Skip to content

chore(deps): Bump the minor-and-patch group across 1 directory with 24 updates - #89

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-7ca63e95b1
Open

chore(deps): Bump the minor-and-patch group across 1 directory with 24 updates#89
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-7ca63e95b1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 21, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 24 updates in the / directory:

Package From To
@base-ui/react 1.8.0 1.9.0
@fumadocs/json-schema 0.2.0 0.3.2
@fumari/stf 1.1.1 1.1.2
cn 0.4.0 0.5.0
fast-content-type-parse 4.0.0 4.0.1
fumadocs-core 16.16.0 16.17.5
fumadocs-mdx 15.4.6 15.4.7
fumadocs-openapi 12.2.0 12.5.2
fumadocs-ui 16.16.0 16.17.5
lucide-react 1.51.0 1.59.0
nodemailer 10.0.14 10.1.2
@playwright/test 1.63.0 1.64.1
smtp-server 3.19.17 3.19.23
@aws-sdk/client-s3 3.1146.0 3.1152.0
@aws-sdk/s3-request-presigner 3.1146.0 3.1152.0
@supabase/supabase-js 2.117.2 2.118.0
next 16.3.8 16.4.2
oxlint-tsgolint 7.0.2003 7.0.2004
oxlint 1.86.0 1.88.0
prettier 3.9.9 3.9.10
react-dom 19.3.0 19.3.1
react 19.3.0 19.3.1
vitest 5.0.3 5.0.5
zod 4.6.5 4.6.7

Updates @base-ui/react from 1.8.0 to 1.9.0

Release notes

Sourced from @​base-ui/react's releases.

v1.9.0

General changes

Accordion

  • Fix <Accordion.Trigger>'s data-value and data-index attributes (#5705) by @​cpruijsen
  • Apply the native disabled attribute to <Accordion.Trigger> when using native buttons (#5607) by @​atomiks
  • Expand hiddenUntilFound panels synchronously on beforematch (#5514) by @​aarongarciah

Alert Dialog

  • Don't associate a programmatically opened popup with a trigger that did not open it (#5641) by @​michaldudak

Autocomplete

  • Fix autoHighlight for asynchronous results (#5818) by @​atomiks
  • Pass the originating event to onItemHighlighted. Pointer events may be MouseEvent or PointerEvent; typing reports the reason none (#5838) by @​atomiks
  • Decouple automatic unmounting from actionsRef. Call eventDetails.preventUnmountOnClose() in onOpenChange to opt out of automatic unmounting (#5734) by @​michaldudak

Checkbox

Collapsible

Combobox

Dialog

... (truncated)

Changelog

Sourced from @​base-ui/react's changelog.

v1.9.0

Oct 9, 2026

General changes

Accordion

  • Fix <Accordion.Trigger>'s data-value and data-index attributes (#5705) by @​cpruijsen
  • Apply the native disabled attribute to <Accordion.Trigger> when using native buttons (#5607) by @​atomiks
  • Expand hiddenUntilFound panels synchronously on beforematch (#5514) by @​aarongarciah

Alert Dialog

  • Don't associate a programmatically opened popup with a trigger that did not open it (#5641) by @​michaldudak

Autocomplete

  • Fix autoHighlight for asynchronous results (#5818) by @​atomiks
  • Pass the originating event to onItemHighlighted. Pointer events may be MouseEvent or PointerEvent; typing reports the reason none (#5838) by @​atomiks
  • Decouple automatic unmounting from actionsRef. Call eventDetails.preventUnmountOnClose() in onOpenChange to opt out of automatic unmounting (#5734) by @​michaldudak

Checkbox

Collapsible

Combobox

  • Fix stale chip focus after returning to the input (#5879) by @​mdm317
  • Fix autoHighlight for asynchronous results (#5818) by @​atomiks
  • Decouple automatic unmounting from actionsRef. Call eventDetails.preventUnmountOnClose() in onOpenChange to opt out of automatic unmounting (#5734) by @​michaldudak
  • Fix label focus in Shadow DOM (#5871) by @​lyzno1
  • Pass the originating event to onItemHighlighted. Pointer events may be MouseEvent or PointerEvent; typing reports the reason none (#5838) by @​atomiks
  • Reset typeahead state when closing without moving focus (#5816) by @​mdm317
  • Accept readonly arrays for multiple values (#5710) by @​MonstraG

... (truncated)

Commits
  • ad7ecda [release] v1.9.0 (#5906)
  • 3296de3 [drawer] Avoid retaining unmounted drawers in DrawerProvider (#5921)
  • 69c33b4 [drawer] Fix deferred touch swipes leaving the popup (#5922)
  • 51b70db [menu] Strip internal filter components from public types (#5923)
  • 8d8b98c [menu] Ignore filter input edits while the menu animates out (#5911)
  • aeba3eb [combobox][menu][select] Revert highlightItem imperative action (#5910)
  • ec6bf32 [field][select][combobox][slider] Fall back to the owner document when lookin...
  • 1f112a5 [popups] Avoid re-rendering inactive triggers on open and close (#5865)
  • bc53db6 [fieldset] Await render in Legend disabled-state test (#5909)
  • 147092e [test] Strengthen tests, add test lint rules and share copied suites (#5892)
  • Additional commits viewable in compare view

Updates @fumadocs/json-schema from 0.2.0 to 0.3.2

Updates @fumari/stf from 1.1.1 to 1.1.2

Release notes

Sourced from @​fumari/stf's releases.

@​fumari/stf@​1.1.2

Support __proto__ as a property name

  • Fields named __proto__ are stored as own properties, instead of changing the prototype of their parent object.
  • Samples and merged schemas keep properties named __proto__, constructor and prototype.
Commits

Updates cn from 0.4.0 to 0.5.0

Release notes

Sourced from cn's releases.

cn@0.5.0

Minor Changes

  • #157 663adea Thanks @​shadcn! - Drop Node 20, which reached end of life, and require Node 22 or later.

  • #164 64aa1d0 Thanks @​shadcn! - cn build now follows package @imports, reads @theme declarations after nested blocks such as @keyframes, and drops names declared before a --*: initial reset.

Changelog

Sourced from cn's changelog.

0.5.0

Minor Changes

  • #157 663adea Thanks @​shadcn! - Drop Node 20, which reached end of life, and require Node 22 or later.

  • #164 64aa1d0 Thanks @​shadcn! - cn build now follows package @imports, reads @theme declarations after nested blocks such as @keyframes, and drops names declared before a --*: initial reset.

Commits

Updates fast-content-type-parse from 4.0.0 to 4.0.1

Release notes

Sourced from fast-content-type-parse's releases.

v4.0.1

What's Changed

New Contributors

Full Changelog: fastify/fast-content-type-parse@v4.0.0...v4.0.1

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for fast-content-type-parse since your current version.


Updates fumadocs-core from 16.16.0 to 16.17.5

Release notes

Sourced from fumadocs-core's releases.

fumadocs@16.17.5

  • @​fumadocs/base-ui@​16.17.5
  • fumadocs-core@16.17.5
  • fumadocs-ui@16.17.5

Faster API pages and search indexes

  • Schema UI generates the schemas it shows when they open, instead of every schema reachable from the root.
  • Inline schemas are identified by their position, links to their properties copied before this version no longer open them.
  • TypeScript definitions of bodies are generated when copied.
  • Search indexes take breadcrumbs from one walk of the page tree, instead of a search for each page.

fumadocs@16.17.4

  • @​fumadocs/base-ui@​16.17.4
  • fumadocs-core@16.17.4
  • fumadocs-ui@16.17.4

Keyboard-scrollable MDX tables

  • Tables of defaultMdxComponents are focusable, so keyboard users can scroll wide tables in Safari.

Fix #3706

Use prose-sm and prose-xs for small prose

Small prose in TOC items, type tables, API descriptions and AI chat scales its code and headings with the text.

Spacious: define --fd-docs-height for pages

Sticky content of pages, like the example column of API pages, fits the page panel.

fumadocs@16.17.3

  • @​fumadocs/base-ui@​16.17.3
  • fumadocs-core@16.17.3
  • fumadocs-ui@16.17.3

Lightbox for zoomable images

Zoomable images inside <Lightbox /> open in one viewer, browse them with arrow keys, swipes or the side buttons.

import { Lightbox } from 'fumadocs-ui/components/image-zoom';
<Lightbox>
<MDX components={getMDXComponents()} />
</Lightbox>;

  • The image title is shown as caption, pass caption to <ImageZoom /> for rich content.
  • rmiz props don't apply inside <Lightbox />.

... (truncated)

Commits
  • 78d52d1 Merge pull request #3708 from fuma-nama/tegami/version-packages
  • d0501be fix(*): avoid memory leaks
  • 786b72f fix build
  • daa7d4c feat(openapi-standalone): parallel pre-renders
  • ef28050 fix(openapi): better example selector
  • 94ac980 perf(core,openapi): improve performance
  • aedcf4c Version Packages (#3705)
  • ca6c7dd fix(ui): focusable tables
  • 481ca80 feat(openapi): better default for allowed origins
  • 0de0c90 feat(openapi): standalone package
  • Additional commits viewable in compare view

Updates fumadocs-mdx from 15.4.6 to 15.4.7

Release notes

Sourced from fumadocs-mdx's releases.

fumadocs-mdx@15.4.7

Markdown and search records from the authored source

remarkLLMs() and remarkStructure() of fumadocs-core slice their Markdown from the authored source like Sätteri, instead of stringifying the syntax tree. It is much faster, Markdown is no longer escaped or reformatted, and local images keep their addresses. Re-sync your search indexes to pick up the new records.

  • Plugins record the Markdown of content they replace with replaceSource() or embedSource() from fumadocs-core/mdx-plugins/stringifier, in place of data._stringify, and add search records with data.structuredData. Nodes they insert otherwise are left out. A namespace limits an edit to the stringifiers of that namespace, like search for search records.
  • Search records are always Markdown, also in Sätteri. filterElement replaces stringify.filterElement, it chooses the JSX elements kept as HTML tags (File, TypeTable, Callout and Card by default) that search dialogs render as components. Other elements and links are replaced by their content, images are removed, and an element on one line is recorded like a paragraph.
  • Removed defaultStringifier() (use createStringifier()), StringifyOptions, allowedMdxAttributes, filterMdxAttributes, placeholder() (use mdxAsPlaceholder), and the stringify and mdast-util-to-markdown options of both plugins.
  • Included content goes through the plugins like the document's own, Sätteri includes .md files as Markdown.
  • <auto-files> shows its files in a code block, auto-type-table its props in a Markdown table, created by typeTableToMarkdown() from fumadocs-typescript.
  • remarkShow() and fileGenerator() of fumadocs-docgen record their Markdown, generators receive the file to do the same.
  • Records of fumadocs-obsidian resolve wikilinks, and leave comments, block IDs, callout markers and embeds out. Comments are removed before parsing, so they no longer split a paragraph.
  • Pages of fumadocs-python compile from their MDX, so they have Markdown and search records.
  • fumadocs-mdx, fumadocs-docgen and fumadocs-obsidian require fumadocs-core 16.17.0.

Fix #3662

Commits
  • e380a0d Version Packages (#3659)
  • 5d9353b feat(core): better mixedbread search
  • 097a544 feat(openapi): auth provider API
  • 945b87a fix(core,satteri): optimize traverse & better search records
  • 3bf9928 fix(ui): display fallback tree slidings correctly
  • 433b586 fix(openapi): better code examples
  • b221e1d fix(twoslash): better truncate & performance
  • 48bf8c6 fix(openapi,typescript): render Markdown images, show the OAuth redirect URI
  • cb7d92c docs: introduce new APIs
  • 8f1ffb3 refactor(ui): use prose class for search result markdown
  • Additional commits viewable in compare view

Updates fumadocs-openapi from 12.2.0 to 12.5.2

Release notes

Sourced from fumadocs-openapi's releases.

fumadocs-openapi@12.5.2

Generated files

  • watch of generateFiles() watches the files of record inputs, like { petstore: './petstore.yaml' }.
  • Index cards with quotes in titles or descriptions generate valid MDX.
  • Generated pages keep backslashes in document IDs, like Windows paths.
  • staticSource() and generateFiles() are faster on large documents, per: 'tag' groups operations in one pass.

Playground details

  • The selected server is highlighted in the server list.
  • Server list items highlight on hover without a fade.
  • Edits of server variables no longer apply to the next selected server.
  • Boolean fields line up with the values of other fields.

fumadocs-openapi@12.5.1

Faster API pages and search indexes

  • Schema UI generates the schemas it shows when they open, instead of every schema reachable from the root.
  • Inline schemas are identified by their position, links to their properties copied before this version no longer open them.
  • TypeScript definitions of bodies are generated when copied.
  • Search indexes take breadcrumbs from one walk of the page tree, instead of a search for each page.

Example request select in the card title

  • The select of example requests replaces the title of the example request card, its options show the descriptions of examples.
  • renderAPIExampleLayout() gets the selector slot only with renderAPIExampleUsageTabs().
  • Options with descriptions line up their labels with the select.

Refuse schemas not listed in input

  • getSchema() and page preloads throw for schema IDs not listed in input, instead of loading them as file paths or URLs.

fumadocs-openapi@12.5.0

All security schemes in the API playground

  • Support OAuth 2.0 deviceAuthorization flows, openIdConnect schemes and PKCE.
  • OAuth requests with a client secret and device flows go through proxyUrl when set, allow your authorization server in allowedOrigins.
  • The OAuth panel remembers the client ID.
  • mutualTLS schemes no longer send an Authorization header.
  • Headless: useOpenIdConnectFlows(), stf and returned of usePlaygroundAuth(), requestOAuthToken() accepts onUserCode, signal and proxyUrl.
  • Playgrounds on a page share their auth values, useAuthFields().mapValues() reads them from the page.
  • The playground reopens after OAuth flows return in client-rendered sites.
  • Returning OAuth flows no longer switch the security requirement of other playgrounds.
  • Added translation keys to @fumadocs/language.

Share @fumari/stf and @fumadocs/json-schema with installed UI

They are depended on with a caret range instead of an exact version, so UI installed with Fumadocs CLI can share one copy with the package.

... (truncated)

Commits

Updates fumadocs-ui from 16.16.0 to 16.17.5

Release notes

Sourced from fumadocs-ui's releases.

fumadocs@16.17.5

  • @​fumadocs/base-ui@​16.17.5
  • fumadocs-core@16.17.5
  • fumadocs-ui@16.17.5

Faster API pages and search indexes

  • Schema UI generates the schemas it shows when they open, instead of every schema reachable from the root.
  • Inline schemas are identified by their position, links to their properties copied before this version no longer open them.
  • TypeScript definitions of bodies are generated when copied.
  • Search indexes take breadcrumbs from one walk of the page tree, instead of a search for each page.

fumadocs@16.17.4

  • @​fumadocs/base-ui@​16.17.4
  • fumadocs-core@16.17.4
  • fumadocs-ui@16.17.4

Keyboard-scrollable MDX tables

  • Tables of defaultMdxComponents are focusable, so keyboard users can scroll wide tables in Safari.

Fix #3706

Use prose-sm and prose-xs for small prose

Small prose in TOC items, type tables, API descriptions and AI chat scales its code and headings with the text.

Spacious: define --fd-docs-height for pages

Sticky content of pages, like the example column of API pages, fits the page panel.

fumadocs@16.17.3

  • @​fumadocs/base-ui@​16.17.3
  • fumadocs-core@16.17.3
  • fumadocs-ui@16.17.3

Lightbox for zoomable images

Zoomable images inside <Lightbox /> open in one viewer, browse them with arrow keys, swipes or the side buttons.

import { Lightbox } from 'fumadocs-ui/components/image-zoom';
<Lightbox>
<MDX components={getMDXComponents()} />
</Lightbox>;

  • The image title is shown as caption, pass caption to <ImageZoom /> for rich content.
  • rmiz props don't apply inside <Lightbox />.

... (truncated)

Commits
  • 78d52d1 Merge pull request #3708 from fuma-nama/tegami/version-packages
  • d0501be fix(*): avoid memory leaks
  • 786b72f fix build
  • daa7d4c feat(openapi-standalone): parallel pre-renders
  • ef28050 fix(openapi): better example selector
  • 94ac980 perf(core,openapi): improve performance
  • aedcf4c Version Packages (#3705)
  • ca6c7dd fix(ui): focusable tables
  • 481ca80 feat(openapi): better default for allowed origins
  • 0de0c90 feat(openapi): standalone package
  • Additional commits viewable in compare view

Updates lucide-react from 1.51.0 to 1.59.0

Release notes

Sourced from lucide-react's releases.

Version 1.59.0

What's Changed

Full Changelog: lucide-icons/lucide@1.58.0...1.59.0

Version 1.58.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.57.0...1.58.0

Version 1.57.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.56.0...1.57.0

Version 1.56.0

What's Changed

... (truncated)

Commits
  • 3f1255e chore(deps-dev): bump @​vitejs/plugin-react (#4995)
  • 949bc6d test(lucide-react): add tests for DynamicIcon fallback and ref forwarding (#4...
  • See full diff in compare view

Updates nodemailer from 10.0.14 to 10.1.2

Release notes

Sourced from nodemailer's releases.

v10.1.2

10.1.2 (2026-10-16)

Bug Fixes

  • bound the work a message can make the mailer do and keep per-message auth off the transport's token endpoint (e347fa2)

v10.1.1

10.1.1 (2026-10-14)

Bug Fixes

  • fetch: strip credentials on any cross-origin redirect (a15360c)

v10.1.0

10.1.0 (2026-10-10)

Behaviour changes

  • Pooled connections are closed after 4 minutes without a message (new idleTimeout pool option, set it to 0 to keep them open). A message whose recipients are rejected no longer closes the pooled connection, it is reset with RSET and reused, and a message is requeued when the server dropped a reused connection before any of it was sent.
  • connectionTimeout covers setting the session up as a whole: the DNS lookup, a proxy handshake, the TCP connection, TLS, the greeting and a STARTTLS upgrade. greetingTimeout still bounds the greeting and the STARTTLS handshake within it.
  • Any 421 reply ends the SMTP session. When the server closes an idle connection, SMTPConnection emits only end, not an ECONNECTION error.
  • A content stream that was already read or destroyed fails the message with ESTREAM instead of producing an empty attachment. Content streams of a message that fails are destroyed.
  • With opportunisticTLS, authentication is skipped on the unencrypted connection after a failed STARTTLS, unless forceAuth is set.
  • The envelope is pipelined (MAIL FROM, RCPT TO and DATA in one batch) when the server announces PIPELINING.
  • Errors carry originalCode (the system error code Nodemailer replaced, such as ECONNREFUSED) and, for ETIMEDOUT, timeoutType.

Features

  • harden message streams, SMTP connections and the connection pool (8009da6)

Bug Fixes

  • do not read the environment or the interface table on import (094179d)
  • end the SMTP session on any 421 reply and drive the envelope through one step (5638ac1)
  • keep ERR_ACCESS_DENIED from the Node.js permission model (8b33a3d)
  • let the proxy handshake and the SMTP connection share one deadline (91ed683)
  • mime-node: decode an SMTPUTF8 domain from its A-label form (e436f4d)
  • mime-node: finish an encoded part only after its output was read (ec97d8f)
  • qp: encode a lone CR or LF in binary quoted-printable parts (42b91d9)
  • smtp-connection: count the wait for the greeting against connectionTimeout (bdcd046)
  • smtp-connection: drop the connection when DATA is taken after a refused sender (f90fb04)
  • smtp-connection: refuse a second connect() call (24ba2e0)
  • turn Nagle off for SMTP sockets and report an early sendmail exit as such (fa9b8d3)

Performance Improvements

... (truncated)

Changelog

Sourced from nodemailer's changelog.

10.1.2 (2026-10-16)

Bug Fixes

  • bound the work a message can make the mailer do and keep per-message auth off the transport's token endpoint (e347fa2)

10.1.1 (2026-10-14)

Bug Fixes

  • fetch: strip credentials on any cross-origin redirect (a15360c)

10.1.0 (2026-10-10)

Features

  • harden message streams, SMTP connections and the connection pool (8009da6)

Bug Fixes

  • do not read the environment or the interface table on import (094179d)
  • end the SMTP session on any 421 reply and drive the envelope through one step (5638ac1)
  • keep ERR_ACCESS_DENIED from the Node.js permission model (8b33a3d)
  • let the proxy handshake and the SMTP connection share one deadline (91ed683)
  • mime-node: decode an SMTPUTF8 domain from its A-label form (e436f4d)
  • mime-node: finish an encoded part only after its output was read (ec97d8f)
  • qp: encode a lone CR or LF in binary quoted-printable parts (42b91d9)
  • smtp-connection: count the wait for the greeting against connectionTimeout (bdcd046)
  • smtp-connection: drop the connection when DATA is taken after a refused sender (f90fb04)
  • smtp-connection: refuse a second connect() call (24ba2e0)
  • turn Nagle off for SMTP sockets and report an early sendmail exit as such (fa9b8d3)

Performance Improvements

  • encode base64 and quoted-printable without per-chunk delays (fd377bb)

10.0.16 (2026-10-07)

Bug Fixes

@dependabot
chore(deps): Bump the minor-and-patch group across 1 directory with 2…
0f0ca04 
…4 updates

Bumps the minor-and-patch group with 24 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@base-ui/react](https://github.com/mui/base-ui/tree/HEAD/packages/react) | `1.8.0` | `1.9.0` |
| [@fumadocs/json-schema](https://fumadocs.dev) | `0.2.0` | `0.3.2` |
| [@fumari/stf](https://github.com/fuma-nama/fumadocs) | `1.1.1` | `1.1.2` |
| [cn](https://github.com/shadcn-ui/cn/tree/HEAD/packages/cn) | `0.4.0` | `0.5.0` |
| [fast-content-type-parse](https://github.com/fastify/fast-content-type-parse) | `4.0.0` | `4.0.1` |
| [fumadocs-core](https://github.com/fuma-nama/fumadocs) | `16.16.0` | `16.17.5` |
| [fumadocs-mdx](https://github.com/fuma-nama/fumadocs) | `15.4.6` | `15.4.7` |
| [fumadocs-openapi](https://github.com/fuma-nama/fumadocs) | `12.2.0` | `12.5.2` |
| [fumadocs-ui](https://github.com/fuma-nama/fumadocs) | `16.16.0` | `16.17.5` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.51.0` | `1.59.0` |
| [nodemailer](https://github.com/nodemailer/nodemailer) | `10.0.14` | `10.1.2` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.63.0` | `1.64.1` |
| [smtp-server](https://github.com/nodemailer/smtp-server) | `3.19.17` | `3.19.23` |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1146.0` | `3.1152.0` |
| [@aws-sdk/s3-request-presigner](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages/s3-request-presigner) | `3.1146.0` | `3.1152.0` |
| [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js) | `2.117.2` | `2.118.0` |
| [next](https://github.com/vercel/next.js) | `16.3.8` | `16.4.2` |
| [oxlint-tsgolint](https://github.com/oxc-project/tsgolint) | `7.0.2003` | `7.0.2004` |
| [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.86.0` | `1.88.0` |
| [prettier](https://github.com/prettier/prettier) | `3.9.9` | `3.9.10` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.3.0` | `19.3.1` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.3.0` | `19.3.1` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.3` | `5.0.5` |
| [zod](https://github.com/colinhacks/zod) | `4.6.5` | `4.6.7` |



Updates `@base-ui/react` from 1.8.0 to 1.9.0
- [Release notes](https://github.com/mui/base-ui/releases)
- [Changelog](https://github.com/mui/base-ui/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mui/base-ui/commits/v1.9.0/packages/react)

Updates `@fumadocs/json-schema` from 0.2.0 to 0.3.2

Updates `@fumari/stf` from 1.1.1 to 1.1.2
- [Release notes](https://github.com/fuma-nama/fumadocs/releases)
- [Commits](https://github.com/fuma-nama/fumadocs/compare/@fumari/stf@1.1.1...@fumari/stf@1.1.2)

Updates `cn` from 0.4.0 to 0.5.0
- [Release notes](https://github.com/shadcn-ui/cn/releases)
- [Changelog](https://github.com/shadcn-ui/cn/blob/main/packages/cn/CHANGELOG.md)
- [Commits](https://github.com/shadcn-ui/cn/commits/cn@0.5.0/packages/cn)

Updates `fast-content-type-parse` from 4.0.0 to 4.0.1
- [Release notes](https://github.com/fastify/fast-content-type-parse/releases)
- [Commits](fastify/fast-content-type-parse@v4.0.0...v4.0.1)

Updates `fumadocs-core` from 16.16.0 to 16.17.5
- [Release notes](https://github.com/fuma-nama/fumadocs/releases)
- [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs@16.16.0...fumadocs@16.17.5)

Updates `fumadocs-mdx` from 15.4.6 to 15.4.7
- [Release notes](https://github.com/fuma-nama/fumadocs/releases)
- [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs-mdx@15.4.6...fumadocs-mdx@15.4.7)

Updates `fumadocs-openapi` from 12.2.0 to 12.5.2
- [Release notes](https://github.com/fuma-nama/fumadocs/releases)
- [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs-openapi@12.2.0...fumadocs-openapi@12.5.2)

Updates `fumadocs-ui` from 16.16.0 to 16.17.5
- [Release notes](https://github.com/fuma-nama/fumadocs/releases)
- [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs@16.16.0...fumadocs@16.17.5)

Updates `lucide-react` from 1.51.0 to 1.59.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.59.0/packages/lucide-react)

Updates `nodemailer` from 10.0.14 to 10.1.2
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](nodemailer/nodemailer@v10.0.14...v10.1.2)

Updates `@playwright/test` from 1.63.0 to 1.64.1
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.63.0...v1.64.1)

Updates `smtp-server` from 3.19.17 to 3.19.23
- [Release notes](https://github.com/nodemailer/smtp-server/releases)
- [Changelog](https://github.com/nodemailer/smtp-server/blob/master/CHANGELOG.md)
- [Commits](nodemailer/smtp-server@v3.19.17...v3.19.23)

Updates `@aws-sdk/client-s3` from 3.1146.0 to 3.1152.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1152.0/clients/client-s3)

Updates `@aws-sdk/s3-request-presigner` from 3.1146.0 to 3.1152.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages/s3-request-presigner/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1152.0/packages/s3-request-presigner)

Updates `@supabase/supabase-js` from 2.117.2 to 2.118.0
- [Release notes](https://github.com/supabase/supabase-js/releases)
- [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md)
- [Commits](https://github.com/supabase/supabase-js/commits/v2.118.0/packages/core/supabase-js)

Updates `next` from 16.3.8 to 16.4.2
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.3.8...v16.4.2)

Updates `oxlint-tsgolint` from 7.0.2003 to 7.0.2004
- [Release notes](https://github.com/oxc-project/tsgolint/releases)
- [Commits](oxc-project/tsgolint@v7.0.2003...v7.0.2004)

Updates `oxlint` from 1.86.0 to 1.88.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.88.0/npm/oxlint)

Updates `prettier` from 3.9.9 to 3.9.10
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.9...3.9.10)

Updates `react-dom` from 19.3.0 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom)

Updates `react` from 19.3.0 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react)

Updates `vitest` from 5.0.3 to 5.0.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/vitest)

Updates `zod` from 4.6.5 to 4.6.7
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.6.5...v4.6.7)

---
updated-dependencies:
- dependency-name: "@base-ui/react"
  dependency-version: 1.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@fumadocs/json-schema"
  dependency-version: 0.3.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@fumari/stf"
  dependency-version: 1.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: cn
  dependency-version: 0.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: fast-content-type-parse
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: fumadocs-core
  dependency-version: 16.17.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: fumadocs-mdx
  dependency-version: 15.4.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: fumadocs-openapi
  dependency-version: 12.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: fumadocs-ui
  dependency-version: 16.17.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: lucide-react
  dependency-version: 1.59.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: nodemailer
  dependency-version: 10.1.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@playwright/test"
  dependency-version: 1.64.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: smtp-server
  dependency-version: 3.19.23
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.1152.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@aws-sdk/s3-request-presigner"
  dependency-version: 3.1152.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@supabase/supabase-js"
  dependency-version: 2.118.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: next
  dependency-version: 16.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: oxlint-tsgolint
  dependency-version: 7.0.2004
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: oxlint
  dependency-version: 1.88.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: prettier
  dependency-version: 3.9.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: react-dom
  dependency-version: 19.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: react
  dependency-version: 19.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: vitest
  dependency-version: 5.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: zod
  dependency-version: 4.6.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from NotTahaAli as a code owner October 21, 2026 04:29
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 21, 2026
@coderabbitai

coderabbitai Bot commented Oct 21, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 3c28a646-2352-4e6b-b5d5-89190afc58ba

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@NotTahaAli NotTahaAli Awaiting requested review from NotTahaAli NotTahaAli is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants