chore(deps): bump the desktop group across 1 directory with 13 updates

[dependabot]

Bumps the desktop group with 12 updates in the / directory:

Package	From	To
@tailwindcss/vite	4.3.2	4.3.3
better-sqlite3	12.11.1	13.0.1
cloakbrowser	0.4.5	0.5.1
lucide-react	0.562.0	1.26.0
radix-ui	1.6.0	1.6.5
react	19.2.7	19.2.8
react-dom	19.2.7	19.2.8
@types/node	25.9.4	26.1.1
@vitejs/plugin-react	5.2.0	6.0.4
electron	39.8.10	43.2.0
typescript	6.0.3	7.0.2
vite	7.3.6	8.1.5

Updates @tailwindcss/vite from 4.3.2 to 4.3.3

Release notes

Sourced from @​tailwindcss/vite's releases.

v4.3.3

Fixed

• Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#20297)
• Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF] → bg-white) (#20298)
• Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#20292)
• Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#20299)
• Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#20302)
• Parse selectors like [data-foo]div as two selectors instead of one (#20303)
• Ensure @tailwindcss/postcss rebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#20310)
• Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in @tailwindcss/browser and Tailwind Play (#20124)
• Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like oklch (#20314)
• Ensure --spacing(0) is optimized to 0px instead of 0 so it remains a <length> when used in calc(…) (#20319)
• Load @parcel/watcher only when needed in @tailwindcss/cli --watch mode, so one-off builds and --watch --poll work when @parcel/watcher can't be loaded (#20325)
• Use explicit platform fonts instead of system-ui and ui-sans-serif so CJK text respects the page's lang attribute on Windows (#20318)
• Prevent @tailwindcss/upgrade from rewriting ignored files when run from a subdirectory (#20329)
• Ensure earlier @source rules pointing to nested files are scanned when later @source rules point to files in parent folders (#20335)
• Prevent @tailwindcss/vite from triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#20336)

Changelog

Sourced from @​tailwindcss/vite's changelog.

[4.3.3] - 2026-07-16

Fixed

• Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#20297)
• Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF] → bg-white) (#20298)
• Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#20292)
• Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#20299)
• Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#20302)
• Parse selectors like [data-foo]div as two selectors instead of one (#20303)
• Ensure @tailwindcss/postcss rebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#20310)
• Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in @tailwindcss/browser and Tailwind Play (#20124)
• Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like oklch (#20314)
• Ensure --spacing(0) is optimized to 0px instead of 0 so it remains a <length> when used in calc(…) (#20319)
• Load @parcel/watcher only when needed in @tailwindcss/cli --watch mode, so one-off builds and --watch --poll work when @parcel/watcher can't be loaded (#20325)
• Use explicit platform fonts instead of system-ui and ui-sans-serif so CJK text respects the page's lang attribute on Windows (#20318)
• Prevent @tailwindcss/upgrade from rewriting ignored files when run from a subdirectory (#20329)
• Ensure earlier @source rules pointing to nested files are scanned when later @source rules point to files in parent folders (#20335)
• Prevent @tailwindcss/vite from triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#20336)

Commits

• c2b24dd 4.3.3 (#20334)
• bdcd708 Don't trigger a full page reload for scanned files that Vite processes as mod...
• See full diff in compare view

Updates better-sqlite3 from 12.11.1 to 13.0.1

Release notes

Sourced from better-sqlite3's releases.

v13.0.1

Full Changelog: WiseLibs/better-sqlite3@v13.0.0...v13.0.1

Fixed a regression in parameter binding where it would be overly strict and reject plain objects from other realms (e.g., in jest tests).

v13.0.0

Version 13.0.0 marks a major milestone, as it's the first version of better-sqlite3 to run on the N-API. This means prebuilt binaries should theoretically work across different versions of Node.js and Electron, and perhaps even other runtimes like Bun. As a result, we've removed the deprecated prebuild-install dependency, and now prebuilt binaries are published directly with the better-sqlite3 code itself. If your platform/architecture doesn't have a prebuilt binary, it should compile during install as before.

What's Changed

• Refactored codebase to use node-addon-api by @​JoshuaWise in WiseLibs/better-sqlite3#1498
• Added a new db.explain() method, for running EXPLAIN queries without needing to supply bound parameters.
• Added a new preparedStatement.toString() method, for getting the expanded SQL of a prepared statement.
• Fix SqliteError cross-realm and Error.isError compatibility by @​dennismutuku2005 in WiseLibs/better-sqlite3#1473

New Contributors

• @​dennismutuku2005 made their first contribution in WiseLibs/better-sqlite3#1473

Full Changelog: WiseLibs/better-sqlite3@v12.12.0...v13.0.0

v12.12.0

What's Changed

[!WARNING]

BREAKING: Starting with Electron v43, binary assets will require glibc 2.41 or higher on Linux hosts.

• Update SQLite to version 3.53.3 by @​JoshuaWise in WiseLibs/better-sqlite3#1492
• Utilize node:20-trixie for Electron v43 and onwards by @​neoxpert in WiseLibs/better-sqlite3#1495

Full Changelog: WiseLibs/better-sqlite3@v12.11.2...v12.12.0

v12.11.2

What's Changed

• Add support for electron v43 prebuilds by @​m4heshd in WiseLibs/better-sqlite3#1490

Full Changelog: WiseLibs/better-sqlite3@v12.11.1...v12.11.2

Commits

• 6efdbc5 13.0.1
• 32ee0ab Merge remote-tracking branch 'origin/master'
• bce8300 fixed overly strict regression in parameter binding
• ecfe2f7 13.0.0
• ae19080 fixed typos
• 57d4bbb implemented Database#explain()
• 49fd7e6 added docs for Statement#toString()
• 1cb18ec implemented Statement#toString()
• af60f6b updated github workflow dep versions
• 6ffd750 fixed tests for SqliteError
• Additional commits viewable in compare view

Install script changes

This version modifies install script that runs during installation. Review the package contents before updating.

Updates cloakbrowser from 0.4.5 to 0.5.1

Changelog

Sourced from cloakbrowser's changelog.

[0.5.1] — 2026-07-23

• [wrapper] Fix GeoIP exit-IP resolution through authenticated HTTP proxies in the JavaScript wrapper. The CONNECT request sent the proxy's address in the Host header instead of the tunnel target, which strict proxies (e.g. Oxylabs backconnect) reject; the wrapper then silently fell back to the proxy gateway's location, producing a wrong timezone/locale for the session's real exit IP. The Host header now names the tunnel target per RFC 9110. JavaScript only; Python and .NET were unaffected.

[0.5.0] — 2026-07-22

• [wrapper] Free tier via GitHub sign-in. New cloakbrowser login command: sign in with GitHub to get a free license key (or save a paid key), cloakbrowser logout to revert. The launch banner and cloakbrowser info are now tier-aware (keyless / free / pro). Free keys always track the latest free build. Python, JavaScript, and .NET.
• [wrapper] Fix geoip=True overriding a timezone or locale that was passed explicitly as a raw flag via args= (--fingerprint-timezone, --lang, --fingerprint-locale). A raw flag now counts as explicit and is preserved, matching the behavior of the timezone=/locale= parameters; GeoIP only fills the values you did not set. Python, JavaScript, and .NET.

[0.4.13] — 2026-07-22

• [wrapper] Fix the GeoIP database never refreshing and re-downloading on every launch (#458). The atomic replace used a rename that cannot overwrite an existing file on Windows, so a stale database was never updated and each launch re-fetched the ~70 MB database in a loop; with no lock, concurrent launches each started their own download. The refresh now replaces the file atomically and guards against duplicate concurrent downloads. Python, JavaScript, and .NET.
• [wrapper] Quote cloakbrowser[geoip] in the install hints printed when the optional GeoIP dependency is missing (#459), so copy-pasting the hint into a shell that globs brackets (e.g. zsh) no longer errors.

[0.4.12] — 2026-07-18

• [binary] Chromium 150.0.7871.114.3 (Pro, all platforms) — 71 source-level patches. A full rebase onto the Chromium 150 line with the complete patch set ported forward, plus a round of coherence work. Pro license required; v146 stays free.
  • Closer alignment with a real Chrome install across speech and language profiles, font handling, and graphics parameters.
  • More self-consistent identities — values that a real browser reports consistently now stay consistent across repeat reads and across launch modes.
  • macOS coherence — display characteristics hold together across headed and headless launches.
  • The reported Chrome version tracks real Chrome, independent of the version we build from.
  • New --fingerprint-sapi-voices=false for the Windows voice tables (see the flags table in the README).
  • Clearer license failures — the license gate now exits with a distinct code per denial reason, which the wrapper surfaces as a specific CloakBrowserLicenseError.
• [wrapper] Fix the first-launch banner reporting the wrong Pro major version — a Pro install downloading the Chromium 150 binary printed "Pro active (v148)", and the free-tier upgrade hint named the same stale version. Cosmetic only; binary download, verification, and launch were unaffected. Python, JS, and .NET.

[0.4.11] — 2026-07-16

• [wrapper] When the Pro binary refuses a launch for a license reason, launch() now raises a clear CloakBrowserLicenseError (invalid, expired, or missing key; session limit reached; license server unreachable; or a local config problem) instead of an opaque "target/browser closed" error. Non-license launch failures are re-raised unchanged. New exported CloakBrowserLicenseError type. Python, JavaScript, Puppeteer, and .NET.
• [wrapper] Authenticated HTTP/HTTPS proxies now use the browser's native proxy authentication on every platform whose binary supports it — resolved per platform and binary version — and fall back to the standard proxy path on older binaries that don't. Fixes credentialed HTTP/HTTPS proxies on macOS and ARM, which previously could not use the native path. Python, JavaScript, Puppeteer, and .NET.
• [wrapper] cloakbrowser info now shows the number of Pro sessions currently in use ("Sessions: N seats in use") for a valid Pro license, so you can see how many concurrent sessions are running without contacting support. The count is never cached, skipped under --quick, and reports "unavailable" rather than a guessed number when it cannot be determined. Python, JS, and .NET.

[0.4.10] — 2026-07-09

• [wrapper] Fix JS CLI silently exiting with no output when run via npx/node_modules/.bin (#427). The entry-point guard compared import.meta.url to an unresolved process.argv[1]; symlinked bin installs (npm/pnpm/npx) never matched, so no subcommand ran. Now realpath-resolves the invoked path before comparing.
• [wrapper] Fix humanize=True breaking interactions with elements inside iframes (#428). frame.locator("#btn").click() / fill() / hover() / etc. (and the frame-level frame.click(...) equivalents) now resolve the selector in the owning sub-frame's own document instead of misrouting to the top page, which previously raised ElementNotAttachedError. Humanized mouse motion is preserved inside iframes. Python only (the JS and .NET wrappers were already frame-correct).

[0.4.9] — 2026-07-09

• [wrapper] Free-tier launch banner and cloakbrowser info upgrade hint now surface the 7-day free Pro trial (Chromium 148). Python, JS, and .NET.
• [wrapper] info/update never diverge from the Pro build that actually launches — info now shows both the cached build that will launch and the server's latest Pro version so the two can no longer silently disagree. Unpinned launches prefer the server's latest when it's newer than (or replaces a missing) cached build; update is license-aware (a valid Pro key updates the Pro binary, everyone else updates free); the background Pro update check is now a rate-limited foreground check (one call/hour, honors CLOAKBROWSER_AUTO_UPDATE=false); a valid Pro license never silently falls back to free; binary verification failures now surface verbatim instead of falling back to a cached build. Python, JS, and .NET.
• [wrapper] info/doctor Windows-font check now covers the full 8-font set (adds the two monospace fonts) and reports a strict N/8 count, with the launch-time warning firing on any incomplete set rather than only a fully-missing one. Adds a separate Office-font group (10 fonts) reported as informational N/10 with no install nudge. Python, JS, and .NET.

[0.4.8] — 2026-07-05

• [binary] Chromium 148.0.7778.215.5 (Pro, Windows + Linux; macOS follows) — the biggest fingerprint update yet. Pro license required; v146 stays free.
  • More common, more coherent hardware identities — each --fingerprint seed is built from the most common real-world hardware values (screen, GPU, RAM, CPU cores, color depth, fonts, audio), chosen together so they form a popular, self-consistent device with no internal contradictions.
  • Deeper, more consistent Windows persona — expanded and localized font populations, tighter graphics/display alignment, and seed-coherent screen size, color depth, and audio across browser- and OS-level signals.
  • Expanded NVIDIA GPU profiles, each matched to a plausible CPU, RAM, and screen combination.
  • Window and screen geometry coherence in both headed and headless modes (pairs with the wrapper's new maximized-window default).
  • Greater WebGL and WebGPU realism, including consistent behavior under timing inspection.

... (truncated)

Commits

• 36390b5 release: v0.5.1 — geoip CONNECT Host header fix (js)
• d640970 fix(geoip): send tunnel target in CONNECT Host header (js)
• 46a2b03 chore(deps): bump the javascript group across 1 directory with 5 updates (#440)
• efe6f50 release: v0.5.0 — free tier via GitHub sign-in + geoip raw-flag fix
• 1b1e349 feat(free-tier): GitHub-login free tier across all three wrappers
• 0c2d191 fix(geoip): preserve explicit tz/locale raw flags in args over geoip
• a554a97 release: v0.4.13 — geoip DB refresh fix + drop 7-day trial copy
• d290c2a fix(geoip): atomic DB replace + single-download guard (#458)
• fd2b602 release: v0.4.12 — Chromium 150 version facts + banner fix
• 86d1d76 release: v0.4.11 — proxy auth + license errors + info session count
• Additional commits viewable in compare view

Updates lucide-react from 0.562.0 to 1.26.0

Release notes

Sourced from lucide-react's releases.

Version 1.26.0

What's Changed

• fix(docs): fix home page package links & accessible labels by @​karsa-mistmere in lucide-icons/lucide#4540
• fix(icons): changed columns-3-cog icon by @​kamilasw in lucide-icons/lucide#4578
• fix(icons): extended metadata of ad icon by @​karsa-mistmere in lucide-icons/lucide#4579
• fix(icons): changed book-open icons by @​karsa-mistmere in lucide-icons/lucide#4565
• feat(icons): added shield-keyhole icon by @​karsa-mistmere in lucide-icons/lucide#4580

New Contributors

• @​kamilasw made their first contribution in lucide-icons/lucide#4578

Full Changelog: lucide-icons/lucide@1.25.0...1.26.0

Version 1.25.0

What's Changed

• fix(icons): Rename to circle-euro to match other euro icons by @​ericfennis in lucide-icons/lucide#4531
• chore(deps-dev): bump astro from 6.1.10 to 6.4.6 by @​dependabot[bot] in lucide-icons/lucide#4487
• fix(site): empty search results on first load for tag-only matches by @​taimar in lucide-icons/lucide#4413
• chore(deps-dev): bump @​babel/core from 7.28.5 to 7.29.6 by @​dependabot[bot] in lucide-icons/lucide#4476
• fix(ci): broken link in brand logo comment by @​jguddas in lucide-icons/lucide#4533
• chore(depedencies): Update dependencies by @​ericfennis in lucide-icons/lucide#4553
• feat(docs): add studio link by @​jguddas in lucide-icons/lucide#4534
• fix(icons): changed hdmi-port icon by @​karsa-mistmere in lucide-icons/lucide#4554
• fix(icons): changed ethernet-port icon by @​karsa-mistmere in lucide-icons/lucide#4555
• fix(icons): changed file-box icon by @​karsa-mistmere in lucide-icons/lucide#4552
• feat(icons): added scan-box icon by @​karsa-mistmere in lucide-icons/lucide#4551

Full Changelog: lucide-icons/lucide@1.24.0...1.25.0

Version 1.24.0

What's Changed

• fix(scripts): fix typo in renameIcon.function.mts by @​karsa-mistmere in lucide-icons/lucide#4514
• chore(icons): remove toBeRemovedInVersion metadata and make it optional in schema by @​ericfennis with @​Copilot in lucide-icons/lucide#4513
• feat(site): Add merch link by @​ericfennis in lucide-icons/lucide#4524
• fix(packages/angular): move child rendering logic to template from effect by @​karsa-mistmere in lucide-icons/lucide#4519
• docs(site): list @​gyeonghokim/lucide-lit as third-party package by @​GyeongHoKim in lucide-icons/lucide#4421
• fix(icons): changed option icon by @​jamiemlaw in lucide-icons/lucide#4326
• fix(lucide-react-native): restore the icons entry point in the JS bundles by @​pvinis in lucide-icons/lucide#4528
• fix(vue): support kebab-case icon-node prop on Icon component by @​Sagargupta16 in lucide-icons/lucide#4512
• fix(lucide-react-native): Add icon exports property to the package.json file by @​ericfennis in lucide-icons/lucide#4522
• fix(icons): centered the dot icon by @​cnlancehu in lucide-icons/lucide#4492
• feat(icons): added circle-euro-sign icon by @​Guido3000 in lucide-icons/lucide#4353
• feat(icons): added server-plus icon by @​Turboman3000 in lucide-icons/lucide#4232

New Contributors

• @​ericfennis with @​Copilot made their first contribution in lucide-icons/lucide#4513
• @​GyeongHoKim made their first contribution in lucide-icons/lucide#4421
• @​pvinis made their first contribution in lucide-icons/lucide#4528
• @​Sagargupta16 made their first contribution in lucide-icons/lucide#4512

... (truncated)

Commits

• f229f83 chore(depedencies): Update dependencies (#4553)
• 5ff536e ci(release.yml): Fix workflow and remove version scripts in package scripts...
• 07c885e fix(docs): fix zephyr-cloud URL in readmes
• 50d8af5 docs(readme): Update readme files (#4320)
• 653e44b feat(packages): use .mjs for ESM bundles (#4285)
• 7623e23 feat(docs): add Zephyr Cloud to Hero Backers tier & rework updateSponsors scr...
• dada0a8 fix(lucide-react): Fix dynamic imports (#4210)
• a6e648a fix(lucide-react): correct client directives in RSC files (#4189)
• 1f010a3 fix(lucide-react): Fixes provider export and RSC render issues (#4175)
• 484f2c9 docs(version-1): Version 1 website (#4142)
• Additional commits viewable in compare view

Updates radix-ui from 1.6.0 to 1.6.5

Changelog

Sourced from radix-ui's changelog.

1.6.5

• Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.

1.6.4

• Fixed a regression where importing primitives from the root radix-ui entry point erased every primitive's types to any.

1.6.3

Dialog

• Fixed broken ARIA references in Dialogs where title or description elements are not rendered.

Slider

• Fixed a bug where onValueCommit was not called when a slider thumb was dragged across another thumb.

Toast

• Fixed Toast removing non-focused toasts when pressing Escape.

Tooltip

• Fixed a bug where Tooltip.Content children were mounted to the DOM twice.

Other updates

• Fixed overriding inline animation style in Popper.Content.
• Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.
• Widened virtualRef prop type to allow RefObject<Measurable | null> in popover components.
• Fixed dev-only checks with conditional exports to drop dev-warnings from production builds.
• Added per-primitive subpath entry points so each primitive can be imported directly, eg. import { Accordion } from 'radix-ui/accordion' or import * as Accordion from 'radix-ui/accordion'. This mirrors the namespaced exports available from the root radix-ui entry point.
• Fixed a bug where updating a Checkbox, Switch, or RadioGroup value programmatically (eg. a "select all" control) while inside a <form> would dispatch a click event from the hidden bubble input that propagated to ancestor onClick handlers.

1.6.2

Other updates

• Added CSS custom properties for Navigation Menu item indicators' translate values.
• Fixed a bug in Dismissable Layer causing background nested popovers to close all layers on outside click
• Fixed runtime errors for Form.Message, Form.Control, Form.Label and Form.ValidityState that are correctly rendered outside of Form.Field components
• Fixed a bug in form control components to ensure their values are updated when their associated form's is reset. This affects RadioGroup, Slider, Select, and Switch.
• Fixed menu items, tab triggers, toolbar links, and select items intercepting Space/Enter keys that originate from focusable descendants.
• Fixed a bug where calling an event handler without an argument would throw, preventing successive event handlers from being called. This affected all components that accept event handlers with internal implementations.
• Fixed a bug in Context Menu to ensure that the menu properly re-anchors to the latest pointer position when re-triggered in its open state.
• Fixed stale onEscapeKeyDown/onDismiss handlers on React 19.2.
• Fixed items in a Roving Focus Group not being auto-focused on mount within a Focus Scope component.
• Fixed a regression in Dismissable Layer originating from a bug in React's useEffectEvent.
• Fixed --radix-scroll-area-corner-width and --radix-scroll-area-corner-height not resetting to 0 when a corner is removed. Previously these values would stick around and leave a permanent gap on the remaining scrollbar.

... (truncated)

Commits

• See full diff in compare view

Updates react from 19.2.7 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

• Performance improvements when decoding (#37087 by @​eps1lon)

Commits

• 1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
• b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
• See full diff in compare view

Updates react-dom from 19.2.7 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

• Performance improvements when decoding (#37087 by @​eps1lon)

Commits

• 1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
• b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
• See full diff in compare view

Updates tailwindcss from 4.3.2 to 4.3.3

Release notes

Sourced from tailwindcss's releases.

v4.3.3

Fixed

• Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#20297)
• Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF] → bg-white) (#20298)
• Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#20292)
• Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#20299)
• Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#20302)
• Parse selectors like [data-foo]div as two selectors instead of one (#20303)
• Ensure @tailwindcss/postcss rebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#20310)
• Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in @tailwindcss/browser and Tailwind Play (#20124)
• Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like oklch (#20314)
• Ensure --spacing(0) is optimized to 0px instead of 0 so it remains a <length> when used in calc(…) (#20319)
• Load @parcel/watcher only when needed in @tailwindcss/cli --watch mode, so one-off builds and --watch --poll work when @parcel/watcher can't be loaded (#20325)
• Use explicit platform fonts instead of system-ui and ui-sans-serif so CJK text respects the page's lang attribute on Windows (#20318)
• Prevent @tailwindcss/upgrade from rewriting ignored files when run from a subdirectory (#20329)
• Ensure earlier @source rules pointing to nested files are scanned when later @source rules point to files in parent folders (#20335)
• Prevent @tailwindcss/vite from triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#20336)

Changelog

Sourced from tailwindcss's changelog.

[4.3.3] - 2026-07-16

Fixed

• Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#20297)
• Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF] → bg-white) (#20298)
• Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#20292)
• Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#20299)
• Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#20302)
• Parse selectors like [data-foo]div as two selectors instead of one (#20303)
• Ensure @tailwindcss/postcss rebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#20310)
• Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in @tailwindcss/browser and Tailwind Play (#20124)
• Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like oklch (#20314)
• Ensure --spacing(0) is optimized to 0px instead of 0 so it remains a <length> when used in calc(…) (#20319)
• Load @parcel/watcher only when needed in @tailwindcss/cli --watch mode, so one-off builds and --watch --poll work when @parcel/watcher can't be loaded (#20325)
• Use explicit platform fonts instead of system-ui and ui-sans-serif so CJK text respects the page's lang attribute on Windows (#20318)
• Prevent @tailwindcss/upgrade from rewriting ignored files when run from a subdirectory (#20329)
• Ensure earlier @source rules pointing to nested files are scanned when later @source rules point to files in parent folders (#20335)
• Prevent @tailwindcss/vite from triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#20336)

Commits

• c2b24dd 4.3.3 (#20334)
• e48c5e8 Fix weird character rendering on Windows with Japanese locale (#20318)
• 35a3e9c Always produce \<length> value when optimizing --spacing(0) (#20319)
• 4af47fb Fix hues in achromatic theme colors to be none (#20314)
• 5835691 Handle CSS nesting natively (#20124)
• 67c745e Fix bug in attribute selector parsing (#20303)
• 2683903 Support fractional opacity modifiers for named shadow sizes (#20302)
• 04588b1 Fix theme() in JS plugins returning unresolved object instead of DEFAULT valu...
• b53fa09 fix: exclude iframes from focus-visible auto outline in Preflight (#20292)
• ef79119 Bump dependencies (#20300)
• Additional commits viewable in compare view

Updates @types/node from 25.9.4 to 26.1.1

Commits

• See full diff in compare view

Updates @vitejs/plugin-react from 5.2.0 to 6.0.4

Release notes

Sourced from @​vitejs/plugin-react's releases.

plugin-react@6.0.4

Fixed $RefreshSig$ is not defined error when running vite dev with NODE_ENV=production

When running vite dev with NODE_ENV=production, the app errored with $RefreshSig$ is not defined. This error is now fixed.

plugin-react@6.0.3

No release notes provided.

plugin-react@6.0.2

Allow all options in reactCompilerPreset (#1189)

This is a type only change. Only compilationMode and target options were available for reactCompilerPreset.

plugin-react@6.0.1

Expand @rolldown/plugin-babel peer dep range (#1146)

Expanded @rolldown/plugin-babel peer dep range to include ^0.2.0.

plugin-react@6.0.0

Remove Babel Related Features (#1123)

Vite 8+ can handle React Refresh Transform by Oxc and doesn't need Babel for it. With that, there are no transform applied that requires Babel. To reduce the installation size of this plugin, babel is no longer a dependency of this plugin and the related features are removed.

If you are using Babel, you can use @rolldown/plugin-babel together with this plugin:

 import { defineConfig } from 'vite'
 import react from '@vitejs/plugin-react'
+import babel from '@rolldown/plugin-babel'
export default defineConfig({
plugins: [


react({



  babel: {



    plugins: ['@babel/plugin-proposal-throw-expressions'],



  },



}),





react(),



babel({



  plugins: ['@babel/plugin-proposal-throw-expressions'],



}),

]
})

For React compiler users, you can use reactCompilerPreset for easier setup with preconfigured filter to improve build performance:

 import { defineConfig } from 'vite'
</tr></table> 

... (truncated)

Changelog

Sourced from @​vitejs/plugin-react's changelog.

6.0.4 (2026-07-22)

Fixed $RefreshSig$ is not defined error when running vite dev with NODE_ENV=production

When running vite dev with NODE_ENV=production, the app errored with $RefreshSig$ is not defined. This error is now fixed.

6.0.3 (2026-06-23)

6.0.2 (2026-05-14)

Allow all options in reactCompilerPreset (#1189)

This is a type only change. Only compilationMode and target options were available for reactCompilerPreset.

6.0.1 (2026-03-13)

Expand @rolldown/plugin-babel peer dep range (#1146)

Expanded @rolldown/plugin-babel peer dep range to include ^0.2.0.

6.0.0 (2026-03-12)

6.0.0-beta.0 (2026-03-03)

Remove Babel Related Features (#1123)

Vite 8+ can handle React Refresh Transform by Oxc and doesn't need Babel for it. With that, there are no transform applied that requires Babel. To reduce the installation size of this plugin, babel is no longer a dependency of this plugin and the related features are removed.

If you are using Babel, you can use @rolldown/plugin-babel together with this plugin:

 import { defineConfig } from 'vite'
 import react from '@vitejs/plugin-react'
+import babel from '@rolldown/plugin-babel'
export default defineConfig({
plugins: [


react({



  babel: {



    plugins: ['@babel/plugin-proposal-throw-expressions'],



  },



}),





react(),



babel({



  plugins: ['@babel/plugin-proposal-throw-expressions'],



}),

]
})

... (truncated)

Commits

• f4b5498 release: plugin-react@6.0.4
• 7a40659 fix(react): $RefreshSig$ is not defined with NODE_ENV=production vite dev ...
• 98b32d4 fix(deps): update react 19.2.8 (#1298)
• 8ae5449 fix: babel-plugin-react-compiler cannot be imported when used in a framework ...
• f09ea01 fix(deps): update all non-major dependencies (#1282)
• 640fd35 release: plugin-react@6.0.3
• 889efb0 fix(deps): update all non-major dependencies (#1249)
• 6c57dd4 fix(plugin-react): use '/' base in bundledDev preamble to fix non-root base p...
• 3cc33a7 fix(deps): update react-related dependencies (#1245)
• c0f7c7f docs: mention the Biome rule in the "Consistent components exports" section (...
• Additional commits viewable in compare view

Update...

Description has been truncated