Update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@​stanlemon/server-with-auth	^0.4.7 -> ^0.4.18			dependencies	patch
@​stanlemon/webdev	^0.2.51 -> ^0.2.64			dependencies	patch
@testing-library/jest-dom	^6.6.4 -> ^6.9.1			devDependencies	minor
@​twilio-paste/core	^21.3.0 -> ^21.5.0			dependencies	minor
@​twilio/conversations	^2.6.3 -> ^2.6.5			dependencies	patch
@types/luxon (source)	^3.7.0 -> ^3.7.1			devDependencies	patch
@types/react (source)	^19.1.9 -> ^19.2.7			devDependencies	minor
@types/react-dom (source)	^19.1.7 -> ^19.2.3			devDependencies	minor
concurrently	^9.2.0 -> ^9.2.1			devDependencies	patch
dotenv	^17.2.1 -> ^17.2.3			dependencies	patch
luxon	^3.7.1 -> ^3.7.2			dependencies	patch
node	22.17.1 -> 22.21.1			uses-with	minor
nodemon (source)	^3.1.10 -> ^3.1.11			devDependencies	patch
react (source)	^19.1.1 -> ^19.2.3			dependencies	minor
react-dom (source)	^19.1.1 -> ^19.2.3			dependencies	minor
twilio	^5.8.0 -> ^5.10.7			dependencies	minor

---

Release Notes

testing-library/jest-dom (@​testing-library/jest-dom)

v6.9.1

Compare Source

Bug Fixes

• Fix undefined Node error (nodejs) (#​707) (0ff8904)

v6.9.0

Compare Source

Features

• Add .toAppearBefore/.toAppearAfter matcher (#​702) (95f870a)

v6.8.0

Compare Source

Features

• add toBePartiallyPressed matcher (#​203) (#​692) (779b712)

v6.7.0

Compare Source

Features

• add toBePressed matcher (#​203) (#​658) (cfdf8ae)

open-cli-tools/concurrently (concurrently)

v9.2.1

Compare Source

What's Changed

• chore: update eslint-plugin-simple-import-sort from v10 to v12 by @​noritaka1166 in #​551
• chore: update eslint-config-prettier from v9 to v10 by @​noritaka1166 in #​552
• Remove lodash by @​gustavohenke in #​555
• chore: update coveralls-next from v4 to v5 by @​noritaka1166 in #​557
• Replace jest with vitest by @​gustavohenke in #​554
• Upgrade to pnpm v10 by @​paescuj in #​558
• chore: remove unused eslint-plugin-jest by @​noritaka1166 in #​559
• Minor dependency updates by @​paescuj in #​560
• Migrate to ESLint v9 by @​paescuj in #​561
• Update shell-quote to 1.8.3 by @​paescuj in #​562
• Full coverage by @​paescuj in #​563
• Update GH actions/workflows, enable NPM provenance by @​paescuj in #​564

Full Changelog: open-cli-tools/concurrently@v9.2.0...v9.2.1

motdotla/dotenv (dotenv)

v17.2.3

Compare Source

Changed

• Fixed typescript error definition (#​912)

v17.2.2

Compare Source

Added

• 🙏 A big thank you to new sponsor Tuple.app - the premier screen sharing app for developers on macOS and Windows. Go check them out. It's wonderful and generous of them to give back to open source by sponsoring dotenv. Give them some love back.

moment/luxon (luxon)

v3.7.2

Compare Source

• Fix ES6 packaging

actions/node-versions (node)

v22.21.1: 22.21.1

Compare Source

Node.js 22.21.1

v22.21.0: 22.21.0

Compare Source

Node.js 22.21.0

v22.20.0: 22.20.0

Compare Source

Node.js 22.20.0

v22.19.0: 22.19.0

Compare Source

Node.js 22.19.0

v22.18.0: 22.18.0

Compare Source

Node.js 22.18.0

remy/nodemon (nodemon)

v3.1.11

Compare Source

facebook/react (react)

v19.2.3: 19.2.3 (December 11th, 2025)

Compare Source

React Server Components

• Add extra loop protection to React Server Functions (@​sebmarkbage #​35351)

v19.2.2: 19.2.2 (December 11th, 2025)

Compare Source

React Server Components

• Move react-server-dom-webpack/*.unbundled to private react-server-dom-unbundled (@​eps1lon #​35290)
• Patch Promise cycles and toString on Server Functions (@​sebmarkbage, @​unstubbable #​35289)

v19.2.1: 19.2.1 (December 3rd, 2025)

Compare Source

React Server Components

• Bring React Server Component fixes to Server Actions (@​sebmarkbage #​35277)

v19.2.0

Compare Source

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

• <Activity>: A new API to hide and restore the UI and internal state of its children.
• useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.
• cacheSignal (for RSCs) lets your know when the cache() lifetime is over.
• React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

New React DOM Features

• Added resume APIs for partial pre-rendering with Web Streams:
  • resume: to resume a prerender to a stream.
  • resumeAndPrerender: to resume a prerender to HTML.
• Added resume APIs for partial pre-rendering with Node Streams:
  • resumeToPipeableStream: to resume a prerender to a stream.
  • resumeAndPrerenderToNodeStream: to resume a prerender to HTML.
• Updated prerender APIs to return a postponed state that can be passed to the resume APIs.

Notable changes

• React DOM now batches suspense boundary reveals, matching the behavior of client side rendering. This change is especially noticeable when animating the reveal of Suspense boundaries e.g. with the upcoming <ViewTransition> Component. React will batch as much reveals as possible before the first paint while trying to hit popular first-contentful paint metrics.
• Add Node Web Streams (prerender, renderToReadableStream) to server-side-rendering APIs for Node.js
• Use underscore instead of : IDs generated by useId

All Changes

React

• <Activity /> was developed over many years, starting before ClassComponent.setState (@​acdlite @​sebmarkbage and many others)
• Stringify context as "SomeContext" instead of "SomeContext.Provider" (@​kassens #​33507)
• Include stack of cause of React instrumentation errors with %o placeholder (@​eps1lon #​34198)
• Fix infinite useDeferredValue loop in popstate event (@​acdlite #​32821)
• Fix a bug when an initial value was passed to useDeferredValue (@​acdlite #​34376)
• Fix a crash when submitting forms with Client Actions (@​sebmarkbage #​33055)
• Hide/unhide the content of dehydrated suspense boundaries if they resuspend (@​sebmarkbage #​32900)
• Avoid stack overflow on wide trees during Hot Reload (@​sophiebits #​34145)
• Improve Owner and Component stacks in various places (@​sebmarkbage, @​eps1lon: #​33629, #​33724, #​32735, #​33723)
• Add cacheSignal (@​sebmarkbage #​33557)

React DOM

• Block on Suspensey Fonts during reveal of server-side-rendered content (@​sebmarkbage #​33342)
• Use underscore instead of : for IDs generated by useId (@​sebmarkbage, @​eps1lon: #​32001, #​33342#​33099, #​33422)
• Stop warning when ARIA 1.3 attributes are used (@​Abdul-Omira #​34264)
• Allow nonce to be used on hoistable styles (@​Andarist #​32461)
• Warn for using a React owned node as a Container if it also has text content (@​sebmarkbage #​32774)
• s/HTML/text for for error messages if text hydration mismatches (@​rickhanlonii #​32763)
• Fix a bug with React.use inside React.lazy-ed Component (@​hi-ogawa #​33941)
• Enable the progressiveChunkSize option for server-side-rendering APIs (@​sebmarkbage #​33027)
• Fix a bug with deeply nested Suspense inside Suspense fallback when server-side-rendering (@​gnoff #​33467)
• Avoid hanging when suspending after aborting while rendering (@​gnoff #​34192)
• Add Node Web Streams to server-side-rendering APIs for Node.js (@​sebmarkbage #​33475)

React Server Components

• Preload <img> and <link> using hints before they're rendered (@​sebmarkbage #​34604)
• Log error if production elements are rendered during development (@​eps1lon #​34189)
• Fix a bug when returning a Temporary reference (e.g. a Client Reference) from Server Functions (@​sebmarkbage #​34084, @​denk0403 #​33761)
• Pass line/column to filterStackFrame (@​eps1lon #​33707)
• Support Async Modules in Turbopack Server References (@​lubieowoce #​34531)
• Add support for .mjs file extension in Webpack (@​jennyscript #​33028)
• Fix a wrong missing key warning (@​unstubbable #​34350)
• Make console log resolve in predictable order (@​sebmarkbage #​33665)

React Reconciler

• createContainer and createHydrationContainer had their parameter order adjusted after on* handlers to account for upcoming experimental APIs

v19.1.4: 19.1.4 (December 11th, 2025)

Compare Source

React Server Components

• Add extra loop protection to React Server Functions (@​sebmarkbage #​35351)

v19.1.3: 19.1.3 (December 11th, 2025)

Compare Source

React Server Components

• Move react-server-dom-webpack/*.unbundled to private react-server-dom-unbundled (@​eps1lon #​35290)
• Patch Promise cycles and toString on Server Functions (@​sebmarkbage, @​unstubbable #​35289, #​35345)

v19.1.2: 19.1.2 (December 3rd, 2025)

Compare Source

React Server Components

• Bring React Server Component fixes to Server Actions (@​sebmarkbage #​35277)

twilio/twilio-node (twilio)

v5.10.7

Compare Source

Library - Chore

• PR #​1154: Regional API domain processing. Thanks to @​manisha1997!
• PR #​1150: Regional API domain processing. Thanks to @​manisha1997!

Api

• Add twiml_session resource for calls
• Add twiml_session resource for calls

Monitor

• Update default output properties

Trusthub

• Added customer_profile_sid in toll-free initialize api payload.

v5.10.6

Compare Source

Memory

• Memory API Changes

• Added initial Memory API endpoints with darkseagreen badge status

v5.10.5

Compare Source

Twiml

• Add new noun <ConversationRelaySession>
• Add support for <Recording> noun under <Start> verb

v5.10.4

Compare Source

Ai

• Add error as possible transcript status
• Add error as possible transcript status

Chat

• Updated v2 UserChannel channel_status from not_participating to notParticipating

Intelligence

• Make intelligence work with RestProxy
• Add additional enums to better represent the possible states
• Add error enum to transcription status to better align with possible outputs
• Add json output type to text classification

Trusthub

• Remove required parameter Primary Profile Sid from compliance_inquiry and compliance_inquiry_individual

Accounts

• Add Messaging GeoPermissions API changes

v5.10.3

Compare Source

Api

• Updated description for property CallerDisplayName for participant create request
• Updated description for property CallerDisplayName for participant create request

Accounts

• FILE_IS_AUTO_GENERATED: false

v5.10.2

Compare Source

Library - Chore

• PR #​1139: change oauth token endpoint. Thanks to @​tiwarishubham635!

Insights

• Replace field with key in Request Filters and Response Metadata Filters and for Reports API

v5.10.1

Compare Source

Library - Chore

• PR #​1137: revert esm changes. Thanks to @​manisha1997!
• PR #​1132: Add lib-esm and scripts directories to Dockerfile. Thanks to @​tiwarishubham635!

Api

• Added optional parameter CallerDisplayName for conference participant outbound
• Updated description for property to in the participant create request

v5.10.0

Compare Source

Library - Feature

• PR #​1130: Add ESM (ECMAScript Modules) support with dual CommonJS/ESM builds. Thanks to @​Copilot!

Library - Chore

• PR #​1131: upgrade axios due to security vulnerability. Thanks to @​tiwarishubham635!

Api

• Add date_created property to media resource and date_created filtering parameters for read action
• Updated the Recordings Resource channels property to clarify channels = # of channels in the recording resource and how to specify the # of channels in recording download

Intelligence

• Add encryption_credential_sid field in transcripts and services in v2

Trusthub

• Remove beta feature flag for all TH APIs
• Remove beta feature flag for ComplianceInquiries API to support OneConsole traffic

Twiml

• Add new noun <AiSession>

v5.9.0

Compare Source

Library - Feature

• PR #​1110: Add RestException export to main twilio package with examples and documentation. Thanks to @​Copilot!

Api

• Remove usage category enum from usage record and usage triggers API (breaking change)

v5.8.2

Compare Source

Library - Chore

• PR #​1116: upgrade typescript and typedoc version. Thanks to @​tiwarishubham635!

Studio

• Add type to Step resource APIs

Verify

• Allow to update all passkeys parameters in the service update

v5.8.1

Compare Source

Library - Chore

• PR #​1112: add close-stale-issues workflow. Thanks to @​tiwarishubham635!

Library - Fix

• PR #​1107: converting from any to string type. Thanks to @​manisha1997!

Accounts

• Update beta feature flag for consent and contact bulk upsert APIs

Api

• Add multiple missing usage categories to usage records and usage triggers api
• Add channels-whatsapp-template-marketing and channels-whatsapp-template-utility to usage categories

Conversations

• Fix state spelling for initializing enum value
• Update state to include intializing for ServiceConversationWithParticipants and ConversationWithParticipants

Flex

• Adding new optional parameter identity to web_channels API in version v2

Trusthub

• Add required Permissions to the ComplianceInquiries API

Verify

• Add passkeys support to Verify API creating and updating services.
• Update ienum type for Factor creation
• Add passkeys as challenge and factor type

---

Configuration

📅 Schedule: Branch creation - "after 2am and before 7am on Thursday" in timezone America/Indiana/Indianapolis, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.