Skip to content

chore(deps): Bump the npm-minor-and-patch group with 23 updates - #46

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-and-patch-6c26168255
Closed

chore(deps): Bump the npm-minor-and-patch group with 23 updates#46
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-and-patch-6c26168255

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-minor-and-patch group with 23 updates:

Package From To
turbo 2.10.6 2.10.8
vite-plus 0.2.6 0.2.8
wrangler 4.114.0 4.120.0
@vitejs/plugin-react 6.0.4 6.0.5
xml-core 1.2.5 1.2.6
@angular/common 22.0.8 22.1.0
@angular/core 22.0.8 22.1.0
@angular/router 22.0.8 22.1.0
astro 7.1.3 7.2.0
react-native 0.85.3 0.86.2
next 16.2.11 16.3.0
svelte 5.56.7 5.56.8
@astrojs/check 0.9.8 0.9.10
@cloudflare/vite-plugin 1.47.0 1.51.1
@cloudflare/workers-types 5.20260724.1 5.20260804.1
@stylexjs/stylex 0.18.3 0.19.0
@stylexjs/unplugin 0.18.3 0.19.0
@tanstack/react-router 1.170.18 1.170.22
@types/react-dom 19.2.3 19.2.4
@types/react 19.2.17 19.2.18
vue 3.5.40 3.5.41
xmldsigjs 2.8.7 2.8.8
@astrojs/react 6.0.1 6.0.2

Updates turbo from 2.10.6 to 2.10.8

Release notes

Sourced from turbo's releases.

Turborepo v2.10.8

What's Changed

Changelog

... (truncated)

Commits

Updates vite-plus from 0.2.6 to 0.2.8

Release notes

Sourced from vite-plus's releases.

vite-plus v0.2.8: monorepo target resolution, breaking VP_* environment variable renames, and install fixes

Bare vp dev/build/preview/pack at a monorepo root now resolve a target package instead of silently running against the root, and three Vite+-specific environment variables move to the VP_* prefix without compatibility aliases. Two failures that broke Vite+ before it could run are also fixed: the crash on container images that ship no CA certificates, and the missing Rolldown binding under pnpm's global virtual store.

Breaking Changes

  • Rename three Vite+-specific environment variables to the VP_* prefix, with no compatibility aliases, so the old names stop working (#2312), by @​jong-kyung:

    Old New
    VITE_LOG VP_LOG
    VITE_GLOBAL_CLI_JS_SCRIPTS_DIR VP_GLOBAL_CLI_JS_SCRIPTS_DIR
    VITE_UPDATE_TASK_TYPES VP_UPDATE_TASK_TYPES

    Update any shell profile, CI job, or Dockerfile that sets the old names.

Highlights

  • Resolve a target package for vp dev, build, preview, and pack at a monorepo root: interactive shells get a fuzzy package picker, non-interactive runs list the candidates and exit 1 instead of building the root, and a new global -C <dir> flag or a defaultPackage setting (a single directory, or an object mapping each of the four commands to its own directory) skips the prompt (#2031, #2305), by @​fengmk2
  • Stop aborting with exit 134 on container images that ship no CA certificates (Debian slim, distroless): the shared HTTP client now retries once with the bundled Mozilla root list, like Node's own bundled roots, and reports a real error instead of panicking when it still cannot be built (#2273, #2295), by @​jbmusso and @​fengmk2
  • Resolve the bundled Rolldown binding through platform packages instead of an undeclared require back into vite-plus, fixing Cannot find module 'vite-plus/binding' under pnpm enable-global-virtual-store and in standalone @voidzero-dev/vite-plus-core installs (#2313), by @​fengmk2
  • Add vp pm ci for reproducible frozen-lockfile installs, and vp pm patch / vp pm patch-commit for editing dependencies in place on pnpm, bun, and Yarn Berry (npm and Yarn Classic warn and exit successfully) (#2082, #2308), by @​forehalo and @​jong-kyung

Features

  • Upgrade the bundled toolchain: vite 8.1.5 -> 8.2.0, rolldown 1.2.0 -> 1.2.2, oxlint 1.75.0 -> 1.76.0, oxfmt 0.60.0 -> 0.61.0, and Vite DevTools 0.4.5 -> 0.4.10 (#2302, #2311), by @​voidzero-guard[bot]. The new oxfmt and oxlint can flag code that passed before, so run vp fmt after upgrading if your CI runs vp check.
  • Read the Node.js version from .nvmrc when no other version source is present (#2244), by @​BlankParticle
  • Support pnpm v12, which ships as a native binary: Vite+ now downloads the platform-specific @pnpm/exe.* package and generates native shims, so pnpm and pnpx work instead of failing to exec (#2289), by @​jong-kyung
  • Verify the downloaded bun platform tarball against the registry dist.integrity hash (#2310), by @​jong-kyung

Fixes & Enhancements

  • Let vp config install the Git hook dispatcher without creating or modifying project hook scripts or staged-file configuration, so a custom .vite-hooks/pre-commit survives (#2280), by @​TheAlexLichter
  • Nest immutable global package installs under packages/<package>/<uuid> instead of using # in the path, which Node treated as a URL fragment and which broke dynamic imports inside installed packages (#2222), by @​liangmiQwQ
  • Keep the recorded version spec on global installs, so vp update -g follows a dist tag or range instead of silently resolving back to latest, vp outdated -g reports Wanted versus Latest, and vp update -g --latest explicitly moves packages back to latest (#2249), by @​TheAlexLichter
  • Stop deleting a managed Node.js runtime that another process is concurrently installing (#2248), by @​shulaoda
  • Preserve the real exit code when a spawned process is terminated by a signal on Unix (#2154), by @​liangmiQwQ
  • Honor an explicit vp create --package-manager outside monorepos instead of inheriting the manager from a non-monorepo ancestor directory (#2226), by @​jong-kyung
  • Scaffold the vite:library template into a directory that contains only .git, while still refusing to overwrite existing user files (#2287), by @​RSS1102
  • Render help for delegated commands from the local CLI, so vp <command> --help matches the installed toolchain instead of drifting (#2184), by @​liangmiQwQ
  • Resolve typeAware and typeCheck options inherited through Oxlint extends, so vp check --no-lint runs and classifies type checking correctly (#2228), by @​jong-kyung
  • Report (no version) instead of unknown when globally installing a local package that has no version field (#2232), by @​liangmiQwQ

Refactor

  • Rename the Git hooks environment variable to VP_GIT_HOOKS, keeping VITE_GIT_HOOKS working as a deprecated alias (#2195), by @​dennybiasiolli
  • Consolidate the package manager infrastructure so typed command arguments are the source of truth for per-manager compatibility (#2140), by @​forehalo
  • Generate the Zed language settings from a language list instead of 17 near-identical blocks (#2294), by @​jong-kyung
  • Share the agent-file detect and write traversal helpers so both passes apply identical rules (#2296), by @​jong-kyung
  • Drop redundant clippy allow attributes in the global CLI (#2235), by @​shulaoda

... (truncated)

Commits
  • fc3f0e2 release: v0.2.8: monorepo target resolution, breaking VP_* environment variab...
  • cfb59b2 fix(cli): preserve project-owned git hooks (#2280)
  • 28b85a2 chore(deps): declare @​emnapi peers where @​napi-rs/cli is used (#2319)
  • 2574cd3 feat(cli): per-command defaultPackage (#2305)
  • 43047d1 feat(cli): global -C flag for working-directory switching (#2031)
  • c962cbd chore(deps): remove duplicate direct dependencies (#2318)
  • 0a5e76e fix(core): resolve bundled Rolldown bindings via platform packages (#2313)
  • fc71714 refactor(env): rename remaining Vite+ environment variables (#2312)
  • a518b1d fix(check): resolve typecheck options inherited through lint extends (#2228)
  • 4e64087 feat(deps): upgrade upstream dependencies (#2311)
  • Additional commits viewable in compare view

Updates wrangler from 4.114.0 to 4.120.0

Release notes

Sourced from wrangler's releases.

wrangler@4.120.0

Minor Changes

  • #15008 35c87e9 Thanks @​skepticfx! - Adds the ability to find container instances by exact ID or name

    wrangler containers instances <application_id> --search <instance_id_or_name> now searches every page and returns exact matches in human-readable or JSON output. JSON returns a top-level array, including an empty array when there is no match, while human-readable output prints a no-match message. If multiple instances have the same exact name, every matching instance is returned.

  • #15008 35c87e9 Thanks @​skepticfx! - Add explicit pagination to container instance JSON output

    Use wrangler containers instances <application_id> --json --per-page <size> to return one page with machine-readable result_info, then pass its next_page_token to --page-token to retrieve the next page. Plain --json remains backward-compatible: it requests the complete list and returns the existing top-level array.

Patch Changes

  • #15013 8cf78c8 Thanks @​dario-piotrowicz! - Update undici from 7.28.0 to 7.29.0

  • #15015 a60ff4d Thanks @​nickpatt! - Cut the per-request cost of local observability capture

    Every tail event was written to the trace store as its own Durable Object call, so a request paid two or three round-trips per span. On a module-heavy app under the Vite plugin that dominated dev request latency. Rows are now buffered and written in batches, taking a request from roughly thirty calls to three.

    Work in progress still shows up as it happens: the root span is written immediately, console logs and exceptions as they arrive, and a span's completion is written on the next event once 100ms has passed. An invocation that goes completely quiet writes nothing further until it ends, since the flush is driven by tail events rather than a timer.

    The Vite plugin's own router, asset and proxy workers are also no longer captured. Their traces were noise the Observability views already hid, and skipping them cuts the spans recorded per request — a side benefit being that a trace's root is now your Worker rather than __router-worker__.

  • Updated dependencies [b4f0c97, 8cf78c8, a60ff4d, 99eb50c]:

wrangler@4.119.0

Minor Changes

  • #14952 20470fa Thanks @​nelsonjsduarte! - Add --parse-type flag to wrangler ai-search create

    wrangler ai-search create now accepts --parse-type to control how a website data source discovers URLs. sitemap (the default) reads XML sitemaps; discover follows links recursively.

    Previously the parse type could only be chosen through the interactive wizard, which was skipped whenever --source was supplied — so it was impossible to create a discover instance from a script.

    wrangler ai-search create my-instance \
  --type web-crawler \
  --source https://example.com \
  --parse-type discover

    The interactive wizard now offers Discover alongside Sitemap. --parse-type is only valid with --type web-crawler; passing it with --type builtin or --type r2 is rejected, since the API stores the value for those source types but never reads it. When the flag is omitted in non-interactive mode the field is left unset and the API default (sitemap) applies.

  • #14941 266172b Thanks @​nickpatt! - Improve the Local Explorer's Observability views

    console.log messages now render the way the console would (JSON-encoded strings are unwrapped and multi-argument logs are joined), traces and events can be looked up by trace or span id from the search bar, and an event's "View trace" button jumps to the exact invocation that emitted it — even when a trace_id spans several invocations (e.g. a subrequest or self fetch).

  • #14064 a9e5abb Thanks @​petebacondarwin! - Add support for OAuth 2.0 Device Authorization Grant to wrangler login

... (truncated)

Commits

Updates @vitejs/plugin-react from 6.0.4 to 6.0.5

Release notes

Sourced from @​vitejs/plugin-react's releases.

plugin-react@6.0.5

Fixed the react compiler preset filter to be linear (#1353)

The improved filter in v6.0.3 was non-linear and caused a performance regression (#1349). The filter was changed to be linear to avoid that.

Changelog

Sourced from @​vitejs/plugin-react's changelog.

6.0.5 (2026-07-30)

Fixed the react compiler preset filter to be linear (#1353)

The improved filter in v6.0.3 was non-linear and caused a performance regression (#1349). The filter was changed to be linear to avoid that.

Commits

Updates xml-core from 1.2.5 to 1.2.6

Commits
  • 47d5d3e Publish
  • 0e69b70 Merge pull request #116 from PeculiarVentures/chore/xmldom-0.9
  • b386b19 chore(deps-dev): bump postcss from 8.5.6 to 8.5.18 (#115)
  • eb435de chore(deps): bump @​xmldom/xmldom peer to ^0.9.10
  • 91a94fe chore(deps): bump axios and nx (#114)
  • 51e13c4 chore(deps-dev): bump sigstore from 4.1.0 to 4.1.1 (#113)
  • 7cbdfa7 Merge pull request #108 from PeculiarVentures/dependabot/npm_and_yarn/form-da...
  • 6d4be6e Merge pull request #112 from PeculiarVentures/dependabot/npm_and_yarn/sigstor...
  • e59fd16 chore(deps-dev): bump @​sigstore/verify from 3.1.0 to 3.1.1
  • fc825ac Merge pull request #109 from PeculiarVentures/dependabot/npm_and_yarn/sigstor...
  • Additional commits viewable in compare view

Updates @angular/common from 22.0.8 to 22.1.0

Release notes

Sourced from @​angular/common's releases.

22.1.0

common

Commit Description
fix - 1ad6824d0d skip transfer cache for uncacheable HTTP traffic (#69017)

compiler

Commit Description
feat - af5e4e1131 Add an error for --global-foo cases (#68846)
feat - d579ecaf73 Disable '--global-' error outside of g3 (#68846)
feat - f98547675c Namespace CSS variables to the app (#68846)
feat - 8c8b2f7783 Support css var namespacing in properties (#68846)
fix - 292199aa4d permissive whitespace parsing in default never blocks
fix - 25c744c4d0 support foreign components defined outside top-level scope
fix - 5bd00add07 support foreign components inside control flow blocks (#69674)
perf - 2e442f7876 do not emit tag name when control flow root is foreign component (#69674)

compiler-cli

Commit Description
fix - aeb55c8bc1 allow passing uninvoked signals as foreign component props
fix - 7c60a98b3c support import aliases in foreignImports (#68674)

core

Commit Description
feat - 124ba10ead add custom set option to linkedSignal
feat - eab4847a8b Adds deep linking from Performance panel to DevTools
fix - 091456a214 account for namespaces in host binding sanitization (#69558)
fix - b3748e9fe4 correct container anchor collection order to match DOM layout
fix - 11b206b919 introduce disposal mechanism for Angular views in foreign @content
fix - 56607967db introduce logical-only containers for foreign content
fix - 23cf1a828b sanitize host bindings on concrete hosts (#69558)
fix - 0c07356c5c set current tnode in foreign component instruction on reuse

forms

Commit Description
fix - bbbd357bd2 add utility to assert that value is a field tree

http

Commit Description
feat - e3630c23c5 add options to allow caching of credentialed and non-cacheable HTTP requests
fix - ec16a3d6c6 enable xsrf for root-provided HttpClient
fix - 39e362eea5 match header values exactly when deleting
fix - be46ca8696 preserve immutability of materialized clones
fix - c0cbd46bd7 skip transfer cache for fetch credentialed requests (#69017)
refactor - af04e266cc deprecate jsonp support

language-service

Commit Description
feat - 7f0265e43a compile non-exported classes if standalone (#68454)
feat - 4f9c824dd9 Typecheck templates which would require inline typecheck blocks (#68454)

... (truncated)

Changelog

Sourced from @​angular/common's changelog.

22.1.0 (2026-07-29)

Deprecations

http

  • HttpClient.jsonp, HttpClientJsonpModule, and related JSONP classes/functions are deprecated. Use standard HTTP requests instead.

common

Commit Type Description
1ad6824d0d fix skip transfer cache for uncacheable HTTP traffic (#69017)

compiler

Commit Type Description
af5e4e1131 feat Add an error for --global-foo cases (#68846)
d579ecaf73 feat Disable '--global-' error outside of g3 (#68846)
f98547675c feat Namespace CSS variables to the app (#68846)
8c8b2f7783 feat Support css var namespacing in properties (#68846)
292199aa4d fix permissive whitespace parsing in default never blocks
25c744c4d0 fix support foreign components defined outside top-level scope
5bd00add07 fix support foreign components inside control flow blocks (#69674)
2e442f7876 perf do not emit tag name when control flow root is foreign component (#69674)

compiler-cli

Commit Type Description
aeb55c8bc1 fix allow passing uninvoked signals as foreign component props
7c60a98b3c fix support import aliases in foreignImports (#68674)

core

Commit Type Description
124ba10ead feat add custom set option to linkedSignal
eab4847a8b feat Adds deep linking from Performance panel to DevTools
091456a214 fix account for namespaces in host binding sanitization (#69558)
b3748e9fe4 fix correct container anchor collection order to match DOM layout
11b206b919 fix introduce disposal mechanism for Angular views in foreign @content
56607967db fix introduce logical-only containers for foreign content
23cf1a828b fix sanitize host bindings on concrete hosts (#69558)
0c07356c5c fix set current tnode in foreign component instruction on reuse

forms

Commit Type Description
bbbd357bd2 fix add utility to assert that value is a field tree

http

Commit Type Description
e3630c23c5 feat add options to allow caching of credentialed and non-cacheable HTTP requests
ec16a3d6c6 fix enable xsrf for root-provided HttpClient
39e362eea5 fix match header values exactly when deleting
be46ca8696 fix preserve immutability of materialized clones
c0cbd46bd7 fix skip transfer cache for fetch credentialed requests (#69017)
af04e266cc refactor deprecate jsonp support

language-service

| Commit | Type | Description |

... (truncated)

Commits
  • 79a37f3 refactor(common): replaces the deprecated positional subscribe arguments wi...
  • 6dcb534 refactor(common): remove duplicate helper function
  • ec16a3d fix(http): enable xsrf for root-provided HttpClient
  • 39e362e fix(http): match header values exactly when deleting
  • be46ca8 fix(http): preserve immutability of materialized clones
  • d14696e fix(common): preserve crossorigin on image preloads
  • 3192dcc fix(http): prevent transfer cache key collisions
  • 359fb50 fix(common): avoid prototype lookups in date format caches
  • 6d043f8 fix(http): prevent interceptor signal reads from leaking into calling reactiv...
  • c1829f6 docs(docs-infra): Add build-time validation for API and guide links using rou...
  • Additional commits viewable in compare view

Updates @angular/core from 22.0.8 to 22.1.0

Release notes

Sourced from @​angular/core's releases.

22.1.0

common

Commit Description
fix - 1ad6824d0d skip transfer cache for uncacheable HTTP traffic (#69017)

compiler

Commit Description
feat - af5e4e1131 Add an error for --global-foo cases (#68846)
feat - d579ecaf73 Disable '--global-' error outside of g3 (#68846)
feat - f98547675c Namespace CSS variables to the app (

@dependabot
chore(deps): Bump the npm-minor-and-patch group with 23 updates
1e4623a 
Bumps the npm-minor-and-patch group with 23 updates:

| Package | From | To |
| --- | --- | --- |
| [turbo](https://github.com/vercel/turborepo) | `2.10.6` | `2.10.8` |
| [vite-plus](https://github.com/voidzero-dev/vite-plus/tree/HEAD/packages/cli) | `0.2.6` | `0.2.8` |
| [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.114.0` | `4.120.0` |
| [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.0.4` | `6.0.5` |
| [xml-core](https://github.com/PeculiarVentures/xmldsigjs) | `1.2.5` | `1.2.6` |
| [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) | `22.0.8` | `22.1.0` |
| [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `22.0.8` | `22.1.0` |
| [@angular/router](https://github.com/angular/angular/tree/HEAD/packages/router) | `22.0.8` | `22.1.0` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.1.3` | `7.2.0` |
| [react-native](https://github.com/react/react-native/tree/HEAD/packages/react-native) | `0.85.3` | `0.86.2` |
| [next](https://github.com/vercel/next.js) | `16.2.11` | `16.3.0` |
| [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) | `5.56.7` | `5.56.8` |
| [@astrojs/check](https://github.com/withastro/astro/tree/HEAD/packages/language-tools/astro-check) | `0.9.8` | `0.9.10` |
| [@cloudflare/vite-plugin](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/vite-plugin-cloudflare) | `1.47.0` | `1.51.1` |
| [@cloudflare/workers-types](https://github.com/cloudflare/workerd) | `5.20260724.1` | `5.20260804.1` |
| [@stylexjs/stylex](https://github.com/facebook/stylex) | `0.18.3` | `0.19.0` |
| @stylexjs/unplugin | `0.18.3` | `0.19.0` |
| [@tanstack/react-router](https://github.com/TanStack/router/tree/HEAD/packages/react-router) | `1.170.18` | `1.170.22` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.3` | `19.2.4` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.17` | `19.2.18` |
| [vue](https://github.com/vuejs/core) | `3.5.40` | `3.5.41` |
| [xmldsigjs](https://github.com/PeculiarVentures/xmldsigjs) | `2.8.7` | `2.8.8` |
| [@astrojs/react](https://github.com/withastro/astro/tree/HEAD/packages/integrations/react) | `6.0.1` | `6.0.2` |


Updates `turbo` from 2.10.6 to 2.10.8
- [Release notes](https://github.com/vercel/turborepo/releases)
- [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md)
- [Commits](vercel/turborepo@v2.10.6...v2.10.8)

Updates `vite-plus` from 0.2.6 to 0.2.8
- [Release notes](https://github.com/voidzero-dev/vite-plus/releases)
- [Commits](https://github.com/voidzero-dev/vite-plus/commits/v0.2.8/packages/cli)

Updates `wrangler` from 4.114.0 to 4.120.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.120.0/packages/wrangler)

Updates `@vitejs/plugin-react` from 6.0.4 to 6.0.5
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.5/packages/plugin-react)

Updates `xml-core` from 1.2.5 to 1.2.6
- [Commits](https://github.com/PeculiarVentures/xmldsigjs/compare/xml-core@1.2.5...xml-core@1.2.6)

Updates `@angular/common` from 22.0.8 to 22.1.0
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v22.1.0/packages/common)

Updates `@angular/core` from 22.0.8 to 22.1.0
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v22.1.0/packages/core)

Updates `@angular/router` from 22.0.8 to 22.1.0
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v22.1.0/packages/router)

Updates `astro` from 7.1.3 to 7.2.0
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.2.0/packages/astro)

Updates `react-native` from 0.85.3 to 0.86.2
- [Release notes](https://github.com/react/react-native/releases)
- [Changelog](https://github.com/react/react-native/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react-native/commits/v0.86.2/packages/react-native)

Updates `next` from 16.2.11 to 16.3.0
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.2.11...v16.3.0)

Updates `svelte` from 5.56.7 to 5.56.8
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.56.8/packages/svelte)

Updates `@astrojs/check` from 0.9.8 to 0.9.10
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/language-tools/astro-check/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/check@0.9.10/packages/language-tools/astro-check)

Updates `@cloudflare/vite-plugin` from 1.47.0 to 1.51.1
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Changelog](https://github.com/cloudflare/workers-sdk/blob/main/packages/vite-plugin-cloudflare/CHANGELOG.md)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/@cloudflare/vite-plugin@1.51.1/packages/vite-plugin-cloudflare)

Updates `@cloudflare/workers-types` from 5.20260724.1 to 5.20260804.1
- [Release notes](https://github.com/cloudflare/workerd/releases)
- [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md)
- [Commits](https://github.com/cloudflare/workerd/commits)

Updates `@stylexjs/stylex` from 0.18.3 to 0.19.0
- [Release notes](https://github.com/facebook/stylex/releases)
- [Changelog](https://github.com/facebook/stylex/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/stylex/commits/0.19.0)

Updates `@stylexjs/unplugin` from 0.18.3 to 0.19.0

Updates `@tanstack/react-router` from 1.170.18 to 1.170.22
- [Release notes](https://github.com/TanStack/router/releases)
- [Changelog](https://github.com/TanStack/router/blob/main/packages/react-router/CHANGELOG.md)
- [Commits](https://github.com/TanStack/router/commits/@tanstack/react-router@1.170.22/packages/react-router)

Updates `@types/react-dom` from 19.2.3 to 19.2.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `@types/react` from 19.2.17 to 19.2.18
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `vue` from 3.5.40 to 3.5.41
- [Release notes](https://github.com/vuejs/core/releases)
- [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md)
- [Commits](vuejs/core@v3.5.40...v3.5.41)

Updates `xmldsigjs` from 2.8.7 to 2.8.8
- [Commits](https://github.com/PeculiarVentures/xmldsigjs/compare/xmldsigjs@2.8.7...xmldsigjs@2.8.8)

Updates `@astrojs/react` from 6.0.1 to 6.0.2
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/react/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/react@6.0.2/packages/integrations/react)

---
updated-dependencies:
- dependency-name: turbo
  dependency-version: 2.10.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: vite-plus
  dependency-version: 0.2.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: wrangler
  dependency-version: 4.120.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: xml-core
  dependency-version: 1.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@angular/common"
  dependency-version: 22.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@angular/core"
  dependency-version: 22.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@angular/router"
  dependency-version: 22.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: astro
  dependency-version: 7.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: react-native
  dependency-version: 0.86.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: next
  dependency-version: 16.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: svelte
  dependency-version: 5.56.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@astrojs/check"
  dependency-version: 0.9.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@cloudflare/vite-plugin"
  dependency-version: 1.51.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@cloudflare/workers-types"
  dependency-version: 5.20260804.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@stylexjs/stylex"
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@stylexjs/unplugin"
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@tanstack/react-router"
  dependency-version: 1.170.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@types/react"
  dependency-version: 19.2.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: vue
  dependency-version: 3.5.41
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: xmldsigjs
  dependency-version: 2.8.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@astrojs/react"
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from StringKe as a code owner August 10, 2026 15:32
@StringKe StringKe mentioned this pull request Aug 11, 2026
Merged
@StringKe

StringKe commented Aug 11, 2026

Copy link
Copy Markdown
Owner

Superseded by #56 which batches dependency upgrades and related security fixes on current main.

@StringKe StringKe closed this Aug 11, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 11, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/npm-minor-and-patch-6c26168255 branch August 11, 2026 11:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@StringKe StringKe Awaiting requested review from StringKe StringKe is a code owner

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@StringKe