[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending	Age	Confidence
astral-sh/ruff-pre-commit	repository	patch	v0.17.0 → v0.17.1	v0.17.2
eslint-config-next (source)	devDependencies	patch	16.4.0 → 16.4.2	16.4.3
henryiii/validate-pyproject-schema-store	repository	patch	2026.10.11 → 2026.10.12	2026.10.23 (+3)
munich-quantum-toolkit/workflows	workflow	patch	v2.5.1 → v2.5.5
next (source)	dependencies	patch	16.4.1 → 16.4.2	16.4.3
postcss (source)	devDependencies	patch	8.5.29 → 8.5.30	8.5.31
react (source)	dependencies	patch	19.3.0 → 19.3.1
react-dom (source)	dependencies	patch	19.3.0 → 19.3.1

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

---

Release Notes

astral-sh/ruff-pre-commit

v0.17.1

Compare Source

See: https://github.com/astral-sh/ruff/releases/tag/0.17.1

vercel/next.js (eslint-config-next)

v16.4.2

Compare Source

What's Changed

• [lts-active] turbo-tasks snapshot consistency fixes (#​99644, #​99732, #​99649) by @​lukesandberg in #​100002
• [lts-active] Turbopack: backport Pages Router dev module graph chaining (#​98823, #​99910, #​100091) by @​sokra in #​100008
• [lts-active] fix(next-code-frame): snap visible window to char boundaries by @​lukesandberg in #​100212
• [lts-active] [turbopack] Fix two GC paths that leave half-torn-down dependency edges by @​lukesandberg in #​100209
• [lts-active] Turbopack: Ignore realpath errors during module resolution, matching node's behavior by @​lukesandberg in #​100217
• [lts-active] Backport docs fixes since v16.4.0 by @​icyJoseph in #​100246
• [lts-active] Fix Turbopack lazy dynamic-import chunk-list collisions by @​lukesandberg in #​100211
• [lts-active] Backport additional documentation fixes since v16.4.0 by @​aurorascharff in #​100262

Full Changelog: vercel/next.js@v16.4.1...v16.4.2

v16.4.1

Compare Source

This release contains security fixes for the following advisories:

Critical:

• Unauthenticated Remote Code Execution in use cache functions returning typed arrays
• Unauthenticated Remote Code Execution in Image Optimization API when SVG files are used

High:

• Denial of Service in App Router using Server Actions

henryiii/validate-pyproject-schema-store

v2026.10.12

Compare Source

What's Changed

• chore(deps): bump version to 2026.10.12 by @​pyproject-schema-store-bot[bot] in #​305

Full Changelog: henryiii/validate-pyproject-schema-store@2026.10.11...2026.10.12

munich-quantum-toolkit/workflows

v2.5.5: MQT Reusable Workflows 2.5.5 Release

Compare Source

👀 What Changed

Please refer to the changelog and the upgrade guide for a structured overview of the changes.

🐛 Bug Fixes

• 🐛 Reduce cache pressure and prepare v2.5.5 (#​501) (@​burgholzer)

🤖 CI & Tooling

• 🐛 Reduce cache pressure and prepare v2.5.5 (#​501) (@​burgholzer)

Full Changelog: munich-quantum-toolkit/workflows@v2.5.4...v2.5.5

v2.5.4: MQT Reusable Workflows 2.5.4 Release

Compare Source

👀 What Changed

Please refer to the changelog and the upgrade guide for a structured overview of the changes.

📄 Documentation

• 🔖 Prepare release of v2.5.4 (#​500) (@​denialhaag)

⬆️ Dependencies

• ⬆️🩹 Update patch updates (#​499) (@​renovate[bot])

Full Changelog: munich-quantum-toolkit/workflows@v2.5.3...v2.5.4

v2.5.3: MQT Reusable Workflows 2.5.3 Release

Compare Source

👀 What Changed

Please refer to the changelog and the upgrade guide for a structured overview of the changes.

🐛 Bug Fixes

• 🔖 Prepare v2.5.3 with a Python lint cache opt-out (#​498) (@​burgholzer)

📄 Documentation

• 🔖 Prepare v2.5.3 with a Python lint cache opt-out (#​498) (@​burgholzer)

🤖 CI & Tooling

• 🔖 Prepare v2.5.3 with a Python lint cache opt-out (#​498) (@​burgholzer)

⬆️ Dependencies

• 🔖 Prepare v2.5.3 with a Python lint cache opt-out (#​498) (@​burgholzer)

Full Changelog: munich-quantum-toolkit/workflows@v2.5.2...v2.5.3

v2.5.2: MQT Reusable Workflows 2.5.2 Release

Compare Source

👀 What Changed

Please refer to the changelog and the upgrade guide for a structured overview of the changes.

🐛 Bug Fixes

• 🐛 Install the compiler cache for Python lint dependencies (#​496) (@​burgholzer)

📄 Documentation

• 🔖 Prepare release of v2.5.2 (#​497) (@​burgholzer)

⬆️ Dependencies

• ⬆️🩹 Update pre-commit hook rbubley/mirrors-prettier to v3.9.10 (#​495) (@​renovate[bot])
• ⬆️🩹 Update minor stable updates (#​494) (@​renovate[bot])
• ⬆️🩹 Update patch updates (#​493) (@​renovate[bot])

Full Changelog: munich-quantum-toolkit/workflows@v2.5.1...v2.5.2

postcss/postcss (postcss)

v8.5.30

Compare Source

• Fix broken map on </style> escaping (by @​Rufflet).

react/react (react)

v19.3.1: 19.3.1 (October 14th, 2026)

Compare Source

React Server Components

• Improve transport protocol (#​37845 by @​unstubbable and @​eps1lon)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "every weekend"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!