chore(deps-dev): Bump the development-minor-patch group across 1 directory with 16 updates

[dependabot]

Bumps the development-minor-patch group with 16 updates in the / directory:

Package	From	To
@better-auth/core	1.7.1	1.7.2
@eslint/eslintrc	3.3.6	3.3.7
@next/eslint-plugin-next	16.3.2	16.3.4
@opentelemetry/context-async-hooks	2.10.0	2.11.0
@opentelemetry/sdk-trace-base	2.10.0	2.11.0
@react-email/ui	6.9.2	6.9.3
@testing-library/react	16.3.2	16.3.3
@testing-library/user-event	14.6.5	14.6.7
@types/react-dom	19.2.4	19.2.7
autoprefixer	10.5.4	10.5.5
eslint-config-next	16.3.2	16.3.4
happy-dom	20.11.6	20.14.0
lint-staged	17.3.0	17.4.1
postcss	8.5.26	8.5.28
tsx	4.23.12	4.23.13
typescript-eslint	8.67.0	8.69.0

Updates @better-auth/core from 1.7.1 to 1.7.2

Release notes

Sourced from @​better-auth/core's releases.

v1.7.2

better-auth

Bug Fixes

• Fixed permanent user bans to clear expiration dates from previous temporary bans. (#10823)
• Fixed client types with more plugins being assignable to types declaring fewer plugins. (#10907)
• Added warnings for invalid signed session data in the cookie cache. (#10934)
• Fixed disabled MyISAM indexes from satisfying migration index checks. (#10877)
• Fixed programmatic migrations on Cloudflare D1 while preserving existing-index validation. (#10875)
• Allowed ~ in relative callback URLs validated by trusted-origin checks. (#10041)
• Improved validation of relative callback and redirect URLs with paths, queries, and fragments. (#10979)
• Allowed same-origin form submissions with Referrer-Policy: no-referrer while continuing to reject untrusted origins. (#10959)
• Improved getTestInstance performance with a faster default password hasher. (#10879)
• Standardized built-in placeholder emails to the namespaced {identifier}@{namespace}.placeholder.invalid format. (#10982)

For detailed changes, see CHANGELOG

@better-auth/core

Bug Fixes

• Fixed async context loss in Cloudflare Workers bundles with multiple runtime conditions. (#10855)
• Fixed auth request logs to respect the configured logger, log level, and disabled setting. (#10939)
• Improved validation of relative callback and redirect URLs with paths, queries, and fragments. (#10979)
• Standardized built-in placeholder emails to the namespaced {identifier}@{namespace}.placeholder.invalid format. (#10982)
• Added synchronous and optional access to the current auth endpoint context. (#10938)

For detailed changes, see CHANGELOG

@better-auth/oauth-provider

Bug Fixes

• Fixed Client ID Metadata Document registration when clients share at least one supported grant with the server. (#11010)
• Improved validation of relative callback and redirect URLs with paths, queries, and fragments. (#10979)
• Fixed relative redirect URLs containing fragments. (#10983)

For detailed changes, see CHANGELOG

@better-auth/drizzle-adapter

Bug Fixes

• Fixed one-to-one Drizzle relations when usePlural is enabled. (#10941)
• Added validation for missing Drizzle schema fields in compound where clauses. (#10859)

For detailed changes, see CHANGELOG

@better-auth/kysely-adapter

... (truncated)

Changelog

Sourced from @​better-auth/core's changelog.

1.7.2

Patch Changes

• #10938 557e19b Thanks @​bytaesu! - Added synchronous auth endpoint context access with getCurrentAuthEndpointContext and optional access with tryGetCurrentAuthEndpointContext. The existing getCurrentAuthContext and getCurrentAuthContextAsyncLocalStorage functions remain available as deprecated compatibility APIs.

• #10855 64da15b Thanks @​bytaesu! - Prevent async context loss in Cloudflare Workers bundles that enable multiple runtime conditions.

• #10982 b4ad5a1 Thanks @​bytaesu! - Built-in placeholder emails now consistently use the namespaced {identifier}@{namespace}.placeholder.invalid format.

• #10979 fced1a5 Thanks @​bytaesu! - Allow relative callback and redirect URLs to use standard path, query, and fragment syntax while preserving open-redirect protections.

• #10939 e1d4011 Thanks @​bytaesu! - Logs emitted while handling auth requests now respect the configured custom logger, log level, and disabled setting.

Commits

• ba12fcd chore: release v1.7.2 (#10870)
• 79904f0 fix(origin-check): support fragments in relative redirect URLs (#10983)
• e1d4011 fix(logger): respect configured logger in auth request context (#10939)
• 557e19b refactor(context): clarify auth endpoint context access (#10938)
• b4ad5a1 refactor: centralize placeholder email generation (#10982)
• 64da15b fix(core): prioritize workerd over edge exports (#10855)
• See full diff in compare view

Updates @eslint/eslintrc from 3.3.6 to 3.3.7

Release notes

Sourced from @​eslint/eslintrc's releases.

eslintrc: v3.3.7

3.3.7 (2026-09-01)

Bug Fixes

• Bump js-yaml to 4.3.1 (#239) (f27e7c9)
• update js-yaml to 4.3.2 to address security vulnerability (#243) (bb0d97a)

Changelog

Sourced from @​eslint/eslintrc's changelog.

3.3.7 (2026-09-01)

Bug Fixes

• Bump js-yaml to 4.3.1 (#239) (f27e7c9)
• update js-yaml to 4.3.2 to address security vulnerability (#243) (bb0d97a)

Commits

• 7943fa6 chore: release 3.3.7 🚀 (#240)
• bb0d97a fix: update js-yaml to 4.3.2 to address security vulnerability (#243)
• 5b4abc9 docs: Update README sponsors
• f27e7c9 fix: Bump js-yaml to 4.3.1 (#239)
• b75e1d2 docs: Update README sponsors
• 302c133 docs: Update README sponsors
• e62e766 docs: Update README sponsors
• cf27f9f docs: Update README sponsors
• c7f4cdf docs: Update README sponsors
• 3319822 docs: Update README sponsors
• Additional commits viewable in compare view

Updates @next/eslint-plugin-next from 16.3.2 to 16.3.4

Release notes

Sourced from @​next/eslint-plugin-next's releases.

v16.3.4

Follow-up release to v16.3.3 re-enabling AVIF Image Optimization (#97949).

The following bug fixes have been backported. It does not include all pending features/changes on canary.

• testmode: Fix infinite recursion in testmode passthrough fetch (#97691)
• Fix build error when aliasing typescript to @​typescript/typescript6 (#97997)
• Fix unset crossOrigin in Turbopack manifests (#97930)

Credits

Huge thanks to @​eps1lon, @​mischnic, and @​timneutkens for helping!

v16.3.3

This release contains security fixes for the following advisories:

Critical:

• Unauthenticated Remote Code Execution on windows-hosted servers
• Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used

Commits

• 299180d v16.3.4
• a9a1cb7 v16.3.3
• See full diff in compare view

Updates @opentelemetry/context-async-hooks from 2.10.0 to 2.11.0

Release notes

Sourced from @​opentelemetry/context-async-hooks's releases.

v2.11.0

2.11.0

🚀 Features

• feat(context-async-hooks): implement attach() on AsyncLocalStorageContextManager #6845 @​pichlermarc
  • On Node.js 25.9+, delegates to AsyncLocalStorage.withScope() returning a native RunScope. On older Node.js, falls back to enterWith() with a manual disposable wrapper.
• feat(sdk-trace): allow configuring the force flush timeout per call #6929 @​LarryHu0217

🐛 Bug Fixes

• fix(sdk-metrics): ignore Infinity in exponential histograms #7015 @​mwear

🏠 Internal

• perf(sdk-metrics): reuse a single DataView for exponential histogram bit reads #6998 @​mwear
• chore(ci): run documentation tests on a weekly schedule #6920 @​LarryHu0217
• feat(ci): support pre-releases and major version bumps in the release workflow #6768 @​pichlermarc
• chore(resources): Ensure that multiple uses of serviceInstanceIdDetector.detect() return the same value for service.instance.id

Changelog

Sourced from @​opentelemetry/context-async-hooks's changelog.

2.11.0

🚀 Features

• feat(context-async-hooks): implement attach() on AsyncLocalStorageContextManager #6845 @​pichlermarc
  • On Node.js 25.9+, delegates to AsyncLocalStorage.withScope() returning a native RunScope. On older Node.js, falls back to enterWith() with a manual disposable wrapper.
• feat(sdk-trace): allow configuring the force flush timeout per call #6929 @​LarryHu0217

🐛 Bug Fixes

• fix(sdk-trace-base): avoid a Webpack self-reference error in CommonJS output #6981 @​sansynx
• fix(sdk-metrics): ignore Infinity in exponential histograms #7015 @​mwear

🏠 Internal

• perf(sdk-metrics): reuse a single DataView for exponential histogram bit reads #6998 @​mwear
• chore(ci): run documentation tests on a weekly schedule #6920 @​LarryHu0217
• feat(ci): support pre-releases and major version bumps in the release workflow #6768 @​pichlermarc
• chore(resources): Ensure that multiple uses of serviceInstanceIdDetector.detect() return the same value for service.instance.id

Commits

• 0b72a81 chore: prepare next release (#7044)
• a9c5338 ci: roll prerelease changelog into one final release changelog (#7045)
• f41805e chore: prepare next release (#7042)
• b85eb28 chore(instrumentation-http): fix lint errors (#7039)
• 3f92530 ci: support pre-releases and major version bumps in release workflow (#7035)
• 82a5831 docs(otlp-exporter-base): document HTTP exporter options (#6735)
• e086dec Merge commit from fork
• 59dac70 chore(deps): update jamesives/github-pages-deploy-action action to v4.9.0 (#7...
• d0ce753 chore: add @​maryliag to maintainers (#7024)
• 03469a1 chore(deps): update open-telemetry/shared-workflows action to v0.10.0 (#7032)
• Additional commits viewable in compare view

Updates @opentelemetry/sdk-trace-base from 2.10.0 to 2.11.0

Release notes

Sourced from @​opentelemetry/sdk-trace-base's releases.

v2.11.0

2.11.0

🚀 Features

• feat(context-async-hooks): implement attach() on AsyncLocalStorageContextManager #6845 @​pichlermarc
  • On Node.js 25.9+, delegates to AsyncLocalStorage.withScope() returning a native RunScope. On older Node.js, falls back to enterWith() with a manual disposable wrapper.
• feat(sdk-trace): allow configuring the force flush timeout per call #6929 @​LarryHu0217

🐛 Bug Fixes

• fix(sdk-metrics): ignore Infinity in exponential histograms #7015 @​mwear

🏠 Internal

• perf(sdk-metrics): reuse a single DataView for exponential histogram bit reads #6998 @​mwear
• chore(ci): run documentation tests on a weekly schedule #6920 @​LarryHu0217
• feat(ci): support pre-releases and major version bumps in the release workflow #6768 @​pichlermarc
• chore(resources): Ensure that multiple uses of serviceInstanceIdDetector.detect() return the same value for service.instance.id

Changelog

Sourced from @​opentelemetry/sdk-trace-base's changelog.

2.11.0

🚀 Features

• feat(context-async-hooks): implement attach() on AsyncLocalStorageContextManager #6845 @​pichlermarc
  • On Node.js 25.9+, delegates to AsyncLocalStorage.withScope() returning a native RunScope. On older Node.js, falls back to enterWith() with a manual disposable wrapper.
• feat(sdk-trace): allow configuring the force flush timeout per call #6929 @​LarryHu0217

🐛 Bug Fixes

• fix(sdk-trace-base): avoid a Webpack self-reference error in CommonJS output #6981 @​sansynx
• fix(sdk-metrics): ignore Infinity in exponential histograms #7015 @​mwear

🏠 Internal

• perf(sdk-metrics): reuse a single DataView for exponential histogram bit reads #6998 @​mwear
• chore(ci): run documentation tests on a weekly schedule #6920 @​LarryHu0217
• feat(ci): support pre-releases and major version bumps in the release workflow #6768 @​pichlermarc
• chore(resources): Ensure that multiple uses of serviceInstanceIdDetector.detect() return the same value for service.instance.id

Commits

• 0b72a81 chore: prepare next release (#7044)
• a9c5338 ci: roll prerelease changelog into one final release changelog (#7045)
• f41805e chore: prepare next release (#7042)
• b85eb28 chore(instrumentation-http): fix lint errors (#7039)
• 3f92530 ci: support pre-releases and major version bumps in release workflow (#7035)
• 82a5831 docs(otlp-exporter-base): document HTTP exporter options (#6735)
• e086dec Merge commit from fork
• 59dac70 chore(deps): update jamesives/github-pages-deploy-action action to v4.9.0 (#7...
• d0ce753 chore: add @​maryliag to maintainers (#7024)
• 03469a1 chore(deps): update open-telemetry/shared-workflows action to v0.10.0 (#7032)
• Additional commits viewable in compare view

Updates @react-email/ui from 6.9.2 to 6.9.3

Release notes

Sourced from @​react-email/ui's releases.

@​react-email/ui@​6.9.3

Patch Changes

• 1378365: Keep the sidebar scroll position, its collapsed state, and open folders when you switch emails.

Changelog

Sourced from @​react-email/ui's changelog.

6.9.3

Patch Changes

• 1378365: Keep the sidebar scroll position, its collapsed state, and open folders when you switch emails.

Commits

• 4f30679 chore(root): version packages (#3713)
• 1378365 fix(ui): keep sidebar scroll when switching emails (#3677)
• See full diff in compare view

Updates @testing-library/react from 16.3.2 to 16.3.3

Release notes

Sourced from @​testing-library/react's releases.

v16.3.3

16.3.3 (2026-08-27)

Bug Fixes

• Avoid act() re-entrant when dispatching events (#1468) (20ce75f)

Commits

• 20ce75f fix: Avoid act() re-entrant when dispatching events (#1468)
• be9d81d docs: fix typos in comments and types (#1446)
• See full diff in compare view

Updates @testing-library/user-event from 14.6.5 to 14.6.7

Release notes

Sourced from @​testing-library/user-event's releases.

v14.6.7

14.6.7 (2026-09-02)

Bug Fixes

• normalize DataTransfer format aliases (#1326) (1e0020b)
• feature: Add iframe support for user.keyboard typing (#1275) (1e0020b)

v14.6.6

14.6.6 (2026-08-22)

Bug Fixes

• default pointer event pointerType to empty string instead of the string "undefined" (#1325) (71a5475)

Commits

• 1e0020b fix: normalize DataTransfer format aliases (#1326)
• d4b0593 feature: Add iframe support for user.keyboard typing (#1275)
• 71a5475 fix: default pointer event pointerType to empty string instead of the string ...
• See full diff in compare view

Updates @types/react-dom from 19.2.4 to 19.2.7

Commits

• See full diff in compare view

Updates autoprefixer from 10.5.4 to 10.5.5

Release notes

Sourced from autoprefixer's releases.

10.5.5

• Fixed resolution media query parsing performance (by @​NotAFlightRisk).

Changelog

Sourced from autoprefixer's changelog.

10.5.5

• Fixed resolution media query parsing performance (by @​NotAFlightRisk).

Commits

• 7e81fff Release 10.5.5 version
• d9e3531 Update dependencies
• 34b3a3e Fix media query parse performance
• 265521e Remove Cult
• dd80d38 Update EM banner
• See full diff in compare view

Updates eslint-config-next from 16.3.2 to 16.3.4

Release notes

Sourced from eslint-config-next's releases.

v16.3.4

Follow-up release to v16.3.3 re-enabling AVIF Image Optimization (#97949).

The following bug fixes have been backported. It does not include all pending features/changes on canary.

• testmode: Fix infinite recursion in testmode passthrough fetch (#97691)
• Fix build error when aliasing typescript to @​typescript/typescript6 (#97997)
• Fix unset crossOrigin in Turbopack manifests (#97930)

Credits

Huge thanks to @​eps1lon, @​mischnic, and @​timneutkens for helping!

v16.3.3

This release contains security fixes for the following advisories:

Critical:

• Unauthenticated Remote Code Execution on windows-hosted servers
• Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used

Commits

• 299180d v16.3.4
• a9a1cb7 v16.3.3
• See full diff in compare view

Updates happy-dom from 20.11.6 to 20.14.0

Release notes

Sourced from happy-dom's releases.

v20.14.0

🎨 Features

• Improves computed style cache - By @​capricorn86 in task #2357

v20.13.2

👷‍♂️ Patch fixes

• Fix problem with getComputedStyle with :host and :host-context selectors - By @​capricorn86 in task #2349

v20.13.1

👷‍♂️ Patch fixes

• GetComputedStyle should return inherited value when it is set to inherit - By @​capricorn86 in task #2347

v20.13.0

🎨 Features

• Adds support for :host psuedo query selector - By @​capricorn86 in task #2345

v20.12.2

👷‍♂️ Patch fixes

• Custom elements should be upgraded when connected to DOM - By @​capricorn86 in task #2342

v20.12.1

🎨 Features

• Adds support for kebab-case properties on CSSStyleDeclaration - By @​capricorn86 in task #2256
• Adds support for all Chromium CSS properties to CSSStyleDeclaration - By @​capricorn86 in task #2256
  • Downloads a list from the Chromium project when compiling

👷‍♂️ Patch fixes

• Fixes issue with parsing CSS fallback variables - By @​capricorn86 in task #2256

v20.12.0

🎨 Features

• Adds support for Animation, AnimationTimeline, DocumentTimeline and KeyframeEffect - By @​capricorn86
• Adds support for Element.animate() - By @​capricorn86

v20.11.15

👷‍♂️ Patch fixes

• Fixes issue with upgrading custom element caused by previous release - By @​capricorn86 in task #2331

v20.11.14

👷‍♂️ Patch fixes

• Change prototype of element to the custom element when upgraded to keep the reference - By @​capricorn86 in task #2331
  • The previous solution replaced the element with the custom element and copied it's properties, but this made any reference to the original element invalid

v20.11.13

👷‍♂️ Patch fixes

• Copy event listeners when upgrading a custom element - By @​capricorn86 in task #2329

v20.11.12

👷‍♂️ Patch fixes

• Add check for if the node is still a parent during disconnect - By @​capricorn86 in task #2322

... (truncated)

Commits

• eac5a38 feat: #2357 Improves computed style cache (#2358)
• 5b3559b fix: #2349 Fix problem with getComputedStyle with :host and :host-context s...
• f33da73 fix: #2347 getComputedStyle should return inherited value when it is set to...
• 68b9806 feat: #2345 Adds support for :host psuedo query selector (#2346)
• 9300a9f fix: #2342 Custom elements should be upgraded when connected to DOM (#2343)
• 103ccde fix: #2256 Fixes issue when parsing CSS fallback variables (#2341)
• 4b0af0c feat: Adds support for Element.animate (#2335)
• e1a8af5 fix: #2331 Fixes issue with upgrading custom element caused by previous rel...
• 096317b fix: #2331 Change prototype of element to the custom element when upgraded ...
• 9ff4b47 fix: #2329 Copy event listeners when upgrading a custom element (#2330)
• Additional commits viewable in compare view

Updates lint-staged from 17.3.0 to 17.4.1

Release notes

Sourced from lint-staged's releases.

v17.4.1

17.4.1

Patch Changes

• #1840 efe5b63 - This is a version-bump-only release because the previous version 17.4.0 was not published to npmjs.com due to problems with GitHub Actions and Changesets.

17.4.0

Minor Changes

• #1836 90ec282 - Added a new defineConfig helper for type-checking the lint-staged configuration:

  // lint-staged.config.ts
  import { defineConfig } from 'lint-staged/config'
  export default defineConfig({
  '*.js': ['prettier --check', 'eslint'],
  })

• #1832 510a27c - Added a new flag --all to make lint-staged include all files tracked by Git, instead of only staged.

  By default lint-staged only runs tasks on files that include staged changes (hence the name). Use this flag to include all files tracked in Git version control (standard exclusions apply). Using this flag implies the --no-stash flag, disabling the automatic backup, and the --allow-empty flag so that lint-staged doesn't fail when there are no changes after running. This makes it easier to run npx lint-staged --all on a clean state, for example in CI.

Patch Changes

• #1838 69bec99 - The behavior of the automatic backup stash has been improved when running lint-staged in multiple worktrees in parallel. You should still avoid running multiple instances of lint-staged in parallel in the same tree, because some of the Git operations are locking and might lead to data loss.

• #1839 5e5bdd2 - Parsing of lint-staged CLI flags and Node.js API options has been rewritten to avoid inconsistent behavior between the two.

Changelog

Sourced from lint-staged's changelog.

17.4.1

Patch Changes

• #1840 efe5b63 - This is a version-bump-only release because the previous version 17.4.0 was not published to npmjs.com due to problems with GitHub Actions and Changesets.

17.4.0

Minor Changes

• #1836 90ec282 - Added a new defineConfig helper for type-checking the lint-staged configuration:

  // lint-staged.config.ts
  import { defineConfig } from 'lint-staged/config'
  export default defineConfig({
  '*.js': ['prettier --check', 'eslint'],
  })

• #1832 510a27c - Added a new flag --all to make lint-staged include all files tracked by Git, instead of only staged.

  By default lint-staged only runs tasks on files that include staged changes (hence the name). Use this flag to include all files tracked in Git version control (standard exclusions apply). Using this flag implies the --no-stash flag, disabling the automatic backup, and the --allow-empty flag so that lint-staged doesn't fail when there are no changes after running. This makes it easier to run npx lint-staged --all on a clean state, for example in CI.

Patch Changes

• #1838 69bec99 - The behavior of the automatic backup stash has been improved when running lint-staged in multiple worktrees in parallel. You should still avoid running multiple instances of lint-staged in parallel in the same tree, because some of the Git operations are locking and might lead to data loss.

• #1839 5e5bdd2 - Parsing of lint-staged CLI flags and Node.js API options has been rewritten to avoid inconsistent behavior between the two.

Commits

• d0c1517 Merge pull request #1841 from lint-staged/changeset-release/main
• f061335 chore(changeset): release
• d2721af Merge pull request #1840 from lint-staged/updates
• efe5b63 ci: update Changesets action because it failed to publish
• cd76ce3 build: update dependencies
• ea195e1 Merge pull request #1837 from lint-staged/changeset-release/main
• a6a0d61 chore(changeset): release
• 0a09098 Merge pull request #1832 from lint-staged/add-all-flag
• 7fd685b fix: further fix parsing options logic
• 510a27c feat: add --all flag for including all files tracked by Git instead of just...
• Additional commits viewable in compare view

Updates postcss from 8.5.26 to 8.5.28

Release notes

Sourced from postcss's releases.

8.5.28

• Fixes types regression.

8.5.27

• Fixed removing any comments starting with /*# (by @​dylanpulver).
• Fixed * hack before a comment in Custom Properties (by @​Jaybhade).
• Fixed empty values in the middle of list.comma() (by @​MahinAnowar).
• Fixed whitespace-only values in list.space() (by @​MahinAnowar).
• Fixed rule’s end position on space before semicolon (by @​maximilliangrand).
• Fixed types (by @​romainmenke).
• Fixed Chinese text in deprecation warning (by @​Jesse205).

Changelog

Sourced from postcss's changelog.

8.5.28

• Fixes types regression.

8.5.27

• Fixed removing any comments starting with /*# (by @​dylanpulver).
• Fixed * hack before a comment in Custom Properties (by @​Jaybhade).
• Fixed empty values in the middle of list.comma() (by @​MahinAnowar).
• Fixed whitespace-only values in list.space() (by @​MahinAnowar).
• Fixed rule’s end position on space before semicolon (by @​maximilliangrand).
• Fixed types (by @​romainmenke).
• Fixed Chinese text in deprecation warning (by @​Jesse205).

Commits

• e544bff Release 8.5.28 version
• f8fc252 Typo
• 5039fd7 Add missed release notes
• ae40ca4 Release 8.5.27 version
• 62b1626 Fix linter
• 1dba938 Update dependencies
• 3e82edc Keep non-annotation comments when the processor has no plugins (#2150)
• 6d23bc3 Fix link
• 508e997 Add GitHub Sponsors link
• e993739 Add CodeRabbit sponsor (#2145)
• Additional commits viewable in compare view

Updates tsx from 4.23.12 to 4.23.13

Release notes

Sourced from tsx's releases.

v4.23.13

4.23.13 (2026-08-30)

Bug Fixes

• cache: bound shared transform cache memory (#835) (28e1f12)

---

This release is also available on:

• npm package (@​latest dist-tag)

Commits

• 28e1f12 fix(cache): bound shared transform cache memory (#835)
• See full diff in compare view

Updates typescript-eslint from 8.67.0 to 8.69.0

Release notes

Sourced from typescript-eslint's releases.

...

Description has been truncated

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.