 1.4.0
• 85b0e35 Merge pull request #730 from ably/feat/message-versions
• 7770e52 docs: fix getVersions JSDoc and restore eslint ignores for local files
• 3234f73 test: replace fixed sleep with vi.waitFor in versions integration test
• b94dfd9 feat: add getVersions() to retrieve full message version history
• b740b63 Merge pull request #726 from ably/feat/add-idempotent-rest-publish-support
• f999a29 review: make idempotentRestPublishing required on ChatApi
• 6592172 review: address PR #726 feedback
• Additional commits viewable in compare view

Updates @inquirer/prompts from 8.4.2 to 8.5.2

Release notes

Sourced from @​inquirer/prompts's releases.

@​inquirer/prompts@​8.5.2

• Fix security warnings in external-editor

@​inquirer/prompts@​8.5.1

• Rolled back mute-stream dependency from v4 to v3 to undo breaking compatible engines.
• Added tooling to prevent regression of the above in the future. This surfaced our min engines already enforced a higher limit, so adjusted the explicit limits to match the current state.

@​inquirer/prompts@​8.5.0

• Feat: Read env variable INQUIRER_KEYBINDINGS to enable vim or emacs keybindings; making this a user preference instead of a library author preference. One caveat is doing so disable the search feature in the select prompt. Syntax: INQUIRER_KEYBINDINGS=vim,emacs.
• Fix: Line wraps would sometime cause the cursor to be mispositioned relative to the input.
• Chore: Bump dependencies.

@​inquirer/prompts@​8.4.3

• Fix: Windows rendering bug
• Fix: Preserve exact literal types in choices array (Typescript only)
• Fix: Allow input default value to be of type undefined (Typescript only)
• Bump dependencies

Commits

• bfd8710 chore: Publish new release
• 55cc5f3 feat: add reusable package lint CLI
• 3af9ed0 test(inquirer): capture prompt runner output
• 4381857 fix(@​inquirer/input): remove stale lint suppression
• 45df331 fix(@​inquirer/external-editor): harden editor temp files
• adef323 chore: limit CI token permissions
• b43359d chore: Publish new release
• 24ecae2 chore: fix yarn.lock
• b078d97 fix: validate package engine compatibility
• 3a49f9f chore(deps-dev): Bump oxfmt in the formatting group (#2143)
• Additional commits viewable in compare view

Updates @oclif/core from 4.11.1 to 4.13.2

Release notes

Sourced from @​oclif/core's releases.

4.13.2

Bug Fixes

• deps: bump postcss from 8.5.10 to 8.5.23 (169b09a)

4.13.1

Bug Fixes

• deps: bump tar from 7.5.16 to 7.5.22 (bc0d2d2)

4.13.0

Features

• expose root help formatter (644c4aa)

4.12.0

Features

• add Args.option() for typed arg options (93139f7)

4.11.14

Bug Fixes

• deps: bump @​sigstore/core from 3.2.0 to 3.2.1 (b45271f)

4.11.13

Bug Fixes

• deps: bump sigstore from 4.1.0 to 4.1.1 (5d7fe54)

4.11.12

Bug Fixes

• deps: bump @​sigstore/verify from 3.1.0 to 3.1.1 (e00068f)

4.11.11

Bug Fixes

• deps: bump undici from 6.25.0 to 6.27.0 (319945a)

4.11.10

Bug Fixes

• deps: bump tinyglobby from 0.2.16 to 0.2.17 (f941872)

4.11.9

Bug Fixes

• deps: bump tar from 7.5.12 to 7.5.16 (153400e)

... (truncated)

Changelog

Sourced from @​oclif/core's changelog.

4.13.2 (2026-07-27)

Bug Fixes

• deps: bump postcss from 8.5.10 to 8.5.23 (169b09a)

4.13.1 (2026-07-27)

Bug Fixes

• deps: bump tar from 7.5.16 to 7.5.22 (bc0d2d2)

4.13.0 (2026-07-23)

Features

• expose root help formatter (644c4aa)

Commits

• f70eb7a chore(release): 4.13.2 [skip ci]
• fa7f31a Merge pull request #1632 from oclif/dependabot-npm_and_yarn-postcss-8.5.23
• 169b09a fix(deps): bump postcss from 8.5.10 to 8.5.23
• 84e84e9 chore(release): 4.13.1 [skip ci]
• 77e3c43 Merge pull request #1631 from oclif/dependabot-npm_and_yarn-tar-7.5.22
• bc0d2d2 fix(deps): bump tar from 7.5.16 to 7.5.22
• 2ba8f2f chore(release): 4.13.0 [skip ci]
• 4a7b804 Merge pull request #1628 from floze-the-genius/fix/1284-public-format-root
• 42ad911 chore(release): 4.12.0 [skip ci]
• a132e92 Merge pull request #1568 from rexxars/rexxars/typed-arg-options
• Additional commits viewable in compare view

Updates @oclif/plugin-autocomplete from 3.2.48 to 3.2.54

Release notes

Sourced from @​oclif/plugin-autocomplete's releases.

3.2.54

Bug Fixes

• deps: bump @​oclif/core from 4.11.14 to 4.13.0 (#1182) (b7e1eea)

3.2.53

Bug Fixes

• deps: bump @​oclif/core from 4.11.8 to 4.11.11 (#1171) (330eecd)

3.2.52

Bug Fixes

• deps: bump @​oclif/core from 4.11.4 to 4.11.8 (#1163) (f31fb99)

3.2.51

Bug Fixes

• deps: bump @​babel/core from 7.10.3 to 7.29.7 (#1166) (9c9fc57)

3.2.50

Bug Fixes

• deps: bump @​oclif/core from 4.11.3 to 4.11.4 (#1151) (f25d073)

3.2.49

Bug Fixes

• deps: bump @​oclif/core from 4.11.0 to 4.11.2 (#1146) (4127ce2)

Changelog

Sourced from @​oclif/plugin-autocomplete's changelog.

3.2.54 (2026-07-26)

Bug Fixes

• deps: bump @​oclif/core from 4.11.14 to 4.13.0 (#1182) (b7e1eea)

3.2.53 (2026-06-28)

Bug Fixes

• deps: bump @​oclif/core from 4.11.8 to 4.11.11 (#1171) (330eecd)

3.2.52 (2026-06-22)

Bug Fixes

• deps: bump @​oclif/core from 4.11.4 to 4.11.8 (#1163) (f31fb99)

3.2.51 (2026-06-21)

Bug Fixes

• deps: bump @​babel/core from 7.10.3 to 7.29.7 (#1166) (9c9fc57)

3.2.50 (2026-05-24)

Bug Fixes

• deps: bump @​oclif/core from 4.11.3 to 4.11.4 (#1151) (f25d073)

3.2.49 (2026-05-10)

Bug Fixes

• deps: bump @​oclif/core from 4.11.0 to 4.11.2 (#1146) (4127ce2)

Commits

• 374ac06 chore(release): 3.2.54 [skip ci]
• b7e1eea fix(deps): bump @​oclif/core from 4.11.14 to 4.13.0 (#1182)
• 0ef1266 chore(dev-deps): bump eslint-config-oclif from 6.0.176 to 6.0.177 (#1183)
• 2c480f8 chore(dev-deps): bump prettier from 3.9.5 to 3.9.6 (#1184)
• 2ee1bed chore(dev-deps): bump oclif from 4.23.27 to 4.23.29 (#1185)
• 62dcc13 chore(dev-deps): bump eslint-config-oclif from 6.0.175 to 6.0.176 (#1181)
• b0cd278 chore(dev-deps): bump eslint from 9.39.4 to 9.39.5 (#1177)
• 5156760 chore(dev-deps): bump oclif from 4.23.24 to 4.23.27 (#1178)
• 24749bf chore(dev-deps): bump prettier from 3.9.4 to 3.9.5 (#1179)
• b41a42b chore(dev-deps): bump eslint-config-oclif from 6.0.174 to 6.0.175 (#1180)
• Additional commits viewable in compare view

Updates @oclif/plugin-warn-if-update-available from 3.1.63 to 3.1.70

Release notes

Sourced from @​oclif/plugin-warn-if-update-available's releases.

3.1.70

Bug Fixes

• deps: bump @​oclif/core from 4.11.14 to 4.13.0 (#1047) (4ae169a)

3.1.69

Bug Fixes

• deps: bump js-yaml from 4.2.0 to 4.3.0 (#1049) (f3c1816)

3.1.68

Bug Fixes

• deps: bump @​oclif/core from 4.11.9 to 4.11.11 (#1034) (3a73be0)

3.1.67

Bug Fixes

• deps: bump @​oclif/core from 4.11.4 to 4.11.9 (#1030) (35fb8be)

3.1.66

Bug Fixes

• deps: bump js-yaml from 4.1.1 to 4.2.0 (#1032) (89e79b1)

3.1.65

Bug Fixes

• deps: bump @​oclif/core from 4.11.2 to 4.11.3 (#1019) (8a5e833)

3.1.64

Bug Fixes

• deps: bump @​oclif/core from 4.11.0 to 4.11.2 (#1016) (6aa16a8)

Changelog

Sourced from @​oclif/plugin-warn-if-update-available's changelog.

3.1.70 (2026-07-26)

Bug Fixes

• deps: bump @​oclif/core from 4.11.14 to 4.13.0 (#1047) (4ae169a)

3.1.69 (2026-07-26)

Bug Fixes

• deps: bump js-yaml from 4.2.0 to 4.3.0 (#1049) (f3c1816)

3.1.68 (2026-06-28)

Bug Fixes

• deps: bump @​oclif/core from 4.11.9 to 4.11.11 (#1034) (3a73be0)

3.1.67 (2026-06-21)

Bug Fixes

• deps: bump @​oclif/core from 4.11.4 to 4.11.9 (#1030) (35fb8be)

3.1.66 (2026-06-21)

Bug Fixes

• deps: bump js-yaml from 4.1.1 to 4.2.0 (#1032) (89e79b1)

3.1.65 (2026-05-17)

Bug Fixes

• deps: bump @​oclif/core from 4.11.2 to 4.11.3 (#1019) (8a5e833)

3.1.64 (2026-05-10)

Bug Fixes

• deps: bump @​oclif/core from 4.11.0 to 4.11.2 (#1016) (6aa16a8)

Commits

• 821a007 chore(release): 3.1.70 [skip ci]
• 4ae169a fix(deps): bump @​oclif/core from 4.11.14 to 4.13.0 (#1047)
• 11ebba4 chore(release): 3.1.69 [skip ci]
• f3c1816 fix(deps): bump js-yaml from 4.2.0 to 4.3.0 (#1049)
• dc5d081 chore(dev-deps): bump oclif from 4.23.27 to 4.23.29 (#1048)
• 0676fac chore(dev-deps): bump eslint-config-oclif from 6.0.175 to 6.0.176 (#1044)
• 2addc07 chore(dev-deps): bump prettier from 3.9.4 to 3.9.5 (#1040)
• f92768c chore(dev-deps): bump oclif from 4.23.24 to 4.23.27 (#1041)
• 90a5f91 chore(dev-deps): bump eslint from 9.39.4 to 9.39.5 (#1042)
• 76d0f38 chore(dev-deps): bump eslint-config-oclif from 6.0.174 to 6.0.175 (#1043)
• Additional commits viewable in compare view

Updates ably from 2.21.0 to 2.26.0

Release notes

Sourced from ably's releases.

v2.26.0

Full Changelog

What's Changed

• Add push.updateToken() to update the device's push token on React Native after the underlying push platform rotates it, keeping the device registration in sync with Ably #2267
• Add a useObject React hook for subscribing to LiveObjects state #2259
• PathObject.instance() method now returns undefined only if nothing exists at that path. It wraps whatever value resolves there: a LiveMap, a LiveCounter, or a primitive value. A primitive-backed Instance is read-only: it has no id and exposes the primitive via value().

v2.25.0

Full Changelog

What's Changed

• Add push notification support for React Native via the new ably/react-native-push plugin. Adds an asynchronous client.getDevice() and deprecates the synchronous client.device() #2262
• Surface previously silent failures when channel modes are missing: presence.get() without the presence_subscribe mode and channel.subscribe() without the subscribe mode now log an error, or throw when the new strictMode client option is enabled #2236

v2.24.0

What's Changed

• Add iOS Live Activity support via APNs broadcast channels: push.admin.createApnsBroadcast and push.admin.liveActivity (start/update/end) #2253
• Fix: use error code 40106 for missing credentials #2254

v2.23.0

Full Changelog: ably/ably-js@2.22.1...2.23.0

What's Changed

• Allow omitting channelName in the React channel hooks to use the nearest ChannelProvider #2248
• Fix presence auto-reenter causing "Unable to perform operation on channel" NACKs after reconnecting from a transient disconnect; presence operations are now queued at the channel level until the channel next re-attaches #2241

v2.22.1

Full Changelog: ably/ably-js@2.22.0...2.22.1

What's Changed

• Fix v1-callback deprecated overloads breaking mock assignment by changing return type from never to void #2239

v2.22.0

Full Changelog: ably/ably-js@2.21.0...2.22.0

What's Changed

• Make agent channel option additive in React hooks #2237
• Add missing RestAnnotation#delete typings #2218
• Throw on legacy v1 ably/promises and ably/callbacks imports #2227
• Mark v1 callback API as deprecated and throw on v1 callback shapes #2226
• Mark public ObjectMessage.id and .timestamp as optional #2230
• Change channels#release semantics to implicit detach rather than error on unexpected channel state #2190
• Bump ws to 8.20.1 to resolve security advisory #2225

Changelog

Sourced from ably's changelog.

2.26.0 (2026-07-22)

Full Changelog

What's Changed

• Add push.updateToken() to update the device's push token on React Native after the underlying push platform rotates it, keeping the device registration in sync with Ably #2267
• Add a useObject React hook for subscribing to LiveObjects state #2259
• PathObject.instance() method now returns undefined only if nothing exists at that path. It wraps whatever value resolves there: a LiveMap, a LiveCounter, or a primitive value. A primitive-backed Instance is read-only: it has no id and exposes the primitive via value().

2.25.0 (2026-07-17)

Full Changelog

What's Changed

• Add push notification support for React Native via the new ably/react-native-push plugin. Adds an asynchronous client.getDevice() and deprecates the synchronous client.device() #2262
• Surface previously silent failures when channel modes are missing: presence.get() without the presence_subscribe mode and channel.subscribe() without the subscribe mode now log an error, or throw when the new strictMode client option is enabled #2236

2.24.0 (2026-07-08)

Full Changelog

What's Changed

• Add iOS Live Activity support via APNs broadcast channels: push.admin.createApnsBroadcast and push.admin.liveActivity (start/update/end) #2253
• Fix: use error code 40106 for missing credentials #2254

2.23.0 (2026-06-19)

Full Changelog

What's Changed

• Allow omitting channelName in the React channel hooks to use the nearest ChannelProvider #2248
• Fix presence auto-reenter causing "Unable to perform operation on channel" NACKs after reconnecting from a transient disconnect; presence operations are now queued at the channel level until the channel next re-attaches #2241

2.22.1 (2026-06-08)

Full Changelog

What's Changed

• Fix v1-callback deprecated overloads breaking mock assignment by changing return type from never to void #2239

2.22.0 (2026-06-05)

Full Changelog

What's Changed

... (truncated)

Commits

• bbf10f6 Merge pull request #2272 from ably/release/2.26.0
• 92fb471 chore: release/2.26.0
• b0eb8d8 Merge pull request #2219 from ably/uts-liveobjects
• ad9fe96 Merge remote-tracking branch 'origin/main' into uts-liveobjects
• f47782d fix(uts): pin increment(null) null-means-omitted contract, fail fast on missi...
• e7d47b8 Merge pull request #2270 from ably/fix/rtlo4e10-root-tombstone-guard
• c971e8f fix(liveobjects): include serial and siteCode in the root-tombstone rejection...
• 9619f3d Merge pull request #2267 from ably/AIT-1183/rn-push-fix
• 104abc7 [AIT-1183] feat: add support for push token updates and synchronization on Re...
• b2b3544 Merge pull request #2269 from ably/fix-rewind-setoptions-test
• Additional commits viewable in compare view

Updates ora from 9.4.0 to 9.4.1

Release notes

Sourced from ora's releases.

v9.4.1

• Fix type definitions (#257) 431ebc4
• Fix failText type to accept unknown instead of Error, matching the actual promise rejection value bc3a283

---

sindresorhus/ora@v9.4.0...v9.4.1

Commits

• 79cd8c1 9.4.1
• bc3a283 Minor tweaks
• 431ebc4 Fix type definitions (#257)
• See full diff in compare view

Updates react from 19.2.6 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

• Performance improvements when decoding (#37087 by @​eps1lon)

19.2.7 (June 1st, 2026)

React Server Components

• Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (#36566 by @​unstubbable)

Changelog

Sourced from react's changelog.

19.2.7 (June 1, 2026)

React Server Components

• Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (@​unstubbable #36566)

Commits

• 1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
• b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
• 6117d7c Version 19.2.7 (#36591)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react since your current version.

Updates react-dom from 19.2.6 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

• Performance improvements when decoding (#37087 by @​eps1lon)

19.2.7 (June 1st, 2026)

React Server Components

• Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (#36566 by @​unstubbable)

Changelog

Sourced from react-dom's changelog.

19.2.7 (June 1, 2026)

React Server Components

• Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (@​unstubbable #36566)

Commits

• 1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
• b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
• 6117d7c Version 19.2.7 (#36591)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react-dom since your current version.

Updates smol-toml from 1.6.1 to 1.7.1

Release notes

Sourced from smol-toml's releases.

v1.7.1

This release includes flagging internal functions as @internal to strip them from the emitted type declarations.

Full Changelog: squirrelchat/smol-toml@v1.7.0...v1.7.1

v1.7.0

This version slightly changes the behaviour of stringify: integers beyond the safe range are always emitted as float numbers.

String decode logic has been rewritten, it is a bit faster now and uses a single-pass approach instead of a dual-pass approach as it did previously. The code should be a bit smaller too, though I didn't actually measure that.

The package is now published with source-maps, declaration-maps, and a copy of the original TypeScript source files. This will improve your DX if you're like me and like Ctrl+Click'ing things a lot. ;)

What's Changed

• improve performance of the string decode logic by @​cyyynthia
• fix(stringify): emit integer-valued numbers beyond the safe-integer range as floats by @​spokodev in squirrelchat/smol-toml#56
• publish source-maps, declaration-maps, and original source files by @​cyyynthia
• miscellaneous repository maintenance tasks by @​cyyynthia

New Contributors

• @​spokodev made their first contribution in squirrelchat/smol-toml#56

Full Changelog: squirrelchat/smol-toml@v1.6.1...v1.7.0

Commits

• 3e978a9 chore: bump versions
• 30f5c36 chore: add some @internal annotations
• f0e0399 chore(README.md): npmx, use star import
• a62f06f revert: keep using vite 7
• 89aa9a3 chore: remove prepare script
• 17c7974 chore: make devEngine more lax w/ node version
• e5280a3 ci: checkout repo first
• 241c256 chore: version bump
• 0bfe7f4 chore: build cjs with rolldown instead of esbuild
• e0620ab chore: fmt
• Additional commits viewable in compare view

Updates tar from 7.5.21 to 7.5.22

Commits

• 2a22bfc 7.5.22
• df1cd8d Allow transform to be falsey
• See full diff in compare view

Updates ws from 8.20.0 to 8.21.1

Release notes

Sourced from ws's releases.

8.21.1

Bug fixes

• Empty fragments are now counted toward the limit (a2f4e7c0).
• The default values of the maxBufferedChunks and maxFragments options have been reduced (f197ac65).

8.21.0

Features

• Introduced the maxBufferedChunks and maxFragments options (2b2abd45).

Bug fixes

• Fixed a remote memory exhaustion DoS vulnerability (2b2abd45).

A high volume of tiny fragments and data chunks could be sent by a peer, using modest network traffic, to crash a ws server or client due to OOM.

import { WebSocket, WebSocketServer } from 'ws';
const wss = new WebSocketServer({ port: 0 }, function () {
const data = Buffer.alloc(1);
const options = { fin: false };
const { port } = wss.address();
const ws = new WebSocket(ws://localhost:${port});
ws.on('open', function () {
(function send() {
ws.send(data, options, function (err) {
if (err) return;
send();
});
})();
});
ws.on('error', console.error);
ws.on('close', function (code, reason) {
console.log(client close - code: ${code} reason: ${reason.toString()});
});
});
wss.on('connection', function (ws) {
ws.on('error', console.error);
ws.on('close', function (code, reason) {
console.log(server close - code: ${code} reason: ${reason.toString()});
});
});

... (truncated)

Commits

• ae1de54 [dist] 8.21.1
• 8e9511b [ci] Trust Coveralls Homebrew tap
• f197ac6 [fix] Lower default values of maxBufferedChunks and maxFragments
• 8df8265 [ci] Update actions/checkout action to v7
• a2f4e7c [fix] Count empty fragments toward the limit (#2329)
• e79f912 [pkg] Approve install scripts for bufferutil and utf-8-validate
• 4ea355d [doc] Document 32-bit signed integer coercion for option values
• 2120f4c [example] Remove uuid dependency
• 4c534a6 [security] Add latest vulnerability to SECURITY.md
• bca91ad [dist] 8.21.0
• Additional commits viewable in compare view

Updates lucide-react from 1.14.0 to 1.28.0

Release notes

Sourced from lucide-react's releases.

Version 1.28.0

What's Changed

• feat(icons): improve calendar icons centre of gravity by @​karsa-mistmere in lucide-icons/lucide#4614

Full Changelog: lucide-icons/lucide@1.27.0...1.28.0

Version 1.27.0

What's Changed

• feat(icons): removed brand names from tags & revised brand stopwords by @​karsa-mistmere in lucide-icons/lucide#4575
• fix(docs): Fix site build by @​ericfennis in lucide-icons/lucide#4582
• fix(icons): optimised square-scissors icons by @​karsa-mistmere in lucide-icons/lucide#4581
• fix(packages/angular): add more supported attributes for SVG nodes by @​karsa-mistmere in lucide-icons/lucide#4570
• feat(icons): added pending-cw icon by @​NielsLazaroms in lucide-icons/lucide#4439
• fix(icons): changed zap and zap-off icons by @​kapowaz in lucide-icons/lucide#4536
• feat(icons): add square-off icon by @​october-learns in lucide-icons/lucide#4496
• chore(deps-dev): bump astro from 6.4.8 to 7.1.0 by @​dependabot[bot] in lucide-icons/lucide#4572
• fix(icons): changed toolbox icon by @​karsa-mistmere in lucide-icons/lucide#4571
• feat(icons): add scan-square by @​samuelalake in lucide-icons/lucide#4550
• feat(icons): added user-shield icon by @​MArtytraM99 in lucide-icons/lucide#3099
• feat(icons): added mosque icon by @​iskepr in lucide-icons/lucide#4494
• fix(request-review): Remove pull_request_target by @​ericfennis in lucide-icons/lucide#4593
• fix(icons): changed feather icon by @​karsa-mistmere in lucide-icons/lucide#4584
• feat(ci): added custom prettier plugin for icon SVG files by @​karsa-mistmere in lucide-icons/lucide#4576
• ci(ci.yml): Remove concurrency in ci.yml by @​ericfennis in lucide-icons/lucide#4595
• fix(icons): changed barrel icon by @​karsa-mistmere in lucide-icons/lucide#4592
• feat(lab): Migrate lab to main repo. by @​ericfennis in lucide-icons/lucide#4521
• fix(icons): changed trophy icon by @​karsa-mistmere in lucide-icons/lucide#4591
• feat(analytics): add utm source and medium by @​jguddas in lucide-...

  Description has been truncated

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
cli-web-cli	Ready	Preview	Aug 3, 2026 9:21am