chore(docs-deps): bump the fumadocs group across 1 directory with 5 updates

[dependabot]

Bumps the fumadocs group with 5 updates in the /docs directory:

Package	From	To
fumadocs-core	15.8.1	16.15.18
fumadocs-mdx	12.0.2	15.4.6
fumadocs-typescript	4.0.11	5.4.1
fumadocs-ui	15.8.5	16.15.18
next	15.5.24	16.3.8

Updates fumadocs-core from 15.8.1 to 16.15.18

Release notes

Sourced from fumadocs-core's releases.

fumadocs@16.15.18

• @​fumadocs/base-ui@​16.15.18
• fumadocs-core@16.15.18
• fumadocs-ui@16.15.18

Meilisearch integration

Search your docs with Meilisearch, self-hosted or on Meilisearch Cloud.

• toDocuments() and sync() from fumadocs-core/search/meilisearch export your pages and replace the documents of an index, old documents stay searchable until the new ones are indexed.
• meilisearchClient() from fumadocs-core/search/client/meilisearch searches from the browser with useDocsSearch(), filtered by tag and locale.

const client = new Meilisearch({ host, apiKey: searchKey });
useDocsSearch({
client: meilisearchClient({ client, indexName: 'docs', locale }),
});

Set it up with npx @fumadocs/cli feature search --provider meilisearch, or choose it in create-fumadocs-app.

Fix #3627

fumadocs@16.15.17

• @​fumadocs/base-ui@​16.15.17
• fumadocs-core@16.15.17
• fumadocs-ui@16.15.17

Apply the Vite base path to the "View as Markdown" link

<ViewOptionsPopover /> linked to markdownUrl without the Vite base, so sites served under a base path got a 404. It now prefixes the URL like <MarkdownCopyButton /> does.

Fix #3620

fumadocs@16.15.16

• @​fumadocs/base-ui@​16.15.16
• fumadocs-core@16.15.16
• fumadocs-ui@16.15.16

Don't copy failed Markdown responses

<MarkdownCopyButton /> copied the body of error responses, like a 404 page, and kept it cached until a full reload. Failed responses are rejected, and only successful ones are cached.

Fix #3612

Get pages by decoded slugs

getPage() accepts both URI encoded and decoded slugs. React Router and TanStack Router pass decoded params, so pages with spaces or non-ASCII characters in their slugs were not found.

... (truncated)

Commits

• 6ce09d9 Version Packages (#3624)
• 65197b8 ui: no dev cache
• 0a0ce64 docs: remove export-search-indexes.ts
• f0c9d0a fix(openapi): default to basic auth
• 023888c feat(core): support Meilisearch
• f0d7cdb feat(openapi): show download button
• 6c5b179 fix(mdx): collection outside of project dir
• bb43b61 Version Packages (#3621)
• 6791d6f fix(ui): apply the Vite base path to the "View as Markdown" link
• bc42c20 Version Packages (#3618)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for fumadocs-core since your current version.

Updates fumadocs-mdx from 12.0.2 to 15.4.6

Release notes

Sourced from fumadocs-mdx's releases.

fumadocs-mdx@15.4.6

Keep collection dir outside the project in file paths

When a collection's dir was outside the project (e.g. ../content/docs), the leading ../ was dropped from info.fullPath and absolutePath, so getText('raw') failed with ENOENT.

Fix #3623

fumadocs-mdx@15.4.5

Stop recrawling node_modules on every Vite config resolution

The config hook of fumadocs-mdx/vite walked the dependency tree below Fumadocs packages once per chain reaching a package, so a docs app with a few Fumadocs packages read ~10k package.json files (~0.9s) each time Vite resolved its config, which it does once per build environment.

The crawl now visits each package once, breadth-first, and still records the shortest chain to every CommonJS dependency (fumadocs-ui > @base-ui/react > use-sync-external-store/shim and friends). The result is memoized for the process until the package manager's install state changes, so a build with several environments crawls once.

fumadocs-mdx@15.4.4

Sort glob results for deterministic codegen

fumadocs-mdx's Node codegen now sorts glob-matched files before generating collections, so the output (and anything derived from getPages()) is stable across builds of unchanged content. The Vite codegen path was checked separately: Vite's own import.meta.glob already sorts matched files internally, so it did not need the same fix.

fumadocs-mdx@15.4.3

Fix experimentalBuildCache bloating frontmatter-only imports

With a warm build cache, ?only=frontmatter imports were served the fully compiled page from cache instead of the frontmatter module, so every page was bundled two more times. The cache now only applies to full compilations.

fumadocs-mdx@15.4.2

Fix the _mdast export with removePosition

// fumadocs-mdx collection config
postprocess: {
  includeMDAST: { removePosition: true },
},

This exported _mdast with no value, and getMDAST() then reported that includeMDAST was disabled. removePosition strips positions in place and returns nothing, so JSON.stringify received undefined.

The tree is now cloned, stripped, and serialized from the clone.

Fix SOURCEMAP_BROKEN warnings on Vite

With build.sourcemap enabled, Vite warned once per content and meta file because the loaders returned no source map. They now return an empty map when nothing is generated.

Source maps for MDX stay opt-in, pass SourceMapGenerator from source-map to MDX options:

import { SourceMapGenerator } from 'source-map';
export default defineConfig({
mdxOptions: {
SourceMapGenerator,
</tr></table>

... (truncated)

Commits

• 6ce09d9 Version Packages (#3624)
• 65197b8 ui: no dev cache
• 0a0ce64 docs: remove export-search-indexes.ts
• f0c9d0a fix(openapi): default to basic auth
• 023888c feat(core): support Meilisearch
• f0d7cdb feat(openapi): show download button
• 6c5b179 fix(mdx): collection outside of project dir
• bb43b61 Version Packages (#3621)
• 6791d6f fix(ui): apply the Vite base path to the "View as Markdown" link
• bc42c20 Version Packages (#3618)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for fumadocs-mdx since your current version.

Updates fumadocs-typescript from 4.0.11 to 5.4.1

Release notes

Sourced from fumadocs-typescript's releases.

fumadocs-typescript@5.4.1

Mark packages side-effect free

All packages now declare sideEffects in package.json, so bundlers can tree-shake unused modules. Packages shipping stylesheets list them as side effects to keep CSS imports.

fumadocs-typescript@5.4.0

Generate type tables with the native TypeScript compiler

fumadocs-typescript no longer uses ts-morph. It drives the TypeScript 7 native compiler (tsgo) through the typescript/unstable/sync API, bundled as a dependency, so it works regardless of the TypeScript version of your project, including TypeScript 7 before its programmatic API is stable.

Only the documented files (and what they import) are loaded into the compiler, instead of the entire tsconfig.json project. On the Fumadocs docs site this makes cold generation about 5x faster (first table 500 ms → 50 ms, later tables 20 ms → 5 ms) with roughly half the memory.

Behavior changes

• transform and typeSimplifier hooks receive TypeScript 7 API objects (Type, Symbol, Checker, Node) instead of ts-morph wrappers. this.program is the TypeScript 7 Project, and this.checker is available.
• The project option of createGenerator() takes the Project returned by createProject().
• Members of mapped types (e.g. Pick) and unions may be printed in a different order, following the native compiler.

Commits

• fe9b86b Version Packages (#3552)
• f244b3a fix(*): explicit sideEffects
• 5cd9df8 feat(ui,cli): improve shadcn compatibility
• 0664a14 Merge pull request #3548 from fuma-nama/tegami/version-packages
• 53cc5a1 fix(ui): improve language switch
• fd2d46c docs: fix margin
• b50f4b4 docs: introduce new APIs
• 427aa21 fix(core): fix hash-only anchor on tanstack
• a30b789 docs: missing line break
• 24e2072 Version Packages (#3542)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for fumadocs-typescript since your current version.

Updates fumadocs-ui from 15.8.5 to 16.15.18

Release notes

Sourced from fumadocs-ui's releases.

fumadocs@16.15.18

• @​fumadocs/base-ui@​16.15.18
• fumadocs-core@16.15.18
• fumadocs-ui@16.15.18

Meilisearch integration

Search your docs with Meilisearch, self-hosted or on Meilisearch Cloud.

• toDocuments() and sync() from fumadocs-core/search/meilisearch export your pages and replace the documents of an index, old documents stay searchable until the new ones are indexed.
• meilisearchClient() from fumadocs-core/search/client/meilisearch searches from the browser with useDocsSearch(), filtered by tag and locale.

const client = new Meilisearch({ host, apiKey: searchKey });
useDocsSearch({
client: meilisearchClient({ client, indexName: 'docs', locale }),
});

Set it up with npx @fumadocs/cli feature search --provider meilisearch, or choose it in create-fumadocs-app.

Fix #3627

fumadocs@16.15.17

• @​fumadocs/base-ui@​16.15.17
• fumadocs-core@16.15.17
• fumadocs-ui@16.15.17

Apply the Vite base path to the "View as Markdown" link

<ViewOptionsPopover /> linked to markdownUrl without the Vite base, so sites served under a base path got a 404. It now prefixes the URL like <MarkdownCopyButton /> does.

Fix #3620

fumadocs@16.15.16

• @​fumadocs/base-ui@​16.15.16
• fumadocs-core@16.15.16
• fumadocs-ui@16.15.16

Don't copy failed Markdown responses

<MarkdownCopyButton /> copied the body of error responses, like a 404 page, and kept it cached until a full reload. Failed responses are rejected, and only successful ones are cached.

Fix #3612

Get pages by decoded slugs

getPage() accepts both URI encoded and decoded slugs. React Router and TanStack Router pass decoded params, so pages with spaces or non-ASCII characters in their slugs were not found.

... (truncated)

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for fumadocs-ui since your current version.

Updates next from 15.5.24 to 16.3.8

Release notes

Sourced from next's releases.

v16.3.8

This release contains security fixes for the following advisories:

High:

• Server-Side Request Forgery in Image Optimization

Medium:

• Information disclosure in Next.js App Router metadata image routes via dynamicParams bypass
• Cache poisoning of SSG and ISR pages in self-hosted Next.js applications
• Cache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service
• Pending use cache fill can leak Draft Mode content into regular responses and persisted pages
• Cache leak across root param values in nested 'use cache' functions

Low:

• Information disclosure in the Next.js development server's Model Context Protocol endpoint

v16.3.7

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

• turbo-tasks-backend: fix strongly consistent read hanging on a canceled task (#98931)

Credits

Huge thanks to @​lukesandberg for helping!

v16.3.6

This release contains a security fix for GHSA-vcvr-r3jv-pc5j: Remote Code Execution in next/og ImageResponse

v16.3.5

The following bug fixes have been backported. It does not include all pending features/changes on canary.

• next/image: Skip 0-byte entries when initializing disk LRU cache (#98185)
• next/image: Reject empty images when reading/writing to the disk cache (#98186)
• Emit whole-app server NFTs when output: 'standalone' is used with an adapter (#98167)
• Add CSP nonce to script tags of loading and template files (#98403)
• Fix use cache prerender signal retention (#98448)

v16.3.4

Follow-up release to v16.3.3 re-enabling AVIF Image Optimization (#97949).

The following bug fixes have been backported. It does not include all pending features/changes on canary.

• testmode: Fix infinite recursion in testmode passthrough fetch (#97691)
• Fix build error when aliasing typescript to @​typescript/typescript6 (#97997)
• Fix unset crossOrigin in Turbopack manifests (#97930)

Credits

... (truncated)

Commits

• b0fad0d v16.3.8
• 719e4c6 [lts-active] Scope response cache keys to their source route (#218)
• e92db45 [lts-active] Fix metadata propagation for deduplicated nested caches (#223)
• 40c2ba9 [lts-active] Match Next data paths case-sensitively (#196)
• 2d9f50a [lts-active] Fix MCP middleware DNS rebinding (#213)
• bd9214f [lts-active] Fix draft mode leaks through cross-request 'use cache' dedupli...
• 8db4a62 [lts-active][webpack] Ensure dynamicParams is respected in `opengraph-image...
• e002ad6 [lts-active] fix(next/image): Pin DNS resolution when fetching external image...
• 4c20699 v16.3.7
• 2521aec [backport] turbo-tasks-backend: fix strongly consistent read hanging on a can...
• Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[unknownskl]

@dependabot rebase