[dependabot]

Bumps the development group with 26 updates in the / directory:

Package	From	To
@playwright/test	1.63.0	1.64.0
@size-limit/file	14.1.0	14.2.0
@testing-library/dom	10.4.1	10.4.2
@types/node	26.5.1	26.6.5
@vitejs/plugin-react	6.1.1	6.1.2
concurrently	10.0.5	10.0.6
ctrf	0.3.0	0.5.0
eslint	10.10.0	10.12.0
eslint-config-next	16.3.5	16.4.0
eslint-plugin-sonarjs	4.2.0	4.2.2
fast-check	4.10.0	4.10.2
fumadocs-mdx	15.4.0	15.4.7
jsdom	30.0.1	30.1.2
junit-to-ctrf	0.0.14	0.1.0
knip	6.35.1	6.41.0
lint-staged	17.5.1	17.6.0
lockfile-lint	5.0.1	5.1.0
node-gyp	13.0.2	13.1.0
opencode-ai	1.18.30	1.19.0
playwright-ctrf-json-reporter	0.0.29	0.2.0
prettier	3.9.6	3.9.10
promptfoo	0.123.0	0.124.1
type-coverage	2.30.1	2.30.3
typescript-eslint	8.70.0	8.71.1
vitest	5.0.0	5.0.3
wait-on	9.1.0	9.5.1

Updates @playwright/test from 1.63.0 to 1.64.0

Release notes

Sourced from @​playwright/test's releases.

v1.64.0

🧰 WebMCP

New page.webmcp and frame.webmcp give access to the tools that a page registers through the experimental WebMCP browser API, so you can test them like any other part of your app:

const browser = await chromium.launch({ args: ['--enable-features=WebMCP'] });
const page = await browser.newPage();
await page.goto('https://example.com');
for (const tool of await page.webmcp.tools())
console.log(tool.name, tool.description);
const result = await page.webmcp.callTool('add', { a: 2, b: 40 });
console.log(result.content[0].text); // "42"

Playwright MCP also supports WebMCP by default, with page-defined tools offered to the agent as webmcp_<tool>. Pass --no-webmcp to opt out.

playwright-cli exposes them as well:

playwright-cli webmcp-list
playwright-cli webmcp-call search_catalog --params '{"query":"cats"}'

🎬 Better videos

Videos can now be recorded at a custom frame rate, and the decorations for actions are styled with plain CSS:

// playwright.config.ts
import { defineConfig } from '@playwright/test';
export default defineConfig({
use: {
video: {
mode: 'on',
size: { width: 1920, height: 1080 },
fps: 60,
show: {
actions: {
style: {
point: 'width: 20px; height: 20px; border-radius: 50%; background: red',
highlight: 'outline: 2px solid #333; background: rgba(0, 128, 255, .15)',
title: 'font-size: 16px',
},
},
},
},
</tr></table>

... (truncated)

Commits

• 606ecd8 cherry-pick(#43192): fix(locators): parse locators the way the client API bui...
• e4f872c cherry-pick(#43188): feat(api): expose asLocatorDescription via LocalUtils fo...
• f6a439e cherry-pick(#43189): docs(webmcp): expose WebMCP to all languages
• e2335c3 cherry-pick(#43174): fix(mcp): do not close the browser twice when the client...
• d2a436e cherry-pick(#43163): Revert "fix(blob): do not remove existing reports from o...
• a0c4b5e cherry-pick(#43175): feat(api): return language-specific locator code from re...
• 3f7d535 cherry-pick(#43131): docs: fix broken C# samples in API docs and handles guide
• 1cde64f cherry-pick(#43170): fix(locators): parse mixed role options
• 8851e72 cherry-pick(#43171): fix(locators): parse JavaScript escapes and regex classes
• dcc5065 cherry-pick(#43172): fix(locator): parse within and getByRef locators
• Additional commits viewable in compare view

Updates @size-limit/file from 14.1.0 to 14.2.0

Release notes

Sourced from @​size-limit/file's releases.

14.2.0

• Use exports for the default path on no main (by @​wahidrizka).
• Do not lower the process listener limit for small checks (by @​DeepanshuPal).
• Added types for plugins (by @​JounQin).

Changelog

Sourced from @​size-limit/file's changelog.

14.2.0

• Use exports for the default path on no main (by @​wahidrizka).
• Do not lower the process listener limit for small checks (by @​DeepanshuPal).
• Added types for plugins (by @​JounQin).

Commits

• 3deb559 Release 14.2.0 version
• c73a0f3 Update dependencies
• 30541b4 Let a config type the modify config options (#409)
• 46a50fc Export a Plugin type for the plugin API (#408)
• 990ce03 Do not lower the process listener limit for small checks (#406)
• f6827f7 Use exports for the default path when main is missing (#404)
• See full diff in compare view

Updates @testing-library/dom from 10.4.1 to 10.4.2

Release notes

Sourced from @​testing-library/dom's releases.

v10.4.2

10.4.2 (2026-09-13)

Bug Fixes

• deps: pin @​types/node to a TypeScript 4-compatible version (#1386) (6049cc0)

Commits

• 6049cc0 fix(deps): pin @​types/node to a TypeScript 4-compatible version (#1386)
• e395d5b Switch to trusted publishing (#1368)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​testing-library/dom since your current version.

Updates @types/node from 26.5.1 to 26.6.5

Commits

• See full diff in compare view

Updates @vitejs/plugin-react from 6.1.1 to 6.1.2

Release notes

Sourced from @​vitejs/plugin-react's releases.

plugin-react@6.1.2

Fix HMR for compound components (#1484)

Adding or removing a component from a compound component was not handled, creating stale updates. Doing this now triggers hmr invalidate on the file and propagates the invalidation to importers.

Fix compiler.logDiagnostics option not working (#1483)

With oxc-transform-react >= 0.148, the logDiagnostics was not working. This version fixes it and requires oxc-transform-react >= 0.152 as a peer dependency if you are using the compiler option. compiler.logDiagnostics option is now deprecated and should be swapped for the builtin compiler.reportDiagnostics.

Disable refresh for non-jsx with compiler enabled (fix #1478) (#1485)

When the compiler was enabled, TS files could trigger fast refresh which would cause runtime errors. The logic now follows what the builtin oxc plugin in Vite does.

Changelog

Sourced from @​vitejs/plugin-react's changelog.

6.1.2 (2026-10-05)

Fix HMR for compound components (#1484)

Adding or removing a component from a compound component was not handled, creating stale updates. Doing this now triggers hmr invalidate on the file and propagates the invalidation to importers.

Fix compiler.logDiagnostics option not working (#1483)

With oxc-transform-react >= 0.148, the logDiagnostics was not working. This version fixes it and requires oxc-transform-react >= 0.152 as a peer dependency if you are using the compiler option. compiler.logDiagnostics option is now deprecated and should be swapped for the builtin compiler.reportDiagnostics.

Disable refresh for non-jsx with compiler enabled (fix #1478) (#1485)

When the compiler was enabled, TS files could trigger fast refresh which would cause runtime errors. The logic now follows what the builtin oxc plugin in Vite does.

Commits

• ac47648 release: plugin-react@6.1.2 (#1491)
• 98277e7 fix(deps): update all non-major dependencies (#1486)
• 12eddea fix(hmr): better handle compound components (#1484)
• 3cfb1d1 fix(plugin-react): fix compiler.logDiagnostics (#1483)
• 6de9915 fix(plugin-react): disable refresh for non-jsx with compiler enabled (#1485)
• ee97d2f fix(deps): update all non-major dependencies (#1445)
• b0a014d chore: use Babel 8 for babel compiler playgrounds (#1460)
• 61b650f fix(deps): update react-related dependencies (#1452)
• 736efe2 chore(deps): update tsdown to v0.23 (#1451)
• See full diff in compare view

Updates concurrently from 10.0.5 to 10.0.6

Release notes

Sourced from concurrently's releases.

v10.0.6

What's Changed

• docs: update issue link to the transferred repo path by @​yzxcj797 in open-cli-tools/concurrently#609
• docs: update API example to ESM by @​Bibin-VR in open-cli-tools/concurrently#611
• fix: skip force-kill logging when no processes remain by @​imshunsuke in open-cli-tools/concurrently#616
• deps: update shell-quote to 1.12.0 by @​Abicodexi and @​Mayvis in open-cli-tools/concurrently#622

New Contributors

• @​yzxcj797 made their first contribution in open-cli-tools/concurrently#609
• @​Bibin-VR made their first contribution in open-cli-tools/concurrently#611
• @​imshunsuke made their first contribution in open-cli-tools/concurrently#616
• @​Abicodexi made their first contribution in open-cli-tools/concurrently#622

Full Changelog: open-cli-tools/concurrently@v10.0.5...v10.0.6

Commits

• d84bab6 10.0.6
• d26574e deps: update shell-quote to 1.12.0 (#622)
• 13bdff1 fix: skip force-kill logging when no processes remain (#616)
• b2580cc docs: update API example to ESM (#611)
• 3159edb docs: update issue link to the transferred repo path (#609)
• See full diff in compare view

Updates ctrf from 0.3.0 to 0.5.0

Release notes

Sourced from ctrf's releases.

v0.5.0

What's Changed

• chore(deps-dev): bump @​types/node from 26.2.0 to 26.4.0 by @​dependabot[bot] in ctrf-io/ctrf-js#72
• chore(deps-dev): bump @​biomejs/biome from 2.5.6 to 2.5.11 by @​dependabot[bot] in ctrf-io/ctrf-js#73
• chore(deps-dev): bump typedoc-plugin-markdown from 4.12.0 to 4.13.0 by @​dependabot[bot] in ctrf-io/ctrf-js#74
• chore(deps): bump fast-uri from 3.1.5 to 3.1.7 in the npm_and_yarn group across 1 directory by @​dependabot[bot] in ctrf-io/ctrf-js#77
• chore(deps-dev): bump @​vitest/coverage-v8 from 4.1.10 to 5.0.1 by @​dependabot[bot] in ctrf-io/ctrf-js#75
• chore(deps-dev): bump vitest from 4.1.10 to 5.0.2 by @​dependabot[bot] in ctrf-io/ctrf-js#76
• chore(deps): bump @​vitest/mocker from 4.1.10 to 5.0.2 in the npm_and_yarn group across 1 directory by @​dependabot[bot] in ctrf-io/ctrf-js#78
• chore(deps-dev): bump @​vitest/coverage-v8 from 5.0.1 to 5.0.2 by @​dependabot[bot] in ctrf-io/ctrf-js#80
• chore(deps-dev): bump typedoc-plugin-markdown from 4.13.0 to 4.13.1 by @​dependabot[bot] in ctrf-io/ctrf-js#79
• chore(deps): bump yargs from 18.1.0 to 18.2.0 by @​dependabot[bot] in ctrf-io/ctrf-js#81
• chore(deps-dev): bump @​types/node from 26.4.0 to 26.6.3 by @​dependabot[bot] in ctrf-io/ctrf-js#82
• chore(deps-dev): bump @​biomejs/biome from 2.5.11 to 2.5.14 by @​dependabot[bot] in ctrf-io/ctrf-js#83
• chore(deps): bump markdown-it from 14.3.0 to 14.3.2 in the npm_and_yarn group across 1 directory by @​dependabot[bot] in ctrf-io/ctrf-js#84
• Align retry history semantics by @​Ma11hewThomas in ctrf-io/ctrf-js#85
• Add versioned CTRF schema validation by @​Ma11hewThomas in ctrf-io/ctrf-js#86
• Support Test attemptId from CTRF 0.2.0 by @​Ma11hewThomas in ctrf-io/ctrf-js#87
• Update dependencies and resolve esbuild audit finding by @​Ma11hewThomas in ctrf-io/ctrf-js#88

Full Changelog: ctrf-io/ctrf-js@v0.3.0...v0.5.0

v0.4.0

Highlights

• Added validation support for all published CTRF specification versions: 0.0.1, 0.0.2, 0.0.3, 0.0.4, and 0.1.0.
• Added the latest schema selector, resolving to CTRF 0.1.0.
• Made schema loading patch-version aware and bundled each released schema snapshot.
• Added version selection to validate(), isValid(), and validateStrict().
• Aligned retry mechanisms with the CTRF specification: retry history now includes the initial attempt, excludes the final attempt, and enforces contiguous attempt numbering and retry counts.
• Added the AttemptHistoryEntry API and builder support, while retaining deprecated retry-attempt compatibility aliases.
• Updated builders, merge output, documentation, and generated API references.

This release publishes ctrf@0.4.0.

Thanks to @​Ma11hewThomas for the changes included in this release.

Commits

• 1c0c3d2 Update dependencies and resolve esbuild audit finding (#88)
• c7b2ede Support Test attemptId from CTRF 0.2.0 (#87)
• 7862c44 Add versioned CTRF schema validation (#86)
• 27beb53 Align retry history semantics (#85)
• 4089ba1 chore(deps): bump markdown-it (#84)
• 5cf9e1e chore(deps-dev): bump @​biomejs/biome from 2.5.11 to 2.5.14 (#83)
• dabed59 chore(deps-dev): bump @​types/node from 26.4.0 to 26.6.3 (#82)
• d5ebdf8 chore(deps): bump yargs from 18.1.0 to 18.2.0 (#81)
• 76ee79f chore(deps-dev): bump typedoc-plugin-markdown from 4.13.0 to 4.13.1 (#79)
• acd6e1b chore(deps-dev): bump @​vitest/coverage-v8 from 5.0.1 to 5.0.2 (#80)
• Additional commits viewable in compare view

Updates eslint from 10.10.0 to 10.12.0

Release notes

Sourced from eslint's releases.

v10.12.0

Features

• 4618052 feat: handle astral letters in new-cap (#21357) (sary)
• 4ec5168 feat: allow SourceCode#getText() to accept tokens and comments (#21340) (electrohyun)

Bug Fixes

• bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373) (Daniel Pinto)
• bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332) (xbinaryx)
• efc4d6b fix: astral letters in consistent-return, no-eval, no-invalid-this (#21360) (lumir)
• 93de066 fix: prefer-exponentiation-operator autofix for async function base (#21322) (Vladimir Babin)
• 02e34ff fix: add missing space after else in curly autofix (#21355) (Pixel)
• b14b8bc fix: correct id-length message for long private names (#21348) (Pixel)
• 69aac01 fix: support TSFunctionType in getFunctionHeadLoc (#21335) (xbinaryx)
• 686630e fix: no-loss-of-precision false positive with 0.e5 (#21337) (sethamus)

Documentation

• 67eb586 docs: Update README (GitHub Actions Bot)
• 5370d7e docs: clarify one-var separateRequires matches any require() call (#21192) (sethamus)
• 8816c1d docs: Update README (GitHub Actions Bot)
• 3d2e7ce docs: fix typo in no-unused-expressions documentation (#21346) (bytedoe)

Chores

• 152067f chore: update ecosystem plugins (#21362) (ESLint Bot)
• b56d58e chore: update github/codeql-action action to v4.38.2 (#21376) (renovate[bot])
• bfaea12 perf: cache normalized config globals per languageOptions (#21364) (James Ross)
• 322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369) (Francesco Trotta)
• d166567 chore: update dependency prettier to v3.9.9 (#21371) (renovate[bot])
• 29585ce chore: update dependency eslint-plugin-expect-type to ^0.7.0 (#21359) (renovate[bot])
• 39d79ba chore: update github/codeql-action action to v4.38.1 (#21354) (renovate[bot])
• 182a6e9 chore: update dependency prettier to v3.9.8 (#21352) (renovate[bot])
• f995127 chore: remove CLAUDE.md in favor of AGENTS.md (#21339) (Jarren)
• b95fb6c chore: update dependency prettier to v3.9.7 (#21347) (renovate[bot])
• 3782dd4 chore: update ecosystem plugins (#21342) (ESLint Bot)

v10.11.0

Features

• d136fa4 feat: object-shorthand handle quoted properties for ignoreConstructors (#21271) (Pavel)
• 397b3b8 feat: report unsafe labeled continue in no-unsafe-finally rule (#21316) (electrohyun)
• d3dd47f feat: only exempt new-cap built-ins that reference the global (#21290) (sethamus)

Bug Fixes

• 22b09f5 fix: ignore __proto__ properties in prefer-object-spread (#21311) (xbinaryx)
• b684bb1 fix: make TimePass.parse optional in types and docs (#21313) (ntnyq)
• 26d11bc fix: don't report __proto__ properties in object-shorthand (#21310) (xbinaryx)

Documentation

• 9ecfdc5 docs: note that --cache can serve stale results for cross-file rules (#21312) (bytedoe)
• 6c789ff docs: Update README (GitHub Actions Bot)
• 5997825 docs: clarify preserve-caught-error known limitation (#21294) (Akinyemi Toluwalase)

... (truncated)

Commits

• a438ec3 10.12.0
• 32a73f1 Build: changelog update for 10.12.0
• bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373)
• bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332)
• 152067f chore: update ecosystem plugins (#21362)
• b56d58e chore: update github/codeql-action action to v4.38.2 (#21376)
• 67eb586 docs: Update README
• bfaea12 perf: cache normalized config globals per languageOptions (#21364)
• 322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369)
• d166567 chore: update dependency prettier to v3.9.9 (#21371)
• Additional commits viewable in compare view

Updates eslint-config-next from 16.3.5 to 16.4.0

Release notes

Sourced from eslint-config-next's releases.

v16.4.0

Check out the 16.4 announcement post to get an overview of the changes.

Core Changes

• Show compiler plugin warning in more situations: #75682
• fix(scripts): correct typo in rm.mjs error message: #87015
• docs: improve clarity and punctuation in README: #86096
• Fix debug build paths Pages Router support entries: #93529
• bundle-analyzer: record historical snapshots on each analyze run: #93520
• fix: detect proxy.ts correctly with compound pageExtensions: #93246
• feat(turbopack): support false values for resolveAlias config: #93331

Misc Changes

• docs: correction to dynamicParams migration: #96624
• docs: proxy event argument: #96435
• docs: remove experimental note from runtime prefetching: #96615
• Preserve per-segment prefetching after dynamic navigation: #96583
• Rename static generation stream option to waitForAllReady: #96564
• Remove obsolete static generation plumbing: #96563
• [turbopack] Drop dead writes to exports: #96381
• [turbopack] Ignore writes to exports after a module.exports = {} writes: #96380
• [turbopack] Add test for sideEffects with optimizePackageImports: #96549
• [turbopack] Strip leading BOM before parsing CSS: #96678
• Upgrade React from cbb046ab-20260731 to 7dfc7ccd-20260803: #96550
• docs: use relative doc links in instant-navigation error pages: #96672
• Turbopack: terminate failed plugin worker threads: #96592
• Fix HTML-limited bot matching in prerender bypass rules: #96584
• [ci] Fix create_release_branch for new repo permissions: #96641
• test: skip action module instance deploy test: #96629
• docs: quote the dynamicParams build error in a blockquote: #96633
• [react-sync] Open pull requests as the bot that authors the commits: #96682
• [Bench] Fixes for pure Fizz bench: #96771
• Derive foreground cache revalidation from the consumer: #96731
• Fix race when navigating Back before hydration: #96252
• docs: present each Skill as steps in the AI agents guide: #96751
• Reuse completed cache entries for the rest of a request: #96727
• Upgrade React from 7dfc7ccd-20260803 to 11eddecd-20260805: #96735
• Remove WorkStore execution mode: #96674
• Remove cache revalidation execution mode reads: #96670
• Separate App Route render and prerender pipelines: #96662
• Remove App Page execution mode reads: #96660
• test: fix missing await in css-chunking test: #96725
• docs (Skills): stop assuming app/ at the root and port 3000: #96696
• Implement next/font BeforeResolvePlugins as ImportMappingReplacement: #95808
• Use Tailwind Turbopack loader in create-next-app: #96606
• docs: instant navigation quick start with an adoption prompt: #96663
• Separate App Page render and prerender pipelines: #96659
• Move App Router execution intent to entrypoints: #96640

... (truncated)

Commits

• e273d5b v16.4.0
• c3e76ad v16.4.0-canary.63
• ccf8c15 v16.4.0-canary.62
• 27ee721 v16.4.0-canary.61
• 907721a eslint-config-next: support ESLint 10 (#99628)
• cdf6866 v16.4.0-canary.60
• ba80ee4 v16.4.0-canary.59
• 1bcedb4 v16.4.0-canary.58
• 3683479 v16.4.0-canary.57
• a209429 v16.4.0-canary.56
• Additional commits viewable in compare view

Updates eslint-plugin-sonarjs from 4.2.0 to 4.2.2

Commits

• See full diff in compare view

Updates fast-check from 4.10.0 to 4.10.2

Release notes

Sourced from fast-check's releases.

v4.10.2

Fix interrupt plugin (throwing) [Code][Diff]

Fixes

• (PR#7333) Bug: Plugin interruptAfterTimeLimit crashes

Fix fake-timer compatibility in timeout and interrupt plugins

[Code][Diff]

Fixes

• (PR#7293) Bug: Capture timers for interruptAfterTimeLimit plugin
• (PR#7282) CI: Temporarily disable documentation updates until v5
• (PR#7279) Doc: Release note for 4.10.0

Changelog

Sourced from fast-check's changelog.

4.10.2

Fix interrupt plugin (throwing) [Code][Diff]

Fixes

• (PR#7333) Bug: Plugin interruptAfterTimeLimit crashes

4.10.1

Fix fake-timer compatibility in timeout and interrupt plugins [Code][Diff]

Fixes

• (PR#7292) Bug: Capture timer globals for timeout plugin
• (PR#7293) Bug: Capture timers for interruptAfterTimeLimit plugin
• (PR#7282) CI: Temporarily disable documentation updates until v5
• (PR#7279) Doc: Release note for 4.10.0

Commits

• c77afa8 v4.10.2
• 1e80f3a v4.10.2
• 2df3265 🐛 Plugin interruptAfterTimeLimit crashes (#7333)
• e93c6a8 🔖 Update CHANGELOG.md for fast-check@4.10.1 (#7294)
• 15744d0 🐛 Capture timers for interruptAfterTimeLimit plugin (#7293)
• fb2ea50 🐛 Capture timer globals for timeout plugin (#7292)
• See full diff in compare view

Updates fumadocs-mdx from 15.4.0 to 15.4.7

Release notes

Sourced from fumadocs-mdx's releases.

fumadocs-mdx@15.4.7

Markdown and search records from the authored source

remarkLLMs() and remarkStructure() of fumadocs-core slice their Markdown from the authored source like Sätteri, instead of stringifying the syntax tree. It is much faster, Markdown is no longer escaped or reformatted, and local images keep their addresses. Re-sync your search indexes to pick up the new records.

• Plugins record the Markdown of content they replace with replaceSource() or embedSource() from fumadocs-core/mdx-plugins/stringifier, in place of data._stringify, and add search records with data.structuredData. Nodes they insert otherwise are left out. A namespace limits an edit to the stringifiers of that namespace, like search for search records.
• Search records are always Markdown, also in Sätteri. filterElement replaces stringify.filterElement, it chooses the JSX elements kept as HTML tags (File, TypeTable, Callout and Card by default) that search dialogs render as components. Other elements and links are replaced by their content, images are removed, and an element on one line is recorded like a paragraph.
• Removed defaultStringifier() (use createStringifier()), StringifyOptions, allowedMdxAttributes, filterMdxAttributes, placeholder() (use mdxAsPlaceholder), and the stringify and mdast-util-to-markdown options of both plugins.
• Included content goes through the plugins like the document's own, Sätteri includes .md files as Markdown.
• <auto-files> shows its files in a code block, auto-type-table its props in a Markdown table, created by typeTableToMarkdown() from fumadocs-typescript.
• remarkShow() and fileGenerator() of fumadocs-docgen record their Markdown, generators receive the file to do the same.
• Records of fumadocs-obsidian resolve wikilinks, and leave comments, block IDs, callout markers and embeds out. Comments are removed before parsing, so they no longer split a paragraph.
• Pages of fumadocs-python compile from their MDX, so they have Markdown and search records.
• fumadocs-mdx, fumadocs-docgen and fumadocs-obsidian require fumadocs-core 16.17.0.

Fix #3662

fumadocs-mdx@15.4.6

Keep collection dir outside the project in file paths

When a collection's dir was outside the project (e.g. ../content/docs), the leading ../ was dropped from info.fullPath and absolutePath, so getText('raw') failed with ENOENT.

Fix #3623

fumadocs-mdx@15.4.5

Stop recrawling node_modules on every Vite config resolution

The config hook of fumadocs-mdx/vite walked the dependency tree below Fumadocs packages once per chain reaching a package, so a docs app with a few Fumadocs packages read ~10k package.json files (~0.9s) each time Vite resolved its config, which it does once per build environment.

The crawl now visits each package once, breadth-first, and still records the shortest chain to every CommonJS dependency (fumadocs-ui > @base-ui/react > use-sync-external-store/shim and friends). The result is memoized for the process until the package manager's install state changes, so a build with several environments crawls once.

fumadocs-mdx@15.4.4

Sort glob results for deterministic codegen

fumadocs-mdx's Node codegen now sorts glob-matched files before generating collections, so the output (and anything derived from getPages()) is stable across builds of unchanged content. The Vite codegen path was checked separately: Vite's own import.meta.glob already sorts matched files internally, so it did not need the same fix.

Commits

• e380a0d Version Packages (#3659)
• 5d9353b feat(core): better mixedbread search
• 097a544 feat(openapi): auth provider API
• 945b87a fix(core,satteri): optimize traverse & better search records
• 3bf9928 fix(ui): display fallback tree slidings correctly
• 433b586 fix(openapi): better code examples
• b221e1d fix(twoslash): better truncate & performance
• 48bf8c6 fix(openapi,typescript): render Markdown images, show the OAuth redirect URI
• cb7d92c docs: introduce new APIs
• 8f1ffb3 refactor(ui): use prose class for search result markdown
• Additional commits viewable in compare view

Updates jsdom from 30.0.1 to 30.1.2

Release notes

Sourced from jsdom's releases.

v30.1.2

• Updated URLs to support Unicode v18.0.0 in internationalized domain names.
• Reduced package size and memory use for CSS property definitions. (@​scttcper)
• Fixed severe slowdowns when building large DOM trees, including SVG charts with D3, which regressed in v30.1.0. (@​cmdcolin)
• Fixed exponentially slow reads of empty inherited CSS custom properties in deeply nested documents, and custom properties incorrectly inheriting past an initial reset. (@​scttcper)
• Fixed getComputedStyle() returning stale results after editing stylesheet declarations, selectors, or media queries, including in imported stylesheets.
• Fixed selector matching and computed styles after changes to form control checkedness, indeterminacy, selection, values, and validity, including during form resets and canceled clicks.
• Fixed computed styles for :focus, :focus-visible, :focus-within, and selectors containing them after focus changes, including inside focus and blur listeners. (Description has been truncated

[github-actions]

🔍 OpenCodeReview found 2 issue(s) in this PR.

• ✅ Successfully posted inline: 2 comment(s)

[github-actions]

@playwright/test is now 1.64.x, while direct playwright/playwright-core remain pinned at 1.63.0. This creates two Playwright versions and can make the test runner's bundled browser/protocol differ from helpers importing playwright, causing launch or browser-revision mismatches. Align all three versions (or keep the runner at 1.63.x).

Suggestion:

Suggested change

	"@playwright/test": "^1.64.0",
	"@playwright/test": "^1.63.0",

[github-actions]

eslint-config-next 16.4.0 is paired with next 16.3.8, leaving the framework and its official ESLint config on different minor releases. The config's peer/deprecated-rule behavior can reject installation or lint against APIs unavailable in 16.3. Align both versions (or keep the config at 16.3.x).

Suggestion:

Suggested change

	"eslint-config-next": "16.4.0",
	"eslint-config-next": "16.3.8",

[github-actions]

CI Coverage Report

• Coverage job: skipped
• PR test policy: success

Coverage artifact was not available for this run.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.