chore(deps): bump the production-dependencies group across 1 directory with 4 updates

[dependabot]

Bumps the production-dependencies group with 4 updates in the / directory: fumadocs-core, fumadocs-mdx, fumadocs-ui and next.

Updates fumadocs-core from 16.14.5 to 16.15.9

Release notes

Sourced from fumadocs-core's releases.

fumadocs@16.15.9

• @​fumadocs/base-ui@​16.15.9
• fumadocs-core@16.15.9
• fumadocs-ui@16.15.9

getPageByUrl() on the loader

Look up a page by its URL:

source.getPageByUrl('/docs/getting-started');
source.getPageByUrl('/cn/docs/getting-started', 'cn');

Without the language argument every language is looked up, unlike getPageByHref() which resolves the default language only.

llms() renders pages

llms() used to build the llms.txt index only, turning a page into Markdown was left to your own getLLMText(). Pass renderPage and it covers both:

import { llms } from 'fumadocs-core/source';
export const docsLlms = llms(source, {
renderPage: async (page) => `# ${page.data.title} (${page.url})
${await page.data.getText('processed')}`,
});

• page(page) renders one page, for the per-page Markdown route.
• full(lang?) renders every page and joins them, for llms-full.txt.

// app/llms-full.txt/route.ts
export const GET = async () => new Response(await docsLlms.full());

Both methods exist only when renderPage is given, in types and at runtime. Fumadocs cannot know how your content source exposes Markdown: page.data.getText('processed') on Fumadocs MDX, page.data.content on @fumadocs/local-md.

fumadocs-core/mcp: docs tools for your MCP server

Register the docs tools on a server you own, rather than on a handler Fumadocs builds for you:

import { createMcpHandler, McpServer } from '@modelcontextprotocol/server';
import { registerSearchTool, registerSourceTools } from 'fumadocs-core/mcp';
import { createFromSource } from 'fumadocs-core/search/server';
import { docsLlms, source } from '@/lib/source';
</tr></table>

... (truncated)

Commits

• 24e2072 Version Packages (#3542)
• 191baf0 fix build
• 1c1f0d9 refactor(cli): dedupe helpers
• a74d2e8 feat(openapi): expose path on custom hooks
• 0caafd1 refactor(cli): use cac
• c5ed5eb refactor(*): clean URL helpers
• 824a028 feat(core,cli): handle dynamic source
• ff009e3 feat(core,epub): move some utils to core
• 27af24c docs: add OpenPost to showcase (#3544)
• 07c46a2 docs: generate webmcp
• Additional commits viewable in compare view

Updates fumadocs-mdx from 15.3.0 to 15.4.0

Release notes

Sourced from fumadocs-mdx's releases.

fumadocs-mdx@15.4.0

Remark LLMs: export a component with output: "function"

With output: "function", _markdown becomes a component instead of a string: Markdown content is still stringified at compile time, while JSX elements stay as JSX, receiving their original props.

// fumadocs-mdx collection config
postprocess: {
  includeProcessedMarkdown: { output: 'function' },
},

Render it with renderToMarkdown from fumadocs-core/server. Elements resolve from props.components: a component can call asMarkdown() to output its own Markdown form, other components (including missing ones) are serialized as JSX syntax.

import { renderToMarkdown } from 'fumadocs-core/server';
const { _markdown: Content } = await page.data.load();
const text = await renderToMarkdown(<Content components={getMDXComponents()} />);

getText('processed') keeps working: it renders the component for you, with an optional components map:

const text = await page.data.getText('processed', { components: getMDXComponents() });

Supported in bundler collections with both compilers, and in dynamic: true collections & @fumadocs/satteri/local-md with the Sätteri compiler.

fumadocs-mdx@15.3.1

Scope lastModified git log to the content directory

git log is scoped to the collection's content directory instead of buffering the repository's entire history in every worker.

Fix Vite dev server crash on declaration-only dependencies

The injected Vite config no longer pre-bundles packages without runtime JavaScript, such as @types/mdx. Pre-bundling them made esbuild parse .d.ts files and fail on imports that only exist in type space, crashing the dev server.

Encode import.meta.glob query values

The Vite codegen passed the query to import.meta.glob as an object, letting the bundler serialize it. Rolldown inlines the values as-is, so a macro id such as src/lib/source.ts#docs left an unescaped / in the content file's module id and relative imports from that module (e.g. images from ![Banner](https://github.com/fuma-nama/fumadocs/blob/HEAD/logo.png)) failed to resolve, since the importer's directory is derived from the raw id.

The query is now serialized (and percent-encoded) by Fumadocs itself, matching what the Node.js codegen already did.

Commits

• 5cd7b69 Merge pull request #3510 from fuma-nama/tegami/version-packages
• 814559b docs: introduce React Markdown Components
• b4d689d refactor(core(: rename options
• eefd3e0 feat(satteri): show the type table as a table in markdown form
• 49afb7d docs: support .md apart from .mdx suffix
• 399bea9 feat(mdx,satteri): support dynamic markdown renderer on remark-llms plugin
• 7eef0d8 feat(core): React Markdown Component
• 3d07ef5 fix(core): duplicated record when indexing
• 0687a8b Version Packages (#3507)
• cc53d34 internal(core): drop negotiator
• Additional commits viewable in compare view

Updates fumadocs-ui from 16.14.5 to 16.15.9

Release notes

Sourced from fumadocs-ui's releases.

fumadocs@16.15.9

• @​fumadocs/base-ui@​16.15.9
• fumadocs-core@16.15.9
• fumadocs-ui@16.15.9

getPageByUrl() on the loader

Look up a page by its URL:

source.getPageByUrl('/docs/getting-started');
source.getPageByUrl('/cn/docs/getting-started', 'cn');

Without the language argument every language is looked up, unlike getPageByHref() which resolves the default language only.

llms() renders pages

llms() used to build the llms.txt index only, turning a page into Markdown was left to your own getLLMText(). Pass renderPage and it covers both:

import { llms } from 'fumadocs-core/source';
export const docsLlms = llms(source, {
renderPage: async (page) => `# ${page.data.title} (${page.url})
${await page.data.getText('processed')}`,
});

• page(page) renders one page, for the per-page Markdown route.
• full(lang?) renders every page and joins them, for llms-full.txt.

// app/llms-full.txt/route.ts
export const GET = async () => new Response(await docsLlms.full());

Both methods exist only when renderPage is given, in types and at runtime. Fumadocs cannot know how your content source exposes Markdown: page.data.getText('processed') on Fumadocs MDX, page.data.content on @fumadocs/local-md.

fumadocs-core/mcp: docs tools for your MCP server

Register the docs tools on a server you own, rather than on a handler Fumadocs builds for you:

import { createMcpHandler, McpServer } from '@modelcontextprotocol/server';
import { registerSearchTool, registerSourceTools } from 'fumadocs-core/mcp';
import { createFromSource } from 'fumadocs-core/search/server';
import { docsLlms, source } from '@/lib/source';
</tr></table>

... (truncated)

Commits

• 24e2072 Version Packages (#3542)
• 191baf0 fix build
• 1c1f0d9 refactor(cli): dedupe helpers
• a74d2e8 feat(openapi): expose path on custom hooks
• 0caafd1 refactor(cli): use cac
• c5ed5eb refactor(*): clean URL helpers
• 824a028 feat(core,cli): handle dynamic source
• ff009e3 feat(core,epub): move some utils to core
• 27af24c docs: add OpenPost to showcase (#3544)
• 07c46a2 docs: generate webmcp
• Additional commits viewable in compare view

Updates next from 16.3.1 to 16.3.4

Release notes

Sourced from next's releases.

v16.3.4

Follow-up release to v16.3.3 re-enabling AVIF Image Optimization (#97949).

The following bug fixes have been backported. It does not include all pending features/changes on canary.

• testmode: Fix infinite recursion in testmode passthrough fetch (#97691)
• Fix build error when aliasing typescript to @​typescript/typescript6 (#97997)
• Fix unset crossOrigin in Turbopack manifests (#97930)

Credits

Huge thanks to @​eps1lon, @​mischnic, and @​timneutkens for helping!

v16.3.3

This release contains security fixes for the following advisories:

Critical:

• Unauthenticated Remote Code Execution on windows-hosted servers
• Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used

v16.3.2

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

• [backport] Scope app-entry export validation to files inside the app directory (#97357)
• [backport] Fix catch-all index page being served for every other slug (#97416)
• [16.3] Turbopack: don't trace embedded WASM loader helpers (#97353) (#97463)
• [16.3] Turbopack: retain conditions when replacing resolve request keys (#97453)
• [16.3.x] Fix Turbopack worker chunk loading with asset prefix (#97419)
• [16.3.x] Authenticate Turborepo remote caching with OIDC instead of a static PAT (#97603)

Credits

Huge thanks to @​lubieowoce, @​unstubbable, @​timneutkens, @​mischnic, and @​eps1lon for helping!

Commits

• 299180d v16.3.4
• 12e173d [16.3.x] Re-enable AVIF image optimization and require sharp 0.35.4 (#97949)
• 5d9022e [backport] Fix unset crossOrigin in Turbopack manifests (#97930)
• d8f4560 [16.3.x] Fix build error when aliasing typescript to @​typescript/typescript6 ...
• 656aebf [16.3] testmode: Fix infinite recursion in testmode passthrough fetch (#97691)
• f37c1d6 [16.3.x] ci: remove pull_request_stats workflow (#97975)
• a9a1cb7 v16.3.3
• 968b9fc [16.3.x] Fix ISR misses with backslashes in segments when deployed on Windows
• 3a15b4a [16.3.x] [next/image]: disable avif image optimization
• 7378b51 Backport/docs fixes 16.3 (#97649)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
react-native-cloud-storage-docs	Ready	Preview	Sep 14, 2026 4:28am UTC

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 84a7c901-d904-4d20-b124-1ae8cdf961a4

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}