chore(deps-dev): bump the github-actions group with 2 updates

[dependabot]

Bumps the github-actions group with 2 updates: dotenv and vercel.

Updates dotenv from 17.2.4 to 17.3.1

Changelog

Sourced from dotenv's changelog.

17.3.1 (2026-02-12)

Changed

• Fix as2 example command in README and update spanish README

17.3.0 (2026-02-12)

Added

• Add a new README section on dotenv’s approach to the agentic future.

Changed

• Rewrite README to get humans started more quickly with less noise while simultaneously making more accessible for llms and agents to go deeper into details.

Commits

• 7bc16a4 17.3.1
• 27303fd update README-es
• 6379eb2 update README
• b6d7339 fix spelling
• 5febe35 17.3.0
• f61f383 changelog 🪵
• dec94ad update README
• 4856950 update README
• 6351887 update README
• 23bd017 update README
• Additional commits viewable in compare view

Updates vercel from 50.15.1 to 50.17.0

Release notes

Sourced from vercel's releases.

vercel@50.17.0

Minor Changes

• Install builder packages on demand (#15023)

• Display functions exceeding 250MB uncompressed size limit with total size and breakdown of largest dependencies (requires environment variable VERCEL_ANALYZE_BUILD_OUTPUT=1). (#14067)

Patch Changes

• Add --format=json option to vercel integration list and show project name in table header when results are scoped to a project (#15007)

• Fix builder import resolution from pre-installed depenencies (#15041)

• Services routing improvements: (#15018)

  • Fix route ownership scoping so parent service catch-alls (e.g. Vite SPA fallback) don't capture sibling service prefixes
  • Move shared ownership-guard helpers (getOwnershipGuard, scopeRouteSourceToOwnership) to @vercel/routing-utils
  • Place runtime service function outputs under internal /_svc/<service>/index namespace to prevent filesystem path leakage
  • Block /_svc as a reserved routePrefix in service validation
  • Scope all builder-emitted routes (not just route-owning builders) to their service ownership before merging

• Updated dependencies []:

  • @​vercel/static-build@​2.8.37
  • @​vercel/build-utils@​13.4.0
  • @​vercel/next@​4.15.28
  • @​vercel/redwood@​2.4.9
  • @​vercel/rust@​1.0.5

vercel@50.16.0

Minor Changes

• [services] synchronize dependencies in dev mode for JS/TS and Python services (#14987)

• Add contract cli cmd for checking contract commitments (#14735)

• [services] inject service URLs into web services as local paths (#15024)

• Add usage command to check billing and usage information (#14733)

Patch Changes

• Add --plan flag to vercel integration add for specifying a billing plan ID (#14965)

• Include the current Vercel CLI version in .vercel/output/builds.json generated by vercel build. (#14999)

• Fix vc link sometimes prompting to select a repo-linked Project twice and ensure env pull uses the newly linked .vercel/project.json instead of falling back to .vercel/repo.json. (#15017)

• non-interactive mode for link - ensureLink (#15004)

• Fixed deployment rate limit error message displaying incorrect retry time (#14947)

... (truncated)

Changelog

Sourced from vercel's changelog.

50.17.0

Minor Changes

• Install builder packages on demand (#15023)

• Display functions exceeding 250MB uncompressed size limit with total size and breakdown of largest dependencies (requires environment variable VERCEL_ANALYZE_BUILD_OUTPUT=1). (#14067)

Patch Changes

• Add --format=json option to vercel integration list and show project name in table header when results are scoped to a project (#15007)

• Fix builder import resolution from pre-installed depenencies (#15041)

• Services routing improvements: (#15018)

  • Fix route ownership scoping so parent service catch-alls (e.g. Vite SPA fallback) don't capture sibling service prefixes
  • Move shared ownership-guard helpers (getOwnershipGuard, scopeRouteSourceToOwnership) to @vercel/routing-utils
  • Place runtime service function outputs under internal /_svc/<service>/index namespace to prevent filesystem path leakage
  • Block /_svc as a reserved routePrefix in service validation
  • Scope all builder-emitted routes (not just route-owning builders) to their service ownership before merging

• Updated dependencies []:

  • @​vercel/static-build@​2.8.37
  • @​vercel/build-utils@​13.4.0
  • @​vercel/next@​4.15.28
  • @​vercel/redwood@​2.4.9
  • @​vercel/rust@​1.0.5

50.16.0

Minor Changes

• [services] synchronize dependencies in dev mode for JS/TS and Python services (#14987)

• Add contract cli cmd for checking contract commitments (#14735)

• [services] inject service URLs into web services as local paths (#15024)

• Add usage command to check billing and usage information (#14733)

Patch Changes

• Add --plan flag to vercel integration add for specifying a billing plan ID (#14965)

• Include the current Vercel CLI version in .vercel/output/builds.json generated by vercel build. (#14999)

• Fix vc link sometimes prompting to select a repo-linked Project twice and ensure env pull uses the newly linked .vercel/project.json instead of falling back to .vercel/repo.json. (#15017)

• non-interactive mode for link - ensureLink (#15004)

... (truncated)

Commits

• 901ed77 Version Packages (#15035)
• 2aad073 fix(cli): fix import resolution strategy for builders (#15041)
• f171eb9 [cli] Add --format=json flag integration list (#15007)
• f278d46 log functions exceeding the 250MB size limit (#14067)
• 38d8663 chore(ci): remove release-canary workflow (#15036)
• 127547d [cli] move builders to peer dependencies (try 2) (#15023)
• 3cd0b55 [services] frontend + backend routing bugfixes (#15018)
• cf38fab Version Packages (#14998)
• b4cce9c Cli duplicate project prompt (#15017)
• dd6b1e3 [cli] add debug log for resolved builders (#15029)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
openresource-dev	Ready	Preview, Comment	Feb 13, 2026 7:24am