Skip to content

chore(deps-dev): Bump the development group across 1 directory with 8 updates - #206

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/development-42266eb39f
Closed

chore(deps-dev): Bump the development group across 1 directory with 8 updates#206
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/development-42266eb39f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 11, 2026

Copy link
Copy Markdown
Contributor

Bumps the development group with 8 updates in the / directory:

Package From To
@biomejs/biome 2.5.11 2.5.15
@types/bun 1.4.0 1.4.2
knip 6.38.0 6.39.0
@happy-dom/global-registrator 20.11.2 20.14.5
@tanstack/router-plugin 1.168.30 1.168.42
@types/node 26.2.0 26.6.4
@copilotkit/aimock 1.38.0 1.43.0
@tauri-apps/cli 2.11.4 2.12.1

Updates @biomejs/biome from 2.5.11 to 2.5.15

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.15

2.5.15

Patch Changes

  • #10634 b436ba0 Thanks @​subaru-hello! - Added the new nursery rule noReactObjectTypeAsDefaultProp, which disallows array, object, and function values as default props in React components.

    For example, the following snippet triggers the rule.

    function Component({ items = [] }) {
  return items;
}

  • #11956 faa8b37 Thanks @​dyc3! - Added the nursery rule noSvelteExportLet, which disallows declaring Svelte component props with the legacy export let syntax. Use the $props() rune instead.

    <script>
  export let name;
</script>

  • #10816 1b9479e Thanks @​Th3S4mur41! - Added a new nursery rule useLogicalProperties that enforces the use of logical properties in CSS, promoting better internationalization and accessibility practices. The rule supports a direction option with "ltr" as the default and "rtl" as the alternative. This is a first rule covering parts of #9034

    {
  "linter": {
    "rules": {
      "nursery": {
        "useLogicalProperties": {
          "level": "warn",
          "options": {
            "direction": "rtl"
          }
        }
      }
    }
  }
}

  • #11960 1fdb5c2 Thanks @​dyc3! - Added the nursery rule useSvelteKitRuneImports, which reports imports from the deprecated $app/stores module and suggests $app/state instead.

    import { page } from "$app/stores";

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.15

Patch Changes

  • #10634 b436ba0 Thanks @​subaru-hello! - Added the new nursery rule noReactObjectTypeAsDefaultProp, which disallows array, object, and function values as default props in React components.

    For example, the following snippet triggers the rule.

    function Component({ items = [] }) {
  return items;
}

  • #11956 faa8b37 Thanks @​dyc3! - Added the nursery rule noSvelteExportLet, which disallows declaring Svelte component props with the legacy export let syntax. Use the $props() rune instead.

    <script>
  export let name;
</script>

  • #10816 1b9479e Thanks @​Th3S4mur41! - Added a new nursery rule useLogicalProperties that enforces the use of logical properties in CSS, promoting better internationalization and accessibility practices. The rule supports a direction option with "ltr" as the default and "rtl" as the alternative. This is a first rule covering parts of #9034

    {
  "linter": {
    "rules": {
      "nursery": {
        "useLogicalProperties": {
          "level": "warn",
          "options": {
            "direction": "rtl"
          }
        }
      }
    }
  }
}

  • #11960 1fdb5c2 Thanks @​dyc3! - Added the nursery rule useSvelteKitRuneImports, which reports imports from the deprecated $app/stores module and suggests $app/state instead.

    import { page } from "$app/stores";

  • #11723 3b429d1 Thanks @​m1handr! - Fixed #11656: noAstroSetHtmlDirective now correctly reports set:html directives inside Astro template expressions.

... (truncated)

Commits

Updates @types/bun from 1.4.0 to 1.4.2

Commits

Updates knip from 6.38.0 to 6.39.0

Release notes

Sourced from knip's releases.

Release 6.39.0

  • Add Railway plugin (#2026) (6da55767eb419701dd32f93789a00e8bdc915276) - thanks @​jonahsnider!
  • Update query snapshot (8877d3cf35943e17a617e1197fa46c5a43342479)
  • Fix excluded tags on entry re-exports (#2062) (b22e27543cb8dd4ba7ec97c70ccfd06bc8f16614) - thanks @​devYRPauli!
  • Update rolldown snapshot (3a45c806e1c1b7ceb078903652c8631566400096)
  • Skip synthetic self-imports in Vue and Nuxt auto-import compilers (#2067) (d912d807e41f140bbc79bafce6882b3c05dec6ff) - thanks @​bytedoe!
  • fix(angular): keep other projects' inputs when one has no architect (#2064) (af3f42e9772e9937fd71b7557d3b54aee1db339a) - thanks @​Cayan!
  • fix(vite): resolve nested HTML entry points in multi-page apps (#1988) (4648aefe56e7bac521bb6f17189473b46f8ff00f) - thanks @​DreamLongYT!
  • Improve Rstest plugin support (#2068) (add87992e9dfe2f3c22e4c6ba7fa257d7f0151cf) - thanks @​fi3ework!
  • Handle profiles, formatters and require paths in Cucumber plugin (#2065) (2ad39fcf02e067b4bdfc06a658bf4bf5abeea764) - thanks @​giaBaoJS!
  • fix(playwright): resolve globalSetup/globalTeardown from config dir (#2076) (7060bb968339680d694275413aba2833e4521ed9) - thanks @​alokn!
  • fix: read entry export tags under the re-exported names (#2069) (1698683df95a96b3515795eb664aacf030042d7b) - thanks @​devYRPauli!
Commits
  • ed30e5b Release knip@6.39.0
  • 1698683 fix: read entry export tags under the re-exported names (#2069)
  • 7060bb9 fix(playwright): resolve globalSetup/globalTeardown from config dir (#2076)
  • 2ad39fc Handle profiles, formatters and require paths in Cucumber plugin (#2065)
  • add8799 Improve Rstest plugin support (#2068)
  • 4648aef fix(vite): resolve nested HTML entry points in multi-page apps (#1988)
  • af3f42e fix(angular): keep other projects' inputs when one has no architect (#2064)
  • d912d80 Skip synthetic self-imports in Vue and Nuxt auto-import compilers (#2067)
  • b22e275 Fix excluded tags on entry re-exports (#2062)
  • 6da5576 Add Railway plugin (#2026)
  • See full diff in compare view

Updates @happy-dom/global-registrator from 20.11.2 to 20.14.5

Release notes

Sourced from @​happy-dom/global-registrator's releases.

v20.14.5

👷‍♂️ Patch fixes

v20.14.4

👷‍♂️ Patch fixes

  • End comments at the first comment end tag when it overlaps a comment start tag - By @​hampustagerud in task #2407

v20.14.3

👷‍♂️ Patch fixes

v20.14.2

👷‍♂️ Patch fixes

  • Fixes regression where not all CSS variables where resolved in getComputedStyle() - By @​klaesra in task #2344

v20.14.1

👷‍♂️ Patch fixes

v20.14.0

🎨 Features

v20.13.2

👷‍♂️ Patch fixes

  • Fix problem with getComputedStyle with :host and :host-context selectors - By @​capricorn86 in task #2349

v20.13.1

👷‍♂️ Patch fixes

  • GetComputedStyle should return inherited value when it is set to inherit - By @​capricorn86 in task #2347

v20.13.0

🎨 Features

v20.12.2

👷‍♂️ Patch fixes

v20.12.1

🎨 Features

  • Adds support for kebab-case properties on CSSStyleDeclaration - By @​capricorn86 in task #2256
  • Adds support for all Chromium CSS properties to CSSStyleDeclaration - By @​capricorn86 in task #2256
    • Downloads a list from the Chromium project when compiling

👷‍♂️ Patch fixes

v20.12.0

... (truncated)

Commits
  • 0d4cdbe fix: #2409 Preserve character references in comment data (#2410)
  • 9c920a4 fix: #2407 End comments at the first comment end tag when it overlaps a com...
  • 5fb1df3 fix: #2363 Avoids cloning all properties in CSSPropertyManager.toString() (...
  • de0a1e9 fix: #2344 Resolve every var() in a value, not only the first one (#2395)
  • 64b8b94 fix: #2366 Invalidate the computed style cache for the whole subtree (#2367)
  • eac5a38 feat: #2357 Improves computed style cache (#2358)
  • 5b3559b fix: #2349 Fix problem with getComputedStyle with :host and :host-context s...
  • f33da73 fix: #2347 getComputedStyle should return inherited value when it is set to...
  • 68b9806 feat: #2345 Adds support for :host psuedo query selector (#2346)
  • 9300a9f fix: #2342 Custom elements should be upgraded when connected to DOM (#2343)
  • Additional commits viewable in compare view

Updates @tanstack/router-plugin from 1.168.30 to 1.168.42

Release notes

Sourced from @​tanstack/router-plugin's releases.

@​tanstack/router-plugin@​1.168.42

Patch Changes

@​tanstack/router-plugin@​1.168.41

Patch Changes

Changelog

Sourced from @​tanstack/router-plugin's changelog.

1.168.42

Patch Changes

1.168.41

Patch Changes

1.168.40

Patch Changes

1.168.39

Patch Changes

1.168.38

Patch Changes

1.168.37

Patch Changes

  • #8300 49bcd4d - Refresh compatible build and runtime dependencies.

... (truncated)

Commits

Updates @types/node from 26.2.0 to 26.6.4

Commits

Updates @copilotkit/aimock from 1.38.0 to 1.43.0

Release notes

Sourced from @​copilotkit/aimock's releases.

v1.43.0

What's Changed

Full Changelog: CopilotKit/aimock@v1.42.0...v1.43.0

v1.42.1

What's Changed

Full Changelog: CopilotKit/aimock@v1.42.0...v1.42.1

v1.42.0

What's Changed

... (truncated)

Changelog

Sourced from @​copilotkit/aimock's changelog.

[1.43.0] - 2026-09-22

BREAKING — aimock -h is --help, not --host: aimock -h 0.0.0.0 exits 1 with Error: Unexpected argument '0.0.0.0'. This command does not take positional arguments. Migration: --host <string> (long form only). The llmock bin (the Docker ENTRYPOINT) keeps -h, --host (#453).

Added

  • OpenAI GPT-Live mock, record and offline replay on GET /v1/live/sessions, with onLive fixtures (#468)
  • Live sessions enforce message/audio/queue/lifetime limits; recordings sanitize credentials (#468)
  • Live drift canaries for lifecycle, audio/transcript, delegation and usage, attributed to openai-live (#468)
  • Chaos rateLimitRate / --chaos-ratelimit: deterministic 429 with Retry-After (#449)
  • Chaos latencyMs / --chaos-latency now actually delays responses on every path (#449)
  • OpenAI Files API mock — byte-exact uploads, create-purpose enum, CORS on faults (#445)
  • OpenAI fine-tuning jobs mock — deterministic lifecycle, events, cursor pages (#447)
  • OpenAI Batches API mock — create/list/retrieve/cancel with real output files (#446)
  • X-Request-Id echoed or minted on every response; ?requestId= filters the journal (#450)
  • aimock validate lints fixture files or directories offline, failing on broken files (#453)
  • ElevenLabs Voice Design record/replay — design, save-as-voice, and voice slot management (#452)
  • ElevenLabs Voice Design provenance block and strict-mode 503 coverage (#454)

Changed

  • BREAKING: aimock -h is --help, matching aimock convert -h and aimock validate -h; the host override is --host only. The llmock bin (the Docker entrypoint) keeps its own -h, --host — see the note above (#453)
  • aimock --config "", --port "" and --host "" are usage errors naming the option (#453)
  • Realtime OpenAI-Beta: realtime=v1 now returns the real sunset rejection, not a session (#461)
  • POST /v1/images/variations now replays the real removal 404; OpenAI deleted it (#462)
  • ChaosAction gains "rateLimit" — an exhaustive switch over it needs a case (#449)
  • applyChaosAsync() returns false | "handled" | "unwritable" instead of a bare boolean (#449)
  • Journal headers now ALWAYS carry x-request-id — exact toEqual asserts break (#450)

Deprecated

  • Synchronous applyChaos() warns once per process; it skips chaos latency. Use await applyChaosAsync(...) (#449)

Fixed

  • Reasoning-first chat streams with content and tool calls carry the assistant role in the first chunk (#470)
  • Journals and metrics reflect delivered vs interrupted responses; one-shot errors never double-deliver (#466)
  • Nonstreaming OpenAI chat returns block text and tools; text-only blocks finish normally on every provider (#467)
  • AG-UI drift reads generated 1.0 schemas; AGUIRunStartedEvent gains optional protocolVersion (#469)
  • Drift reports list unverifiedSurfaces; offline Bedrock/Vertex checks no longer skip silently (#460)
  • Drift docs match actual coverage; ElevenLabs drift separates vendor observations from fixture checks (#465)
  • Chaos no longer treats committed headers as a dead response; only status-writing actions are skipped (#449)
  • Chaos skip logs name what happened; aimock_chaos_triggered_total counts only written responses (#449)
  • A request whose chaos latency was cancelled by client hang-up is no longer served or journalled (#449)
  • Moderations echoes the request's model; default is now omni-moderation-latest (#459)
  • Image endpoints default to gpt-image-1 — dall-e-2/dall-e-3 were removed (#459)
  • AG-UI record/proxy forwards the caller's headers and raw body upstream; Accept is forced to SSE (#455)
  • The AG-UI recorder refuses to write a fixture from a non-stream or empty 2xx upstream reply (#455)
  • A MINTED x-request-id is no longer forwarded upstream in record/proxy mode (#450)

... (truncated)

Commits
  • e863880 chore: release v1.43.0 (#476)
  • 0b595ed chore: release v1.43.0
  • 832ec44 docs: refresh adoption wall
  • 5603d78 fix(adoption-wall): curate affromero/flight-finder as Flight Finder (#473)
  • 6d51783 fix(adoption-wall): curate affromero/flight-finder as Flight Finder
  • a8773dd fix: identify reasoning-first content-plus-tool streams as assistant (#470)
  • 51e7d96 docs: document reasoning-first content-plus-tool stream fix
  • 16646fa fix: identify reasoning-first tool streams as assistant
  • e23d91f docs(changelog): cover recent runtime and drift fixes
  • 0314226 Restore AG-UI 1.0 schema drift checks (#469)
  • Additional commits viewable in compare view

Updates @tauri-apps/cli from 2.11.4 to 2.12.1

Release notes

Sourced from @​tauri-apps/cli's releases.

@​tauri-apps/cli v2.12.1

[2.12.1]

Enhancements

Dependencies

  • Upgraded to tauri-cli@2.12.1

@​tauri-apps/cli v2.12.0

[2.12.0]

New Features

  • f6c1eb253 (#15401) Added bundle.windows.bundleVCRuntime to copy the Visual C++ runtime DLLs into Windows MSI and NSIS installers. The bundler locates the runtime through VCTOOLS_REDIST_DIR or the bundled vswhere.exe.

  • f76b1d3ae (#15644) The bundler now prints the size of each generated bundle next to its path in the Finished N bundles at: output (directories such as macOS .app bundles are measured recursively).

  • af465eae1 (#15619) Add a --no-binary-patching flag to tauri build and tauri bundle. When set, the bundler skips patching the main executable with bundle type information (and the subsequent re-signing), leaving an already-signed binary untouched. Patching is only required when shipping multiple bundle types per platform that should each update with their own installer format.

  • 0646cc162 (#15620) Add a --fit option to tauri icon to accept non-square source images. --fit cover center-crops the source to a square (clipping the longer side) and --fit contain pads the shorter side with transparency. Non-square sources without --fit keep erroring, now with a hint pointing to the flag.

  • f6c1eb253 (#15401) Added build.windows.staticVCRuntime to control MSVC static runtime linking. The STATIC_VCRUNTIME environment variable is now deprecated and emits a migration warning when used.

  • f45ec0dcf Record the app version in the trusted comment of updater signatures, so a signed artifact is bound to the version it was released as.

    An update endpoint response is not signed, and the signature only covers the downloaded artifact, so the announced version on its own does not prove which release the url and signature point at. minisign covers the trusted comment with its global signature, which lets the updater plugin compare the two and reject a response that pairs a version number with a different release. Enable requireSignedVersion in the updater plugin configuration to enforce this.

    tauri build fills the version in automatically, and tauri plugin add updater now enables requireSignedVersion for the project it is adding the plugin to. tauri signer sign gains an --app-version flag for signing updater artifacts by hand, and warns when it is omitted.

Enhancements

  • e19121427 (#15993) Don't always rewrite Cargo.toml file from CRLF line endings to LF

  • aebf38c84 (#15694) Migrate the Android Gradle scripts from the deprecated kotlinOptions DSL to compilerOptions, which is accepted by both Kotlin Gradle Plugin 1.9.x and 2.x. This lets projects move to Kotlin 2.x without hitting the hard error that 2.3+ raises on the old DSL.

    This increased the minimum supported Gradle version to 8.13, if your gradle is on an earlier version, delete src-tauri/gen/android/gradle/wrapper/gradle-wrapper.properties and re-run tauri android init to update it.

  • d89d8fa62 (#15780) Warn during Android commands (init/dev/build) when the active Java version is too new for the Gradle version the project uses (e.g. Java 27 against the Gradle 9.6.1 the template ships, or Java 25 against a project still on Gradle 8.14), instead of letting the build fail later with a cryptic error. The warning points to the Gradle/Java compatibility matrix and suggests a supported JDK.

  • c3d21bd60 (#15730) Use Theme.Material3.DayNight.NoActionBar instead of Theme.MaterialComponents.DayNight.NoActionBar when running tauri android init

  • f654f470c (#15862) Update template to use targetSdk = 37

  • cdaf7eab6 (#15765) Clarify that the tauri init frontend commands run before tauri dev and tauri build, and can be left empty when they are not needed.

    ...

    Description has been truncated

@dependabot
chore(deps-dev): Bump the development group across 1 directory with 8…
4639518 
… updates

Bumps the development group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.11` | `2.5.15` |
| [@types/bun](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/bun) | `1.4.0` | `1.4.2` |
| [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) | `6.38.0` | `6.39.0` |
| [@happy-dom/global-registrator](https://github.com/capricorn86/happy-dom) | `20.11.2` | `20.14.5` |
| [@tanstack/router-plugin](https://github.com/TanStack/router/tree/HEAD/packages/router-plugin) | `1.168.30` | `1.168.42` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.2.0` | `26.6.4` |
| [@copilotkit/aimock](https://github.com/CopilotKit/aimock) | `1.38.0` | `1.43.0` |
| [@tauri-apps/cli](https://github.com/tauri-apps/tauri) | `2.11.4` | `2.12.1` |



Updates `@biomejs/biome` from 2.5.11 to 2.5.15
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.15/packages/@biomejs/biome)

Updates `@types/bun` from 1.4.0 to 1.4.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/bun)

Updates `knip` from 6.38.0 to 6.39.0
- [Release notes](https://github.com/webpro-nl/knip/releases)
- [Commits](https://github.com/webpro-nl/knip/commits/knip@6.39.0/packages/knip)

Updates `@happy-dom/global-registrator` from 20.11.2 to 20.14.5
- [Release notes](https://github.com/capricorn86/happy-dom/releases)
- [Commits](capricorn86/happy-dom@v20.11.2...v20.14.5)

Updates `@tanstack/router-plugin` from 1.168.30 to 1.168.42
- [Release notes](https://github.com/TanStack/router/releases)
- [Changelog](https://github.com/TanStack/router/blob/main/packages/router-plugin/CHANGELOG.md)
- [Commits](https://github.com/TanStack/router/commits/@tanstack/router-plugin@1.168.42/packages/router-plugin)

Updates `@types/node` from 26.2.0 to 26.6.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@copilotkit/aimock` from 1.38.0 to 1.43.0
- [Release notes](https://github.com/CopilotKit/aimock/releases)
- [Changelog](https://github.com/CopilotKit/aimock/blob/main/CHANGELOG.md)
- [Commits](CopilotKit/aimock@v1.38.0...v1.43.0)

Updates `@tauri-apps/cli` from 2.11.4 to 2.12.1
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](https://github.com/tauri-apps/tauri/compare/@tauri-apps/cli-v2.11.4...@tauri-apps/cli-v2.12.1)

---
updated-dependencies:
- dependency-name: "@biomejs/biome"
  dependency-version: 2.5.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development
- dependency-name: "@types/bun"
  dependency-version: 1.4.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development
- dependency-name: knip
  dependency-version: 6.39.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development
- dependency-name: "@happy-dom/global-registrator"
  dependency-version: 20.14.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development
- dependency-name: "@tanstack/router-plugin"
  dependency-version: 1.168.42
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development
- dependency-name: "@types/node"
  dependency-version: 26.6.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development
- dependency-name: "@copilotkit/aimock"
  dependency-version: 1.43.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development
- dependency-name: "@tauri-apps/cli"
  dependency-version: 2.12.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 11, 2026
codesolarlght[bot]
codesolarlght Bot reviewed Oct 11, 2026
View reviewed changes

@codesolarlght codesolarlght Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔆 CodeSolar review ✅ Looks good

Dependency version bumps across 4 package.json files — no code changes.

✅ No issues worth flagging.

solar-pro4 (openrouter) · 4 files · +60/-52 · 18.1s · CodeSolar

Comment /codesolar on this PR to re-run the review.

@yulmucoffee yulmucoffee mentioned this pull request Oct 13, 2026
Merged
14 tasks done
yulmucoffee added a commit that referenced this pull request Oct 13, 2026
@yulmucoffee @kirodex
chore(deps): the patch and minor bumps from Dependabot's #207 and #206 …
f8528dd 
…that have no surface of their own

Tier 1, patch level: yaml 2.9.0 → 2.9.1, @shadcn/react 0.3.0 → 0.3.1, remark-cjk-friendly
2.3.1 → 2.3.2, drizzle-kit 0.31.10 → 0.31.11, drizzle-orm 0.45.2 → 0.45.3, hono 4.13.7 → 4.13.13,
@tanstack/react-router 1.170.27 → 1.170.41, @tanstack/router-plugin 1.168.30 → 1.168.42,
@biomejs/biome 2.5.11 → 2.5.15, @types/bun 1.4.0 → 1.4.2.

Tier 2, minors of libraries this code only calls: @tabler/icons-react 3.46 → 3.48,
@tanstack/react-query 5.101.4 → 5.104.1, tailwind-merge 3.6 → 3.7, zod 4.4.3 → 4.6.6,
shadcn 4.17 → 4.21.1, knip 6.38 → 6.39, @types/node 26.2 → 26.6.4, @tauri-apps/cli 2.11.4 → 2.12.1.

Why the lockfile is deduplicated by hand: `bun add` of a new version leaves the old one nested
under every package that depended on it (`@modelcontextprotocol/sdk/hono: 4.13.7` beside the
server's 4.13.13), and the two copies of hono then disagree on `Context` in the typecheck
(`main.ts:1137`). Dependabot's lock has one copy; so does this one.

Biome 2.5.15 reports the same two warnings as 2.5.11 on this tree and nothing new, so nothing is
reformatted and it is not pinned back; the one thing it said was that `biome.json`'s `$schema`
still named 2.5.11, so that line moves with it.

Co-authored-by: LAF Agent <274876363+laf-agent@users.noreply.github.com>
yulmucoffee added a commit that referenced this pull request Oct 13, 2026
@yulmucoffee @kirodex
chore(deps): react 19.3, streamdown 2.7 (remend 1.4), @base-ui/react …
e87bcf5 
…1.8, aimock 1.43 — shown live

The tier with behaviour, from #207 and #206, each gated and then used in a browser: react and
react-dom 19.2.8 → 19.3.0 (with @types/react, @types/react-dom), streamdown 2.5.0 → 2.7.0,
@base-ui/react 1.7.0 → 1.8.0, @copilotkit/aimock 1.38.0 → 1.43.0.

Streamdown 2.7.0 depends on remend 1.4.0 exactly and imports `INCOMPLETE_IMAGE_PLACEHOLDER` from
it. The root `overrides` pinned remend to ^1.3.1 (2af08cb, so Korean emphasis closing against a
particle is drawn as emphasis), and with that in force the lock keeps 1.3.1 for streamdown too —
Dependabot's #207 has exactly that lock — and Vite refuses to start the app: `No matching export
in ".../remend@1.3.1/..."`. The override moves to ^1.4.0, which still forbids what it was there to
forbid.

Streamdown 2.7 draws three zoom buttons on every diagram, so the renderer's word table gains
`resetView`, `zoomIn` and `zoomOut` with their Korean — the table's type is the renderer's own
list of words, so a word it gains is a type error here rather than an English label nobody
noticed, which is what happened.

Left out of this tier, each with its reason in the pull request: @happy-dom/global-registrator
20.14 (the app suite does not finish with it), @copilotkit/react-core and runtime 1.77 (needs a
change in copilot.ts), better-auth 1.7 (sign-in source changes), eventsource 5 (would split the
copy the MCP SDK requires from the one the entry preloads), @modelcontextprotocol/sdk 1.32 (walks
same-origin redirects itself, past plugins/mcp.ts's refusal), prompt-area 0.7 (new peer package,
IME rewrite), playwright 1.63 (the browser image's, #22).

Co-authored-by: LAF Agent <274876363+laf-agent@users.noreply.github.com>
@yulmucoffee

yulmucoffee commented Oct 13, 2026

Copy link
Copy Markdown
Collaborator

Closing: landed in #214 except @happy-dom/global-registrator 20.14, under which the app's tests do not finish.

@dependabot @github

dependabot Bot commented on behalf of github Oct 13, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/bun/development-42266eb39f branch October 13, 2026 08:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

1 more reviewer
@codesolarlght codesolarlght[bot] codesolarlght[bot] left review comments
Reviewers whose approvals may not affect merge requirements

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@yulmucoffee