Bump the minor-and-patch group across 1 directory with 26 updates

[dependabot]

Bumps the minor-and-patch group with 26 updates in the / directory:

Package	From	To
@chakra-ui/charts	3.36.0	3.37.0
@chakra-ui/react	3.36.0	3.37.0
@neo4j-nvl/base	1.2.0	1.2.2
@neo4j-nvl/react	1.2.0	1.2.2
@vercel/blob	2.4.1	2.8.0
ai	7.0.0-beta.178	7.0.99
better-auth	1.6.20	1.7.4
jszip	3.10.1	3.10.2
neo4j-driver	6.1.0	6.2.0
next	16.2.9	16.3.5
pmtiles	4.4.1	4.5.0
react	19.2.7	19.3.0
@types/react	19.2.17	19.3.0
react-dom	19.2.7	19.3.0
@types/react-dom	19.2.3	19.3.0
react-icons	5.6.0	5.7.0
recharts	3.8.1	3.10.1
resend	6.14.0	6.28.0
satellite.js	7.0.1	7.1.0
workflow	4.5.0	4.8.8
zod	4.4.3	4.6.4
@chakra-ui/cli	3.36.0	3.37.0
@playwright/test	1.61.0	1.63.0
@types/react	19.2.17	19.3.0
@types/react-dom	19.2.3	19.3.0
csv-parse	7.0.0	7.0.2
microsandbox	0.5.7	0.6.18
tsx	4.22.4	4.23.13

Updates @chakra-ui/charts from 3.36.0 to 3.37.0

Changelog

Sourced from @​chakra-ui/charts's changelog.

3.37.0

3.36.1

Commits

• 2e75177 Version Packages (#10913)
• f813394 Version Packages (#10857)
• See full diff in compare view

Updates @chakra-ui/react from 3.36.0 to 3.37.0

Release notes

Sourced from @​chakra-ui/react's releases.

@​chakra-ui/react@​3.37.0

Minor Changes

• #10877 afc8b48 Thanks @​kalisaNkevin! - [New] DateInput: Add a segmented date field for typing dates without a calendar.

  import { DateInput } from "@chakra-ui/react"

  <DateInput.Root>
    <DateInput.Label />
    <DateInput.Control>
      <DateInput.Segments />
    </DateInput.Control>
    <DateInput.HiddenInput />
  </DateInput.Root>

  Each part of the date is its own keyboard-navigable segment, ordered and formatted by locale. Supports selectionMode="range", min/max, and granularity with formatter for time-only input.

• #10939 7b027d4 Thanks @​segunadebayo! - - Accordion, Collapsible, Dialog, Drawer, TreeView: Add hideMode to choose how content that stays mounted is hidden when closed. The default, "display-none", uses the hidden attribute and keeps effects running, so a video keeps playing and a subscription stays open while closed. "activity" uses React 19 Activity to pause those effects instead.

  <Dialog.Root hideMode="activity" />

  It only applies while the content stays mounted. unmountOnExit removes the tree on close, so hideMode never runs.

  • Dialog, Drawer: Add data-autofocus and data-no-autofocus to pick what gets focus when the overlay opens, without reaching for initialFocusEl and a ref. Mark chrome like the close button to skip it, or mark the real target directly.

    <Dialog.Content>
      <Dialog.CloseTrigger data-no-autofocus />
      <input data-autofocus />

... (truncated)

Changelog

Sourced from @​chakra-ui/react's changelog.

3.37.0

Minor Changes

• #10877 afc8b48 Thanks @​kalisaNkevin! - [New] DateInput: Add a segmented date field for typing dates without a calendar.

  import { DateInput } from "@chakra-ui/react"

  <DateInput.Root>
    <DateInput.Label />
    <DateInput.Control>
      <DateInput.Segments />
    </DateInput.Control>
    <DateInput.HiddenInput />
  </DateInput.Root>

  Each part of the date is its own keyboard-navigable segment, ordered and formatted by locale. Supports selectionMode="range", min/max, and granularity with formatter for time-only input.

• #10939 7b027d4 Thanks @​segunadebayo! - - Accordion, Collapsible, Dialog, Drawer, TreeView: Add hideMode to choose how content that stays mounted is hidden when closed. The default, "display-none", uses the hidden attribute and keeps effects running, so a video keeps playing and a subscription stays open while closed. "activity" uses React 19 Activity to pause those effects instead.

  <Dialog.Root hideMode="activity" />

  It only applies while the content stays mounted. unmountOnExit removes the tree on close, so hideMode never runs.

  • Dialog, Drawer: Add data-autofocus and data-no-autofocus to pick what gets focus when the overlay opens, without reaching for initialFocusEl and a ref. Mark chrome like the close button to skip it, or mark the real target directly.

    <Dialog.Content>
      <Dialog.CloseTrigger data-no-autofocus />

... (truncated)

Commits

• 2e75177 Version Packages (#10913)
• 902fabc fix(dialog, drawer): drop preventDefault guard on ActionTrigger (#10954)
• c16188f fix: preserve user onClick on Dialog and Drawer ActionTrigger (#10951)
• 1f28ce9 Update Ark UI to 5.39.0 (#10949)
• 2da020e docs: add multiple trigger examples for popover, hover card, and dialog
• dd51da4 docs(date-picker): add Persian (Jalali) calendar example (#10946)
• af8076c docs(spinner): add custom indicator example (#10948)
• 6948541 fix(radio-card): preserve outline border-width when disabled (#10938)
• 7b027d4 chore(deps): update @​ark-ui/react to 5.38.2 (#10939)
• afc8b48 feat: add DateInput component (#10877)
• Additional commits viewable in compare view

Updates @neo4j-nvl/base from 1.2.0 to 1.2.2

Updates @neo4j-nvl/react from 1.2.0 to 1.2.2

Updates @vercel/blob from 2.4.1 to 2.8.0

Release notes

Sourced from @​vercel/blob's releases.

@​vercel/blob@​2.8.0

Minor Changes

• 8b49164: Add putImage(pathname, bodyOrUrl, options): optimizes an image through Vercel Image Optimization and stores only the optimized output. The source can be the image content itself (string, File, Blob, Buffer or Stream) or a URL instance pointing at a public http(s) image, which is fetched server-side. Options mirror put (access, addRandomSuffix, allowOverwrite, cacheControlMaxAge, ifMatch) plus the required optimizeImage parameters (width, quality, format); contentType is not accepted since the stored content type always comes from the optimizer output. Deprecates the optimizeImage option on put and the putFromUrl function in favor of putImage; both keep working.

@​vercel/blob@​2.7.0

Minor Changes

• ad5a134: Add image optimization support: a new optimizeImage option on put and a new putFromUrl method. Both optimize the image through Vercel Image Optimization before storing it (only the optimized output is stored) and require OIDC authentication.

  const result = await put("avatars/foo.webp", body, {
    access: "public",
    optimizeImage: { width: 128, quality: 75, format: "webp" },
  });
  const result = await putFromUrl(
  "avatars/foo.webp",
  "https://example.com/photo.jpg",
  {
  access: "public",
  optimizeImage: { width: 128, quality: 75, format: "webp" },
  }
  );

@​vercel/blob@​2.6.1

Patch Changes

• d0118c4: Add a useCache option to presignUrl() for get operations. When useCache: false, the presigned URL includes a cache=0 query param so fetches bypass the CDN cache and read the latest content directly from origin storage. Like get(), the bypass only applies to private blobs. The param is not part of the signed payload, so holders of a presigned URL can also add or remove it manually.

@​vercel/blob@​2.6.0

Minor Changes

• c4976ba: Add rename(fromUrlOrPathname, toPathname, options) to move a blob to another pathname. The blob is copied to the new pathname and the source is deleted afterwards; if the copy fails the source is left untouched. By default renaming onto an existing blob throws — pass allowOverwrite: true to replace it, or addRandomSuffix: true to generate a unique destination. Requires a read-write token (client tokens are not supported).
• 89d94e9: Restore the useCache option on get(). Passing useCache: false bypasses the CDN cache and serves the blob directly from origin storage (via the cache=0 query parameter), guaranteeing the latest content at the cost of slower reads. Defaults to true.

@​vercel/blob@​2.5.0

Minor Changes

• 31a8b8f: Deprecate the useCache option on get(). The backend no longer honors the cache=0 query parameter it produced, so the option is now a no-op — reads always go through the standard caching path. The option is still accepted (and ignored) to avoid breaking existing callers, and will be removed in a future major version.

Patch Changes

• 9ac2586: Read the Vercel OIDC token via @vercel/oidc's refreshing getVercelOidcToken instead of the non-refreshing getVercelOidcTokenSync. This refreshes an expired token in development environments. In production with a valid token, behavior is unchanged. If a refresh is needed but fails, the token is treated as absent so callers still fall back to BLOB_READ_WRITE_TOKEN.

Changelog

Sourced from @​vercel/blob's changelog.

2.8.0

Minor Changes

• 8b49164: Add putImage(pathname, bodyOrUrl, options): optimizes an image through Vercel Image Optimization and stores only the optimized output. The source can be the image content itself (string, File, Blob, Buffer or Stream) or a URL instance pointing at a public http(s) image, which is fetched server-side. Options mirror put (access, addRandomSuffix, allowOverwrite, cacheControlMaxAge, ifMatch) plus the required optimizeImage parameters (width, quality, format); contentType is not accepted since the stored content type always comes from the optimizer output. Deprecates the optimizeImage option on put and the putFromUrl function in favor of putImage; both keep working.

2.7.0

Minor Changes

• ad5a134: Add image optimization support: a new optimizeImage option on put and a new putFromUrl method. Both optimize the image through Vercel Image Optimization before storing it (only the optimized output is stored) and require OIDC authentication.

  const result = await put("avatars/foo.webp", body, {
    access: "public",
    optimizeImage: { width: 128, quality: 75, format: "webp" },
  });
  const result = await putFromUrl(
  "avatars/foo.webp",
  "https://example.com/photo.jpg",
  {
  access: "public",
  optimizeImage: { width: 128, quality: 75, format: "webp" },
  }
  );

2.6.1

Patch Changes

• d0118c4: Add a useCache option to presignUrl() for get operations. When useCache: false, the presigned URL includes a cache=0 query param so fetches bypass the CDN cache and read the latest content directly from origin storage. Like get(), the bypass only applies to private blobs. The param is not part of the signed payload, so holders of a presigned URL can also add or remove it manually.

2.6.0

Minor Changes

• c4976ba: Add rename(fromUrlOrPathname, toPathname, options) to move a blob to another pathname. The blob is copied to the new pathname and the source is deleted afterwards; if the copy fails the source is left untouched. By default renaming onto an existing blob throws — pass allowOverwrite: true to replace it, or addRandomSuffix: true to generate a unique destination. Requires a read-write token (client tokens are not supported).
• 89d94e9: Restore the useCache option on get(). Passing useCache: false bypasses the CDN cache and serves the blob directly from origin storage (via the cache=0 query parameter), guaranteeing the latest content at the cost of slower reads. Defaults to true.

2.5.0

Minor Changes

• 31a8b8f: Deprecate the useCache option on get(). The backend no longer honors the cache=0 query parameter it produced, so the option is now a no-op — reads always go through the standard caching path. The option is still accepted (and ignored) to avoid breaking existing callers, and will be removed in a future major version.

Patch Changes

• 9ac2586: Read the Vercel OIDC token via @vercel/oidc's refreshing getVercelOidcToken instead of the non-refreshing getVercelOidcTokenSync. This refreshes an expired token in development environments. In production with a valid token, behavior is unchanged. If a refresh is needed but fails, the token is treated as absent so callers still fall back to BLOB_READ_WRITE_TOKEN.

Commits

• cdbac94 Version Packages (#1100)
• 8b49164 [blob] Add putImage, deprecate put optimizeImage option and putFromUrl (#1099)
• 7637604 Version Packages (#1097)
• ad5a134 [blob] Add optimizeImage option to put and new putFromUrl method (#1093)
• f5cb880 Version Packages (#1085)
• d0118c4 [@​vercel/blob] Add useCache option to presigned get URLs (#1084)
• 20e17d7 Version Packages (#1083)
• c4976ba [@​vercel/blob] Add rename operation (#1082)
• 89d94e9 [@​vercel/blob] Restore the useCache option on get() (#1081)
• 2c45378 [@​vercel/blob] Test OIDC token refresh between requests (#1078)
• Additional commits viewable in compare view

Updates ai from 7.0.0-beta.178 to 7.0.99

Changelog

Sourced from ai's changelog.

7.0.99

Patch Changes

• 615ac89: feat(ai): use InvalidArgumentError for utility input validation
• Updated dependencies [7f76d83]
  • @​ai-sdk/gateway@​4.0.80

7.0.98

Patch Changes

• 5ec21a6: fix: reject unsupported batch request types
• db59d78: feat(ai): add runtime context attribution to embed, embedMany and rerank
• 7469a3b: feat: support image generation requests in batches
• f87bf07: fix(ai): reject invalid reranking provider indices
• bc5cb7a: fix(ai): accept inferred tools in validateUIMessages
• a5f449a: feat(ai): add a stable UI message type and type guard for tool output errors
• Updated dependencies [5ec21a6]
• Updated dependencies [7469a3b]
• Updated dependencies [dbd83a3]
• Updated dependencies [813bb36]
• Updated dependencies [c43e4b7]
• Updated dependencies [03f4e59]
  • @​ai-sdk/gateway@​4.0.79
  • @​ai-sdk/provider@​4.0.14
  • @​ai-sdk/provider-utils@​5.0.40

7.0.97

Patch Changes

• ef3bac4: Observe video webhook receiver rejections before generation starts to prevent unhandled rejections during or after a failed start. Preserve start error precedence and assimilate custom receivers only once.
• 9942196: feat: add batch cancel and list APIs
• Updated dependencies [9942196]
  • @​ai-sdk/provider@​4.0.13
  • @​ai-sdk/gateway@​4.0.78
  • @​ai-sdk/provider-utils@​5.0.39

7.0.96

Patch Changes

• 912fb01: feat: add batch cancel and list APIs
• c595e6e: fix(ai): call atob without a receiver for Cloudflare Workers compatibility
• Updated dependencies [912fb01]
• Updated dependencies [aa4cc14]
• Updated dependencies [f102e41]
  • @​ai-sdk/provider@​4.0.12
  • @​ai-sdk/gateway@​4.0.77

... (truncated)

Commits

• 6c6c221 Version Packages (#20670)
• 615ac89 feat: use InvalidArgumentError for utility input validation (#20304)
• 9ed46d2 Version Packages (#20569)
• a5f449a feat: add a stable UI message type and type guard for tool output errors (#20...
• bc5cb7a fix(ai): accept inferred tools in validateUIMessages (#20660)
• db59d78 feat(ai): add runtime context attribution to embed, embedMany and rerank (#20...
• 7469a3b feat: support image generation requests in batches (#20594)
• f87bf07 fix: rerank() returns undefined documents for invalid provider ranking indice...
• 5ec21a6 fix: reject unsupported batch request types (#20562)
• e9795ab Version Packages (#20555)
• Additional commits viewable in compare view

Updates better-auth from 1.6.20 to 1.7.4

Release notes

Sourced from better-auth's releases.

v1.7.4

better-auth

Features

• Added experimental.instrumentation.enabled to disable OpenTelemetry span creation per auth instance. (#11224)
• Added support for additional session fields in testUtils auth helpers. (#11217)
• Added Vitest 5 support to the testing utilities. (#11205)

For detailed changes, see CHANGELOG

@better-auth/core

Features

• Added experimental.instrumentation.enabled to disable OpenTelemetry span creation per auth instance. (#11224)

Bug Fixes

• Fixed Metro bundling when the optional OpenTelemetry API is not installed. (#11210)

For detailed changes, see CHANGELOG

@better-auth/expo

Bug Fixes

• Fixed multibyte session data storage in Expo SecureStore. (#11238)
• Fixed stale Expo secure-storage session data and corrupted cookies during concurrent updates. (#11200)

For detailed changes, see CHANGELOG

@better-auth/drizzle-adapter

Bug Fixes

• Improved schema validation for the Drizzle Relations v2 adapter. (#11213)

For detailed changes, see CHANGELOG

@better-auth/test-utils

Features

• Added Vitest 5 support to the testing utilities. (#11205)

For detailed changes, see CHANGELOG

Contributors

... (truncated)

Changelog

Sourced from better-auth's changelog.

1.7.4

Patch Changes

• #11205 3f890eb Thanks @​bytaesu! - Support Vitest 5 in the testing utilities while retaining support for previously supported Vitest versions.

• #11224 c1756a2 Thanks @​bytaesu! - Add experimental.instrumentation.enabled to disable Better Auth OpenTelemetry span creation per auth instance. Instrumentation remains enabled by default and independent of usage reporting.

• #11217 9b9638e Thanks @​onmax! - Allow testUtils auth helpers to accept additional session fields through the session option, including required fields without defaults and per-session overrides of configured defaults.

• Updated dependencies [3ff842a, b905bfe, c1756a2]:

  • @​better-auth/core@​1.7.4
  • @​better-auth/drizzle-adapter@​1.7.4
  • @​better-auth/kysely-adapter@​1.7.4
  • @​better-auth/memory-adapter@​1.7.4
  • @​better-auth/mongo-adapter@​1.7.4
  • @​better-auth/prisma-adapter@​1.7.4
  • @​better-auth/telemetry@​1.7.4

1.7.3

Patch Changes

• #11060 3660f06 Thanks @​bytaesu! - Handle malformed custom-scheme callback URLs without excessive processing.

• #11037 5bd7096 Thanks @​bytaesu! - Prevent repeated TOTP enrollment from replacing an active authenticator and its backup codes.

• #11120 7ec7146 Thanks @​onmax! - Prevent getSession from failing when cookie caching is disabled while clients still have cached session cookies.

• #9908 76d311f Thanks @​harshil1712! - Add Cloudflare as a built-in social provider, with support for client-secret authentication and PKCE clients without a secret.

• #11188 c47b765 Thanks @​bytaesu! - Normalize Auth0 domains without a potentially slow trailing-slash regular expression.

• #11084 2d5c63d Thanks @​bytaesu! - Prevent duplicate session requests and hydration mismatches when using the Vue client with Nuxt useFetch.

• #11147 a9d8c12 Thanks @​bytaesu! - Add isPasswordCompromised for checking passwords against Have I Been Pwned in custom server-side flows, while ignoring padded response entries with zero occurrences.

• #10988 9fc7498 Thanks @​bytaesu! - Run callback hooks after proxied OAuth sign-ins and preserve server state when callback cookies are unavailable. The legacy /oauth-proxy-callback endpoint is deprecated and will be removed in the next minor release.

• #11178 be0e007 Thanks @​bytaesu! - Report missing tables, missing columns, and required columns Better Auth never writes during initialization, with guidance for fixing them. Kysely checks the live database schema. Authentication requests await the same check and are rejected if the schema does not match.

  Validation is enabled by default, including in production. Set advanced.database.validateSchema: false to disable runtime validation. auth migrate refuses to apply changes when required unwritten columns need manual repair.

• #11069 0bb0dbf Thanks @​bytaesu! - Improve dynamic organization role permission check performance.

• #11153 2220ee7 Thanks @​bytaesu! - Restore sign-in compatibility with 1.6 databases by identifying accounts with (providerId, accountId) and removing the issuer requirement introduced in 1.7.0. Upgrading from 1.6 no longer requires an account schema migration. Ambiguous account keys are rejected instead of selecting an arbitrary account.

  If you applied the 1.7.0 through 1.7.2 account schema, remove its issuer unique index before upgrading. For SQL databases, also make issuer nullable or remove the column so sign-ups and account linking can succeed. auth migrate does not perform this cleanup. Follow the upgrade guide for database-specific steps.

• #10978 5fe5bc2 Thanks @​BetterAndBetterII! - Skip a generic OAuth provider when discovery fails instead of taking down the rest of the auth API.

... (truncated)

Commits

• 735008f chore: release v1.7.4 (#11216)
• 80b1d64 chore(deps): bump next (#11226)
• 9b9638e feat(test-utils): accept additional session fields in auth helpers (#11217)
• eb8b6fd test: adopt Vitest 5 features (#11211)
• 3f890eb feat(test): support Vitest 5 (#11205)
• c1756a2 feat(instrumentation): add option to disable tracing (#11224)
• 874752f test(open-api): lock in requestBody for /phone-number/verify (#11208)
• cfedf97 docs: update CLI references to auth (#11214)
• 597d39c chore: release v1.7.3 (#11032)
• 1a1b7d5 fix(core): restore optional atomic adapter methods (#11189)
• Additional commits viewable in compare view

Updates jszip from 3.10.1 to 3.10.2

Changelog

Sourced from jszip's changelog.

v3.10.2 2026-09-09

• Fix cross-realm binary type detection in getTypeOf. Fixes #759 (see #578)
• Add missing types for JSZip.defaults. Fixes #690 (see #927)
• Fix Blob support in Node.js 18 and up. Fixes #941 (see #955)

Commits

• 020fa33 Release preparation for 3.10.2 (#974)
• d38fda5 Fix cross-realm binary type detection in getTypeOf (#578)
• e682f9a Fix grunt build rebundling existing dist via browser field (#971)
• 5adef36 Add missing types for JSZip.defaults (#927)
• 41a1342 Fix blob support in Node.js 18 and up (#955)
• 643714a Move all continuous integration to GitHub Actions (#942)
• 418c11f Upgrade Playwright to the latest version (#940)
• 2ceb998 Create FUNDING.yml
• See full diff in compare view

Maintainer changes

This version was pushed to npm by jkoops, a new releaser for jszip since your current version.

Updates neo4j-driver from 6.1.0 to 6.2.0

Release notes

Sourced from neo4j-driver's releases.

v6.2.0

Adds support for the new protocol version Bolt 6.1 and adds API support for the new UUID database type.

⭐ New Features

---

• Support for Bolt 6.1 and the neo4j UUID type has been added. #1415
• Support for the UUID type has been added to Object Mapping #1442

Commits

• 631416f add UUID to object mapping (#1442)
• 0017123 add support for Bolt 6.1 and UUIDs (#1415)
• 085ff7d bump deno to 6.2.0 (#1430)
• See full diff in compare view

Updates next from 16.2.9 to 16.3.5

Release notes

Sourced from next's releases.

v16.3.5

The following bug fixes have been backported. It does not include all pending features/changes on canary.

• next/image: Skip 0-byte entries when initializing disk LRU cache (#98185)
• next/image: Reject empty images when reading/writing to the disk cache (#98186)
• Emit whole-app server NFTs when output: 'standalone' is used with an adapter (#98167)
• Add CSP nonce to script tags of loading and template files (#98403)
• Fix use cache prerender signal retention (#98448)

v16.3.4

Follow-up release to v16.3.3 re-enabling AVIF Image Optimization (#97949).

The following bug fixes have been backported. It does not include all pending features/changes on canary.

• testmode: Fix infinite recursion in testmode passthrough fetch (#97691)
• Fix build error when aliasing typescript to @​typescript/typescript6 (#97997)
• Fix unset crossOrigin in Turbopack manifests (#97930)

Credits

Huge thanks to @​eps1lon, @​mischnic, and @​timneutkens for helping!

v16.3.3

This release contains security fixes for the following advisories:

Critical:

• Unauthenticated Remote Code Execution on windows-hosted servers
• Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used

v16.3.2

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

• [backport] Scope app-entry export validation to files inside the app directory (#97357)
• [backport] Fix catch-all index page being served for every other slug (#97416)
• [16.3] Turbopack: don't trace embedded WASM loader helpers (#97353) (#97463)
• [16.3] Turbopack: retain conditions when replacing resolve request keys (#97453)
• [16.3.x] Fix Turbopack worker chunk loading with asset prefix (#97419)
• [16.3.x] Authenticate Turborepo remote caching with OIDC instead of a static PAT (#97603)

Credits

Huge thanks to @​lubieowoce, @​unstubbable, @​timneutkens, @​mischnic, and @​eps1lon for helping!

v16.3.1

What's Changed

• [16.x] Turbopack: don't strip async-module runtime from shared runtime chunks by @​lukesandberg in vercel/next.js#96653

... (truncated)

Commits

• ca2c75e v16.3.5
• 14fb290 [backport] Fix use cache prerender signal retention (#98448)
• 2b1f28d [16.3.x] Add CSP nonce to script tags of loading and template files (#98403)
• 4b56cee [16.3.x] Backport docs fixes (#98317)
• 5568a02 [backport] docs: local development: Rewrite docker section, add Windows Dev D...
• 93249ab [16.3.X] Emit whole-app server NFTs when output: 'standalone' is used with ...
• 6549fd7 [16.3.x] next/image: reject empty image on read/write to disk cache (#98186)
• d9eac96 [16.3.x] next/image: skip 0-byte entries when initializing disk LRU cache (#9...
• 84b35fe [test] Fix 16.3 deploy test assertions (#98133)
• 14f9c1a [16.3.x][ci] Run flake detection and new deploy tests when merged and on back...
• Additional commits viewable in compare view

Updates pmtiles from 4.4.1 to 4.5.0

Commits

• See full diff in compare view

Updates react from 19.2.7 to 19.3.0

Release notes

Sourced from react's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

• <ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@​sebmarkbage, @​jackpope, @​gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)
• Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@​jackpope, @​sebmarkbage, @​eps1lon, @​Dhakshin2007, @​chirokas, @​teamleaderleo, @​fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545,

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
trail-graph	Error		Sep 16, 2026 5:39pm UTC