chore(deps)(deps): bump the minor-and-patch group across 1 directory with 2 updates

[dependabot]

Bumps the minor-and-patch group with 2 updates in the / directory: @next/third-parties and recharts.

Updates @next/third-parties from 16.2.10 to 16.2.12

Release notes

Sourced from @​next/third-parties's releases.

v16.2.12

What's Changed

• Backport/docs fixes 16.2 - July round by @​icyJoseph in vercel/next.js#96031
• [Backport] Fixes to support TypeScript 7 by @​lukesandberg in vercel/next.js#95831

Full Changelog: vercel/next.js@v16.2.11...v16.2.12

v16.2.11

This release contains security fixes for the following advisories:

High:

• Denial of Service in App Router using Server Actions
• Middleware / Proxy bypass in App Router applications using Turbopack and single locale
• Server-Side Request Forgery in rewrites via attacker-controlled destination hostname
• Server-Side Request Forgery in Server Actions on custom servers

Moderate:

• Cache confusion of response bodies for requests with bodies
• Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences
• Denial of Service in the Image Optimization API using SVGs
• Unauthenticated disclosure of internal Server Function endpoints
• Unbounded Server Action payload in Edge runtime

Commits

• 2234717 v16.2.12
• 9beca08 v16.2.11
• See full diff in compare view

Updates recharts from 3.9.2 to 3.10.1

Release notes

Sourced from recharts's releases.

v3.10.1

What's Changed

• fix(Pie): pass computed innerRadius/outerRadius to Label children via PolarLabelContextProvider by @​0007aadil in recharts/recharts#7458
• chore(deps): bump immer from 11.1.9 to 11.1.15 by @​dependabot[bot] in recharts/recharts#7575
• fix(tooltip): fall back to index-based search when label-based search returns undefined for allowDuplicatedCategory=false by @​hxy-asdw in recharts/recharts#7573
• fix(bar): keep barGap correct when maxBarSize clamps the bar width (#2774) by @​sobol-sudo in recharts/recharts#7582

New Contributors

• @​0007aadil made their first contribution in recharts/recharts#7458
• @​hxy-asdw made their first contribution in recharts/recharts#7573
• @​sobol-sudo made their first contribution in recharts/recharts#7582

Full Changelog: recharts/recharts@v3.10.0...v3.10.1

v3.10.0

What's Changed

Legend position

Legend now supports position and offset props, same as Label and LabeList. This replaces the previous align and verticalAlign for a more convenient positioning, and fixes couple visual bugs too. See https://recharts.github.io/en-US/examples/LegendPosition/

• Legend position and offset by @​PavelVanecek in recharts/recharts#7564

XAxis auto height

XAxis now supports height="auto" prop, similar to YAxis width="auto".

• feat(XAxis): support height="auto" to size the axis to its tick labels by @​kimlj in recharts/recharts#7570

Other features

• feat(Sankey): support accessibilityLayer, title and desc props by @​MahinAnowar in recharts/recharts#7546

Bugfixes

• fix: clear stale active bar layer state by @​pupuking723 in recharts/recharts#7547
• fix(Brush): slide snaps back to original position on mouseup when start/endIndex are controlled by @​MaksZhukov in recharts/recharts#7542
• fix(Tooltip): find the active sector in the angle-axis wrap-around gap by @​MahinAnowar in recharts/recharts#7550
• fix(Brush): keep controlled startIndex/endIndex on data updates by @​momomuchu in recharts/recharts#7530
• Fix Legend type by @​PavelVanecek in recharts/recharts#7560
• fix(Label): pass computed position attributes to custom label content by @​MahinAnowar in recharts/recharts#7549
• fix(CartesianAxis): skip renderedTicks dispatch when tick values are unchanged by @​kimlj in recharts/recharts#7565
• fix: prevent getBandSizeOfAxis from collapsing band size due to floating-point tick gaps by @​xianjianlf2 in recharts/recharts#7556
• fix(Area): connectNulls connects across stacked points where every series is null by @​kimlj in recharts/recharts#7566

New Contributors

• @​MahinAnowar made their first contribution in recharts/recharts#7546
• @​MaksZhukov made their first contribution in recharts/recharts#7542
• @​momomuchu made their first contribution in recharts/recharts#7530
• @​kimlj made their first contribution in recharts/recharts#7565

... (truncated)

Commits

• ffb9187 3.10.1
• 411b6f2 fix(bar): keep barGap correct when maxBarSize clamps the bar width (#2774) (#...
• 58c321b chore(deps-dev): bump postcss from 8.5.10 to 8.5.22 (#7581)
• f08972b chore(deps-dev): bump the storybook group with 8 updates (#7578)
• 89599d0 chore(deps-dev): bump chromatic from 11.29.0 to 18.1.0 (#7579)
• 3da7d87 chore(deps-dev): bump typescript-eslint from 8.64.0 to 8.65.0 in the typescri...
• 9764273 chore(deps-dev): bump marked from 18.0.5 to 18.0.7 (#7577)
• a5d7737 fix(tooltip): fall back to index-based search when label-based search returns...
• 497e8df chore(deps-dev): bump fast-uri from 3.1.2 to 3.1.4 (#7576)
• 0776eb0 chore(deps): bump immer from 11.1.9 to 11.1.15 (#7575)
• Additional commits viewable in compare view

[dependabot]

Assignees

The following users could not be added as assignees: aicodingstack/maintainers. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Please fix the above issues or remove invalid values from dependabot.yml.

[ericyangpan]

@dependabot recreate

Please recreate this update from the current main using pnpm-lock.yaml; the existing branch predates the pnpm migration and still modifies the removed package-lock.json.

[github-actions]

Preview deployment

Status	URL
Skipped	-

Commit: 9658d40
Updated: 2026-07-29T17:46:20.420Z

Reason: Dependabot-triggered workflows do not have access to repository secrets in this workflow.

If you want a preview deployment, please ask a maintainer to run this from a branch within the main repository.