Skip to content

chore(deps): Bump the minor-and-patch group with 14 updates - #85

Merged
1 commit merged into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-db461b1019
Oct 7, 2026
Merged

chore(deps): Bump the minor-and-patch group with 14 updates#85
1 commit merged into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-db461b1019

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 7, 2026 •
edited by coderabbitai Bot
Loading

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 14 updates:

Package From To
fumadocs-core 16.15.14 16.16.0
fumadocs-mdx 15.4.5 15.4.6
fumadocs-openapi 12.0.3 12.2.0
fumadocs-ui 16.15.14 16.16.0
lucide-react 1.48.0 1.51.0
nodemailer 10.0.11 10.0.14
shiki 4.4.3 4.5.0
smtp-server 3.19.13 3.19.17
@aws-sdk/client-s3 3.1141.0 3.1146.0
@aws-sdk/s3-request-presigner 3.1141.0 3.1146.0
@types/node 22.20.4 22.20.5
next 16.3.6 16.3.8
oxlint 1.85.0 1.86.0
vitest 5.0.2 5.0.3

Updates fumadocs-core from 16.15.14 to 16.16.0

Release notes

Sourced from fumadocs-core's releases.

fumadocs@16.16.0

  • @​fumadocs/base-ui@​16.16.0
  • fumadocs-core@16.16.0
  • fumadocs-ui@16.16.0

Place AI chat in layouts

Docs, Notebook, and Glass layouts accept an aiChat option, pass your chat as aiChat.panel and the layout places it beside the page on wide viewports, and floats it over the page on smaller ones.

Your chat component no longer needs layout-specific positioning, like targeting #nd-docs-layout or overriding --fd-right-width.

The ai feature of Fumadocs CLI now renders your docs layout from a client component at ai/layout.tsx in your components directory, which passes the installed chat to aiChat. It supports Docs, Notebook, Glass, and Spacious layouts, and only adds a floating trigger to the layouts without their own.

Export Glass layout as DocsLayout

Like other docs layouts, fumadocs-ui/layouts/glass exports DocsLayout, DocsLayoutProps, and DocsSlots. The GlassLayout names remain as aliases.

Introduce Spacious Layout

A less compact version of Docs Layout, the page sits in an inset panel beside the sidebar, with page-level actions at the top of the panel.

  • Use it from fumadocs-ui/layouts/spacious and fumadocs-ui/layouts/spacious/page, and import the styles from fumadocs-ui/css/generated/spacious.css.
  • Pass aiChat.panel to render your AI chat in the layout, docked beside the page on wide screens and floating over it on smaller ones.
  • Customize it with npx @fumadocs/cli customize, only available for Base UI.

The Chinese presets of @fumadocs/language include translations for its new strings.

fumadocs@16.15.18

  • @​fumadocs/base-ui@​16.15.18
  • fumadocs-core@16.15.18
  • fumadocs-ui@16.15.18

Meilisearch integration

Search your docs with Meilisearch, self-hosted or on Meilisearch Cloud.

  • toDocuments() and sync() from fumadocs-core/search/meilisearch export your pages and replace the documents of an index, old documents stay searchable until the new ones are indexed.
  • meilisearchClient() from fumadocs-core/search/client/meilisearch searches from the browser with useDocsSearch(), filtered by tag and locale.
const client = new Meilisearch({ host, apiKey: searchKey });
useDocsSearch({
client: meilisearchClient({ client, indexName: 'docs', locale }),
});

Set it up with npx @fumadocs/cli feature search --provider meilisearch, or choose it in create-fumadocs-app.

Fix #3627

... (truncated)

Commits

Updates fumadocs-mdx from 15.4.5 to 15.4.6

Release notes

Sourced from fumadocs-mdx's releases.

fumadocs-mdx@15.4.6

Keep collection dir outside the project in file paths

When a collection's dir was outside the project (e.g. ../content/docs), the leading ../ was dropped from info.fullPath and absolutePath, so getText('raw') failed with ENOENT.

Fix #3623

Commits

Updates fumadocs-openapi from 12.0.3 to 12.2.0

Release notes

Sourced from fumadocs-openapi's releases.

fumadocs-openapi@12.2.0

Redesigned API playground

The playground moves into a dialog, opened from Try in Playground on the endpoint bar of API pages.

  • The URL bar selects the server, edits its variables, and fills path parameters inline.
  • Auth, parameters and the request body are edited in one panel, one row per field with its type in the input. Descriptions and constraints like ranges and defaults open from the info button next to the field name.
  • Nested objects and arrays open in their own panel, navigated with breadcrumbs. The current breadcrumb switches between the nested fields of its parent, and the body can be edited as JSON.
  • OAuth 2.0 authorization opens in the same panel instead of a nested dialog, with the flow, client credentials and scopes to request. When a flow redirects to authorize, the playground reopens with the token once it returns to the page.
  • The response shows beside the code usages with its status, duration, size and headers. Until a request is sent, the documented response examples are shown instead.
  • Send requests with Cmd/Ctrl + Enter.

components.CollapsiblePanel of the playground options is removed, with the DefaultCollapsiblePanel and CollapsiblePanelProps exports of fumadocs-openapi/ui/playground/client.

Extra props of <PlaygroundClient /> like className now go to its endpoint bar instead of a form, so form props like onSubmit are no longer accepted.

Headless API playground

usePlayground() from fumadocs-openapi/playground holds the state of an API playground: its form, auth and the request it sends. The playground installed with Fumadocs CLI is built on it, so the installed code is only UI.

  • Responses of createBrowserFetcher() carry duration, mediaType, fileName and text().
  • Parameters of useOperation() are typed as OperationParameter, with the name and in required by OpenAPI. Parameters without a name are skipped.
  • writeOnly and readOnly of <PlaygroundClient /> are deprecated, they default to the values for requests.
  • FormValues of fumadocs-openapi/ui/playground/client is deprecated.

fumadocs-openapi@12.1.1

Download response bodies from the playground

The result panel of the API playground has a Download button for non-empty responses. The file is named from the Content-Disposition header, preferring filename* and without directories, otherwise response, which browsers complete with the extension of the media type.

For the browser to read Content-Disposition, cross-origin APIs have to list it in Access-Control-Expose-Headers, or be requested through the proxy.

Fix #3625

Send OAuth client credentials as HTTP Basic by default

Token requests of the playground default to Send as Basic Auth header, which RFC 6749 requires authorization servers to support.

  • The authorization code flow has the Client Authentication selector too, it always sent the client credentials in the body.
  • The password flow no longer requires client credentials with either method.
  • Without a client secret, the client_id is sent in the body instead, as public clients do.

Fix #3629

fumadocs-openapi@12.1.0

Render security scheme descriptions as Markdown in the playground

Fix #3607

Render request bodies of unsupported media types read-only

... (truncated)

Commits

Updates fumadocs-ui from 16.15.14 to 16.16.0

Release notes

Sourced from fumadocs-ui's releases.

fumadocs@16.16.0

  • @​fumadocs/base-ui@​16.16.0
  • fumadocs-core@16.16.0
  • fumadocs-ui@16.16.0

Place AI chat in layouts

Docs, Notebook, and Glass layouts accept an aiChat option, pass your chat as aiChat.panel and the layout places it beside the page on wide viewports, and floats it over the page on smaller ones.

Your chat component no longer needs layout-specific positioning, like targeting #nd-docs-layout or overriding --fd-right-width.

The ai feature of Fumadocs CLI now renders your docs layout from a client component at ai/layout.tsx in your components directory, which passes the installed chat to aiChat. It supports Docs, Notebook, Glass, and Spacious layouts, and only adds a floating trigger to the layouts without their own.

Export Glass layout as DocsLayout

Like other docs layouts, fumadocs-ui/layouts/glass exports DocsLayout, DocsLayoutProps, and DocsSlots. The GlassLayout names remain as aliases.

Introduce Spacious Layout

A less compact version of Docs Layout, the page sits in an inset panel beside the sidebar, with page-level actions at the top of the panel.

  • Use it from fumadocs-ui/layouts/spacious and fumadocs-ui/layouts/spacious/page, and import the styles from fumadocs-ui/css/generated/spacious.css.
  • Pass aiChat.panel to render your AI chat in the layout, docked beside the page on wide screens and floating over it on smaller ones.
  • Customize it with npx @fumadocs/cli customize, only available for Base UI.

The Chinese presets of @fumadocs/language include translations for its new strings.

fumadocs@16.15.18

  • @​fumadocs/base-ui@​16.15.18
  • fumadocs-core@16.15.18
  • fumadocs-ui@16.15.18

Meilisearch integration

Search your docs with Meilisearch, self-hosted or on Meilisearch Cloud.

  • toDocuments() and sync() from fumadocs-core/search/meilisearch export your pages and replace the documents of an index, old documents stay searchable until the new ones are indexed.
  • meilisearchClient() from fumadocs-core/search/client/meilisearch searches from the browser with useDocsSearch(), filtered by tag and locale.
const client = new Meilisearch({ host, apiKey: searchKey });
useDocsSearch({
client: meilisearchClient({ client, indexName: 'docs', locale }),
});

Set it up with npx @fumadocs/cli feature search --provider meilisearch, or choose it in create-fumadocs-app.

Fix #3627

... (truncated)

Commits

Updates lucide-react from 1.48.0 to 1.51.0

Release notes

Sourced from lucide-react's releases.

Version 1.51.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.50.0...1.51.0

Version 1.50.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.49.0...1.50.0

... (truncated)

Commits
  • 98331e2 chore(deps): bump the react-deps group across 1 directory with 3 updates (#4951)
  • 09aa9c5 chore(deps): Upgrade to vite 8 (#4950)
  • e042fec fix(packages): declare @types/react as an optional peer dependency (#4892)
  • See full diff in compare view

Updates nodemailer from 10.0.11 to 10.0.14

Release notes

Sourced from nodemailer's releases.

v10.0.14

10.0.14 (2026-10-03)

Bug Fixes

  • addressparser: keep a quoted display name that holds no "@" out of the address (3570d26)
  • addressparser: keep the group recursion depth out of the options object (a680254)
  • addressparser: stop a "[" from hiding the operators after it (5619784)
  • dkim: trim a header field name in linear time (c6f7a55)
  • mime-funcs: read and write header parameters per rfc2045 and rfc2231 (b8ccad7)
  • search only the new bytes for the end of the proxy CONNECT response (81efd7b)

v10.0.13

10.0.13 (2026-09-30)

Bug Fixes

  • read the advertised SASL methods without backtracking regexes (b5a896f)
  • strip comments inside an angle-addr before it becomes the address (a502247)

v10.0.12

10.0.12 (2026-09-28)

Bug Fixes

  • settle every send on a connection error, back off pool requeues, turn a bare CR into CRLF, bound fetch, honour requireTLS (63ccd66)
Changelog

Sourced from nodemailer's changelog.

10.0.14 (2026-10-03)

Bug Fixes

  • addressparser: keep a quoted display name that holds no "@" out of the address (3570d26)
  • addressparser: keep the group recursion depth out of the options object (a680254)
  • addressparser: stop a "[" from hiding the operators after it (5619784)
  • dkim: trim a header field name in linear time (c6f7a55)
  • mime-funcs: read and write header parameters per rfc2045 and rfc2231 (b8ccad7)
  • search only the new bytes for the end of the proxy CONNECT response (81efd7b)

10.0.13 (2026-09-30)

Bug Fixes

  • read the advertised SASL methods without backtracking regexes (b5a896f)
  • strip comments inside an angle-addr before it becomes the address (a502247)

10.0.12 (2026-09-28)

Bug Fixes

  • settle every send on a connection error, back off pool requeues, turn a bare CR into CRLF, bound fetch, honour requireTLS (63ccd66)
Commits
  • aefd1da chore(master): release 10.0.14 (#1880)
  • 520c4ef chore(deps): update dependencies
  • a680254 fix(addressparser): keep the group recursion depth out of the options object
  • 3570d26 fix(addressparser): keep a quoted display name that holds no "@" out of the a...
  • b8ccad7 fix(mime-funcs): read and write header parameters per rfc2045 and rfc2231
  • c6f7a55 fix(dkim): trim a header field name in linear time
  • eddce83 docs: give each overload signature its own JSDoc block (#1883)
  • 7310403 docs: document the parameters the JSDoc blocks left out (#1882)
  • 256177c docs: bind JSDoc @​param tags to the parameters they describe (#1874)
  • 1e90efb chore(services): add MailSenpai (#1881)
  • Additional commits viewable in compare view

Updates shiki from 4.4.3 to 4.5.0

Release notes

Sourced from shiki's releases.

v4.5.0

   🚀 Features

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub
Commits

Updates smtp-server from 3.19.13 to 3.19.17

Changelog

Sourced from smtp-server's changelog.

3.19.17 (2026-10-03)

Bug Fixes

  • deps: update nodemailer to 10.0.14 (07af5e0)

3.19.16 (2026-09-30)

Bug Fixes

  • deps: update nodemailer to 10.0.13 (08d93bc)

3.19.15 (2026-09-28)

Bug Fixes

  • answer 501 to valueless parameters, time out sockets before connect, enforce the line limit on complete lines (7baa137)
  • time out an implicit TLS handshake on the TLS socket, not the raw socket underneath it (447a59a)

3.19.14 (2026-09-27)

Bug Fixes

  • deps: update nodemailer to 10.0.11 (50944ed)
Commits
  • b90a8aa Merge pull request #279 from nodemailer/release-please--branches--master--com...
  • df25eaf chore(master): release 3.19.17
  • 07af5e0 fix(deps): update nodemailer to 10.0.14
  • ded4b93 Merge pull request #278 from nodemailer/release-please--branches--master--com...
  • dab3e6a chore(master): release 3.19.16
  • 08d93bc fix(deps): update nodemailer to 10.0.13
  • 4130849 Merge pull request #277 from nodemailer/release-please--branches--master--com...
  • 3f19384 chore(master): release 3.19.15
  • 447a59a fix: time out an implicit TLS handshake on the TLS socket, not the raw socket...
  • 675113f chore(deps): update dependencies
  • Additional commits viewable in compare view

Updates @aws-sdk/client-s3 from 3.1141.0 to 3.1146.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1146.0

3.1146.0(2026-10-02)

Documentation Changes
  • client-lambda-web: Documentation update for AWS Lambda Web Functions, clarifies that the LambdaWeb APIs are experimental and not yet available to external customers. (de11d1e1)
New Features
  • client-mediapackagev2: Dynamic Multiview enables viewers to watch multiple live video streams in a single combined output. Static filter configuration allows users to configure endpoints with layouts and sources without using query parameters. The number of sources per multiview channel has been increased to 50. (8a1ac09c)
  • client-invoicing: API and doc updates related to adding MarketplacePunchOutEnabled and MarketplacePunchOutPreference fields to ProcurementPortalPreferences related APIs (948be4b5)
  • client-glue: Added refresh token grant type to Glue Connection supported OAuth 2.0 grant types (6101fef0)
  • client-cognito-identity-provider: Amazon Cognito User Pools now supports the OIDC-standard authentication context class reference (ACR) and authentication methods reference (AMR) claims on issued access and Id tokens. Amazon Cognito User Pools also now supports step-up authentication via our existing authentication APIs. (196e191f)
  • client-pinpoint-sms-voice-v2: AWS End User Messaging SMS CarrierLookup API now supports phone number cleansing on customer opt-in. when selected, the response includes the additional field "OriginalPhoneNumber". It can also return additional PhoneNumberType enums, VOIP and PREPAID. (42d43613)
  • client-securityagent: Adds trigger filters that control which pull request events, target branches, and labels start an automatic code review. (3d73df94)

For list of updated packages, view updated-packages.md in assets-3.1146.0.zip

v3.1145.0

3.1145.0(2026-10-01)

Chores
Documentation Changes
  • client-ec2: This release launches the AMI tag sharing feature, which lets AMI owners share tags alongside their AMIs, eliminating the need to build and maintain custom tag replication workflows. (82608f8c)
New Features
  • clients: update client endpoints as of 2026-10-01 (5244c2a9)
  • client-bedrock-agent: Adds an optional textReadyAt field to ListIngestionJobs and GetIngestionJob for Managed Knowledge Bases data source sync jobs. The field denotes the timestamp at which all the documents in the scope of a sync job had their text content indexed and are available for retrieval. (a810c753)
  • client-lambda-web: Lambda Web Functions GA launch. Lambda Web Functions enable customers to run web applications and API backends (ed0d0540)
  • client-quicksight: This release adds HierarchyFilter support for Amazon QuickSight analysis and dashboard and 2 legged OAuth for databricks datasources. (a1730e33)
  • client-endusermessaging: AWS End User Messaging now supports Brand profiles and Notify code configurations. Brand profiles capture your sender details once to reuse across phone number registrations. Notify code configurations let you define your OTP policy and delivery settings to send passcodes in minutes. (3e5402c6)
  • client-transfer: AWS Transfer Family Workflows adds support for the structuredLogDestinations option, enabling customers to specify a custom Amazon CloudWatch Logs log group for managed workflow execution logs. (db1f8330)
  • client-health: Adds DescribeServiceLifecycle operation returning lifecycle information for AWS services, including end-of-support dates, version recommendations, and lifecycle events. (db93c016)
  • client-cloudfront: Added always-amz-auth as a supported signing behavior for Origin Access Control (OAC), enabling CloudFront to authenticate requests to Lambda-Web origins. (e24eb7cf)
  • client-sagemaker: Release support for c8a.16xlarge and m8a.16xlarge instance types for SageMaker HyperPod (cfa700a6)
  • client-securityhub: Adds GetRemediationsV2 and ListExposuresByRemediationV2 APIs. This feature allows customers to see their highest priority remediations for their Exposure findings. Remediations target key changes customers can make to resources to drive finding resolution. (fe355577)
Bug Fixes
  • lib-transfer-manager: respect file read stream's byte range on upload (#8324) (449c2814)
  • ci: run format-check when a draft PR is marked ready for review (#8326) (d99dd58e)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1146.0 (2026-10-02)

Note: Version bump only for package @​aws-sdk/client-s3

3.1145.0 (2026-10-01)

Note: Version bump only for package @​aws-sdk/client-s3

3.1144.0 (2026-09-30)

Features

  • client-s3: Amazon S3 adds a new optional S3 Inventory field, IntelligentTieringReferenceDate, reporting the reference date S3 Intelligent-Tiering uses to evaluate an object's tier-transition eligibility. The value is populated for objects in the Intelligent-Tiering storage class and left blank for others. (82bbbdc)

3.1143.0 (2026-09-29)

Note: Version bump only for package @​aws-sdk/client-s3

3.1142.0 (2026-09-28)

Note: Version bump only for package @​aws-sdk/client-s3

Commits

Updates @aws-sdk/s3-request-presigner from 3.1141.0 to 3.1146.0

Release notes

Sourced from @​aws-sdk/s3-request-presigner's releases.

v3.1146.0

3.1146.0(2026-10-02)

Documentation Changes
  • client-lambda-web: Documentation update for AWS Lambda Web Functions, clarifies that the LambdaWeb APIs are experimental and not yet available to external customers. (de11d1e1)
New Features
  • client-mediapackagev2: Dynamic Multiview enables viewers to watch multiple live video streams in a single combined output. Static filter configuration allows users to configure endpoints with layouts and sources without using query parameters. The number of sources per multiview channel has been increased to 50. (8a1ac09c)
  • client-invoicing: API and doc updates related to adding MarketplacePunchOutEnabled and MarketplacePunchOutPreference fields to ProcurementPortalPreferences related APIs (948be4b5)
  • client-glue: Added refresh token grant type to Glue Connection supported OAuth 2.0 grant types (6101fef0)
  • client-cognito-identity-provider: Amazon Cognito User Pools now supports the OIDC-standard authentication context class reference (ACR) and authentication methods reference (AMR) claims on issued access and Id tokens. Amazon Cognito User Pools also now supports step-up authentication via our existing authentication APIs. (196e191f)
  • client-pinpoint-sms-voice-v2: AWS End User Messaging SMS CarrierLookup API now supports phone number cleansing on customer opt-in. when selected, the response includes the additional field "OriginalPhoneNumber". It can also return additional PhoneNumberType enums, VOIP and PREPAID. (42d43613)
  • client-securityagent: Adds trigger filters that control which pull request events, target branches, and labels start an automatic code review. (3d73df94)

For list of updated packages, view updated-packages.md in assets-3.1146.0.zip

v3.1145.0

3.1145.0(2026-10-01)

Chores
Documentation Changes
  • client-ec2: This release launches the AMI tag sharing feature, which lets AMI owners share tags alongside their AMIs, eliminating the need to build and maintain custom tag replication workflows. (82608f8c)
New Features
  • clients: update client endpoints as of 2026-10-01 (5244c2a9)
  • client-bedrock-agent: Adds an optional textReadyAt field to ListIngestionJobs and GetIngestionJob for Managed Knowledge Bases data source sync jobs. The field denotes the timestamp at which all the documents in the scope of a sync job had their text content indexed and are available for retrieval. (a810c753)
  • Description has been truncated

    Summary by CodeRabbit

    • Chores
      • Updated the web app’s underlying software components and shared tooling to newer versions. No user-facing changes are included in this release.

@dependabot
chore(deps): Bump the minor-and-patch group with 14 updates
eae66c4 
Bumps the minor-and-patch group with 14 updates:

| Package | From | To |
| --- | --- | --- |
| [fumadocs-core](https://github.com/fuma-nama/fumadocs) | `16.15.14` | `16.16.0` |
| [fumadocs-mdx](https://github.com/fuma-nama/fumadocs) | `15.4.5` | `15.4.6` |
| [fumadocs-openapi](https://github.com/fuma-nama/fumadocs) | `12.0.3` | `12.2.0` |
| [fumadocs-ui](https://github.com/fuma-nama/fumadocs) | `16.15.14` | `16.16.0` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.48.0` | `1.51.0` |
| [nodemailer](https://github.com/nodemailer/nodemailer) | `10.0.11` | `10.0.14` |
| [shiki](https://github.com/shikijs/shiki/tree/HEAD/packages/shiki) | `4.4.3` | `4.5.0` |
| [smtp-server](https://github.com/nodemailer/smtp-server) | `3.19.13` | `3.19.17` |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1141.0` | `3.1146.0` |
| [@aws-sdk/s3-request-presigner](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages/s3-request-presigner) | `3.1141.0` | `3.1146.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.20.4` | `22.20.5` |
| [next](https://github.com/vercel/next.js) | `16.3.6` | `16.3.8` |
| [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.85.0` | `1.86.0` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.2` | `5.0.3` |


Updates `fumadocs-core` from 16.15.14 to 16.16.0
- [Release notes](https://github.com/fuma-nama/fumadocs/releases)
- [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs@16.15.14...fumadocs@16.16.0)

Updates `fumadocs-mdx` from 15.4.5 to 15.4.6
- [Release notes](https://github.com/fuma-nama/fumadocs/releases)
- [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs-mdx@15.4.5...fumadocs-mdx@15.4.6)

Updates `fumadocs-openapi` from 12.0.3 to 12.2.0
- [Release notes](https://github.com/fuma-nama/fumadocs/releases)
- [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs-openapi@12.0.3...fumadocs-openapi@12.2.0)

Updates `fumadocs-ui` from 16.15.14 to 16.16.0
- [Release notes](https://github.com/fuma-nama/fumadocs/releases)
- [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs@16.15.14...fumadocs@16.16.0)

Updates `lucide-react` from 1.48.0 to 1.51.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.51.0/packages/lucide-react)

Updates `nodemailer` from 10.0.11 to 10.0.14
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](nodemailer/nodemailer@v10.0.11...v10.0.14)

Updates `shiki` from 4.4.3 to 4.5.0
- [Release notes](https://github.com/shikijs/shiki/releases)
- [Commits](https://github.com/shikijs/shiki/commits/v4.5.0/packages/shiki)

Updates `smtp-server` from 3.19.13 to 3.19.17
- [Release notes](https://github.com/nodemailer/smtp-server/releases)
- [Changelog](https://github.com/nodemailer/smtp-server/blob/master/CHANGELOG.md)
- [Commits](nodemailer/smtp-server@v3.19.13...v3.19.17)

Updates `@aws-sdk/client-s3` from 3.1141.0 to 3.1146.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1146.0/clients/client-s3)

Updates `@aws-sdk/s3-request-presigner` from 3.1141.0 to 3.1146.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages/s3-request-presigner/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1146.0/packages/s3-request-presigner)

Updates `@types/node` from 22.20.4 to 22.20.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `next` from 16.3.6 to 16.3.8
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.3.6...v16.3.8)

Updates `oxlint` from 1.85.0 to 1.86.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.86.0/npm/oxlint)

Updates `vitest` from 5.0.2 to 5.0.3
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.3/packages/vitest)

---
updated-dependencies:
- dependency-name: fumadocs-core
  dependency-version: 16.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: fumadocs-mdx
  dependency-version: 15.4.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: fumadocs-openapi
  dependency-version: 12.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: fumadocs-ui
  dependency-version: 16.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: lucide-react
  dependency-version: 1.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: nodemailer
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: shiki
  dependency-version: 4.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: smtp-server
  dependency-version: 3.19.17
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.1146.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@aws-sdk/s3-request-presigner"
  dependency-version: 3.1146.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/node"
  dependency-version: 22.20.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: next
  dependency-version: 16.3.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: oxlint
  dependency-version: 1.86.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: vitest
  dependency-version: 5.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 7, 2026
@dependabot
dependabot Bot requested a review from NotTahaAli as a code owner October 7, 2026 04:30
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 7, 2026
@coderabbitai

coderabbitai Bot commented Oct 7, 2026 •
edited
Loading

Copy link
Copy Markdown

Review in Change Stack →

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration
  • Configuration used: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: a6994f8f-4ac6-41de-92c7-9b2fb9cb8da3
📥 Commits

Reviewing files that changed from the base of the PR and between 1d6d209 and eae66c4.

⛔ Files ignored due to path filters (1)
  • pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml
📒 Files selected for processing (2)
  • apps/web/package.json
  • pnpm-workspace.yaml

Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 9 remain after this review.

📝 Walkthrough

Walkthrough

The pull request updates dependency versions in apps/web/package.json and pnpm-workspace.yaml. It changes Fumadocs packages, lucide-react, nodemailer, shiki, smtp-server, AWS SDK packages, @types/node, next, oxlint, and vitest.

Changes

Dependency version updates

Layer / File(s) Summary
Update dependency versions
pnpm-workspace.yaml, apps/web/package.json		 The workspace catalog updates the AWS SDK packages, @types/node, next, oxlint, and vitest. The web package updates Fumadocs packages, lucide-react, nodemailer, shiki, and the smtp-server development dependency.

Priority: ⬇️ Low

Estimated code review effort: 2 (Simple) | ~5 minutes

Change: Other

Merge Risk: ⚪ Minimal · up to eae66

No actionable issue is established; the dependency update is mergeable after normal checks.

Architecture Summary

Architecture risk: 🔵 Low · up to eae66

The change affects 2 systems.

Changed systems: apps/web, pnpm-workspace.yaml

Architecture concerns
No architecture-level concerns identified.

Review details

Systems and components

  • observed — apps/web (ui) was modified; 1 changed file maps to changed impact.
  • observed — pnpm-workspace.yaml (service) was modified; 1 changed file maps to changed impact.

Before / after behavior

  • observed — Modified behavior in apps/web/package.json: Updated fumadocs-core, fumadocs-mdx, fumadocs-openapi, fumadocs-ui, lucide-react, nodemailer, and shiki to newer versions. Other dependencies in this range are unchanged.
  • observed — Modified behavior in apps/web/package.json: Upgraded the smtp-server development dependency from 3.19.13 to 3.19.17.
  • observed — Modified behavior in pnpm-workspace.yaml: The catalog updates the versions of the two AWS SDK packages, @types/node, next, oxlint, and vitest; the other catalog entries in this range remain unchanged.
🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly identifies a dependency update and states that the minor-and-patch group contains 14 updates, matching the pull request changes.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches 💡 1
🛠️ Fix failing CI checks 💡
  • Commit to this branch
  • Create a new PR
🧪 Generate unit tests (beta)
  • Commit to this branch
  • Create a new PR
  • Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

@NotTahaAli NotTahaAli mentioned this pull request Oct 7, 2026
Merged
9 of 10 tasks
@NotTahaAli NotTahaAli closed this pull request by merging all changes into main in b48009e Oct 7, 2026
@NotTahaAli Claude

NotTahaAli commented Oct 7, 2026

Copy link
Copy Markdown
Owner

Superseded by #86 (merged), which carries these bumps plus the lint/typecheck fixes they needed.

Generated by Claude Code

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/minor-and-patch-db461b1019 branch October 7, 2026 14:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@NotTahaAli NotTahaAli Awaiting requested review from NotTahaAli NotTahaAli is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@NotTahaAli