chore(deps): bump the npm-minor-patch group with 41 updates

[dependabot]

Bumps the npm-minor-patch group with 41 updates:

Package	From	To
@playwright/test	1.63.0	1.64.1
@storybook/addon-a11y	10.6.0	10.6.2
@storybook/react-vite	10.6.0	10.6.2
@stylexjs/unplugin	0.19.0	0.19.1
@tanstack/router-plugin	1.168.35	1.168.46
@testing-library/user-event	14.6.7	14.6.8
@vitejs/plugin-react	6.1.1	6.1.2
react	19.2.8	19.3.1
@types/react	19.2.18	19.3.0
react-dom	19.2.8	19.3.1
@types/react-dom	19.2.7	19.3.0
storybook	10.6.0	10.6.2
vite	8.2.2	8.3.4
vitest	5.0.0	5.0.5
@stylexjs/stylex	0.19.0	0.19.1
@tanstack/react-hotkeys	0.10.0	0.14.3
@tanstack/react-query	5.102.8	5.104.3
@tanstack/react-router	1.170.32	1.170.44
@tanstack/react-virtual	3.14.10	3.14.20
lucide-react	1.41.0	1.58.0
@base-ui/react	1.8.0	1.9.0
@dnd-kit/dom	0.5.0	0.5.1
@dnd-kit/react	0.5.0	0.5.1
react-resizable-panels	4.12.4	4.14.5
zod	4.5.4	4.6.7
electron	44.2.0	44.8.0
@tanstack/react-start	1.168.60	1.169.2
@tanstack/router-generator	1.167.33	1.167.44
axe-core	4.13.0	4.14.0
yaml	2.9.0	2.9.1
@shopify/flash-list	2.0.2	2.3.3
lucide-react-native	1.42.0	1.58.0
react-native	0.86.3	0.88.0
react-native-enriched-markdown	1.0.2	1.1.1
react-native-keyboard-controller	1.21.9	1.22.7
react-native-reanimated	4.5.1	4.7.1
react-native-safe-area-context	5.7.0	5.10.1
react-native-screens	4.26.2	4.30.0
react-native-svg	15.15.4	15.16.0
react-native-worklets	0.10.1	0.13.0
@testing-library/react-native	14.0.1	14.1.0

Updates @playwright/test from 1.63.0 to 1.64.1

Release notes

Sourced from @​playwright/test's releases.

v1.64.1

Bug Fixes

• #43247 [Bug]: _electron.launch intermittently loses a packaged app's first window since 1.64.0
• #43242 [Regression]: Chromium 155+ aborts a preflighted cross-origin redirect whenever any route is registered (net::ERR_ABORTED)

v1.64.0

🧰 WebMCP

New page.webmcp and frame.webmcp give access to the tools that a page registers through the experimental WebMCP browser API, so you can test them like any other part of your app:

const browser = await chromium.launch({ args: ['--enable-features=WebMCP'] });
const page = await browser.newPage();
await page.goto('https://example.com');
for (const tool of await page.webmcp.tools())
console.log(tool.name, tool.description);
const result = await page.webmcp.callTool('add', { a: 2, b: 40 });
console.log(result.content[0].text); // "42"

Playwright MCP also supports WebMCP by default, with page-defined tools offered to the agent as webmcp_<tool>. Pass --no-webmcp to opt out.

playwright-cli exposes them as well:

playwright-cli webmcp-list
playwright-cli webmcp-call search_catalog --params '{"query":"cats"}'

🎬 Better videos

Videos can now be recorded at a custom frame rate, and the decorations for actions are styled with plain CSS:

// playwright.config.ts
import { defineConfig } from '@playwright/test';
export default defineConfig({
use: {
video: {
mode: 'on',
size: { width: 1920, height: 1080 },
fps: 60,
show: {
actions: {
style: {
point: 'width: 20px; height: 20px; border-radius: 50%; background: red',
</tr></table>

... (truncated)

Commits

• cfe490d cherry-pick(#43353): docs: release notes for v1.64 Python
• 866cbb8 chore: mark v1.64.1 (#43354)
• 1b29247 cherry-pick(#43250): fix(electron): do not drop windows that have not navigat...
• 632d976 cherry-pick(#43249): fix(chromium): disable AvoidCorsURLLoaderRestartOnRedirect
• 824d0c5 cherry-pick(#43217): chore(dotnet): fix async suffix of optional-arg overload...
• 606ecd8 cherry-pick(#43192): fix(locators): parse locators the way the client API bui...
• e4f872c cherry-pick(#43188): feat(api): expose asLocatorDescription via LocalUtils fo...
• f6a439e cherry-pick(#43189): docs(webmcp): expose WebMCP to all languages
• e2335c3 cherry-pick(#43174): fix(mcp): do not close the browser twice when the client...
• d2a436e cherry-pick(#43163): Revert "fix(blob): do not remove existing reports from o...
• Additional commits viewable in compare view

Updates @storybook/addon-a11y from 10.6.0 to 10.6.2

Release notes

Sourced from @​storybook/addon-a11y's releases.

v10.6.2

10.6.2

• Angular-Vite: Require @​analogjs/vite-plugin-angular 2.7.3 or later - #36525, thanks @​valentinpalkovic!
• CLI: Fix hidden output of CLI commands on Yarn 1 - #36419, thanks @​kasperpeulen!
• Preact: Support Preact 11 - #36526, thanks @​ghengeveld!
• Security: Patch GHSA-f2ph-cmg5-wxc8 and GHSA-px85-f4q5-jh77 - #36726, thanks @​Sidnioulz!
• Typescript: Explicitly type enhanceArgTypes - #35664, thanks @​mrginglymus!

v10.6.1

10.6.1

• Addon A11y: Fix vision simulator color filters in Firefox - #36153, thanks @​ghengeveld!
• Addon Vitest: Support Vitest 5 browser tests - #36270, thanks @​valentinpalkovic!
• CLI: Fix vitest ERESOLVE on fresh Next.js apps. - #36310, thanks @​obvious-autobuild!
• Core: Fix build crash when ref reachability check fails mid-request - #36181, thanks @​shilman!
• Core: Restore the change-detection CTA in the sidebar - #36214, thanks @​ghengeveld!
• TanStack: Support both interpolatePath signatures - #36333, thanks @​BaconMan1168!
• Telemetry: One tools-command record per invocation with CLI toolset and tool names - #36210, thanks @​kasperpeulen!

Changelog

Sourced from @​storybook/addon-a11y's changelog.

10.6.2

• Angular-Vite: Require @​analogjs/vite-plugin-angular 2.7.3 or later - #36525, thanks @​valentinpalkovic!
• CLI: Fix hidden output of CLI commands on Yarn 1 - #36419, thanks @​kasperpeulen!
• Preact: Support Preact 11 - #36526, thanks @​ghengeveld!
• Security: Patch GHSA-f2ph-cmg5-wxc8 and GHSA-px85-f4q5-jh77 - #36726, thanks @​Sidnioulz!
• Typescript: Explicitly type enhanceArgTypes - #35664, thanks @​mrginglymus!

10.6.1

• Addon A11y: Fix vision simulator color filters in Firefox - #36153, thanks @​ghengeveld!
• Addon Vitest: Support Vitest 5 browser tests - #36270, thanks @​valentinpalkovic!
• CLI: Fix vitest ERESOLVE on fresh Next.js apps. - #36310, thanks @​obvious-autobuild!
• Core: Fix build crash when ref reachability check fails mid-request - #36181, thanks @​shilman!
• Core: Restore the change-detection CTA in the sidebar - #36214, thanks @​ghengeveld!
• TanStack: Support both interpolatePath signatures - #36333, thanks @​BaconMan1168!
• Telemetry: One tools-command record per invocation with CLI toolset and tool names - #36210, thanks @​kasperpeulen!

Commits

• 5f00d7d Bump version from "10.6.1" to "10.6.2" [skip ci]
• 243c06b Merge pull request #36726 from storybookjs/sidnioulz/patch-internal-v11
• a17b725 Bump version from "10.6.0" to "10.6.1" [skip ci]
• 0d5fbca Merge pull request #36153 from storybookjs/ghengeveld/fix-vision-simulator-fi...
• See full diff in compare view

Updates @storybook/react-vite from 10.6.0 to 10.6.2

Release notes

Sourced from @​storybook/react-vite's releases.

v10.6.2

10.6.2

• Angular-Vite: Require @​analogjs/vite-plugin-angular 2.7.3 or later - #36525, thanks @​valentinpalkovic!
• CLI: Fix hidden output of CLI commands on Yarn 1 - #36419, thanks @​kasperpeulen!
• Preact: Support Preact 11 - #36526, thanks @​ghengeveld!
• Security: Patch GHSA-f2ph-cmg5-wxc8 and GHSA-px85-f4q5-jh77 - #36726, thanks @​Sidnioulz!
• Typescript: Explicitly type enhanceArgTypes - #35664, thanks @​mrginglymus!

v10.6.1

10.6.1

• Addon A11y: Fix vision simulator color filters in Firefox - #36153, thanks @​ghengeveld!
• Addon Vitest: Support Vitest 5 browser tests - #36270, thanks @​valentinpalkovic!
• CLI: Fix vitest ERESOLVE on fresh Next.js apps. - #36310, thanks @​obvious-autobuild!
• Core: Fix build crash when ref reachability check fails mid-request - #36181, thanks @​shilman!
• Core: Restore the change-detection CTA in the sidebar - #36214, thanks @​ghengeveld!
• TanStack: Support both interpolatePath signatures - #36333, thanks @​BaconMan1168!
• Telemetry: One tools-command record per invocation with CLI toolset and tool names - #36210, thanks @​kasperpeulen!

Changelog

Sourced from @​storybook/react-vite's changelog.

10.6.2

• Angular-Vite: Require @​analogjs/vite-plugin-angular 2.7.3 or later - #36525, thanks @​valentinpalkovic!
• CLI: Fix hidden output of CLI commands on Yarn 1 - #36419, thanks @​kasperpeulen!
• Preact: Support Preact 11 - #36526, thanks @​ghengeveld!
• Security: Patch GHSA-f2ph-cmg5-wxc8 and GHSA-px85-f4q5-jh77 - #36726, thanks @​Sidnioulz!
• Typescript: Explicitly type enhanceArgTypes - #35664, thanks @​mrginglymus!

10.6.1

• Addon A11y: Fix vision simulator color filters in Firefox - #36153, thanks @​ghengeveld!
• Addon Vitest: Support Vitest 5 browser tests - #36270, thanks @​valentinpalkovic!
• CLI: Fix vitest ERESOLVE on fresh Next.js apps. - #36310, thanks @​obvious-autobuild!
• Core: Fix build crash when ref reachability check fails mid-request - #36181, thanks @​shilman!
• Core: Restore the change-detection CTA in the sidebar - #36214, thanks @​ghengeveld!
• TanStack: Support both interpolatePath signatures - #36333, thanks @​BaconMan1168!
• Telemetry: One tools-command record per invocation with CLI toolset and tool names - #36210, thanks @​kasperpeulen!

Commits

• 5f00d7d Bump version from "10.6.1" to "10.6.2" [skip ci]
• a17b725 Bump version from "10.6.0" to "10.6.1" [skip ci]
• See full diff in compare view

Updates @stylexjs/unplugin from 0.19.0 to 0.19.1

Updates @tanstack/router-plugin from 1.168.35 to 1.168.46

Release notes

Sourced from @​tanstack/router-plugin's releases.

@​tanstack/router-plugin@​1.168.46

Patch Changes

• Updated dependencies [923d98b]:
  • @​tanstack/router-utils@​1.162.4
  • @​tanstack/router-generator@​1.167.44

@​tanstack/router-plugin@​1.168.45

Patch Changes

• Updated dependencies [d6ba115]:
  • @​tanstack/router-core@​1.171.37
  • @​tanstack/react-router@​1.170.44
  • @​tanstack/router-generator@​1.167.43

@​tanstack/router-plugin@​1.168.44

Patch Changes

• #8655 e66da18 - Remove redundant string excludes from the reference code-splitter transform filter to avoid unnecessary glob compilation in unplugin bundler adapters.

• Updated dependencies [57bd1a9, 94d6d8e]:

  • @​tanstack/router-generator@​1.167.42
  • @​tanstack/router-core@​1.171.36
  • @​tanstack/react-router@​1.170.43

Changelog

Sourced from @​tanstack/router-plugin's changelog.

1.168.46

Patch Changes

• Updated dependencies [923d98b]:
  • @​tanstack/router-utils@​1.162.4
  • @​tanstack/router-generator@​1.167.44

1.168.45

Patch Changes

• Updated dependencies [d6ba115]:
  • @​tanstack/router-core@​1.171.37
  • @​tanstack/react-router@​1.170.44
  • @​tanstack/router-generator@​1.167.43

1.168.44

Patch Changes

• #8655 e66da18 - Remove redundant string excludes from the reference code-splitter transform filter to avoid unnecessary glob compilation in unplugin bundler adapters.

• Updated dependencies [57bd1a9, 94d6d8e]:

  • @​tanstack/router-generator@​1.167.42
  • @​tanstack/router-core@​1.171.36
  • @​tanstack/react-router@​1.170.43

1.168.43

Patch Changes

• Updated dependencies [dfe3dea, 2413cc0, efc2042, efc2042, dfe3dea, d35aab4, 663282b]:
  • @​tanstack/router-core@​1.171.35
  • @​tanstack/react-router@​1.170.42
  • @​tanstack/router-generator@​1.167.41

1.168.42

Patch Changes

• Updated dependencies [60b8ad1, 614bc27, d521abd, ff66a03, 863c8a7]:
  • @​tanstack/react-router@​1.170.41
  • @​tanstack/router-core@​1.171.34
  • @​tanstack/router-generator@​1.167.40

1.168.41

Patch Changes

... (truncated)

Commits

• 140efa4 ci: Version Packages (#8701)
• 4ff63eb ci: Version Packages (#8700)
• 80e2eab ci: Version Packages (#8661)
• e66da18 fix(router-plugin): remove redundant string excludes from the reference filte...
• 42a7914 test: format compiler output before comparing snapshots (#8658)
• c79c620 ci: Version Packages (#8580)
• 5a641d8 test: cover compiler output validity and edge cases for code splitting, Hydra...
• 57e126e ci: Version Packages (#8531)
• f0e751d ci: Version Packages (#8497)
• 1e11303 test: expand compiler correctness coverage (#8506)
• Additional commits viewable in compare view

Updates @testing-library/user-event from 14.6.7 to 14.6.8

Release notes

Sourced from @​testing-library/user-event's releases.

v14.6.8

14.6.8 (2026-10-13)

Bug Fixes

• treat programmatic null input values as empty string (#1329) (1951eb7)

Commits

• 1951eb7 fix: treat programmatic null input values as empty string (#1329)
• See full diff in compare view

Updates @vitejs/plugin-react from 6.1.1 to 6.1.2

Release notes

Sourced from @​vitejs/plugin-react's releases.

plugin-react@6.1.2

Fix HMR for compound components (#1484)

Adding or removing a component from a compound component was not handled, creating stale updates. Doing this now triggers hmr invalidate on the file and propagates the invalidation to importers.

Fix compiler.logDiagnostics option not working (#1483)

With oxc-transform-react >= 0.148, the logDiagnostics was not working. This version fixes it and requires oxc-transform-react >= 0.152 as a peer dependency if you are using the compiler option. compiler.logDiagnostics option is now deprecated and should be swapped for the builtin compiler.reportDiagnostics.

Disable refresh for non-jsx with compiler enabled (fix #1478) (#1485)

When the compiler was enabled, TS files could trigger fast refresh which would cause runtime errors. The logic now follows what the builtin oxc plugin in Vite does.

Changelog

Sourced from @​vitejs/plugin-react's changelog.

6.1.2 (2026-10-05)

Fix HMR for compound components (#1484)

Adding or removing a component from a compound component was not handled, creating stale updates. Doing this now triggers hmr invalidate on the file and propagates the invalidation to importers.

Fix compiler.logDiagnostics option not working (#1483)

With oxc-transform-react >= 0.148, the logDiagnostics was not working. This version fixes it and requires oxc-transform-react >= 0.152 as a peer dependency if you are using the compiler option. compiler.logDiagnostics option is now deprecated and should be swapped for the builtin compiler.reportDiagnostics.

Disable refresh for non-jsx with compiler enabled (fix #1478) (#1485)

When the compiler was enabled, TS files could trigger fast refresh which would cause runtime errors. The logic now follows what the builtin oxc plugin in Vite does.

Commits

• ac47648 release: plugin-react@6.1.2 (#1491)
• 98277e7 fix(deps): update all non-major dependencies (#1486)
• 12eddea fix(hmr): better handle compound components (#1484)
• 3cfb1d1 fix(plugin-react): fix compiler.logDiagnostics (#1483)
• 6de9915 fix(plugin-react): disable refresh for non-jsx with compiler enabled (#1485)
• ee97d2f fix(deps): update all non-major dependencies (#1445)
• b0a014d chore: use Babel 8 for babel compiler playgrounds (#1460)
• 61b650f fix(deps): update react-related dependencies (#1452)
• 736efe2 chore(deps): update tsdown to v0.23 (#1451)
• See full diff in compare view

Updates react from 19.2.8 to 19.3.1

Release notes

Sourced from react's releases.

19.3.1 (October 14th, 2026)

React Server Components

• Improve transport protocol (#37845 by @​unstubbable and @​eps1lon)

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

• <ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@​sebmarkbage, @​jackpope, @​gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)
• Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@​jackpope, @​sebmarkbage, @​eps1lon, @​Dhakshin2007, @​chirokas, @​teamleaderleo, @​fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

• browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
  • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

• Enable Trusted Types API integration (@​rickhanlonii #35816)
• Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@​acdlite #37290)
• Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@​hoxyq, @​eps1lon: #37104, #37203, #37491)

All Changes

React

• Fast Refresh Fixes
  • Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@​sophiebits #36965)
  • Fix Fast Refresh so edits to a memo() comparison function take effect (@​sophiebits #36964)
  • Fix Fast Refresh crash when an edit changes the kind of a component's type (@​sophiebits #36963)
  • Unify hot reload type resolution for Fast Refresh (@​sophiebits #36962)
  • Fix Fast Refresh to remount correctly when an edit changes the component kind (@​sophiebits #36950)
  • Double invoke effects in StrictMode after Fast Refresh (@​eps1lon #35962)
• Performance Track Fixes
  • Prevent crash when accessing $$typeof in Performance Tracks (@​eps1lon #35679)
  • Handle non-string function names in Performance Tracks (@​eps1lon #35659)
  • Use minus (-) instead of en dash for removed props in Performance Tracks (@​eps1lon #35649)
  • Handle arrays with bigints in deep objects in Performance Tracks (@​eps1lon #35648)
  • Don't enumerate typed array props in Performance Tracks in DEV (@​UditDewan #36913)
  • Bail out of diffing wide objects and arrays in Performance Tracks (@​eps1lon #34742)
  • Clear potentially large performance measures in DEV (@​hoxyq #34803)
  • Fix missing else branch for renders with no props change in Performance Tracks (@​hoxyq #34837)
• Activity Fixes
  • Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@​sophiebits #36947)
  • Hide portal contents when an Activity is hidden (@​acdlite #35091)
  • Prevent metadata hoisting in hidden <Activity> trees (@​ronnakamoto #34983)

... (truncated)

Changelog

Sourced from react's changelog.

19.3.0 (September 9, 2026)

New React Features

• <ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@​sebmarkbage, @​jackpope, @​gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)
• Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@​jackpope, @​sebmarkbage, @​eps1lon, @​Dhakshin2007, @​chirokas, @​teamleaderleo, @​fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, Cursor Bugbot for commit a626a58. Bugbot is set up for automated code reviews on this repo. Configure here.

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit a626a58. Configure here.}

[cursor]

Expo SDK 57 native mismatch

High Severity

This grouped bump moves react-native to 0.88.0, react to 19.3.1, and several native modules (react-native-reanimated 4.7.1, react-native-worklets 0.13.0, react-native-screens ~4.30.0, react-native-safe-area-context ~5.10.1, @shopify/flash-list 2.3.3) while leaving expo at ~57.0.20. SDK 57 is built for React Native 0.86 and React 19.2; SDK 58 is the release that supports 0.88. Mobile CI expo-doctor and EAS/expo-dev-client native builds will reject or crash on this mix.

 

^{Reviewed by Cursor Bugbot for commit a626a58. Configure here.}