[dependabot]

Bumps the production-minor group with 12 updates in the / directory:

Package	From	To
arktype	2.2.3	2.2.8
valibot	1.4.2	1.5.0
zod	4.4.3	4.6.5
cnfast	0.1.0	0.2.0
fumadocs-core	16.14.3	16.16.2
fumadocs-mdx	15.2.3	15.4.6
lucide-react	1.31.0	1.52.0
next	16.3.0	16.4.0
react	19.2.8	19.3.0
react-dom	19.2.8	19.3.0
@hono/node-server	2.1.0	2.1.3
hono	4.13.1	4.13.13

Updates arktype from 2.2.3 to 2.2.8

Changelog

Sourced from arktype's changelog.

2.2.8

Add string.base58

Validates base58-encoded strings, which use the Bitcoin alphabet (no 0, O, I or l):

const Base58 = type("string.base58")
// valid
Base58("3mJr7AoUXx2Wqd")
// ArkErrors: must be base58-encoded (was "0OIl")
Base58("0OIl")

Thanks to @​WolfieLeader.

Return empty props for object

type("object").props threw instead of returning the empty list of properties, like type({}).props does (#1682, fixes #1177).

Thanks to @​SunilRathod27.

Keep object values from meta in JSON Schema

Meta values that aren't primitives, like an object or array default or a custom key like x-unit, were emitted as internal $ark references instead of their JSON values (#1677). Defaults that aren't valid JSON, including functions, now go through the defaultValue fallback.

Thanks to @​lprnmns.

Report invalid generic definitions on TypeScript 7

TypeScript 7 only reports the error of the last overload that fails, which for an invalid generic definition was the tuple expression signature rather than ArkType's own message (#1681):

// TypeScript 7 previously: Argument of type '"<n extends nummer>"' is not assignable to parameter of type '"Array" | ...
// now: 'nummer' is unresolvable
type("<n extends nummer>", "n > 0")

The generic and tuple expression signatures of type are now a single signature, so TypeScript 6 and 7 report the same errors directly, and errors in a generic's body point at the invalid property.

2.2.7

Fix this[] in self-referential object types

Referencing an array of the enclosing type threw a spurious shallow resolution cycle error:

// previously threw, now parses
const Node = type({
</tr></table> 

... (truncated)

Commits

• fe481db attest ts7 support, arktype fixes (#1680)
• 9303229 feat(type): add string.base58 built-in validator (#1604)
• 97ed4f9 Return empty props for base object instead of throwing (#1682)
• 1ee4923 release: arktype 2.2.7 + dependents (#1675)
• 0f88b51 fix(type): keep uppercase UUIDs valid in string.uuid JSON Schema (#1670)
• 066f4f2 fix: Hermes withPrefixKey crash and Turbopack static this in scope.module (...
• 14ef64c fix(type): parse string.date.epoch.parse input as milliseconds (#1669)
• 254328c fix(schema): release unused parse context ids from the global registry (#1673)
• ca8ec6c test: partial/required on tuple sequences (#1480) (#1590)
• e83417a fix this[] shallow resolution cycle in self-referential types (#1618)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for arktype since your current version.

Updates valibot from 1.4.2 to 1.5.0

Release notes

Sourced from valibot's releases.

v1.5.0

Many thanks to @​tats-u, @​idleberg, @​yslpn, @​francisjohnjohnston-web, @​MaxFreedomPollard, @​mahirhir, @​ItzXynx, @​LeSingh1, @​maxtaran2010, @​ysknsid25, @​cyyynthia, @​spokodev and @​sanjibani for contributing to this release.

• Add codePoints, maxCodePoints, minCodePoints and notCodePoints validation actions to validate the number of Unicode code points (pull request #888)
• Add ksuid validation action to validate KSUIDs (pull request #1370)
• Change Standard Schema properties to use eager initialization for faster schema construction and replace internal _getStandardProps utility with _standardSchema (pull request #1534)
• Change url action to use URL.canParse when available to avoid constructing URL objects (pull request #1608)
• Fix stringifyJson action to preserve the dataset value when JSON.stringify returns undefined (pull request #1476)
• Fix literal schema and value, values, notValue and notValues actions to treat NaN as equal to itself (pull request #1573)
• Fix intersect schema to merge matching NaN values and invalid dates (pull request #1573)
• Fix cache and cacheAsync methods to clone the issues of a cached dataset, preventing parent schemas from adding their path item to the same issue on every cache hit (pull request #1620)
• Fix strictObject, looseObject, objectWithRest and their async variants to correctly handle unknown input keys that collide with Object.prototype members (pull request #1523)
• Fix intersect and intersectAsync schemas to ignore inherited properties when merging objects and preserve own properties without invoking inherited setters or changing the output prototype (pull request #1621)
• Fix ulid action to reject ULIDs that exceed the maximum 128-bit value (pull request #1498)
• Fix email action to reject non-ASCII characters accepted by Unicode case folding (pull request #1075)

v1.5.0 (to-json-schema)

• Add support for JSON Schema draft-2020-12 and OpenAPI 3.0 Schema Object format
• Add propertyNames support to record schemas for key validation constraints
• Add support for toBigint, toBoolean, toDate, toNumber and toString actions for typeMode: 'input'
• Add new toStandardJsonSchema function to convert Valibot schemas to Standard JSON Schema format
• Change return type from JSONSchema7 to a custom JsonSchema type

Commits

• 5016198 chore: prepare Valibot v1.5.0 release (#1627)
• 1ffb038 fix(intersect): skip inherited prototype props in _merge (#1621)
• 1c4983f fix(ulid): restrict first character to 0-7 per ULID spec (#1498)
• 5e449cd perf(url): use URL.canParse for validation (#1608)
• 4acda1b Make sure that email validators don't match unintentional non-ASCII local par...
• 95943ab fix: handle object keys that collide with Object.prototype in object schemas ...
• d65438c fix(cache): clone cached issues to stop issue paths from accumulating (#1620)
• 3ed804a dependabot: bump the github-actions group across 1 directory with 2 updates (...
• 0681f43 fix: use SameValueZero equality for special numeric values (#1573)
• 98ef8b4 Improve perf by changing ~standard implementation (#1534)
• Additional commits viewable in compare view

Updates zod from 4.4.3 to 4.6.5

Release notes

Sourced from zod's releases.

v4.6.5

Commits:

• d2b135cfb7a3582b9eb515756b9166bcb9521f4a docs: add the 4.6.x patch highlights to the 4.6 post
• f1448f7cee00df9fe1e9ad84a000aa1828cc8bc1 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections
• de65a5cb39ed22a507fac935788f718fa88d104f docs: lead the properties section with the check and add a Zod Mini tab (#6598)
• 56222cd1532c07bcb91b67df529cab4c0a215330 feat(instanceof): key the .properties() shape off the instance type (#6600)
• ca0229a404818290e6cdcfefcd7eb2d04bcbb543 Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)"
• cc4cd4ee9c52fcaa10964e48cc144541e41a5ed9 Revert "Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)""
• 0f3f5ee3ca56c7574bf849e54f79e9a6e02562ee 4.6.5
• 59bbc03e10c636b9eb3c393dfeb552819774ec21 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump

v4.6.4

A patch on top of 4.6.3.

• d6bc1e30 feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)
• ad32d751 perf: z.url() rejects an invalid URL with URL.canParse() instead of a throwing constructor, about 50x faster; fewer allocations on the validation path (#6588)
• 2bb08717 chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump
• f6e1701a chore(deps): bump next to 15.5.25 and vite to 7.3.6 (#6153)

v4.6.3

A patch on top of 4.6.2.

• 413cce9a fix(v4): make z.properties() a check again (#6594) — removes the standalone z.properties() schema from 4.6.0; z.instanceof().properties() and .check(...z.properties()) are unchanged
• 75d63ee1 docs: show only the .properties() method form in the 4.6 post
• 46da9572 docs: match the error-message examples to what the parsers emit

v4.6.2

A patch on top of 4.6.1.

• 9446b5cc fix: preserve undefined prefault outputs and object keys (#6587) — closes #6585
• 0c483c58 docs: the Zod 4.6 announcement post (#6546)
• a00c3f34 docs: use Trigger.dev's brand-kit lockups for the platinum card

v4.6.1

A patch on top of 4.6.0.

• b12aa523 fix: preserve unique tags with defaulted discriminators (#6582) — closes #6577
• dd9c36fa fix(v4): defer recursive object index inference (#6580)
• 3b154992 feat(lang): add Tajik (tg) locale (#6581) by @​ismoil77
• 2efa8b80 ci: give the npm wait a real budget and drop the back-publish path (#6583)

v4.6.0

Zod 4.6 is now available.

npm install zod@latest

At a glance:

... (truncated)

Commits

• 59bbc03 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump
• 0f3f5ee 4.6.5
• cc4cd4e Revert "Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, ref...
• ca0229a Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed w...
• 56222cd feat(instanceof): key the .properties() shape off the instance type (#6600)
• de65a5c docs: lead the properties section with the check and add a Zod Mini tab (#6598)
• f1448f7 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections
• d2b135c docs: add the 4.6.x patch highlights to the 4.6 post
• 2bb0871 chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump
• 743aedb 4.6.4
• Additional commits viewable in compare view

Updates cnfast from 0.1.0 to 0.2.0

Release notes

Sourced from cnfast's releases.

cnfast@0.2.0

Minor Changes

• 8e85f9a: This release adds new public APIs, a new merge engine, more migration support, and a larger verification suite.

  Public API

  • Add cva as a compatible replacement for class-variance-authority 0.7.1. It supports base classes, variants, default variants, compound variants, boolean and numeric variant keys, and the class and className props.
  • Export the CVA types ClassProp, ClassPropKey, CvaConfig, CvaProps, CxOptions, CxReturn, OmitUndefined, StringToBoolean, VariantProps, and VariantSchema.
  • Add cx as an alias for clsx. This supports code that imports cx from class-variance-authority.
  • Add createCallSiteCn. It creates a separate bounded memo for one call site. It accepts the default cn function or a custom function from createCn. It memoizes repeated primitive argument lists. It does not memoize object, array, or function inputs because these values can change without a new identity.

  CVA execution

  • Compile each CVA configuration on its first call. This removes repeated configuration work from later calls.
  • Add a bounded combination table for configurations without compound variants. The table stores stable class results for known variant combinations.
  • Add fast and wide memo lanes for calls that cannot use the combination table. The memo stores primitive prop combinations and keeps mutable class values on the uncached path.
  • Preserve one property-key coercion per variant value. This matches class-variance-authority when an object has a custom toString method.
  • Preserve byte-identical output for the supported CVA input set. CVA configurations must remain unchanged after the first call. Props must be plain objects. Inherited or non-enumerable props can produce different results.

  Merge performance

  • Replace the class merge path with a single-pass token scanner and a right-to-left conflict resolver. The resolver avoids temporary token strings for known classes.
  • Add bounded token, class, argument, and result caches. The caches use admission checks, generation rotation, and adaptive capacity limits.
  • Add specialized paths for calls with one, two, and three arguments. Add a separate path for calls with more arguments.
  • Add argument-sequence lookup for repeated calls. Add successor prediction for common render sequences. Keep mutable values on the full resolution path.
  • Add JavaScriptCore-specific paths for common calls with falsy values. Keep the V8 paths small enough for inlining.
  • Keep custom configurations from createCn on the same optimized execution paths as the default configuration.

  Tailwind compatibility

  • Align the default conflict rules with the pinned tailwind-merge development configuration used by the parity suite.
  • Update logical spacing, inset, border, and scroll conflict behavior.
  • Update max-h-none, shadow-inner, and related shadow conflict behavior.
  • Preserve support for Tailwind CSS 4.0, 4.1, 4.1.5, and 4.2 syntax covered by the test suite.

  Migration command

  • Extend cnfast migrate to replace imports from class-variance-authority and class-variance-authority/types.
  • Support value imports, type-only imports, re-exports, dynamic imports, and CommonJS require calls for the new CVA migration sources.
  • Preserve local aliases and quote style when the command rewrites an import.

  API change

  • Remove tagged-template support from cn and createCn. Use the variadic cn(...) call form.

  Verification tools

  • Expand the stateful parity checks for cn, the merge cache, call-site memoization, and CVA memoization.
  • Add seeded differential tests against tailwind-merge and class-variance-authority.

... (truncated)

Changelog

Sourced from cnfast's changelog.

0.2.0

Minor Changes

• 8e85f9a: This release adds new public APIs, a new merge engine, more migration support, and a larger verification suite.

  Public API

  • Add cva as a compatible replacement for class-variance-authority 0.7.1. It supports base classes, variants, default variants, compound variants, boolean and numeric variant keys, and the class and className props.
  • Export the CVA types ClassProp, ClassPropKey, CvaConfig, CvaProps, CxOptions, CxReturn, OmitUndefined, StringToBoolean, VariantProps, and VariantSchema.
  • Add cx as an alias for clsx. This supports code that imports cx from class-variance-authority.
  • Add createCallSiteCn. It creates a separate bounded memo for one call site. It accepts the default cn function or a custom function from createCn. It memoizes repeated primitive argument lists. It does not memoize object, array, or function inputs because these values can change without a new identity.

  CVA execution

  • Compile each CVA configuration on its first call. This removes repeated configuration work from later calls.
  • Add a bounded combination table for configurations without compound variants. The table stores stable class results for known variant combinations.
  • Add fast and wide memo lanes for calls that cannot use the combination table. The memo stores primitive prop combinations and keeps mutable class values on the uncached path.
  • Preserve one property-key coercion per variant value. This matches class-variance-authority when an object has a custom toString method.
  • Preserve byte-identical output for the supported CVA input set. CVA configurations must remain unchanged after the first call. Props must be plain objects. Inherited or non-enumerable props can produce different results.

  Merge performance

  • Replace the class merge path with a single-pass token scanner and a right-to-left conflict resolver. The resolver avoids temporary token strings for known classes.
  • Add bounded token, class, argument, and result caches. The caches use admission checks, generation rotation, and adaptive capacity limits.
  • Add specialized paths for calls with one, two, and three arguments. Add a separate path for calls with more arguments.
  • Add argument-sequence lookup for repeated calls. Add successor prediction for common render sequences. Keep mutable values on the full resolution path.
  • Add JavaScriptCore-specific paths for common calls with falsy values. Keep the V8 paths small enough for inlining.
  • Keep custom configurations from createCn on the same optimized execution paths as the default configuration.

  Tailwind compatibility

  • Align the default conflict rules with the pinned tailwind-merge development configuration used by the parity suite.
  • Update logical spacing, inset, border, and scroll conflict behavior.
  • Update max-h-none, shadow-inner, and related shadow conflict behavior.
  • Preserve support for Tailwind CSS 4.0, 4.1, 4.1.5, and 4.2 syntax covered by the test suite.

  Migration command

  • Extend cnfast migrate to replace imports from class-variance-authority and class-variance-authority/types.
  • Support value imports, type-only imports, re-exports, dynamic imports, and CommonJS require calls for the new CVA migration sources.
  • Preserve local aliases and quote style when the command rewrites an import.

  API change

  • Remove tagged-template support from cn and createCn. Use the variadic cn(...) call form.

  Verification tools

  • Expand the stateful parity checks for cn, the merge cache, call-site memoization, and CVA memoization.
  • Add seeded differential tests against tailwind-merge and class-variance-authority.
  • Expand the focused benchmarks for cached and uncached calls, input shapes, Tailwind syntax, cache boundaries, conditional renders, result reuse, CVA variants, call-site replay, page replay, server rendering, and live data grids.
  • Add paired A/B comparison. Expand the bundle-size checks, V8 deoptimization checks, and repository corpora.

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for cnfast since your current version.

Updates fumadocs-core from 16.14.3 to 16.16.2

Release notes

Sourced from fumadocs-core's releases.

fumadocs@16.16.2

• @​fumadocs/base-ui@​16.16.2
• fumadocs-core@16.16.2
• fumadocs-ui@16.16.2

Focus inside the AI chat panel when opened

The aiChat panel turns visible as soon as it opens, so its input can take focus right away. It still hides only after the closing transition.

Collapse the sidebar with Ctrl + B

On desktop, press Ctrl + B (⌘ + B on macOS) to collapse or expand the sidebar, in layouts that support collapsing it. Like the theme hotkey, it is ignored while typing in an editable element, or when a dialog is opened.

Fix Spacious layout on Firefox mobile

When scrolling in Firefox, the top edge of the page panel moved away from the navbar and table of contents bar, ending up in the middle of the page or off screen. It now stays below the bars, without relying on CSS anchor positioning.

Ignore unknown values in tab groups

Tabs with a groupId, including code block tabs with tab-group, applied persisted or shared values even when none of their tabs matched, for example after renaming a tab, or when tabs in the same group have different items. They then showed no content until a tab was clicked. Such values are now ignored.

fumadocs@16.16.1

• @​fumadocs/base-ui@​16.16.1
• fumadocs-core@16.16.1
• fumadocs-ui@16.16.1

Improve Spacious layout on mobile

The page sits in an inset panel on mobile too, while the navbar and table of contents bar stay on the outer surface.

• The sidebar drawer floats as an inset panel, like the AI chat.
• The navbar and table of contents bar stay below the <Banner />.
• Like the Docs layout, --fd-docs-row-3 is the bottom of these bars, so API pages scroll their content below them.

fumadocs@16.16.0

• @​fumadocs/base-ui@​16.16.0
• fumadocs-core@16.16.0
• fumadocs-ui@16.16.0

Place AI chat in layouts

Docs, Notebook, and Glass layouts accept an aiChat option, pass your chat as aiChat.panel and the layout places it beside the page on wide viewports, and floats it over the page on smaller ones.

Your chat component no longer needs layout-specific positioning, like targeting #nd-docs-layout or overriding --fd-right-width.

The ai feature of Fumadocs CLI now renders your docs layout from a client component at ai/layout.tsx in your components directory, which passes the installed chat to aiChat. It supports Docs, Notebook, Glass, and Spacious layouts, and only adds a floating trigger to the layouts without their own.

Export Glass layout as DocsLayout

Like other docs layouts, fumadocs-ui/layouts/glass exports DocsLayout, DocsLayoutProps, and DocsSlots. The GlassLayout names remain as aliases.

... (truncated)

Commits

• e67f17d Version Packages (#3650)
• 3d5c98e fix(ui): hide ai chat trigger on open
• aa88edc fix(ui): ignore unknown tab values under primitive mode (#3656)
• c9d0e9f feat(ai-chat): redesign AI chat and make it a package
• 980269f fix build
• e82e133 feat(ui): shortcut for collapsing sidebar
• ad2be3f fix(ui): give up the position-anchor approach (firefox as always)
• e7f8985 Version Packages (#3642)
• 2c6182b fix(api-docs): scroll margins and hash links on API pages (#3647)
• bd2553d test(vite): isolate package.json read count from the crawl cache (#3646)
• Additional commits viewable in compare view

Updates fumadocs-mdx from 15.2.3 to 15.4.6

Release notes

Sourced from fumadocs-mdx's releases.

fumadocs-mdx@15.4.6

Keep collection dir outside the project in file paths

When a collection's dir was outside the project (e.g. ../content/docs), the leading ../ was dropped from info.fullPath and absolutePath, so getText('raw') failed with ENOENT.

Fix #3623

fumadocs-mdx@15.4.5

Stop recrawling node_modules on every Vite config resolution

The config hook of fumadocs-mdx/vite walked the dependency tree below Fumadocs packages once per chain reaching a package, so a docs app with a few Fumadocs packages read ~10k package.json files (~0.9s) each time Vite resolved its config, which it does once per build environment.

The crawl now visits each package once, breadth-first, and still records the shortest chain to every CommonJS dependency (fumadocs-ui > @base-ui/react > use-sync-external-store/shim and friends). The result is memoized for the process until the package manager's install state changes, so a build with several environments crawls once.

fumadocs-mdx@15.4.4

Sort glob results for deterministic codegen

fumadocs-mdx's Node codegen now sorts glob-matched files before generating collections, so the output (and anything derived from getPages()) is stable across builds of unchanged content. The Vite codegen path was checked separately: Vite's own import.meta.glob already sorts matched files internally, so it did not need the same fix.

fumadocs-mdx@15.4.3

Fix experimentalBuildCache bloating frontmatter-only imports

With a warm build cache, ?only=frontmatter imports were served the fully compiled page from cache instead of the frontmatter module, so every page was bundled two more times. The cache now only applies to full compilations.

fumadocs-mdx@15.4.2

Fix the _mdast export with removePosition

// fumadocs-mdx collection config
postprocess: {
  includeMDAST: { removePosition: true },
},

This exported _mdast with no value, and getMDAST() then reported that includeMDAST was disabled. removePosition strips positions in place and returns nothing, so JSON.stringify received undefined.

The tree is now cloned, stripped, and serialized from the clone.

Fix SOURCEMAP_BROKEN warnings on Vite

With build.sourcemap enabled, Vite warned once per content and meta file because the loaders returned no source map. They now return an empty map when nothing is generated.

Source maps for MDX stay opt-in, pass SourceMapGenerator from source-map to MDX options:

import { SourceMapGenerator } from 'source-map';
export default defineConfig({
mdxOptions: {
SourceMapGenerator,
</tr></table>

... (truncated)

Commits

• 6ce09d9 Version Packages (#3624)
• 65197b8 ui: no dev cache
• 0a0ce64 docs: remove export-search-indexes.ts
• f0c9d0a fix(openapi): default to basic auth
• 023888c feat(core): support Meilisearch
• f0d7cdb feat(openapi): show download button
• 6c5b179 fix(mdx): collection outside of project dir
• bb43b61 Version Packages (#3621)
• 6791d6f fix(ui): apply the Vite base path to the "View as Markdown" link
• bc42c20 Version Packages (#3618)
• Additional commits viewable in compare view

Updates lucide-react from 1.31.0 to 1.52.0

Release notes

Sourced from lucide-react's releases.

Version 1.52.0

What's Changed

• fix(icons): changed wifi-cog icon by @​karsa-mistmere in lucide-icons/lucide#4952

Full Changelog: lucide-icons/lucide@1.51.0...1.52.0

Version 1.51.0

What's Changed

• fix(site): persist icon customizer by @​karsa-mistmere in lucide-icons/lucide#4944
• chore(deps): Upgrade to vite 8 by @​ericfennis in lucide-icons/lucide#4950
• feat(icons): added rugby-ball icon by @​dev-mralph in lucide-icons/lucide#3496
• chore(deps): bump the react-deps group across 1 directory with 3 updates by @​dependabot[bot] in lucide-icons/lucide#4951
• fix(react-native): stop forwarding arbitrary rest props to child shape elements by @​cipherprofessor in lucide-icons/lucide#4903
• test(lucide-solid): add Vite and SolidStart integration fixtures by @​ericfennis in lucide-icons/lucide#4884
• feat(icons): add door-closed-cog icon by @​ajaxjiang96 in lucide-icons/lucide#4905
• feat(icons): add text-align-justify-* icons by @​HectorZaGa in lucide-icons/lucide#4942
• chore(deps): bump pnpm/action-setup from 6.0.10 to 6.1.0 in the github-actions group across 1 directory by @​dependabot[bot] in lucide-icons/lucide#4939
• chore(deps): Upgrade to vitest 5 by @​ericfennis in lucide-icons/lucide#4953
• feat(icons): added wind-arrow-up icon by @​jamesgpearce in lucide-icons/lucide#4501
• fix(github/actions): move to daily release flow by @​karsa-mistmere in lucide-icons/lucide#4911
• feat(@​lucide/solid): Support for Solid 2.0 RC by @​davedbase in lucide-icons/lucide#4751
• chore(deps-dev): bump the angular-deps group across 1 directory with 10 updates by @​dependabot[bot] in lucide-icons/lucide#4954
• chore(deps): bump nuxt from 4.4.8 to 4.5.1 by @​dependabot[bot] in lucide-icons/lucide#4949
• feat(icons): added armenian-dram icon by @​Elawphant in lucide-icons/lucide#4456
• feat(icons): add kazakh-tenge icon by @​hkayrad in lucide-icons/lucide#4925

New Contributors

• @​dev-mralph made their first contribution in lucide-icons/lucide#3496
• @​cipherprofessor made their first contribution in lucide-icons/lucide#4903
• @​HectorZaGa made their first contribution in lucide-icons/lucide#4942
• @​jamesgpearce made their first contribution in lucide-icons/lucide#4501
• @​davedbase made their first contribution in lucide-icons/lucide#4751
• @​Elawphant made their first contribution in lucide-icons/lucide#4456
• @​hkayrad made their first contribution in lucide-icons/lucide#4925

Full Changelog: lucide-icons/lucide@1.50.0...1.51.0

Version 1.50.0

What's Changed

• fix(shared): escape attribute values in buildLucideSvg by @​Saadanjum0 in lucide-icons/lucide#4940
• fix(github/actions): use canonical metadata instructions for PR suggestions by @​karsa-mistmere in lucide-icons/lucide#4910
• fix(icons): replaced nut & nut-off with compliant designs by @​karsa-mistmere in lucide-icons/lucide#4840
• chore(deps-dev): bump @​angular/router from 22.1.7 to 22.2.0 by @​dependabot[bot] in lucide-icons/lucide#4945
• chore(deps): bump next from 16.3.4 to 16.3.6 by @​dependabot[bot] in lucide-icons/lucide#4946
• chore(deps-dev): bump the svelte-deps group with 2 updates by @​dependabot[bot] in lucide-icons/lucide#4918
• test(integrations): add Vue integration fixtures for Vite, Nuxt and Vike by @​ericfennis in lucide-icons/lucide#4882
• feat(svelte): export context subpath by @​vugarbbakhishov-hub in lucide-icons/lucide#4927
• fix(lucide-preact): add Preact v11 compatibility by @​JoviDeCroock in lucide-icons/lucide#4924
• feat(icons): added layout-grid-circles icon by @​karsa-mistmere in lucide-icons/lucide#4567

... (truncated)

Commits

• 98331e2 chore(deps): bump the react-deps group across 1 directory with 3 updates (#4951)
• 09aa9c5 chore(deps): Upgrade to vite 8 (#4950)
• e042fec fix(packages): declare @types/react as an optional peer dependency (#4892)
• f06ac67 chore(typchecking): More typecheck jobs for all packages (#4885)
• 94e4cb9 chore(dependencies): Update dependencies (#4806)
• 99d25bd feat(packages): extract icon build logic into @lucide/shared (#4409)
• 75b5516 chore(dev): upgrade ESLint to latest compatible stack (v10) (#4378)
• See full diff in compare view

Updates next from 16.3.0 to 16.4.0

Release notes

Sourced from next's releases.

v16.4.0

Check out the 16.4 announcement post to get an overview of the changes.

Core Changes

• Show compiler plugin warning in more situations: #75682
• fix(scripts): correct typo in rm.mjs error message: #87015
• docs: improve clarity and punctuation in README: #86096
• Fix debug build paths Pages Router support entries: #93529
• bundle-analyzer: record historical snapshots on each analyze run: #93520
• fix: detect proxy.ts correctly with compound pageExtensions: #93246
• feat(turbopack): support false values for resolveAlias config: #93331

Misc Changes

• docs: correction to dynamicParams migration: #96624
• docs: proxy event argument: #96435
• docs: remove experimental note from runtime prefetching: #96615
• Preserve per-segment prefetching after dynamic navigation: #96583
• Rename static generation stream option to waitForAllReady: #96564
• Remove obsolete static generation plumbing: #96563
• [turbopack] Drop dead writes to exports: #96381
• [turbopack] Ignore writes to exports after a module.exports = {} writes: #96380
• [turbopack] Add test for sideEffects with optimizePackageImports: #96549
• [turbopack] Strip leading BOM before parsing CSS: #96678
• Upgrade React from cbb046ab-20260731 to 7dfc7ccd-20260803: #96550
• docs: use relative doc links in instant-navigation error pages: #96672
• Turbopack: terminate failed plugin worker threads: #96592
• Fix HTML-limited bot matching in prerender bypass rules: #96584
• [ci] Fix create_release_branch for new repo permissions: #96641
• test: skip action module instance deploy test: #96629
• docs: quote the dynamicParams build error in a blockquote: #96633
• [react-sync] Open pull requests as the bot that authors the commits: #96682
• [Bench] Fixes for pure Fizz bench: #96771
• Derive foreground cache revalidation from the consumer: #96731
• Fix race when navigating Back before hydration: #96252
• docs: present each Skill as steps in the AI agents guide: #96751
• Reuse completed cache entries for the rest of a request: #96727
• Upgrade React from 7dfc7ccd-20260803 to 11eddecd-20260805: #96735
• Remove WorkStore execution mode: #96674
• Remove cache revalidation execution mode reads: #96670
• Separate App Route render and prerender pipelines: #96662
• Remove App Page execution mode reads: #96660
• test: fix missing await in css-chunking test: #96725
• docs (Skills): stop assuming app/ at the root and port 3000: #96696
• Implement next/font BeforeResolvePlugins as ImportMappingReplacement: #95808
• Use Tailwind Turbopack loader in create-next-app: #96606
• docs: instant navigation quick start with an adoption prompt: #96663
• Separate App Page render and prerender pipelines: #96659
• Move App Router execution intent to entrypoints: #96640

... (truncated)

Commits

• e273d5b v16.4.0
• fdf41d6 [ai-upgrade] discover upgrade models and reasoning efforts from agent CLIs (#...
• c3e76ad v16.4.0-canary.63
• 47c6cc8 Document next analyze export in the package bundling guide (#99735)
• 5b10604 Revert stabilization of forbidden() and unauthorized() (#99734)
• f3a6f97 Preserve configured output directories during static export (#99507)
• b22e5a2 Rename skill to next-bundle-optimizer and document its usage (#99731)
• 74dc549 [turbo-tasks-backend] Clean up task state before publishing execution complet...
• ccf8c15 v16.4.0-canary.62
• b8c7c7f Improve static route error guidance (#99724)
• Additional commits viewable in compare view

Updates react from 19.2.8 to 19.3.0

Release notes

Sourced from react's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

• <ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@​sebmarkbage, @​jackpope, @​gaearon: Description has been truncated

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 403e9098-79e3-44c9-8724-f0489b16a8db

---

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

_{Comment @coderabbitai help to get the list of available commands.}

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.