Skip to content

fix(deps): update bun minor and patch dependencies - #1201

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/bun-minor-and-patch-dependencies
Open

fix(deps): update bun minor and patch dependencies#1201
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/bun-minor-and-patch-dependencies

Conversation

@renovate

@renovate renovate Bot commented Oct 3, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
@base-ui/react (source) ^1.8.0 → ^1.9.0 age confidence
@better-auth/api-key (source) 1.7.6 → 1.7.7 age confidence
@better-auth/passkey (source) ^1.7.6 → ^1.7.7 age confidence
@better-auth/sso (source) ^1.7.6 → ^1.7.7 age confidence
@better-auth/utils 0.4.2 → 0.5.0 age confidence
@cloudflare/vite-plugin (source) ^1.62.2 → ^1.63.1 age confidence
@effect/language-service ^0.87.3 → ^0.87.4 age confidence
@inquirer/prompts (source) ^8.7.2 → ^8.7.3 age confidence
@playwright/test (source) ^1.63.0 → ^1.64.0 age confidence
@radix-ui/react-alert-dialog (source) ^1.1.23 → ^1.1.24 age confidence
@radix-ui/react-checkbox (source) ^1.3.11 → ^1.3.12 age confidence
@radix-ui/react-dialog (source) ^1.1.23 → ^1.2.0 age confidence
@radix-ui/react-dropdown-menu (source) ^2.1.24 → ^2.1.25 age confidence
@radix-ui/react-hover-card (source) ^1.1.23 → ^1.1.24 age confidence
@radix-ui/react-label (source) ^2.1.15 → ^2.1.16 age confidence
@radix-ui/react-progress (source) ^1.1.16 → ^1.1.17 age confidence
@radix-ui/react-scroll-area (source) ^1.2.18 → ^1.3.0 age confidence
@radix-ui/react-select (source) ^2.3.7 → ^2.3.8 age confidence
@radix-ui/react-separator (source) ^1.1.15 → ^1.1.16 age confidence
@radix-ui/react-slot (source) ^1.3.3 → ^1.4.0 age confidence
@radix-ui/react-switch (source) ^1.3.7 → ^1.3.8 age confidence
@radix-ui/react-tabs (source) ^1.1.21 → ^1.1.22 age confidence
@radix-ui/react-tooltip (source) ^1.2.16 → ^1.3.0 age confidence
@scalar/hono-api-reference (source) ^0.12.7 → ^0.12.11 age confidence
@tanstack/react-hotkeys (source) ^0.12.1 → ^0.13.0 age confidence
@tanstack/react-query (source) ^5.104.0 → ^5.104.1 age confidence
@tanstack/react-query-devtools (source) ^5.104.0 → ^5.104.1 age confidence
@tanstack/react-table (source) ^9.2.4 → ^9.2.8 age confidence
@types/node (source) ^26.6.3 → ^26.6.4 age confidence
@vitejs/plugin-react (source) ^6.1.1 → ^6.1.2 age confidence
better-auth (source) ^1.7.6 → ^1.7.7 age confidence
cron-parser ^5.10.1 → ^5.10.2 age confidence
dotenv ^18.0.4 → ^18.0.6 age confidence
electron ^44.5.0 → ^44.7.0 age confidence
fumadocs-core ^16.15.17 → ^16.16.2 age confidence
fumadocs-mdx ^15.4.5 → ^15.4.6 age confidence
fumadocs-ui ^16.15.17 → ^16.16.2 age confidence
happy-dom ^20.14.5 → ^20.14.6 age confidence
hono (source) ^4.13.11 → ^4.13.13 age confidence
hono-openapi ^1.3.3 → ^1.3.5 age confidence
jsdom ^30.1.1 → ^30.1.2 age confidence
lefthook 2.1.15 → 2.2.1 age confidence
lucide-react (source) ^1.49.0 → ^1.54.0 age confidence
oxfmt (source) 0.71.0 → 0.72.0 age confidence
oxlint (source) 1.86.0 → 1.87.0 age confidence
shadcn (source) ^4.21.0 → ^4.21.4 age confidence
vite (source) ^8.3.1 → ^8.3.4 age confidence
vitest (source) ^5.0.2 → ^5.0.3 age confidence
wrangler (source) ^4.144.0 → ^4.149.0 age confidence

Release Notes

mui/base-ui (@​base-ui/react)

v1.9.0

Compare Source

Oct 9, 2026

General changes
Accordion
Alert Dialog
  • Don't associate a programmatically opened popup with a trigger that did not open it (#​5641) by @​michaldudak
Autocomplete
  • Fix autoHighlight for asynchronous results (#​5818) by @​atomiks
  • Pass the originating event to onItemHighlighted. Pointer events may be MouseEvent or PointerEvent; typing reports the reason none (#​5838) by @​atomiks
  • Decouple automatic unmounting from actionsRef. Call eventDetails.preventUnmountOnClose() in onOpenChange to opt out of automatic unmounting (#​5734) by @​michaldudak
Checkbox
Collapsible
Combobox
Dialog
  • Keep parent open when closing a nested dialog in a closed shadow root (#​5780) by @​atomiks
  • Don't associate a programmatically opened popup with a trigger that did not open it (#​5641) by @​michaldudak
Drawer
Field
Menu
Number Field
OTP Field
Popover
Preview Card
Radio Group
Scroll Area
Select
Slider
Switch
Tabs
Toast
Tooltip

All contributors of this release in alphabetical order: @​aarongarciah, @​atomiks, @​brijeshb42, @​citrus, @​cpruijsen, @​flaviendelangle, @​jjenzz, @​LukasTy, @​lyzno1, @​mdm317, @​michaldudak, @​MonstraG, @​padd60, @​sai6855, @​santiago-ramos-02, @​sarthakmalik0810, @​superhooman, @​tjdsksro90

better-auth/better-auth (@​better-auth/api-key)

v1.7.7

Compare Source

better-auth/better-auth (@​better-auth/passkey)

v1.7.7

Compare Source

better-auth/better-auth (@​better-auth/sso)

v1.7.7

Compare Source

better-auth/utils (@​better-auth/utils)

v0.5.0

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v0.4.3

Compare Source

   🐞 Bug Fixes
    View changes on GitHub
cloudflare/workers-sdk (@​cloudflare/vite-plugin)

v1.63.1

Compare Source

Patch Changes

  • #​15617 93c1069 Thanks @​jpatel3! - Stop the update check from recommending deprecated versions

    Previously, the "update available" notice shown by wrangler and @cloudflare/vite-plugin always pointed at whichever version was tagged latest on npm, even after that version had been deprecated for shipping a bug. Deprecated versions are now never recommended: if the latest release has been deprecated, the newest non-deprecated stable release below it is suggested instead, or nothing at all if you are already on it.

    The check now reads the npm registry directly instead of going through the update-check package, which discarded the deprecation information. The on-disk cache location and one-hour refresh interval are unchanged.

  • #​16003 6947df3 Thanks @​oddharsh! - Ship using and await using declarations to the runtime as written

    Worker builds no longer lower explicit resource management into helper code, so Workers that use it ship about 1.7 KB less. workerd supports the syntax natively. On Vite 8 the plugin builds Workers at an es2026 target, so Oxc leaves the syntax alone. On Vite 6 and 7, where esbuild has no es2026 target, the Worker environments tell esbuild that using is supported instead. Client builds keep their own targets: the plugin changes only the Worker environments.

  • #​16145 e820406 Thanks @​cpojer! - Honor the source-map setting in release builds

    Omit the plugin's JavaScript and declaration source maps when building with SOURCEMAPS=false, reducing the installed package size. Normal development builds keep source maps, and application source-map settings are unchanged.

  • Updated dependencies [2d1d563, 85b14e7, e6f7663, fe607f9, ad7ff45, 8de6b3c, ae29445, 757faa6, cc8e969, 417b186, 93c1069, 6947df3, 82acf3c, 9a58244]:

v1.63.0

Compare Source

Minor Changes

  • #​16030 aa2f9b7 Thanks @​edmundhung! - Add email-protected Quick Tunnels to the Cloudflare Vite plugin

    Set tunnel.allowedMail to a list of email addresses or domain patterns to require email authentication when exposing a Vite development or preview server through a Quick Tunnel.

Patch Changes

v1.62.5

Compare Source

Patch Changes

v1.62.4

Compare Source

Patch Changes

v1.62.3

Compare Source

Patch Changes
Effect-TS/language-service (@​effect/language-service)

v0.87.4

Compare Source

Patch Changes

  • #​777 4478eec Thanks @​CasperEngl! - missedPipeableOpportunity now reports calls whose result is used as a method receiver, and the calls nested inside them. These were skipped before:

    // now reported: `Inner.pipe(...)`
export const B = Schema.NullishOr(Inner).annotations({ identifier: "B" });

// now reported, including the nested `Schema.Array(Inner)`
export const C = Schema.NullishOr(
  Schema.Struct({ x: Schema.Array(Inner) })
).annotations({ identifier: "C" });

    Other diagnostics built on the same piping analysis, such as flatMapToMap and strictEffectProvide, now also check calls in these positions.

SBoudrias/Inquirer.js (@​inquirer/prompts)

v8.7.3

Compare Source

@​inquirer/prompts@8.7.3

What's new
  • search() no longer submits a stale choice when Enter is pressed while an async search is still loading — the prompt waits for the fresh results, the query is preserved, and repeated Enter presses during validation no longer run the async validator more than once (@inquirer/search, #​2291, closes #​2290).
  • confirm() now always accepts the single keystrokes y/n even with localized keywords, and unrecognized input no longer silently falls back on the default answer (@inquirer/confirm, #​2281, closes #​2279).
  • expand() and rawlist() now ignore surrounding whitespace in answers (@inquirer/expand, @inquirer/rawlist, #​2280).
  • All package READMEs now document the Deno install command (deno add npm:@inquirer/prompts) alongside the npm/yarn/pnpm/bun ones (#​2269).
Included
  • @inquirer/checkbox@^5.2.6
  • @inquirer/confirm@^6.3.3
  • @inquirer/editor@^5.3.4
  • @inquirer/expand@^5.1.6
  • @inquirer/input@^5.1.7
  • @inquirer/number@^4.2.4
  • @inquirer/password@^5.2.3
  • @inquirer/rawlist@^5.3.6
  • @inquirer/search@^4.3.4
  • @inquirer/select@^5.2.6
microsoft/playwright (@​playwright/test)

v1.64.0

Compare Source

🧰 WebMCP

New page.webmcp and frame.webmcp give access to the tools that a page registers through the experimental WebMCP browser API, so you can test them like any other part of your app:

const browser = await chromium.launch({ args: ['--enable-features=WebMCP'] });
const page = await browser.newPage();
await page.goto('https://example.com');

for (const tool of await page.webmcp.tools())
  console.log(tool.name, tool.description);

const result = await page.webmcp.callTool('add', { a: 2, b: 40 });
console.log(result.content[0].text); // "42"

Playwright MCP also supports WebMCP by default, with page-defined tools offered to the agent as webmcp_<tool>. Pass --no-webmcp to opt out.

playwright-cli exposes them as well:

playwright-cli webmcp-list
playwright-cli webmcp-call search_catalog --params '{"query":"cats"}'

🎬 Better videos

Videos can now be recorded at a custom frame rate, and the decorations for actions are styled with plain CSS:

// playwright.config.ts
import { defineConfig } from '@playwright/test';

export default defineConfig({
  use: {
    video: {
      mode: 'on',
      size: { width: 1920, height: 1080 },
      fps: 60,
      show: {
        actions: {
          style: {
            point: 'width: 20px; height: 20px; border-radius: 50%; background: red',
            highlight: 'outline: 2px solid #&#8203;333; background: rgba(0, 128, 255, .15)',
            title: 'font-size: 16px',
          },
        },
      },
    },
  },
});

❗ Important

✂ PR body was truncated to here.

@coderabbitai

coderabbitai Bot commented Oct 3, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 0c5476ea-646f-4c62-bc11-411f58da9d3e

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@socket-security

socket-security Bot commented Oct 3, 2026 •
edited
Loading

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatedhappy-dom@​20.14.5 ⏵ 20.14.66610088 +19570 -30
Updated@​radix-ui/​react-label@​2.1.15 ⏵ 2.1.161001006699100
Updated@​radix-ui/​react-separator@​1.1.15 ⏵ 1.1.16100 +110067 +199100
Updated@​radix-ui/​react-progress@​1.1.16 ⏵ 1.1.171001006896 -2100
Added@​radix-ui/​react-slot@​1.4.01001006999100
Updated@​tanstack/​react-query-devtools@​5.104.0 ⏵ 5.104.11001007098 +1100
Updated@​radix-ui/​react-tabs@​1.1.21 ⏵ 1.1.2299 +110070 +199100
Updated@​radix-ui/​react-hover-card@​1.1.23 ⏵ 1.1.24991007096 -2100
Updated@​radix-ui/​react-switch@​1.3.7 ⏵ 1.3.8991007099100
Updated@​radix-ui/​react-dropdown-menu@​2.1.24 ⏵ 2.1.25991007199100
Updated@​radix-ui/​react-checkbox@​1.3.11 ⏵ 1.3.12991007199100
Updated@​radix-ui/​react-dialog@​1.1.23 ⏵ 1.2.099 +110071 +199100
Updated@​radix-ui/​react-alert-dialog@​1.1.23 ⏵ 1.1.249910071 +296 -2100
Updated@​radix-ui/​react-tooltip@​1.2.16 ⏵ 1.3.099 +110072 +199100
Updated@​base-ui/​react@​1.8.0 ⏵ 1.9.07210089 +192100
Updated@​radix-ui/​react-scroll-area@​1.2.18 ⏵ 1.3.09910073 +198100
Updatedfumadocs-mdx@​15.4.5 ⏵ 15.4.6981007396 +1100
Updated@​radix-ui/​react-select@​2.3.7 ⏵ 2.3.899 +110073 +199100
Updatedfumadocs-core@​16.15.17 ⏵ 16.16.297 -110077 +196 +1100
Updatedfumadocs-ui@​16.15.17 ⏵ 16.16.298 +110077 +196 +1100
Updated@​better-auth/​api-key@​1.7.6 ⏵ 1.7.71001007897 +1100
Updated@​better-auth/​sso@​1.7.6 ⏵ 1.7.7991007998 +1100
Updatedhono-openapi@​1.3.3 ⏵ 1.3.5100 +110079 +193 +4100
Updatedvitest@​5.0.2 ⏵ 5.0.39810079 +198 -1100
Updatedlucide-react@​1.49.0 ⏵ 1.54.010010098 +19680
Updated@​types/​node@​26.6.3 ⏵ 26.6.410010081 +196100
Updatedvite@​8.3.1 ⏵ 8.3.499 +110082 +198 +1100
Updated@​scalar/​hono-api-reference@​0.12.7 ⏵ 0.12.1110010083100 +1100
Updatedbetter-auth@​1.7.6 ⏵ 1.7.798 +1100 +7585 +196 +2100
Updated@​cloudflare/​vite-plugin@​1.62.2 ⏵ 1.63.19810087 +198100
Updated@​better-auth/​passkey@​1.7.6 ⏵ 1.7.71001008797 +1100
Updatedoxfmt@​0.71.0 ⏵ 0.72.094 +110088 +196100
See 16 more rows in the dashboard

View full report

@renovate
renovate Bot force-pushed the renovate/bun-minor-and-patch-dependencies branch 28 times, most recently from 3fd3808 to d572b7a Compare October 9, 2026 20:02
@renovate
renovate Bot force-pushed the renovate/bun-minor-and-patch-dependencies branch 7 times, most recently from ef1ec04 to cb49091 Compare October 11, 2026 08:05
@renovate
renovate Bot force-pushed the renovate/bun-minor-and-patch-dependencies branch from cb49091 to 2fe6a1f Compare October 11, 2026 09:33

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants