Skip to content

chore(deps): bump the bun group across 1 directory with 28 updates - #70

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/bun-6d690234d3
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/bun-6d690234d3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 18, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the bun group with 28 updates in the / directory:

Package From To
@ai-sdk/react 4.0.47 4.0.102
@base-ui/react 1.6.0 1.8.0
@shadcn/helpers 0.1.0 0.2.0
@shadcn/react 0.3.0 0.3.1
ai 7.0.44 7.0.99
cn 0.2.6 0.3.0
fumadocs-core 16.14.0 16.15.10
fumadocs-mdx 15.2.1 15.4.0
input-otp 1.4.2 1.5.0
motion 12.43.0 13.2.0
next 16.2.11 16.3.5
react 19.2.4 19.3.0
@types/react 19.2.18 19.3.0
react-dom 19.2.4 19.3.0
@types/react-dom 19.2.4 19.3.0
react-resizable-panels 4.12.2 4.12.4
recharts 3.8.0 3.10.1
shadcn 4.16.0 4.21.0
shiki 3.23.0 4.4.3
zbsearch 3.3.4 4.0.0
zod 4.4.3 4.6.4
@changesets/changelog-github 1.0.0 1.0.1
@changesets/cli 3.0.1 3.0.2
@types/bun 1.3.14 1.4.2
@types/node 20.19.43 26.5.1
@types/react 19.2.18 19.3.0
@types/react-dom 19.2.4 19.3.0
eslint 9.39.5 10.10.0
eslint-config-next 16.2.11 16.3.5
typescript 5.9.3 7.0.2

Updates @ai-sdk/react from 4.0.47 to 4.0.102

Changelog

Sourced from @​ai-sdk/react's changelog.

4.0.102

Patch Changes

  • Updated dependencies [615ac89]
    • ai@7.0.99

4.0.101

Patch Changes

  • 9d8e5a1: fix(react): abort chats when their useChat id changes during a stream
  • Updated dependencies [5ec21a6]
  • Updated dependencies [db59d78]
  • Updated dependencies [7469a3b]
  • Updated dependencies [f87bf07]
  • Updated dependencies [bc5cb7a]
  • Updated dependencies [a5f449a]
  • Updated dependencies [813bb36]
  • Updated dependencies [c43e4b7]
    • @​ai-sdk/provider@​4.0.14
    • ai@7.0.98
    • @​ai-sdk/provider-utils@​5.0.40
    • @​ai-sdk/mcp@​2.0.49

4.0.100

Patch Changes

  • Updated dependencies [ef3bac4]
  • Updated dependencies [9942196]
    • ai@7.0.97
    • @​ai-sdk/provider@​4.0.13
    • @​ai-sdk/mcp@​2.0.48
    • @​ai-sdk/provider-utils@​5.0.39

4.0.99

Patch Changes

  • Updated dependencies [912fb01]
  • Updated dependencies [c595e6e]
    • @​ai-sdk/provider@​4.0.12
    • ai@7.0.96
    • @​ai-sdk/mcp@​2.0.47
    • @​ai-sdk/provider-utils@​5.0.38

4.0.98

Patch Changes

... (truncated)

Commits

Updates @base-ui/react from 1.6.0 to 1.8.0

Release notes

Sourced from @​base-ui/react's releases.

v1.8.0

General changes

Alert Dialog

Autocomplete

Avatar

Checkbox

Checkbox Group

Combobox

... (truncated)

Changelog

Sourced from @​base-ui/react's changelog.

v1.8.0

Sep 4, 2026

General changes

Alert Dialog

Autocomplete

Avatar

Checkbox

Checkbox Group

Combobox

... (truncated)

Commits
  • 47b4052 [release] v1.8.0 (#5609)
  • dd13809 [toast] Accept an updater function in the update method instead of on data (#...
  • 670e95c [docs] Update docs infra to restore generated types (#5616)
  • e8526f7 [utils] Restore frozen EMPTY_ARRAY (#5620)
  • b7f6683 [number field] Preserve consumer selection when focusing the input (#5619)
  • b8c5d78 [context menu] Correct generated API metadata (#5523)
  • 261d699 [combobox][autocomplete] Document that items must not contain nullish entries...
  • 0a6ff44 [toast] Replace custom data wholesale and accept a function to derive it (#5611)
  • 2e1bddd [combobox][select] Make the multiple selection anchor lookup linear (#5613)
  • ad83c8a [code-infra] Run TypeScript 7 alongside the TS6 JS API (#5603)
  • Additional commits viewable in compare view

Updates @shadcn/helpers from 0.1.0 to 0.2.0

Release notes

Sourced from @​shadcn/helpers's releases.

@​shadcn/helpers@​0.2.0

Minor Changes

Changelog

Sourced from @​shadcn/helpers's changelog.

0.2.0

Minor Changes

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​shadcn/helpers since your current version.


Updates @shadcn/react from 0.3.0 to 0.3.1

Release notes

Sourced from @​shadcn/react's releases.

@​shadcn/react@​0.3.1

Patch Changes

  • #11720 503a3a57aec9a3817e37f90aa0817b1fabd284d0 Thanks @​shadcn! - Set data-pending-scroll on the MessageScroller root and viewport until defaultScrollPosition ("end" or "last-anchor") is applied, so the viewport can be hidden and a server-rendered transcript does not flash the top of the thread on reload.
Changelog

Sourced from @​shadcn/react's changelog.

0.3.1

Patch Changes

  • #11720 503a3a57aec9a3817e37f90aa0817b1fabd284d0 Thanks @​shadcn! - Set data-pending-scroll on the MessageScroller root and viewport until defaultScrollPosition ("end" or "last-anchor") is applied, so the viewport can be hidden and a server-rendered transcript does not flash the top of the thread on reload.
Commits

Updates ai from 7.0.44 to 7.0.99

Changelog

Sourced from ai's changelog.

7.0.99

Patch Changes

  • 615ac89: feat(ai): use InvalidArgumentError for utility input validation
  • Updated dependencies [7f76d83]
    • @​ai-sdk/gateway@​4.0.80

7.0.98

Patch Changes

  • 5ec21a6: fix: reject unsupported batch request types
  • db59d78: feat(ai): add runtime context attribution to embed, embedMany and rerank
  • 7469a3b: feat: support image generation requests in batches
  • f87bf07: fix(ai): reject invalid reranking provider indices
  • bc5cb7a: fix(ai): accept inferred tools in validateUIMessages
  • a5f449a: feat(ai): add a stable UI message type and type guard for tool output errors
  • Updated dependencies [5ec21a6]
  • Updated dependencies [7469a3b]
  • Updated dependencies [dbd83a3]
  • Updated dependencies [813bb36]
  • Updated dependencies [c43e4b7]
  • Updated dependencies [03f4e59]
    • @​ai-sdk/gateway@​4.0.79
    • @​ai-sdk/provider@​4.0.14
    • @​ai-sdk/provider-utils@​5.0.40

7.0.97

Patch Changes

  • ef3bac4: Observe video webhook receiver rejections before generation starts to prevent unhandled rejections during or after a failed start. Preserve start error precedence and assimilate custom receivers only once.
  • 9942196: feat: add batch cancel and list APIs
  • Updated dependencies [9942196]
    • @​ai-sdk/provider@​4.0.13
    • @​ai-sdk/gateway@​4.0.78
    • @​ai-sdk/provider-utils@​5.0.39

7.0.96

Patch Changes

  • 912fb01: feat: add batch cancel and list APIs
  • c595e6e: fix(ai): call atob without a receiver for Cloudflare Workers compatibility
  • Updated dependencies [912fb01]
  • Updated dependencies [aa4cc14]
  • Updated dependencies [f102e41]
    • @​ai-sdk/provider@​4.0.12
    • @​ai-sdk/gateway@​4.0.77

... (truncated)

Commits
  • 6c6c221 Version Packages (#20670)
  • 615ac89 feat: use InvalidArgumentError for utility input validation (#20304)
  • 9ed46d2 Version Packages (#20569)
  • a5f449a feat: add a stable UI message type and type guard for tool output errors (#20...
  • bc5cb7a fix(ai): accept inferred tools in validateUIMessages (#20660)
  • db59d78 feat(ai): add runtime context attribution to embed, embedMany and rerank (#20...
  • 7469a3b feat: support image generation requests in batches (#20594)
  • f87bf07 fix: rerank() returns undefined documents for invalid provider ranking indice...
  • 5ec21a6 fix: reject unsupported batch request types (#20562)
  • e9795ab Version Packages (#20555)
  • Additional commits viewable in compare view

Updates cn from 0.2.6 to 0.3.0

Release notes

Sourced from cn's releases.

cn@0.3.0

Minor Changes

  • #137 9a9c9b5 Thanks @​shadcn! - Add cn/build, the library behind cn build. The CLI now parses arguments and prints; scanning, subsetting, compiling, and writing run in build(options) so build scripts and bundler plugins can call it directly.

  • #139 829b6e1 Thanks @​shadcn! - Add cn/vite and cn/next.

Changelog

Sourced from cn's changelog.

0.3.0

Minor Changes

  • #137 9a9c9b5 Thanks @​shadcn! - Add cn/build, the library behind cn build. The CLI now parses arguments and prints; scanning, subsetting, compiling, and writing run in build(options) so build scripts and bundler plugins can call it directly.

  • #139 829b6e1 Thanks @​shadcn! - Add cn/vite and cn/next.

Commits

Updates fumadocs-core from 16.14.0 to 16.15.10

Release notes

Sourced from fumadocs-core's releases.

fumadocs@16.15.10

  • @​fumadocs/base-ui@​16.15.10
  • fumadocs-core@16.15.10
  • fumadocs-ui@16.15.10

Fix language switching with hidden locale prefixes

Root Provider's i18n option now accepts defaultLanguage and hideLocale. The language switcher uses these options instead of guessing from the current URL, so switching from /zh/docs to the default language en with hideLocale: 'default-locale' navigates to /docs.

i18nProvider() and defineI18nUI() pass these options from your i18n config automatically.

Fix same-page anchors on Tanstack Start

Tanstack Router's Link takes a pathname in to and reads the hash from a separate hash prop, so a same-page anchor like [link](https://github.com/fuma-nama/fumadocs/blob/HEAD/#installation) was rendered as a link to the current page with the hash dropped, clicking it did nothing. The Tanstack adapter now renders a native <a> for those hrefs:

Jump to [Installation](https://github.com/fuma-nama/fumadocs/blob/HEAD/#installation).

fumadocs@16.15.9

  • @​fumadocs/base-ui@​16.15.9
  • fumadocs-core@16.15.9
  • fumadocs-ui@16.15.9

getPageByUrl() on the loader

Look up a page by its URL:

source.getPageByUrl('/docs/getting-started');
source.getPageByUrl('/cn/docs/getting-started', 'cn');

Without the language argument every language is looked up, unlike getPageByHref() which resolves the default language only.

llms() renders pages

llms() used to build the llms.txt index only, turning a page into Markdown was left to your own getLLMText(). Pass renderPage and it covers both:

import { llms } from 'fumadocs-core/source';
export const docsLlms = llms(source, {
renderPage: async (page) => `# ${page.data.title} (${page.url})
${await page.data.getText('processed')}`,
});

  • page(page) renders one page, for the per-page Markdown route.

... (truncated)

Commits

Updates fumadocs-mdx from 15.2.1 to 15.4.0

Release notes

Sourced from fumadocs-mdx's releases.

fumadocs-mdx@15.4.0

Remark LLMs: export a component with output: "function"

With output: "function", _markdown becomes a component instead of a string: Markdown content is still stringified at compile time, while JSX elements stay as JSX, receiving their original props.

// fumadocs-mdx collection config
postprocess: {
  includeProcessedMarkdown: { output: 'function' },
},

Render it with renderToMarkdown from fumadocs-core/server. Elements resolve from props.components: a component can call asMarkdown() to output its own Markdown form, other components (including missing ones) are serialized as JSX syntax.

import { renderToMarkdown } from 'fumadocs-core/server';
const { _markdown: Content } = await page.data.load();
const text = await renderToMarkdown(<Content components={getMDXComponents()} />);

getText('processed') keeps working: it renders the component for you, with an optional components map:

const text = await page.data.getText('processed', { components: getMDXComponents() });

Supported in bundler collections with both compilers, and in dynamic: true collections & @fumadocs/satteri/local-md with the Sätteri compiler.

Commits
  • 5cd7b69 Merge pull request #3510 from fuma-nama/tegami/version-packages
  • 814559b docs: introduce React Markdown Components
  • b4d689d refactor(core(: rename options
  • eefd3e0 feat(satteri): show the type table as a table in markdown form
  • 49afb7d docs: support .md apart from .mdx suffix
  • 399bea9 feat(mdx,satteri): support dynamic markdown renderer on remark-llms plugin
  • 7eef0d8 feat(core): React Markdown Component
  • 3d07ef5 fix(core): duplicated record when indexing
  • 0687a8b Version Packages (#3507)
  • cc53d34 internal(core): drop negotiator
  • Additional commits viewable in compare view

Updates input-otp from 1.4.2 to 1.5.0

Release notes

Sourced from input-otp's releases.

v1.5.0

Promotes the safe 1.5.0-beta.2 code without functional changes. Everything in this release is backwards-compatible: no public type changes and no behavior changes beyond the bug fixes below. Two beta.1 experiments are deliberately excluded — the iOS native-selection workaround (the thin native selection artifact remains a known cosmetic limitation) and the onComplete type narrowing, which returns in 2.0.0 as a documented breaking change.

  • fix(input): reserve the password manager badge gutter only where it fits
  • fix(input): disable spellcheck by default
  • fix(input): feature-detect ResizeObserver before observing
  • fix(input): use a 16px fallback until --root-height resolves, preventing iOS focus zoom
  • fix(input): clear pending synchronization timeouts on unmount
  • feat(input): add a nonce prop for Content-Security-Policy support
  • fix(input): guard the input reference used by the selectionchange listener
  • fix(input): opt the container out of browser translation
  • fix(input): report cosmetic CSS rule failures as warnings instead of errors
  • docs: document the stable iOS selection behavior and its cosmetic limitation

Safe release candidate for 1.5.0. This release withdraws the experimental iOS native-selection workaround from 1.5.0-beta.1 after compatibility review. The edit menu, paste, typing, selection and focus behavior return to the proven 1.4.x implementation; the thin native selection artifact remains a known iOS limitation.

It also withdraws the onComplete type narrowing from 1.5.0-beta.1. Although type-level only, it can fail compilation of existing handlers typed with extra or non-string parameters (a common example is passing react-hook-form's handleSubmit(onSubmit) directly), which makes it a breaking change under semver. It will return in 2.0.0 with a documented migration path.

  • revert(input): withdraw the experimental iOS native-selection workaround from 1.5.0-beta.1
  • revert(types): withdraw the onComplete narrowing from 1.5.0-beta.1, deferring it to 2.0.0
  • docs: align the mobile and edge-case documentation with the stable candidate
  • test: verify focus, typing, editing, deletion, paste, Select All → Paste and the native edit menu on iOS 18.0 and 26.5 simulators

Deprecated experimental release. It introduced an iOS native-selection workaround that moved and scaled the underlying input, and narrowed the onComplete type in a way that can break compilation of existing apps. Both were withdrawn in 1.5.0-beta.2 and are not planned for 1.5.0 stable. Existing installs remain reproducible, but new beta users should use 1.5.0-beta.2 or later.

Prepared but not published. Its safe changes are included in 1.5.0-beta.2.

  • fix(input): reserve the password manager badge gutter only where it fits
    • Once a badge was detected, the input grew 40px past the container to push the badge off the last slot — and the only guard was the distance to the viewport's right edge. Inside a constrained scroll container (a card, a modal) that overhang registered as scrollable overflow: a horizontal scrollbar appeared and shifted the whole layout. The space check now measures the nearest ancestor that constrains horizontal overflow (scroll containers, overflow: hidden/clip ancestors, the container itself, and the real viewport width) and skips the push when the gutter doesn't fit; the badge then stays over the last slot, exactly as with pushPasswordManagerStrategy="none". Nothing is ever clipped, so extensions keep rendering their badges.
  • fix(input): disable spellcheck by default
    • Browsers would mark a filled code as a spelling error and underline it. spellCheck now defaults to false; passing your own spellCheck prop still overrides it.
  • fix(input): feature-detect ResizeObserver before observing
    • Browsers without ResizeObserver (e.g. iOS Safari <13.4) crashed on mount. When the observer is unavailable, the root height is now simply measured once on mount.
  • fix(input): fall back to 16px font-size until --root-height resolves
    • Before the variable is set, the invisible input inherited its font-size — and when that inherited size was under 16px, iOS Safari zoomed the whole page on focus or back-navigation.
  • fix(input): clear pending sync timeouts on unmount
    • The autofill/selection sync timeouts could fire after unmount, causing state updates on an unmounted component — noisy act() warnings and flaky CI test runs.
  • feat(input): add nonce prop
    • Applied to the <style> tag the library injects, so a style-src Content-Security-Policy that requires nonces no longer blocks it.
  • fix(input): use the guarded input reference inside the selectionchange listener
    • Fixes a null is not an object (evaluating 'setSelectionRange') crash when the listener fired while the ref was already null.
  • fix(input): opt the container out of browser translation
    • Chrome's translator rewrote the slots' text nodes (wrapping them in <font> elements), crashing React on the next re-render — easiest to hit with alphanumeric codes under an active page translation. The container now carries translate="no"; a one-time code is never meaningful to translate.
  • fix(input): log CSS rule insertion failures as warnings, not errors
    • Some environments reject individual cosmetic selectors (:autofill in older Android WebViews, for instance). Nothing breaks when that happens, but the console.error was captured by Sentry and similar tools as if the application had failed. Same message, warning level.
  • chore(types): narrow onComplete to (value: string) => unknown

... (truncated)

Changelog

Sourced from input-otp's changelog.

[1.5.0]

Promotes the safe 1.5.0-beta.2 code without functional changes. Everything in this release is backwards-compatible: no public type changes and no behavior changes beyond the bug fixes below. Two beta.1 experiments are deliberately excluded — the iOS native-selection workaround (the thin native selection artifact remains a known cosmetic limitation) and the onComplete type narrowing, which returns in 2.0.0 as a documented breaking change.

  • fix(input): reserve the password manager badge gutter only where it fits
  • fix(input): disable spellcheck by default
  • fix(input): feature-detect ResizeObserver before observing
  • fix(input): use a 16px fallback until --root-height resolves, preventing iOS focus zoom
  • fix(input): clear pending synchronization timeouts on unmount
  • feat(input): add a nonce prop for Content-Security-Policy support
  • fix(input): guard the input reference used by the selectionchange listener
  • fix(input): opt the container out of browser translation
  • fix(input): report cosmetic CSS rule failures as warnings instead of errors
  • docs: document the stable iOS selection behavior and its cosmetic limitation

[1.5.0-beta.2]

Safe release candidate for 1.5.0. This release withdraws the experimental iOS native-selection workaround from 1.5.0-beta.1 after compatibility review. The edit menu, paste, typing, selection and focus behavior return to the proven 1.4.x implementation; the thin native selection artifact remains a known iOS limitation.

It also withdraws the onComplete type narrowing from 1.5.0-beta.1. Although type-level only, it can fail compilation of existing handlers typed with extra or non-string parameters (a common example is passing react-hook-form's handleSubmit(onSubmit) directly), which makes it a breaking change under semver. It will return in 2.0.0 with a documented migration path.

  • revert(input): withdraw the experimental iOS native-selection workaround from 1.5.0-beta.1
  • revert(types): withdraw the onComplete narrowing from 1.5.0-beta.1, deferring it to 2.0.0
  • docs: align the mobile and edge-case documentation with the stable candidate
  • test: verify focus, typing, editing, deletion, paste, Select All → Paste and the native edit menu on iOS 18.0 and 26.5 simulators

[1.5.0-beta.1]

Deprecated experimental release. It introduced an iOS native-selection workaround that moved and scaled the underlying input, and narrowed the onComplete type in a way that can break compilation of existing apps. Both were withdrawn in 1.5.0-beta.2 and are not planned for 1.5.0 stable. Existing installs remain reproducible, but new beta users should use 1.5.0-beta.2 or later.

[1.5.0-beta.0]

Prepared but not published. Its safe changes are included in 1.5.0-beta.2.

  • fix(input): reserve the password manager badge gutter only where it fits
    • Once a badge was detected, the input grew 40px past the container to push the badge off the last slot — and the only guard was the distance to the viewport's right edge. Inside a constrained scroll container (a card, a modal) that overhang registered as scrollable overflow: a horizontal scrollbar appeared and shifted the whole layout. The space check now measures the nearest ancestor that constrains horizontal overflow (scroll containers, overflow: hidden/clip ancestors, the container itself, and the real viewport width) and skips the push when the gutter doesn't fit; the badge then stays over the last slot, exactly as with pushPasswordManagerStrategy="none". Nothing is ever clipped, so extensions keep rendering their badges.
  • fix(input): disable spellcheck by default
    • Browsers would mark a filled code as a spelling error and underline it. spellCheck now defaults to false; passing your own spellCheck prop still overrides it.
  • fix(input): feature-detect ResizeObserver before observing
    • Browsers without ResizeObserver (e.g. iOS Safari <13.4) crashed on mount. When the observer is unavailable, the root height is now simply measured once on mount.
  • fix(input): fall back to 16px font-size until --root-height resolves
    • Before the variable is set, the invisible input inherited its font-size — and when that inherited size was under 16px, iOS Safari zoomed the whole page on focus or back-navigation.
  • fix(input): clear pending sync timeouts on unmount
    • The autofill/selection sync timeouts could fire after unmount, causing state updates on an unmounted component — noisy act() warnings and flaky CI test runs.
  • feat(input): add nonce prop
    • Applied to the <style> tag the library injects, so a style-src Content-Security-Policy that requires nonces no longer blocks it.
  • fix(input): use the guarded input reference inside the selectionchange listener
    • Fixes a null is not an object (evaluating 'setSelectionRange') crash when the listener fired while the ref was already null.
  • fix(input): opt the container out of browser translation
    • Chrome's translator rewrote the slots' text nodes (wrapping them in <font> elements), crashing React on the next re-render — easiest to hit with alphanumeric codes under an active page translation. The container now carries translate="no"; a one-time code is never meaningful to translate.

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for input-otp since your current version.


Updates motion from 12.43.0 to 13.2.0

Changelog

Sourced from motion's changelog.

[13.2.0] 2026-09-03

Added

  • animate.addEffect() for registering effects that lets animate drive non-DOM subjects alongside DOM elements.
  • threeEffect (motion/three) supporting Three.js objects, materials, shader uniforms, TSL uniform nodes and more.
  • vgpuEffect (motion/vgpu) supporting shared uniforms, Effect/Draw/Compute bindings ("params.time"), scene nodes, cameras, lights, materials, orbit controls, CSS colors and vector components.
  • createEffect now accepts test, read and step options and exposes bound motion values via effect.get().

Changed

  • Reduced filesize and improved performance of spring.
  • MotionValueState no longer caches values in latest; effect renders read their motion values directly. set() drops its useDefaultValueType argument.

[13.1.1] 2026-08-18

Fixed

  • Guard animation window access in non-browser runtimes.
  • AnimatePresence: Improved compat with React 19 strict mode.

[13.1.0] 2026-08-10

Added

  • Reorder: Multidimensional reorder.
  • Reorder: Automatic axis detection.
  • Reorder: RTL support.

[13.0.0] 2026-08-05

Changed

  • Removed optional @emotion/is-prop-valid dependency in favour of explicit <MotionConfig isValidProp={isPropValid}>.

Fixed

  • Hardware-accelerated SVG elements correctly apply final style on animation complete.
  • AnimatePresence: Ensure nodes are marked as safe to remove when rendering propagate with no motion children.
Commits
  • 0f1c119 v13.2.0
  • f73cbd7 Latest
  • d743b79 Latest
  • ce2719d Add WebGPURenderer TSL demo
  • b800e58 Add TSL uniform node support to Three.js animate
  • d60a956 Merge pull request #3800 from motiondivision/add-uniform-effect
  • a2d3227 Merge pull request #3799 from motiondivision/generator-filesize-optimisations
  • 55c8f8e Remove redundant comment from inertia bounds check
  • 84c2599 Add GPU adapter preview examples
  • 7b0ac88 Create adapter MotionValues lazily
  • Additional commits viewable in compare view

Updates next from 16.2.11 to 16.3.5

Release notes

Sourced from next's releases.

v16.3.5

The following bug fixes have been backported. It does not include all pending features/changes on canary.

  • next/image: Skip 0-byte entries when initializing disk LRU cache (#98185)
  • next/image: Reject empty images when reading/writing to the disk cache (#98186)
  • Emit whole-app server NFTs when output: 'standalone' is used with an adapter (#98167)
  • Add CSP nonce to script tags of loading and template files (#98403)
  • Fix use cache prerender signal retention (#98448)

v16.3.4

Follow-up release to v16.3.3 re-enabling AVIF Image Optimization (

Bumps the bun group with 28 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@ai-sdk/react](https://github.com/vercel/ai/tree/HEAD/packages/react) | `4.0.47` | `4.0.102` |
| [@base-ui/react](https://github.com/mui/base-ui/tree/HEAD/packages/react) | `1.6.0` | `1.8.0` |
| [@shadcn/helpers](https://github.com/shadcn-ui/ui/tree/HEAD/packages/helpers) | `0.1.0` | `0.2.0` |
| [@shadcn/react](https://github.com/shadcn-ui/ui/tree/HEAD/packages/react) | `0.3.0` | `0.3.1` |
| [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `7.0.44` | `7.0.99` |
| [cn](https://github.com/shadcn-ui/cn/tree/HEAD/packages/cn) | `0.2.6` | `0.3.0` |
| [fumadocs-core](https://github.com/fuma-nama/fumadocs) | `16.14.0` | `16.15.10` |
| [fumadocs-mdx](https://github.com/fuma-nama/fumadocs) | `15.2.1` | `15.4.0` |
| [input-otp](https://github.com/guilhermerodz/input-otp/tree/HEAD/packages/input-otp) | `1.4.2` | `1.5.0` |
| [motion](https://github.com/motiondivision/motion) | `12.43.0` | `13.2.0` |
| [next](https://github.com/vercel/next.js) | `16.2.11` | `16.3.5` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.4` | `19.3.0` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.4` | `19.3.0` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.4` | `19.3.0` |
| [react-resizable-panels](https://github.com/bvaughn/react-resizable-panels) | `4.12.2` | `4.12.4` |
| [recharts](https://github.com/recharts/recharts) | `3.8.0` | `3.10.1` |
| [shadcn](https://github.com/shadcn-ui/ui/tree/HEAD/packages/shadcn) | `4.16.0` | `4.21.0` |
| [shiki](https://github.com/shikijs/shiki/tree/HEAD/packages/shiki) | `3.23.0` | `4.4.3` |
| [zbsearch](https://github.com/micheleriva/zbsearch) | `3.3.4` | `4.0.0` |
| [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.6.4` |
| [@changesets/changelog-github](https://github.com/changesets/changesets/tree/HEAD/packages/changelog-github) | `1.0.0` | `1.0.1` |
| [@changesets/cli](https://github.com/changesets/changesets/tree/HEAD/packages/cli) | `3.0.1` | `3.0.2` |
| [@types/bun](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/bun) | `1.3.14` | `1.4.2` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `20.19.43` | `26.5.1` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.4` | `19.3.0` |
| [eslint](https://github.com/eslint/eslint) | `9.39.5` | `10.10.0` |
| [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.2.11` | `16.3.5` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `7.0.2` |



Updates `@ai-sdk/react` from 4.0.47 to 4.0.102
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/react@4.0.102/packages/react)

Updates `@base-ui/react` from 1.6.0 to 1.8.0
- [Release notes](https://github.com/mui/base-ui/releases)
- [Changelog](https://github.com/mui/base-ui/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mui/base-ui/commits/v1.8.0/packages/react)

Updates `@shadcn/helpers` from 0.1.0 to 0.2.0
- [Release notes](https://github.com/shadcn-ui/ui/releases)
- [Changelog](https://github.com/shadcn-ui/ui/blob/main/packages/helpers/CHANGELOG.md)
- [Commits](https://github.com/shadcn-ui/ui/commits/@shadcn/helpers@0.2.0/packages/helpers)

Updates `@shadcn/react` from 0.3.0 to 0.3.1
- [Release notes](https://github.com/shadcn-ui/ui/releases)
- [Changelog](https://github.com/shadcn-ui/ui/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/shadcn-ui/ui/commits/@shadcn/react@0.3.1/packages/react)

Updates `ai` from 7.0.44 to 7.0.99
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@7.0.99/packages/ai)

Updates `cn` from 0.2.6 to 0.3.0
- [Release notes](https://github.com/shadcn-ui/cn/releases)
- [Changelog](https://github.com/shadcn-ui/cn/blob/main/packages/cn/CHANGELOG.md)
- [Commits](https://github.com/shadcn-ui/cn/commits/cn@0.3.0/packages/cn)

Updates `fumadocs-core` from 16.14.0 to 16.15.10
- [Release notes](https://github.com/fuma-nama/fumadocs/releases)
- [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs@16.14.0...fumadocs@16.15.10)

Updates `fumadocs-mdx` from 15.2.1 to 15.4.0
- [Release notes](https://github.com/fuma-nama/fumadocs/releases)
- [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs-mdx@15.2.1...fumadocs-mdx@15.4.0)

Updates `input-otp` from 1.4.2 to 1.5.0
- [Release notes](https://github.com/guilhermerodz/input-otp/releases)
- [Changelog](https://github.com/guilhermerodz/input-otp/blob/master/CHANGELOG.md)
- [Commits](https://github.com/guilhermerodz/input-otp/commits/v1.5.0/packages/input-otp)

Updates `motion` from 12.43.0 to 13.2.0
- [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md)
- [Commits](motiondivision/motion@v12.43.0...v13.2.0)

Updates `next` from 16.2.11 to 16.3.5
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.2.11...v16.3.5)

Updates `react` from 19.2.4 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react)

Updates `@types/react` from 19.2.18 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-dom` from 19.2.4 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom)

Updates `@types/react-dom` from 19.2.4 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `react-resizable-panels` from 4.12.2 to 4.12.4
- [Release notes](https://github.com/bvaughn/react-resizable-panels/releases)
- [Changelog](https://github.com/bvaughn/react-resizable-panels/blob/main/CHANGELOG.md)
- [Commits](bvaughn/react-resizable-panels@4.12.2...4.12.4)

Updates `recharts` from 3.8.0 to 3.10.1
- [Release notes](https://github.com/recharts/recharts/releases)
- [Changelog](https://github.com/recharts/recharts/blob/main/CHANGELOG.md)
- [Commits](recharts/recharts@v3.8.0...v3.10.1)

Updates `shadcn` from 4.16.0 to 4.21.0
- [Release notes](https://github.com/shadcn-ui/ui/releases)
- [Changelog](https://github.com/shadcn-ui/ui/blob/main/packages/shadcn/CHANGELOG.md)
- [Commits](https://github.com/shadcn-ui/ui/commits/shadcn@4.21.0/packages/shadcn)

Updates `shiki` from 3.23.0 to 4.4.3
- [Release notes](https://github.com/shikijs/shiki/releases)
- [Commits](https://github.com/shikijs/shiki/commits/v4.4.3/packages/shiki)

Updates `zbsearch` from 3.3.4 to 4.0.0
- [Release notes](https://github.com/micheleriva/zbsearch/releases)
- [Commits](micheleriva/zbsearch@v3.3.4...v4.0.0)

Updates `zod` from 4.4.3 to 4.6.4
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.4.3...v4.6.4)

Updates `@changesets/changelog-github` from 1.0.0 to 1.0.1
- [Release notes](https://github.com/changesets/changesets/releases)
- [Changelog](https://github.com/changesets/changesets/blob/main/packages/changelog-github/CHANGELOG.md)
- [Commits](https://github.com/changesets/changesets/commits/@changesets/changelog-github@1.0.1/packages/changelog-github)

Updates `@changesets/cli` from 3.0.1 to 3.0.2
- [Release notes](https://github.com/changesets/changesets/releases)
- [Changelog](https://github.com/changesets/changesets/blob/main/packages/cli/CHANGELOG.md)
- [Commits](https://github.com/changesets/changesets/commits/@changesets/cli@3.0.2/packages/cli)

Updates `@types/bun` from 1.3.14 to 1.4.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/bun)

Updates `@types/node` from 20.19.43 to 26.5.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/react` from 19.2.18 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@types/react-dom` from 19.2.4 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `eslint` from 9.39.5 to 10.10.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v9.39.5...v10.10.0)

Updates `eslint-config-next` from 16.2.11 to 16.3.5
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](https://github.com/vercel/next.js/commits/v16.3.5/packages/eslint-config-next)

Updates `typescript` from 5.9.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v5.9.3...v7.0.2)

---
updated-dependencies:
- dependency-name: "@ai-sdk/react"
  dependency-version: 4.0.102
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bun
- dependency-name: "@base-ui/react"
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: "@shadcn/helpers"
  dependency-version: 0.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: "@shadcn/react"
  dependency-version: 0.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bun
- dependency-name: ai
  dependency-version: 7.0.99
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bun
- dependency-name: cn
  dependency-version: 0.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: fumadocs-core
  dependency-version: 16.15.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: fumadocs-mdx
  dependency-version: 15.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: input-otp
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: motion
  dependency-version: 13.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: bun
- dependency-name: next
  dependency-version: 16.3.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: react
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: "@types/react"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: react-dom
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: "@types/react-dom"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: react-resizable-panels
  dependency-version: 4.12.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bun
- dependency-name: recharts
  dependency-version: 3.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: shadcn
  dependency-version: 4.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: shiki
  dependency-version: 4.4.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: bun
- dependency-name: zbsearch
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: bun
- dependency-name: zod
  dependency-version: 4.6.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: "@changesets/changelog-github"
  dependency-version: 1.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bun
- dependency-name: "@changesets/cli"
  dependency-version: 3.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bun
- dependency-name: "@types/bun"
  dependency-version: 1.4.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: "@types/node"
  dependency-version: 26.5.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: bun
- dependency-name: "@types/react"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: "@types/react-dom"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: eslint
  dependency-version: 10.10.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: bun
- dependency-name: eslint-config-next
  dependency-version: 16.3.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: bun
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 18, 2026
@dependabot
dependabot Bot requested a review from initred as a code owner September 18, 2026 21:08
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 18, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 25, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 25, 2026
@dependabot
dependabot Bot deleted the dependabot/bun/bun-6d690234d3 branch September 25, 2026 21:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants