chore(deps): bump the compatible-updates group across 1 directory with 12 updates by dependabot[bot] · Pull Request #22 · trytilde/examples

dependabot · 2026-09-17T17:07:39Z

Bumps the compatible-updates group with 12 updates in the /code-review-bot directory:

Package	From	To
@ai-sdk/mcp	`1.0.59`	`1.0.80`
@ai-sdk/openai	`3.0.81`	`3.0.112`
ai	`6.0.220`	`6.0.282`
modal	`0.9.0`	`0.10.1`
next	`16.2.12`	`16.3.5`
react	`19.2.8`	`19.3.0`
@types/react	`19.2.7`	`19.3.0`
react-dom	`19.2.8`	`19.3.0`
@types/react-dom	`19.2.3`	`19.3.0`
zod	`4.4.3`	`4.6.5`
@types/node	`24.10.0`	`24.13.4`
@types/react	`19.2.7`	`19.3.0`
@types/react-dom	`19.2.3`	`19.3.0`
eslint-config-next	`16.2.12`	`16.3.5`

Updates @ai-sdk/mcp from 1.0.59 to 1.0.80

Changelog

Sourced from @ai-sdk/mcp's changelog.

1.0.80

Patch Changes

Updated dependencies [1a4dbb1]

@ai-sdk/provider@3.0.16

@ai-sdk/provider-utils@4.0.51

1.0.79

Patch Changes

3d2db73: fix(mcp): accept trailing slashes on origin-only OAuth issuers

1.0.78

Patch Changes

172d3c0: feat(mcp): surface server-provided tool annotations in tool metadata

1.0.77

Patch Changes

Updated dependencies [cc23556]

@ai-sdk/provider-utils@4.0.50

1.0.76

Patch Changes

Updated dependencies [9a521b9]

@ai-sdk/provider-utils@4.0.49

1.0.75

Patch Changes

878bdb9: Apply MCP scope selection to dynamic client registration as well as authorization.

204ce6c: fix(mcp): reject private OAuth endpoints before sending credentials

1.0.74

Patch Changes

e7d359e: Fetch all paginated tool definitions when creating an MCP tool set.

Updated dependencies [5642849]

@ai-sdk/provider-utils@4.0.48

1.0.73

... (truncated)

Commits

6fabd70 Version Packages (#20526)
fb0b34b Version Packages (#20454)
3d2db73 [v6.0] fix: accept origin-only OAuth issuers with a trailing slash (#20463)
0ef8cce Version Packages (#20322)
172d3c0 Backport: feat(mcp): surface server-provided tool annotations in tool metadat...
f8367cd Version Packages (#19864)
a7dbe1f Version Packages (#19752)
b13b1ed [v6.0] fix: make package clean scripts work on Windows (#19636)
03bfed6 Version Packages (#19479)
204ce6c Backport: fix(mcp): reject private OAuth endpoints before sending credentials...
Additional commits viewable in compare view

Updates @ai-sdk/openai from 3.0.81 to 3.0.112

Changelog

Sourced from @ai-sdk/openai's changelog.

3.0.112

Patch Changes

1336501: fix(openai): return an AI SDK error for empty chat completion choices

Updated dependencies [1a4dbb1]

@ai-sdk/provider@3.0.16

@ai-sdk/provider-utils@4.0.51

3.0.111

Patch Changes

1f75808: Include explicit message item types in Azure AI Foundry Responses requests.

65150c2: feat(openai): add GPT Image 2.5 Flare and Sunburst model IDs

3.0.110

Patch Changes

447ba18: feat(openai): add async tool calling

46c6820: Add xhigh and max quality support for GPT Image 2.5 Flare and Sunburst in image generation, image editing, and the Responses API image generation tool.

3.0.109

Patch Changes

7f3b8f0: feat(openai): add GPT-6 reasoning configuration updates

3.0.108

Patch Changes

019eec8: feat(openai): add support for the gpt-6-astra

3.0.107

Patch Changes

8844beb: fix(openai): flatten mid-stream Responses error events

cf1ba03: fix(openai): preserve complete Responses API raw usage objects

3.0.106

Patch Changes

85ba0b0: Preserve explicit prompt cache breakpoints on scalar Responses tool results.

3.0.105

... (truncated)

Commits

6fabd70 Version Packages (#20526)
1336501 [v6.0] fix: classify empty non-streaming chat choices as invalid provider res...
cadd01d Version Packages (#20502)
1f75808 [v6.0] fix(azure): include explicit message types for Foundry Responses (#20489)
65150c2 Backport: feat(openai): add GPT Image 2.5 model IDs (#20485)
fb0b34b Version Packages (#20454)
46c6820 Backport: feat(openai): support xhigh and max image quality (#20477)
447ba18 feat(openai): add async tool calling (#20450)
d34129e Version Packages (#20401)
7f3b8f0 feat(openai): add GPT-6 reasoning configuration updates (#20396)
Additional commits viewable in compare view

Updates ai from 6.0.220 to 6.0.282

Changelog

Sourced from ai's changelog.

6.0.282

Patch Changes

Updated dependencies [e4ff9e7]

@ai-sdk/gateway@3.0.193

6.0.281

Patch Changes

Updated dependencies [1b7ff26]

Updated dependencies [4d228f2]

@ai-sdk/gateway@3.0.192

6.0.280

Patch Changes

04783ca: fix(ai): call atob without a receiver for Cloudflare Workers compatibility

1a4dbb1: Retry unclassified empty image results, preserve retry-attempt accounting, add provider-independent result retryability classification, preserve it through the AI Gateway, and mark Google and Google Vertex content-filtered results as terminal.

Updated dependencies [1a4dbb1]

Updated dependencies [b273f40]

@ai-sdk/gateway@3.0.191

@ai-sdk/provider@3.0.16

@ai-sdk/provider-utils@4.0.51

6.0.279

Patch Changes

6517262: fix(ai): decode text data URLs in Node.js

6.0.278

Patch Changes

Updated dependencies [fc032e8]

Updated dependencies [761dae9]

@ai-sdk/gateway@3.0.190

6.0.277

Patch Changes

Updated dependencies [8839d87]

@ai-sdk/gateway@3.0.189

6.0.276

... (truncated)

Commits

b0b3ea2 Version Packages (#20677)
532a259 Version Packages (#20566)
6fabd70 Version Packages (#20526)
1a4dbb1 [v6.0] fix: generateImage maxRetries skips transient empty image results (#20...
04783ca fix(ai): call atob without a receiver (#20542)
cadd01d Version Packages (#20502)
6517262 [v6.0] fix: decode valid text data URLs in Node.js (#20482)
fb0b34b Version Packages (#20454)
0ef8cce Version Packages (#20322)
f3b5f53 Version Packages (#20183)
Additional commits viewable in compare view

Updates modal from 0.9.0 to 0.10.1

Commits

3b4ed40 Release v0.10.1 of the JS / Go SDKs (#58439)
9a37902 [Proto] Return helpful hint when Cls is passed to FunctionGet (#58038)
5ce9823 [CLI] modal server logs and modal function logs (#56981)
f321b87 Add OAuth private-key JWT authentication to the JS SDK (#58126)
8b61508 Add OAuth private-key JWT authentication to the Go SDK (#57861)
78d3314 Add FunctionGetFlashAuthToken RPC to api.proto (#57751)
5f257c4 Remove legacy Sandbox filesystem API from the Python client (#57485)
a24a6c2 Make _AuthTokenManager accept a custom token fetcher (#58134)
789ce05 Add environment setting to block unauthenticated resources (#57986)
6cc41e6 Run static_types_test.py under Bazel instead of skipping it (#57697)
Additional commits viewable in compare view

Updates next from 16.2.12 to 16.3.5

Release notes

Sourced from next's releases.

v16.3.5

The following bug fixes have been backported. It does not include all pending features/changes on canary.

next/image: Skip 0-byte entries when initializing disk LRU cache (#98185)

next/image: Reject empty images when reading/writing to the disk cache (#98186)

Emit whole-app server NFTs when output: 'standalone' is used with an adapter (#98167)

Add CSP nonce to script tags of loading and template files (#98403)

Fix use cache prerender signal retention (#98448)

v16.3.4

Follow-up release to v16.3.3 re-enabling AVIF Image Optimization (#97949).

The following bug fixes have been backported. It does not include all pending features/changes on canary.

testmode: Fix infinite recursion in testmode passthrough fetch (#97691)

Fix build error when aliasing typescript to @typescript/typescript6 (#97997)

Fix unset crossOrigin in Turbopack manifests (#97930)

Credits

Huge thanks to @eps1lon, @mischnic, and @timneutkens for helping!

v16.3.3

This release contains security fixes for the following advisories:

Critical:

Unauthenticated Remote Code Execution on windows-hosted servers

Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used

v16.3.2

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

[backport] Scope app-entry export validation to files inside the app directory (#97357)

[backport] Fix catch-all index page being served for every other slug (#97416)

[16.3] Turbopack: don't trace embedded WASM loader helpers (#97353) (#97463)

[16.3] Turbopack: retain conditions when replacing resolve request keys (#97453)

[16.3.x] Fix Turbopack worker chunk loading with asset prefix (#97419)

[16.3.x] Authenticate Turborepo remote caching with OIDC instead of a static PAT (#97603)

Credits

Huge thanks to @lubieowoce, @unstubbable, @timneutkens, @mischnic, and @eps1lon for helping!

v16.3.1

What's Changed

[16.x] Turbopack: don't strip async-module runtime from shared runtime chunks by @lukesandberg in vercel/next.js#96653

... (truncated)

Commits

ca2c75e v16.3.5
14fb290 [backport] Fix use cache prerender signal retention (#98448)
2b1f28d [16.3.x] Add CSP nonce to script tags of loading and template files (#98403)
4b56cee [16.3.x] Backport docs fixes (#98317)
5568a02 [backport] docs: local development: Rewrite docker section, add Windows Dev D...
93249ab [16.3.X] Emit whole-app server NFTs when output: 'standalone' is used with ...
6549fd7 [16.3.x] next/image: reject empty image on read/write to disk cache (#98186)
d9eac96 [16.3.x] next/image: skip 0-byte entries when initializing disk LRU cache (#9...
84b35fe [test] Fix 16.3 deploy test assertions (#98133)
14f9c1a [16.3.x][ci] Run flake detection and new deploy tests when merged and on back...
Additional commits viewable in compare view

Updates react from 19.2.8 to 19.3.0

Release notes

Sourced from react's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)

Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

Enable Trusted Types API integration (@rickhanlonii #35816)

Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)

Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@hoxyq, @eps1lon: #37104, #37203, #37491)

All Changes

React

Fast Refresh Fixes

Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@sophiebits #36965)

Fix Fast Refresh so edits to a memo() comparison function take effect (@sophiebits #36964)

Fix Fast Refresh crash when an edit changes the kind of a component's type (@sophiebits #36963)

Unify hot reload type resolution for Fast Refresh (@sophiebits #36962)

Fix Fast Refresh to remount correctly when an edit changes the component kind (@sophiebits #36950)

Double invoke effects in StrictMode after Fast Refresh (@eps1lon #35962)

Performance Track Fixes

Prevent crash when accessing $$typeof in Performance Tracks (@eps1lon #35679)

Handle non-string function names in Performance Tracks (@eps1lon #35659)

Use minus (-) instead of en dash for removed props in Performance Tracks (@eps1lon #35649)

Handle arrays with bigints in deep objects in Performance Tracks (@eps1lon #35648)

Don't enumerate typed array props in Performance Tracks in DEV (@UditDewan #36913)

Bail out of diffing wide objects and arrays in Performance Tracks (@eps1lon #34742)

Clear potentially large performance measures in DEV (@hoxyq #34803)

Fix missing else branch for renders with no props change in Performance Tracks (@hoxyq #34837)

Activity Fixes

Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@sophiebits #36947)

Hide portal contents when an Activity is hidden (@acdlite #35091)

Prevent metadata hoisting in hidden <Activity> trees (@ronnakamoto #34983)

Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@acdlite #35074)

Don't unhide a node if a direct parent Offscreen is still hidden (@sebmarkbage #34821)

Don't show internal <Offscreen> component in error messages (@rickhanlonii #35763)

Warn in DEV when a component appears to have been unblocked by a conditional use() (@hoxyq, @eps1lon: #37104, #37203, #37491)

Render transitions independently instead of entangling them into a single render (@acdlite #37290)

... (truncated)

Changelog

Sourced from react's changelog.

19.3.0 (September 9, 2026)

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)

Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

Enable Trusted Types API integration (@rickhanlonii #35816)

Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)

Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@hoxyq, @eps1lon: #37104, #37203, #37491)

All Changes

React

Fast Refresh Fixes

Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@sophiebits #36965)

Fix Fast Refresh so edits to a memo() comparison function take effect (@sophiebits #36964)

Fix Fast Refresh crash when an edit changes the kind of a component's type (@sophiebits #36963)

Unify hot reload type resolution for Fast Refresh (@sophiebits #36962)

Fix Fast Refresh to remount correctly when an edit changes the component kind (@sophiebits #36950)

Double invoke effects in StrictMode after Fast Refresh (@eps1lon #35962)

Performance Track Fixes

Prevent crash when accessing $$typeof in Performance Tracks (@eps1lon #35679)

Handle non-string function names in Performance Tracks (@eps1lon #35659)

Use minus (-) instead of en dash for removed props in Performance Tracks (@eps1lon #35649)

Handle arrays with bigints in deep objects in Performance Tracks (@eps1lon #35648)

Don't enumerate typed array props in Performance Tracks in DEV (@UditDewan #36913)

Bail out of diffing wide objects and arrays in Performance Tracks (@eps1lon #34742)

Clear potentially large performance measures in DEV (@hoxyq #34803)

Fix missing else branch for renders with no props change in Performance Tracks (@hoxyq #34837)

Activity Fixes

Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@sophiebits #36947)

Hide portal contents when an Activity is hidden (@acdlite #35091)

Prevent metadata hoisting in hidden <Activity> trees (@ronnakamoto #34983)

Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@acdlite #35074)

Don't unhide a node if a direct parent Offscreen is still hidden (@sebmarkbage #34821)

Don't show internal <Offscreen> component in error messages (@rickhanlonii #35763)

Warn in DEV when a component appears to have been unblocked by a conditional use() (@hoxyq, @eps1lon: #37104, #37203, #37491)

Render transitions independently instead of entangling them into a single render (@acdlite #37290)

Fix hang when updating a dehydrated boundary inside a hidden tree (@gaearon #37135)

Don't reacquire Host Singletons during dev effect validation (@gnoff #37113)

Only remove properties from Host Singletons on release (@gnoff #37112)

... (truncated)

Commits

2dc7da7 [test] Bump Jest to 30.4 (#37382)
4f93894 docs: remove stale parentType param from validateChildKeys JSDoc (#36928)
dbc3750 Update required references to GitHub repo (#36752)
900ae09 [flow] Bump flow to v0.317.0 (#36701)
fbb1370 [flow] Bump flow to v0.307.1 (#36199)
56922cf [react-native-renderer] Delete Paper (legacy) renderer (#36285)
74568e8 [Flight] Transport AggregateErrors.errors (#36156)
e66ef64 [tests] remove withoutStack from assertConsole helpers (#35498)
db71391 [Fiber] Instrument the lazy initializer thenable in all cases (#35521)
3e1abcc [tests] Require exact error messages in assertConsole helpers (#35497)
Additional commits viewable in compare view

Updates @types/react from 19.2.7 to 19.3.0

Commits

See full diff in compare view

Updates react-dom from 19.2.8 to 19.3.0

Release notes

Sourced from react-dom's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, Description has been truncated

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}

…h 12 updates Bumps the compatible-updates group with 12 updates in the /code-review-bot directory: | Package | From | To | | --- | --- | --- | | [@ai-sdk/mcp](https://github.com/vercel/ai/tree/HEAD/packages/mcp) | `1.0.59` | `1.0.80` | | [@ai-sdk/openai](https://github.com/vercel/ai/tree/HEAD/packages/openai) | `3.0.81` | `3.0.112` | | [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `6.0.220` | `6.0.282` | | [modal](https://github.com/modal-labs/modal-client) | `0.9.0` | `0.10.1` | | [next](https://github.com/vercel/next.js) | `16.2.12` | `16.3.5` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.7` | `19.3.0` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.0` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.3` | `19.3.0` | | [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.6.5` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.10.0` | `24.13.4` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.7` | `19.3.0` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.3` | `19.3.0` | | [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.2.12` | `16.3.5` | Updates `@ai-sdk/mcp` from 1.0.59 to 1.0.80 - [Release notes](https://github.com/vercel/ai/releases) - [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/mcp@1.0.80/packages/mcp/CHANGELOG.md) - [Commits](https://github.com/vercel/ai/commits/@ai-sdk/mcp@1.0.80/packages/mcp) Updates `@ai-sdk/openai` from 3.0.81 to 3.0.112 - [Release notes](https://github.com/vercel/ai/releases) - [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/openai@3.0.112/packages/openai/CHANGELOG.md) - [Commits](https://github.com/vercel/ai/commits/@ai-sdk/openai@3.0.112/packages/openai) Updates `ai` from 6.0.220 to 6.0.282 - [Release notes](https://github.com/vercel/ai/releases) - [Changelog](https://github.com/vercel/ai/blob/ai@6.0.282/packages/ai/CHANGELOG.md) - [Commits](https://github.com/vercel/ai/commits/ai@6.0.282/packages/ai) Updates `modal` from 0.9.0 to 0.10.1 - [Changelog](https://github.com/modal-labs/modal-client/blob/main/CHANGELOG_DEV.md) - [Commits](modal-labs/modal-client@go/v0.9.0...go/v0.10.1) Updates `next` from 16.2.12 to 16.3.5 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.2.12...v16.3.5) Updates `react` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react) Updates `@types/react` from 19.2.7 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `react-dom` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom) Updates `@types/react-dom` from 19.2.3 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `zod` from 4.4.3 to 4.6.5 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.4.3...v4.6.5) Updates `@types/node` from 24.10.0 to 24.13.4 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@types/react` from 19.2.7 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `@types/react-dom` from 19.2.3 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `eslint-config-next` from 16.2.12 to 16.3.5 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](https://github.com/vercel/next.js/commits/v16.3.5/packages/eslint-config-next) --- updated-dependencies: - dependency-name: "@ai-sdk/mcp" dependency-version: 1.0.80 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: compatible-updates - dependency-name: "@ai-sdk/openai" dependency-version: 3.0.112 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: compatible-updates - dependency-name: ai dependency-version: 6.0.282 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: compatible-updates - dependency-name: modal dependency-version: 0.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: compatible-updates - dependency-name: next dependency-version: 16.3.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: compatible-updates - dependency-name: react dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: compatible-updates - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: compatible-updates - dependency-name: react-dom dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: compatible-updates - dependency-name: "@types/react-dom" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: compatible-updates - dependency-name: zod dependency-version: 4.6.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: compatible-updates - dependency-name: "@types/node" dependency-version: 24.13.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: compatible-updates - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: compatible-updates - dependency-name: "@types/react-dom" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: compatible-updates - dependency-name: eslint-config-next dependency-version: 16.3.5 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: compatible-updates ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 17, 2026

Navigation Menu

chore(deps): bump the compatible-updates group across 1 directory with 12 updates - #22

chore(deps): bump the compatible-updates group across 1 directory with 12 updates#22
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/code-review-bot/compatible-updates-a4adb39e50

dependabot Bot commented on behalf of github Sep 17, 2026 •

edited by blacksmith-sh Bot

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 17, 2026 • edited by blacksmith-sh Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

1.0.80

Patch Changes

1.0.79

Patch Changes

1.0.78

Patch Changes

1.0.77

Patch Changes

1.0.76

Patch Changes

1.0.75

Patch Changes

1.0.74

Patch Changes

1.0.73

3.0.112

Patch Changes

3.0.111

Patch Changes

3.0.110

Patch Changes

3.0.109

Patch Changes

3.0.108

Patch Changes

3.0.107

Patch Changes

3.0.106

Patch Changes

3.0.105

6.0.282

Patch Changes

6.0.281

Patch Changes

6.0.280

Patch Changes

6.0.279

Patch Changes

6.0.278

Patch Changes

6.0.277

Patch Changes

6.0.276

v16.3.5

v16.3.4

Credits

v16.3.3

v16.3.2

Core Changes

Credits

v16.3.1

What's Changed

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

Notable changes

All Changes

React

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

Notable changes

All Changes

React

19.3.0 (September 9, 2026)

New React Features

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Sep 17, 2026 •

edited by blacksmith-sh Bot

Loading