Skip to content
This repository was archived by the owner on Jun 11, 2026. It is now read-only.

chore(deps): bump the npm-weekly group across 1 directory with 15 updates#182

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-weekly-ea75f69e97
Open

chore(deps): bump the npm-weekly group across 1 directory with 15 updates#182
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-weekly-ea75f69e97

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 28, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the npm-weekly group with 15 updates in the / directory:

Package From To
@remix-run/fetch-router 0.17.0 0.19.2
ox 0.14.15 0.14.29
@changesets/changelog-github 0.6.0 0.7.0
@types/node 25.6.0 25.9.1
@vitest/coverage-v8 4.1.5 4.1.8
hono 4.12.14 4.12.23
oxfmt 0.35.0 0.53.0
oxlint 1.61.0 1.68.0
react 19.2.5 19.2.7
@types/react 19.2.14 19.2.16
react-dom 19.2.5 19.2.7
viem 2.47.16 2.52.2
vitest 4.1.5 4.1.8
zile 0.0.22 0.0.29
@tanstack/react-query 5.90.5 5.101.0

Updates @remix-run/fetch-router from 0.17.0 to 0.19.2

Release notes

Sourced from @​remix-run/fetch-router's releases.

fetch-router v0.19.2

Patch Changes

form-data-parser v0.17.2

Patch Changes

fetch-router v0.19.1

Patch Changes

form-data-parser v0.17.1

Patch Changes

fetch-router v0.19.0

Minor Changes

  • BREAKING CHANGE: Simplified route action, controller, request handler, and middleware helper types. Action now accepts a route pattern, RoutePattern, or Route object as its first generic and the full request context as its optional second generic. It describes either a plain request handler function or an action object with optional inline middleware. Controller now accepts the route map as its first generic and the full request context as its optional second generic. RequestHandler now accepts the full request context as its only generic. Middleware now accepts one context effect generic, which can be a single { key, value } context entry, a ContextEntries tuple, or a context transform function. BuildAction is no longer exported.

    For most apps, augment RouterTypes.context once and use createAction()/createController() to type stored handlers without satisfies clauses:

    import {
  createAction,
  createController,
  type ContextWithParams,
  type RequestContext,
} from 'remix/fetch-router'
type AppContext<params extends Record<string, string> = {}> = ContextWithParams<
RequestContext,
params
>
declare module 'remix/fetch-router' {
interface RouterTypes {
context: AppContext
}
}

... (truncated)

Changelog

Sourced from @​remix-run/fetch-router's changelog.

v0.19.2

Patch Changes

v0.19.1

Patch Changes

v0.19.0

Minor Changes

  • BREAKING CHANGE: Simplified route action, controller, request handler, and middleware helper types. Action now accepts a route pattern, RoutePattern, or Route object as its first generic and the full request context as its optional second generic. It describes either a plain request handler function or an action object with optional inline middleware. Controller now accepts the route map as its first generic and the full request context as its optional second generic. RequestHandler now accepts the full request context as its only generic. Middleware now accepts one context effect generic, which can be a single { key, value } context entry, a ContextEntries tuple, or a context transform function. BuildAction is no longer exported.

    For most apps, augment RouterTypes.context once and use createAction()/createController() to type stored handlers without satisfies clauses:

    import {
  createAction,
  createController,
  type ContextWithParams,
  type RequestContext,
} from 'remix/fetch-router'
type AppContext<params extends Record<string, string> = {}> = ContextWithParams<
RequestContext,
params
>
declare module 'remix/fetch-router' {
interface RouterTypes {
context: AppContext
}
}
let action = createAction(routes.account, {
handler(context) {
return new Response(context.params.id)
},
})
let controller = createController(routes, {
actions: {
account(context) {

... (truncated)

Commits

Updates ox from 0.14.15 to 0.14.29

Release notes

Sourced from ox's releases.

ox@0.14.29

Patch Changes

  • #268 ed93945 Thanks @​jxom! - viem/tempo: Added genesisConfig shorthand to TIP-1061 multisig helpers and renamed configId → genesisConfigId on the typed SignatureEnvelope.Multisig.

ox@0.14.28

Patch Changes

  • #265 f5328d2 Thanks @​jxom! - viem/tempo: Added support for TIP-1061 native multisig accounts.

ox@0.14.27

Patch Changes

  • #263 451a442 Thanks @​jxom! - ox/tempo: Added the ReceivePolicyReceipt module for encoding/decoding TIP-1028 receive-policy claim receipts (ClaimReceiptV1 witnesses) with decode, encode, from, fromLog, and fromTransactionReceipt (returns one receipt per TransferBlocked log).

ox@0.14.26

Patch Changes

  • #262 b1ac8c8 Thanks @​jxom! - ox/tempo: Added support for TIP-1049 (admin access keys) via optional isAdmin and account fields on KeyAuthorization that bind into the signing hash.

  • #260 581ccee Thanks @​jxom! - ox/tempo: Added support for TIP-1053 (witnesses in key authorizations) via an optional 32-byte witness field on KeyAuthorization that is included in the signing hash.

ox@0.14.25

Patch Changes

  • #256 ad7610b Thanks @​jxom! - Renamed ChannelDescriptor.from to Channel.from, made Channel.Channel the descriptor type, and changed Channel.computeId to receive channel and options separately.

ox@0.14.24

Patch Changes

  • #254 d837628 Thanks @​jxom! - Added ChannelDescriptor.from for normalizing TIP-20 channel reserve descriptors.

ox@0.14.23

Patch Changes

  • #252 19cd833 Thanks @​jxom! - Added TIP-20 channel reserve constants, channel id computation, and voucher signing helpers.

ox@0.14.22

Patch Changes

  • #227 ffa64c0 Thanks @​Genmin! - Fixed Secp256k1.verify narrowing signature branches before address recovery.

ox@0.14.21

Patch Changes

  • #246 32cf459 Thanks @​0xrusowsky! - Added TxEnvelopeTempo.encodeForSigning to expose the raw Tempo sender-signing preimage bytes.

  • #248 e0474e9 Thanks @​jxom! - Added blockTimestamp support to transaction RPC conversions.

ox@0.14.20

... (truncated)

Commits
  • 58ca601 chore: version packages (#269)
  • ed93945 feat(tempo): add genesisConfig shorthand to multisig helpers (#268)
  • ad3330f chore: version packages (#267)
  • 4b3fe3e chore: version packages (#266)
  • ef64a52 ci(tempo): use edge image (tracks main) instead of latest
  • b8a0714 test(tempo): skip TIP-1049 admin e2e until tempo release ships PR #4265
  • f5328d2 feat(tempo): native multisig (#265)
  • ae54345 ci: bump vitest hookTimeout to 60s for tempo localnet cold start
  • 7bb96ea chore: version packages (#264)
  • 451a442 feat(tempo): add ReceivePolicyReceipt module for TIP-1028 claim receipts (#263)
  • Additional commits viewable in compare view

Updates @changesets/changelog-github from 0.6.0 to 0.7.0

Release notes

Sourced from @​changesets/changelog-github's releases.

@​changesets/changelog-github@​0.7.0

Minor Changes

Commits

Updates @types/node from 25.6.0 to 25.9.1

Commits

Updates @vitest/coverage-v8 from 4.1.5 to 4.1.8

Release notes

Sourced from @​vitest/coverage-v8's releases.

v4.1.8

   🐞 Bug Fixes

    View changes on GitHub

v4.1.7

   🐞 Bug Fixes

    View changes on GitHub

v4.1.6

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub
Commits
  • e61f2dd chore: release v4.1.8
  • e4067b3 fix(browser): disable client cdp API when allowWrite/allowExec: false [ba...
  • a09d472 chore: release v4.1.7
  • a8fd24c chore: release v4.1.6
  • See full diff in compare view

Updates hono from 4.12.14 to 4.12.23

Release notes

Sourced from hono's releases.

v4.12.23

What's Changed

Full Changelog: honojs/hono@v4.12.22...v4.12.23

v4.12.22

What's Changed

New Contributors

Full Changelog: honojs/hono@v4.12.21...v4.12.22

v4.12.21

Security fixes

This release includes fixes for the following security issues:

app.mount() strips mount prefix using undecoded path, causing incorrect routing for percent-encoded paths

Affects: app.mount(). Fixes prefix stripping using the raw URL pathname instead of the decoded path, where percent-encoded characters in the mount prefix or path could cause the prefix to be removed at the wrong position, resulting in the sub-application receiving an incorrect path. GHSA-2gcr-mfcq-wcc3

IP Restriction bypasses static deny rules for non-canonical IPv6

Affects: hono/ip-restriction. Fixes IP address comparison using string equality, where non-canonical IPv6 representations of a denied address — such as compressed forms or hex-notation IPv4-mapped addresses — could bypass static deny rules. GHSA-xrhx-7g5j-rcj5

Cookie helper does not sanitize sameSite and priority, allowing Set-Cookie injection

Affects: hono/cookie. Fixes missing validation of sameSite and priority options against injection characters (;, \r, \n), where user-controlled input passed to either option could inject additional attributes into the Set-Cookie response header. GHSA-3hrh-pfw6-9m5x

JWT middleware accepts any Authorization scheme, not only Bearer

Affects: hono/jwt, hono/jwk. Fixes missing scheme validation in the Authorization header, where any two-part header value was accepted regardless of the scheme name, allowing non-Bearer schemes to pass JWT authentication. GHSA-f577-qrjj-4474

Users who use app.mount(), hono/ip-restriction, hono/cookie, or hono/jwt/hono/jwk are encouraged to upgrade to this version.

... (truncated)

Commits
  • 83bfb3b 4.12.23
  • bcd290a fix(utils/ipaddr): do not compress a single 0 group to :: (#4971)
  • c968177 feat(compress): add contentTypeFilter option and `COMPRESSIBLE_CONTENT_TYPE_R...
  • 0265a54 docs(contribution): add AI Usage Policy (#4970)
  • c84c5d2 feat(context): export the Context class publicly (#4543)
  • 82dad62 fix(serve-static): normalize all backslashes in file paths, not just the firs...
  • 2f01b77 4.12.22
  • 6bc0dff feat: add msgpack as a compressible content type (#4957)
  • 7e0555d fix(deno): echo negotiated WebSocket subprotocol in upgrade response (#4955)
  • f0ed246 fix(compress): respect Accept-Encoding when encoding option is set (#4951)
  • Additional commits viewable in compare view

Updates oxfmt from 0.35.0 to 0.53.0

Changelog

Sourced from oxfmt's changelog.

Changelog

All notable changes to this package will be documented in this file.

The format is based on Keep a Changelog.

[0.54.0] - 2026-06-08

📚 Documentation

  • dadafe3 oxlint, oxfmt: Mention migrate skills in npm READMEs (#22965) (Boshen)
  • f88961a oxfmt: Annotate each config option with supported languages (#22953) (leaysgur)

[0.52.0] - 2026-05-26

🚀 Features

  • 16b8058 oxfmt: Support vite-plus/resolveConfig for vite.config.ts (#22454) (leaysgur)

[0.50.0] - 2026-05-15

🐛 Bug Fixes

  • 43b9978 formatter/sort_imports: Treat subpath imports as internal (#22440) (leaysgur)

[0.49.0] - 2026-05-11

🚀 Features

  • 6e8e818 oxfmt: Experimental .svelte support (#21700) (leaysgur)

[0.45.0] - 2026-04-13

🐛 Bug Fixes

  • 50c389b oxfmt: Support .editorconfig quote_type (#20989) (leaysgur)

[0.44.0] - 2026-04-06

🐛 Bug Fixes

  • dd2df87 npm: Export package.json for oxlint and oxfmt (#20784) (kazuya kawaguchi)
  • 4216380 oxfmt: Support .editorconfig tab_width fallback (#20988) (leaysgur)

[0.43.0] - 2026-03-30

🚀 Features

  • 6ef440a oxfmt: Support bool for object style options (#20853) (leaysgur)

... (truncated)

Commits
  • 964a758 release(apps): oxlint v1.68.0 && oxfmt v0.53.0 (#22883)
  • 68b455d release(apps): oxlint v1.67.0 && oxfmt v0.52.0 (#22735)
  • 16b8058 feat(oxfmt): Support vite-plus/resolveConfig for vite.config.ts (#22454)
  • 5570206 release(apps): oxlint v1.66.0 && oxfmt v0.51.0 (#22528)
  • 25e5cbc release(apps): oxlint v1.65.0 && oxfmt v0.50.0 (#22458)
  • 43b9978 fix(formatter/sort_imports): Treat subpath imports as internal (#22440)
  • d652a55 release(apps): oxlint v1.64.0 && oxfmt v0.49.0 (#22318)
  • 6e8e818 feat(oxfmt): Experimental .svelte support (#21700)
  • 330fe31 refactor(config): Update doc comment for GlobSet (#22197)
  • fb3067c refactor(oxfmt): use shared GlobSet for overrides (#22147)
  • Additional commits viewable in compare view

Updates oxlint from 1.61.0 to 1.68.0

Release notes

Sourced from oxlint's releases.

oxlint v1.27.0 && oxfmt v0.12.0

Oxlint v1.27.0

🚀 Features

  • 222a8f0 linter/plugins: Implement SourceCode#isSpaceBetween (#15498) (overlookmotel)
  • 2f9735d linter/plugins: Implement context.languageOptions (#15486) (overlookmotel)
  • bc731ff linter/plugins: Stub out all Context APIs (#15479) (overlookmotel)
  • 5822cb4 linter/plugins: Add extend method to FILE_CONTEXT (#15477) (overlookmotel)
  • 7b1e6f3 apps: Add pure rust binaries and release to github (#15469) (Boshen)
  • 2a89b43 linter: Introduce debug assertions after fixes to assert validity (#15389) (camc314)
  • ad3c45a editor: Add oxc.path.node option (#15040) (Sysix)

🐛 Bug Fixes

  • 6f3cd77 linter/no-var: Incorrect warning for blocks (#15504) (Hamir Mahal)
  • 6957fb9 linter/plugins: Do not allow access to Context#id in createOnce (#15489) (overlookmotel)
  • 7409630 linter/plugins: Allow access to cwd in createOnce in ESLint interop mode (#15488) (overlookmotel)
  • 732205e parser: Reject using / await using in a switch case / default clause (#15225) (sapphi-red)
  • a17ca32 linter/plugins: Replace Context class (#15448) (overlookmotel)
  • ecf2f7b language_server: Fail gracefully when tsgolint executable not found (#15436) (camc314)
  • 3c8d3a7 lang-server: Improve logging in failure case for tsgolint (#15299) (camc314)
  • ef71410 linter: Use jsx if source type is JS in fix debug assertion (#15434) (camc314)
  • e32bbf6 linter/no-var: Handle TypeScript declare keyword in fixer (#15426) (camc314)
  • 6565dbe linter/switch-case-braces: Skip comments when searching for : token (#15425) (camc314)
  • 85bd19a linter/prefer-class-fields: Insert value after type annotation in fixer (#15423) (camc314)
  • fde753e linter/plugins: Block access to context.settings in createOnce (#15394) (overlookmotel)
  • ddd9f9f linter/forward-ref-uses-ref: Dont suggest removing wrapper in invalid positions (#15388) (camc314)
  • dac2a9c linter/no-template-curly-in-string: Remove fixer (#15387) (camc314)
  • 989b8e3 linter/no-var: Only fix to const if the var has an initializer (#15385) (camc314)
  • cc403f5 linter/plugins: Return empty object for unimplemented parserServices (#15364) (magic-akari)

⚡ Performance

  • 25d577e language_server: Start tools in parallel (#15500) (Sysix)
  • 3c57291 linter/plugins: Optimize loops (#15449) (overlookmotel)
  • 3166233 linter/plugins: Remove Arcs (#15431) (overlookmotel)
  • 9de1322 linter/plugins: Lazily deserialize settings JSON (#15395) (overlookmotel)
  • 3049ec2 linter/plugins: Optimize deepFreezeSettings (#15392) (overlookmotel)
  • 444ebfd linter/plugins: Use single object for parserServices (#15378) (overlookmotel)

📚 Documentation

  • 97d2104 linter: Update comment in lint.rs about default value for tsconfig path (#15530) (Connor Shea)
  • 2c6bd9e linter: Always refer as "ES2015" instead of "ES6" (#15411) (sapphi-red)
  • a0c5203 linter/import/named: Update "ES7" comment in examples (#15410) (sapphi-red)
  • 3dc24b5 linter,minifier: Always refer as "ES Modules" instead of "ES6 Modules" (#15409) (sapphi-red)
  • 2ad77fb linter/no-this-before-super: Correct "Why is this bad?" section (#15408) (sapphi-red)
  • 57f0ce1 linter: Add backquotes where appropriate (#15407) (sapphi-red)

Oxfmt v0.12.0

... (truncated)

Changelog

Sourced from oxlint's changelog.

[1.68.0] - 2026-06-01

🚀 Features

  • e4b1f46 linter/typescript: Implement method-signature-style rule (#22679) (Mikhail Baev)
  • bc462ca linter/vue: Implement no-reserved-component-names rule (#22741) (bab)
  • ef9e751 linter/vue: Implement component-definition-name-casing rule (#22818) (bab)
  • d67f51a linter/vue: Implement require-prop-type-constructor rule (#22708) (bab)
  • 8422e8b linter/jsdoc: Implement require-yields-description rule (#22805) (Mikhail Baev)
  • fe93f97 linter/eslint: Implement prefer-named-capture-group rule (#22759) (Sebastian Poxhofer)

[1.67.0] - 2026-05-26

🚀 Features

  • b84941e linter/vue: Implement no-expose-after-await rule (#22675) (bab)
  • 98b98c1 linter/vue: Implement no-computed-properties-in-data rule (#22674) (bab)
  • 2d4c919 oxlint: Support vite-plus/resolveConfig for vite.config.ts (#22456) (leaysgur)
  • 2a60012 linter/vue: Implement require-render-return rule (#22613) (bab)
  • 9f227fd linter/vue: Implement no-deprecated-props-default-this rule (#21892) (bab)
  • 87f065e linter/vue: Implement return-in-emits-validator rule (#21935) (bab)
  • ea0380c linter/unicorn: Implement import-style rule (#22173) (Hao Chen)
  • dde40fe linter/vue: Implement no-watch-after-await rule (#22006) (bab)
  • a735eb0 linter/vue: Implement valid-next-tick rule (#22531) (bab)
  • 6dc615d linter/vue: Implement no-shared-component-data rule (#21842) (bab)
  • a656418 linter/vue: Implement valid-define-options rule (#22107) (bab)
  • bb6f1b2 linter/vue: Implement require-slots-as-functions rule (#22244) (bab)
  • 5fa4774 linter/n: Implement callback-return rule (#22470) (Mikhail Baev)

[1.66.0] - 2026-05-18

🚀 Features

  • 0440b0f linter/eslint: Implement id-match rule (#22379) (Vladislav Sayapin)
  • 65bf119 linter: Implement react no-object-type-as-default-prop (#22481) (uhyo)
  • 2a6ddce linter/eslint: Implement no-implied-eval rule (#22391) (Vladislav Sayapin)
  • 625758a linter/vitest: Implement padding-around-after-all-blocks rule (#21788) (kapobajza)
  • 37680b0 linter: Implement react no-unstable-nested-components (#22248) (Jovi De Croock)
  • d8d9c74 linter: Implement import/newline-after-import rule (#19142) (Ryuya Yanagi)

[1.65.0] - 2026-05-15

🚀 Features

  • 5478fb5 linter/jsdoc: Implement require-throws-description rule (#22386) (Mikhail Baev)
  • c73225e linter/eslint: Implement prefer-arrow-callback rule (#22312) (박천(Cheon Park))
  • de82b59 linter: Add support for eslint-plugin-jsx-a11y-x (#22356) (mehm8128)
  • f44b6c8 linter: Fill schemas DummyRuleMap with built-in rules (#22288) (Sysix)

[1.64.0] - 2026-05-11

... (truncated)

Commits
  • 964a758 release(apps): oxlint v1.68.0 && oxfmt v0.53.0 (#22883)
  • 3f05c5e feat(linter): expose override::exclude_files option (#22884)
  • e4b1f46 feat(linter/typescript): implement method-signature-style rule (#22679)
  • bc462ca feat(linter/vue): implement no-reserved-component-names rule (#22741)
  • ef9e751 feat(linter/vue): implement component-definition-name-casing rule (#22818)
  • d67f51a feat(linter/vue): implement require-prop-type-constructor rule (#22708)
  • 8422e8b feat(linter/jsdoc): implement require-yields-description rule (#22805)
  • fe93f97 feat(linter/eslint): implement prefer-named-capture-group rule (#22759)
  • 68b455d release(apps): oxlint v1.67.0 && oxfmt v0.52.0 (#22735)
  • b84941e feat(linter/vue): implement no-expose-after-await rule (#22675)
  • Additional commits viewable in compare view

Updates react from 19.2.5 to 19.2.7

Release notes

Sourced from react's releases.

19.2.7 (June 1st, 2026)

React Server Components

19.2.6 (May 6th, 2026)

React Server Components

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react since your current version.


Updates @types/react from 19.2.14 to 19.2.16

Commits

Updates react-dom from 19.2.5 to 19.2.7

Release notes

Sourced from react-dom's releases.

19.2.7 (June 1st, 2026)

React Server Components

19.2.6 (May 6th, 2026)

React Server Components

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react-dom since your current version.


Updates viem from 2.47.16 to 2.52.2

Release notes

Sourced from viem's releases.

viem@2.52.2

Patch Changes

viem@2.52.0

Minor Changes

viem@2.51.3

Patch Changes

viem@2.51.2

Patch Changes

viem@2.51.0

Minor Changes

Patch Changes

viem@2.50.4

... (truncated)

Commits
  • 1b6a888 chore: version package (#4719)
  • 78a9a60 chore: version package (#4707)
  • 5fe74ca docs(tempo): use calls in multisig transaction examples (#4716)
  • 1969c01 feat(chains): set t5 hardfork on Tempo Testnet (Moderato) (#4718)
  • 394f1c5 chore: bump chains size-limit budgets (#4717)
  • 51c51ba Update multisig account support in viem/tempo
  • a74b05d chore: bump vitest to fix audit vulnerability (#4715)
  • f5ae20d feat(tempo): infer multisig config from account in prepareTransactionRequest ...

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 28, 2026
@socket-security

socket-security Bot commented May 28, 2026 •
edited
Loading

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Added@​changesets/​changelog-github@​0.7.01001006893100
Addedzile@​0.0.29791009995100
Added@​types/​react@​19.2.171001007996100
Addedvitest@​4.1.8981007998100
Added@​vitest/​coverage-v8@​4.1.8991007998100
Added@​types/​node@​25.9.11001008196100
Added@​remix-run/​fetch-router@​0.19.28310010095100
Addedreact@​19.2.71001008497100
Addedoxfmt@​0.53.0861008996100
Addedoxlint@​1.68.0991009196100
Addedreact-dom@​19.2.71001009298100
Addedhono@​4.12.23991009796100
Addedviem@​2.52.29710010097100
Addedox@​0.14.29991009997100

View full report

@pkg-pr-new

pkg-pr-new Bot commented May 28, 2026 •
edited
Loading

Copy link
Copy Markdown

Open in StackBlitz

npm i https://pkg.pr.new/tempoxyz/tempo-ts/tempo.ts@182

commit: 917b8ce

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-weekly-ea75f69e97 branch from a93766a to 7c86fca Compare June 4, 2026 09:57
@dependabot
chore(deps): bump the npm-weekly group across 1 directory with 15 upd…
917b8ce 
…ates

Bumps the npm-weekly group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@remix-run/fetch-router](https://github.com/remix-run/remix/tree/HEAD/packages/fetch-router) | `0.17.0` | `0.19.2` |
| [ox](https://github.com/wevm/ox) | `0.14.15` | `0.14.29` |
| [@changesets/changelog-github](https://github.com/changesets/changesets) | `0.6.0` | `0.7.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.6.0` | `25.9.1` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.5` | `4.1.8` |
| [hono](https://github.com/honojs/hono) | `4.12.14` | `4.12.23` |
| [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt) | `0.35.0` | `0.53.0` |
| [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.61.0` | `1.68.0` |
| [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.5` | `19.2.7` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.14` | `19.2.16` |
| [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.5` | `19.2.7` |
| [viem](https://github.com/wevm/viem) | `2.47.16` | `2.52.2` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.5` | `4.1.8` |
| [zile](https://github.com/wevm/zile) | `0.0.22` | `0.0.29` |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.90.5` | `5.101.0` |



Updates `@remix-run/fetch-router` from 0.17.0 to 0.19.2
- [Release notes](https://github.com/remix-run/remix/releases)
- [Changelog](https://github.com/remix-run/remix/blob/main/packages/fetch-router/CHANGELOG.md)
- [Commits](https://github.com/remix-run/remix/commits/v0.19.2/packages/fetch-router)

Updates `ox` from 0.14.15 to 0.14.29
- [Release notes](https://github.com/wevm/ox/releases)
- [Commits](https://github.com/wevm/ox/compare/ox@0.14.15...ox@0.14.29)

Updates `@changesets/changelog-github` from 0.6.0 to 0.7.0
- [Release notes](https://github.com/changesets/changesets/releases)
- [Commits](https://github.com/changesets/changesets/compare/@changesets/changelog-github@0.6.0...@changesets/changelog-github@0.7.0)

Updates `@types/node` from 25.6.0 to 25.9.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@vitest/coverage-v8` from 4.1.5 to 4.1.8
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.8/packages/coverage-v8)

Updates `hono` from 4.12.14 to 4.12.23
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.12.14...v4.12.23)

Updates `oxfmt` from 0.35.0 to 0.53.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.53.0/npm/oxfmt)

Updates `oxlint` from 1.61.0 to 1.68.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.68.0/npm/oxlint)

Updates `react` from 19.2.5 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react)

Updates `@types/react` from 19.2.14 to 19.2.16
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-dom` from 19.2.5 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react-dom)

Updates `viem` from 2.47.16 to 2.52.2
- [Release notes](https://github.com/wevm/viem/releases)
- [Commits](https://github.com/wevm/viem/compare/viem@2.47.16...viem@2.52.2)

Updates `vitest` from 4.1.5 to 4.1.8
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.8/packages/vitest)

Updates `zile` from 0.0.22 to 0.0.29
- [Release notes](https://github.com/wevm/zile/releases)
- [Changelog](https://github.com/wevm/zile/blob/main/CHANGELOG.md)
- [Commits](wevm/zile@v0.0.22...v0.0.29)

Updates `@types/react` from 19.2.14 to 19.2.17
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@tanstack/react-query` from 5.90.5 to 5.101.0
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.101.0/packages/react-query)

---
updated-dependencies:
- dependency-name: "@changesets/changelog-github"
  dependency-version: 0.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-weekly
- dependency-name: "@remix-run/fetch-router"
  dependency-version: 0.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-weekly
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.100.11
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-weekly
- dependency-name: "@types/node"
  dependency-version: 25.9.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-weekly
- dependency-name: "@types/react"
  dependency-version: 19.2.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-weekly
- dependency-name: "@types/react"
  dependency-version: 19.2.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-weekly
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.1.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-weekly
- dependency-name: hono
  dependency-version: 4.12.21
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-weekly
- dependency-name: ox
  dependency-version: 0.14.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-weekly
- dependency-name: oxfmt
  dependency-version: 0.51.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-weekly
- dependency-name: oxlint
  dependency-version: 1.66.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-weekly
- dependency-name: react
  dependency-version: 19.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-weekly
- dependency-name: react-dom
  dependency-version: 19.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-weekly
- dependency-name: viem
  dependency-version: 2.50.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-weekly
- dependency-name: vitest
  dependency-version: 4.1.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-weekly
- dependency-name: zile
  dependency-version: 0.0.26
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-weekly
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-weekly-ea75f69e97 branch from 7c86fca to 917b8ce Compare June 11, 2026 15:36
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants