[dependabot]

Bumps the npm group with 35 updates in the / directory:

Package	From	To
@types/node	26.6.5	26.6.6
eslint	10.13.0	10.14.0
globals	17.13.0	17.14.0
typescript-eslint	8.72.0	8.72.1
@sentry/react	11.8.0	11.10.0
@tiptap/extension-bubble-menu	3.32.0	3.32.2
@tiptap/extension-highlight	3.32.0	3.32.2
@tiptap/extension-mathematics	3.32.0	3.32.2
@tiptap/extension-subscript	3.32.0	3.32.2
@tiptap/extension-superscript	3.32.0	3.32.2
@tiptap/extension-table	3.32.0	3.32.2
@tiptap/extensions	3.32.0	3.32.2
@tiptap/pm	3.32.0	3.32.2
@tiptap/react	3.32.0	3.32.2
@tiptap/starter-kit	3.32.0	3.32.2
cn	0.5.0	0.5.2
katex	0.19.0	0.19.1
lucide-react	1.59.0	1.66.0
react-router	8.5.0	8.5.1
@vitejs/plugin-react	6.1.2	6.2.1
shadcn	4.22.1	4.23.0
vite	8.3.4	8.3.5
@eslint-react/eslint-plugin	5.28.2	5.28.8
prettier-plugin-astro	1.1.1	1.1.2
@lucide/astro	1.59.0	1.66.0
astro	7.4.1	7.4.5
simple-icons	16.35.0	16.36.0
three	0.186.1	0.187.0
@types/three	0.186.0	0.187.0
@astrojs/check	0.9.11	0.9.12
@types/three	0.186.0	0.187.0
fumadocs-core	16.17.7	16.17.10
fumadocs-mdx	15.4.8	15.4.10
fumadocs-openapi	12.5.3	12.5.8
fumadocs-ui	16.17.7	16.17.10
next	16.4.2	16.4.4

Updates @types/node from 26.6.5 to 26.6.6

Commits

• See full diff in compare view

Updates eslint from 10.13.0 to 10.14.0

Release notes

Sourced from eslint's releases.

v10.14.0

Features

• d23a7f9 feat: fix property descriptor handling in func-name-matching (#21400) (xbinaryx)

Bug Fixes

• 4a12580 fix: require minimatch 10.2.6 to avoid vulnerable brace-expansion (#21460) (lumir)
• 827a8f3 fix: no-restricted-globals crash on global objects as property values (#21449) (xbinaryx)
• 161558a fix: handle LS, PS and empty hashbang comments (#21419) (lumir)
• 6194939 fix: no-invalid-this crash on accessor fields without initializer (#21442) (xbinaryx)
• 9155e14 fix: Update @​humanfs/node dependency version (#21434) (Nicholas C. Zakas)
• cb2b9d4 fix: avoid invalid object-shorthand fixes for super methods (#21323) (dvd233)
• 5ee3915 fix: yoda invalid autofix at statement start (#21424) (Daniel Pinto)

Documentation

• 0f94f47 docs: remove zh-hans from docs language switcher (#21437) (lumir)
• dab466e docs: Update README (GitHub Actions Bot)
• 97431f8 docs: replace --rulesdir with a virtual plugin in custom rules docs (#21452) (Pixel)
• 7697550 docs: Update README (GitHub Actions Bot)
• 0c699d5 docs: Remove Tidelift commercial support (#21416) (Milos Djermanovic)
• 0880666 docs: update loadESLint() documentation for v10 (#21374) (Minseon Kim)
• e06fe87 docs: Revise AI acknowledgment options in PR template (#21414) (Nicholas C. Zakas)

Chores

• 0e2ab70 ci: disable eslint-plugin-unicorn ecosystem test (#21462) (Francesco Trotta)
• 6e3f988 chore: update github/codeql-action action to v4.39.1 (#21450) (renovate[bot])
• a031c40 chore: update ecosystem plugins (#21445) (ESLint Bot)
• 67d2ca2 chore: add troubleshooting page URL to circular fixes warning message (#21429) (Milos Djermanovic)
• 276021d chore: update github/codeql-action action to v4.39.0 (#21432) (renovate[bot])
• 449724e chore: update ecosystem plugins (#21420) (ESLint Bot)
• 8ffeb8c chore: update dependency prettier to v3.9.10 (#21417) (renovate[bot])

Commits

• 12cbff4 10.14.0
• 6b696e7 Build: changelog update for 10.14.0
• 0e2ab70 ci: disable eslint-plugin-unicorn ecosystem test (#21462)
• 4a12580 fix: require minimatch 10.2.6 to avoid vulnerable brace-expansion (#21460)
• 0f94f47 docs: remove zh-hans from docs language switcher (#21437)
• dab466e docs: Update README
• 827a8f3 fix: no-restricted-globals crash on global objects as property values (#21449)
• 97431f8 docs: replace --rulesdir with a virtual plugin in custom rules docs (#21452)
• 6e3f988 chore: update github/codeql-action action to v4.39.1 (#21450)
• 161558a fix: handle LS, PS and empty hashbang comments (#21419)
• Additional commits viewable in compare view

Updates globals from 17.13.0 to 17.14.0

Release notes

Sourced from globals's releases.

v17.14.0

• Update globals (2026-11-01) (#355) 7abfb5d

---

sindresorhus/globals@v17.13.0...v17.14.0

Commits

• 3080111 17.14.0
• c61cc23 Tweaks
• 7abfb5d Update globals (2026-11-01) (#355)
• See full diff in compare view

Updates typescript-eslint from 8.72.0 to 8.72.1

Release notes

Sourced from typescript-eslint's releases.

v8.72.1

8.72.1 (2026-10-26)

🩹 Fixes

• eslint-plugin: [no-unnecessary-condition] false positives on unresolved conditional types (#13062)
• eslint-plugin: [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (#13039)
• typescript-estree: use one Program per tsconfig for the project service in single-run mode (#12988)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Josh Ghoulberg 👻

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.72.1 (2026-10-26)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

• 4ad6b75 chore(release): publish 8.72.1
• 7757694 chore: cleanup typecheck & build and fix race condition (#13071)
• See full diff in compare view

Updates @sentry/react from 11.8.0 to 11.10.0

Release notes

Sourced from @​sentry/react's releases.

11.10.0

Important Changes

• feat: Add a managed tunnel that the SDK derives from the DSN (#25199, #25200, #25783)

  Set tunnel: true in your browser Sentry.init call to send events through your own server. This helps when ad blockers block requests to Sentry. The browser derives the tunnel path from the DSN, so older and newer builds of your client and server always agree on the path.

  To serve the tunnel, add serveTunnelIntegration() to your server SDK. Astro, Nuxt, Nitro, React Router, Remix 3, SolidStart, SvelteKit and TanStack Start then answer tunnel requests automatically:

  // browser
  Sentry.init({ dsn, tunnel: true });
  // server
  Sentry.init({ dsn, integrations: [Sentry.serveTunnelIntegration()] });

  If the browser uses a different DSN than the server, set serveTunnelIntegration({ allowedDsns: [browserDsn] }). For other setups, the server SDKs export handleTunnelRequestIfMatched, handleTunnelRequest, isTunnelRequest and getTunnelPath:

  app.use((req, res, next) => Sentry.handleTunnelRequestIfMatched(req, res) ?? next());

  The request option of handleTunnelRequest is deprecated and will be removed in v12.

• feat: Make span origins spec compliant (#25602)

  Some span origins changed their names to follow the trace origin spec:

  • auto.amqplib.* is now auto.queue.amqplib.*, and auto.kafkajs.* is now auto.queue.kafkajs.*.
  • auto.vercelai.channel is now auto.ai.vercelai.
  • auto.firebase.firestore is now auto.db.firebase.firestore, and auto.firebase.functions is now auto.function.firebase.
  • auto.aws.aws_sdk is now auto.{rpc,db,queue,ai}.aws_sdk, with the category from the span op.
  • auto.aws_lambda is now auto.function.aws_serverless.
  • auto.mcp.notification is now auto.function.mcp_server.notification.
  • auto.db.cloudflare.durable_object.sql is now auto.db.cloudflare.durable_object_sql.
  • auto.http.browser.{lcp,cls,inp} is now auto.ui.browser.{lcp,cls,inp}.

  If you have ignoreSpans rules, queries or alerts on the old origins, change them to use the new origins.

• feat(bun): Add incoming request options and request sessions to bunServerIntegration (#25580)

  bunServerIntegration now accepts the same options as denoServeIntegration: ignoreRequestBody, ignoreIncomingRequests, ignoreStaticAssets, spans, onSpanCreated, onSpanEnd, sessions and sessionFlushingDelayMS. The callbacks receive the web Request.

  Bun.serve now records a request session for each incoming request. Sessions are sent only when a release is set. To turn them off, set bunServerIntegration({ sessions: false }).

  ignoreStaticAssets defaults to true, so Bun.serve no longer creates spans for GET requests to common static assets such as favicon.ico, robots.txt or *.js files. To keep these spans, set bunServerIntegration({ ignoreStaticAssets: false }). Bun.serve spans also follow the client's tracing configuration by default, so the integration does not start spans when tracing is disabled. Errors thrown for OPTIONS and HEAD requests are now captured.

• feat(bun): Inject debug IDs and upload source maps in sentryBunPlugin (#25670)

  sentryBunPlugin from @sentry/bun/plugin now accepts the same options as sentryEsbuildPlugin (org, project, authToken, release, sourcemaps, ...). When Bun.build writes source maps to outdir, the plugin injects the debug ID that Bun writes into each bundle, injects the release, and uploads the source maps at the end of the build. You no longer need to run sentry sourcemap inject and sentry sourcemap upload after the build.

... (truncated)

Changelog

Sourced from @​sentry/react's changelog.

11.10.0

Important Changes

• feat: Add a managed tunnel that the SDK derives from the DSN (#25199, #25200, #25783)

  Set tunnel: true in your browser Sentry.init call to send events through your own server. This helps when ad blockers block requests to Sentry. The browser derives the tunnel path from the DSN, so older and newer builds of your client and server always agree on the path.

  To serve the tunnel, add serveTunnelIntegration() to your server SDK. Astro, Nuxt, Nitro, React Router, Remix 3, SolidStart, SvelteKit and TanStack Start then answer tunnel requests automatically:

  // browser
  Sentry.init({ dsn, tunnel: true });
  // server
  Sentry.init({ dsn, integrations: [Sentry.serveTunnelIntegration()] });

  If the browser uses a different DSN than the server, set serveTunnelIntegration({ allowedDsns: [browserDsn] }). For other setups, the server SDKs export handleTunnelRequestIfMatched, handleTunnelRequest, isTunnelRequest and getTunnelPath:

  app.use((req, res, next) => Sentry.handleTunnelRequestIfMatched(req, res) ?? next());

  The request option of handleTunnelRequest is deprecated and will be removed in v12.

• feat: Make span origins spec compliant (#25602)

  Some span origins changed their names to follow the trace origin spec:

  • auto.amqplib.* is now auto.queue.amqplib.*, and auto.kafkajs.* is now auto.queue.kafkajs.*.
  • auto.vercelai.channel is now auto.ai.vercelai.
  • auto.firebase.firestore is now auto.db.firebase.firestore, and auto.firebase.functions is now auto.function.firebase.
  • auto.aws.aws_sdk is now auto.{rpc,db,queue,ai}.aws_sdk, with the category from the span op.
  • auto.aws_lambda is now auto.function.aws_serverless.
  • auto.mcp.notification is now auto.function.mcp_server.notification.
  • auto.db.cloudflare.durable_object.sql is now auto.db.cloudflare.durable_object_sql.
  • auto.http.browser.{lcp,cls,inp} is now auto.ui.browser.{lcp,cls,inp}.

  If you have ignoreSpans rules, queries or alerts on the old origins, change them to use the new origins.

• feat(bun): Add incoming request options and request sessions to bunServerIntegration (#25580)

  bunServerIntegration now accepts the same options as denoServeIntegration: ignoreRequestBody, ignoreIncomingRequests, ignoreStaticAssets, spans, onSpanCreated, onSpanEnd, sessions and sessionFlushingDelayMS. The callbacks receive the web Request.

  Bun.serve now records a request session for each incoming request. Sessions are sent only when a release is set. To turn them off, set bunServerIntegration({ sessions: false }).

  ignoreStaticAssets defaults to true, so Bun.serve no longer creates spans for GET requests to common static assets such as favicon.ico, robots.txt or *.js files. To keep these spans, set bunServerIntegration({ ignoreStaticAssets: false }). Bun.serve spans also follow the client's tracing configuration by default, so the integration does not start spans when tracing is disabled. Errors thrown for OPTIONS and HEAD requests are now captured.

• feat(bun): Inject debug IDs and upload source maps in sentryBunPlugin (#25670)

... (truncated)

Commits

• 9e33660 release: 11.10.0
• a51d938 Merge pull request #25832 from getsentry/prepare-release/11.10.0
• 612654c meta(changelog): Update changelog for 11.10.0
• 0455361 Merge pull request #25833 from getsentry/ab/merge-master-into-develop
• 0e2b465 chore: Merge master into develop
• 90a71e7 feat(server-utils): Instrument together-ai 1.x (#25823)
• c6ac34c test(cloudflare): Bump agents and MCP SDK in cloudflare-mcp-agent e2e app (#2...
• 6efffd8 test(remix): Cover prefetched navigations in the Remix 3 E2E app (#25829)
• e17a480 fix(remix): Drop Remix 3 release candidates from the peer range (#25808)
• cad66c7 test: Wire the managed tunnel by hand in Node, Cloudflare and Next.js (#25785)
• Additional commits viewable in compare view

Updates @tiptap/extension-bubble-menu from 3.32.0 to 3.32.2

Commits

• See full diff in compare view

Updates @tiptap/extension-highlight from 3.32.0 to 3.32.2

Commits

• See full diff in compare view

Updates @tiptap/extension-mathematics from 3.32.0 to 3.32.2

Commits

• See full diff in compare view

Updates @tiptap/extension-subscript from 3.32.0 to 3.32.2

Commits

• See full diff in compare view

Updates @tiptap/extension-superscript from 3.32.0 to 3.32.2

Commits

• See full diff in compare view

Updates @tiptap/extension-table from 3.32.0 to 3.32.2

Commits

• See full diff in compare view

Updates @tiptap/extensions from 3.32.0 to 3.32.2

Commits

• See full diff in compare view

Updates @tiptap/pm from 3.32.0 to 3.32.2

Commits

• See full diff in compare view

Updates @tiptap/react from 3.32.0 to 3.32.2

Commits

• See full diff in compare view

Updates @tiptap/starter-kit from 3.32.0 to 3.32.2

Commits

• See full diff in compare view

Updates cn from 0.5.0 to 0.5.2

Release notes

Sourced from cn's releases.

cn@0.5.2

Patch Changes

• #162 b8c5a1b Thanks @​nonhana! - Export CnFunction, Engine, and ClassNameValue from cn/config, and those plus ClassValue from cn/engine. Exporting an inferred createCn() result (export const cn = createCn({ ... })) no longer fails with TS2742 or TS2883 in projects that emit declarations.

• #167 6ebb4ce Thanks @​RaphaelFakhri! - cn build keeps numeric spacing such as p-4 when a stylesheet declares --spacing after a --*: initial or --spacing-*: initial reset, and keeps p-px through the reset, as Tailwind does.

• #160 a805c68 Thanks @​mehimanshupatil! - createCn, createTwMerge, and extendTailwindMerge from cn/config accept optional type arguments for custom class-group and theme ids, like tailwind-merge's extendTailwindMerge<ClassGroupIds, ThemeGroupIds>. With them, unknown group keys and conflict ids are type errors. Without them, any id is still accepted.

cn@0.5.1

Patch Changes

• #165 5e65675 Thanks @​shadcn! - Group the legacy bg-gradient-to-* utilities as bg-color, the same as tailwind-merge. cn("bg-background", "bg-gradient-to-r") now returns bg-gradient-to-r, and bg-gradient-to-r no longer replaces bg-linear-to-r or an arbitrary bg-[...] image.

Changelog

Sourced from cn's changelog.

0.5.2

Patch Changes

• #162 b8c5a1b Thanks @​nonhana! - Export CnFunction, Engine, and ClassNameValue from cn/config, and those plus ClassValue from cn/engine. Exporting an inferred createCn() result (export const cn = createCn({ ... })) no longer fails with TS2742 or TS2883 in projects that emit declarations.

• #167 6ebb4ce Thanks @​RaphaelFakhri! - cn build keeps numeric spacing such as p-4 when a stylesheet declares --spacing after a --*: initial or --spacing-*: initial reset, and keeps p-px through the reset, as Tailwind does.

• #160 a805c68 Thanks @​mehimanshupatil! - createCn, createTwMerge, and extendTailwindMerge from cn/config accept optional type arguments for custom class-group and theme ids, like tailwind-merge's extendTailwindMerge<ClassGroupIds, ThemeGroupIds>. With them, unknown group keys and conflict ids are type errors. Without them, any id is still accepted.

0.5.1

Patch Changes

• #165 5e65675 Thanks @​shadcn! - Group the legacy bg-gradient-to-* utilities as bg-color, the same as tailwind-merge. cn("bg-background", "bg-gradient-to-r") now returns bg-gradient-to-r, and bg-gradient-to-r no longer replaces bg-linear-to-r or an arbitrary bg-[...] image.

Commits

• b6a8dbe chore(release): version packages (#170)
• 6ebb4ce fix(build): keep numeric spacing after a theme reset that redeclares --spacin...
• b8c5a1b fix: export CnFunction and Engine types from cn/config and cn/engine (#162)
• a805c68 feat(config): typed group ids for createCn / extendTailwindMerge (#160)
• 8e5cc59 chore(release): version packages (#168)
• 5e65675 fix(config): group bg-gradient-to-* as bg-color like tailwind-merge (#165)
• See full diff in compare view

Updates katex from 0.19.0 to 0.19.1

Release notes

Sourced from katex's releases.

v0.19.1

0.19.1 (2026-10-23)

Bug Fixes

• allow percent sign in raw argument type (#4307) (6971e5c)

Changelog

Sourced from katex's changelog.

0.19.1 (2026-10-23)

Bug Fixes

• allow percent sign in raw argument type (#4307) (6971e5c)

Commits

• 8000fbd chore(release): 0.19.1 [ci skip]
• 6971e5c fix: allow percent sign in raw argument type (#4307)
• 8f0d9bc chore: handle devicePixelRatio in screenshotter (#4303)
• faa8a4c docs(users): add Whiteboard (#4310)
• f18d73d docs(users): add Liubai (#4313)
• 4ffde03 chore(deps): bump github/codeql-action from 4.38.3 to 4.39.0 (#4314)
• cac2561 chore(deps): bump github/codeql-action from 4.38.2 to 4.38.3 (#4306)
• See full diff in compare view

Updates lucide-react from 1.59.0 to 1.66.0

Release notes

Sourced from lucide-react's releases.

Version 1.66.0

What's Changed

• feat(icons): added monitor-activity icon by @​karsa-mistmere in lucide-icons/lucide#5090
• chore(deps): bump the github-actions group across 1 directory with 4 updates by @​dependabot[bot] in lucide-icons/lucide#5111
• feat(icons): added file-database icon by @​PrimeTestLab in lucide-icons/lucide#5014
• feat(icons): added margin-bottom, margin-horizontal, margin-left and 11 more icons by @​irvineacosta in lucide-icons/lucide#3525
• feat(groups): added chart and graph groups by @​karsa-mistmere in lucide-icons/lucide#5124
• feat(site): Add Hover And Focus Animations Across The Docs Site by @​PrimeTestLab in lucide-icons/lucide#5085
• feat(icons): added chart-bell-curve icon by @​karsa-mistmere in lucide-icons/lucide#5128
• fix(icons): update design of *-letter-p-off icons to match new base icon designs by @​karsa-mistmere in lucide-icons/lucide#5129

Full Changelog: lucide-icons/lucide@1.65.0...1.66.0

Version 1.65.0

What's Changed

• chore(deps): Update deps astro package by @​ericfennis in lucide-icons/lucide#5108
• ci(claude-review): Turn off claude review by @​ericfennis in lucide-icons/lucide#5109
• chore(deps): bump rollup to 4.65.1 and keep typescript on v6 by @​dependabot[bot] in lucide-icons/lucide#5110
• chore(deps): bump nuxt from 4.5.1 to 4.6.2 by @​dependabot[bot] in lucide-icons/lucide#5068
• ci(claude-review|repo-journal): Remove workflows by @​ericfennis in lucide-icons/lucide#5118
• chore(deps-dev): bump the testing-deps group across 1 directory with 4 updates by @​dependabot[bot] in lucide-icons/lucide#5116
• feat(metadata|docs|site): reuse metadata from a base icon with $extends: by @​ericfennis in lucide-icons/lucide#4360
• feat(metadata|docs): reusable tag groups with $group: by @​ericfennis in lucide-icons/lucide#5037
• feat(metadata): apply tag groups to variant icons by @​ericfennis in lucide-icons/lucide#5038
• chore(metadata): apply more tag groups to icon variants by @​karsa-mistmere in lucide-icons/lucide#5093
• chore(metadata): Clean up icon categories by @​ericfennis in lucide-icons/lucide#5099
• fix(icons): removed letters-digits category from anything that wasn't one by @​karsa-mistmere in lucide-icons/lucide#5104
• feat(groups): added letter & digit groups by @​karsa-mistmere in lucide-icons/lucide#5105
• ci(suggest-metadata): Add support for $extends and $group in metadata suggestions by @​ericfennis in lucide-icons/lucide#5117
• chore(deps-dev): bump the preact-deps group across 1 directory with 2 updates by @​dependabot[bot] in lucide-icons/lucide#5115
• chore(deps-dev): bump react-native-svg from 15.15.5 to 15.16.0 in the react-native-deps group by @​dependabot[bot] in lucide-icons/lucide#5113
• fix(astro): support stricter optional property checking by @​latin-1 in lucide-icons/lucide#5070

New Contributors

• @​latin-1 made their first contribution in lucide-icons/lucide#5070

Full Changelog: lucide-icons/lucide@1.64.0...1.65.0

Version 1.64.0

What's Changed

• chore(docs|site): Remove Plausible, add tracking events and privacy statement by @​ericfennis in lucide-icons/lucide#5092
• feat(icons): added square-kanban-plus icon by @​KesleyDavid in lucide-icons/lucide#4688
• feat(icons): added letter-b, letter-c, letter-d and 21 more icons by @​karsa-mistmere in lucide-icons/lucide#4743
• feat(icons): added numbers icon by @​karsa-mistmere in lucide-icons/lucide#4778
• feat(icons): added circle-letter-a, circle-letter-b, circle-letter-c and 46 more icons by @​karsa-mistmere in lucide-icons/lucide#4744
• feat(icons): added new Letters & digits category by @​karsa-mistmere in lucide-icons/lucide#5095
• fix(icons): align Unicode currency icon cap heights with other typographic icons by @​karsa-mistmere in lucide-icons/lucide#4926
• ci(claude-review): add Claude PR review workflow by @​ericfennis in lucide-icons/lucide#5097
• fix(icons): remove bracket from square-letter-d.svg by @​ericfennis in lucide-icons/lucide#5101

... (truncated)

Commits

• 1668a0c chore(deps): bump rollup to 4.65.1 and keep typescript on v6 (#5110)
• e8f86fc fix(lucide-react): ignore stale DynamicIcon loads after the name changes (#5060)
• 6657faa chore(deps-dev): bump vite from 8.3.2 to 8.3.3 (#5052)
• 1802f33 feat(lucide-react): add package exports for per-icon imports without changing...
• 20aef31 chore(packages): Update sponsors (#5034)
• fa238cf chore(deps): bump the react-deps group across 1 directory with 2 updates (#5026)
• See full diff in compare view

Updates react-router from 8.5.0 to 8.5.1

Release notes

Sourced from react-router's releases.

v8.5.1

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v851

Changelog

Sourced from react-router's changelog.

v8.5.1

Patch Changes

• Fix URIError: URI malformed when an ssr: false dev server receives a URL path with a malformed percent-encoding (#15649)
• Bound server route manifest processing for paths with expensive route expansion (#15703)
  • Fall back to initial route discovery during server rendering and RSC document/data requests
  • Account for the number and depth of candidate branches when using regex matching
• Encode commas within paths sent to the lazy route discovery manifest endpoint so routes with commas in their paths are discovered correctly (#15640)
• Fix fetcher revalidation errors bubbling to the root error boundary instead of the nearest boundary above the route that owns the fetcher (#15676)
• Avoid duplicate history entries when posting a <Form> to the current URL with an encoded action (#15679)
  • Replace the current history entry when the action contains characters that get percent-encoded, such as spaces or non-ASCII characters
• Fix an unhandled promise rejection when the browser skips a viewTransition navigation, for example in a hidden tab (#15582)
• Bubble rejected lazy.Component imports on loader-less routes to the nearest error boundary (#15658)
  • Render the error boundary instead of a blank page
• Preserve pending fetcher mutation revalidation when an older navigation or background reload completes to prevent stale loader data (#15686)
  • Keep newer fetcher loads cancellable and preserve them when earlier revalidations finish or abort, preventing older responses from overwriting fresh fetcher data
• Retry rejected lazy route imports instead of caching failures permanently (#15689)
• Revalidate loader data when a fetcher action redirect is not followed (#15557)
  • Revalidate when an action redirect is ignored because a newer navigation started or the fetcher unmounted while the action was running
  • Include shared parent loaders when another navigation completed while the action was running
  • Continue to respect shouldRevalidate
  • Return fetchers to idle when a revalidation completes a pending navigation started by another fetcher's redirect
• Avoid adding an incompatible document.startViewTransition() overload to the global Document type (#15680)
  • Allow transition results to be assigned to the DOM ViewTransition type
• Skip deleteData in destroySession when the session has no ID (#15639)
  • Avoid failures when destroying a session without a cookie on storage that rejects an empty key
• Surface the host's 404 response when a SPA fallback route has no prerendered data (#15646)
  • Request single-fetch .data files for hydrating routes with a server loader in an ssr: false app with a prerender config
  • Avoid the internal "No result found for routeId" error for non-prerendered parameterized paths served via the SPA fallback
• Improve turbo-stream decoding validation and object property handling (18e1fbd)

Unstable Changes

⚠️ Unstable features are not recommended for production use

• Add an opt-in <Await unstable_promise={promise}> implementation based on React's use() API (#15678)
  • Use React.use instead of React Router's internal promise tracking
  • Accept promise-like values and retain errorElement, useAsyncValue, and useAsyncError support
  • Handle only promise rejections with errorElement when using unstable_promise, allowing child render errors to bubble to the nearest React error boundary
  • Track streamed promises during decoding so settled server content stays visible during hydration updates with either Await API or direct React.use()
• Fix URIError: URI malformed when an API-only (ssr: "unstable_api-only") server receives a URL path with a malformed percent-encoding (#15649)
• Fix duplicate headers when throwing a redirect from an RSC server function (#15667)

Commits

• a2783e6 Release v8.5.1 (#15656)
• 69465b0 docs: prepare 8.5.1 release notes
• 393d7c1 Bound server route manifest processing (#15703)
• 18e1fbd Improve turbo-stream decoding validation and object property handling
• cc0b62e Add Await unstable_promise and preserve streamed content during hydration (#1...
• a7db797 fix(react-router): retry rejected lazy route imports (#15689)
• 3ef3def fix(react-router): preserve pending mutation revalidation (#15686)
• 6cdc3fa fix(react-router): revalidate when an ignored fetcher action redirect is not ...
• b0a4477 chore: format
• 4f788db Fix 404 on hard load of non-prerendered param route served via SPA fallback (...
• Additional commits viewable in compare view

Updates @vitejs/plugin-react from 6.1.2 to 6.2.1

Release notes

Sourced from @​vitejs/plugin-react's releases.

plugin-react@6.2.1

Fix refreshInclude and refreshExclude options not working (#1543)

Fix mistake from #1516

plugin-react@6.2.0

Add refreshInclude and refreshExclude options (#1516)

Add refreshInclude and refreshExclude options to skip fast refresh for certain files that won't run in the browser.

Expand oxc-transform-react peer dependency range (#1540)

The peer dependency version range for oxc-transform-react was expanded from ^0.152.0 to >=0.152.0 <0.157.0.

Expand @rolldown/plugin-babel peer dependency range (#1541)

The peer dependency version range for @rolldown/plugin-babel was expanded from ^0.1.7 || ^0.2.0 to ^0.1.7 || ^0.2.0 ||...

Description has been truncated