Skip to content

chore(deps): bump the production-minor group across 1 directory with 13 updates - #50

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-minor-6f9072bab9
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-minor-6f9072bab9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 13, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the production-minor group with 13 updates in the / directory:

Package From To
arktype 2.2.3 2.2.8
valibot 1.4.2 1.5.0
zod 4.4.3 4.6.5
cnfast 0.1.0 0.2.0
fumadocs-core 16.14.3 16.17.1
fumadocs-mdx 15.2.3 15.4.7
lucide-react 1.31.0 1.54.0
next 16.3.0 16.4.0
react 19.2.8 19.3.0
react-dom 19.2.8 19.3.0
express 5.2.1 5.3.0
@hono/node-server 2.1.0 2.1.4
hono 4.13.1 4.13.13

Updates arktype from 2.2.3 to 2.2.8

Changelog

Sourced from arktype's changelog.

2.2.8

Add string.base58

Validates base58-encoded strings, which use the Bitcoin alphabet (no 0, O, I or l):

const Base58 = type("string.base58")
// valid
Base58("3mJr7AoUXx2Wqd")
// ArkErrors: must be base58-encoded (was "0OIl")
Base58("0OIl")

Thanks to @​WolfieLeader.

Return empty props for object

type("object").props threw instead of returning the empty list of properties, like type({}).props does (#1682, fixes #1177).

Thanks to @​SunilRathod27.

Keep object values from meta in JSON Schema

Meta values that aren't primitives, like an object or array default or a custom key like x-unit, were emitted as internal $ark references instead of their JSON values (#1677). Defaults that aren't valid JSON, including functions, now go through the defaultValue fallback.

Thanks to @​lprnmns.

Report invalid generic definitions on TypeScript 7

TypeScript 7 only reports the error of the last overload that fails, which for an invalid generic definition was the tuple expression signature rather than ArkType's own message (#1681):

// TypeScript 7 previously: Argument of type '"<n extends nummer>"' is not assignable to parameter of type '"Array" | ...
// now: 'nummer' is unresolvable
type("<n extends nummer>", "n > 0")

The generic and tuple expression signatures of type are now a single signature, so TypeScript 6 and 7 report the same errors directly, and errors in a generic's body point at the invalid property.

2.2.7

Fix this[] in self-referential object types

Referencing an array of the enclosing type threw a spurious shallow resolution cycle error:

// previously threw, now parses
const Node = type({
</tr></table> 

... (truncated)

Commits
  • fe481db attest ts7 support, arktype fixes (#1680)
  • 9303229 feat(type): add string.base58 built-in validator (#1604)
  • 97ed4f9 Return empty props for base object instead of throwing (#1682)
  • 1ee4923 release: arktype 2.2.7 + dependents (#1675)
  • 0f88b51 fix(type): keep uppercase UUIDs valid in string.uuid JSON Schema (#1670)
  • 066f4f2 fix: Hermes withPrefixKey crash and Turbopack static this in scope.module (...
  • 14ef64c fix(type): parse string.date.epoch.parse input as milliseconds (#1669)
  • 254328c fix(schema): release unused parse context ids from the global registry (#1673)
  • ca8ec6c test: partial/required on tuple sequences (#1480) (#1590)
  • e83417a fix this[] shallow resolution cycle in self-referential types (#1618)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for arktype since your current version.


Updates valibot from 1.4.2 to 1.5.0

Release notes

Sourced from valibot's releases.

v1.5.0

Many thanks to @​tats-u, @​idleberg, @​yslpn, @​francisjohnjohnston-web, @​MaxFreedomPollard, @​mahirhir, @​ItzXynx, @​LeSingh1, @​maxtaran2010, @​ysknsid25, @​cyyynthia, @​spokodev and @​sanjibani for contributing to this release.

  • Add codePoints, maxCodePoints, minCodePoints and notCodePoints validation actions to validate the number of Unicode code points (pull request #888)
  • Add ksuid validation action to validate KSUIDs (pull request #1370)
  • Change Standard Schema properties to use eager initialization for faster schema construction and replace internal _getStandardProps utility with _standardSchema (pull request #1534)
  • Change url action to use URL.canParse when available to avoid constructing URL objects (pull request #1608)
  • Fix stringifyJson action to preserve the dataset value when JSON.stringify returns undefined (pull request #1476)
  • Fix literal schema and value, values, notValue and notValues actions to treat NaN as equal to itself (pull request #1573)
  • Fix intersect schema to merge matching NaN values and invalid dates (pull request #1573)
  • Fix cache and cacheAsync methods to clone the issues of a cached dataset, preventing parent schemas from adding their path item to the same issue on every cache hit (pull request #1620)
  • Fix strictObject, looseObject, objectWithRest and their async variants to correctly handle unknown input keys that collide with Object.prototype members (pull request #1523)
  • Fix intersect and intersectAsync schemas to ignore inherited properties when merging objects and preserve own properties without invoking inherited setters or changing the output prototype (pull request #1621)
  • Fix ulid action to reject ULIDs that exceed the maximum 128-bit value (pull request #1498)
  • Fix email action to reject non-ASCII characters accepted by Unicode case folding (pull request #1075)

v1.5.0 (to-json-schema)

  • Add support for JSON Schema draft-2020-12 and OpenAPI 3.0 Schema Object format
  • Add propertyNames support to record schemas for key validation constraints
  • Add support for toBigint, toBoolean, toDate, toNumber and toString actions for typeMode: 'input'
  • Add new toStandardJsonSchema function to convert Valibot schemas to Standard JSON Schema format
  • Change return type from JSONSchema7 to a custom JsonSchema type
Commits
  • 5016198 chore: prepare Valibot v1.5.0 release (#1627)
  • 1ffb038 fix(intersect): skip inherited prototype props in _merge (#1621)
  • 1c4983f fix(ulid): restrict first character to 0-7 per ULID spec (#1498)
  • 5e449cd perf(url): use URL.canParse for validation (#1608)
  • 4acda1b Make sure that email validators don't match unintentional non-ASCII local par...
  • 95943ab fix: handle object keys that collide with Object.prototype in object schemas ...
  • d65438c fix(cache): clone cached issues to stop issue paths from accumulating (#1620)
  • 3ed804a dependabot: bump the github-actions group across 1 directory with 2 updates (...
  • 0681f43 fix: use SameValueZero equality for special numeric values (#1573)
  • 98ef8b4 Improve perf by changing ~standard implementation (#1534)
  • Additional commits viewable in compare view

Updates zod from 4.4.3 to 4.6.5

Release notes

Sourced from zod's releases.

v4.6.5

Commits:

  • d2b135cfb7a3582b9eb515756b9166bcb9521f4a docs: add the 4.6.x patch highlights to the 4.6 post
  • f1448f7cee00df9fe1e9ad84a000aa1828cc8bc1 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections
  • de65a5cb39ed22a507fac935788f718fa88d104f docs: lead the properties section with the check and add a Zod Mini tab (#6598)
  • 56222cd1532c07bcb91b67df529cab4c0a215330 feat(instanceof): key the .properties() shape off the instance type (#6600)
  • ca0229a404818290e6cdcfefcd7eb2d04bcbb543 Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)"
  • cc4cd4ee9c52fcaa10964e48cc144541e41a5ed9 Revert "Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)""
  • 0f3f5ee3ca56c7574bf849e54f79e9a6e02562ee 4.6.5
  • 59bbc03e10c636b9eb3c393dfeb552819774ec21 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump

v4.6.4

A patch on top of 4.6.3.

  • d6bc1e30 feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)
  • ad32d751 perf: z.url() rejects an invalid URL with URL.canParse() instead of a throwing constructor, about 50x faster; fewer allocations on the validation path (#6588)
  • 2bb08717 chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump
  • f6e1701a chore(deps): bump next to 15.5.25 and vite to 7.3.6 (#6153)

v4.6.3

A patch on top of 4.6.2.

  • 413cce9a fix(v4): make z.properties() a check again (#6594) — removes the standalone z.properties() schema from 4.6.0; z.instanceof().properties() and .check(...z.properties()) are unchanged
  • 75d63ee1 docs: show only the .properties() method form in the 4.6 post
  • 46da9572 docs: match the error-message examples to what the parsers emit

v4.6.2

A patch on top of 4.6.1.

v4.6.1

A patch on top of 4.6.0.

v4.6.0

Zod 4.6 is now available.

npm install zod@latest

At a glance:

... (truncated)

Commits
  • 59bbc03 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump
  • 0f3f5ee 4.6.5
  • cc4cd4e Revert "Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, ref...
  • ca0229a Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed w...
  • 56222cd feat(instanceof): key the .properties() shape off the instance type (#6600)
  • de65a5c docs: lead the properties section with the check and add a Zod Mini tab (#6598)
  • f1448f7 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections
  • d2b135c docs: add the 4.6.x patch highlights to the 4.6 post
  • 2bb0871 chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump
  • 743aedb 4.6.4
  • Additional commits viewable in compare view

Updates cnfast from 0.1.0 to 0.2.0

Release notes

Sourced from cnfast's releases.

cnfast@0.2.0

Minor Changes

  • 8e85f9a: This release adds new public APIs, a new merge engine, more migration support, and a larger verification suite.

    Public API

    • Add cva as a compatible replacement for class-variance-authority 0.7.1. It supports base classes, variants, default variants, compound variants, boolean and numeric variant keys, and the class and className props.
    • Export the CVA types ClassProp, ClassPropKey, CvaConfig, CvaProps, CxOptions, CxReturn, OmitUndefined, StringToBoolean, VariantProps, and VariantSchema.
    • Add cx as an alias for clsx. This supports code that imports cx from class-variance-authority.
    • Add createCallSiteCn. It creates a separate bounded memo for one call site. It accepts the default cn function or a custom function from createCn. It memoizes repeated primitive argument lists. It does not memoize object, array, or function inputs because these values can change without a new identity.

    CVA execution

    • Compile each CVA configuration on its first call. This removes repeated configuration work from later calls.
    • Add a bounded combination table for configurations without compound variants. The table stores stable class results for known variant combinations.
    • Add fast and wide memo lanes for calls that cannot use the combination table. The memo stores primitive prop combinations and keeps mutable class values on the uncached path.
    • Preserve one property-key coercion per variant value. This matches class-variance-authority when an object has a custom toString method.
    • Preserve byte-identical output for the supported CVA input set. CVA configurations must remain unchanged after the first call. Props must be plain objects. Inherited or non-enumerable props can produce different results.

    Merge performance

    • Replace the class merge path with a single-pass token scanner and a right-to-left conflict resolver. The resolver avoids temporary token strings for known classes.
    • Add bounded token, class, argument, and result caches. The caches use admission checks, generation rotation, and adaptive capacity limits.
    • Add specialized paths for calls with one, two, and three arguments. Add a separate path for calls with more arguments.
    • Add argument-sequence lookup for repeated calls. Add successor prediction for common render sequences. Keep mutable values on the full resolution path.
    • Add JavaScriptCore-specific paths for common calls with falsy values. Keep the V8 paths small enough for inlining.
    • Keep custom configurations from createCn on the same optimized execution paths as the default configuration.

    Tailwind compatibility

    • Align the default conflict rules with the pinned tailwind-merge development configuration used by the parity suite.
    • Update logical spacing, inset, border, and scroll conflict behavior.
    • Update max-h-none, shadow-inner, and related shadow conflict behavior.
    • Preserve support for Tailwind CSS 4.0, 4.1, 4.1.5, and 4.2 syntax covered by the test suite.

    Migration command

    • Extend cnfast migrate to replace imports from class-variance-authority and class-variance-authority/types.
    • Support value imports, type-only imports, re-exports, dynamic imports, and CommonJS require calls for the new CVA migration sources.
    • Preserve local aliases and quote style when the command rewrites an import.

    API change

    • Remove tagged-template support from cn and createCn. Use the variadic cn(...) call form.

    Verification tools

    • Expand the stateful parity checks for cn, the merge cache, call-site memoization, and CVA memoization.
    • Add seeded differential tests against tailwind-merge and class-variance-authority.

... (truncated)

Changelog

Sourced from cnfast's changelog.

0.2.0

Minor Changes

  • 8e85f9a: This release adds new public APIs, a new merge engine, more migration support, and a larger verification suite.

    Public API

    • Add cva as a compatible replacement for class-variance-authority 0.7.1. It supports base classes, variants, default variants, compound variants, boolean and numeric variant keys, and the class and className props.
    • Export the CVA types ClassProp, ClassPropKey, CvaConfig, CvaProps, CxOptions, CxReturn, OmitUndefined, StringToBoolean, VariantProps, and VariantSchema.
    • Add cx as an alias for clsx. This supports code that imports cx from class-variance-authority.
    • Add createCallSiteCn. It creates a separate bounded memo for one call site. It accepts the default cn function or a custom function from createCn. It memoizes repeated primitive argument lists. It does not memoize object, array, or function inputs because these values can change without a new identity.

    CVA execution

    • Compile each CVA configuration on its first call. This removes repeated configuration work from later calls.
    • Add a bounded combination table for configurations without compound variants. The table stores stable class results for known variant combinations.
    • Add fast and wide memo lanes for calls that cannot use the combination table. The memo stores primitive prop combinations and keeps mutable class values on the uncached path.
    • Preserve one property-key coercion per variant value. This matches class-variance-authority when an object has a custom toString method.
    • Preserve byte-identical output for the supported CVA input set. CVA configurations must remain unchanged after the first call. Props must be plain objects. Inherited or non-enumerable props can produce different results.

    Merge performance

    • Replace the class merge path with a single-pass token scanner and a right-to-left conflict resolver. The resolver avoids temporary token strings for known classes.
    • Add bounded token, class, argument, and result caches. The caches use admission checks, generation rotation, and adaptive capacity limits.
    • Add specialized paths for calls with one, two, and three arguments. Add a separate path for calls with more arguments.
    • Add argument-sequence lookup for repeated calls. Add successor prediction for common render sequences. Keep mutable values on the full resolution path.
    • Add JavaScriptCore-specific paths for common calls with falsy values. Keep the V8 paths small enough for inlining.
    • Keep custom configurations from createCn on the same optimized execution paths as the default configuration.

    Tailwind compatibility

    • Align the default conflict rules with the pinned tailwind-merge development configuration used by the parity suite.
    • Update logical spacing, inset, border, and scroll conflict behavior.
    • Update max-h-none, shadow-inner, and related shadow conflict behavior.
    • Preserve support for Tailwind CSS 4.0, 4.1, 4.1.5, and 4.2 syntax covered by the test suite.

    Migration command

    • Extend cnfast migrate to replace imports from class-variance-authority and class-variance-authority/types.
    • Support value imports, type-only imports, re-exports, dynamic imports, and CommonJS require calls for the new CVA migration sources.
    • Preserve local aliases and quote style when the command rewrites an import.

    API change

    • Remove tagged-template support from cn and createCn. Use the variadic cn(...) call form.

    Verification tools

    • Expand the stateful parity checks for cn, the merge cache, call-site memoization, and CVA memoization.
    • Add seeded differential tests against tailwind-merge and class-variance-authority.
    • Expand the focused benchmarks for cached and uncached calls, input shapes, Tailwind syntax, cache boundaries, conditional renders, result reuse, CVA variants, call-site replay, page replay, server rendering, and live data grids.
    • Add paired A/B comparison. Expand the bundle-size checks, V8 deoptimization checks, and repository corpora.
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for cnfast since your current version.


Updates fumadocs-core from 16.14.3 to 16.17.1

Release notes

Sourced from fumadocs-core's releases.

fumadocs@16.17.1

  • @​fumadocs/base-ui@​16.17.1
  • fumadocs-core@16.17.1
  • fumadocs-ui@16.17.1

Format generated Markdown tables

  • Generated tables have aligned columns: the type tables of auto-type-table, the tables of renderToMarkdown() and the table rows of search records.
  • markdownTable() from fumadocs-core/mdx-plugins/stringifier creates a formatted table for your plugins.
  • fumadocs-typescript requires fumadocs-core 16.17.1.

fumadocs@16.17.0

  • @​fumadocs/base-ui@​16.17.0
  • fumadocs-core@16.17.0
  • fumadocs-ui@16.17.0

Highlight search results with CSS

Search results no longer wrap matches in <mark>, content is the indexed Markdown. The search dialog highlights matches with the CSS Custom Highlight API, style them with ::highlight(fd-search). Custom search UIs can use useHighlightQuery() from fumadocs-core/search/client.

  • createContentHighlighter() is deprecated.
  • Removed contentWithHighlights from search results, and the renderHighlights prop of <SearchDialogListItem />.
  • <SearchDialogListItem /> renders the Markdown of results with the prose prose-sm typography.

Search hooks for each provider

fumadocs-core/search/client exports a hook for each search client, like useFetchSearch(). They return the props of <SearchDialog />:

const search = useFetchSearch({ locale });
<SearchDialog {...search} {...props}>
<SearchDialogList />
</SearchDialog>;

data is the last successful search, its items have their content parsed into hastContent. error is set when the last search failed.

  • experimental_useSearch() creates a search hook from a memoized search function.
  • useDocsSearch() is deprecated.
  • useFlexsearchStatic() and useOramaCloudLegacySearch() are exported from the paths of their clients.
  • <SearchDialogList /> shows defaultItems without results.
  • useSearchList() is removed, useSearch() returns getActive(), setActive() and subscribeActive() for the active item.
  • <SearchDialogListItem /> renders a div instead of a button, table rows render their cells only.
  • renderMarkdown of <SearchDialogListItem /> renders content instead of hastContent. Without it, the string content of custom items is shown as text.
  • The templates of Fumadocs CLI and Create Fumadocs App use the new hooks.

Index tables by row

Structured data records each table row as a Markdown table of its header row and itself, instead of a record per cell. Type tables from auto-type-table record a row for each prop instead of the TypeTable element. Re-sync your search indexes to pick them up.

... (truncated)

Commits

Updates fumadocs-mdx from 15.2.3 to 15.4.7

Release notes

Sourced from fumadocs-mdx's releases.

fumadocs-mdx@15.4.7

Markdown and search records from the authored source

remarkLLMs() and remarkStructure() of fumadocs-core slice their Markdown from the authored source like Sätteri, instead of stringifying the syntax tree. It is much faster, Markdown is no longer escaped or reformatted, and local images keep their addresses. Re-sync your search indexes to pick up the new records.

  • Plugins record the Markdown of content they replace with replaceSource() or embedSource() from fumadocs-core/mdx-plugins/stringifier, in place of data._stringify, and add search records with data.structuredData. Nodes they insert otherwise are left out. A namespace limits an edit to the stringifiers of that namespace, like search for search records.
  • Search records are always Markdown, also in Sätteri. filterElement replaces stringify.filterElement, it chooses the JSX elements kept as HTML tags (File, TypeTable, Callout and Card by default) that search dialogs render as components. Other elements and links are replaced by their content, images are removed, and an element on one line is recorded like a paragraph.
  • Removed defaultStringifier() (use createStringifier()), StringifyOptions, allowedMdxAttributes, filterMdxAttributes, placeholder() (use mdxAsPlaceholder), and the stringify and mdast-util-to-markdown options of both plugins.
  • Included content goes through the plugins like the document's own, Sätteri includes .md files as Markdown.
  • <auto-files> shows its files in a code block, auto-type-table its props in a Markdown table, created by typeTableToMarkdown() from fumadocs-typescript.
  • remarkShow() and fileGenerator() of fumadocs-docgen record their Markdown, generators receive the file to do the same.
  • Records of fumadocs-obsidian resolve wikilinks, and leave comments, block IDs, callout markers and embeds out. Comments are removed before parsing, so they no longer split a paragraph.
  • Pages of fumadocs-python compile from their MDX, so they have Markdown and search records.
  • fumadocs-mdx, fumadocs-docgen and fumadocs-obsidian require fumadocs-core 16.17.0.

Fix #3662

fumadocs-mdx@15.4.6

Keep collection dir outside the project in file paths

When a collection's dir was outside the project (e.g. ../content/docs), the leading ../ was dropped from info.fullPath and absolutePath, so getText('raw') failed with ENOENT.

Fix #3623

fumadocs-mdx@15.4.5

Stop recrawling node_modules on every Vite config resolution

The config hook of fumadocs-mdx/vite walked the dependency tree below Fumadocs packages once per chain reaching a package, so a docs app with a few Fumadocs packages read ~10k package.json files (~0.9s) each time Vite resolved its config, which it does once per build environment.

The crawl now visits each package once, breadth-first, and still records the shortest chain to every CommonJS dependency (fumadocs-ui > @base-ui/react > use-sync-external-store/shim and friends). The result is memoized for the process until the package manager's install state changes, so a build with several environments crawls once.

fumadocs-mdx@15.4.4

Sort glob results for deterministic codegen

fumadocs-mdx's Node codegen now sorts glob-matched files before generating collections, so the output (and anything derived from getPages()) is stable across builds of unchanged content. The Vite codegen path was checked separately: Vite's own import.meta.glob already sorts matched files internally, so it did not need the same fix.

fumadocs-mdx@15.4.3

Fix experimentalBuildCache bloating frontmatter-only imports

With a warm build cache, ?only=frontmatter imports were served the fully compiled page from cache instead of the frontmatter module, so every page was bundled two more times. The cache now only applies to full compilations.

fumadocs-mdx@15.4.2

Fix the _mdast export with removePosition

// fumadocs-mdx collection config
postprocess: {
  includeMDAST: { removePosition: true },
},

... (truncated)

Commits
  • e380a0d Version Packages (#3659)
  • 5d9353b feat(core): better mixedbread search
  • 097a544 feat(openapi): auth provider API
  • 945b87a fix(core,satteri): optimize traverse & better search records
  • 3bf9928 fix(ui): display fallback tree slidings correctly
  • 433b586 fix(openapi): better code examples
  • b221e1d fix(twoslash): better truncate & performance
  • 48bf8c6 fix(openapi,typescript): render Markdown images, show the OAuth redirect URI
  • cb7d92c docs: introduce new APIs
  • 8f1ffb3 refactor(ui): use prose class for search result markdown
  • Additional commits viewable in compare view

Updates lucide-react from 1.31.0 to 1.54.0

Release notes

Sourced from lucide-react's releases.

Version 1.54.0

What's Changed

Full Changelog: lucide-icons/lucide@1.53.0...1.54.0

Version 1.53.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.52.0...1.53.0

Version 1.52.0

What's Changed

Full Changelog: lucide-icons/lucide@1.51.0...1.52.0

Version 1.51.0

What's Changed

... (truncated)

Commits
  • 98331e2 chore(deps): bump the react-deps group across 1 directory with 3 updates (#4951)
  • 09aa9c5 chore(deps): Upgrade to vite 8 (#4950)
  • e042fec fix(packages): declare @types/react as an optional peer dependency (#4892)
  • f06ac67 chore(typchecking): More typecheck jobs for all packages (#4885)
  • 94e4cb9 chore(dependencies): Update dependencies (#4806)
  • 99d25bd feat(packages): extract icon build logic into @lucide/shared (#4409)
  • 75b5516 chore(dev): upgrade ESLint to latest compatible stack (v10) (#4378)
  • See full diff in compare view

Updates next from 16.3.0 to 16.4.0

Release notes

Sourced from next's releases.

v16.4.0

Check out the 16.4 announcement post to get an overview of the changes.

Core Changes

  • Show compiler plugin warning in more situations: #75682
  • fix(scripts): correct typo in rm.mjs error message: #87015
  • docs: improve clarity and punctuation in README: #86096
  • Fix debug build paths Pages Router support entries: #93529
  • bundle-analyzer: record historical snapshots on each analyze run: #93520
  • fix: detect proxy.ts correctly with compound pageExtensions: #93246
  • feat(turbopack): support false values for resolveAlias config: #93331

Misc Changes

  • docs: correction to dynamicParams migration: #96624
  • docs: proxy event argument: #96435
  • docs: remove experimental note from runtime prefetching: #96615
  • Preserve per-segment prefetching after dynamic navigation: #96583
  • Rename static generation stream option to waitForAllReady: #96564
  • Remove obsolete static generation plumbing: #96563
  • [turbopack] Drop dead writes to exports: #96381
  • [turbopack] Ignore writes to exports after a module.exports = {} writes: #96380
  • [turbopack] Add test for sideEffects with optimizePackageImports: #96549
  • [turbopack] Strip leading BOM before parsing CSS: #96678
  • Upgrade React from cbb046ab-20260731 to 7dfc7ccd-20260803: #96550
  • docs: use relative doc links in instant-navigation error pages: #96672
  • Turbopack: terminate failed plugin worker threads: #96592
  • Fix HTML-limited bot matching in prerender bypass rules: #96584
  • [ci] Fix create_release_branch for new repo permissions: #96641
  • test: skip action module instance deploy test: #96629
  • docs: quote the dynamicParams build error in a blockquote: #96633
  • [react-sync] Open pull requests as the bot that authors the commits: #96682
  • [Bench] Fixes for pure Fizz bench: #96771
  • Derive foreground cache revalidation from the consumer: #96731
  • Fix race when navigating Back before hydration: #96252
  • docs: present each Skill as steps in the AI agents guide: #96751
  • Reuse completed cache entries for the rest of a request: #96727
  • Upgrade React from 7dfc7ccd-20260803 to 11eddecd-20260805: #96735
  • Remove WorkStore execution mode: #96674
  • Remove cache revalidation execution mode reads: #96670
  • Separate App Route render and prerender pipelines: #96662
  • Remove App Page execution mode reads: #96660
  • test: fix missing await in css-chunking test: #96725
  • docs (Skills): stop assuming app/ at the root and port 3000: #96696
  • Implement next/font BeforeResolvePlugins as ImportMappingReplacement: #95808
  • Use Tailwind Turbopack loader in create-next-app: #96606
  • docs: instant navigation quick start with an adoption prompt: #96663
  • Separate App Page render and prerender pipelines: #96659
  • Move App Router execution intent to entrypoints: #96640

... (truncated)

Commits

…13 updates

Bumps the production-minor group with 13 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [arktype](https://github.com/arktypeio/arktype/tree/HEAD/ark/type) | `2.2.3` | `2.2.8` |
| [valibot](https://github.com/open-circle/valibot) | `1.4.2` | `1.5.0` |
| [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.6.5` |
| [cnfast](https://github.com/aidenybai/cnfast/tree/HEAD/packages/cnfast) | `0.1.0` | `0.2.0` |
| [fumadocs-core](https://github.com/fuma-nama/fumadocs) | `16.14.3` | `16.17.1` |
| [fumadocs-mdx](https://github.com/fuma-nama/fumadocs) | `15.2.3` | `15.4.7` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.31.0` | `1.54.0` |
| [next](https://github.com/vercel/next.js) | `16.3.0` | `16.4.0` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.0` |
| [express](https://github.com/expressjs/express) | `5.2.1` | `5.3.0` |
| [@hono/node-server](https://github.com/honojs/node-server) | `2.1.0` | `2.1.4` |
| [hono](https://github.com/honojs/hono) | `4.13.1` | `4.13.13` |



Updates `arktype` from 2.2.3 to 2.2.8
- [Release notes](https://github.com/arktypeio/arktype/releases)
- [Changelog](https://github.com/arktypeio/arktype/blob/main/ark/type/CHANGELOG.md)
- [Commits](https://github.com/arktypeio/arktype/commits/arktype@2.2.8/ark/type)

Updates `valibot` from 1.4.2 to 1.5.0
- [Release notes](https://github.com/open-circle/valibot/releases)
- [Commits](open-circle/valibot@v1.4.2...v1.5.0)

Updates `zod` from 4.4.3 to 4.6.5
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.4.3...v4.6.5)

Updates `cnfast` from 0.1.0 to 0.2.0
- [Release notes](https://github.com/aidenybai/cnfast/releases)
- [Changelog](https://github.com/aidenybai/cnfast/blob/main/packages/cnfast/CHANGELOG.md)
- [Commits](https://github.com/aidenybai/cnfast/commits/cnfast@0.2.0/packages/cnfast)

Updates `fumadocs-core` from 16.14.3 to 16.17.1
- [Release notes](https://github.com/fuma-nama/fumadocs/releases)
- [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs@16.14.3...fumadocs@16.17.1)

Updates `fumadocs-mdx` from 15.2.3 to 15.4.7
- [Release notes](https://github.com/fuma-nama/fumadocs/releases)
- [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs-mdx@15.2.3...fumadocs-mdx@15.4.7)

Updates `lucide-react` from 1.31.0 to 1.54.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.54.0/packages/lucide-react)

Updates `next` from 16.3.0 to 16.4.0
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.3.0...v16.4.0)

Updates `react` from 19.2.8 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react)

Updates `react-dom` from 19.2.8 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom)

Updates `express` from 5.2.1 to 5.3.0
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](expressjs/express@v5.2.1...v5.3.0)

Updates `@hono/node-server` from 2.1.0 to 2.1.4
- [Release notes](https://github.com/honojs/node-server/releases)
- [Commits](honojs/node-server@v2.1.0...v2.1.4)

Updates `hono` from 4.13.1 to 4.13.13
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.13.1...v4.13.13)

---
updated-dependencies:
- dependency-name: arktype
  dependency-version: 2.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor
- dependency-name: valibot
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor
- dependency-name: zod
  dependency-version: 4.6.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor
- dependency-name: cnfast
  dependency-version: 0.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor
- dependency-name: fumadocs-core
  dependency-version: 16.17.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor
- dependency-name: fumadocs-mdx
  dependency-version: 15.4.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor
- dependency-name: lucide-react
  dependency-version: 1.54.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor
- dependency-name: next
  dependency-version: 16.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor
- dependency-name: react
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor
- dependency-name: react-dom
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor
- dependency-name: express
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor
- dependency-name: "@hono/node-server"
  dependency-version: 2.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor
- dependency-name: hono
  dependency-version: 4.13.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 13, 2026
@coderabbitai

coderabbitai Bot commented Oct 13, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: b0b10a62-82e8-430d-a05f-93a90d5a862a

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants