build(deps): bump the website group across 1 directory with 21 updates by dependabot[bot] · Pull Request #32 · nhtera/Ghira

dependabot · 2026-11-05T09:17:53Z

Bumps the website group with 21 updates in the /apps/website directory:

Package	From	To
@fontsource-variable/source-serif-4	`5.3.0`	`5.3.1`
@tanstack/react-router	`1.170.41`	`1.170.46`
@tanstack/react-start	`1.168.60`	`1.169.4`
fumadocs-core	`16.16.2`	`16.17.9`
fumadocs-mdx	`15.4.6`	`15.4.10`
react	`19.3.0`	`19.3.1`
react-dom	`19.3.0`	`19.3.1`
zod	`4.6.5`	`4.6.7`
@axe-core/playwright	`4.13.0`	`4.14.0`
@cloudflare/vite-plugin	`2.0.0-beta.sha-52b0dc0e9`	`2.0.0-beta.v.9`
@tanstack/router-cli	`1.167.40`	`1.167.46`
@types/node	`22.20.4`	`26.6.6`
@vitejs/plugin-react	`6.1.2`	`6.2.0`
cf	`1.0.0-beta.12`	`1.0.0-beta.26`
eslint	`10.11.0`	`10.14.0`
globals	`17.12.0`	`17.14.0`
playwright	`1.63.0`	`1.64.1`
shiki	`4.5.0`	`4.6.0`
typescript	`5.9.3`	`7.0.2`
typescript-eslint	`8.71.0`	`8.72.1`
vite	`8.3.2`	`8.3.5`

Updates @fontsource-variable/source-serif-4 from 5.3.0 to 5.3.1

Commits

See full diff in compare view

Updates @tanstack/react-router from 1.170.41 to 1.170.46

Release notes

Sourced from @tanstack/react-router's releases.

@tanstack/react-router@1.170.46

Patch Changes

#8670 32a3360 - Reference agent skills in other packages by their intent load identifier (@tanstack/<package>#<skill>) instead of relative file links that break once packages are installed.

#8671 689a7c5 - Publish the @tanstack/react-router agent skills (react-router, compositions/router-query, lifecycle/migrate-from-react-router), which were missing from the package's files list.

Updated dependencies [32a3360]:

@tanstack/router-core@1.171.39

@tanstack/react-router@1.170.45

Patch Changes

Updated dependencies [18154b1]:

@tanstack/router-core@1.171.38

Changelog

Sourced from @tanstack/react-router's changelog.

1.170.46

Patch Changes

#8670 32a3360 - Reference agent skills in other packages by their intent load identifier (@tanstack/<package>#<skill>) instead of relative file links that break once packages are installed.

#8671 689a7c5 - Publish the @tanstack/react-router agent skills (react-router, compositions/router-query, lifecycle/migrate-from-react-router), which were missing from the package's files list.

Updated dependencies [32a3360]:

@tanstack/router-core@1.171.39

1.170.45

Patch Changes

Updated dependencies [18154b1]:

@tanstack/router-core@1.171.38

1.170.44

Patch Changes

Updated dependencies [d6ba115]:

@tanstack/router-core@1.171.37

1.170.43

Patch Changes

Updated dependencies [94d6d8e]:

@tanstack/router-core@1.171.36

1.170.42

Patch Changes

#8594 2413cc0 - reduce component nesting per route match

#8602 efc2042 - Links of a route that the pending navigation leaves skip deriving the destination location, and clicks and preloads follow the href a Link displays. buildLocation now builds mask and routeMasks locations from the same _fromLocation as the destination.

#8602 efc2042 - Fixed Link destinations that resolve to a route mask are now reused across navigations instead of being rebuilt every time. A mounted Link now follows changes to its href and reloadDocument props, and React Links no longer each subscribe to a hydration flag.

#8579 d35aab4 - Cancel pending link preload timers when starting navigation to avoid redundant preloading while the destination is loading.

Updated dependencies [dfe3dea, dfe3dea, dfe3dea, efc2042, efc2042, dfe3dea, 663282b]:

@tanstack/history@1.162.5

@tanstack/router-core@1.171.35

Commits

6b9fe6d ci: Version Packages (#8745)
32a3360 docs(skills): reference cross-package skills by intent ID (#8670)
689a7c5 fix(react-router): publish agent skills (#8671)
caaf32d ci: Version Packages (#8733)
18154b1 perf: lower manifest script preload priority (#8212)
7a06725 chore(deps): upgrade Vitest to 5 and migrate benchmarks to the bench fixture ...
4ff63eb ci: Version Packages (#8700)
80e2eab ci: Version Packages (#8661)
c79c620 ci: Version Packages (#8580)
f6d21de revert: keep server-rendered pending UI of no-SSR routes through hydration (#...
Additional commits viewable in compare view

Updates @tanstack/react-start from 1.168.60 to 1.169.4

Release notes

Sourced from @tanstack/react-start's releases.

@tanstack/react-start@1.169.4

Patch Changes

#8670 32a3360 - Reference agent skills in other packages by their intent load identifier (@tanstack/<package>#<skill>) instead of relative file links that break once packages are installed.

Updated dependencies [32a3360, 689a7c5, ed55775, 63a886d, d9b07e8]:

@tanstack/react-router@1.170.46

@tanstack/start-client-core@1.170.39

@tanstack/start-server-core@1.169.45

@tanstack/start-plugin-core@1.171.55

@tanstack/react-start-client@1.168.44

@tanstack/react-start-rsc@0.1.65

@tanstack/react-start-server@1.167.52

@tanstack/react-start@1.169.3

Patch Changes

Updated dependencies [18154b1]:

@tanstack/start-server-core@1.169.44

@tanstack/react-router@1.170.45

@tanstack/react-start-client@1.168.43

@tanstack/react-start-rsc@0.1.64

@tanstack/react-start-server@1.167.51

@tanstack/start-client-core@1.170.38

@tanstack/start-plugin-core@1.171.54

@tanstack/react-start@1.169.2

Patch Changes

Updated dependencies [71d9694, fdc10fa, 923d98b]:

@tanstack/start-server-core@1.169.43

@tanstack/start-plugin-core@1.171.53

@tanstack/router-utils@1.162.4

@tanstack/react-start-server@1.167.50

@tanstack/react-start-rsc@0.1.63

Changelog

Sourced from @tanstack/react-start's changelog.

1.169.4

Patch Changes

#8670 32a3360 - Reference agent skills in other packages by their intent load identifier (@tanstack/<package>#<skill>) instead of relative file links that break once packages are installed.

Updated dependencies [32a3360, 689a7c5, ed55775, 63a886d, d9b07e8]:

@tanstack/react-router@1.170.46

@tanstack/start-client-core@1.170.39

@tanstack/start-server-core@1.169.45

@tanstack/start-plugin-core@1.171.55

@tanstack/react-start-client@1.168.44

@tanstack/react-start-rsc@0.1.65

@tanstack/react-start-server@1.167.52

1.169.3

Patch Changes

Updated dependencies [18154b1]:

@tanstack/start-server-core@1.169.44

@tanstack/react-router@1.170.45

@tanstack/react-start-client@1.168.43

@tanstack/react-start-rsc@0.1.64

@tanstack/react-start-server@1.167.51

@tanstack/start-client-core@1.170.38

@tanstack/start-plugin-core@1.171.54

1.169.2

Patch Changes

Updated dependencies [71d9694, fdc10fa, 923d98b]:

@tanstack/start-server-core@1.169.43

@tanstack/start-plugin-core@1.171.53

@tanstack/router-utils@1.162.4

@tanstack/react-start-server@1.167.50

@tanstack/react-start-rsc@0.1.63

1.169.1

Patch Changes

Updated dependencies [740b0ce, d6ba115]:

@tanstack/start-server-core@1.169.42

@tanstack/react-start-server@1.167.49

@tanstack/start-plugin-core@1.171.52

@tanstack/react-start-rsc@0.1.62

@tanstack/start-client-core@1.170.37

@tanstack/react-router@1.170.44

... (truncated)

Commits

6b9fe6d ci: Version Packages (#8745)
32a3360 docs(skills): reference cross-package skills by intent ID (#8670)
caaf32d ci: Version Packages (#8733)
140efa4 ci: Version Packages (#8701)
4ff63eb ci: Version Packages (#8700)
80e2eab ci: Version Packages (#8661)
f243c61 Start stable (#8696)
94d6d8e response reconciliation (#7588)
c79c620 ci: Version Packages (#8580)
df8bbf2 docs: use new query methods (#7100)
See full diff in compare view

Updates fumadocs-core from 16.16.2 to 16.17.9

Release notes

Sourced from fumadocs-core's releases.

fumadocs@16.17.9

@fumadocs/base-ui@16.17.9

fumadocs-core@16.17.9

fumadocs-ui@16.17.9

Keep the theme on Astro navigations

The Astro RootProvider keeps the theme across navigations of the Astro client router.

Faster and more stable TOC

TOCItems of the normal and clerk styles no longer throws "is not iterable" when navigating between pages quickly.

The TOC track is measured once per change and drawn before paint: less work on navigation, no frame showing the previous page's track.

The normal style highlights the active range right after the page loads, not only after the first scroll.

Custom heading IDs containing quotes no longer crash the normal and clerk styles.

Fix #3754

Copy the page tree on deserialization

deserializePageTree() and useFumadocsLoader() no longer mutate the serialized page tree.

Keep the AsyncAPI data of generated pages

pageSchema keeps _asyncapi in the frontmatter of pages generated by Fumadocs AsyncAPI, like _openapi.

TanStack links with a hash or search params

Links like /docs/page#heading or /docs/page?q=1 preload and open the right page in the TanStack adapter.

Fix #3758

fumadocs@16.17.8

@fumadocs/base-ui@16.17.8

fumadocs-core@16.17.8

fumadocs-ui@16.17.8

Bring your own highlighter

Shiki stays the default, and isn't loaded when you highlight code with another highlighter.

fumadocs-core/highlight exports a Highlighter interface, created with createHighlights() from fumadocs-core/highlight/highlights (@pierre/highlights) or createShikiHighlighter() from fumadocs-core/highlight/shiki, override() creates one with other options.

rehypeCodeFromHighlighter from fumadocs-core/mdx-plugins/rehype-code.core highlights code blocks with a highlighter, or a function creating one with the transformers of Fumadocs. createRehypeCode is deprecated, Sätteri has rehypeCodeFromHighlighter in @fumadocs/satteri/rehype-code. Pass transformerTwoslash() in its transformers option to analyze Twoslash blocks in batches.

createServerCodeBlock() and createDynamicCodeBlock() in Fumadocs UI create code blocks from a highlighter. Dynamic code blocks are highlighted on the server too.

toJsx() from fumadocs-core/utils/hast-to-jsx converts hast into React elements like toJsxRuntime() of hast-util-to-jsx-runtime, MDX nodes through an evaluator, over 10x faster on highlighted code, whose spans render as one HTML string. Every Fumadocs renderer uses it, hast-util-to-jsx-runtime is no longer a dependency.

Twoslash loads the languages of code blocks in popups before highlighting, an unknown language there no longer fails the code block.

OpenAPI Standalone highlights code blocks with Highlights, in its server-rendered pages too.

The page factories of OpenAPI, GraphQL and AsyncAPI, type tables, createPython(), createPythonComponents(), localHtml() and the shadcn createSnippet() take a highlighter.

Deprecated shiki and shikiOptions of the API pages and shiki of type tables, pass a highlighter instead.

Integrations require fumadocs-core 16.17.8, the API pages and shadcn also require fumadocs-ui 16.17.8.

... (truncated)

Commits

c308d52 Version Packages (#3745)
bc26607 fix(mdx-remote): strip frontmatter
85280a5 docs: group integration guides by framework, align Astro page data (#3760)
5adee40 feat(astro): first-class Astro integration and docs (#3759)
4be3d58 fix(core): align tanstack link behaviours
71d1358 docs: add community Privatus Analytics integration (#3757)
da4ca7b fix(ui): better toc
4a7b6be fix(cli): correct route locations
2af7b68 fix(openapi, asyncapi): resolve index card links from the output directory (#...
5bf8134 feat(openapi): let renderParameterField render the default input with another...
Additional commits viewable in compare view

Updates fumadocs-mdx from 15.4.6 to 15.4.10

Release notes

Sourced from fumadocs-mdx's releases.

fumadocs-mdx@15.4.10

remarkInclude in fumadocs-core

<include> moved from Fumadocs MDX to fumadocs-core/mdx-plugins/remark-include, a unified plugin for any MDX or Markdown pipeline.

fumadocs-mdx/config still exports remarkInclude, forwarded from fumadocs-core.

getProcessor parses included files by their format, like a .md file included in an .mdx page.

Headings in an included section get IDs unique among the page's own headings.

Circular includes throw instead of hanging, and included code files no longer end with an empty line.

fumadocs-mdx requires fumadocs-core 16.17.8.

fumadocs-mdx@15.4.9

Turbopack loader warnings

Next.js 16.4 builds no longer warn Module not found: Can't resolve <dynamic> for the config imports of the loaders.

fumadocs-mdx@15.4.8

Imports across Windows drives

remarkImage and generated .source files import files on another drive or a UNC path by their absolute path.

Generated imports of files in dot-folders are prefixed with ./.

Fix #3723

Commits

97e62b9 Version Packages (#3733)
ccae3e0 fix(core): improve shiki compat
96a571b chore: bump deps
097b5cc fix: workaround ts 7.1 bugs
2fced92 feat(twoslash,story,typescript): use typescript 7.1
6e2a75e perf(core): improve transformer performance
4f5cbd3 perf(core): rewrite hast-util-to-jsx-runtime
f0d8981 feat(*): new highlighter API + highlights
bc86bbb fix(core,satteri): use served URLs of imported images in processed Markdown (...
cfdccc8 feat(core): support remark-include at core layer (#3740)
Additional commits viewable in compare view

Updates react from 19.3.0 to 19.3.1

Release notes

Sourced from react's releases.

19.3.1 (October 14th, 2026)

React Server Components

Improve transport protocol (#37845 by @unstubbable and @eps1lon)

Commits

61aa00d [19.3.x][Flight] Improve transport protocol (#37845)
See full diff in compare view

Updates react-dom from 19.3.0 to 19.3.1

Release notes

Sourced from react-dom's releases.

19.3.1 (October 14th, 2026)

React Server Components

Improve transport protocol (#37845 by @unstubbable and @eps1lon)

Commits

61aa00d [19.3.x][Flight] Improve transport protocol (#37845)
See full diff in compare view

Updates zod from 4.6.5 to 4.6.7

Release notes

Sourced from zod's releases.

v4.6.7

Commits:

b500a2ee95134f81d74da7911d7378dd2853d042 4.6.7

v4.6.6

Six malicious commits pushed to main on September 21 with a compromised git credential were reverted the same day in #6620 and have since been removed from the history of main. None were ever published to npm. The npm provenance for 4.6.6 names 284243fb, the pre-rewrite copy of 9c219833 with identical contents.

Commits:

0cd3af5e9f50ad11bbcd4407a46a21b8848ba574 docs: load the en locale directly in Zod Mini

9d5e60f162997b764b40d45aa02481888db50dea docs: import locales from zod/locales, not z.locales

34a626f307871ecbb0123947559328dc52ed5e3e docs: tighten the z.locales tree-shaking note

74304ce5b5796b5edb9a88ceb8e170b6ea3e82df release: stage npm versions instead of publishing them (#6622)

b2ef983e0711ff6517d6020b021071e2e5653efa docs: add Code for Japan to bronze sponsors

8fb2faf0584828a6a027d8279db36f6f52784462 docs: crop the Code for Japan logo and list it first in bronze

bacad518c41610d654658172d325874bf0ee6290 docs: square the Code for Japan logo to match the other bronze tiles

c42596bd1c87e941d7241d10e012c5c196adcc10 release: hold the run on the release-approval environment until the staged versions are approved (#6638)

a2ba4a67986a3e6b2b131be30084a2f460d9ea67 fix(types): declare record output and input as members, not base type arguments (#6645)

a0ebf970f2d752e5f58527cd2942ff48be4f46bd fix(v4): check array, set and map size bounds before parsing elements (#6652)

529f78dd9431b07f49647fee3aa0819b3f8b66b7 4.6.6

9c219833c3a3764fa1f1ea9c5ecec8254a63c0b1 ci: stage at verbose so a failed OIDC token exchange says why

Commits

b500a2e 4.6.7
9c21983 ci: stage at verbose so a failed OIDC token exchange says why
529f78d 4.6.6
a0ebf97 fix(v4): check array, set and map size bounds before parsing elements (#6652)
a2ba4a6 fix(types): declare record output and input as members, not base type argumen...
c42596b release: hold the run on the release-approval environment until the staged ve...
bacad51 docs: square the Code for Japan logo to match the other bronze tiles
8fb2faf docs: crop the Code for Japan logo and list it first in bronze
b2ef983 docs: add Code for Japan to bronze sponsors
74304ce release: stage npm versions instead of publishing them (#6622)
Additional commits viewable in compare view

Updates @axe-core/playwright from 4.13.0 to 4.14.0

Release notes

Sourced from @axe-core/playwright's releases.

Release 4.14.0

What's Changed

docs(webdriverjs): update chrome options in example by @G-Rath in dequelabs/axe-core-npm#1401

chore: merge master into develop by @attest-team-ci in dequelabs/axe-core-npm#1417

ci: create the release tag when publishing to production by @Garbee in dequelabs/axe-core-npm#1418

chore: bump brace-expansion by @dependabot[bot] in dequelabs/axe-core-npm#1419

chore: bump tar and lerna by @dependabot[bot] in dequelabs/axe-core-npm#1420

chore: migrate from npm workspaces to pnpm by @Garbee in dequelabs/axe-core-npm#1421

chore(deps): upgrade dependencies and audit engine floors in CI by @Garbee in dequelabs/axe-core-npm#1430

chore: bump chromedriver from 152.0.0 to 152.0.1 in the browser-drivers group by @dependabot[bot] in dequelabs/axe-core-npm#1435

chore: bump the webdriverio group with 6 updates by @dependabot[bot] in dequelabs/axe-core-npm#1434

chore: bump eslint from 10.8.1 to 10.9.0 by @dependabot[bot] in dequelabs/axe-core-npm#1437

fix: exempt axe-core from the pnpm release-age cooldown by @Garbee in dequelabs/axe-core-npm#1441

feat: Update axe-core to v4.14.0 by @attest-team-ci in dequelabs/axe-core-npm#1456

chore: bump postcss-selector-parser from 7.1.5 to 7.1.6 by @dependabot[bot] in dequelabs/axe-core-npm#1457

chore: bump puppeteer from 25.8.0 to 25.12.0 in the puppeteer group by @dependabot[bot] in dequelabs/axe-core-npm#1451

chore: bump proxy-addr from 2.0.7 to 2.0.8 by @dependabot[bot] in dequelabs/axe-core-npm#1458

chore: bump nx from 23.1.1 to 23.2.1 by @dependabot[bot] in dequelabs/axe-core-npm#1459

chore: bump adm-zip from 0.6.0 to 0.6.1 by @dependabot[bot] in dequelabs/axe-core-npm#1443

chore: bump the webdriverio group across 1 directory with 7 updates by @dependabot[bot] in dequelabs/axe-core-npm#1449

ci: provide pnpm via action-setup in release workflows by @Garbee in dequelabs/axe-core-npm#1461

chore: RC v4.14.0 by @attest-team-ci in dequelabs/axe-core-npm#1463

fix(cli): restore bin paths and lint published package tarballs (#1467) by @Garbee in dequelabs/axe-core-npm#1468

chore: release v4.14.0 by @axe-core in dequelabs/axe-core-npm#1479

New Contributors

@G-Rath made their first contribution in dequelabs/axe-core-npm#1401

Full Changelog: dequelabs/axe-core-npm@v4.13.0...v4.14.0

Changelog

Sourced from @axe-core/playwright's changelog.

4.14.0 (2026-10-06)

Bug Fixes

exempt axe-core from the pnpm release-age cooldown (#1441) (0bcb185), closes #1346 #1346 #1442 #1346

Features

Update axe-core to v4.14.0 (#1456) (dccfe7a)

Commits

2375f7f chore: release v4.14.0 (#1479)
d1531a9 fix(cli): restore bin paths and lint published package tarballs (#1467) (#1468)
8b31968 fix(cli): restore bin paths and lint published package tarballs (#1467)
556d23c chore: RC v4.14.0 (#1463)
74c9144 chore: RC v4.14.0
5617347 ci: provide pnpm via action-setup in release workflows (#1461)
6da92cb chore: bump the webdriverio group across 1 directory with 7 updates (#1449)
36e019f chore: bump adm-zip from 0.6.0 to 0.6.1 (#1443)
e820472 chore: bump nx from 23.1.1 to 23.2.1 (#1459)
4fe97e0 chore: bump proxy-addr from 2.0.7 to 2.0.8 (#1458)
Additional commits viewable in compare view

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Updates @cloudflare/vite-plugin from 2.0.0-beta.sha-52b0dc0e9 to 2.0.0-beta.v.9

Release notes

Sourced from @cloudflare/vite-plugin's releases.

@cloudflare/vite-plugin@2.0.0-beta.v.9

Minor Changes

#16573 91f0e03 Thanks @petebacondarwin! - Customize the full parsed Cloudflare configuration through the beta Vite plugin's config callback

The config option now accepts (loadedConfig: ParsedInputConfigWithWorker) => ParsedInputConfigWithWorker, allowing frameworks to customize account settings and Containers alongside the entry Worker. Both the loaded and returned configurations include a Worker, and ParsedInputConfigWithWorker is exported for framework authors. The returned configuration is revalidated, including resource relationships, before being used for development and recorded in the build output for preview and deployment.

This is a breaking change to the beta API: object overrides and callbacks that mutate or return partial Worker configurations must return a complete configuration instead. Copy the loaded configuration and any nested fields to preserve, for example config: (loadedConfig) => ({ ...loadedConfig, worker: { ...loadedConfig.worker, name: "my-worker", compatibilityDate: "2026-10-01" } }). Fields and arrays are replaced rather than deep-merged.

Patch Changes

#16635 76e18a8 Thanks @dependabot! - Update DEFAULT_COMPAT_DATE to 2026-11-01

Use the bundled workerd release's compatibility date by default when scaffolding new projects or when no compatibility date is configured.

Updated dependencies [91f0e03, effe4ed, 76e18a8, 76e18a8, 009ca6e]:

@cloudflare/config@0.29.1

@cloudflare/runtime-types@0.1.20

@cloudflare/build-output-utils@0.9.7

miniflare@5.20261101.0-beta

@cloudflare/vite-plugin@2.0.0-beta.v.8

Patch Changes

#16013 8b64bec Thanks @swalker326! - Fix Durable Object self-references in tests and container validation

Durable Object bindings that explicitly name the Worker itself now resolve to the test runner in @cloudflare/vitest-plugin, for both cloudflare.config.ts and Wrangler configuration files. Named Wrangler environments use their effective Worker name, keeping bindings to the base Worker external. Container validation also accepts these self-references, using the effective deployment name to distinguish local and external bindings.

Explicit binding targets remain intact during configuration conversion, so deploying with --name or a CI name override preserves the intended Durable Object target.

Updated dependencies [15fbaed, d8899ac]:

miniflare@5.20261023.3-beta

@cloudflare/runtime-types@0.1.19

@cloudflare/build-output-utils@0.9.6

@cloudflare/config@0.29.0

@cloudflare/vite-plugin@2.0.0-beta.v.7

Minor Changes
#16536 a95d647 Thanks @WalshyDev! - Support remote Analytics Engine bindings in local development

Setting remote: true on an Analytics Engine dataset now sends writeDataPoint() calls from wrangler dev and the Vite plugin to the real dataset. Without it, writes are still dropped locally.
{
  "analytics_engine_datasets": [
    {
      "binding": "EVENTS",
      "dataset": "my-dataset",
      "remote": true

... (truncated)

Changelog

Sourced from @cloudflare/vite-plugin's changelog.

2.0.0-beta.v.9

Minor Changes

#16573 91f0e03 Thanks @petebacondarwin! - Customize the full parsed Cloudflare configuration through the beta Vite plugin's config callback

The config option now accepts (loadedConfig: ParsedInputConfigWithWorker) => ParsedInputConfigWithWorker, allowing frameworks to customize account settings and Containers alongside the entry Worker. Both the loaded and returned configurations include a Worker, and ParsedInputConfigWithWorker is exported for framework authors. The returned configuration is revalidated, including resource relationships, before being used for development and recorded in the build output for preview and deployment.

This is a breaking change to the beta API: object overrides and callbacks that mutate or return partial Worker configurations must return a complete configuration instead. Copy the loaded configuration and any nested fields to preserve, for example config: (loadedConfig) => ({ ...loadedConfig, worker: { ...loadedConfig.worker, name: "my-worker", compatibilityDate: "2026-10-01" } }). Fields and arrays are replaced rather than deep-merged.

Patch Changes

#16635 76e18a8 Thanks @dependabot! - Update DEFAULT_COMPAT_DATE to 2026-11-01

Use the bundled workerd release's compatibility date by default when scaffolding new projects or when no compatibility date is configured.

Updated dependencies [91f0e03, effe4ed, 76e18a8, 76e18a8, 009ca6e]:

@cloudflare/config@0.29.1

@cloudflare/runtime-types@0.1.20

@cloudflare/build-output-utils@0.9.7

miniflare@5.20261101.0-beta

2.0.0-beta.v.8

Patch Changes

#16013 8b64bec Thanks @swalker326! - Fix Durable Object self-references in tests and container validation

Durable Object bindings that explicitly name the Worker itself now resolve to the test runner in @cloudflare/vitest-plugin, for both cloudflare.config.ts and Wrangler configuration files. Named Wrangler environments use their effective Worker name, keeping bindings to the base Worker external. Container validation also accepts these self-references, using the effective deployment name to distinguish local and external bindings.

Explicit binding targets remain intact during configuration conversion, so deploying with --name or a CI name override preserves the intended Durable Object target.

Updated dependencies [15fbaed, d8899ac]:

miniflare@5.20261023.3-beta

@cloudflare/runtime-types@0.1.19

@cloudflare/build-output-utils@0.9.6

@cloudflare/config@0.29.0

2.0.0-beta.v.7

Minor Changes
#16536 a95d647 Thanks @WalshyDev! - Support remote Analytics Engine bindings in local development

Setting remote: true on an Analytics Engine dataset now sends writeDataPoint() calls from wrangler dev and the Vite plugin to the real dataset. Without it, writes are still dropped locally.
{
  "analytics_engine_datasets": [
    {

... (truncated)

Commits

See full diff in compare view

Updates @tanstack/router-cli from 1.167.40 to 1.167.46

Release notes

Sourced from @tanstack/router-cli's releases.

@tanstack/router-cli@1.167.46

Patch Changes

Updated dependencies []:

@tanstack/router-generator@1.167.46

@tanstack/router-cli@1.167.45

Patch Changes

Updated dependencies []:

@tanstack/router-generator@... Description has been truncated

Bumps the website group with 21 updates in the /apps/website directory: | Package | From | To | | --- | --- | --- | | [@fontsource-variable/source-serif-4](https://github.com/fontsource/font-files/tree/HEAD/fonts/variable/source-serif-4) | `5.3.0` | `5.3.1` | | [@tanstack/react-router](https://github.com/TanStack/router/tree/HEAD/packages/react-router) | `1.170.41` | `1.170.46` | | [@tanstack/react-start](https://github.com/TanStack/router/tree/HEAD/packages/react-start) | `1.168.60` | `1.169.4` | | [fumadocs-core](https://github.com/fuma-nama/fumadocs) | `16.16.2` | `16.17.9` | | [fumadocs-mdx](https://github.com/fuma-nama/fumadocs) | `15.4.6` | `15.4.10` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.3.0` | `19.3.1` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.3.0` | `19.3.1` | | [zod](https://github.com/colinhacks/zod) | `4.6.5` | `4.6.7` | | [@axe-core/playwright](https://github.com/dequelabs/axe-core-npm) | `4.13.0` | `4.14.0` | | [@cloudflare/vite-plugin](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/vite-plugin-cloudflare) | `2.0.0-beta.sha-52b0dc0e9` | `2.0.0-beta.v.9` | | [@tanstack/router-cli](https://github.com/TanStack/router/tree/HEAD/packages/router-cli) | `1.167.40` | `1.167.46` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.20.4` | `26.6.6` | | [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.1.2` | `6.2.0` | | [cf](https://github.com/cloudflare/cf/tree/HEAD/packages/cli) | `1.0.0-beta.12` | `1.0.0-beta.26` | | [eslint](https://github.com/eslint/eslint) | `10.11.0` | `10.14.0` | | [globals](https://github.com/sindresorhus/globals) | `17.12.0` | `17.14.0` | | [playwright](https://github.com/microsoft/playwright) | `1.63.0` | `1.64.1` | | [shiki](https://github.com/shikijs/shiki/tree/HEAD/packages/shiki) | `4.5.0` | `4.6.0` | | [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `7.0.2` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.71.0` | `8.72.1` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.2` | `8.3.5` | Updates `@fontsource-variable/source-serif-4` from 5.3.0 to 5.3.1 - [Changelog](https://github.com/fontsource/font-files/blob/main/CHANGELOG.md) - [Commits](https://github.com/fontsource/font-files/commits/HEAD/fonts/variable/source-serif-4) Updates `@tanstack/react-router` from 1.170.41 to 1.170.46 - [Release notes](https://github.com/TanStack/router/releases) - [Changelog](https://github.com/TanStack/router/blob/main/packages/react-router/CHANGELOG.md) - [Commits](https://github.com/TanStack/router/commits/@tanstack/react-router@1.170.46/packages/react-router) Updates `@tanstack/react-start` from 1.168.60 to 1.169.4 - [Release notes](https://github.com/TanStack/router/releases) - [Changelog](https://github.com/TanStack/router/blob/main/packages/react-start/CHANGELOG.md) - [Commits](https://github.com/TanStack/router/commits/@tanstack/react-start@1.169.4/packages/react-start) Updates `fumadocs-core` from 16.16.2 to 16.17.9 - [Release notes](https://github.com/fuma-nama/fumadocs/releases) - [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs@16.16.2...fumadocs@16.17.9) Updates `fumadocs-mdx` from 15.4.6 to 15.4.10 - [Release notes](https://github.com/fuma-nama/fumadocs/releases) - [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs-mdx@15.4.6...fumadocs-mdx@15.4.10) Updates `react` from 19.3.0 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react) Updates `react-dom` from 19.3.0 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom) Updates `zod` from 4.6.5 to 4.6.7 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.6.5...v4.6.7) Updates `@axe-core/playwright` from 4.13.0 to 4.14.0 - [Release notes](https://github.com/dequelabs/axe-core-npm/releases) - [Changelog](https://github.com/dequelabs/axe-core-npm/blob/develop/CHANGELOG.md) - [Commits](dequelabs/axe-core-npm@v4.13.0...v4.14.0) Updates `@cloudflare/vite-plugin` from 2.0.0-beta.sha-52b0dc0e9 to 2.0.0-beta.v.9 - [Release notes](https://github.com/cloudflare/workers-sdk/releases) - [Changelog](https://github.com/cloudflare/workers-sdk/blob/main/packages/vite-plugin-cloudflare/CHANGELOG.md) - [Commits](https://github.com/cloudflare/workers-sdk/commits/@cloudflare/vite-plugin@2.0.0-beta.v.9/packages/vite-plugin-cloudflare) Updates `@tanstack/router-cli` from 1.167.40 to 1.167.46 - [Release notes](https://github.com/TanStack/router/releases) - [Changelog](https://github.com/TanStack/router/blob/main/packages/router-cli/CHANGELOG.md) - [Commits](https://github.com/TanStack/router/commits/@tanstack/router-cli@1.167.46/packages/router-cli) Updates `@types/node` from 22.20.4 to 26.6.6 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@vitejs/plugin-react` from 6.1.2 to 6.2.0 - [Release notes](https://github.com/vitejs/vite-plugin-react/releases) - [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.2.0/packages/plugin-react) Updates `cf` from 1.0.0-beta.12 to 1.0.0-beta.26 - [Release notes](https://github.com/cloudflare/cf/releases) - [Changelog](https://github.com/cloudflare/cf/blob/main/packages/cli/CHANGELOG.md) - [Commits](https://github.com/cloudflare/cf/commits/cf@1.0.0-beta.26/packages/cli) Updates `eslint` from 10.11.0 to 10.14.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.11.0...v10.14.0) Updates `globals` from 17.12.0 to 17.14.0 - [Release notes](https://github.com/sindresorhus/globals/releases) - [Commits](sindresorhus/globals@v17.12.0...v17.14.0) Updates `playwright` from 1.63.0 to 1.64.1 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.63.0...v1.64.1) Updates `shiki` from 4.5.0 to 4.6.0 - [Release notes](https://github.com/shikijs/shiki/releases) - [Commits](https://github.com/shikijs/shiki/commits/v4.6.0/packages/shiki) Updates `typescript` from 5.9.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v5.9.3...v7.0.2) Updates `typescript-eslint` from 8.71.0 to 8.72.1 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.1/packages/typescript-eslint) Updates `vite` from 8.3.2 to 8.3.5 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.3.5/packages/vite) --- updated-dependencies: - dependency-name: "@fontsource-variable/source-serif-4" dependency-version: 5.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: website - dependency-name: "@tanstack/react-router" dependency-version: 1.170.46 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: website - dependency-name: "@tanstack/react-start" dependency-version: 1.169.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: website - dependency-name: fumadocs-core dependency-version: 16.17.9 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: website - dependency-name: fumadocs-mdx dependency-version: 15.4.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: website - dependency-name: react dependency-version: 19.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: website - dependency-name: react-dom dependency-version: 19.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: website - dependency-name: zod dependency-version: 4.6.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: website - dependency-name: "@axe-core/playwright" dependency-version: 4.14.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: website - dependency-name: "@cloudflare/vite-plugin" dependency-version: 2.0.0-beta.v.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: website - dependency-name: "@tanstack/router-cli" dependency-version: 1.167.46 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: website - dependency-name: "@types/node" dependency-version: 26.6.6 dependency-type: direct:development update-type: version-update:semver-major dependency-group: website - dependency-name: "@vitejs/plugin-react" dependency-version: 6.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: website - dependency-name: cf dependency-version: 1.0.0-beta.26 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: website - dependency-name: eslint dependency-version: 10.14.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: website - dependency-name: globals dependency-version: 17.14.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: website - dependency-name: playwright dependency-version: 1.64.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: website - dependency-name: shiki dependency-version: 4.6.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: website - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: website - dependency-name: typescript-eslint dependency-version: 8.72.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: website - dependency-name: vite dependency-version: 8.3.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: website ... Signed-off-by: dependabot[bot] <support@github.com>

coderabbitai · 2026-11-05T09:18:03Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

Source mode: Auto
Repository: Unavailable
Branch: Unavailable
File: No configuration file from this repository applied
Commit: Unavailable
Layers: Organization UI
Review profile: CHILL
Plan: Advanced
Run ID: 921d07b1-7c8f-428c-be44-4a374a4a2c56

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

Trigger review

Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 5, 2026

Navigation Menu

Repository navigation

build(deps): bump the website group across 1 directory with 21 updates - #32

build(deps): bump the website group across 1 directory with 21 updates#32
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/apps/website/website-4cb45e86e3

dependabot Bot commented on behalf of github Nov 5, 2026

Uh oh!

coderabbitai Bot commented Nov 5, 2026

Review skipped

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Nov 5, 2026

@​tanstack/react-router@​1.170.46

Patch Changes

@​tanstack/react-router@​1.170.45

Patch Changes

1.170.46

Patch Changes

1.170.45

Patch Changes

1.170.44

Patch Changes

1.170.43

Patch Changes

1.170.42

Patch Changes

@​tanstack/react-start@​1.169.4

Patch Changes

@​tanstack/react-start@​1.169.3

Patch Changes

@​tanstack/react-start@​1.169.2

Patch Changes

1.169.4

Patch Changes

1.169.3

Patch Changes

1.169.2

Patch Changes

1.169.1

Patch Changes

fumadocs@16.17.9

Keep the theme on Astro navigations

Faster and more stable TOC

Copy the page tree on deserialization

Keep the AsyncAPI data of generated pages

TanStack links with a hash or search params

fumadocs@16.17.8

Bring your own highlighter

fumadocs-mdx@15.4.10

remarkInclude in fumadocs-core

fumadocs-mdx@15.4.9

Turbopack loader warnings

fumadocs-mdx@15.4.8

Imports across Windows drives

19.3.1 (October 14th, 2026)

React Server Components

19.3.1 (October 14th, 2026)

React Server Components

v4.6.7

Commits:

v4.6.6

Commits:

Release 4.14.0

What's Changed

New Contributors

4.14.0 (2026-10-06)

Bug Fixes

Features

@​cloudflare/vite-plugin@​2.0.0-beta.v.9

Minor Changes

Patch Changes

@​cloudflare/vite-plugin@​2.0.0-beta.v.8

Patch Changes

@​cloudflare/vite-plugin@​2.0.0-beta.v.7

Minor Changes

2.0.0-beta.v.9

Minor Changes

Patch Changes

2.0.0-beta.v.8

Patch Changes

2.0.0-beta.v.7

Minor Changes

@​tanstack/router-cli@​1.167.46

Patch Changes

@​tanstack/router-cli@​1.167.45

Patch Changes

Uh oh!

coderabbitai Bot commented Nov 5, 2026

Review skipped

Uh oh!

`@tanstack/react-router@1`.170.46

`@tanstack/react-router@1`.170.45

`@tanstack/react-start@1`.169.4

`@tanstack/react-start@1`.169.3

`@tanstack/react-start@1`.169.2

`remarkInclude` in `fumadocs-core`

`@cloudflare/vite-plugin@2`.0.0-beta.v.9

`@cloudflare/vite-plugin@2`.0.0-beta.v.8

`@cloudflare/vite-plugin@2`.0.0-beta.v.7

`@tanstack/router-cli@1`.167.46

`@tanstack/router-cli@1`.167.45