chore(web)(deps): bump the web-minor-patch group in /web with 20 updates by dependabot[bot] · Pull Request #1621 · cortexapps/engrams

dependabot · 2026-10-10T17:17:11Z

Bumps the web-minor-patch group in /web with 20 updates:

Package	From	To
@assistant-ui/react	`0.15.22`	`0.15.25`
@assistant-ui/react-markdown	`0.14.17`	`0.14.19`
@codemirror/language	`6.12.4`	`6.13.1`
@codemirror/view	`6.43.13`	`6.43.14`
@pierre/diffs	`1.5.1`	`1.5.2`
@tanstack/react-query	`5.104.0`	`5.104.1`
@tanstack/react-router	`1.170.40`	`1.170.41`
@tanstack/react-table	`9.2.4`	`9.2.6`
better-auth	`1.7.6`	`1.7.7`
lucide-react	`1.49.0`	`1.52.0`
mermaid	`12.0.0`	`12.1.0`
radix-ui	`1.6.7`	`1.7.0`
react-resizable-panels	`4.14.1`	`4.14.2`
shiki	`4.4.3`	`4.5.0`
@types/node	`26.6.3`	`26.6.4`
@vitejs/plugin-react	`6.1.1`	`6.1.2`
jsdom	`30.1.1`	`30.1.2`
oxfmt	`0.71.0`	`0.72.0`
oxlint	`1.86.0`	`1.87.0`
vite	`8.3.1`	`8.3.3`

Updates @assistant-ui/react from 0.15.22 to 0.15.25

Release notes

Sourced from @assistant-ui/react's releases.

@assistant-ui/react@0.15.25

Patch Changes

#8796 fd444e4 - a tool approval can ask several questions at once, or let one question take several answers: display: "questions" with approval.questions, answered through respondToApproval({ answers }) keyed by question id, validated before it reaches onRespondToToolApproval and recorded on approval.answers; the AI SDK converter reads questions and answers from the approval descriptor when a response handler is set, and the cloud format keeps them (@okisdev)

#7212 9f40133 - fix: clean up cancelled and pre-load failed sandbox frame renders (@Kinfe123)

#7189 d2782af - feat: allow visible component action settle delays to be configured (@Kinfe123)

#7155 5484ca4 - feat: support message-scoped converter metadata invalidation (@Kinfe123)

#8798 ec48da2 - a thread can open on its latest page and load older messages on demand: the external store adapter takes hasEarlier and onLoadEarlier, the runtime surfaces them as thread.hasEarlier, thread.isLoadingEarlier and aui.thread.loadEarlier() with one load in flight at a time, ThreadPrimitive.LoadEarlier loads the next page, ThreadPrimitive.Viewport keeps the visible messages in place when it lands above them, and the React Native ThreadPrimitive.MessagesFlatList pages through the runtime when it gets no history prop (@okisdev)

#8760 2e4d6a9 - streaming text, running tool durations, and message stall detection read no wall clock during render, so a cacheComponents prerender no longer fails on them. (@okisdev)

#8794 451a76c - reasoning parts carry an optional timing with their start and end times, typed as the new MessagePartTiming that ToolCallTiming now aliases, so a host can show how long its agent thought; the assistant-stream accumulator stamps it while reasoning streams, joined reasoning parts and the cloud format keep it, and a MessagePrimitive.GroupedParts group reports the span of its timed parts as timing (@okisdev)

#8795 1f77d04 - the composer trigger popover primitives and their adapter, item, category and directive formatter types get stable names; the Unstable_ names stay as deprecated aliases, and the trigger popover hooks stay unstable (@okisdev)

#8799 aecb5eb - a long thread can be virtualized per part instead of per message: createThreadRowsSelector flattens the thread for useAuiState into stable rows (a user message, each top-level part group of an assistant message, a turn end) that keep their identity while tokens stream, and ThreadPrimitive.Row renders one row with only the scopes it needs; a turn-end row carries the turn's start time and, once the turn completes, the latest end its messages record, so a turn footer can show how long the agent worked (@okisdev)

Updated dependencies [c883dc0, fd444e4, 64277e2, 9f40133, 791d240, ed84b12, 2bc1edb, 0284a07, 5484ca4, ec48da2, 46133cd, 3effee5, 451a76c, 16439da, 1f77d04, aecb5eb, 77a98c1]:

@assistant-ui/core@0.3.24

assistant-stream@0.3.48

safe-content-frame@0.0.33

@assistant-ui/react@0.15.24

Patch Changes

#8148 b400b75 - fix(react): ignore the Enter or Escape that ends an IME composition, so committing a conversion in Safari no longer sends the message, and cancelling one no longer cancels the run or stops read-aloud (@samdickson22)

#8507 098c140 - chore: update dependencies (@Yonom)

#8684 5b65868 - key message parts by their id when no other part of the same type in the message shares it, so a replaced or reordered part no longer keeps another part's component state (@okisdev)

Updated dependencies [f7eae39, 63233dc, 241b5f1, 5b65868, 6b7df95, 098c140, 351b8cd, 3ea546a, d33ad09, 4290eac]:

@assistant-ui/core@0.3.23

assistant-stream@0.3.47

assistant-cloud@0.2.5

safe-content-frame@0.0.32

@assistant-ui/store@0.3.17

@assistant-ui/tap@0.9.21

Changelog

Sourced from @assistant-ui/react's changelog.

0.15.25

Patch Changes

#8796 fd444e4 - a tool approval can ask several questions at once, or let one question take several answers: display: "questions" with approval.questions, answered through respondToApproval({ answers }) keyed by question id, validated before it reaches onRespondToToolApproval and recorded on approval.answers; the AI SDK converter reads questions and answers from the approval descriptor when a response handler is set, and the cloud format keeps them (@okisdev)

#7212 9f40133 - fix: clean up cancelled and pre-load failed sandbox frame renders (@Kinfe123)

#7189 d2782af - feat: allow visible component action settle delays to be configured (@Kinfe123)

#7155 5484ca4 - feat: support message-scoped converter metadata invalidation (@Kinfe123)

#8798 ec48da2 - a thread can open on its latest page and load older messages on demand: the external store adapter takes hasEarlier and onLoadEarlier, the runtime surfaces them as thread.hasEarlier, thread.isLoadingEarlier and aui.thread.loadEarlier() with one load in flight at a time, ThreadPrimitive.LoadEarlier loads the next page, ThreadPrimitive.Viewport keeps the visible messages in place when it lands above them, and the React Native ThreadPrimitive.MessagesFlatList pages through the runtime when it gets no history prop (@okisdev)

#8760 2e4d6a9 - streaming text, running tool durations, and message stall detection read no wall clock during render, so a cacheComponents prerender no longer fails on them. (@okisdev)

#8794 451a76c - reasoning parts carry an optional timing with their start and end times, typed as the new MessagePartTiming that ToolCallTiming now aliases, so a host can show how long its agent thought; the assistant-stream accumulator stamps it while reasoning streams, joined reasoning parts and the cloud format keep it, and a MessagePrimitive.GroupedParts group reports the span of its timed parts as timing (@okisdev)

#8795 1f77d04 - the composer trigger popover primitives and their adapter, item, category and directive formatter types get stable names; the Unstable_ names stay as deprecated aliases, and the trigger popover hooks stay unstable (@okisdev)

#8799 aecb5eb - a long thread can be virtualized per part instead of per message: createThreadRowsSelector flattens the thread for useAuiState into stable rows (a user message, each top-level part group of an assistant message, a turn end) that keep their identity while tokens stream, and ThreadPrimitive.Row renders one row with only the scopes it needs; a turn-end row carries the turn's start time and, once the turn completes, the latest end its messages record, so a turn footer can show how long the agent worked (@okisdev)

Updated dependencies [c883dc0, fd444e4, 64277e2, 9f40133, 791d240, ed84b12, 2bc1edb, 0284a07, 5484ca4, ec48da2, 46133cd, 3effee5, 451a76c, 16439da, 1f77d04, aecb5eb, 77a98c1]:

@assistant-ui/core@0.3.24

assistant-stream@0.3.48

safe-content-frame@0.0.33

0.15.24

Patch Changes

#8148 b400b75 - fix(react): ignore the Enter or Escape that ends an IME composition, so committing a conversion in Safari no longer sends the message, and cancelling one no longer cancels the run or stops read-aloud (@samdickson22)

#8507 098c140 - chore: update dependencies (@Yonom)

#8684 5b65868 - key message parts by their id when no other part of the same type in the message shares it, so a replaced or reordered part no longer keeps another part's component state (@okisdev)

Updated dependencies [f7eae39, 63233dc, 241b5f1, 5b65868, 6b7df95, 098c140, 351b8cd, 3ea546a, d33ad09, 4290eac]:

@assistant-ui/core@0.3.23

assistant-stream@0.3.47

assistant-cloud@0.2.5

safe-content-frame@0.0.32

@assistant-ui/store@0.3.17

@assistant-ui/tap@0.9.21

0.15.23

Patch Changes

#8082 3104efa - fix: honor user={false}, assistant={false} and system={false} on MessagePrimitive.If, and migrate them to the matching AuiIf inequality (@ShobhitPatra)

#8394 c3a2646 - fix: publish committed WebMCP tool implementations before layout effects (@Kinfe123)

... (truncated)

Commits

dc84061 chore: update versions (#8753)
19709f5 ci: report vitest coverage for changed packages (#8599)
d2782af feat(react): allow action settle delay configuration (#7189)
9f40133 fix(safe-content-frame): clean up pending and failed renders (#7212)
aecb5eb feat: virtualize threads by row with ThreadPrimitive.Row (#8799)
ec48da2 feat: page earlier messages inside a thread (#8798)
fd444e4 feat: let a tool approval ask several questions or take several answers (#8796)
1f77d04 feat: give the composer trigger popover stable names (#8795)
451a76c feat: carry start and end times on reasoning parts (#8794)
77a98c1 fix(core): name seeded messages the same way while the browser hydrates (#8755)
Additional commits viewable in compare view

Updates @assistant-ui/react-markdown from 0.14.17 to 0.14.19

Release notes

Sourced from @assistant-ui/react-markdown's releases.

@assistant-ui/react-markdown@0.14.19

Patch Changes

#8507 098c140 - chore: update dependencies (@Yonom)

Changelog

Sourced from @assistant-ui/react-markdown's changelog.

0.14.19

Patch Changes

#8507 098c140 - chore: update dependencies (@Yonom)

0.14.18

Patch Changes

#8562 b48b05d - preserve currency and math delimiters inside html blocks during preprocessing. (@okisdev)

Commits

274836a chore: update versions (#8687)
098c140 chore: update dependencies (#8507)
3542d60 chore: update versions (#8386)
718ea95 test(react-markdown): run the tests and published types against React 18 (#8625)
b48b05d fix: leave currency and math inside html blocks untouched in preprocess (#8562)
See full diff in compare view

Updates @codemirror/language from 6.12.4 to 6.13.1

Commits

See full diff in compare view

Updates @codemirror/view from 6.43.13 to 6.43.14

Commits

See full diff in compare view

Updates @pierre/diffs from 1.5.1 to 1.5.2

Updates @tanstack/react-query from 5.104.0 to 5.104.1

Release notes

Sourced from @tanstack/react-query's releases.

@tanstack/react-query-devtools@5.104.1

Patch Changes

Updated dependencies [ec060b6]:

@tanstack/query-devtools@5.104.1

@tanstack/react-query@5.104.1

@tanstack/react-query-next-experimental@5.104.1

Patch Changes

Updated dependencies []:

@tanstack/react-query@5.104.1

@tanstack/react-query-persist-client@5.104.1

Patch Changes

Updated dependencies []:

@tanstack/query-persist-client-core@5.104.1

@tanstack/react-query@5.104.1

@tanstack/react-query@5.104.1

Patch Changes

Updated dependencies []:

@tanstack/query-core@5.104.1

Changelog

Sourced from @tanstack/react-query's changelog.

5.104.1

Patch Changes

Updated dependencies []:

@tanstack/query-core@5.104.1

Commits

29859ae ci: Version Packages (#11806)
339e09f chore(*): manage 'react' eslint plugins with pnpm 'catalog' (#11781)
0a57279 test({react,preact,solid,angular}-query/mutationOptions): fix 'mutationOpt1' ...
c51bb62 chore(*): declare '@eslint-react/eslint-plugin' in the react packages and exa...
a914613 chore(*): declare 'eslint-plugin-react-hooks' in the react packages that use ...
d99c84b chore(*): update '@eslint-react/eslint-plugin' to v5 and apply its 'recommend...
fd96529 chore(*): update 'eslint-plugin-react-hooks' to v7 and use its stable 'recomm...
e878990 chore(*): manage 'react' packages with pnpm 'catalog' (#11712)
2e1ad64 chore(*): declare 'npm-run-all2' once in the root 'package.json' like other s...
c1de23a chore(*): manage 'typescript' with pnpm 'catalog' and declare it in each pack...
Additional commits viewable in compare view

Updates @tanstack/react-router from 1.170.40 to 1.170.41

Release notes

Sourced from @tanstack/react-router's releases.

@tanstack/react-router@1.170.41

Patch Changes

#8529 60b8ad1 - Compose only enabled route boundaries instead of rendering inactive wrapper components.

#8568 614bc27 - Update TanStack Store to 0.11.2 to prevent unrelated atom reads inside subscription observers from triggering extra notifications.

#8530 ff66a03 - Consolidate the root match context provider while preserving match context in the root shell.

#8522 863c8a7 - Reuse Link href classification and active/inactive results across location updates while preserving live history href formatting.

Updated dependencies [d521abd]:

@tanstack/router-core@1.171.34

Changelog

Sourced from @tanstack/react-router's changelog.

1.170.41

Patch Changes

#8529 60b8ad1 - Compose only enabled route boundaries instead of rendering inactive wrapper components.

#8568 614bc27 - Update TanStack Store to 0.11.2 to prevent unrelated atom reads inside subscription observers from triggering extra notifications.

#8530 ff66a03 - Consolidate the root match context provider while preserving match context in the root shell.

#8522 863c8a7 - Reuse Link href classification and active/inactive results across location updates while preserving live history href formatting.

Updated dependencies [d521abd]:

@tanstack/router-core@1.171.34

Commits

57e126e ci: Version Packages (#8531)
614bc27 chore(deps): update TanStack Store to 0.11.2 (#8568)
60b8ad1 perf(react-router): omit inactive route wrapper components (#8529)
863c8a7 perf(react-router): reuse link selector results (#8522)
ff66a03 perf(react-router): consolidate root match provider (CodSpeed experiment) (#8...
See full diff in compare view

Updates @tanstack/react-table from 9.2.4 to 9.2.6

Release notes

Sourced from @tanstack/react-table's releases.

@tanstack/react-table@9.2.6

Patch Changes

#6611 b9b007f - Refactor bundled Intent skills into smaller entry points with references loaded for the current task. Keep core feature architecture and shared state directly discoverable, and move individual features, adapter compositions, and detailed migration guidance into references.

Consumers with individual skill permissions or explicit agent mappings must replace retired feature/composition IDs with their owning entry points and refresh Intent mappings. See the Agent Skills guide for the replacement paths.

Updated dependencies [b9b007f]:

@tanstack/table-core@9.2.6

@tanstack/react-table-devtools@9.2.5

Patch Changes

Updated dependencies [e9158e7]:

@tanstack/table-devtools@9.2.5

@tanstack/react-table@9.2.5

Patch Changes

#6609 e9158e7 - Update TanStack Store dependencies to the latest compatible patch releases.

Updated dependencies [e9158e7]:

@tanstack/table-core@9.2.5

Changelog

Sourced from @tanstack/react-table's changelog.

9.2.6

Patch Changes

#6611 b9b007f - Refactor bundled Intent skills into smaller entry points with references loaded for the current task. Keep core feature architecture and shared state directly discoverable, and move individual features, adapter compositions, and detailed migration guidance into references.

Consumers with individual skill permissions or explicit agent mappings must replace retired feature/composition IDs with their owning entry points and refresh Intent mappings. See the Agent Skills guide for the replacement paths.

Updated dependencies [b9b007f]:

@tanstack/table-core@9.2.6

9.2.5

Patch Changes

#6609 e9158e7 - Update TanStack Store dependencies to the latest compatible patch releases.

Updated dependencies [e9158e7]:

@tanstack/table-core@9.2.5

Commits

2df4cf3 ci: Version Packages (#6612)
b9b007f fix(skills): Add progressive disclosure to bundled skills (#6611)
1257a3f ci: Version Packages (#6610)
e9158e7 chore: package upgrades (#6609)
0bdf588 chore: package upgrades (#6592)
See full diff in compare view

Updates better-auth from 1.7.6 to 1.7.7

Release notes

Sourced from better-auth's releases.

v1.7.7

better-auth

Magic Link upgrade: Upgrade servers sharing verification storage together, request new Magic Links, and restart pending OAuth/SAML sign-ins. No database migration is required. See the critical advisory for affected configurations and custom storage changes.

Bug Fixes

Fixed a critical Magic Link account-takeover vulnerability. (#11494)

Fixed ID-token sign-in ignoring the social provider’s disableSignUp setting. (#11491)

Fixed OAuth Proxy accepting sign-in state as a provider profile. (#11494) Upgrade all OAuth Proxy participants together; see the OAuth Proxy upgrade guidance.

Fixed CAPTCHA errors missing the JSON Content-Type header. (#11476)

Fixed the active organization failing to refresh after sign-in when a session hook selects the initial organization. (#11375)

Fixed rate-limit errors missing the JSON Content-Type header. (#11469)

For detailed changes, see CHANGELOG

@better-auth/oauth-provider

Features

Added optional validateRedirectUri validation for trusted deployments with dynamic OAuth redirect URIs. (#8686)

Added verifyOAuthQueryParams to verify signed authorization queries before rendering a custom consent page. (#11402)

For detailed changes, see CHANGELOG

@better-auth/drizzle-adapter

Bug Fixes

Fixed concurrent PostgreSQL requests exceeding database-backed rate limits. (#11331)

For detailed changes, see CHANGELOG

@better-auth/kysely-adapter

Bug Fixes

Fixed consumeOne deleting a record after a concurrent write invalidates its original condition. (#11495)

For detailed changes, see CHANGELOG

Contributors

Thanks to everyone who contributed to this release:

@aryan1306, @bytaesu, @gitmotion, @gustavovalverde, @lennondotw

Full changelog: v1.7.6...v1.7.7

Changelog

Sourced from better-auth's changelog.

1.7.7

Patch Changes

#11476 4186e36 Thanks @bytaesu! - Return CAPTCHA errors with the correct JSON Content-Type header.

#11469 8620aa9 Thanks @aryan1306! - Return rate limit errors with a JSON Content-Type header.

#11491 55cb92e Thanks @bytaesu! - Respect social provider disableSignUp when signing in with an ID token.

#11375 69defbc Thanks @bytaesu! - Refresh the active organization after sign-in when a session hook selects the initial organization.

#11494 ac54bfd Thanks @gustavovalverde! - Isolate OAuth state cookies and each OAuth Proxy payload with purpose-specific encryption keys. The oAuthProxy options and supported configuration remain unchanged.

Upgrade all Better Auth nodes that handle the same cookie-backed OAuth or SAML relay-state flow together. Upgrade every OAuth Proxy participant, including production and preview or development deployments, in the same cutover. OAuth sign-in, account-linking, and cookie-backed SAML sign-in flows started before the upgrade must be restarted. Mixed old and new participants cannot exchange existing state or proxy payloads, and there is no fallback to the previous shared key.

#11494 ac54bfd Thanks @gustavovalverde! - Magic Link verification now accepts only records issued for Magic Link. Magic Link records and database-backed OAuth or SAML state use separate verification identifier prefixes. Links and database-backed sign-ins started before the upgrade cannot complete; request new Magic Links and restart those sign-ins. Upgrade servers sharing verification storage together, and update verification.storeIdentifier.overrides rules for these flows to match the new magic-link: and auth-state: prefixes. The link token, callback state, endpoints, and public option types are unchanged.

Upgrade installed Better Auth adapters, plugins, and integrations released with better-auth alongside it so participating packages use the same release version.

Updated dependencies [35d7cd3, 07bdf7e]:

@better-auth/drizzle-adapter@1.7.7

@better-auth/kysely-adapter@1.7.7

@better-auth/core@1.7.7

@better-auth/memory-adapter@1.7.7

@better-auth/mongo-adapter@1.7.7

@better-auth/prisma-adapter@1.7.7

@better-auth/telemetry@1.7.7

Commits

db02f23 chore: release v1.7.7 (#11413)
ac54bfd fix(auth): isolate verification records and encryption purposes (#11494)
69defbc fix(organization): refresh active organization after email sign-in (#11375)
55cb92e fix(auth): honor social disableSignUp for ID token sign-in (#11491)
4186e36 fix(captcha): return JSON content type for errors (#11476)
8620aa9 fix(rate-limit): set JSON content type on 429 responses (#11469)
See full diff in compare view

Updates lucide-react from 1.49.0 to 1.52.0

Release notes

Sourced from lucide-react's releases.

Version 1.52.0

What's Changed

fix(icons): changed wifi-cog icon by @karsa-mistmere in lucide-icons/lucide#4952

Full Changelog: lucide-icons/lucide@1.51.0...1.52.0

Version 1.51.0

What's Changed

fix(site): persist icon customizer by @karsa-mistmere in lucide-icons/lucide#4944

chore(deps): Upgrade to vite 8 by @ericfennis in lucide-icons/lucide#4950

feat(icons): added rugby-ball icon by @dev-mralph in lucide-icons/lucide#3496

chore(deps): bump the react-deps group across 1 directory with 3 updates by @dependabot[bot] in lucide-icons/lucide#4951

fix(react-native): stop forwarding arbitrary rest props to child shape elements by @cipherprofessor in lucide-icons/lucide#4903

test(lucide-solid): add Vite and SolidStart integration fixtures by @ericfennis in lucide-icons/lucide#4884

feat(icons): add door-closed-cog icon by @ajaxjiang96 in lucide-icons/lucide#4905

feat(icons): add text-align-justify-* icons by @HectorZaGa in lucide-icons/lucide#4942

chore(deps): bump pnpm/action-setup from 6.0.10 to 6.1.0 in the github-actions group across 1 directory by @dependabot[bot] in lucide-icons/lucide#4939

chore(deps): Upgrade to vitest 5 by @ericfennis in lucide-icons/lucide#4953

feat(icons): added wind-arrow-up icon by @jamesgpearce in lucide-icons/lucide#4501

fix(github/actions): move to daily release flow by @karsa-mistmere in lucide-icons/lucide#4911

feat(@lucide/solid): Support for Solid 2.0 RC by @davedbase in lucide-icons/lucide#4751

chore(deps-dev): bump the angular-deps group across 1 directory with 10 updates by @dependabot[bot] in lucide-icons/lucide#4954

chore(deps): bump nuxt from 4.4.8 to 4.5.1 by @dependabot[bot] in lucide-icons/lucide#4949

feat(icons): added armenian-dram icon by @Elawphant in lucide-icons/lucide#4456

feat(icons): add kazakh-tenge icon by @hkayrad in lucide-icons/lucide#4925

New Contributors

@dev-mralph made their first contribution in lucide-icons/lucide#3496

@cipherprofessor made their first contribution in lucide-icons/lucide#4903

@HectorZaGa made their first contribution in lucide-icons/l...
Description has been truncated

Bumps the web-minor-patch group in /web with 20 updates: | Package | From | To | | --- | --- | --- | | [@assistant-ui/react](https://github.com/assistant-ui/assistant-ui/tree/HEAD/packages/react) | `0.15.22` | `0.15.25` | | [@assistant-ui/react-markdown](https://github.com/assistant-ui/assistant-ui/tree/HEAD/packages/react-markdown) | `0.14.17` | `0.14.19` | | [@codemirror/language](https://github.com/codemirror/language) | `6.12.4` | `6.13.1` | | [@codemirror/view](https://github.com/codemirror/view) | `6.43.13` | `6.43.14` | | @pierre/diffs | `1.5.1` | `1.5.2` | | [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.104.0` | `5.104.1` | | [@tanstack/react-router](https://github.com/TanStack/router/tree/HEAD/packages/react-router) | `1.170.40` | `1.170.41` | | [@tanstack/react-table](https://github.com/TanStack/table/tree/HEAD/packages/react-table) | `9.2.4` | `9.2.6` | | [better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth) | `1.7.6` | `1.7.7` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.49.0` | `1.52.0` | | [mermaid](https://github.com/mermaid-js/mermaid) | `12.0.0` | `12.1.0` | | [radix-ui](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/radix-ui) | `1.6.7` | `1.7.0` | | [react-resizable-panels](https://github.com/bvaughn/react-resizable-panels) | `4.14.1` | `4.14.2` | | [shiki](https://github.com/shikijs/shiki/tree/HEAD/packages/shiki) | `4.4.3` | `4.5.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.3` | `26.6.4` | | [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.1.1` | `6.1.2` | | [jsdom](https://github.com/jsdom/jsdom) | `30.1.1` | `30.1.2` | | [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt) | `0.71.0` | `0.72.0` | | [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.86.0` | `1.87.0` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.1` | `8.3.3` | Updates `@assistant-ui/react` from 0.15.22 to 0.15.25 - [Release notes](https://github.com/assistant-ui/assistant-ui/releases) - [Changelog](https://github.com/assistant-ui/assistant-ui/blob/main/packages/react/CHANGELOG.md) - [Commits](https://github.com/assistant-ui/assistant-ui/commits/@assistant-ui/react@0.15.25/packages/react) Updates `@assistant-ui/react-markdown` from 0.14.17 to 0.14.19 - [Release notes](https://github.com/assistant-ui/assistant-ui/releases) - [Changelog](https://github.com/assistant-ui/assistant-ui/blob/main/packages/react-markdown/CHANGELOG.md) - [Commits](https://github.com/assistant-ui/assistant-ui/commits/@assistant-ui/react-markdown@0.14.19/packages/react-markdown) Updates `@codemirror/language` from 6.12.4 to 6.13.1 - [Changelog](https://github.com/codemirror/language/blob/main/CHANGELOG.md) - [Commits](https://github.com/codemirror/language/commits) Updates `@codemirror/view` from 6.43.13 to 6.43.14 - [Changelog](https://github.com/codemirror/view/blob/main/CHANGELOG.md) - [Commits](https://github.com/codemirror/view/commits) Updates `@pierre/diffs` from 1.5.1 to 1.5.2 Updates `@tanstack/react-query` from 5.104.0 to 5.104.1 - [Release notes](https://github.com/TanStack/query/releases) - [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md) - [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.104.1/packages/react-query) Updates `@tanstack/react-router` from 1.170.40 to 1.170.41 - [Release notes](https://github.com/TanStack/router/releases) - [Changelog](https://github.com/TanStack/router/blob/main/packages/react-router/CHANGELOG.md) - [Commits](https://github.com/TanStack/router/commits/@tanstack/react-router@1.170.41/packages/react-router) Updates `@tanstack/react-table` from 9.2.4 to 9.2.6 - [Release notes](https://github.com/TanStack/table/releases) - [Changelog](https://github.com/TanStack/table/blob/main/packages/react-table/CHANGELOG.md) - [Commits](https://github.com/TanStack/table/commits/@tanstack/react-table@9.2.6/packages/react-table) Updates `better-auth` from 1.7.6 to 1.7.7 - [Release notes](https://github.com/better-auth/better-auth/releases) - [Changelog](https://github.com/better-auth/better-auth/blob/main/packages/better-auth/CHANGELOG.md) - [Commits](https://github.com/better-auth/better-auth/commits/v1.7.7/packages/better-auth) Updates `lucide-react` from 1.49.0 to 1.52.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.52.0/packages/lucide-react) Updates `mermaid` from 12.0.0 to 12.1.0 - [Release notes](https://github.com/mermaid-js/mermaid/releases) - [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@12.0.0...mermaid@12.1.0) Updates `radix-ui` from 1.6.7 to 1.7.0 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/radix-ui/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/radix-ui) Updates `react-resizable-panels` from 4.14.1 to 4.14.2 - [Release notes](https://github.com/bvaughn/react-resizable-panels/releases) - [Changelog](https://github.com/bvaughn/react-resizable-panels/blob/main/CHANGELOG.md) - [Commits](bvaughn/react-resizable-panels@4.14.1...4.14.2) Updates `shiki` from 4.4.3 to 4.5.0 - [Release notes](https://github.com/shikijs/shiki/releases) - [Commits](https://github.com/shikijs/shiki/commits/v4.5.0/packages/shiki) Updates `@types/node` from 26.6.3 to 26.6.4 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@vitejs/plugin-react` from 6.1.1 to 6.1.2 - [Release notes](https://github.com/vitejs/vite-plugin-react/releases) - [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.1.2/packages/plugin-react) Updates `jsdom` from 30.1.1 to 30.1.2 - [Release notes](https://github.com/jsdom/jsdom/releases) - [Commits](jsdom/jsdom@v30.1.1...v30.1.2) Updates `oxfmt` from 0.71.0 to 0.72.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.72.0/npm/oxfmt) Updates `oxlint` from 1.86.0 to 1.87.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.87.0/npm/oxlint) Updates `vite` from 8.3.1 to 8.3.3 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.3.3/packages/vite) --- updated-dependencies: - dependency-name: "@assistant-ui/react" dependency-version: 0.15.25 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: web-minor-patch - dependency-name: "@assistant-ui/react-markdown" dependency-version: 0.14.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: web-minor-patch - dependency-name: "@codemirror/language" dependency-version: 6.13.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: web-minor-patch - dependency-name: "@codemirror/view" dependency-version: 6.43.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: web-minor-patch - dependency-name: "@pierre/diffs" dependency-version: 1.5.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: web-minor-patch - dependency-name: "@tanstack/react-query" dependency-version: 5.104.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: web-minor-patch - dependency-name: "@tanstack/react-router" dependency-version: 1.170.41 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: web-minor-patch - dependency-name: "@tanstack/react-table" dependency-version: 9.2.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: web-minor-patch - dependency-name: better-auth dependency-version: 1.7.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: web-minor-patch - dependency-name: lucide-react dependency-version: 1.52.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: web-minor-patch - dependency-name: mermaid dependency-version: 12.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: web-minor-patch - dependency-name: radix-ui dependency-version: 1.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: web-minor-patch - dependency-name: react-resizable-panels dependency-version: 4.14.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: web-minor-patch - dependency-name: shiki dependency-version: 4.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: web-minor-patch - dependency-name: "@types/node" dependency-version: 26.6.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: web-minor-patch - dependency-name: "@vitejs/plugin-react" dependency-version: 6.1.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: web-minor-patch - dependency-name: jsdom dependency-version: 30.1.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: web-minor-patch - dependency-name: oxfmt dependency-version: 0.72.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: web-minor-patch - dependency-name: oxlint dependency-version: 1.87.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: web-minor-patch - dependency-name: vite dependency-version: 8.3.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: web-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions

Auto-approved: all dependency bumps are patch or minor.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 10, 2026

github-actions Bot approved these changes Oct 10, 2026

View reviewed changes

github-actions Bot enabled auto-merge October 10, 2026 17:17

engrams-automerge Bot added this pull request to the merge queue Oct 10, 2026

Merged via the queue into main with commit 38c6c90 Oct 10, 2026
29 checks passed

engrams-automerge Bot deleted the dependabot/npm_and_yarn/web/web-minor-patch-fcd722ea3e branch October 10, 2026 17:33

Navigation Menu

Repository navigation

chore(web)(deps): bump the web-minor-patch group in /web with 20 updates - #1621

chore(web)(deps): bump the web-minor-patch group in /web with 20 updates#1621
engrams-automerge[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/web/web-minor-patch-fcd722ea3e

dependabot Bot commented on behalf of github Oct 10, 2026

Uh oh!

github-actions Bot left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 10, 2026

@​assistant-ui/react@​0.15.25

Patch Changes

@​assistant-ui/react@​0.15.24

Patch Changes

0.15.25

Patch Changes

0.15.24

Patch Changes

0.15.23

Patch Changes

@​assistant-ui/react-markdown@​0.14.19

Patch Changes

0.14.19

Patch Changes

0.14.18

Patch Changes

@​tanstack/react-query-devtools@​5.104.1

Patch Changes

@​tanstack/react-query-next-experimental@​5.104.1

Patch Changes

@​tanstack/react-query-persist-client@​5.104.1

Patch Changes

@​tanstack/react-query@​5.104.1

Patch Changes

5.104.1

Patch Changes

@​tanstack/react-router@​1.170.41

Patch Changes

1.170.41

Patch Changes

@​tanstack/react-table@​9.2.6

Patch Changes

@​tanstack/react-table-devtools@​9.2.5

Patch Changes

@​tanstack/react-table@​9.2.5

Patch Changes

9.2.6

Patch Changes

9.2.5

Patch Changes

v1.7.7

better-auth

Bug Fixes

@better-auth/oauth-provider

Features

@better-auth/drizzle-adapter

Bug Fixes

@better-auth/kysely-adapter

Bug Fixes

Contributors

1.7.7

Patch Changes

Version 1.52.0

What's Changed

Version 1.51.0

What's Changed

New Contributors

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`@assistant-ui/react@0`.15.25

`@assistant-ui/react@0`.15.24

`@assistant-ui/react-markdown@0`.14.19

`@tanstack/react-query-devtools@5`.104.1

`@tanstack/react-query-next-experimental@5`.104.1

`@tanstack/react-query-persist-client@5`.104.1

`@tanstack/react-query@5`.104.1

`@tanstack/react-router@1`.170.41

`@tanstack/react-table@9`.2.6

`@tanstack/react-table-devtools@9`.2.5

`@tanstack/react-table@9`.2.5

`better-auth`

`@better-auth/oauth-provider`

`@better-auth/drizzle-adapter`

`@better-auth/kysely-adapter`