fix(deps): update bun minor and patch dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@base-ui/react (source)	^1.6.0 → ^1.7.0
@better-auth/api-key (source)	1.6.23 → 1.6.27
@better-auth/passkey (source)	^1.6.23 → ^1.6.27
@better-auth/sso (source)	^1.6.23 → ^1.6.27
@better-auth/utils	0.4.2 → 0.5.0
@cloudflare/vite-plugin (source)	^1.45.1 → ^1.52.0
@effect/language-service	^0.87.0 → ^0.87.2
@fontsource-variable/jetbrains-mono (source)	^5.2.8 → ^5.3.0
@hono/standard-validator (source)	^0.3.0 → ^0.4.0
@hookform/resolvers (source)	^5.4.0 → ^5.7.1
@playwright/test (source)	^1.61.1 → ^1.62.1
@radix-ui/react-alert-dialog (source)	^1.1.19 → ^1.1.23
@radix-ui/react-checkbox (source)	^1.3.7 → ^1.3.11
@radix-ui/react-dialog (source)	^1.1.19 → ^1.1.23
@radix-ui/react-dropdown-menu (source)	^2.1.20 → ^2.1.24
@radix-ui/react-hover-card (source)	^1.1.19 → ^1.1.23
@radix-ui/react-label (source)	^2.1.11 → ^2.1.15
@radix-ui/react-progress (source)	^1.1.12 → ^1.1.16
@radix-ui/react-scroll-area (source)	^1.2.14 → ^1.2.18
@radix-ui/react-select (source)	^2.3.3 → ^2.3.7
@radix-ui/react-separator (source)	^1.1.11 → ^1.1.15
@radix-ui/react-slot (source)	^1.3.0 → ^1.3.3
@radix-ui/react-switch (source)	^1.3.3 → ^1.3.7
@radix-ui/react-tabs (source)	^1.1.17 → ^1.1.21
@radix-ui/react-tooltip (source)	^1.2.12 → ^1.2.16
@scalar/hono-api-reference (source)	^0.11.11 → ^0.11.13
@tanstack/devtools-vite (source)	^0.8.1 → ^0.8.3
@tanstack/react-devtools (source)	^0.10.8 → ^0.10.10
@tanstack/react-query (source)	^5.101.2 → ^5.101.4
@tanstack/react-query-devtools (source)	^5.101.2 → ^5.101.4
@tanstack/react-router (source)	^1.170.18 → ^1.170.27
@tanstack/react-router-devtools (source)	^1.167.0 → ^1.167.1
@tanstack/react-start (source)	^1.168.30 → ^1.168.44
@tanstack/router-plugin (source)	^1.168.22 → ^1.168.30
@testing-library/user-event	^14.6.1 → ^14.6.4
@types/node (source)	^26.1.1 → ^26.2.0
@types/react (source)	^19.2.17 → ^19.2.18
@types/react-dom (source)	^19.2.3 → ^19.2.4
@types/semver (source)	^7.7.1 → ^7.8.0
@vitejs/plugin-react (source)	^6.0.3 → ^6.0.5
better-auth (source)	^1.6.23 → ^1.6.27
cron-parser	^5.6.2 → ^5.8.1
drizzle-kit (source)	^1.0.0-rc.4-ca0f029 → ^1.0.0-rc.5-ab785fc
drizzle-orm (source)	1.0.0-rc.4-5d5b77c → 1.0.0-rc.5-ab785fc
effect (source)	^3.22.0 → ^3.22.1
electron	^43.1.1 → ^43.4.0
es-toolkit (source)	^1.49.0 → ^1.50.0
esbuild	^0.28.1 → ^0.28.2
fumadocs-core	^16.11.5 → ^16.14.3
fumadocs-mdx	^15.2.0 → ^15.2.3
fumadocs-ui	^16.11.5 → ^16.14.3
happy-dom	^20.11.0 → ^20.11.2
hono (source)	^4.12.31 → ^4.13.1
ipaddr.js	^2.4.0 → ^2.5.0
lucide-react (source)	^1.25.0 → ^1.31.0
oxfmt (source)	0.59.0 → 0.63.0
oxlint (source)	1.73.0 → 1.78.0
oxlint-tsgolint	0.24.0 → 0.25.0
react (source)	^19.2.7 → ^19.2.8
react-dom (source)	^19.2.7 → ^19.2.8
react-hook-form (source)	^7.82.0 → ^7.85.0
recharts	3.9.2 → 3.10.1
shadcn (source)	^4.13.1 → ^4.17.0
sonner (source)	^2.0.7 → ^2.0.8
vite (source)	^8.1.5 → ^8.2.1
vite-plus (source)	^0.2.5 → ^0.2.9
wrangler (source)	^4.112.0 → ^4.122.0

---

Release Notes

mui/base-ui (@​base-ui/react)

v1.7.0

Compare Source

Aug 4, 2026

General changes

• Restore visible focus after keyboard close in Safari and Firefox (#​5093) by @​lyzno1
• Type render callback props based on the rendered element (#​5104) by @​atomiks
• Reduce popup bundle size (#​5233) by @​atomiks
• Reduce store bundle size (#​5250) by @​atomiks
• Keep unpositioned popups at the viewport origin (#​5299) by @​flaviendelangle
• Correct layout and passive effect timing (#​5337) by @​atomiks
• Remove redundant lifecycle synchronization (#​5341) by @​atomiks
• Prevent stale cleanup from clearing registered part IDs (#​5340) by @​atomiks
• Complete popup unmounting after a canceled exit transition (#​5401) by @​atomiks
• Fix rendered trigger ID ownership (#​5110) by @​atomiks
• Prevent unwanted flip with capped scrollable content (#​5120) by @​atomiks
• Fix collisionPadding off-by-one on the biased side (#​5143) by @​atomiks
• Reduce shared popup bundle size (#​5192) by @​atomiks
• Mount popup subtrees synchronously when opening in React 17 (#​5309) by @​atomiks
• Fix auto-resize origin for left-anchored popups (#​5370) by @​sai6855
• Avoid redundant re-renders during lazy flipping (#​5372) by @​mdm317
• Strip implementation-only types from published .d.ts files (#​5165) by @​michaldudak
• Fix usePreviousValue equality comparison (#​5264) by @​lyzno1

Accordion

• Remove the implicit dir attribute from <Accordion.Root> (#​5117) by @​chuganzy

Alert Dialog

• Prevent <AlertDialog.Root> from reopening after remounting with a reused handle (#​5109) by @​michaldudak

Autocomplete

• Respect locale when filtering (#​5195) by @​atomiks
• Add input-press to change event details (#​5356) by @​chuganzy
• Add cancel-open to change event details (#​5376) by @​chuganzy
• Reset list scroll position on filter (#​5231) by @​atomiks
• Remove dead code and deduplicate handlers (#​5194) by @​atomiks
• Fix listbox separator semantics (#​5399) by @​sarthakmalik0810

Avatar

• Show <Avatar.Fallback> immediately when delay={0} (#​5147) by @​chuganzy

Button

• Fix keyboard click handling for custom elements (#​4838) by @​atomiks

Checkbox

• Remove redundant validation input ref (#​5188) by @​nami8824
• Stop internal input clicks from reaching ancestors (#​5176) by @​atomiks
• Reduce bundle size (#​5223) by @​atomiks

Checkbox Group

• Focus invalid checkbox (#​5216) by @​atomiks
• Align form values with native submission (#​5218) by @​atomiks
• Reduce bundle size (#​5223) by @​atomiks

Combobox

• Add input-press to change event details (#​5356) by @​chuganzy
• Add cancel-open to change event details (#​5376) by @​chuganzy
• Stop filtering grouped items after limit (#​5086) by @​lyzno1
• Remove leaky value registry (#​5198) by @​atomiks
• Set initial highlight in inline combobox (#​5230) by @​atomiks
• Return highlight to selected item on query clear (#​5232) by @​atomiks
• Expose expanded state for inline comboboxes (#​5332) by @​sarthakmalik0810
• Keep portalled popup content open (#​5334) by @​obeattie
• Reset list scroll position on filter (#​5231) by @​atomiks
• Fix hovered item stealing highlight when the list scrolls in Safari (#​5265) by @​arikchakma
• Inherit the disabled state from <Combobox.Root> in <Combobox.Item> (#​5365) by @​chuganzy
• Widen trigger slip-out release tolerance (#​5159) by @​atomiks
• Remove dead code and deduplicate handlers (#​5194) by @​atomiks
• Fix listbox separator semantics (#​5399) by @​sarthakmalik0810

Composite

• Fix nested list reorder detection (#​5156) by @​jjenzz
• Always skip natively disabled items during list navigation (#​5185) by @​atomiks
• Fix scroll alignment for RTL direction in scrollIntoViewIfNeeded (#​5234) by @​sai6855
• Simplify keyboard bookkeeping (#​5249) by @​atomiks

Dialog

• Fix touch outside-press dismissal without a backdrop (#​5096) by @​atomiks
• Prevent <Dialog.Root> from reopening after remounting with a reused handle (#​5109) by @​michaldudak
• Fix scroll lock handoff with external overlays (#​4665) by @​atomiks
• Reduce bundle size (#​5193) by @​atomiks

Drawer

• Prevent <Drawer.Root> from reopening after remounting with a reused handle (#​5109) by @​michaldudak
• Fix unreliable swipe-to-open gestures (#​5105) by @​atomiks
• Fix popup flashing fully open for a frame on swipe area re-grab (#​5112) by @​atomiks
• Deduplicate swipe math to reduce bundle size (#​5181) by @​atomiks
• Fix scroll handling when focus moves while the virtual keyboard is open (#​5179) by @​atomiks
• Fix cross-axis scroll blocked on iOS below the touchmove slop (#​5257) by @​atomiks
• Fix snap point jump when pinned pointer moves leave the drag offset unchanged (#​5308) by @​atomiks
• Fix Shadow DOM swipe gestures (#​5360) by @​atomiks

Field

• Keep invalid state on disabled fields (#​5116) by @​atomiks
• Reduce bundle size (#​5225) by @​atomiks
• Fix data-dirty tracking for null-valued controls (#​5290) by @​sai6855

Fieldset

• Reduce bundle size (#​5225) by @​atomiks

Form

• Reduce bundle size (#​5225) by @​atomiks
• Focus the first invalid field in document order (#​5287) by @​atomiks

Menu

• Ignore pinch-zoom shifting (#​4485) by @​atomiks
• Cancel stale submenu hover-open when Chrome drops mouseleave (#​5153) by @​atomiks
• Fix exit animation not running on uncheck of item (#​5252) by @​sai6855
• Fix duplicate onOpenChange calls when closing a submenu (#​5178) by @​atomiks
• Fix VoiceOver announcement when opening a submenu (#​5342) by @​atomiks
• Propagate disabled state to items (#​5363) by @​chuganzy
• Open submenus on Android TalkBack press (#​5384) by @​atomiks
• Prevent <Menu.Root> from reopening after remounting with a reused handle (#​5149) by @​michaldudak
• Widen trigger slip-out release tolerance (#​5159) by @​atomiks

Meter

• Format clamped values (#​5409) by @​atomiks
• Reduce bundle size (#​5224) by @​atomiks

Navigation Menu

• Fix frozen menu when the open trigger unmounts (#​5240) by @​DreierF
• Ignore pinch-zoom shifting (#​4485) by @​atomiks

Number Field

• Fix keyboard editing with multi-character format symbols (#​5111) by @​atomiks
• Reduce bundle size (#​5220) by @​atomiks

OTP Field

• Keep focus on the invalid field when autoSubmit is blocked (#​5089) by @​lyzno1

Popover

• Prevent <Popover.Root> from reopening after remounting with a reused handle (#​5149) by @​michaldudak
• Reduce bundle size (#​5193) by @​atomiks

Preview Card

• Prevent <PreviewCard.Root> from reopening after remounting with a reused handle (#​5149) by @​michaldudak

Progress

• Fix custom min/max semantics to match the indicator (#​5095) by @​atomiks
• Reduce bundle size (#​5224) by @​atomiks

Radio Group

• Remove unnecessary ARIA attributes from <Radio.Root> (#​5213) by @​sai6855
• Stop internal input clicks from reaching ancestors (#​5176) by @​atomiks
• Align form values with native submission (#​5238) by @​atomiks
• Reduce bundle size (#​5223) by @​atomiks

Scroll Area

• Fix thumb-drag divide-by-zero and per-scroll re-render (#​5099) by @​atomiks
• Fix scrollbar visibility during touch scrolling on iOS (#​5157) by @​atomiks
• Add WebKit overscroll feedback to <ScrollArea.Thumb> (#​5145) by @​atomiks
• Reduce bundle size (#​5217) by @​atomiks
• Prevent scroll snapping while dragging the thumb (#​5259) by @​atomiks
• End thumb drag when the primary button is no longer held (#​5374) by @​atomiks

Select

• Fix hovered item stealing highlight when the list scrolls in Safari (#​5265) by @​arikchakma
• Inherit the disabled state from <Select.Root> in <Select.Item> (#​5365) by @​chuganzy
• Widen trigger slip-out release tolerance (#​5159) by @​atomiks
• Do not force-mount the popup on programmatic value changes (#​5119) by @​atomiks
• Remove dead code and deduplicate handlers (#​5194) by @​atomiks
• Fix listbox separator semantics (#​5399) by @​sarthakmalik0810

Slider

• Fix assorted issues (#​5097) by @​atomiks
• Reduce bundle size (#​5222) by @​atomiks
• Exclude the prehydration script from client bundles (#​5003) by @​michaldudak

Switch

• Stop internal input clicks from reaching ancestors (#​5176) by @​atomiks
• Reduce bundle size (#​5223) by @​atomiks

Tabs

• Position pre-hydration indicator inside streamed Suspense (#​5171) by @​brijeshb42
• Exclude the prehydration script from client bundles (#​5003) by @​michaldudak
• Reduce bundle size (#​5221) by @​atomiks

Toast

• Fix remaining toast timer calculation (#​5261) by @​sai6855
• Reduce bundle size (#​5219) by @​atomiks
• Render content passed through the render prop in <Toast.Title>, <Toast.Description>, and <Toast.Action> (#​5210) by @​m2na7
• Fix re-adding a closing toast (#​5258) by @​atomiks
• Fix swipe direction locking for two-axis swipes (#​5295) by @​sai6855
• Fix <Toast.Provider> prop effect ordering (#​5338) by @​atomiks

Toggle Group

• Reduce bundle size (#​5224) by @​atomiks

Toolbar

• Reduce bundle size (#​5221) by @​atomiks

Tooltip

• Prevent <Tooltip.Root> from reopening after remounting with a reused handle (#​5149) by @​michaldudak

All contributors of this release in alphabetical order: @​arikchakma, @​atomiks, @​bernardobelchior, @​brijeshb42, @​chuganzy, @​DiegoAndai, @​DreierF, @​flaviendelangle, @​jjenzz, @​lyzno1, @​m2na7, @​mdm317, @​michaldudak, @​nami8824, @​obeattie, @​sai6855, @​sarthakmalik0810

better-auth/better-auth (@​better-auth/api-key)

v1.6.27

Compare Source

Patch Changes

• Updated dependencies [2ae491e, 90b5093]:
  • @​better-auth/core@​1.6.27
  • better-auth@​1.6.27

v1.6.26

Compare Source

Patch Changes

• Updated dependencies [9ede805, 5a811f1, d8327f1, e2c73fb, af50c45, 701cd43, a30e274, e7b0eba, 2b4a14f, 7552a3b, ea38fca, a03e4c1]:
  • better-auth@​1.6.26
  • @​better-auth/core@​1.6.26

v1.6.25

Compare Source

Patch Changes

• Updated dependencies [5124c34, 0ffd1fb, 7439359]:
  • better-auth@​1.6.25
  • @​better-auth/core@​1.6.25

v1.6.24

Compare Source

Patch Changes

• Updated dependencies [03dc5a0, 7508940, bae7198, ef4d273, 6758231, 99dbdd7, 086ca91, 8f2dedd, 4e685ee, [3bf0e49](https://redirect.github.com/better-auth/better-auth

✂ Note

PR body was truncated to here.

[socket-security]

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert  (click "▶" to expand/collapse)
Warn		Obfuscated code: npm effect is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: apps/agent/package.json → npm/effect@3.22.1 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/effect@3.22.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​happy-dom@​20.11.0 ⏵ 20.11.2			+1	+4
	npm/​@​radix-ui/​react-label@​2.1.11 ⏵ 2.1.15	+1		+1	-1
	npm/​@​radix-ui/​react-separator@​1.1.11 ⏵ 1.1.15	+1		+1	-1
	npm/​@​radix-ui/​react-progress@​1.1.12 ⏵ 1.1.16	+1		+1	-1
	npm/​@​radix-ui/​react-slot@​1.3.0 ⏵ 1.3.3	+1		+1
	npm/​@​radix-ui/​react-tabs@​1.1.17 ⏵ 1.1.21	+1		+1	-1
	npm/​@​tanstack/​react-query-devtools@​5.101.2 ⏵ 5.101.4	+1			+2
	npm/​@​radix-ui/​react-alert-dialog@​1.1.19 ⏵ 1.1.23				+1
	npm/​@​radix-ui/​react-hover-card@​1.1.19 ⏵ 1.1.23				-1
	npm/​@​radix-ui/​react-switch@​1.3.3 ⏵ 1.3.7	+1		+1	-1
	npm/​@​radix-ui/​react-checkbox@​1.3.7 ⏵ 1.3.11	+1		+1	-1
	npm/​@​radix-ui/​react-dropdown-menu@​2.1.20 ⏵ 2.1.24				-1
	npm/​@​radix-ui/​react-dialog@​1.1.19 ⏵ 1.1.23			+1	-1
	npm/​@​radix-ui/​react-tooltip@​1.2.12 ⏵ 1.2.16			+1	-1
	npm/​@​radix-ui/​react-scroll-area@​1.2.14 ⏵ 1.2.18	+1		+1	-1
	npm/​fumadocs-mdx@​15.2.0 ⏵ 15.2.3	+1		+1	+2
	npm/​@​radix-ui/​react-select@​2.3.3 ⏵ 2.3.7				-1
	npm/​@​tanstack/​react-router-devtools@​1.167.0 ⏵ 1.167.1			+6
	npm/​@​types/​semver@​7.7.1 ⏵ 7.8.0			+1	+2
	npm/​@​types/​react-dom@​19.2.3 ⏵ 19.2.4	+1		+1
	npm/​@​tanstack/​devtools-vite@​0.8.1 ⏵ 0.8.3	+1		-3	+1
	npm/​fumadocs-core@​16.11.5 ⏵ 16.14.3				+1
	npm/​fumadocs-ui@​16.11.5 ⏵ 16.14.3	+1			+1
	npm/​@​better-auth/​api-key@​1.6.23 ⏵ 1.6.27	+24		+1	+1
	npm/​@​better-auth/​sso@​1.6.23 ⏵ 1.6.27	+1		+1
	npm/​@​tanstack/​router-plugin@​1.168.22 ⏵ 1.168.30				+1
	npm/​@​types/​react@​19.2.17 ⏵ 19.2.18	+1		+1
	npm/​vite-plus@​0.2.5 ⏵ 0.2.9			+1	+1
	npm/​sonner@​2.0.7 ⏵ 2.0.8			+1	-6
	npm/​lucide-react@​1.25.0 ⏵ 1.31.0	+1		+1	+1
	npm/​@​types/​node@​26.1.1 ⏵ 26.2.0	+1		+1
	npm/​effect@​3.22.0 ⏵ 3.22.1	+3
See 32 more rows in the dashboard

View full report

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.