chore(deps): bump the patch-updates group across 1 directory with 5 updates

[dependabot]

Bumps the patch-updates group with 5 updates in the / directory:

Package	From	To
@ledgerhq/hw-app-str	7.7.6	7.7.7
@upstash/redis	1.38.0	1.38.2
dompurify	3.4.12	3.4.13
next-intl	4.13.2	4.13.5
postcss	8.5.19	8.5.26

Updates @ledgerhq/hw-app-str from 7.7.6 to 7.7.7

Release notes

Sourced from @​ledgerhq/hw-app-str's releases.

gh-attach attachments

This is a dummy release used by gh-attach as storage for attachment files linked from issues and pull requests.

[!WARNING] Do not delete this release or its assets — doing so will break attachment links and embeds that reference them.

Commits

• See full diff in compare view

Updates @upstash/redis from 1.38.0 to 1.38.2

Release notes

Sourced from @​upstash/redis's releases.

@​upstash/redis@​1.38.2

Patch Changes

• c0f5ad7: Deduplicate telemetry header values so repeated mergeTelemetry calls no longer append the same sdk, platform or runtime tag multiple times

@​upstash/redis@​1.38.1

Patch Changes

• bd7a19f: Add a quick tip about creating a database via https://upstash.com/start-redis to the warnings shown when the Redis url or token is missing. On Cloudflare, the warning shown when both the url and the token are missing now names both wrangler secret put commands instead of only one.

Commits

• fc3089b chore: version packages (#1441)
• c0f5ad7 fix: deduplicate telemetry header values in mergeTelemetry (#1440)
• e45fb78 chore: version packages (#1439)
• bd7a19f DX-2866: add start-redis tip to missing url/token warnings (#1438)
• 8cf6209 fix: stabilize flaky evalshaRo test by waiting for script replication
• 3024bb2 DX-2750: add ai sdk telemetry to redis search example (#1437)
• bf3f48a chore: add resource section to README (#1435)
• 27f7253 docs: add quick tip for fast Redis database setup
• e93fef5 fix: add allowBuilds for pnpm 11 compatibility (#1434)
• See full diff in compare view

Updates dompurify from 3.4.12 to 3.4.13

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.13

• Fixed an issue with hook removal during IN_PLACE sanitization, thanks @​koyokr
• Fixed an issue with hooks potentially bypassing the clone guard, thanks @​AkshayjainG
• Fixed an issue with DOM clobbering via ownerDocument during IN_PLACE, thanks @​AkshayjainG
• Bumped several dependencies where possible

Commits

• 3067f77 release: 3.4.13 (#1562)
• See full diff in compare view

Updates next-intl from 4.13.2 to 4.13.5

Release notes

Sourced from next-intl's releases.

v4.13.5

4.13.5 (2026-08-04)

Bug Fixes

• Deprecate setRequestLocale and add blog post on next/root-params (#1632) – by @​amannn

v4.13.4

4.13.4 (2026-07-23)

Bug Fixes

• Avoid usePathname() reads for non-locale-switching links, avoiding unnecessary <Suspense> wrappers with partial prefetching (#2362) (82de47f) – by @​ceolinwill

v4.13.3

4.13.3 (2026-07-21)

Bug Fixes

• Next.js 16.3 compatibility preparation (only update locale cookie for document requests and not prefetches) (#2355) (0555ace) – by @​amannn

Changelog

Sourced from next-intl's changelog.

4.13.5 (2026-08-04)

Bug Fixes

• Deprecate setRequestLocale and add blog post on next/root-params (#1632) (1446d0d) – by @​amannn

4.13.4 (2026-07-23)

Bug Fixes

• Avoid usePathname() reads for non-locale-switching links, avoiding unnecessary <Suspense> wrappers with partial prefetching (#2362) (82de47f) – by @​ceolinwill

4.13.3 (2026-07-21)

Bug Fixes

• Next.js 16.3 compatibility preparation (only update locale cookie for document requests and not prefetches) (#2355) (0555ace) – by @​amannn

Commits

• 672b4b6 v4.13.5
• 1446d0d fix: Deprecate setRequestLocale and add blog post on next/root-params (#1...
• e671f92 docs: Add guidance for messages defined outside of components (#2367)
• a2da470 docs: Add studio link to footer (#2366)
• 14e7406 docs: Update eloqnt/cli links
• 567afd1 ci: Rename root publish script to release (#2365)
• 87b1a2a ci: Fix release recovery to run from release.yml (Trusted Publishing) (#2364)
• 49005db ci: Add manual recovery workflow for partial npm publishes (#2363)
• 7fa175d v4.13.4
• 82de47f fix: Avoid usePathname() reads for non-locale-switching links, avoiding unn...
• Additional commits viewable in compare view

Updates postcss from 8.5.19 to 8.5.26

Release notes

Sourced from postcss's releases.

8.5.26

• Fixed list.split() regression (by @​lazerg).
• Track symlinks in path protection in source map loading (by @​drengir1).

8.5.25

• Fixed 8.5.17 visitor regression.
• Fixed list.split() for non-string values (by @​amir-rezaei).

8.5.24

• Preserve the BOM after the processing (by @​hdimer).

8.5.23

• Do not load source map without opts.from for security reasons.

8.5.22

• Fixed custom property losing semicolon before a comment (by @​sarathfrancis90).

8.5.21

• Fixed childless at-rule losing semicolon before comment (by @​sarathfrancis90).
• Fixed docs (by @​isker).

8.5.20

• Fixed missing space if AtRule#params is set after (by @​sarathfrancis90).
• Fixed mixing AST error on warnings (by @​MahinAnowar).

Changelog

Sourced from postcss's changelog.

8.5.26

• Fixed list.split() regression (by @​lazerg).
• Track symlinks in path protection in source map loading (by @​drengir1).

8.5.25

• Fixed 8.5.17 visitor regression.
• Fixed list.split() for non-string values (by @​amir-rezaei).

8.5.24

• Preserve the BOM after the processing (by @​hdimer).

8.5.23

• Do not load source map without opts.from for security reasons.

8.5.22

• Fixed custom property losing semicolon before a comment (by @​sarathfrancis90).

8.5.21

• Fixed childless at-rule losing semicolon before comment (by @​sarathfrancis90).
• Fixed docs (by @​isker).

8.5.20

• Fixed missing space if AtRule#params is set after (by @​sarathfrancis90).
• Fixed mixing AST error on warnings (by @​MahinAnowar).

Commits

• 07b2577 Release 8.5.26 version
• 47de6b9 Update CI
• 1493a83 Fix Rule#selectors losing the empty selector (#2129)
• 180db16 Typo
• 29e9e00 Resolve symlinks before the previous-source-map containment check (#2125)
• 3ba8f84 Update dependencies
• 87e72f6 Update lock file
• caaeeb9 Upgrade nanoid to fix infinite loop on zero size (#2124)
• 3609b6f Explain how to type plugin options
• fbad419 docs: show ESM and TypeScript plugin declaration (#2118)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.