Skip to content

deps(deps): bump sonner from 1.7.4 to 2.0.8 - #472

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/sonner-2.0.7
Closed

deps(deps): bump sonner from 1.7.4 to 2.0.8#472
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/sonner-2.0.7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor

Bumps sonner from 1.7.4 to 2.0.8.

Release notes

Sourced from sonner's releases.

v2.0.8

What's Changed

New Contributors

Full Changelog: emilkowalski/sonner@v2.0.7...v2.0.8

v2.0.7

Sonner now supports multiple <Toaster /> components, see more here.

What's Changed

New Contributors

Full Changelog: emilkowalski/sonner@v2.0.6...v2.0.7

v2.0.6

What's Changed

New Contributors

Full Changelog: emilkowalski/sonner@v2.0.5...v2.0.6

v2.0.5

Main goal of this update is to fix css import.

What's Changed

... (truncated)

Commits

@dependabot @github

dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot changed the title deps(deps): bump sonner from 1.7.4 to 2.0.7 deps(deps): bump sonner from 1.7.4 to 2.0.8 Aug 16, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/sonner-2.0.7 branch 3 times, most recently from 431dfb7 to e196e86 Compare August 17, 2026 19:25
Bumps [sonner](https://github.com/emilkowalski/sonner) from 1.7.4 to 2.0.8.
- [Release notes](https://github.com/emilkowalski/sonner/releases)
- [Commits](https://github.com/emilkowalski/sonner/commits/v2.0.8)

---
updated-dependencies:
- dependency-name: sonner
  dependency-version: 2.0.7
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/sonner-2.0.7 branch from e196e86 to 85eb649 Compare August 19, 2026 01:09
@sonarqubecloud

Copy link
Copy Markdown

@leocagli

Copy link
Copy Markdown
Collaborator

Cierro este bump por antigüedad: lleva más de 20 días abierto y no arregla ninguna vulnerabilidad, sólo sube una versión.

Dependabot lo vuelve a abrir con la versión vigente del momento si la actualización sigue teniendo sentido, así que no se pierde nada y la cola de revisión queda libre para los PR de personas.

Los bumps que sí arreglan vulnerabilidades quedan abiertos y se revisan aparte.

@leocagli leocagli closed this Aug 19, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 19, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/sonner-2.0.7 branch August 19, 2026 02:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant