build(deps): bump the npm-minor-patch group with 32 updates

[dependabot]

Bumps the npm-minor-patch group with 32 updates:

Package	From	To
@contextbridge-ai/eslint-config	0.0.0	0.1.0
@contextbridge-ai/prettier-config	0.0.0	0.0.1
@typescript-eslint/parser	8.71.0	8.71.1
prettier	3.9.9	3.9.10
prettier-plugin-astro	1.1.0	1.1.1
typescript-eslint	8.71.0	8.71.1
@anthropic-ai/claude-agent-sdk	0.3.289	0.3.296
pino-pretty	13.1.3	13.2.0
posthog-js	1.436.1	1.438.7
posthog-node	5.55.0	5.55.2
chromatic	18.11.0	18.12.0
radix-ui	1.6.7	1.7.0
@astrojs/markdown-remark	7.3.1	7.3.2
@astrojs/react	7.0.0	7.0.1
@astrojs/starlight	0.42.5	0.42.6
@iconify-json/lucide	1.2.140	1.2.142
@iconify-json/simple-icons	1.2.98	1.2.99
astro	7.3.5	7.3.8
motion	14.0.0	14.1.0
@storybook/react-vite	10.3.6	10.6.1
@tailwindcss/vite	4.3.0	4.3.3
@testing-library/react	16.3.2	16.3.3
handlebars	4.7.9	4.7.10
lucide-react	1.16.0	1.55.0
pino	10.3.1	10.4.0
playwright	1.59.1	1.64.0
react	19.2.6	19.3.0
@types/react	19.2.15	19.3.0
react-dom	19.2.6	19.3.0
@types/react-dom	19.2.3	19.3.0
tailwindcss	4.3.0	4.3.3
zod	4.6.5	4.6.6

Updates @contextbridge-ai/eslint-config from 0.0.0 to 0.1.0

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​contextbridge-ai/eslint-config since your current version.

Updates @contextbridge-ai/prettier-config from 0.0.0 to 0.0.1

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​contextbridge-ai/prettier-config since your current version.

Updates @typescript-eslint/parser from 8.71.0 to 8.71.1

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.71.1

8.71.1 (2026-10-05)

🩹 Fixes

• eslint-plugin: [no-misused-promises] skip argument checks for calls without arguments (#12923)
• eslint-plugin: [no-unused-vars] report usedOnlyAsType for partially exported merged declarations (#12892)
• eslint-plugin: [require-array-sort-compare] use array argument type constraint (#12919)
• eslint-plugin: [no-unsafe-enum-assignment] skip identical types and bound deep type walks (#12957)
• eslint-plugin: [no-confusing-void-expression] don't autofix when declared return type is unknown (#12930)
• eslint-plugin: [prefer-optional-chain] check the constrained type (#12953)
• eslint-plugin: [no-unnecessary-type-parameters] count instantiated mapped type constraints (#12941)
• project-service: throttle cleanup when opening files (#12934)
• type-utils: match re-exports and global declarations in TypeOrValueSpecifier (#12943)

❤️ Thank You

• Diptajoy Mistry @​diptomistry
• Evyatar Daud @​StyleShit
• Josh Goldberg
• Josh Goldberg ✨
• Medhansh Poojari

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.71.1 (2026-10-05)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

• d57b8da chore(release): publish 8.71.1
• See full diff in compare view

Updates prettier from 3.9.9 to 3.9.10

Release notes

Sourced from prettier's releases.

3.9.10

• Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.10

diff

Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

See micromark/micromark-extension-gfm-table@4f43ead for details.

Commits

• 1172b82 Release 3.9.10
• d014227 Update micromark-extension-gfm-table to fix the table parse issue on perfor...
• 953b908 Bump Prettier dependency to 3.9.9
• ad8a6bf Clean changelog_unreleased
• See full diff in compare view

Updates prettier-plugin-astro from 1.1.0 to 1.1.1

Release notes

Sourced from prettier-plugin-astro's releases.

v1.1.1

Patch Changes

• ee01a5d: Fixes a TypeError ("Cannot read properties of undefined (reading 'semi')") when a comment appears before a statement inside a template expression.

Changelog

Sourced from prettier-plugin-astro's changelog.

1.1.1

Patch Changes

• ee01a5d: Fixes a TypeError ("Cannot read properties of undefined (reading 'semi')") when a comment appears before a statement inside a template expression.

Commits

• 27ad3ef Version Packages (#495)
• ee01a5d fix: Pass options to estree willPrintOwnComments (#494)
• See full diff in compare view

Updates typescript-eslint from 8.71.0 to 8.71.1

Release notes

Sourced from typescript-eslint's releases.

v8.71.1

8.71.1 (2026-10-05)

🩹 Fixes

• eslint-plugin: [no-misused-promises] skip argument checks for calls without arguments (#12923)
• eslint-plugin: [no-unused-vars] report usedOnlyAsType for partially exported merged declarations (#12892)
• eslint-plugin: [require-array-sort-compare] use array argument type constraint (#12919)
• eslint-plugin: [no-unsafe-enum-assignment] skip identical types and bound deep type walks (#12957)
• eslint-plugin: [no-confusing-void-expression] don't autofix when declared return type is unknown (#12930)
• eslint-plugin: [prefer-optional-chain] check the constrained type (#12953)
• eslint-plugin: [no-unnecessary-type-parameters] count instantiated mapped type constraints (#12941)
• project-service: throttle cleanup when opening files (#12934)
• type-utils: match re-exports and global declarations in TypeOrValueSpecifier (#12943)

❤️ Thank You

• Diptajoy Mistry @​diptomistry
• Evyatar Daud @​StyleShit
• Josh Goldberg
• Josh Goldberg ✨
• Medhansh Poojari

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.71.1 (2026-10-05)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

• d57b8da chore(release): publish 8.71.1
• See full diff in compare view

Updates @anthropic-ai/claude-agent-sdk from 0.3.289 to 0.3.296

Release notes

Sourced from @​anthropic-ai/claude-agent-sdk's releases.

v0.3.296

What's changed

• Added claude_code_version to the initialize control response so clients know the CLI version before the first turn
• Added autoCompactWindow to AgentDefinition, so a subagent can auto-compact earlier than the main conversation's window
• Fixed the sandbox option discarding an inline settings.sandbox block: the two now merge, the option's values win, and deny and credential lists from both sides are combined
• Changed the default limit on MCP tool descriptions sent up front and on MCP server instructions, in-process SDK servers included, from 2,048 to 4,096 characters
• Changed permission answers that arrive after a restart to be parsed like live ones: over 4,096 updatedPermissions entries count as a denial, and a malformed list is ignored as a whole
• Updated to parity with Claude Code v2.1.296

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.296
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.296
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.296
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.296

v0.3.295

What's changed

• Added overageEnabled to SDKRateLimitInfo: on usage-limit warnings, whether the account has extra usage turned on
• Fixed an MCP server added with mcp_set_servers sometimes keeping an outdated tool list when another server in the same request connected later
• Fixed assistant text blocks losing their citations in streamed responses
• Fixed Claude being told "disabled by the user" about an in-process MCP server that was switched off with toggleMcpServer()
• Fixed rate_limit_event with status allowed_warning omitting overageStatus, overageResetsAt and overageDisabledReason, which allowed and rejected events already carry
• Changed MCP tool descriptions the model loads through tool search, including those from in-process SDK servers, to be cut at 16,384 characters instead of 2,048
• Changed a permission answer whose updatedPermissions holds over 4,096 updates, rules and directories to count as a denial
• Changed tool_result_meta[].non_execution_kind to be absent when a mod withheld the result of a tool that ran without error; it was permission-rule
• Changed pasted_content on user messages to be ignored when it holds over 1,000 entries and blocks in all
• Changed how the SDK passes option values to Claude Code: the values of its named options are now sent in the same argument as their flag (--flag=value)
• Changed tool_use_result for MCP Apps tools: structuredContent or _meta over 8,388,608 JSON characters is left off, and _meta.ui with no ui:// resource no longer lifts the ordinary caps
• Changed tool_use_result for MCP tools: when a long result is saved to a file, or cut because it could not be, the text kept past 500,000 characters is dropped, with a note of how much
• Changed tool_use_result for MCP tools: a result _meta over 1,048,576 JSON characters is left off, except for SDK-server tools; so is text blocks' _meta that totals over 65,536
• Updated to parity with Claude Code v2.1.295

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.295
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.295
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.295
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.295
</tr></table> 

... (truncated)

Changelog

Sourced from @​anthropic-ai/claude-agent-sdk's changelog.

0.3.296

• Added claude_code_version to the initialize control response so clients know the CLI version before the first turn
• Added autoCompactWindow to AgentDefinition, so a subagent can auto-compact earlier than the main conversation's window
• Fixed the sandbox option discarding an inline settings.sandbox block: the two now merge, the option's values win, and deny and credential lists from both sides are combined
• Changed the default limit on MCP tool descriptions sent up front and on MCP server instructions, in-process SDK servers included, from 2,048 to 4,096 characters
• Changed permission answers that arrive after a restart to be parsed like live ones: over 4,096 updatedPermissions entries count as a denial, and a malformed list is ignored as a whole
• Updated to parity with Claude Code v2.1.296

0.3.295

• Added overageEnabled to SDKRateLimitInfo: on usage-limit warnings, whether the account has extra usage turned on
• Fixed an MCP server added with mcp_set_servers sometimes keeping an outdated tool list when another server in the same request connected later
• Fixed assistant text blocks losing their citations in streamed responses
• Fixed Claude being told "disabled by the user" about an in-process MCP server that was switched off with toggleMcpServer()
• Fixed rate_limit_event with status allowed_warning omitting overageStatus, overageResetsAt and overageDisabledReason, which allowed and rejected events already carry
• Changed MCP tool descriptions the model loads through tool search, including those from in-process SDK servers, to be cut at 16,384 characters instead of 2,048
• Changed a permission answer whose updatedPermissions holds over 4,096 updates, rules and directories to count as a denial
• Changed tool_result_meta[].non_execution_kind to be absent when a mod withheld the result of a tool that ran without error; it was permission-rule
• Changed pasted_content on user messages to be ignored when it holds over 1,000 entries and blocks in all
• Changed how the SDK passes option values to Claude Code: the values of its named options are now sent in the same argument as their flag (--flag=value)
• Changed tool_use_result for MCP Apps tools: structuredContent or _meta over 8,388,608 JSON characters is left off, and _meta.ui with no ui:// resource no longer lifts the ordinary caps
• Changed tool_use_result for MCP tools: when a long result is saved to a file, or cut because it could not be, the text kept past 500,000 characters is dropped, with a note of how much
• Changed tool_use_result for MCP tools: a result _meta over 1,048,576 JSON characters is left off, except for SDK-server tools; so is text blocks' _meta that totals over 65,536
• Updated to parity with Claude Code v2.1.295

0.3.294

• Updated to parity with Claude Code v2.1.294

0.3.293

• Added an optional subagent_type to background_tasks_changed task entries, so hosts can name each subagent's type without pairing with task_started
• Updated to parity with Claude Code v2.1.293

0.3.292

• Added agent_id to the assistant and user messages a subagent produces; it equals the task_id on that subagent's task events and stays the same when the subagent is resumed
• Added parent_task_id to task_started events and background_tasks_changed entries, naming the subagent task that launched a task
• Added run_id to background task events and origin.runId to task notifications, so a host can tell a resumed task's runs apart
• Added typed sections and notes to the ListAgents tool's tool_use_result, so hosts can list agents without parsing its text
• Added recipient_kind to SendMessage tool_use inputs on assistant messages, and their top-level approve is now always a boolean, so hosts no longer infer them from the raw input
• Added two optional fields to the ReadNotifications tool output: read_at, when the tool read the session's queued notifications, and arrived_at on each notification, when it reached the session
• Fixed subagents with a declared auto permission mode having their tool calls decided by the auto-mode classifier instead of the canUseTool callback when auto mode is unavailable
• Changed background_tasks_changed for a finishing background task to arrive after that task's task_updated and task_notification
• Changed canUseTool options to carry suppressAlwaysAllowRule: true for connector tools that an organization set to require approval, so hosts can hide their "always allow" choice
• Updated to parity with Claude Code v2.1.292

0.3.291

... (truncated)

Commits

• 85d8f8e chore: Update CHANGELOG.md
• da321bb chore: Update CHANGELOG.md
• 799dc78 chore: Update CHANGELOG.md
• 5dc91fb chore: Update CHANGELOG.md
• d4f0435 chore: Update CHANGELOG.md
• b95045e chore: Update CHANGELOG.md
• aef4ecc chore: Update CHANGELOG.md
• See full diff in compare view

Updates pino-pretty from 13.1.3 to 13.2.0

Release notes

Sourced from pino-pretty's releases.

v13.2.0

What's Changed

• Minor updates by @​jsumners in pinojs/pino-pretty#638
• build(deps): bump actions/cache from 4 to 5 by @​dependabot[bot] in pinojs/pino-pretty#639
• build(deps-dev): bump @​types/node from 24.10.4 to 25.0.3 by @​dependabot[bot] in pinojs/pino-pretty#640
• Support "true" and "false" for boolean options by @​leorossi in pinojs/pino-pretty#642
• fix: Remove unused (and undocumented) outputStream option by @​cmfcmf in pinojs/pino-pretty#641
• build(deps-dev): bump borp from 0.21.0 to 1.0.0 by @​dependabot[bot] in pinojs/pino-pretty#646
• fix: preserve newlines in messageFormat by @​mahmoodhamdi in pinojs/pino-pretty#649
• chore: use TSTyche for type testing by @​mrazauskas in pinojs/pino-pretty#650
• chore: remove coverage-map.js by @​mrazauskas in pinojs/pino-pretty#652
• build(deps-dev): bump neostandard from 0.12.2 to 0.13.0 by @​dependabot[bot] in pinojs/pino-pretty#654
• build(deps-dev): bump typescript from 5.9.3 to 6.0.2 by @​dependabot[bot] in pinojs/pino-pretty#655
• build(deps): bump sonic-boom from 4.2.1 to 5.0.0 by @​dependabot[bot] in pinojs/pino-pretty#656
• chore: remove legacy .eslintrc config by @​kshitijanurag in pinojs/pino-pretty#657
• build(deps-dev): bump tstyche from 6.2.0 to 7.1.0 by @​dependabot[bot] in pinojs/pino-pretty#659
• build(deps): bump actions/dependency-review-action from 4 to 5 by @​dependabot[bot] in pinojs/pino-pretty#661
• build(deps): bump actions/cache from 5 to 6 by @​dependabot[bot] in pinojs/pino-pretty#666
• build(deps-dev): bump @​types/node from 25.9.4 to 26.0.1 by @​dependabot[bot] in pinojs/pino-pretty#669
• fix: strip unsafe terminal control characters by @​mcollina in pinojs/pino-pretty#671
• docs: add security policy by @​mcollina in pinojs/pino-pretty#670
• build(deps): bump actions/setup-node from 6 to 7 by @​dependabot[bot] in pinojs/pino-pretty#673
• fix: support nested keys in the include filter by @​DSeaStar in pinojs/pino-pretty#677

New Contributors

• @​leorossi made their first contribution in pinojs/pino-pretty#642
• @​cmfcmf made their first contribution in pinojs/pino-pretty#641
• @​mahmoodhamdi made their first contribution in pinojs/pino-pretty#649
• @​mrazauskas made their first contribution in pinojs/pino-pretty#650
• @​kshitijanurag made their first contribution in pinojs/pino-pretty#657
• @​DSeaStar made their first contribution in pinojs/pino-pretty#677

Full Changelog: pinojs/pino-pretty@v13.1.3...v13.2.0

Commits

• 6776301 v13.2.0
• ce57771 fix: support nested keys in the include filter (#677)
• 0ebe244 build(deps): bump actions/setup-node from 6 to 7 (#673)
• 5b7c15c docs: add security policy (#670)
• 253c18b ignore ai
• 87ed39f fix: strip unsafe terminal control characters (#671)
• a93ed10 build(deps-dev): bump @​types/node from 25.9.4 to 26.0.1 (#669)
• 4e11bd7 build(deps): bump actions/cache from 5 to 6 (#666)
• 7bcb31a build(deps): bump actions/dependency-review-action from 4 to 5 (#661)
• 6631345 build(deps-dev): bump tstyche from 6.2.0 to 7.1.0 (#659)
• Additional commits viewable in compare view

Updates posthog-js from 1.436.1 to 1.438.7

Release notes

Sourced from posthog-js's releases.

posthog-js@1.438.7

1.438.7

Patch Changes

• #4990 a66cada Thanks @​dustinbyrne! - Share browser logging across SDKs with consistent initialization and cleanup; captureLog and logger calls before logging setup are now dropped instead of buffered. (2026-10-09)
• Updated dependencies [a66cada]:
  • @​posthog/browser-common@​0.9.4

posthog-js@1.438.6

1.438.6

Patch Changes

• #5218 8bc2df6 Thanks @​lucasheriques! - Skip WebMCP intent and model injection for schemas with constraints that the extra fields could break. (2026-10-09)

• #5217 6af3aa8 Thanks @​lucasheriques! - Export WebMCPExtensions from the slim extension-bundles entry point. (2026-10-09)

posthog-js@1.438.5

1.438.5

Patch Changes

• #5258 429b5b2 Thanks @​hpouillot! - Recognize native bundler debug IDs and build-time error tracking release IDs. (2026-10-09)
• Updated dependencies [429b5b2]:
  • @​posthog/core@​1.57.4

posthog-js@1.438.4

1.438.4

Patch Changes

• #5245 76b4402 Thanks @​abrahamguo! - Fix type checking in posthog-js 1.438.2 by publishing the feature flag types it imports from @​posthog/browser-common. (2026-10-09)
• Updated dependencies [76b4402]:
  • @​posthog/browser-common@​0.9.3

posthog-js@1.438.3

1.438.3

Patch Changes

• #5200 34cdfa6 Thanks @​hpouillot! - fix(replay): add a private opt-in to preserve application stacks for failed fetch requests (2026-10-08)
• Updated dependencies [34cdfa6]:
  • @​posthog/types@​1.415.2

... (truncated)

Commits

• c86c1a9 chore: update versions and lockfile [version bump]
• 8751ab6 feat(browser-next): integrate dynamically loaded logs (#4991)
• a66cada refactor(browser-common): extract logs extension (#4990)
• 953607d refactor(browser): make client adapters passive views (#5082)
• 6f5cc87 chore: update versions and lockfile [version bump]
• 8bc2df6 fix(browser): decide WebMCP schema injection from an allowlist of keys (#5218)
• 6af3aa8 fix(browser): export WebMCPExtensions from the slim entry (#5217)
• 789e588 chore: update versions and lockfile [version bump]
• 7199f24 fix(nextjs): support immutable Turbopack sourcemaps (#5202)
• 6086b17 test(browser): add deployment compatibility snapshots (#5231)
• Additional commits viewable in compare view

Updates posthog-node from 5.55.0 to 5.55.2

Release notes

Sourced from posthog-node's releases.

posthog-node@5.55.2

5.55.2

Patch Changes

• #5268 74d7eb2 Thanks @​marandaneto! - Clarify which server-only credentials to use for local evaluation when a project API key is supplied instead. (2026-10-11)

posthog-node@5.55.1

5.55.1

Patch Changes

• #5134 175413f Thanks @​posthog! - Evict only the least recently used distinct ids from the $feature_flag_called dedupe cache instead of clearing it entirely. distinctIdHasSentFlagCalls now returns a snapshot, so writing or deleting individual keys on it no longer changes deduplication. (2026-10-08)

Changelog

Sourced from posthog-node's changelog.

5.55.2

Patch Changes

• #5268 74d7eb2 Thanks @​marandaneto! - Clarify which server-only credentials to use for local evaluation when a project API key is supplied instead. (2026-10-11)

5.55.1

Patch Changes

• #5134 175413f Thanks @​posthog! - Evict only the least recently used distinct ids from the $feature_flag_called dedupe cache instead of clearing it entirely. distinctIdHasSentFlagCalls now returns a snapshot, so writing or deleting individual keys on it no longer changes deduplication. (2026-10-08)

Commits

• 4f590b3 chore: update versions and lockfile [version bump]
• 74d7eb2 fix(node): clarify server credential configuration errors (#5268)
• ddaaf68 chore: adopt Coherence (#5265)
• 524cc47 chore: update versions and lockfile [version bump]
• 175413f fix(node): evict LRU distinct ids from the $feature_flag_called dedupe cache ...
• See full diff in compare view

Updates chromatic from 18.11.0 to 18.12.0

Release notes

Sourced from chromatic's releases.

v18.12.0

🚀 Enhancement

• [TurboSnap v2] Skip files that git ignores #1515 (@​codykaup)

🐛 Bug Fix

• [WFL-1014] fix: add ADO provider support and generic speedUpCI message #1464 (@​ax-vasquez)

Authors: 2

• Armando Vasquez (@​ax-vasquez)
• Cody Kaup (@​codykaup)

Changelog

Sourced from chromatic's changelog.

v18.12.0 (Thu Oct 08 2026)

🚀 Enhancement

• [TurboSnap v2] Skip files that git ignores #1515 (@​codykaup)

🐛 Bug Fix

• [WFL-1014] fix: add ADO provider support and generic speedUpCI message #1464 (@​ax-vasquez)

Authors: 2

• Armando Vasquez (@​ax-vasquez)
• Cody Kaup (@​codykaup)

---

Commits

• b4ef869 Bump version to: 18.12.0 [skip ci]
• 7e17cf4 Update CHANGELOG.md [skip ci]
• b8e3e25 Merge pull request #1515 from chromaui/cody/cap-5222-turbosnap-20-should-igno...
• 5007768 Remove externals from skipped comment
• 421efe1 Record why each file was skipped
• ff2be82 Mark the files v2 skips with a \<skipped> hash and keep them out of every ro...
• 9a6ed00 Keep the files v2 skipped in the serialized graph
• d506d24 Record the files v2 skipped on the manifest
• 97aa8bc Skip the files v2 skips in the static sweep
• b2d665a Skip the files v2 skips when hashing the stats graph
• Additional commits viewable in compare view

Updates radix-ui from 1.6.7 to 1.7.0

Changelog

Sourced from radix-ui's changelog.

1.7.0

Dialog

• Fixed nested, portalled layers being unusable inside a modal layer. A non-modal popover rendered inside a modal Dialog previously broke some user interactions because the modal layer's trapped FocusScope reclaimed focus, and its RemoveScroll only allowed scrolling within the modal content.

Navigation Menu

• Added a disableToggle prop to NavigationMenu.Sub.
  • true: Clicking the trigger of an already-open submenu item keeps it open. This is the default and matches existing behavior.
  • false: Clicking the trigger of a submenu item toggles it open or closed.
• Added an activationMode prop to NavigationMenu.Root and NavigationMenu.Sub.
  • "automatic": Hovering or focusing a trigger opens its item, and moving away from the trigger closes it after a short delay. This is the default and matches existing behavior.
  • "manual": Pointer entry and focus never open an item. The item opens when its trigger is clicked.
  • When activationMode is omitted on NavigationMenu.Sub, it inherits the value from the parent NavigationMenu.Root, so setting "manual" on the root also applies to submenus unless a submenu opts back in to "automatic".
• Fixed a bug where a submenu's defaultValue was reset when an external element was focused before the menu opened.
• Fixed a bug where NavigationMenu.Viewport discarded its children and rendered the active content in their place. The active content is now rendered inside the consumer's element alongside any children it already had.

Popover

• Added Popover.Title and Popover.Description parts that provide accessible names and descriptions for popover content.

Scroll Area

• Added a ScrollArea.Content part so consumers can own the wrapper element implicitly rendered by ScrollArea.Viewport. Pass disableImplicitContentElement to the viewport and render ScrollArea.Content as its child.

  <ScrollArea.Root>
    <ScrollArea.Viewport disableImplicitContentElement>
      <ScrollArea.Content>{children}</ScrollArea.Content>
    </ScrollArea.Viewport>
    <ScrollArea.Scrollbar>
      <ScrollArea.Thumb />
    </ScrollArea.Scrollbar>
  </ScrollArea.Root>

  In the next major release, the viewport will no longer render this element implicitly. We recommend migrating to this API now for a smoother upgrade.

• Fixed a bug where asChild on ScrollArea.Viewport merged props onto the implicit content element instead of the consumer's element.

Slider

• Added a preserveThumbOrder prop to Slider that prevents thumbs from crossing over one another. When enabled, each thumb is constrained to the values of its neighbors instead of swapping positions when dragged past them.

Other updates

• Added support for multiple aria-describedby attributes, so id strings from a component and its child are merged, normalized, and deduplicated instead of one replacing the other.
• Fixed a bug where internal event handlers were still called on disabled Select.Item elements.
• Fixed a bug where a paused Toast would not auto-close after its duration changed while the timer was paused.

... (truncated)

Commits

• See full diff in compare view

Updates @astrojs/markdown-remark from 7.3.1 to 7.3.2

Release notes

Sourced from @​astrojs/markdown-remark's releases.

@​astrojs/markdown-remark@​7.3.2

Patch Changes

• #18099 6987261 Thanks @​renovate! - Adds YAML parsing with timestamp and merge key support, and formats YAML errors consistently across Astro, Markdown, MDX, and Markdoc.

• #18139 d047b5c Thanks @​breken-ai! - Fixes Markdown code blocks with languages ending in a symbol, such as c#, c++, and f#, being highlighted as c or f

• Updated dependencies [6987261, 62b13ba]:

  • @​astrojs/internal-helpers@​0.12.0

Changelog

Sourced from @​astrojs/markdown-remark's changelog.

7.3.2

Patch Changes

• #18099 6987261 Thanks @​renovate! - Adds YAML parsing with timestamp and merge key support, and formats YAML errors consistently across Astro, Markdown, MDX, and Markdoc.

• #18139 d047b5c Thanks @​breken-ai! - Fixes Markdown code blocks with languages ending in a symbol, such as c#, c++, and f#, being highlighted as c or f

• Updated dependencies [6987261, 62b13ba]:

  • @​astrojs/internal-helpers@​0.12.0

Commits

• e4f8f46 [ci] release (#18120)
• d047b5c fix(markdown): keep trailing symbols in code block languages (#18139)
• See full diff in compare view

Updates @astrojs/react from 7.0.0 to 7.0.1

Release notes

Sourced from @​astrojs/react's releases.

@​astrojs/react@​7.0.1

Patch Changes

• Updated dependencies [6987261, 62b13ba]:
  • @​astrojs/internal-helpers@​0.12.0

Changelog

Sourced from @​astrojs/react's changelog.

7.0.1

Patch Changes

• Updated dependencies [6987261, 62b13ba]:
  • @​astrojs/internal-helpers@​0.12.0

Commits

• e4f8f46 [ci] release (#18120)
• f603c21 Update dependency @​babel/core to v8 (#18106)
• See full diff in compare view

Updates @astrojs/starlight from 0.42.5 to 0.42.6

Release notes

Sourced from @​astrojs/starlight's releases.

@​astrojs/starlight@​0.42.6

Patch Changes

• #4252 40a2584 Thanks @​olafur-andri! - Adds Icelandic language support

• #4229 e4a3d82 Thanks @​HiDeoo! - Fixes a potential issue with icons being cut off in Firefox when pinch-zooming.

• #4226 fb562dd Thanks @​HiDeoo! - Fixes an issue where pages not importing components from @astrojs/starlight/components included styles of Starlight components used on other pages.

• #4250 531af7d Thanks @​HiDeoo! - Fixes Failed to resolve dependency warnings logged when running the development server in projects using the Cloudflare adapter.

• #4229 e4a3d82 Thanks @​HiDeoo! - Fixes the codePen and node icons slightly extending beyond their bounding box.

Changelog

Sourced from @​astrojs/starlight's changelog.

0.42.6

Patch Changes

• #4252 40a2584 Thanks Description has been truncated

[patchwave]

Review PatchWave’s changes

👀 Needs human review (4)

Dependency	Update
@contextbridge-ai/eslint-config	0.0.0 → 0.1.0
@contextbridge-ai/prettier-config	0.0.0 → 0.0.1
react	19.2.6 → 19.3.0
react-dom	19.2.6 → 19.3.0

✅ Safe to merge (28)

Dependency	Update
@typescript-eslint/parser	8.71.0 → 8.71.1
prettier	3.9.9 → 3.9.10
prettier-plugin-astro	1.1.0 → 1.1.1
typescript-eslint	8.71.0 → 8.71.1
@anthropic-ai/claude-agent-sdk	0.3.289 → 0.3.296
pino-pretty	13.1.3 → 13.2.0
posthog-js	1.436.1 → 1.438.7
posthog-node	5.55.0 → 5.55.2
chromatic	18.11.0 → 18.12.0
radix-ui	1.6.7 → 1.7.0
@astrojs/markdown-remark	7.3.1 → 7.3.2
@astrojs/react	7.0.0 → 7.0.1
@astrojs/starlight	0.42.5 → 0.42.6
@iconify-json/lucide	1.2.140 → 1.2.142
@iconify-json/simple-icons	1.2.98 → 1.2.99
astro	7.3.5 → 7.3.8
motion	14.0.0 → 14.1.0
@storybook/react-vite	10.3.6 → 10.6.1
@tailwindcss/vite	4.3.0 → 4.3.3
@testing-library/react	16.3.2 → 16.3.3
handlebars	4.7.9 → 4.7.10
lucide-react	1.16.0 → 1.55.0
pino	10.3.1 → 10.4.0
playwright	1.59.1 → 1.64.0
@types/react	19.2.15 → 19.3.0
@types/react-dom	19.2.3 → 19.3.0
tailwindcss	4.3.0 → 4.3.3
zod	4.6.5 → 4.6.6

View the full report · Analyzed by PatchWave