Skip to content

chore(deps): bump the bun group across 1 directory with 30 updates - #71

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/bun-ecca31a098
Closed

chore(deps): bump the bun group across 1 directory with 30 updates#71
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/bun-ecca31a098

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 25, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the bun group with 30 updates in the / directory:

Package From To
@ai-sdk/react 4.0.47 4.0.110
@base-ui/react 1.6.0 1.8.0
@shadcn/helpers 0.1.0 0.2.0
@shadcn/react 0.3.0 0.3.1
@tabler/icons-react 3.46.0 3.47.0
ai 7.0.44 7.0.107
cn 0.2.6 0.3.0
fumadocs-core 16.14.0 16.15.12
fumadocs-mdx 15.2.1 15.4.3
input-otp 1.4.2 1.5.0
motion 12.43.0 13.4.0
next 16.2.11 16.3.5
react 19.2.4 19.3.0
@types/react 19.2.18 19.3.0
react-dom 19.2.4 19.3.0
@types/react-dom 19.2.4 19.3.0
react-resizable-panels 4.12.2 4.13.1
recharts 3.8.0 3.10.1
shadcn 4.16.0 4.21.0
shiki 3.23.0 4.4.3
zbsearch 3.3.4 4.0.0
zod 4.4.3 4.6.5
@changesets/changelog-github 1.0.0 1.0.1
@changesets/cli 3.0.1 3.0.3
@types/bun 1.3.14 1.4.2
@types/node 20.19.43 26.6.2
@types/react 19.2.18 19.3.0
@types/react-dom 19.2.4 19.3.0
eslint 9.39.5 10.11.0
eslint-config-next 16.2.11 16.3.5
prettier 3.9.6 3.9.8
typescript 5.9.3 7.0.2

Updates @ai-sdk/react from 4.0.47 to 4.0.110

Changelog

Sourced from @​ai-sdk/react's changelog.

4.0.110

Patch Changes

  • 00da674: fix(react): preserve Headers instances in useCompletion requests
  • e43032f: fix(react): handle rejected asynchronous useObject onFinish callbacks
  • f42a247: fix(react): keep useObject cleared when an initial value is configured
  • 21d4b7d: fix(react): preserve active useObject cancellation state during overlapping requests
  • Updated dependencies [79681c4]
  • Updated dependencies [98c7275]
  • Updated dependencies [2973485]
  • Updated dependencies [a105059]
  • Updated dependencies [31532f3]
  • Updated dependencies [e61cbd8]
  • Updated dependencies [8ade040]
  • Updated dependencies [970a01e]
  • Updated dependencies [85539c5]
  • Updated dependencies [a4db5ea]
  • Updated dependencies [2937ea2]
  • Updated dependencies [611d301]
  • Updated dependencies [c415657]
    • ai@7.0.107
    • @​ai-sdk/provider-utils@​5.0.45
    • @​ai-sdk/mcp@​2.0.54

4.0.109

Patch Changes

  • Updated dependencies [4775577]
  • Updated dependencies [6696728]
  • Updated dependencies [09516a1]
  • Updated dependencies [1aef01e]
  • Updated dependencies [9c1ea74]
  • Updated dependencies [107343a]
  • Updated dependencies [03c3e33]
  • Updated dependencies [4b5cb49]
  • Updated dependencies [5d42ebd]
  • Updated dependencies [4a67783]
  • Updated dependencies [1058ed5]
  • Updated dependencies [84f5d1b]
  • Updated dependencies [2d53a5d]
  • Updated dependencies [2a5ed55]
  • Updated dependencies [0455398]
    • ai@7.0.106
    • @​ai-sdk/mcp@​2.0.53
    • @​ai-sdk/provider-utils@​5.0.44

4.0.108

... (truncated)

Commits
  • 08ae5ad Version Packages (#21089)
  • 21d4b7d fix: preserve useObject cancellation state when an older overlapping request ...
  • e43032f fix: React useObject ignores rejected asynchronous onFinish callbacks (#21117)
  • f42a247 fix: React useObject.clear() restores initialValue instead of clearing the ob...
  • 00da674 fix: preserve Headers instance values in React useCompletion requests (#21137)
  • b3033f7 Version Packages (#20979)
  • a18f576 Version Packages (#20901)
  • 1a82df1 Version Packages (#20860)
  • b0cfd5b fix: Prevent useChat-only bundles from retaining the realtime browser runtime...
  • c60b9d3 Version Packages (#20799)
  • Additional commits viewable in compare view

Updates @base-ui/react from 1.6.0 to 1.8.0

Release notes

Sourced from @​base-ui/react's releases.

v1.8.0

General changes

Alert Dialog

Autocomplete

Avatar

Checkbox

Checkbox Group

Combobox

... (truncated)

Changelog

Sourced from @​base-ui/react's changelog.

v1.8.0

Sep 4, 2026

General changes

Alert Dialog

Autocomplete

Avatar

Checkbox

Checkbox Group

Combobox

... (truncated)

Commits
  • 47b4052 [release] v1.8.0 (#5609)
  • dd13809 [toast] Accept an updater function in the update method instead of on data (#...
  • 670e95c [docs] Update docs infra to restore generated types (#5616)
  • e8526f7 [utils] Restore frozen EMPTY_ARRAY (#5620)
  • b7f6683 [number field] Preserve consumer selection when focusing the input (#5619)
  • b8c5d78 [context menu] Correct generated API metadata (#5523)
  • 261d699 [combobox][autocomplete] Document that items must not contain nullish entries...
  • 0a6ff44 [toast] Replace custom data wholesale and accept a function to derive it (#5611)
  • 2e1bddd [combobox][select] Make the multiple selection anchor lookup linear (#5613)
  • ad83c8a [code-infra] Run TypeScript 7 alongside the TS6 JS API (#5603)
  • Additional commits viewable in compare view

Updates @shadcn/helpers from 0.1.0 to 0.2.0

Release notes

Sourced from @​shadcn/helpers's releases.

@​shadcn/helpers@​0.2.0

Minor Changes

Changelog

Sourced from @​shadcn/helpers's changelog.

0.2.0

Minor Changes

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​shadcn/helpers since your current version.


Updates @shadcn/react from 0.3.0 to 0.3.1

Release notes

Sourced from @​shadcn/react's releases.

@​shadcn/react@​0.3.1

Patch Changes

  • #11720 503a3a57aec9a3817e37f90aa0817b1fabd284d0 Thanks @​shadcn! - Set data-pending-scroll on the MessageScroller root and viewport until defaultScrollPosition ("end" or "last-anchor") is applied, so the viewport can be hidden and a server-rendered transcript does not flash the top of the thread on reload.
Changelog

Sourced from @​shadcn/react's changelog.

0.3.1

Patch Changes

  • #11720 503a3a57aec9a3817e37f90aa0817b1fabd284d0 Thanks @​shadcn! - Set data-pending-scroll on the MessageScroller root and viewport until defaultScrollPosition ("end" or "last-anchor") is applied, so the viewport can be hidden and a server-rendered transcript does not flash the top of the thread on reload.
Commits

Updates @tabler/icons-react from 3.46.0 to 3.47.0

Release notes

Sourced from @​tabler/icons-react's releases.

Release 3.47.0

18 new icons:

  • outline/airpods-l
  • outline/airpods-r
  • outline/cash-coin
  • outline/edit-bulk
  • outline/folder-stats
  • outline/folder-user
  • outline/gpu-2
  • outline/gpu
  • outline/map-pinned
  • outline/orbit-vertical
  • outline/orbit
  • outline/orbits
  • outline/reduce-motion
  • outline/reference-image
  • outline/secret-phrases
  • outline/sticker-smile
  • outline/voice-2
  • outline/voice

Fixed icon: outline/align-right-2

Fixes and improvements

  • Webfont: the stroke-to-outline pipeline now uses unstroke. Every glyph is a single unioned path, TTF files are ~36% smaller, and glyphs that lost their filled areas (e.g. the percentage-* family) render correctly. Native canvas is no longer built on install (#1602)
  • Webfont: align-right-2 rendered as blank because it was assigned the U+FEFF (BOM) codepoint – it now uses 1028e (#1583, thanks @​Bartosz-Do)
  • All framework packages: removed the trailing space from the icon class attribute, which caused React hydration mismatches in server-rendered markup (#1582, thanks @​giaBaoJS)
  • React: IconNode compiles again against @types/react 19 (removed ReactSVG type); added type and RSC guards (#1579)
  • SolidJS: the solid export condition now points to a .jsx source entry, fixing the react/jsx-runtime resolution error in Vite SSR (#1590, thanks @​Tiancheng-Xu)

Maintenance

  • Test suites now run in CI; fixed stale snapshots across React, Vue, Preact and Svelte packages (#1579)
  • Preview site migrated from Eleventy to Astro (#1580)
  • Refreshed main README and package READMEs: fixed wrong props, broken links and outdated sections (#1588, #1589)
  • Sponsors image is loaded from GitHub instead of jsDelivr (#1581)
  • Dependency updates: svgo 4.1.0, astro 7.2.8, vitest 4.1.11, adm-zip 0.6.1, Angular 21.2.20
Commits
  • 87e7c39 Release 3.47.0
  • bbb9bdb Run tests in CI, fix ReactSVG type rot, add type and RSC guards (#1579)
  • 45a7ca8 Remove trailing space from the icon class attribute (#1582)
  • 55f87a7 Refresh package READMEs: fix wrong props, broken links and inconsistent struc...
  • See full diff in compare view

Updates ai from 7.0.44 to 7.0.107

Changelog

Sourced from ai's changelog.

7.0.107

Patch Changes

  • 79681c4: fix(ai): preserve provider file and skill upload APIs in wrapProvider
  • 98c7275: fix(ai): preserve query parameters in chat reconnect URLs
  • a105059: fix(workflow): support deferred tool discovery in WorkflowAgent
  • 31532f3: fix(ai): prevent preliminary tool outputs from completing chats
  • e61cbd8: fix(ai): preserve raw speech audio format metadata
  • 8ade040: fix(ai): pass tool-specific context to input callbacks
  • 970a01e: fix(ai): enforce polling timeouts for in-flight video status requests
  • 85539c5: fix(ai): preserve multiple Set-Cookie headers in Node stream responses
  • 611d301: fix(ai): prevent duplicate content types in chat transport requests
  • c415657: fix(ai): decode base64 text data URLs using their declared charset
  • Updated dependencies [2973485]
  • Updated dependencies [a4db5ea]
  • Updated dependencies [2937ea2]
    • @​ai-sdk/provider-utils@​5.0.45
    • @​ai-sdk/gateway@​4.0.87

7.0.106

Patch Changes

  • 4775577: fix(ai): preserve provider metadata when simulating text streams
  • 6696728: fix(ai): report the prepareStep model in streamed step results
  • 09516a1: fix(ai): prevent unhandled rejections when UI message stream reading stops early
  • 1aef01e: fix(ai): preserve prototype-named properties in serialized tool outputs
  • 9c1ea74: fix(ai): close telemetry spans when provider response streams fail
  • 107343a: fix(ai): use the prepareStep-selected model for streamed response metadata fallbacks
  • 03c3e33: fix(ai): preserve tool calls required by retained pending approvals
  • 5d42ebd: fix(ai): skip input available callbacks for invalid streamed tool calls
  • 4a67783: fix(ai): cancel prompt attachment downloads when model calls are aborted or time out
  • 1058ed5: fix(ai): strip streamed JSON fences before arbitrary trailing whitespace
  • 84f5d1b: fix(ai): stream null and empty string JSON partial outputs
  • 2d53a5d: fix(ai): prevent onEnd after aborting a multi-step text stream
  • 2a5ed55: fix(ai): stream structured output from the final tool-loop step
  • Updated dependencies [4fdf51e]
  • Updated dependencies [0455398]
    • @​ai-sdk/gateway@​4.0.86
    • @​ai-sdk/provider-utils@​5.0.44

7.0.105

Patch Changes

  • 6982e9d: Resolve evaluation model IDs through AI Gateway when no default provider is configured, including string aliases in custom providers.
  • Updated dependencies [6982e9d]
  • Updated dependencies [6982e9d]
    • @​ai-sdk/gateway@​4.0.85

... (truncated)

Commits
  • 08ae5ad Version Packages (#21089)
  • a105059 fix: support deferred tool discovery and toolSearch execution in WorkflowAgen...
  • 8ade040 fix: tool input callbacks receive runtime context instead of tool-specific co...
  • e61cbd8 fix: preserve PCM metadata for headerless speech audio (#21079)
  • 98c7275 fix: Preserve query parameters when constructing chat reconnect URLs (#21116)
  • 79681c4 fix: preserve file and skill uploads when wrapping providers (#21048)
  • 31532f3 fix: prevent preliminary tool outputs from triggering automatic chat submissi...
  • 970a01e fix: bound in-flight video status requests by the polling timeout (#21066)
  • a4db5ea fix: detect ADTS AAC audio and preserve correct speech and transcription meta...
  • 85539c5 fix: Node streaming response helpers dropping repeated Set-Cookie headers (#2...
  • Additional commits viewable in compare view

Updates cn from 0.2.6 to 0.3.0

Release notes

Sourced from cn's releases.

cn@0.3.0

Minor Changes

  • #137 9a9c9b5 Thanks @​shadcn! - Add cn/build, the library behind cn build. The CLI now parses arguments and prints; scanning, subsetting, compiling, and writing run in build(options) so build scripts and bundler plugins can call it directly.

  • #139 829b6e1 Thanks @​shadcn! - Add cn/vite and cn/next.

Changelog

Sourced from cn's changelog.

0.3.0

Minor Changes

  • #137 9a9c9b5 Thanks @​shadcn! - Add cn/build, the library behind cn build. The CLI now parses arguments and prints; scanning, subsetting, compiling, and writing run in build(options) so build scripts and bundler plugins can call it directly.

  • #139 829b6e1 Thanks @​shadcn! - Add cn/vite and cn/next.

Commits

Updates fumadocs-core from 16.14.0 to 16.15.12

Release notes

Sourced from fumadocs-core's releases.

fumadocs@16.15.12

  • @​fumadocs/base-ui@​16.15.12
  • fumadocs-core@16.15.12
  • fumadocs-ui@16.15.12

Fix filterElement being ignored by remarkLLMs

remarkLLMs wrote its own filterElement over yours, so the option did nothing:

remarkLLMs({
  // never ran
  filterElement: (node) => node.name !== 'Callout',
});

Your function now runs for every node except mdxjsEsm, which stays excluded either way.

Fumadocs MDX passes this option through postprocess.includeProcessedMarkdown.

fumadocs@16.15.11

  • @​fumadocs/base-ui@​16.15.11
  • fumadocs-core@16.15.11
  • fumadocs-ui@16.15.11

Shadcn UI compatible primitives

The primitives in fumadocs-ui/components/ui/* now follow the API of Shadcn UI, so components installed by the CLI can use the ones you already have.

buttonVariants accepts the default variant of Shadcn UI:

buttonVariants({ variant: 'default', size: 'sm' });

primary and the color alias still work.

fumadocs-ui/components/ui/scroll-area is removed, the sidebars render the scroll area primitives directly.

Mark packages side-effect free

All packages now declare sideEffects in package.json, so bundlers can tree-shake unused modules. Packages shipping stylesheets list them as side effects to keep CSS imports.

fumadocs@16.15.10

  • @​fumadocs/base-ui@​16.15.10
  • fumadocs-core@16.15.10
  • fumadocs-ui@16.15.10

Fix language switching with hidden locale prefixes

... (truncated)

Commits
  • 77929e7 Version Packages (#3556)
  • 5cb3f1a docs: update stale info
  • 5965e51 refactor(*): move more into headless layer
  • ada4a8f refactor(*): clean up the structure
  • 0ef64ce refactor(*): move playground auth to headless layer
  • 0b4c2da refactor(*): include remaining places
  • 2fc3bef refactor(*): adjust paths
  • 78858c1 docs: mitigate lucide-react breaking changes
  • 13fd3be fix build
  • 8c22f47 chore: bump deps
  • Additional commits viewable in compare view

Updates fumadocs-mdx from 15.2.1 to 15.4.3

Release notes

Sourced from fumadocs-mdx's releases.

fumadocs-mdx@15.4.3

Fix experimentalBuildCache bloating frontmatter-only imports

With a warm build cache, ?only=frontmatter imports were served the fully compiled page from cache instead of the frontmatter module, so every page was bundled two more times. The cache now only applies to full compilations.

fumadocs-mdx@15.4.2

Fix the _mdast export with removePosition

// fumadocs-mdx collection config
postprocess: {
  includeMDAST: { removePosition: true },
},

This exported _mdast with no value, and getMDAST() then reported that includeMDAST was disabled. removePosition strips positions in place and returns nothing, so JSON.stringify received undefined.

The tree is now cloned, stripped, and serialized from the clone.

Fix SOURCEMAP_BROKEN warnings on Vite

With build.sourcemap enabled, Vite warned once per content and meta file because the loaders returned no source map. They now return an empty map when nothing is generated.

Source maps for MDX stay opt-in, pass SourceMapGenerator from source-map to MDX options:

import { SourceMapGenerator } from 'source-map';
export default defineConfig({
mdxOptions: {
SourceMapGenerator,
},
});

fumadocs-mdx@15.4.1

Mark packages side-effect free

All packages now declare sideEffects in package.json, so bundlers can tree-shake unused modules. Packages shipping stylesheets list them as side effects to keep CSS imports.

fumadocs-mdx@15.4.0

Remark LLMs: export a component with output: "function"

With output: "function", _markdown becomes a component instead of a string: Markdown content is still stringified at compile time, while JSX elements stay as JSX, receiving their original props.

// fumadocs-mdx collection config
postprocess: {
  includeProcessedMarkdown: { output: 'function' },
},
</tr></table>

... (truncated)

Commits

Updates input-otp from 1.4.2 to 1.5.0

Release notes

Sourced from input-otp's releases.

v1.5.0

Promotes the safe 1.5.0-beta.2 code without functional changes. Everything in this release is backwards-compatible: no public type changes and no behavior changes beyond the bug fixes below. Two beta.1 experiments are deliberately excluded — the iOS native-selection workaround (the thin native selection artifact remains a known cosmetic limitation) and the onComplete type narrowing, which returns in 2.0.0 as a documented breaking change.

  • fix(input): reserve the password manager badge gutter only where it fits
  • fix(input): disable spellcheck by default
  • fix(input): feature-detect ResizeObserver before observing
  • fix(input): use a 16px fallback until --root-height resolves, preventing iOS focus zoom
  • fix(input): clear pending synchronization timeouts on unmount
  • feat(input): add a nonce prop for Content-Security-Policy support
  • fix(input): guard the input reference used by the selectionchange listener
  • fix(input): opt the container out of browser translation
  • fix(input): report cosmetic CSS rule failures as warnings instead of errors
  • docs: document the stable iOS selection behavior and its cosmetic limitation

Safe release candidate for 1.5.0. This release withdraws the experimental iOS native-selection workaround from 1.5.0-beta.1 after compatibility review. The edit menu, paste, typing, selection and focus behavior return to the proven 1.4.x implementation; the thin native selection artifact remains a known iOS limitation.

It also withdraws the onComplete type narrowing from 1.5.0-beta.1. Although type-level only, it can fail compilation of existing handlers typed with extra or non-string parameters (a common example is passing react-hook-form's handleSubmit(onSubmit) directly), which makes it a breaking change under semver. It will return in 2.0.0 with a documented migration path.

  • revert(input): withdraw the experimental iOS native-selection workaround from 1.5.0-beta.1
  • revert(types): withdraw the onComplete narrowing from 1.5.0-beta.1, deferring it to 2.0.0
  • docs: align the mobile and edge-case documentation with the stable candidate
  • test: verify focus, typing, editing, deletion, paste, Select All → Paste and the native edit menu on iOS 18.0 and 26.5 simulators

Deprecated experimental release. It introduced an iOS native-selection workaround that moved and scaled the underlying input, and narrowed the onComplete type in a way that can break compilation of existing apps. Both were withdrawn in 1.5.0-beta.2 and are not planned for 1.5.0 stable. Existing installs remain reproducible, but new beta users should use 1.5.0-beta.2 or later.

Prepared but not published. Its safe changes are included in 1.5.0-beta.2.

  • fix(input): reserve the password manager badge gutter only where it fits
    • Once a badge was detected, the input grew 40px past the container to push the badge off the last slot — and the only guard was the distance to the viewport's right edge. Inside a constrained scroll container (a card, a modal) that overhang registered as scrollable overflow: a horizontal scrollbar appeared and shifted the whole layout. The space check now measures the nearest ancestor that constrains horizontal overflow (scroll containers, overflow: hidden/clip ancestors, the container itself, and the real viewport width) and skips the push when the gutter doesn't fit; the badge then stays over the last slot, exactly as with pushPasswordManagerStrategy="none". Nothing is ever clipped, so extensions keep rendering their badges.
  • fix(input): disable spellcheck by default
    • Browsers would mark a filled code as a spelling error and underline it. spellCheck now defaults to false; passing your own spellCheck prop still overrides it.
  • fix(input): feature-detect ResizeObserver before observing
    • Browsers without ResizeObserver (e.g. iOS Safari <13.4) crashed on mount. When the observer is unavailable, the root height is now simply measured once on mount.
  • fix(input): fall back to 16px font-size until --root-height resolves
    • Before the variable is set, the invisible input inherited its font-size — and when that inherited size was under 16px, iOS Safari zoomed the whole page on focus or back-navigation.
  • fix(input): clear pending sync timeouts on unmount
    • The autofill/selection sync timeouts could fire after unmount, causing state updates on an unmounted component — noisy act() warnings and flaky CI test runs.
  • feat(input): add nonce prop
    • Applied to the <style> tag the library injects, so a style-src Content-Security-Policy that requires nonces no longer blocks it.
  • fix(input): use the guarded input reference inside the selectionchange listener
    • Fixes a null is not an object (evaluating 'setSelectionRange') crash when the listener fired while the ref was already null.
  • fix(input): opt the container out of browser translation
    • Chrome's translator rewrote the slots' text nodes (wrapping them in <font> elements), crashing React on the next re-render — easiest to hit with alphanumeric codes under an active page translation. The container now carries translate="no"; a one-time code is never meaningful to translate.
  • fix(input): log CSS rule insertion failures as warnings, not errors
    • Some environments reject individual cosmetic selectors (:autofill in older Android WebViews, for instance). Nothing breaks when that happens, but the console.error was captured by Sentry and similar tools as if the application had failed. Same message, warning level.
  • chore(types): narrow onComplete to (value: string) => unknown

... (truncated)

Changelog

Sourced from input-otp's changelog.

[1.5.0]

Promotes the safe 1.5.0-beta.2 code without functional changes. Everything in this release is backwards-compatible: no public type changes and no behavior changes beyond the bug fixes below. Two beta.1 experiments are deliberately excluded — the iOS native-selection workaround (the thin native selection artifact remains a known cosmetic limitation) and the onComplete type narrowing, which returns in 2.0.0 as a documented breaking change.

  • fix(input): reserve the password manager badge gutter only where it fits
  • fix(input): disable spellcheck by default
  • fix(input): feature-detect ResizeObserver before observing
  • fix(input): use a 16px fallback until --root-height resolves, preventing iOS focus zoom
  • fix(input): clear pending synchronization timeouts on unmount
  • feat(input): add a nonce prop for Content-Security-Policy support
  • fix(input): guard the input reference used by the selectionchange listener
  • fix(input): opt the container out of browser translation
  • fix(input): report cosmetic CSS rule failures as warnings instead of errors
  • docs: document the stable iOS selection behavior and its cosmetic limitation

[1.5.0-beta.2]

Safe release candidate for 1.5.0. This release withdraws the experimental iOS native-selection workaround from 1.5.0-beta.1 after compatibility review. The edit menu, paste, typing, selection and focus behavior return to the proven 1.4.x implementation; the thin native selection artifact remains a known iOS limitation.

It also withdraws the onComplete type narrowing from 1.5.0-beta.1. Although type-level only, it can fail compilation of existing handlers typed with extra or non-string parameters (a common example is passing react-hook-form's handleSubmit(onSubmit) directly), which makes it a breaking change under semver. It will return in 2.0.0 with a documented migration path.

  • revert(input): withdraw the experimental iOS native-selection workaround from 1.5.0-beta.1
  • revert(types): withdraw the onComplete narrowing from 1.5.0-beta.1, deferring it to 2.0.0
  • docs: align the mobile and edge-case documentation with the stable candidate
  • test: verify focus, typing, editing, deletion, paste, Select All → Paste and the native edit menu on iOS 18.0 and 26.5 simulators

[1.5.0-beta.1]

Deprecated experimental release. It introduced an iOS native-selection workaround that moved and scaled the underlying input, and narrowed the onComplete type in a way that can break compilation of existing apps. Both were withdrawn in 1.5.0-beta.2 and are not planned for 1.5.0 stable. Existing installs remain reproducible, but new beta users should use 1.5.0-beta.2 or later.

[1.5.0-beta.0]

Prepared but not published. Its safe changes are included in 1.5.0-beta.2.

  • fix(input): reserve the password manager badge gutter only where it fits
    • Once a badge was detected, the input grew 40px past the container to push the badge off the last slot — and the only guard was the distance to the viewport's right edge. Inside a constrained scroll container (a card, a modal) that overhang registered as scrollable overflow: a horizontal scrollbar appeared and shifted the whole layout. The space check now measures the nearest ancestor that constrains horizontal overflow (scroll containers, overflow: hidden/clip ancestors, the container itself, and the real viewport width) and skips the push when the gutter doesn't fit; the badge then stays over the last slot, exactly as with pushPasswordManagerStrategy="none". Nothing is ever clipped, so extensions keep rendering their badges.
  • fix(input): disable spellcheck by default
    • Browsers would mark a filled code as a spelling error and underline it. spellCheck now defaults to false; passing your own spellCheck prop still overrides it.
  • fix(input): feature-detect ResizeObserver before observing
    • Browsers without ResizeObserver (e.g. iOS Safari <13.4) crashed on mount. When the observer is unavailable, the root height is now simply measured once on mount.
  • fix(input): fall back to 16px font-size until --root-height resolves
    • Before the variable is set, the invisible input inherited its font-size — and when that inherited size was under 16px, iOS Safari zoomed the whole page on focus or back-navigation.
  • fix(input): clear pending sync timeouts on unmount
    • The autofill/selection sync timeouts could fire after unmount, causing state updates on an unmounted component — noisy act() warnings and flaky CI test runs.
  • feat(input): add nonce prop
    • Applied to the <style> tag the library injects, so a style-src Content-Security-Policy that requires nonces no longer blocks it.
  • fix(input): use the guarded input reference inside the selectionchange listener
    • Fixes a null is not an object (evaluating 'setSelectionRange') crash when the listener fired while the ref was already null.
  • fix(input): opt the container out of browser translation
    • Chrome's translator rewrote the slots' text nodes (wrapping them in <font> elements), crashing React on the next re-render — easiest to hit with alphanumeric codes under an active page translation. The container now carries Description has been truncated

@dependabot
chore(deps): bump the bun group across 1 directory with 30 updates
83a87cb 
Bumps the bun group with 30 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@ai-sdk/react](https://github.com/vercel/ai/tree/HEAD/packages/react) | `4.0.47` | `4.0.110` |
| [@base-ui/react](https://github.com/mui/base-ui/tree/HEAD/packages/react) | `1.6.0` | `1.8.0` |
| [@shadcn/helpers](https://github.com/shadcn-ui/ui/tree/HEAD/packages/helpers) | `0.1.0` | `0.2.0` |
| [@shadcn/react](https://github.com/shadcn-ui/ui/tree/HEAD/packages/react) | `0.3.0` | `0.3.1` |
| [@tabler/icons-react](https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react) | `3.46.0` | `3.47.0` |
| [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `7.0.44` | `7.0.107` |
| [cn](https://github.com/shadcn-ui/cn/tree/HEAD/packages/cn) | `0.2.6` | `0.3.0` |
| [fumadocs-core](https://github.com/fuma-nama/fumadocs) | `16.14.0` | `16.15.12` |
| [fumadocs-mdx](https://github.com/fuma-nama/fumadocs) | `15.2.1` | `15.4.3` |
| [input-otp](https://github.com/guilhermerodz/input-otp/tree/HEAD/packages/input-otp) | `1.4.2` | `1.5.0` |
| [motion](https://github.com/motiondivision/motion) | `12.43.0` | `13.4.0` |
| [next](https://github.com/vercel/next.js) | `16.2.11` | `16.3.5` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.4` | `19.3.0` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.4` | `19.3.0` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.4` | `19.3.0` |
| [react-resizable-panels](https://github.com/bvaughn/react-resizable-panels) | `4.12.2` | `4.13.1` |
| [recharts](https://github.com/recharts/recharts) | `3.8.0` | `3.10.1` |
| [shadcn](https://github.com/shadcn-ui/ui/tree/HEAD/packages/shadcn) | `4.16.0` | `4.21.0` |
| [shiki](https://github.com/shikijs/shiki/tree/HEAD/packages/shiki) | `3.23.0` | `4.4.3` |
| [zbsearch](https://github.com/micheleriva/zbsearch) | `3.3.4` | `4.0.0` |
| [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.6.5` |
| [@changesets/changelog-github](https://github.com/changesets/changesets/tree/HEAD/packages/changelog-github) | `1.0.0` | `1.0.1` |
| [@changesets/cli](https://github.com/changesets/changesets/tree/HEAD/packages/cli) | `3.0.1` | `3.0.3` |
| [@types/bun](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/bun) | `1.3.14` | `1.4.2` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `20.19.43` | `26.6.2` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.4` | `19.3.0` |
| [eslint](https://github.com/eslint/eslint) | `9.39.5` | `10.11.0` |
| [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.2.11` | `16.3.5` |
| [prettier](https://github.com/prettier/prettier) | `3.9.6` | `3.9.8` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `7.0.2` |



Updates `@ai-sdk/react` from 4.0.47 to 4.0.110
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/react@4.0.110/packages/react)

Updates `@base-ui/react` from 1.6.0 to 1.8.0
- [Release notes](https://github.com/mui/base-ui/releases)
- [Changelog](https://github.com/mui/base-ui/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mui/base-ui/commits/v1.8.0/packages/react)

Updates `@shadcn/helpers` from 0.1.0 to 0.2.0
- [Release notes](https://github.com/shadcn-ui/ui/releases)
- [Changelog](https://github.com/shadcn-ui/ui/blob/main/packages/helpers/CHANGELOG.md)
- [Commits](https://github.com/shadcn-ui/ui/commits/@shadcn/helpers@0.2.0/packages/helpers)

Updates `@shadcn/react` from 0.3.0 to 0.3.1
- [Release notes](https://github.com/shadcn-ui/ui/releases)
- [Changelog](https://github.com/shadcn-ui/ui/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/shadcn-ui/ui/commits/@shadcn/react@0.3.1/packages/react)

Updates `@tabler/icons-react` from 3.46.0 to 3.47.0
- [Release notes](https://github.com/tabler/tabler-icons/releases)
- [Commits](https://github.com/tabler/tabler-icons/commits/v3.47.0/packages/icons-react)

Updates `ai` from 7.0.44 to 7.0.107
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@7.0.107/packages/ai)

Updates `cn` from 0.2.6 to 0.3.0
- [Release notes](https://github.com/shadcn-ui/cn/releases)
- [Changelog](https://github.com/shadcn-ui/cn/blob/main/packages/cn/CHANGELOG.md)
- [Commits](https://github.com/shadcn-ui/cn/commits/cn@0.3.0/packages/cn)

Updates `fumadocs-core` from 16.14.0 to 16.15.12
- [Release notes](https://github.com/fuma-nama/fumadocs/releases)
- [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs@16.14.0...fumadocs@16.15.12)

Updates `fumadocs-mdx` from 15.2.1 to 15.4.3
- [Release notes](https://github.com/fuma-nama/fumadocs/releases)
- [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs-mdx@15.2.1...fumadocs-mdx@15.4.3)

Updates `input-otp` from 1.4.2 to 1.5.0
- [Release notes](https://github.com/guilhermerodz/input-otp/releases)
- [Changelog](https://github.com/guilhermerodz/input-otp/blob/master/CHANGELOG.md)
- [Commits](https://github.com/guilhermerodz/input-otp/commits/v1.5.0/packages/input-otp)

Updates `motion` from 12.43.0 to 13.4.0
- [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md)
- [Commits](motiondivision/motion@v12.43.0...v13.4.0)

Updates `next` from 16.2.11 to 16.3.5
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.2.11...v16.3.5)

Updates `react` from 19.2.4 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react)

Updates `@types/react` from 19.2.18 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-dom` from 19.2.4 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom)

Updates `@types/react-dom` from 19.2.4 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `react-resizable-panels` from 4.12.2 to 4.13.1
- [Release notes](https://github.com/bvaughn/react-resizable-panels/releases)
- [Changelog](https://github.com/bvaughn/react-resizable-panels/blob/main/CHANGELOG.md)
- [Commits](bvaughn/react-resizable-panels@4.12.2...4.13.1)

Updates `recharts` from 3.8.0 to 3.10.1
- [Release notes](https://github.com/recharts/recharts/releases)
- [Changelog](https://github.com/recharts/recharts/blob/main/CHANGELOG.md)
- [Commits](recharts/recharts@v3.8.0...v3.10.1)

Updates `shadcn` from 4.16.0 to 4.21.0
- [Release notes](https://github.com/shadcn-ui/ui/releases)
- [Changelog](https://github.com/shadcn-ui/ui/blob/main/packages/shadcn/CHANGELOG.md)
- [Commits](https://github.com/shadcn-ui/ui/commits/shadcn@4.21.0/packages/shadcn)

Updates `shiki` from 3.23.0 to 4.4.3
- [Release notes](https://github.com/shikijs/shiki/releases)
- [Commits](https://github.com/shikijs/shiki/commits/v4.4.3/packages/shiki)

Updates `zbsearch` from 3.3.4 to 4.0.0
- [Release notes](https://github.com/micheleriva/zbsearch/releases)
- [Commits](micheleriva/zbsearch@v3.3.4...v4.0.0)

Updates `zod` from 4.4.3 to 4.6.5
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.4.3...v4.6.5)

Updates `@changesets/changelog-github` from 1.0.0 to 1.0.1
- [Release notes](https://github.com/changesets/changesets/releases)
- [Changelog](https://github.com/changesets/changesets/blob/main/packages/changelog-github/CHANGELOG.md)
- [Commits](https://github.com/changesets/changesets/commits/@changesets/changelog-github@1.0.1/packages/changelog-github)

Updates `@changesets/cli` from 3.0.1 to 3.0.3
- [Release notes](https://github.com/changesets/changesets/releases)
- [Changelog](https://github.com/changesets/changesets/blob/main/packages/cli/CHANGELOG.md)
- [Commits](https://github.com/changesets/changesets/commits/@changesets/cli@3.0.3/packages/cli)

Updates `@types/bun` from 1.3.14 to 1.4.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/bun)

Updates `@types/node` from 20.19.43 to 26.6.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/react` from 19.2.18 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@types/react-dom` from 19.2.4 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `eslint` from 9.39.5 to 10.11.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v9.39.5...v10.11.0)

Updates `eslint-config-next` from 16.2.11 to 16.3.5
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](https://github.com/vercel/next.js/commits/v16.3.5/packages/eslint-config-next)

Updates `prettier` from 3.9.6 to 3.9.8
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.6...3.9.8)

Updates `typescript` from 5.9.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v5.9.3...v7.0.2)

---
updated-dependencies:
- dependency-name: "@ai-sdk/react"
  dependency-version: 4.0.110
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bun
- dependency-name: "@base-ui/react"
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: "@shadcn/helpers"
  dependency-version: 0.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: "@shadcn/react"
  dependency-version: 0.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bun
- dependency-name: "@tabler/icons-react"
  dependency-version: 3.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: ai
  dependency-version: 7.0.107
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bun
- dependency-name: cn
  dependency-version: 0.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: fumadocs-core
  dependency-version: 16.15.12
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: fumadocs-mdx
  dependency-version: 15.4.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: input-otp
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: motion
  dependency-version: 13.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: bun
- dependency-name: next
  dependency-version: 16.3.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: react
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: "@types/react"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: react-dom
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: "@types/react-dom"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: react-resizable-panels
  dependency-version: 4.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: recharts
  dependency-version: 3.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: shadcn
  dependency-version: 4.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: shiki
  dependency-version: 4.4.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: bun
- dependency-name: zbsearch
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: bun
- dependency-name: zod
  dependency-version: 4.6.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: "@changesets/changelog-github"
  dependency-version: 1.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bun
- dependency-name: "@changesets/cli"
  dependency-version: 3.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bun
- dependency-name: "@types/bun"
  dependency-version: 1.4.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: "@types/node"
  dependency-version: 26.6.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: bun
- dependency-name: "@types/react"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: "@types/react-dom"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: eslint
  dependency-version: 10.11.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: bun
- dependency-name: eslint-config-next
  dependency-version: 16.3.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: prettier
  dependency-version: 3.9.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bun
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: bun
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 25, 2026
@dependabot
dependabot Bot requested a review from initred as a code owner September 25, 2026 21:07
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 25, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 9, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 9, 2026
@dependabot
dependabot Bot deleted the dependabot/bun/bun-ecca31a098 branch October 9, 2026 21:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@initred initred Awaiting requested review from initred initred is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants