Skip to content

chore(deps): bump the npm-major group across 1 directory with 27 updates - #6055

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/npm-major-7c92e53dfa
Open

chore(deps): bump the npm-major group across 1 directory with 27 updates#6055
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/npm-major-7c92e53dfa

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 4, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-major group with 27 updates in the / directory:

Package From To
pkg-pr-new 0.0.75 0.0.80
verdaccio 6.8.0 6.9.0
undici 8.8.0 8.9.0
smol-toml 1.7.0 1.7.1
@supabase/supabase-js 2.110.7 2.110.9
jose 6.2.3 6.2.4
@anthropic-ai/claude-agent-sdk 0.3.216 0.3.220
@anthropic-ai/sdk 0.112.4 0.115.0
@modelcontextprotocol/sdk 1.29.0 1.30.0
posthog-node 5.46.0 5.46.1
react 19.2.7 19.2.8
fumadocs-core 16.11.5 16.13.0
fumadocs-ui 16.11.5 16.13.0
next 16.3.0-preview.6 16.3.0-preview.9
react-dom 19.2.7 19.2.8
@types/node 26.1.1 26.1.2
@effect/atom-react 4.0.0-beta.97 4.0.0-beta.102
@effect/platform-bun 4.0.0-beta.97 4.0.0-beta.102
@effect/platform-node 4.0.0-beta.97 4.0.0-beta.102
@effect/sql-pg 4.0.0-beta.97 4.0.0-beta.102
@effect/vitest 4.0.0-beta.97 4.0.0-beta.102
effect 4.0.0-beta.97 4.0.0-beta.102
knip 6.27.0 6.29.0
oxfmt 0.59.0 0.61.0
oxlint-tsgolint 0.25.0 7.0.2001
oxlint 1.74.0 1.76.0
tldts 6.1.86 7.4.9

Updates pkg-pr-new from 0.0.75 to 0.0.80

Commits

Updates verdaccio from 6.8.0 to 6.9.0

Release notes

Sourced from verdaccio's releases.

v6.9.0

Minor Changes

  • b67a665: feat: require Node.js 22 as the minimum supported version

    Node.js 22 or higher is now required (previously the CLI still accepted Node.js 18, while engines already demanded 20). The CLI refuses to start on older runtimes and engines is set to >=22; Node.js 24 is the recommended version. CI, e2e, and smoke test matrices now cover Node.js 22, 24, and 26. Registry operators on Node.js 18 or 20 must upgrade the runtime before taking this release.

  • b67a665: feat: dual CJS + ESM build with exports field, migrate build from babel to vite 8

    Native ESM support. The package now ships both CommonJS (build/**/*.js) and ESM (build/**/*.mjs) outputs and declares an exports field, so import { runServer } from 'verdaccio' resolves a real ES module instead of the CommonJS interop. require('verdaccio') keeps working exactly as before. The verdaccio CLI now runs on the ESM build, which means ESM-only dependencies can be loaded at runtime on every supported Node.js version.

    Build toolchain. Babel has been replaced by vite 8 (rolldown) for transpilation; type declarations are still emitted by TypeScript. This is not observable in the registry behavior, but local workflows changed: yarn start and the debug/ bootstrap scripts now use tsx instead of babel-node/@babel/register.

Patch Changes

  • b67a665: fix(deps): update @​verdaccio/hooks to 8.1.1

    Restores publish/unpublish webhook notifications when running on the ESM build: hooks 8.1.0 could not send them (the notify client failed silently on every call). The new version replaces the frozen got-cjs fork with got 15 loaded in a way that works from both the ESM and CommonJS builds, and reports delivery failures based on the real HTTP response status.

  • b67a665: fix(deps): update @verdaccio/* packages to the 2026-07-25 release batch

    Updates all @verdaccio/* and verdaccio-* dependencies (config 8.1.4, core 8.1.4, auth 8.0.6, middleware 8.0.7, htpasswd/audit 13.0.5, among others). Notably @verdaccio/config 8.1.4 moves to js-yaml 4.3.0, resolving the high-severity advisory GHSA-52cp-r559-cp3m (YAML merge-key chains forcing quadratic CPU consumption).

  • 2969ec8: fix: migrate uplink/storage URL parsing to the WHATWG URL API

    Removes the [DEP0169] DeprecationWarning: url.parse() printed at startup on Node.js 22+. The proxy and local-storage layers no longer use the legacy url.parse() / url.format() helpers; uplink URL validation, distfile filename extraction, and the remote-protocol tarball rewrite now go through the standardized URL API. Behavior is unchanged for the absolute HTTP(S) URLs used in practice — the default HTTPS port :443

... (truncated)

Changelog

Sourced from verdaccio's changelog.

6.9.0

Minor Changes

  • b67a665: feat: require Node.js 22 as the minimum supported version

    Node.js 22 or higher is now required (previously the CLI still accepted Node.js 18, while engines already demanded 20). The CLI refuses to start on older runtimes and engines is set to >=22; Node.js 24 is the recommended version. CI, e2e, and smoke test matrices now cover Node.js 22, 24, and 26. Registry operators on Node.js 18 or 20 must upgrade the runtime before taking this release.

  • b67a665: feat: dual CJS + ESM build with exports field, migrate build from babel to vite 8

    Native ESM support. The package now ships both CommonJS (build/**/*.js) and ESM (build/**/*.mjs) outputs and declares an exports field, so import { runServer } from 'verdaccio' resolves a real ES module instead of the CommonJS interop. require('verdaccio') keeps working exactly as before. The verdaccio CLI now runs on the ESM build, which means ESM-only dependencies can be loaded at runtime on every supported Node.js version.

    Build toolchain. Babel has been replaced by vite 8 (rolldown) for transpilation; type declarations are still emitted by TypeScript. This is not observable in the registry behavior, but local workflows changed: yarn start and the debug/ bootstrap scripts now use tsx instead of babel-node/@babel/register.

Patch Changes

  • b67a665: fix(deps): update @​verdaccio/hooks to 8.1.1

    Restores publish/unpublish webhook notifications when running on the ESM build: hooks 8.1.0 could not send them (the notify client failed silently on every call). The new version replaces the frozen got-cjs fork with got 15 loaded in a way that works from both the ESM and CommonJS builds, and reports delivery failures based on the real HTTP response status.

  • b67a665: fix(deps): update @verdaccio/* packages to the 2026-07-25 release batch

    Updates all @verdaccio/* and verdaccio-* dependencies (config 8.1.4, core 8.1.4, auth 8.0.6, middleware 8.0.7, htpasswd/audit 13.0.5, among others). Notably @verdaccio/config 8.1.4 moves to js-yaml 4.3.0, resolving the high-severity advisory GHSA-52cp-r559-cp3m (YAML merge-key chains forcing quadratic CPU consumption).

  • 2969ec8: fix: migrate uplink/storage URL parsing to the WHATWG URL API

    Removes the [DEP0169] DeprecationWarning: url.parse() printed at startup on Node.js 22+. The proxy and local-storage layers no longer use the legacy url.parse() / url.format() helpers; uplink URL validation, distfile filename extraction, and the remote-protocol tarball rewrite now go through the standardized URL API. Behavior is

... (truncated)

Commits

Updates undici from 8.8.0 to 8.9.0

Release notes

Sourced from undici's releases.

v8.9.0

⚠️ Security fixes

High severity

  • GHSA-4cwx-7wf7-3272: malformed qualified private Cache-Control directives could cause cross-user information disclosure in shared caches or a parse-time crash. The cache parser now treats empty qualified directives conservatively and safely handles mixed qualified and unqualified directives. Fixed by 4fe5bc5f with regression coverage in 9f09b49a.

Medium severity

  • GHSA-m8rv-5g2x-5cg5: a malicious type property on a duck-typed blob-like HTTP/1.1 request body could inject CRLF sequences into the generated content-type header. Undici now coerces and validates the value before adding it to the request. Fixed by 7d3cf924.
  • GHSA-jr45-8vmc-qm54: optional whitespace around = in qualified no-cache and private directives could bypass shared-cache restrictions and disclose authenticated data across users. Cache-Control parsing now normalizes these forms and applies conservative cache decisions. Fixed by c601fff1.
  • GHSA-8xcm-r25x-g524: the retry interceptor could expose a stale Content-Length after resuming a partial response, potentially causing downstream response desynchronization, hangs, or corruption. Undici now rejects partial responses whose Content-Length is inconsistent with Content-Range. Fixed by e11a68ed, with corrected fixtures in 2b3f7493.
  • GHSA-v3r7-h72x-cjcm: unsanitized domain and unparsed values passed to setCookie() could inject cookie attributes. Undici now validates cookie domains, paths, and unparsed attributes more strictly. Fixed by 10d93fc3.

Additional hardening

Undici now validates non-string header values after coercion, including array elements, preventing crafted toString() or Symbol.toPrimitive implementations from introducing CRLF sequences. This defense-in-depth change was made in 354a151f.

What's Changed

New Contributors

Full Changelog: nodejs/undici@v8.8.0...v8.9.0

Commits
  • 21a8e1e Bumped v8.9.0 (#5589)
  • 7d3cf92 fix: validate blob body content type
  • c601fff fix(cache): harden cache directive parsing
  • 2b3f749 test(retry): correct broken content-range fixtures in retry-handler.js
  • e11a68e fix(retry): reject partial content length mismatch
  • 9f09b49 test: cover crash on mixed unqualified and qualified private cache directives
  • 4fe5bc5 fix: handle empty qualified private cache directive
  • 10d93fc fix: harden cookie domain, path, and unparsed attribute validation
  • a17e301 Ignore auto-generated .npmrc on Windows (#5583)
  • a0922b0 fix: handle frozen globalThis in setGlobalDispatcher (#5574)
  • Additional commits viewable in compare view

Updates smol-toml from 1.7.0 to 1.7.1

Release notes

Sourced from smol-toml's releases.

v1.7.1

This release includes flagging internal functions as @internal to strip them from the emitted type declarations.

Full Changelog: squirrelchat/smol-toml@v1.7.0...v1.7.1

Commits

Updates @supabase/supabase-js from 2.110.7 to 2.110.9

Release notes

Sourced from @​supabase/supabase-js's releases.

v2.110.9

2.110.9 (2026-07-27)

🩹 Fixes

  • auth: downgrade stale refresh token console noise (#2559)
  • realtime: preserve presence refs (#2566)
  • repo: override sharp to >=0.35.0 to clear libvips advisory (#2548)
  • repo: populate symbols in sdk-compliance so capabilities are verifiable (#2547)
  • repo: bump postcss, babel, next to clear audit advisories (#2561)

❤️ Thank You

v2.110.9-canary.3

2.110.9-canary.3 (2026-07-27)

🩹 Fixes

  • realtime: preserve presence refs (#2566)

❤️ Thank You

v2.110.9-canary.2

2.110.9-canary.2 (2026-07-27)

🩹 Fixes

  • auth: downgrade stale refresh token console noise (#2559)
  • repo: bump postcss, babel, next to clear audit advisories (#2561)

❤️ Thank You

v2.110.9-canary.1

2.110.9-canary.1 (2026-07-23)

This was a version bump only, there were no code changes.

v2.110.9-canary.0

2.110.9-canary.0 (2026-07-22)

🩹 Fixes

... (truncated)

Changelog

Sourced from @​supabase/supabase-js's changelog.

2.110.9 (2026-07-27)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.110.8 (2026-07-21)

🩹 Fixes

  • supabase: skip Node warning in Deno (#2541)

❤️ Thank You

Commits
  • fc2e61e chore(repo): bump postcss override and fix playwright 1.62 tsconfig failure (...
  • 22050de chore(release): version 2.110.8 changelogs (#2546)
  • 01dbb53 fix(supabase): skip Node warning in Deno (#2541)
  • 150b00c chore(release): version 2.110.7 changelogs (#2533)
  • See full diff in compare view

Updates jose from 6.2.3 to 6.2.4

Release notes

Sourced from jose's releases.

v6.2.4

Documentation

  • update README.md and SECURITY.md to reflect passed EOL dates (2a84032)

Refactor

  • normalize JWK export members from runtime quirks (386a3eb)
Changelog

Sourced from jose's changelog.

6.2.4 (2026-07-21)

Documentation

  • update README.md and SECURITY.md to reflect passed EOL dates (2a84032)

Refactor

  • normalize JWK export members from runtime quirks (386a3eb)
Commits
  • 3ced677 chore(release): 6.2.4
  • 9725456 chore: bump packages
  • 386a3eb refactor: normalize JWK export members from runtime quirks
  • f86dbef chore: bump packages
  • 990c670 test: update electron expectations
  • 0bbe2d0 chore: fix broken links for undici
  • 294c40c test: update electron expectations
  • a378068 chore(deps): bump the actions group with 2 updates
  • b299ce2 chore(deps-dev): bump undici
  • f261d84 chore(deps-dev): bump tar in the npm_and_yarn group across 1 directory
  • Additional commits viewable in compare view

Updates @anthropic-ai/claude-agent-sdk from 0.3.216 to 0.3.220

Release notes

Sourced from @​anthropic-ai/claude-agent-sdk's releases.

v0.3.220

What's changed

  • Updated to parity with Claude Code v2.1.220

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.220
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.220
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.220
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.220

v0.3.219

What's changed

  • Added opt-in cancel_queued to the interrupt control request (capability interrupt_cancel_queued_v1): cancels queued and pending-dispatch messages alongside the abort
  • Added fast_mode_disabled_reason to result and init messages so SDK hosts can explain why fast mode is off
  • Added DirectoryAdded lifecycle hook event to the control protocol, fired when a new working directory is registered mid-session
  • Fixed the initialize response reporting fast_mode_state from the spawn-time model after a model switch
  • Added sandbox.network.strictAllowlist to SDK settings types for deterministically denying non-allowlisted hosts in sandboxed commands
  • Added workflowSizeGuideline to SDK settings types for setting the advisory dynamic-workflow size guideline

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.219
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.219
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.219
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.219

v0.3.218

What's changed

  • SkillToolOutput now reports background: true when a forked skill was dispatched as a detached background agent
  • Fixed the result event's api_error_status reporting null for rate-limit and overloaded errors delivered mid-stream; it now reports 429/529
  • Added canonicalModel and provider to each modelUsage entry in result messages so downstream billing can look up the correct rate table for costUSD

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.218
</tr></table>

... (truncated)

Changelog

Sourced from @​anthropic-ai/claude-agent-sdk's changelog.

0.3.220

  • Updated to parity with Claude Code v2.1.220

0.3.219

  • Added opt-in cancel_queued to the interrupt control request (capability interrupt_cancel_queued_v1): cancels queued and pending-dispatch messages alongside the abort
  • Added fast_mode_disabled_reason to result and init messages so SDK hosts can explain why fast mode is off
  • Added DirectoryAdded lifecycle hook event to the control protocol, fired when a new working directory is registered mid-session
  • Fixed the initialize response reporting fast_mode_state from the spawn-time model after a model switch
  • Added sandbox.network.strictAllowlist to SDK settings types for deterministically denying non-allowlisted hosts in sandboxed commands
  • Added workflowSizeGuideline to SDK settings types for setting the advisory dynamic-workflow size guideline

0.3.218

  • SkillToolOutput now reports background: true when a forked skill was dispatched as a detached background agent
  • Fixed the result event's api_error_status reporting null for rate-limit and overloaded errors delivered mid-stream; it now reports 429/529
  • Added canonicalModel and provider to each modelUsage entry in result messages so downstream billing can look up the correct rate table for costUSD

0.3.217

  • Changed subagents to no longer spawn nested subagents by default (depth cap lowered from 5 to 1); set CLAUDE_CODE_MAX_SUBAGENT_SPAWN_DEPTH to allow deeper nesting
  • Added a cap on concurrently-running subagents (default 20, override with CLAUDE_CODE_MAX_CONCURRENT_SUBAGENTS)
  • Fixed Remote Control sessions not re-sending pending permission prompts to clients that connect after the prompt appeared
Commits

Updates @anthropic-ai/sdk from 0.112.4 to 0.115.0

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk: v0.115.0

0.115.0 (2026-07-24)

Full Changelog: sdk-v0.114.0...sdk-v0.115.0

Features

  • api: add claude-opus-5 model (cdd3606)
  • api: add tool addition/removal blocks and tool_change events (cdd3606)
  • api: expand client-side fallback credit token types and add server-side fallbacks default option (cdd3606)

Bug Fixes

  • client: release abort listeners when requests settle (#1129) (b85e902)

sdk: v0.114.0

0.114.0 (2026-07-23)

Full Changelog: sdk-v0.113.0...sdk-v0.114.0

Features

  • api: add new stop reason 'model_context_window_exceeded' (1ec71c1)

sdk: v0.113.0

0.113.0 (2026-07-22)

Full Changelog: sdk-v0.112.5...sdk-v0.113.0

Features

  • api: add support for Managed Agents model effort, initial session events, and threads delta streaming (83fef1e)

sdk: v0.112.5

0.112.5 (2026-07-21)

Full Changelog: sdk-v0.112.4...sdk-v0.112.5

Chores

  • api: add support for new refusal category (479efe8)
  • internal: codegen related update (830fb74)
Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.115.0 (2026-07-24)

Full Changelog: sdk-v0.114.0...sdk-v0.115.0

Features

  • api: add claude-opus-5 model (cdd3606)
  • api: add tool addition/removal blocks and tool_change events (cdd3606)
  • api: expand client-side fallback credit token types and add server-side fallbacks default option (cdd3606)

Bug Fixes

  • client: release abort listeners when requests settle (#1129) (b85e902)

0.114.0 (2026-07-23)

Full Changelog: sdk-v0.113.0...sdk-v0.114.0

Features

  • api: add new stop reason 'model_context_window_exceeded' (1ec71c1)

0.113.0 (2026-07-22)

Full Changelog: sdk-v0.112.5...sdk-v0.113.0

Features

  • api: add support for Managed Agents model effort, initial session events, and threads delta streaming (83fef1e)

0.112.5 (2026-07-21)

Full Changelog: sdk-v0.112.4...sdk-v0.112.5

Chores

  • api: add support for new refusal category (479efe8)
  • internal: codegen related update (830fb74)
Commits
  • 3b45cd3 chore: release main
  • f298e9a feat(api): add claude-opus-5 model
  • ce8e54b fix(client): release abort listeners when requests settle (#1129)
  • 2d314b4 chore: release main
  • 3d051df feat(api): add new stop reason 'model_context_window_exceeded'
  • 4414d47 chore: release main
  • 1ec5566 feat(api): add support for Managed Agents model effort, initial session event...
  • c58a55b chore: release main
  • 2fb7da5 chore(api): add support for new refusal category
  • d6ffc3c chore(internal): codegen related update
  • See full diff in compare view

Updates @modelcontextprotocol/sdk from 1.29.0 to 1.30.0

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

1.30.0

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@v1.29.0...1.30.0

Commits
  • 2d889f2 chore: bump version to 1.30.0 (#2563)
  • e3f3daa Fix SSE keep-alive timer lifecycle in Streamable HTTP server transport (v1.x)...
  • bb5a718 fix(deps): widen @​hono/node-server past GHSA-frvp-7c67-39w9 (#2549)
  • 1dad263 fix: send SSE keep-alive comment frames from Streamable HTTP server transport...
  • 69749aa Validate Content-Type by parsed media type instead of substring match (v1.x) ...
  • 369513d fix: support Zod 3.25 method literals (#2368)
  • e7ee57c v1 stdio buffer limit (#2239)
  • c36e1ef Add end-to-end test suite (#2167)
  • bf1e022 chore(ci): switch publish to OIDC trusted publishing (#1839)
  • 9edbab7 fix(server): prioritize zod issues and format them (#1503)
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​modelcontextprotocol/sdk since your current version.


Updates posthog-node from 5.46.0 to 5.46.1

Release notes

Sourced from posthog-node's releases.

posthog-node@5.46.1

5.46.1

Patch Changes

  • #4234 6c8fde0 Thanks @​hpouillot! - Normalize V8 Promise combinator stack frames so input indexes are not treated as source filenames. (2026-07-23)
  • Updated dependencies [6c8fde0]:
    • @​posthog/core@​1.45.1
Changelog

Sourced from posthog-node's changelog.

5.46.1

Patch Changes

  • #4234 6c8fde0 Thanks @​hpouillot! - Normalize V8 Promise combinator stack frames so input indexes are not treated as source filenames. (2026-07-23)
  • Updated dependencies [6c8fde0]:
    • @​posthog/core@​1.45.1
Commits

Updates react from 19.2.7 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

Commits

Updates fumadocs-core from 16.11.5 to 16.13.0

Release notes

Sourced from fumadocs-core's releases.

fumadocs@16.13.0

  • @​fumadocs/base-ui@​16.13.0
  • fumadocs-core@16.13.0
  • fumadocs-ui@16.13.0

Add hotkey for toggling light/dark mode

Press D to toggle between light and dark mode. It is ignored while typing in an editable element or when a dialog (e.g. search) is opened.

Customise it with the theme.hotKey option of <RootProvider />, or pass false to disable.

Respect quality values in isMarkdownPreferred

isMarkdownPreferred() previously returned true whenever a Markdown media type appeared anywhere in Accept, ignoring how the client ranked it. A request for Accept: text/html;q=0.9, text/markdown;q=0.1 was served Markdown even though it clearly preferred HTML.

It now compares the client's highest quality value for a Markdown type against its highest value for HTML, and only prefers Markdown when Markdown ranks at least as high. Wildcards (*/*, text/*) count towards HTML, so Accept: */* keeps receiving HTML.

A tie still prefers Markdown, so agents sending Accept: text/html,text/markdown,text/plain,*/*;q=0.5 are unaffected.

The negotiation examples and templates now also set Vary: Accept on the negotiated Markdown response, so shared caches key on the header the representation was selected by.

fumadocs@16.12.1

  • @​fumadocs/base-ui@​16.12.1
  • fumadocs-core@16.12.1
  • fumadocs-ui@16.12.1

Fix bugs in Flux layout

Obsidian content source v1

Render Obsidian vaults directly through static or dynamic Fumadocs sources, with lazy in-memory compilation and local content hot reload. Remove the old generated-file and remark-plugin integrations.

Resolve URL-encoded relative file links against their decoded source paths.

fumadocs@16.12.0

  • @​fumadocs/base-ui@​16.12.0
  • fumadocs-core@16.12.0
  • fumadocs-ui@16.12.0

Fix invalid list semantics in Home layout navbar

NavigationMenu.List in the Home layout header defaults to a <ul>, but its direct children (nav title link, link groups, control clusters) are not <li> elements, which is an accessibility violation (axe list, serious) on every page using HomeLayout. Render it as a <div> instead — the same intent as the Radix UI variant, which already renders its list as a non-<ul> element via asChild.

Introduce Glass Layout

... (truncated)

Commits
  • b939cc7 Version Packages (#3439)
  • 5929a5c fix(core): better negotation for Markdown
  • 3085a02 fix(ui): registry build error
  • ef27805 feat(notion): support notion content source
  • 6cbfe21 feat(ui): shortcut for theme toggle
  • 417caa5 feat(obsidian): css preset
  • ff32724 Merge pull request #3435 from fuma-nama/tegami/version-packages
  • 6d7ba92 fix react router
  • 31435c9 Merge pull request #3432 from fuma-nama/tegami/version-packages
  • e7de9a4 fix(obsidian): fix bugs for v1
  • Additional commits viewable in compare view

Updates fumadocs-ui from 16.11.5 to 16.13.0

Release notes

Sourced from fumadocs-ui's releases.

fumadocs@16.13.0

  • @​fumadocs/base-ui@​16.13.0
  • fumadocs-core@16.13.0
  • fumadocs-ui@16.13.0

Add hotkey for toggling light/dark mode

Press D to toggle between light and dark mode. It is ignored while typing in an editable element or when a dialog (e.g. search) is opened.

Customise it with the theme.hotKey option of <RootProvider />, or pass false to disable.

Respect quality values in isMarkdownPreferred

isMarkdownPreferred() previously returned true whenever a Markdown media type appeared anywhere in Accept, ignoring how the client ranked it. A request for Accept: text/html;q=0.9, text/markdown;q=0.1 was served Markdown even though it clearly preferred HTML.

It now compares the client's highest quality value for a Markdown type against its highest value for HTML, and only prefers Markdown when Markdown ranks at least as high. Wildcards (*/*, text/*) count towards HTML, so Accept: */* keeps receiving HTML.

A tie still prefers Markdown, so agents sending Accept: text/html,text/markdown,text/plain,*/*;q=0.5 are unaffected.

The negotiation examples and templates now also set Vary: Accept on the negotiated Markdown response, so shared caches key on the header the representation was selected by.

fumadocs@16.12.1

  • @​fumadocs/base-ui@​16.12.1
  • fumadocs-core@16.12.1
  • fumadocs-ui@16.12.1

Fix bugs in Flux layout

Obsidian content source v1

Render Obsidian vaults directly through static or dynamic Fumadocs sources, with lazy in-memory compilation and local content hot reload. Remove the old generated-file and remark-plugin integrations.

Resolve URL-encoded relative file links against their decoded source paths.

fumadocs@16.12.0

  • @​fumadocs/base-ui@​16.12.0
  • fumadocs-core@16.12.0
  • fumadocs-ui@16.12.0

Fix invalid list semantics in Home layout navbar

NavigationMenu.List in the Home layout header defaults to a <ul>, but its direct children (nav title link, link groups, control clusters) are not <li> elements, which is an accessibility violation (axe list, serious) on every page using HomeLayout. Render it as a <div> instead — the same intent as the Radix UI variant, which already renders its list as a non-<ul> element via asChild.

Introduce Glass Layout

... (truncated)

Commits
  • b939cc7 Version Packages (#3439)
  • 5929a5c fix(core): better negotation for Markdown
  • 3085a02 fix(ui): registry build error
  • ef27805 feat(notion): support notion content source
  • 6cbfe21 feat(ui): shortcut for theme toggle
  • 417caa5 feat(obsidian): css preset
  • ff32724 Merge pull request #3435 from fuma-nama/tegami/version-packages
  • 6d7ba92 fix react router
  • 31435c9 Merge pull request #3432 from fuma-nama/tegami/version-packages
  • e7de9a4 fix(obsidian): fix bugs for v1
  • Additional commits viewable in compare view

Updates next from 16.3.0-preview.6 to 16.3.0-preview.9

Release notes

Sourced from next's releases.

v16.3.0-preview.9

Misc Changes

  • [Bench] Add client-trace attribution pass and document metrics to render-pipeline: #95828
  • Turbopack: Split up turbo-tasks-fs/src/lib.rs into smaller modules: #96030
  • Turbopack: Use Arc

@dependabot
chore(deps): bump the npm-major group across 1 directory with 27 updates
a59f279 
Bumps the npm-major group with 27 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [pkg-pr-new](https://github.com/stackblitz-labs/pkg.pr.new/tree/HEAD/packages/cli) | `0.0.75` | `0.0.80` |
| [verdaccio](https://github.com/verdaccio/verdaccio) | `6.8.0` | `6.9.0` |
| [undici](https://github.com/nodejs/undici) | `8.8.0` | `8.9.0` |
| [smol-toml](https://github.com/squirrelchat/smol-toml) | `1.7.0` | `1.7.1` |
| [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js) | `2.110.7` | `2.110.9` |
| [jose](https://github.com/panva/jose) | `6.2.3` | `6.2.4` |
| [@anthropic-ai/claude-agent-sdk](https://github.com/anthropics/claude-agent-sdk-typescript) | `0.3.216` | `0.3.220` |
| [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.112.4` | `0.115.0` |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.29.0` | `1.30.0` |
| [posthog-node](https://github.com/PostHog/posthog-js/tree/HEAD/packages/node) | `5.46.0` | `5.46.1` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.2.8` |
| [fumadocs-core](https://github.com/fuma-nama/fumadocs) | `16.11.5` | `16.13.0` |
| [fumadocs-ui](https://github.com/fuma-nama/fumadocs) | `16.11.5` | `16.13.0` |
| [next](https://github.com/vercel/next.js) | `16.3.0-preview.6` | `16.3.0-preview.9` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.2.8` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.1.1` | `26.1.2` |
| [@effect/atom-react](https://github.com/Effect-TS/effect/tree/HEAD/packages/atom/react) | `4.0.0-beta.97` | `4.0.0-beta.102` |
| [@effect/platform-bun](https://github.com/Effect-TS/effect/tree/HEAD/packages/platform-bun) | `4.0.0-beta.97` | `4.0.0-beta.102` |
| [@effect/platform-node](https://github.com/Effect-TS/effect/tree/HEAD/packages/platform-node) | `4.0.0-beta.97` | `4.0.0-beta.102` |
| [@effect/sql-pg](https://github.com/Effect-TS/effect/tree/HEAD/packages/sql-pg) | `4.0.0-beta.97` | `4.0.0-beta.102` |
| [@effect/vitest](https://github.com/Effect-TS/effect/tree/HEAD/packages/vitest) | `4.0.0-beta.97` | `4.0.0-beta.102` |
| [effect](https://github.com/Effect-TS/effect/tree/HEAD/packages/effect) | `4.0.0-beta.97` | `4.0.0-beta.102` |
| [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) | `6.27.0` | `6.29.0` |
| [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt) | `0.59.0` | `0.61.0` |
| [oxlint-tsgolint](https://github.com/oxc-project/tsgolint) | `0.25.0` | `7.0.2001` |
| [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.74.0` | `1.76.0` |
| [tldts](https://github.com/remusao/tldts) | `6.1.86` | `7.4.9` |



Updates `pkg-pr-new` from 0.0.75 to 0.0.80
- [Commits](https://github.com/stackblitz-labs/pkg.pr.new/commits/v0.0.80/packages/cli)

Updates `verdaccio` from 6.8.0 to 6.9.0
- [Release notes](https://github.com/verdaccio/verdaccio/releases)
- [Changelog](https://github.com/verdaccio/verdaccio/blob/v6.9.0/CHANGELOG.md)
- [Commits](verdaccio/verdaccio@v6.8.0...v6.9.0)

Updates `undici` from 8.8.0 to 8.9.0
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v8.8.0...v8.9.0)

Updates `smol-toml` from 1.7.0 to 1.7.1
- [Release notes](https://github.com/squirrelchat/smol-toml/releases)
- [Commits](squirrelchat/smol-toml@v1.7.0...v1.7.1)

Updates `@supabase/supabase-js` from 2.110.7 to 2.110.9
- [Release notes](https://github.com/supabase/supabase-js/releases)
- [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md)
- [Commits](https://github.com/supabase/supabase-js/commits/v2.110.9/packages/core/supabase-js)

Updates `jose` from 6.2.3 to 6.2.4
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](panva/jose@v6.2.3...v6.2.4)

Updates `@anthropic-ai/claude-agent-sdk` from 0.3.216 to 0.3.220
- [Release notes](https://github.com/anthropics/claude-agent-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/claude-agent-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/claude-agent-sdk-typescript@v0.3.216...v0.3.220)

Updates `@anthropic-ai/sdk` from 0.112.4 to 0.115.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.112.4...sdk-v0.115.0)

Updates `@modelcontextprotocol/sdk` from 1.29.0 to 1.30.0
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@v1.29.0...1.30.0)

Updates `posthog-node` from 5.46.0 to 5.46.1
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/packages/node/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/commits/posthog-node@5.46.1/packages/node)

Updates `react` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react)

Updates `fumadocs-core` from 16.11.5 to 16.13.0
- [Release notes](https://github.com/fuma-nama/fumadocs/releases)
- [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs@16.11.5...fumadocs@16.13.0)

Updates `fumadocs-ui` from 16.11.5 to 16.13.0
- [Release notes](https://github.com/fuma-nama/fumadocs/releases)
- [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs@16.11.5...fumadocs@16.13.0)

Updates `next` from 16.3.0-preview.6 to 16.3.0-preview.9
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.3.0-preview.6...v16.3.0-preview.9)

Updates `react-dom` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom)

Updates `@types/node` from 26.1.1 to 26.1.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@effect/atom-react` from 4.0.0-beta.97 to 4.0.0-beta.102
- [Release notes](https://github.com/Effect-TS/effect/releases)
- [Changelog](https://github.com/Effect-TS/effect/blob/main/packages/atom/react/CHANGELOG.md)
- [Commits](https://github.com/Effect-TS/effect/commits/@effect/atom-react@4.0.0-beta.102/packages/atom/react)

Updates `@effect/platform-bun` from 4.0.0-beta.97 to 4.0.0-beta.102
- [Release notes](https://github.com/Effect-TS/effect/releases)
- [Changelog](https://github.com/Effect-TS/effect/blob/main/packages/platform-bun/CHANGELOG.md)
- [Commits](https://github.com/Effect-TS/effect/commits/@effect/platform-bun@4.0.0-beta.102/packages/platform-bun)

Updates `@effect/platform-node` from 4.0.0-beta.97 to 4.0.0-beta.102
- [Release notes](https://github.com/Effect-TS/effect/releases)
- [Changelog](https://github.com/Effect-TS/effect/blob/main/packages/platform-node/CHANGELOG.md)
- [Commits](https://github.com/Effect-TS/effect/commits/@effect/platform-node@4.0.0-beta.102/packages/platform-node)

Updates `@effect/sql-pg` from 4.0.0-beta.97 to 4.0.0-beta.102
- [Release notes](https://github.com/Effect-TS/effect/releases)
- [Commits](https://github.com/Effect-TS/effect/commits/@effect/sql-pg@4.0.0-beta.102/packages/sql-pg)

Updates `@effect/vitest` from 4.0.0-beta.97 to 4.0.0-beta.102
- [Release notes](https://github.com/Effect-TS/effect/releases)
- [Changelog](https://github.com/Effect-TS/effect/blob/main/packages/vitest/CHANGELOG.md)
- [Commits](https://github.com/Effect-TS/effect/commits/@effect/vitest@4.0.0-beta.102/packages/vitest)

Updates `effect` from 4.0.0-beta.97 to 4.0.0-beta.102
- [Release notes](https://github.com/Effect-TS/effect/releases)
- [Changelog](https://github.com/Effect-TS/effect/blob/main/packages/effect/CHANGELOG.md)
- [Commits](https://github.com/Effect-TS/effect/commits/effect@4.0.0-beta.102/packages/effect)

Updates `knip` from 6.27.0 to 6.29.0
- [Release notes](https://github.com/webpro-nl/knip/releases)
- [Commits](https://github.com/webpro-nl/knip/commits/knip@6.29.0/packages/knip)

Updates `oxfmt` from 0.59.0 to 0.61.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.61.0/npm/oxfmt)

Updates `oxlint-tsgolint` from 0.25.0 to 7.0.2001
- [Release notes](https://github.com/oxc-project/tsgolint/releases)
- [Commits](oxc-project/tsgolint@v0.25.0...v7.0.2001)

Updates `oxlint` from 1.74.0 to 1.76.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.76.0/npm/oxlint)

Updates `tldts` from 6.1.86 to 7.4.9
- [Release notes](https://github.com/remusao/tldts/releases)
- [Changelog](https://github.com/remusao/tldts/blob/master/CHANGELOG.md)
- [Commits](remusao/tldts@v6.1.86...v7.4.9)

---
updated-dependencies:
- dependency-name: pkg-pr-new
  dependency-version: 0.0.80
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-major
- dependency-name: verdaccio
  dependency-version: 6.9.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-major
- dependency-name: undici
  dependency-version: 8.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-major
- dependency-name: smol-toml
  dependency-version: 1.7.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-major
- dependency-name: "@supabase/supabase-js"
  dependency-version: 2.110.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-major
- dependency-name: jose
  dependency-version: 6.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-major
- dependency-name: "@anthropic-ai/claude-agent-sdk"
  dependency-version: 0.3.220
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-major
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.115.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-major
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.30.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-major
- dependency-name: posthog-node
  dependency-version: 5.46.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-major
- dependency-name: react
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-major
- dependency-name: fumadocs-core
  dependency-version: 16.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-major
- dependency-name: fumadocs-ui
  dependency-version: 16.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-major
- dependency-name: next
  dependency-version: 16.3.0-preview.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-major
- dependency-name: react-dom
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-major
- dependency-name: "@types/node"
  dependency-version: 26.1.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-major
- dependency-name: "@effect/atom-react"
  dependency-version: 4.0.0-beta.102
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-major
- dependency-name: "@effect/platform-bun"
  dependency-version: 4.0.0-beta.102
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-major
- dependency-name: "@effect/platform-node"
  dependency-version: 4.0.0-beta.102
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-major
- dependency-name: "@effect/sql-pg"
  dependency-version: 4.0.0-beta.102
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-major
- dependency-name: "@effect/vitest"
  dependency-version: 4.0.0-beta.102
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-major
- dependency-name: effect
  dependency-version: 4.0.0-beta.102
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-major
- dependency-name: knip
  dependency-version: 6.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-major
- dependency-name: oxfmt
  dependency-version: 0.61.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-major
- dependency-name: oxlint-tsgolint
  dependency-version: 7.0.2001
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-major
- dependency-name: oxlint
  dependency-version: 1.76.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-major
- dependency-name: tldts
  dependency-version: 7.4.9
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 4, 2026
@github-actions

github-actions Bot commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

Supabase CLI preview

npx --yes https://pkg.pr.new/supabase/cli/supabase@a59f2799094d056d0b826a50c90dd260f5a1d981

Preview package for commit a59f279.

chatgpt-codex-connector[bot]
chatgpt-codex-connector Bot reviewed Aug 4, 2026
View reviewed changes

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: a59f279909

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread pnpm-workspace.yaml
"@vitest/coverage-istanbul": "^4.1.10"
"effect": "4.0.0-beta.97"
"knip": "^6.27.0"
"effect": "4.0.0-beta.102"

@chatgpt-codex-connector chatgpt-codex-connector Bot Aug 4, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Avoid Effect beta.102's -- parser regression

This catalog bump moves all effect/unstable/cli parsing to 4.0.0-beta.102, which has a known regression where operands after -- are left on the parent parse record for nested subcommands (Effect-TS/effect#6690). The legacy CLI is nested via Command.withSubcommands, and test db declares variadic path args, so a user command like supabase test db -- -foo.sql drops -foo.sql before the handler and falls back to the default supabase/tests path instead of testing the requested dashed filename. Please stay on beta.97 or bump to a release that includes the parser fix.

Useful? React with 👍 / 👎.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@chatgpt-codex-connector chatgpt-codex-connector[bot] chatgpt-codex-connector[bot] left review comments
@supabase-cli-releaser supabase-cli-releaser[bot] supabase-cli-releaser[bot] approved these changes

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants