[dependabot]

Bumps the npm-minor-and-patch group with 42 updates in the / directory:

Package	From	To
@eslint-react/eslint-plugin	5.20.8	5.28.3
prettier	3.9.9	3.9.10
railway	3.11.0	3.16.0
typescript-eslint	8.70.1	8.72.0
@assistant-ui/core	0.2.22	0.3.30
@assistant-ui/store	0.2.21	0.3.22
react	19.3.0	19.3.1
vitest	4.1.11	4.1.12
@assistant-ui/react	0.14.27	0.15.30
posthog-js	1.435.2	1.438.12
react-dom	19.3.0	19.3.1
@anthropic-ai/sandbox-runtime	0.0.77	0.0.81
@daytona/sdk	0.218.0	0.225.0
@hono/node-server	2.1.1	2.1.5
@sentry/node	10.75.3	10.76.2
cron-parser	5.10.1	5.10.2
jose	6.2.12	6.2.13
kysely	0.29.6	0.29.7
pg	8.23.0	8.23.1
zod	4.6.5	4.6.7
@swc/core	1.16.2	1.16.18
@ai-sdk/alibaba	2.0.56	2.0.72
@ai-sdk/anthropic	4.0.65	4.0.84
@ai-sdk/google	4.0.82	4.0.101
@ai-sdk/moonshotai	3.0.58	3.0.73
@ai-sdk/openai	4.0.78	4.0.98
@ai-sdk/openai-compatible	3.0.57	3.0.74
@ai-sdk/provider	4.0.18	4.0.31
@ai-sdk/provider-utils	5.0.49	5.0.64
@opentelemetry/core	2.11.0	2.12.0
ai	7.0.118	7.0.146
openai	7.23.0	7.39.0
parallel-web	1.3.3	1.3.5
@types/ws	8.18.1	8.18.2
@openuidev/react-headless	0.9.13	0.18.1
@openuidev/react-lang	0.2.15	0.4.1
@openuidev/react-ui	0.13.10	0.18.1
lucide-react	0.562.0	0.577.0
react-resizable-panels	4.14.1	4.14.7
react-syntax-highlighter	16.1.1	16.1.2
@testing-library/jest-dom	6.6.3	6.9.1
@vitest/coverage-v8	4.1.11	4.1.12

Updates @eslint-react/eslint-plugin from 5.20.8 to 5.28.3

Release notes

Sourced from @​eslint-react/eslint-plugin's releases.

v5.28.3 (2026-10-20)

What's Changed

✨ New

• Identifier resolution is now bounded by the enclosing component scope, so render-scoped values referenced from nested callbacks (ex: items.map((item) => <Context.Provider value={foo}>)) are now detected, values declared outside the component (ex: module-level constants) are treated as stable, and nested components report each value only once, attributed to the innermost component. (#2060)

  Affected rules:

  • react-x/no-unstable-context-value
  • react-x/no-unstable-default-props

• Class declarations (ex: class Foo {} in a component body) are now recognized as per-render constructions, so using one as a context value or default prop is now reported. (#2060)

  Affected rules:

  • react-x/no-unstable-context-value
  • react-x/no-unstable-default-props

🏗️ Internal

• @eslint-react/var: resolve and resolveObjectType now accept a boundary option that bounds scope-chain traversal to an enclosing component or hook; resolveObjectType also resolves ClassDeclaration nodes. (#2060)
• Bumped typescript-eslint to 8.72.0, fumadocs-core and fumadocs-ui to 16.17.7, fumadocs-mdx to 15.4.8, lucide-react to 1.60.0, and typedoc-plugin-markdown to 4.14.1.

Full Changelog: Rel1cx/eslint-react@v5.28.2...v5.28.3

Attestation

https://github.com/Rel1cx/eslint-react/attestations/57782625

v5.28.2 (2026-10-19)

What's Changed

🐞 Fixes

• Website: fixed a build failure caused by an unquoted : sequence in the YAML frontmatter description of the react-x/use-memo doc; the rule scaffold script now emits a YAML-safe quoted description so scaffolded rules cannot reintroduce the issue.

📝 Documentation

• Aligned the react-debug/jsx rule doc messages with the actual JSON report format.
• Corrected the documented minimum ESLint version to 10.0.0 in the READMEs and getting-started guides.
• Documented per-layer isolated testing in the fact-based rule implementation patterns guide.
• Generalized the isAPI/isAPICall docs and updated the custom rule samples to use is.APICall. (#2059)

🏗️ Internal

• Added unit tests for the react-x immutability rule modules (collect, effects, helpers, origins). (#2056)
• Bumped the postcss override to 8.5.31.

... (truncated)

Changelog

Sourced from @​eslint-react/eslint-plugin's changelog.

v5.28.3 (2026-10-20)

✨ New

• Identifier resolution is now bounded by the enclosing component scope, so render-scoped values referenced from nested callbacks (ex: items.map((item) => <Context.Provider value={foo}>)) are now detected, values declared outside the component (ex: module-level constants) are treated as stable, and nested components report each value only once, attributed to the innermost component. (#2060)

  Affected rules:

  • react-x/no-unstable-context-value
  • react-x/no-unstable-default-props

• Class declarations (ex: class Foo {} in a component body) are now recognized as per-render constructions, so using one as a context value or default prop is now reported. (#2060)

  Affected rules:

  • react-x/no-unstable-context-value
  • react-x/no-unstable-default-props

🏗️ Internal

• @eslint-react/var: resolve and resolveObjectType now accept a boundary option that bounds scope-chain traversal to an enclosing component or hook; resolveObjectType also resolves ClassDeclaration nodes. (#2060)
• Bumped typescript-eslint to 8.72.0, fumadocs-core and fumadocs-ui to 16.17.7, fumadocs-mdx to 15.4.8, lucide-react to 1.60.0, and typedoc-plugin-markdown to 4.14.1.

Full Changelog: Rel1cx/eslint-react@v5.28.2...v5.28.3

v5.28.2 (2026-10-19)

🐞 Fixes

• Website: fixed a build failure caused by an unquoted : sequence in the YAML frontmatter description of the react-x/use-memo doc; the rule scaffold script now emits a YAML-safe quoted description so scaffolded rules cannot reintroduce the issue.

📝 Documentation

• Aligned the react-debug/jsx rule doc messages with the actual JSON report format.
• Corrected the documented minimum ESLint version to 10.0.0 in the READMEs and getting-started guides.
• Documented per-layer isolated testing in the fact-based rule implementation patterns guide.
• Generalized the isAPI/isAPICall docs and updated the custom rule samples to use is.APICall. (#2059)

🏗️ Internal

• Added unit tests for the react-x immutability rule modules (collect, effects, helpers, origins). (#2056)
• Bumped the postcss override to 8.5.31.

Full Changelog: Rel1cx/eslint-react@v5.28.1...v5.28.2

v5.28.1 (2026-10-17)

🐞 Fixes

• react-dom/no-unknown-property: fixed a false positive where the React camelCase SVG prop renderingIntent was reported as an unknown property, including on code produced by this rule's own autofix for rendering-intent. (#2055)
• react-jsx/no-useless-fragment: the auto-fixer no longer unwraps fragments outside JSX whose children are all whitespace (ex: const x = <> </>; or return <>\n</> with allowExpressions: false); the previous fix produced syntactically invalid JavaScript such as const x = ;. These fragments are still reported, just without a fix. (#2055)

... (truncated)

Commits

• 1f3931b release: 5.28.3
• 11456a4 release: 5.28.2
• 3533e2d docs: correct documented ESLint minimum version to 10.0.0
• a35f390 release: 5.28.1
• b68cfb6 refactor: align rule docs, comments, and messages with actual behavior (#2055)
• 20d2b08 docs: update GitHub links from facebook/react to react/react and align API do...
• 2b285c4 chore: bump eslint to 10.13.0 and pnpm to 12.14.0
• 4217c6e release: 5.28.0
• a41ab41 feat(eslint-plugin): enable JSX parsing in general-purpose presets (#2049)
• 35dd889 release: 5.27.4
• Additional commits viewable in compare view

Updates prettier from 3.9.9 to 3.9.10

Release notes

Sourced from prettier's releases.

3.9.10

• Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.10

diff

Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

See micromark/micromark-extension-gfm-table@4f43ead for details.

Commits

• 1172b82 Release 3.9.10
• d014227 Update micromark-extension-gfm-table to fix the table parse issue on perfor...
• 953b908 Bump Prettier dependency to 3.9.9
• ad8a6bf Clean changelog_unreleased
• See full diff in compare view

Updates railway from 3.11.0 to 3.16.0

Release notes

Sourced from railway's releases.

v3.16.0

Changes

• #101 feat(iac): support the per-service cdn block

v3.15.0

Changes

• #103 feat(iac): fn() reads function code from codeFile

v3.14.0

Changes

• #100 test(iac): cover deploy.preDeployTimeoutSeconds on service()
• #102 feat(iac): type and validate the image auto-update maintenance window

v3.13.1

Changes

• #96 chore: move tsx to devDependencies

v3.13.0

Changes

• #93 feat(iac): accept deploy.preDeployTimeoutSeconds
• #94 feat(sandbox): exec process controls, sizing, sessions, and execHttp

v3.12.0

Changes

• #79 feat: add sandbox public domains
• #82 test: cover sandbox domains and stabilize checkpoint assertions
• #92 feat(iac): support the per-service tracing block

Commits

• 97fdb4f chore: release v3.16.0
• b61bbb5 feat(iac): support the per-service cdn block (#101)
• 5312d5f chore: release v3.15.0
• 33f6e2e feat(iac): fn() reads function code from codeFile
• a214466 chore: release v3.14.0
• bcf3ce3 feat(iac): type and validate the image auto-update maintenance window (#102)
• b95d745 test(iac): cover deploy.preDeployTimeoutSeconds on service() (#100)
• e34b7aa chore: release v3.13.1
• b89b702 Merge pull request #96 from AlemTuzlak/chore/tsx-dev-dependency
• 9a8e672 chore: move tsx to devDependencies
• Additional commits viewable in compare view

Updates typescript-eslint from 8.70.1 to 8.72.0

Release notes

Sourced from typescript-eslint's releases.

v8.72.0

8.72.0 (2026-10-19)

🚀 Features

• eslint-plugin: lazy load rules (#13010)
• eslint-plugin: [await-thenable] add allowMixedPromiseArrays option (#12992)
• typescript-estree: error on abstract keyword that precedes export (#13019)

🩹 Fixes

• ast-spec: add JSXFragment to JSXAttribute['value'] (#13051)
• eslint-plugin: [prefer-readonly-parameter-types] check where allowed type aliases are declared (#13016)
• eslint-plugin: [no-deprecated] report deprecated properties in object literals (#12704)
• eslint-plugin: use isTypeLiteralType instead of type.isLiteral() to include bigint literals on TS < 5.0 (#13053)
• eslint-plugin: [require-array-sort-compare] check tuples (#13058)
• eslint-plugin: [require-array-sort-compare] ignore extra this type argument on TS < 5.1 (#13055)
• type-utils: discriminateAnyType crashes when calling getAwaitedType on awaited type in TS < 5.0 (#13054)
• typescript-estree: include leading and trailing comments & whitespace in Program range (#12991)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Junichiro Kasuya @​jksy
• Mitch Fultz @​fitchmultz
• Shaan GS @​ShaanGS

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.71.2

8.71.2 (2026-10-12)

🩹 Fixes

• eslint-plugin: [no-unused-vars] avoid false-positives when not using our parser (#12989)
• eslint-plugin: [no-unnecessary-type-parameters] count instantiated mapped type templates (#12974)
• eslint-plugin: [no-unused-vars] ignore type-only refs for after-used (#12977)
• eslint-plugin: [no-unnecessary-type-parameters] parenthesize constraint in optional tuple elements (#12995)
• eslint-plugin: [prefer-optional-chain] safe fix when the chain ends with a strict null comparison (#12805)
• type-utils: match linked packages and packages with missing version in TypeOrValueSpecifier (#12948)

❤️ Thank You

• Abraham Guo
• Brad Zacher @​bradzacher
• Evyatar Daud @​StyleShit
• Josh Goldberg
• Vinccool96

... (truncated)

Changelog

Sourced from typescript-eslint's changelog.

8.72.0 (2026-10-19)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.71.2 (2026-10-12)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.71.1 (2026-10-05)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.71.0 (2026-09-28)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

• a4c2603 chore(release): publish 8.72.0
• 7488d68 chore(release): publish 8.71.2
• d57b8da chore(release): publish 8.71.1
• 8695664 chore(release): publish 8.71.0
• See full diff in compare view

Updates @assistant-ui/core from 0.2.22 to 0.3.30

Release notes

Sourced from @​assistant-ui/core's releases.

@​assistant-ui/core@​0.3.30

Patch Changes

• #9811 69bf91a - fix: preserve AI SDK history messages listed before their parents by sharing core's parent-first ordering helper. Keep the selected head and sibling branches while continuing to skip malformed messages and orphaned descendants. (@​Kinfe123)

• #9108 ed0d969 - Track selectors that read through a forwarding client when its target changes. (@​rupic-app)

• #9862 1a3359e - Add a Resume control for interrupted runs. useComposerResume from @assistant-ui/core/react and ComposerPrimitive.Resume resume a run whose adapter reports canResume; the control is disabled while the draft is not empty or the thread is busy. (@​okisdev)

• #9861 2dc72a8 - Add an opt-in canResume flag for interrupted runs. An adapter that keeps an exact checkpoint sets canResume, and resumeRun resumes it; concurrent resumes share one attempt. canResume is optional on thread state, so existing custom thread clients remain compatible. The AI SDK runtime offers it only while resumable storage holds a pending stream, and the server must replay the interrupted message with its original ID. (@​okisdev)

• #9815 32869e0 - fix: preserve mention labels and IDs containing directive delimiters without changing existing bracket-form directives. (@​Kinfe123)

• #9851 118dedb - fix: isolate adapter hooks so swapping thread list adapters preserves the hosted runtime's hook order (@​okisdev)

• #9538 79e10db - fix: restore unsent drafts using the latest attachment cleanup state. (@​okisdev)

• #9776 32a1b79 - useAuiState and aui.composer.getState() now see composer text as soon as setText returns, so an input that keeps its own state, such as react-mentions, no longer moves the caret to the end. (@​okisdev)

• #9804 d7fb0ee - refactor: createLocalStorageAdapter (and so createFileStorageAdapter in @assistant-ui/react-ink) no longer sets unstable_Provider, which only wrapped the adapters its unstable_useAdapters already returns, so useRemoteThreadListRuntime runs it on the RemoteThreadList store client like the cloud adapter. a useRemoteThreadListRuntime that mounts with it now ignores unstable_Provider on any later adapter, so give that adapter unstable_useAdapters to keep its per-thread history (@​okisdev)

• #9891 545836d - feat: ModelContext() takes maxSystemLength to cap the merged system prompt, trimming the lowest-priority parts first, or mergeSystem to combine the prioritized SystemParts yourself (@​Yonom)

• #9449 e21ce83 - adapters may omit unarchive; archived threads then open without unarchiving and explicit unarchive rejects. the OpenCode adapter omits it because OpenCode cannot unarchive a session. (@​okisdev)

• #9652 ca0a1be - feat: add the internal thread list runtime core that runs on a RemoteThreadList client, and let RemoteThreadListHookInstanceManager publish hosted thread runtimes during commit (@​okisdev)

• #9649 d420f42 - feat: add the internal RemoteThreadList seams that useRemoteThreadListRuntime needs to run on the store client. a plain RemoteThreadList now aborts a thread's pending send when that thread is deleted, detached or dropped by an adapter-replacing reload, as InMemoryThreadList and useRemoteThreadListRuntime already do, and logs a failed automatic title the way useRemoteThreadListRuntime does (@​okisdev)

• #9650 9f673a3 - feat: run useRemoteThreadListRuntime on the RemoteThreadList store client unless the adapter it mounts with sets unstable_Provider, so both thread list paths share one implementation. a runtime that mounts without unstable_Provider serves later adapters through unstable_useAdapters and warns in development when one only has unstable_Provider. The thread list still lives as long as the returned runtime. After a failed first load, a controlled threadId change no longer reloads the list; call reload() to retry. RemoteThreadListThreadListRuntimeCore is deprecated for direct use. (@​okisdev)

• #9653 ab3454d - refactor: add the internal per-thread hosts that run a useRemoteThreadListRuntime runtime hook inside a RemoteThreadList client (@​okisdev)

• #9766 506aba9 - Pass draft thread custom metadata to remote thread initialization. (@​okisdev)

• #9764 2d17e77 - fix: keep a controlled new-thread request selected when the previous draft initializes during the switch (@​okisdev)

• #9767 45e3d22 - fix: send mutations for each remote thread to its adapter in call order (@​okisdev)

• #9765 a587b28 - Wait for a replacement thread runtime to attach before a thread switch settles. A switch still pending when the thread list is destroyed now rejects with a silent ThreadListDestroyedError, and a switch whose replacement runtime fails to mount rejects with the mount error. (@​okisdev)

• #9864 50fb79b - retry automatic title generation after a thread's first run ends if it still has no title, including threads created outside the runtime. (@​okisdev)

• #9552 e6cace0 - fix(core): re-read the server title after a failed title write-back instead of leaving the list on a title the server never received (@​okisdev)

• Updated dependencies [6966821, e99250f, 54e2e9b, be30245]:

  • assistant-stream@0.3.53

@​assistant-ui/core@​0.3.29

Patch Changes

... (truncated)

Changelog

Sourced from @​assistant-ui/core's changelog.

0.3.30

Patch Changes

• #9811 69bf91a - fix: preserve AI SDK history messages listed before their parents by sharing core's parent-first ordering helper. Keep the selected head and sibling branches while continuing to skip malformed messages and orphaned descendants. (@​Kinfe123)

• #9108 ed0d969 - Track selectors that read through a forwarding client when its target changes. (@​rupic-app)

• #9862 1a3359e - Add a Resume control for interrupted runs. useComposerResume from @assistant-ui/core/react and ComposerPrimitive.Resume resume a run whose adapter reports canResume; the control is disabled while the draft is not empty or the thread is busy. (@​okisdev)

• #9861 2dc72a8 - Add an opt-in canResume flag for interrupted runs. An adapter that keeps an exact checkpoint sets canResume, and resumeRun resumes it; concurrent resumes share one attempt. canResume is optional on thread state, so existing custom thread clients remain compatible. The AI SDK runtime offers it only while resumable storage holds a pending stream, and the server must replay the interrupted message with its original ID. (@​okisdev)

• #9815 32869e0 - fix: preserve mention labels and IDs containing directive delimiters without changing existing bracket-form directives. (@​Kinfe123)

• #9851 118dedb - fix: isolate adapter hooks so swapping thread list adapters preserves the hosted runtime's hook order (@​okisdev)

• #9538 79e10db - fix: restore unsent drafts using the latest attachment cleanup state. (@​okisdev)

• #9776 32a1b79 - useAuiState and aui.composer.getState() now see composer text as soon as setText returns, so an input that keeps its own state, such as react-mentions, no longer moves the caret to the end. (@​okisdev)

• #9804 d7fb0ee - refactor: createLocalStorageAdapter (and so createFileStorageAdapter in @assistant-ui/react-ink) no longer sets unstable_Provider, which only wrapped the adapters its unstable_useAdapters already returns, so useRemoteThreadListRuntime runs it on the RemoteThreadList store client like the cloud adapter. a useRemoteThreadListRuntime that mounts with it now ignores unstable_Provider on any later adapter, so give that adapter unstable_useAdapters to keep its per-thread history (@​okisdev)

• #9891 545836d - feat: ModelContext() takes maxSystemLength to cap the merged system prompt, trimming the lowest-priority parts first, or mergeSystem to combine the prioritized SystemParts yourself (@​Yonom)

• #9449 e21ce83 - adapters may omit unarchive; archived threads then open without unarchiving and explicit unarchive rejects. the OpenCode adapter omits it because OpenCode cannot unarchive a session. (@​okisdev)

• #9652 ca0a1be - feat: add the internal thread list runtime core that runs on a RemoteThreadList client, and let RemoteThreadListHookInstanceManager publish hosted thread runtimes during commit (@​okisdev)

• #9649 d420f42 - feat: add the internal RemoteThreadList seams that useRemoteThreadListRuntime needs to run on the store client. a plain RemoteThreadList now aborts a thread's pending send when that thread is deleted, detached or dropped by an adapter-replacing reload, as InMemoryThreadList and useRemoteThreadListRuntime already do, and logs a failed automatic title the way useRemoteThreadListRuntime does (@​okisdev)

• #9650 9f673a3 - feat: run useRemoteThreadListRuntime on the RemoteThreadList store client unless the adapter it mounts with sets unstable_Provider, so both thread list paths share one implementation. a runtime that mounts without unstable_Provider serves later adapters through unstable_useAdapters and warns in development when one only has unstable_Provider. The thread list still lives as long as the returned runtime. After a failed first load, a controlled threadId change no longer reloads the list; call reload() to retry. RemoteThreadListThreadListRuntimeCore is deprecated for direct use. (@​okisdev)

• #9653 ab3454d - refactor: add the internal per-thread hosts that run a useRemoteThreadListRuntime runtime hook inside a RemoteThreadList client (@​okisdev)

• #9766 506aba9 - Pass draft thread custom metadata to remote thread initialization. (@​okisdev)

• #9764 2d17e77 - fix: keep a controlled new-thread request selected when the previous draft initializes during the switch (@​okisdev)

• #9767 45e3d22 - fix: send mutations for each remote thread to its adapter in call order (@​okisdev)

• #9765 a587b28 - Wait for a replacement thread runtime to attach before a thread switch settles. A switch still pending when the thread list is destroyed now rejects with a silent ThreadListDestroyedError, and a switch whose replacement runtime fails to mount rejects with the mount error. (@​okisdev)

• #9864 50fb79b - retry automatic title generation after a thread's first run ends if it still has no title, including threads created outside the runtime. (@​okisdev)

• #9552 e6cace0 - fix(core): re-read the server title after a failed title write-back instead of leaving the list on a title the server never received (@​okisdev)

• Updated dependencies [6966821, e99250f, 54e2e9b, be30245]:

  • assistant-stream@0.3.53

0.3.29

... (truncated)

Commits

• 79e5919 chore: update versions (#9796)
• 545836d feat(core): cap or customize the merged system prompt in ModelContext() (#9891)
• 1a3359e feat(react): add a composer Resume primitive and useComposerResume (#9862)
• 50fb79b feat(core): retry an untitled thread's title after its first run ends (#9864)
• 2dc72a8 feat(core): let an adapter report that its interrupted run can resume (#9861)
• ed0d969 fix(store): update captured selectors when forwarding targets change (#9108)
• 32a1b79 fix(store): publish composer text to its readers when the runtime changes (#9...
• e6cace0 fix(core): re-read the server title after a failed title write-back (#9552)
• e21ce83 fix(core): let a thread list adapter omit unarchive (#9449)
• 79e10db fix(core): return a failed-removal attachment to the draft when the send thro...
• Additional commits viewable in compare view

Updates @assistant-ui/store from 0.2.21 to 0.3.22

Release notes

Sourced from @​assistant-ui/store's releases.

@​assistant-ui/store@​0.3.22

Patch Changes

• #9108 ed0d969 - Track selectors that read through a forwarding client when its target changes. (@​rupic-app)

• #9776 32a1b79 - useAuiState and aui.composer.getState() now see composer text as soon as setText returns, so an input that keeps its own state, such as react-mentions, no longer moves the caret to the end. (@​okisdev)

• #9772 1808265 - Notify child handles after their derived scopes catch up with parent changes. (@​okisdev)

• #9865 727a02d - preserve reading position when earlier messages load and support held follow and content inset updates (@​okisdev)

• #9771 0c049eb - Keep Vue and Svelte viewport footer insets in the shared store controller. (@​okisdev)

@​assistant-ui/store@​0.3.21

Patch Changes

• #9790 d2f04ca - fix: a client accessor called through call, apply or bind resolves its client like a direct call, so an optional call such as clientRef.current?.threads?.() no longer throws _b.call is not a function once a bundler lowers optional chaining (Vite 6's default build target does). Scope methods named call, apply, or bind are rejected by type validation because those names are reserved for invoking the accessor. (@​bgeils)

@​assistant-ui/store@​0.3.20

Patch Changes

• #9338 a12da09 - fix: run layout effects through useIsomorphicLayoutEffect so React 18 server renders stop warning, while Ink keeps its layout phase (@​okisdev)

Changelog

Sourced from @​assistant-ui/store's changelog.

0.3.22

Patch Changes

• #9108 ed0d969 - Track selectors that read through a forwarding client when its target changes. (@​rupic-app)

• #9776 32a1b79 - useAuiState and aui.composer.getState() now see composer text as soon as setText returns, so an input that keeps its own state, such as react-mentions, no longer moves the caret to the end. (@​okisdev)

• #9772 1808265 - Notify child handles after their derived scopes catch up with parent changes. (@​okisdev)

• #9865 727a02d - preserve reading position when earlier messages load and support held follow and content inset updates (@​okisdev)

• #9771 0c049eb - Keep Vue and Svelte viewport footer insets in the shared store controller. (@​okisdev)

0.3.21

Patch Changes

• #9790 d2f04ca - fix: a client accessor called through call, apply or bind resolves its client like a direct call, so an optional call such as clientRef.current?.threads?.() no longer throws _b.call is not a function once a bundler lowers optional chaining (Vite 6's default build target does). Scope methods named call, apply, or bind are rejected by type validation because those names are reserved for invoking the accessor. (@​bgeils)

0.3.20

Patch Changes

• #9338 a12da09 - fix: run layout effects through useIsomorphicLayoutEffect so React 18 server renders stop warning, while Ink keeps its layout phase (@​okisdev)

0.3.19

Patch Changes

• #9093 Cursor Bugbot for commit 97e2517. Bugbot is set up for automated code reviews on this repo. Configure here.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 97e2517

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 3 potential issues.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 97e2517. Configure here.}

[cursor]

OpenUI packages are incompatible

High Severity

@openuidev/react-ui 0.18.1 requires @openuidev/react-lang 1.x to render OpenUI Lang 1.0, but this bump only moves react-lang to 0.4.1. Chat widgets that use Renderer, openuiLibrary, and ThemeProvider can fail to install, typecheck, or render.

 

^{Reviewed by Cursor Bugbot for commit 97e2517. Configure here.}

[cursor]

Stale assistant-ui peer ranges

Medium Severity

@truefoundry/trueforge-ui now depends on @assistant-ui/core 0.3.30 and @assistant-ui/react 0.15.30, but its optional peers still advertise ^0.2.22 and ^0.14.24. Hosts that install those peer ranges can load two incompatible assistant-ui copies.

 

^{Reviewed by Cursor Bugbot for commit 97e2517. Configure here.}

[cursor]

Missing changeset for shipped deps

Low Severity

This updates runtime dependencies in published packages without adding a .changeset/*.md file. Run pnpm changeset and bump @truefoundry/trueforge-core, @truefoundry/trueforge, and @truefoundry/trueforge-ui.

Additional Locations (2)

• packages/trueforge/package.json#L62-L88
• packages/trueforge-ui/package.json#L94-L115

 

^{Triggered by project rule: TrueForge review rules}

^{Reviewed by Cursor Bugbot for commit 97e2517. Configure here.}