Bump the production-dependencies group across 1 directory with 10 updates by dependabot[bot] · Pull Request #37 · zemd/react

dependabot · 2026-10-14T05:11:49Z

Bumps the production-dependencies group with 10 updates in the / directory:

Package	From	To
next	`16.3.8`	`16.4.0`
@types/node	`26.4.0`	`26.6.5`
@vitest/coverage-v8	`4.1.11`	`5.0.3`
fast-check	`4.9.0`	`4.10.2`
react-dom	`19.2.8`	`19.3.0`
@types/react-dom	`19.2.5`	`19.3.0`
react	`19.2.8`	`19.3.0`
@types/react	`19.2.18`	`19.3.0`
tsdown	`0.22.14`	`0.23.0`
vitest	`4.1.11`	`5.0.3`

Updates next from 16.3.8 to 16.4.0

Release notes

Sourced from next's releases.

v16.4.0

Check out the 16.4 announcement post to get an overview of the changes.

Core Changes

Show compiler plugin warning in more situations: #75682

fix(scripts): correct typo in rm.mjs error message: #87015

docs: improve clarity and punctuation in README: #86096

Fix debug build paths Pages Router support entries: #93529

bundle-analyzer: record historical snapshots on each analyze run: #93520

fix: detect proxy.ts correctly with compound pageExtensions: #93246

feat(turbopack): support false values for resolveAlias config: #93331

Misc Changes

docs: correction to dynamicParams migration: #96624

docs: proxy event argument: #96435

docs: remove experimental note from runtime prefetching: #96615

Preserve per-segment prefetching after dynamic navigation: #96583

Rename static generation stream option to waitForAllReady: #96564

Remove obsolete static generation plumbing: #96563

[turbopack] Drop dead writes to exports: #96381

[turbopack] Ignore writes to exports after a module.exports = {} writes: #96380

[turbopack] Add test for sideEffects with optimizePackageImports: #96549

[turbopack] Strip leading BOM before parsing CSS: #96678

Upgrade React from cbb046ab-20260731 to 7dfc7ccd-20260803: #96550

docs: use relative doc links in instant-navigation error pages: #96672

Turbopack: terminate failed plugin worker threads: #96592

Fix HTML-limited bot matching in prerender bypass rules: #96584

[ci] Fix create_release_branch for new repo permissions: #96641

test: skip action module instance deploy test: #96629

docs: quote the dynamicParams build error in a blockquote: #96633

[react-sync] Open pull requests as the bot that authors the commits: #96682

[Bench] Fixes for pure Fizz bench: #96771

Derive foreground cache revalidation from the consumer: #96731

Fix race when navigating Back before hydration: #96252

docs: present each Skill as steps in the AI agents guide: #96751

Reuse completed cache entries for the rest of a request: #96727

Upgrade React from 7dfc7ccd-20260803 to 11eddecd-20260805: #96735

Remove WorkStore execution mode: #96674

Remove cache revalidation execution mode reads: #96670

Separate App Route render and prerender pipelines: #96662

Remove App Page execution mode reads: #96660

test: fix missing await in css-chunking test: #96725

docs (Skills): stop assuming app/ at the root and port 3000: #96696

Implement next/font BeforeResolvePlugins as ImportMappingReplacement: #95808

Use Tailwind Turbopack loader in create-next-app: #96606

docs: instant navigation quick start with an adoption prompt: #96663

Separate App Page render and prerender pipelines: #96659

Move App Router execution intent to entrypoints: #96640

... (truncated)

Commits

e273d5b v16.4.0
fdf41d6 [ai-upgrade] discover upgrade models and reasoning efforts from agent CLIs (#...
c3e76ad v16.4.0-canary.63
47c6cc8 Document next analyze export in the package bundling guide (#99735)
5b10604 Revert stabilization of forbidden() and unauthorized() (#99734)
f3a6f97 Preserve configured output directories during static export (#99507)
b22e5a2 Rename skill to next-bundle-optimizer and document its usage (#99731)
74dc549 [turbo-tasks-backend] Clean up task state before publishing execution complet...
ccf8c15 v16.4.0-canary.62
b8c7c7f Improve static route error guidance (#99724)
Additional commits viewable in compare view

Updates @types/node from 26.4.0 to 26.6.5

Commits

See full diff in compare view

Updates @vitest/coverage-v8 from 4.1.11 to 5.0.3

Release notes

Sourced from @vitest/coverage-v8's releases.

v5.0.3

   🐞 Bug Fixes

Isolate result.status between repeats runs - by @hi-ogawa, Hiroshi Ogawa and Codex (GPT-6) in vitest-dev/vitest#11218 (5dbeb)

Don't print an interceptor warning in browser mode - by @sheremet-va in vitest-dev/vitest#11377 (15cc0)

Don't retry when test.fails expectedly failed - by @hi-ogawa, Hiroshi Ogawa and Codex (GPT-6) in vitest-dev/vitest#11219 (b2458)

Scope cache key generators to projects - by @ecoyoung in vitest-dev/vitest#11281 and vitest-dev/vitest#11301 (92ba7)

browser:

Delay server listen until tests start running - by @sheremet-va in vitest-dev/vitest#11366 (7d8ed)

Check mock path boundaries - by @saryn17, Ryosei Sato and @sheremet-va in vitest-dev/vitest#11361 and vitest-dev/vitest#11362 (1c388)

Keep config of browser-consumed environments - by @kasperpeulen and Claude in vitest-dev/vitest#11378 (aafc0)

Ignore page crash while cancelling - by @sheremet-va in vitest-dev/vitest#11386 (7c367)

toMatchScreenshot uses wrong reference on retried tests - by @macarie in vitest-dev/vitest#11393 (c22ab)

cache:

Revalidate imports of cached modules - by @sheremet-va in vitest-dev/vitest#11381 (38f98)

deps:

Pin why-is-node-running to 3.2.1 to avoid users running into ERR_PNPM_TRUST_DOWNGRADE - by @AriPerkkio in vitest-dev/vitest#11403 (f6c9a)

expect:

Pass current equality testers to expect.extend asymmetric matchers - by @hi-ogawa, Hiroshi Ogawa and Claude in vitest-dev/vitest#11401 (3e794)

jsdom:

Support Blob on jsdom 30.1 - by @sheremet-va in vitest-dev/vitest#11379 (6c49b)

pool:

Preserve unique pool ids when groupOrder is set - by @mtorp in vitest-dev/vitest#11392 (50312)

ui:

Split-pane handle overlapping iframe - by @macarie in vitest-dev/vitest#11221 (f91db)

vitest:

Remove root temp dir on close - by @abhinav-phi in vitest-dev/vitest#11248 (7c711)

vm:

Do not optimize deps from index.html - by @ezefernandezyf, Hiroshi Ogawa and Codex (GPT-6) in vitest-dev/vitest#11329 and vitest-dev/vitest#11360 (caf28)

Don't reuse scripts across vite environments - by @MO2k4, Martin Oehlert and Claude in vitest-dev/vitest#11395 (346d3)

    View changes on GitHub

v5.0.2

   🐞 Bug Fixes

Bind process in case global is overwritten - by @AriPerkkio in vitest-dev/vitest#11343 (0b792)

detect-async-leaks:

Ignore process.stdio handles - by @AriPerkkio in vitest-dev/vitest#11333 (0fd6b)

expect:

Fix toMatchObject with asymmetric matchers - by @ShreeBohara, Claude Opus 5, @hi-ogawa, Hiroshi Ogawa and Codex (GPT-5) in vitest-dev/vitest#11100 (42523)

jsdom:

Fix Request with Blob body on jsdom 28+ - by @harshit-d3v in vitest-dev/vitest#11295 (d1c3e)

reporter:

agent to respect --silent - by @Raj4478 and @AriPerkkio in vitest-dev/vitest#11271 (5b95e)

reporters:

Handle concurrent createReport calls - by @7rulnik in vitest-dev/vitest#11278 (e8e55)

hanging-process to use ESM entrypoint - by @AriPerkkio in vitest-dev/vitest#11316 (4e91e)

spy:

Fix stack overflow when spying Set.prototype.add - by @fengmk2 in vitest-dev/vitest#11299 (a0a93)

... (truncated)

Commits

33cadea chore: release v5.0.3 (#11409)
a029e76 chore: migrate to oxc (#11367)
428e2e5 chore: release v5.0.2 (#11357)
03630a5 chore: release v5.0.1 (#11275)
f441c6f chore: release v5.0.0 (#11130)
c4473e4 fix(coverage): prevent crash on /@fs/ prepended virtual files (#11119)
897f51f chore: release v5.0.0-rc.4 (#11107)
7db80dc chore: release v5.0.0-rc.3 (#11089)
5f6a5e8 feat(coverage): switch to @vitest/istanbuljs packages (#11053)
c6174a6 fix(coverage): v8 to ignore Vite SSR's generated import bindings (#11023)
Additional commits viewable in compare view

Updates fast-check from 4.9.0 to 4.10.2

Release notes

Sourced from fast-check's releases.

v4.10.2

Fix interrupt plugin (throwing) [Code][Diff]

Fixes

(PR#7333) Bug: Plugin interruptAfterTimeLimit crashes

Fix fake-timer compatibility in timeout and interrupt plugins

[Code][Diff]

Fixes

(PR#7293) Bug: Capture timers for interruptAfterTimeLimit plugin

(PR#7282) CI: Temporarily disable documentation updates until v5

(PR#7279) Doc: Release note for 4.10.0

New plugin API and deprecations ahead of v5

[Code][Diff]

Features

(PR#7216) Introduce a plugin API

(PR#7221) Refine plugin API

(PR#7222) Add ability to configure plugins globally

(PR#7224) Add the beforeEach plugin to hook in life-cycle

(PR#7227) Create an afterEach plugin

(PR#7232) Deprecate life-cycle methods

(PR#7235) Support teardown of beforeEach plugin

(PR#7228) Add timeout plugin to stop long running predicates

(PR#7237) Deprecate timeout from parameters

(PR#7238) Pass a store to plugins

(PR#7239) Add extra plugin's method called onAllRunsComplete

(PR#7240) Deprecate reporter and asyncReporter from parameters

(PR#7229) Add plugin to interrupt after time limit

(PR#7245) Support failOnInterrupt on the plugin

(PR#7230) Add plugins to drop runs on already covered cases

(PR#7259) Add ability to decorate generate via Plugins

(PR#7231) Add the unbiased plugin to generate without bias

(PR#7260) Deprecate parameters superseded by plugins

(PR#7261) Deprecate v5 removals

Fixes

(PR#7225) Bug: Proper ordering between plugins

(PR#7127) CI: Announce on Bluesky when drafting the release

(PR#7217) CI: Dedupe packages for pnpm

(PR#7137) Doc: Release note for 4.9.0

... (truncated)

Changelog

Sourced from fast-check's changelog.

4.10.2

Fix interrupt plugin (throwing) [Code][Diff]

Fixes

(PR#7333) Bug: Plugin interruptAfterTimeLimit crashes

4.10.1

Fix fake-timer compatibility in timeout and interrupt plugins [Code][Diff]

Fixes

(PR#7292) Bug: Capture timer globals for timeout plugin

(PR#7293) Bug: Capture timers for interruptAfterTimeLimit plugin

(PR#7282) CI: Temporarily disable documentation updates until v5

(PR#7279) Doc: Release note for 4.10.0

4.10.0

New plugin API and deprecations ahead of v5 [Code][Diff]

Features

(PR#7216) Introduce a plugin API

(PR#7221) Refine plugin API

(PR#7222) Add ability to configure plugins globally

(PR#7224) Add the beforeEach plugin to hook in life-cycle

(PR#7227) Create an afterEach plugin

(PR#7232) Deprecate life-cycle methods

(PR#7235) Support teardown of beforeEach plugin

(PR#7228) Add timeout plugin to stop long running predicates

(PR#7237) Deprecate timeout from parameters

(PR#7238) Pass a store to plugins

(PR#7239) Add extra plugin's method called onAllRunsComplete

(PR#7240) Deprecate reporter and asyncReporter from parameters

(PR#7229) Add plugin to interrupt after time limit

(PR#7245) Support failOnInterrupt on the plugin

(PR#7230) Add plugins to drop runs on already covered cases

(PR#7259) Add ability to decorate generate via Plugins

(PR#7231) Add the unbiased plugin to generate without bias

(PR#7260) Deprecate parameters superseded by plugins

(PR#7261) Deprecate v5 removals

Fixes

... (truncated)

Commits

c77afa8 v4.10.2
1e80f3a v4.10.2
2df3265 🐛 Plugin interruptAfterTimeLimit crashes (#7333)
e93c6a8 🔖 Update CHANGELOG.md for fast-check@4.10.1 (#7294)
15744d0 🐛 Capture timers for interruptAfterTimeLimit plugin (#7293)
fb2ea50 🐛 Capture timer globals for timeout plugin (#7292)
4fba17d 🔖 Update CHANGELOG.md for fast-check@4.10.0, @fast-check/jest@2.3.0, @fast-ch...
a433d8b ⬆️ Update dependency @types/node to ^24.13.4 (#7263)
8470c46 ⬆️ Update dependency @microsoft/api-extractor to ^7.59.1 (#7255)
5382221 🗑️ Deprecate v5 removals (#7261)
Additional commits viewable in compare view

Updates react-dom from 19.2.8 to 19.3.0

Release notes

Sourced from react-dom's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)

Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

Enable Trusted Types API integration (@rickhanlonii #35816)

Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)

Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@hoxyq, @eps1lon: #37104, #37203, #37491)

All Changes

React

Fast Refresh Fixes

Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@sophiebits #36965)

Fix Fast Refresh so edits to a memo() comparison function take effect (@sophiebits #36964)

Fix Fast Refresh crash when an edit changes the kind of a component's type (@sophiebits #36963)

Unify hot reload type resolution for Fast Refresh (@sophiebits #36962)

Fix Fast Refresh to remount correctly when an edit changes the component kind (@sophiebits #36950)

Double invoke effects in StrictMode after Fast Refresh (@eps1lon #35962)

Performance Track Fixes

Prevent crash when accessing $$typeof in Performance Tracks (@eps1lon #35679)

Handle non-string function names in Performance Tracks (@eps1lon #35659)

Use minus (-) instead of en dash for removed props in Performance Tracks (@eps1lon #35649)

Handle arrays with bigints in deep objects in Performance Tracks (@eps1lon #35648)

Don't enumerate typed array props in Performance Tracks in DEV (@UditDewan #36913)

Bail out of diffing wide objects and arrays in Performance Tracks (@eps1lon #34742)

Clear potentially large performance measures in DEV (@hoxyq #34803)

Fix missing else branch for renders with no props change in Performance Tracks (@hoxyq #34837)

Activity Fixes

Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@sophiebits #36947)

Hide portal contents when an Activity is hidden (@acdlite #35091)

Prevent metadata hoisting in hidden <Activity> trees (@ronnakamoto #34983)

Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@acdlite #35074)

Don't unhide a node if a direct parent Offscreen is still hidden (@sebmarkbage #34821)

Don't show internal <Offscreen> component in error messages (@rickhanlonii #35763)

Warn in DEV when a component appears to have been unblocked by a conditional use() (@hoxyq, @eps1lon: #37104, #37203, #37491)

Render transitions independently instead of entangling them into a single render (@acdlite #37290)

... (truncated)

Changelog

Sourced from react-dom's changelog.

19.3.0 (September 9, 2026)

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)

Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

Enable Trusted Types API integration (@rickhanlonii #35816)

Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)

Added a DEV-only warning when a component appears to have been unblocked by calling Description has been truncated

coderabbitai · 2026-10-14T05:11:59Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI
Review profile: CHILL
Plan: Advanced
Run ID: fd5713f4-1856-4028-be3e-0221c8179ccb

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

socket-security · 2026-10-14T05:12:10Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
next@16.3.8 ⏵ 16.4.0	⁺¹	⁺¹
@types/react-dom@19.2.5 ⏵ 19.3.0	⁺¹	⁺¹
@types/react@19.2.18 ⏵ 19.3.0
@vitest/coverage-v8@4.1.11 ⏵ 5.0.3		⁺¹
vitest@4.1.11 ⏵ 5.0.3		⁺¹	^-1
@types/node@26.4.0 ⏵ 26.6.5	⁺¹	⁺¹
react@19.2.8 ⏵ 19.3.0	⁺¹	⁺¹
tsdown@0.22.14 ⏵ 0.23.0		⁺¹	⁺³
fast-check@4.9.0 ⏵ 4.10.2	⁺¹	⁺¹
react-dom@19.2.8 ⏵ 19.3.0		⁺¹

View full report

github-actions · 2026-10-14T05:12:48Z

Bencher Report

Project	react
Branch	dependabot/npm_and_yarn/production-dependencies-d002587f61
Testbed	ubuntu-latest

⚠️ WARNING: No Threshold found!
Without a Threshold, no Alerts will ever be generated.
Throughput (operations / second (ops/s))
Latency (nanoseconds (ns))
Click here to create a new Threshold
For more information, see the Threshold documentation.
To only post results if a Threshold exists, set the --ci-only-thresholds flag.

Click to view all benchmark results

Benchmark	Latency	nanoseconds (ns)	Throughput	operations / second (ops/s) x 1e3
@zemd/react-modals/append and remove by id	📈 view plot ⚠️ NO THRESHOLD	940.80 ns	📈 view plot ⚠️ NO THRESHOLD	1,062.92 ops/s x 1e3
@zemd/react-modals/append and remove latest	📈 view plot ⚠️ NO THRESHOLD	861.14 ns	📈 view plot ⚠️ NO THRESHOLD	1,161.25 ops/s x 1e3
@zemd/react-slottable/render default slot	📈 view plot ⚠️ NO THRESHOLD	26,835.35 ns	📈 view plot ⚠️ NO THRESHOLD	37.26 ops/s x 1e3
@zemd/react-slottable/render overridden slot	📈 view plot ⚠️ NO THRESHOLD	8,975.56 ns	📈 view plot ⚠️ NO THRESHOLD	111.41 ops/s x 1e3

🐰 View full continuous benchmarking report in Bencher

…ates Bumps the production-dependencies group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [next](https://github.com/vercel/next.js) | `16.3.8` | `16.4.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.4.0` | `26.6.5` | | [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.11` | `5.0.3` | | [fast-check](https://github.com/dubzzz/fast-check/tree/HEAD/packages/fast-check) | `4.9.0` | `4.10.2` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.0` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.5` | `19.3.0` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` | | [tsdown](https://github.com/rolldown/tsdown) | `0.22.14` | `0.23.0` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.11` | `5.0.3` | Updates `next` from 16.3.8 to 16.4.0 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.3.8...v16.4.0) Updates `@types/node` from 26.4.0 to 26.6.5 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@vitest/coverage-v8` from 4.1.11 to 5.0.3 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.3/packages/coverage-v8) Updates `fast-check` from 4.9.0 to 4.10.2 - [Release notes](https://github.com/dubzzz/fast-check/releases) - [Changelog](https://github.com/dubzzz/fast-check/blob/main/packages/fast-check/CHANGELOG.md) - [Commits](https://github.com/dubzzz/fast-check/commits/v4.10.2/packages/fast-check) Updates `react-dom` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom) Updates `@types/react-dom` from 19.2.5 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `react` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react) Updates `@types/react` from 19.2.18 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `tsdown` from 0.22.14 to 0.23.0 - [Release notes](https://github.com/rolldown/tsdown/releases) - [Commits](rolldown/tsdown@v0.22.14...v0.23.0) Updates `vitest` from 4.1.11 to 5.0.3 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.3/packages/vitest) --- updated-dependencies: - dependency-name: "@types/node" dependency-version: 26.6.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@types/react-dom" dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@vitest/coverage-v8" dependency-version: 5.0.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: fast-check dependency-version: 4.10.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: next dependency-version: 16.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: react dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: react-dom dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: tsdown dependency-version: 0.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: vitest dependency-version: 5.0.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot requested a review from zemd as a code owner October 14, 2026 05:11

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 14, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-d002587f61 branch from 756f577 to 9647379 Compare October 17, 2026 09:17

Navigation Menu

Repository navigation

Bump the production-dependencies group across 1 directory with 10 updates - #37

Bump the production-dependencies group across 1 directory with 10 updates#37
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-d002587f61

dependabot Bot commented on behalf of github Oct 14, 2026 •

edited

Loading

Uh oh!

coderabbitai Bot commented Oct 14, 2026 •

edited

Loading

Review skipped

Uh oh!

socket-security Bot commented Oct 14, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Oct 14, 2026 •

edited

Loading

⚠️ WARNING: No Threshold found!

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v16.4.0

Core Changes

Misc Changes

v5.0.3

🐞 Bug Fixes

View changes on GitHub

v5.0.2

🐞 Bug Fixes

v4.10.2

Fixes

Fix fake-timer compatibility in timeout and interrupt plugins

Fixes

New plugin API and deprecations ahead of v5

Features

Fixes

4.10.2

Fixes

4.10.1

Fixes

4.10.0

Features

Fixes

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

Notable changes

All Changes

React

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

Notable changes

Uh oh!

coderabbitai Bot commented Oct 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

socket-security Bot commented Oct 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Oct 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Bencher Report

⚠️ WARNING: No Threshold found!

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 14, 2026 •

edited

Loading

coderabbitai Bot commented Oct 14, 2026 •

edited

Loading

socket-security Bot commented Oct 14, 2026 •

edited

Loading

github-actions Bot commented Oct 14, 2026 •

edited

Loading