Skip to content

build(deps): bump the minor-patch group with 15 updates - #96

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/minor-patch-d125fce6e1
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/minor-patch-d125fce6e1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 21, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the minor-patch group with 15 updates:

Package From To
@posthog/react 1.10.6 1.11.0
@sentry/bun 10.74.0 10.75.0
@sentry/hono 10.74.0 10.75.0
@sentry/react 10.74.0 10.75.0
@tanstack/react-query 5.102.8 5.103.1
@tanstack/react-router 1.170.35 1.170.38
cn 0.2.6 0.3.0
hono 4.13.7 4.13.8
lucide-react 1.44.0 1.47.0
mapbox-gl 3.30.0 3.31.0
posthog-js 1.430.0 1.434.0
zod 4.6.2 4.6.5
@tanstack/router-plugin 1.168.37 1.168.40
@types/node 26.5.1 26.6.1
oxlint 1.82.0 1.83.0

Updates @posthog/react from 1.10.6 to 1.11.0

Release notes

Sourced from @​posthog/react's releases.

@​posthog/react@​1.11.0

1.11.0

Minor Changes

  • #4958 4a46fab Thanks @​marandaneto! - Add a resetError callback to React error-boundary fallbacks so applications can retry rendering without remounting the boundary. (2026-09-14)

Patch Changes

Changelog

Sourced from @​posthog/react's changelog.

1.11.0

Minor Changes

  • #4958 4a46fab Thanks @​marandaneto! - Add a resetError callback to React error-boundary fallbacks so applications can retry rendering without remounting the boundary. (2026-09-14)

Patch Changes

Commits
  • fcf1607 chore: update versions and lockfile [version bump]
  • 4a46fab feat(react): let error-boundary fallbacks reset rendering (#4958)
  • b6fa51b ci: enforce consistent seven-day dependency cooldowns (#4893)
  • d6df4f4 chore: add Knip audit and remove verified unused code (#4838)
  • See full diff in compare view

Updates @sentry/bun from 10.74.0 to 10.75.0

Release notes

Sourced from @​sentry/bun's releases.

10.75.0

Important Changes

  • feat(v10/effect): Capture errors through the Effect v4 ErrorReporter API (#24445)

    On Effect v4, Sentry.effectLayer now registers a Sentry ErrorReporter. Failures that pass through Effect.withErrorReporting, ErrorReporter.report or the built-in HTTP and RPC reporting boundaries are captured automatically, with ErrorReporter.ignore, ErrorReporter.severity and ErrorReporter.attributes annotations respected. Nothing changes on Effect v3.

Other Changes

  • feat(v10/core): Accept a CollectBehavior shorthand for dataCollection.httpHeaders (#24339)
  • fix(v10/browser): Release the XHR virtualError once the request completed (#24307)
  • fix(v10/browser-utils): Skip nullish LCP entries in vendored web-vitals (#24349)
  • fix(v10/bundler-plugins): Stamp debug IDs onto emitted source maps when disable-upload is set (#24332)
  • fix(v10/core): Don't instrument the SDK's own envelope requests (#24276)
  • fix(v10/nextjs): Only include emitted chunk directories in Turbopack sourcemap upload (#24295)
  • fix(v10/nitro): Import from nitro/h3 instead of h3 directly (#24444)
  • fix(v10/node-core): Don't recurse in logAndExitProcess on a broken stdio pipe (#24353)
  • fix(v10/nuxt): Detect Nitro version via the app's Nuxt dependency chain (#24025)
  • fix(v10/replay): Don't rewrite already-emitted nodes when syncing mirror attributes (#23588)

Bundle size 📦

Path Size
@​sentry/browser 27.18 KB
@​sentry/browser - with treeshaking flags 25.66 KB
@​sentry/browser (incl. Tracing) 45.6 KB
@​sentry/browser (incl. Tracing + Span Streaming) 47.34 KB
@​sentry/browser (incl. Tracing, Profiling) 50.24 KB
@​sentry/browser (incl. Tracing, Replay) 83.99 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 73.84 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 88.6 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 100.94 KB
@​sentry/browser (incl. Feedback) 43.94 KB
@​sentry/browser (incl. sendFeedback) 31.87 KB
@​sentry/browser (incl. FeedbackAsync) 36.88 KB
@​sentry/browser (incl. Metrics) 28.25 KB
@​sentry/browser (incl. Logs) 28.47 KB
@​sentry/browser (incl. Metrics & Logs) 29.15 KB
@​sentry/react 28.93 KB
@​sentry/react (incl. Tracing) 47.81 KB
@​sentry/vue 32.47 KB
@​sentry/vue (incl. Tracing) 47.55 KB
@​sentry/svelte 27.21 KB
CDN Bundle 29.53 KB
CDN Bundle (incl. Tracing) 47.52 KB
CDN Bundle (incl. Logs, Metrics) 31.07 KB
CDN Bundle (incl. Tracing, Logs, Metrics) 48.81 KB
CDN Bundle (incl. Replay, Logs, Metrics) 69.49 KB
CDN Bundle (incl. Tracing, Replay) 84.22 KB

... (truncated)

Changelog

Sourced from @​sentry/bun's changelog.

10.75.0

Important Changes

  • feat(v10/effect): Capture errors through the Effect v4 ErrorReporter API (#24445)

    On Effect v4, Sentry.effectLayer now registers a Sentry ErrorReporter. Failures that pass through Effect.withErrorReporting, ErrorReporter.report or the built-in HTTP and RPC reporting boundaries are captured automatically, with ErrorReporter.ignore, ErrorReporter.severity and ErrorReporter.attributes annotations respected. Nothing changes on Effect v3.

Other Changes

  • feat(v10/core): Accept a CollectBehavior shorthand for dataCollection.httpHeaders (#24339)
  • fix(v10/browser): Release the XHR virtualError once the request completed (#24307)
  • fix(v10/browser-utils): Skip nullish LCP entries in vendored web-vitals (#24349)
  • fix(v10/bundler-plugins): Stamp debug IDs onto emitted source maps when disable-upload is set (#24332)
  • fix(v10/core): Don't instrument the SDK's own envelope requests (#24276)
  • fix(v10/nextjs): Only include emitted chunk directories in Turbopack sourcemap upload (#24295)
  • fix(v10/nitro): Import from nitro/h3 instead of h3 directly (#24444)
  • fix(v10/node-core): Don't recurse in logAndExitProcess on a broken stdio pipe (#24353)
  • fix(v10/nuxt): Detect Nitro version via the app's Nuxt dependency chain (#24025)
  • fix(v10/replay): Don't rewrite already-emitted nodes when syncing mirror attributes (#23588)
Commits
  • 9ffb58c release: 10.75.0
  • 664c906 meta(changelog): Update changelog for 10.75.0 (#24446)
  • e3e7acc fix(v10/nitro): Import from nitro/h3 instead of h3 directly (#24444)
  • 4bb51d1 feat(v10/effect): Capture errors through the Effect v4 ErrorReporter API (#24...
  • 738f17e fix(v10/core): Don't instrument the SDK's own envelope requests (#24276)
  • f63c56a fix(v10/node-core): Don't recurse in logAndExitProcess on a broken stdio pipe...
  • 0e24355 fix(v10/browser-utils): Skip nullish LCP entries in vendored web-vitals (#24349)
  • ac3ea13 fix(v10/nuxt): Detect Nitro version via the app's Nuxt dependency chain (#24025)
  • 9235d43 fix(v10/nextjs): Only include emitted chunk directories in Turbopack sourcema...
  • e2deda0 feat(v10/core): Accept CollectBehavior shorthand for `dataCollection.httpHe...
  • Additional commits viewable in compare view

Updates @sentry/hono from 10.74.0 to 10.75.0

Release notes

Sourced from @​sentry/hono's releases.

10.75.0

Important Changes

  • feat(v10/effect): Capture errors through the Effect v4 ErrorReporter API (#24445)

    On Effect v4, Sentry.effectLayer now registers a Sentry ErrorReporter. Failures that pass through Effect.withErrorReporting, ErrorReporter.report or the built-in HTTP and RPC reporting boundaries are captured automatically, with ErrorReporter.ignore, ErrorReporter.severity and ErrorReporter.attributes annotations respected. Nothing changes on Effect v3.

Other Changes

  • feat(v10/core): Accept a CollectBehavior shorthand for dataCollection.httpHeaders (#24339)
  • fix(v10/browser): Release the XHR virtualError once the request completed (#24307)
  • fix(v10/browser-utils): Skip nullish LCP entries in vendored web-vitals (#24349)
  • fix(v10/bundler-plugins): Stamp debug IDs onto emitted source maps when disable-upload is set (#24332)
  • fix(v10/core): Don't instrument the SDK's own envelope requests (#24276)
  • fix(v10/nextjs): Only include emitted chunk directories in Turbopack sourcemap upload (#24295)
  • fix(v10/nitro): Import from nitro/h3 instead of h3 directly (#24444)
  • fix(v10/node-core): Don't recurse in logAndExitProcess on a broken stdio pipe (#24353)
  • fix(v10/nuxt): Detect Nitro version via the app's Nuxt dependency chain (#24025)
  • fix(v10/replay): Don't rewrite already-emitted nodes when syncing mirror attributes (#23588)

Bundle size 📦

Path Size
@​sentry/browser 27.18 KB
@​sentry/browser - with treeshaking flags 25.66 KB
@​sentry/browser (incl. Tracing) 45.6 KB
@​sentry/browser (incl. Tracing + Span Streaming) 47.34 KB
@​sentry/browser (incl. Tracing, Profiling) 50.24 KB
@​sentry/browser (incl. Tracing, Replay) 83.99 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 73.84 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 88.6 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 100.94 KB
@​sentry/browser (incl. Feedback) 43.94 KB
@​sentry/browser (incl. sendFeedback) 31.87 KB
@​sentry/browser (incl. FeedbackAsync) 36.88 KB
@​sentry/browser (incl. Metrics) 28.25 KB
@​sentry/browser (incl. Logs) 28.47 KB
@​sentry/browser (incl. Metrics & Logs) 29.15 KB
@​sentry/react 28.93 KB
@​sentry/react (incl. Tracing) 47.81 KB
@​sentry/vue 32.47 KB
@​sentry/vue (incl. Tracing) 47.55 KB
@​sentry/svelte 27.21 KB
CDN Bundle 29.53 KB
CDN Bundle (incl. Tracing) 47.52 KB
CDN Bundle (incl. Logs, Metrics) 31.07 KB
CDN Bundle (incl. Tracing, Logs, Metrics) 48.81 KB
CDN Bundle (incl. Replay, Logs, Metrics) 69.49 KB
CDN Bundle (incl. Tracing, Replay) 84.22 KB

... (truncated)

Changelog

Sourced from @​sentry/hono's changelog.

10.75.0

Important Changes

  • feat(v10/effect): Capture errors through the Effect v4 ErrorReporter API (#24445)

    On Effect v4, Sentry.effectLayer now registers a Sentry ErrorReporter. Failures that pass through Effect.withErrorReporting, ErrorReporter.report or the built-in HTTP and RPC reporting boundaries are captured automatically, with ErrorReporter.ignore, ErrorReporter.severity and ErrorReporter.attributes annotations respected. Nothing changes on Effect v3.

Other Changes

  • feat(v10/core): Accept a CollectBehavior shorthand for dataCollection.httpHeaders (#24339)
  • fix(v10/browser): Release the XHR virtualError once the request completed (#24307)
  • fix(v10/browser-utils): Skip nullish LCP entries in vendored web-vitals (#24349)
  • fix(v10/bundler-plugins): Stamp debug IDs onto emitted source maps when disable-upload is set (#24332)
  • fix(v10/core): Don't instrument the SDK's own envelope requests (#24276)
  • fix(v10/nextjs): Only include emitted chunk directories in Turbopack sourcemap upload (#24295)
  • fix(v10/nitro): Import from nitro/h3 instead of h3 directly (#24444)
  • fix(v10/node-core): Don't recurse in logAndExitProcess on a broken stdio pipe (#24353)
  • fix(v10/nuxt): Detect Nitro version via the app's Nuxt dependency chain (#24025)
  • fix(v10/replay): Don't rewrite already-emitted nodes when syncing mirror attributes (#23588)
Commits
  • 9ffb58c release: 10.75.0
  • 664c906 meta(changelog): Update changelog for 10.75.0 (#24446)
  • e3e7acc fix(v10/nitro): Import from nitro/h3 instead of h3 directly (#24444)
  • 4bb51d1 feat(v10/effect): Capture errors through the Effect v4 ErrorReporter API (#24...
  • 738f17e fix(v10/core): Don't instrument the SDK's own envelope requests (#24276)
  • f63c56a fix(v10/node-core): Don't recurse in logAndExitProcess on a broken stdio pipe...
  • 0e24355 fix(v10/browser-utils): Skip nullish LCP entries in vendored web-vitals (#24349)
  • ac3ea13 fix(v10/nuxt): Detect Nitro version via the app's Nuxt dependency chain (#24025)
  • 9235d43 fix(v10/nextjs): Only include emitted chunk directories in Turbopack sourcema...
  • e2deda0 feat(v10/core): Accept CollectBehavior shorthand for `dataCollection.httpHe...
  • Additional commits viewable in compare view

Updates @sentry/react from 10.74.0 to 10.75.0

Release notes

Sourced from @​sentry/react's releases.

10.75.0

Important Changes

  • feat(v10/effect): Capture errors through the Effect v4 ErrorReporter API (#24445)

    On Effect v4, Sentry.effectLayer now registers a Sentry ErrorReporter. Failures that pass through Effect.withErrorReporting, ErrorReporter.report or the built-in HTTP and RPC reporting boundaries are captured automatically, with ErrorReporter.ignore, ErrorReporter.severity and ErrorReporter.attributes annotations respected. Nothing changes on Effect v3.

Other Changes

  • feat(v10/core): Accept a CollectBehavior shorthand for dataCollection.httpHeaders (#24339)
  • fix(v10/browser): Release the XHR virtualError once the request completed (#24307)
  • fix(v10/browser-utils): Skip nullish LCP entries in vendored web-vitals (#24349)
  • fix(v10/bundler-plugins): Stamp debug IDs onto emitted source maps when disable-upload is set (#24332)
  • fix(v10/core): Don't instrument the SDK's own envelope requests (#24276)
  • fix(v10/nextjs): Only include emitted chunk directories in Turbopack sourcemap upload (#24295)
  • fix(v10/nitro): Import from nitro/h3 instead of h3 directly (#24444)
  • fix(v10/node-core): Don't recurse in logAndExitProcess on a broken stdio pipe (#24353)
  • fix(v10/nuxt): Detect Nitro version via the app's Nuxt dependency chain (#24025)
  • fix(v10/replay): Don't rewrite already-emitted nodes when syncing mirror attributes (#23588)

Bundle size 📦

Path Size
@​sentry/browser 27.18 KB
@​sentry/browser - with treeshaking flags 25.66 KB
@​sentry/browser (incl. Tracing) 45.6 KB
@​sentry/browser (incl. Tracing + Span Streaming) 47.34 KB
@​sentry/browser (incl. Tracing, Profiling) 50.24 KB
@​sentry/browser (incl. Tracing, Replay) 83.99 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 73.84 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 88.6 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 100.94 KB
@​sentry/browser (incl. Feedback) 43.94 KB
@​sentry/browser (incl. sendFeedback) 31.87 KB
@​sentry/browser (incl. FeedbackAsync) 36.88 KB
@​sentry/browser (incl. Metrics) 28.25 KB
@​sentry/browser (incl. Logs) 28.47 KB
@​sentry/browser (incl. Metrics & Logs) 29.15 KB
@​sentry/react 28.93 KB
@​sentry/react (incl. Tracing) 47.81 KB
@​sentry/vue 32.47 KB
@​sentry/vue (incl. Tracing) 47.55 KB
@​sentry/svelte 27.21 KB
CDN Bundle 29.53 KB
CDN Bundle (incl. Tracing) 47.52 KB
CDN Bundle (incl. Logs, Metrics) 31.07 KB
CDN Bundle (incl. Tracing, Logs, Metrics) 48.81 KB
CDN Bundle (incl. Replay, Logs, Metrics) 69.49 KB
CDN Bundle (incl. Tracing, Replay) 84.22 KB

... (truncated)

Changelog

Sourced from @​sentry/react's changelog.

10.75.0

Important Changes

  • feat(v10/effect): Capture errors through the Effect v4 ErrorReporter API (#24445)

    On Effect v4, Sentry.effectLayer now registers a Sentry ErrorReporter. Failures that pass through Effect.withErrorReporting, ErrorReporter.report or the built-in HTTP and RPC reporting boundaries are captured automatically, with ErrorReporter.ignore, ErrorReporter.severity and ErrorReporter.attributes annotations respected. Nothing changes on Effect v3.

Other Changes

  • feat(v10/core): Accept a CollectBehavior shorthand for dataCollection.httpHeaders (#24339)
  • fix(v10/browser): Release the XHR virtualError once the request completed (#24307)
  • fix(v10/browser-utils): Skip nullish LCP entries in vendored web-vitals (#24349)
  • fix(v10/bundler-plugins): Stamp debug IDs onto emitted source maps when disable-upload is set (#24332)
  • fix(v10/core): Don't instrument the SDK's own envelope requests (#24276)
  • fix(v10/nextjs): Only include emitted chunk directories in Turbopack sourcemap upload (#24295)
  • fix(v10/nitro): Import from nitro/h3 instead of h3 directly (#24444)
  • fix(v10/node-core): Don't recurse in logAndExitProcess on a broken stdio pipe (#24353)
  • fix(v10/nuxt): Detect Nitro version via the app's Nuxt dependency chain (#24025)
  • fix(v10/replay): Don't rewrite already-emitted nodes when syncing mirror attributes (#23588)
Commits
  • 9ffb58c release: 10.75.0
  • 664c906 meta(changelog): Update changelog for 10.75.0 (#24446)
  • e3e7acc fix(v10/nitro): Import from nitro/h3 instead of h3 directly (#24444)
  • 4bb51d1 feat(v10/effect): Capture errors through the Effect v4 ErrorReporter API (#24...
  • 738f17e fix(v10/core): Don't instrument the SDK's own envelope requests (#24276)
  • f63c56a fix(v10/node-core): Don't recurse in logAndExitProcess on a broken stdio pipe...
  • 0e24355 fix(v10/browser-utils): Skip nullish LCP entries in vendored web-vitals (#24349)
  • ac3ea13 fix(v10/nuxt): Detect Nitro version via the app's Nuxt dependency chain (#24025)
  • 9235d43 fix(v10/nextjs): Only include emitted chunk directories in Turbopack sourcema...
  • e2deda0 feat(v10/core): Accept CollectBehavior shorthand for `dataCollection.httpHe...
  • Additional commits viewable in compare view

Updates @tanstack/react-query from 5.102.8 to 5.103.1

Release notes

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-devtools@​5.103.1

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.103.1
    • @​tanstack/react-query@​5.103.1

@​tanstack/react-query-next-experimental@​5.103.1

Patch Changes

  • Updated dependencies []:
    • @​tanstack/react-query@​5.103.1

@​tanstack/react-query-persist-client@​5.103.1

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.103.1
    • @​tanstack/react-query@​5.103.1

@​tanstack/react-query@​5.103.1

Patch Changes

@​tanstack/react-query-devtools@​5.103.0

Patch Changes

  • #11501 9567367 - Declare dependencies used by the published devtools source and type declarations so they resolve with strict package managers. Keep runtime dependencies bundled in the compiled devtools.

    Declare the React types used by React Query Devtools as a peer dependency, compatible with React 18 and 19.

  • Updated dependencies [9567367]:

    • @​tanstack/query-devtools@​5.103.0
    • @​tanstack/react-query@​5.103.0

@​tanstack/react-query-next-experimental@​5.103.0

Patch Changes

  • Updated dependencies []:
    • @​tanstack/react-query@​5.103.0

@​tanstack/react-query-persist-client@​5.103.0

Patch Changes

  • Updated dependencies [4c7cdbb]:
    • @​tanstack/query-persist-client-core@​5.103.0
    • @​tanstack/react-query@​5.103.0

... (truncated)

Changelog

Sourced from @​tanstack/react-query's changelog.

5.103.1

Patch Changes

5.103.0

Patch Changes

Commits
  • c08f576 ci: Version Packages (#11511)
  • 19ccf27 ci: Version Packages (#11339)
  • 2da46cd chore(*): use eslint description syntax for grandfathered 'no-restricted-synt...
  • 58ad3e2 fix: isolate TypeScript test output (#11503)
  • d63afc7 Simplifed query methods/internal tests new lint (#11347)
  • 23fbdc3 test({react,preact,solid,angular}-query): remove 'fromGenericOptionsQueryFn' ...
  • 50680b9 test({react,preact,solid,svelte}-query,angular-query-experimental): rename 'm...
  • 0b326b6 test({react,preact}-query/useMutation): add tests for 'MutationFunctionContex...
  • a1119e5 ref(hydration): remove outdated dehydratedAt fallback (#11436)
  • 1a51bb8 docs(*): clarify 'Promise.all' only waits for all mutateAsync calls when they...
  • Additional commits viewable in compare view

Updates @tanstack/react-router from 1.170.35 to 1.170.38

Release notes

Sourced from @​tanstack/react-router's releases.

@​tanstack/react-router@​1.170.38

Patch Changes

@​tanstack/react-router@​1.170.37

Patch Changes

  • #8418 e561fa1 - deepEqual now takes its flags as positional arguments — deepEqual(a, b, partial?, explicitUndefined?) — instead of an options object. The router's hot callers (Link option stabilization and active-state checks, matchRoute) no longer allocate an options object per comparison, and the comparator reads two booleans instead of a polymorphic object. explicitUndefined replaces ignoreUndefined: false. deepEqual is an internal helper; it stays exported for compatibility of two-argument calls.

  • #8419 a1c8d1a - resolvePath (internal helper) now takes positional arguments — resolvePath(base, to, trailingSlash?, cache?) — so buildLocation and matchRoute no longer allocate an options object per path resolution.

  • #8204 cbbfbe3 - Stream large deferred SSR hydration payloads through a backpressure-aware router transport, fail known setup errors before response creation, and close cancelled or expired transforms safely.

    Start now cancels discarded middleware and HEAD response bodies, including plain streams and derived branches.

    Server-function raw streams share one ordered response. Arbitrary or sequential consumption can require potentially unbounded buffering of unread data on the client. Cancelling one raw stream discards it locally, while aborting the whole call cancels the response and server work. Consume streams concurrently, cancel unused streams promptly, or use separate calls when independent backpressure is required. A raw stream that exceeds its unread-byte limit now fails alone; sibling streams and the JSON result keep flowing.

    The JSON wire shape of a RawStream server-function argument changed. Clients and servers must run matching versions for requests that pass a RawStream.

    The frame-protocol constants (FRAME_TYPE_*, MAX_FRAME_PAYLOAD_SIZE, MAX_FRAMED_STREAMS) moved from the @tanstack/start-client-core root to the @tanstack/start-client-core/client-rpc subpath.

    Router requests whose Accept header allows neither text/html nor */* now receive 406 Not Acceptable instead of 500.

    Framework adapters share the body <Scripts> composition (getSsrBodyScriptParts, composeSsrBodyScripts) and the eager HTML response wrapper (renderSsrHtmlResponse) from @tanstack/router-core.

    Solid SSR now emits one document type and renders late lazy errors through route boundaries. A Solid <Await> without a fallback no longer holds the streamed shell; it renders inside the nearest <Suspense> boundary like React and Vue, and now renders falsy resolved values.

    Static server functions decode cached RawStream values with the client deserializer plugins.

    SSR Query integrations now keep request cleanup and stream ownership aligned with the router lifecycle.

  • #8420 8e164d2 - useLinkProps no longer calls through an internal wrapper. The host element Link renders on is an @internal overload parameter that is stripped from the published declarations, so the public useLinkProps(options, forwardedRef?) signature is unchanged.

  • Updated dependencies [bc80866, e561fa1, cbbfbe3, a1c8d1a, cbbfbe3, a0b2ad9, 1ca361b]:

    • @​tanstack/router-core@​1.171.31

@​tanstack/react-router@​1.170.36

Patch Changes

  • #8390 b747fb8 - Keep the Link location cache out of server bundles: buildLocation only creates, reads and writes it when isServer is false. Render React Links on the server without the extra prop copies and the forwarded-ref hook. Link SSR rendering is 20-40% faster in the Link benchmarks and the React Start SSR request loop about 7% faster.

    React activeProps and inactiveProps now follow one precedence rule on every link, including links whose destination is blocked for using a disallowed scheme: state props override element props, ref and event handlers, while href, disabled and target stay controlled by the router. Previously a blocked link ignored a ref or handler from its inactive props.

    React Link and useLinkProps split router options from element props with one key set on the client and the server. Element props pass through as given: external links forward them verbatim, falsy values included, and useLinkProps now returns children for router-controlled links as it already did for external ones.

  • #8324 6387d58 - Reuse hydration snapshot getters to avoid unnecessary store-instance effect updates when Links and other hydration-aware components rerender.

  • #8318 9b2adaf - Allow active and inactive Link props to override base element props in React and Solid while preserving class/style merging. Keep React's href, target, and disabled values controlled by routing options. Preserve Vue object and nested-array class bindings, including reactive updates and server rendering, without mutating cached bindings during VNode normalization.

... (truncated)

Changelog

Sourced from @​tanstack/react-router's changelog.

1.170.38

Patch Changes

1.170.37

Patch Changes

  • #8418 e561fa1 - deepEqual now takes its flags as positional arguments — deepEqual(a, b, partial?, explicitUndefined?) — instead of an options object. The router's hot callers (Link option stabilization and active-state checks, matchRoute) no longer allocate an options object per comparison, and the comparator reads two booleans instead of a polymorphic object. explicitUndefined replaces ignoreUndefined: false. deepEqual is an internal helper; it stays exported for compatibility of two-argument calls.

  • #8419 a1c8d1a - resolvePath (internal helper) now takes positional arguments — resolvePath(base, to, trailingSlash?, cache?) — so buildLocation and matchRoute no longer allocate an options object per path resolution.

  • #8204 cbbfbe3 - Stream large deferred SSR hydration payloads through a backpressure-aware router transport, fail known setup errors before response creation, and close cancelled or expired transforms safely.

    Start now cancels discarded middleware and HEAD response bodies, including plain streams and derived branches.

    Server-function raw streams share one ordered response. Arbitrary or sequential consumption can require potentially unbounded buffering of unread data on the client. Cancelling one raw stream discards it locally, while aborting the whole call cancels the response and server work. Consume streams concurrently, cancel unused streams promptly, or use separate calls when independent backpressure is required. A raw stream that exceeds its unread-byte limit now fails alone; sibling streams and the JSON result keep flowing.

    The JSON wire shape of a RawStream server-function argument changed. Clients and servers must run matching versions for requests that pass a RawStream.

    The frame-protocol constants (FRAME_TYPE_*, MAX_FRAME_PAYLOAD_SIZE, MAX_FRAMED_STREAMS) moved from the @tanstack/start-client-core root to the @tanstack/start-client-core/client-rpc subpath.

    Router requests whose Accept header allows neither text/html nor */* now receive 406 Not Acceptable instead of 500.

    Framework adapters share the body <Scripts> composition (getSsrBodyScriptParts, composeSsrBodyScripts) and the eager HTML response wrapper (renderSsrHtmlResponse) from @tanstack/router-core.

    Solid SSR now emits one document type and renders late lazy errors through route boundaries. A Solid <Await> without a fallback no longer holds the streamed shell; it renders inside the nearest <Suspense> boundary like React and Vue, and now renders falsy resolved values.

    Static server functions decode cached RawStream values with the client deserializer plugins.

    SSR Query integrations now keep request cleanup and stream ownership aligned with the router lifecycle.

  • #8420 8e164d2 - useLinkProps no longer calls through an internal wrapper. The host element Link renders on is an @internal overload parameter that is stripped from the published declarations, so the public useLinkProps(options, forwardedRef?) signature is unchanged.

  • Updated dependencies [bc80866, e561fa1, cbbfbe3, a1c8d1a, cbbfbe3, a0b2ad9, 1ca361b]:

    • @​tanstack/router-core@​1.171.31

1.170.36

Patch Changes

  • #8390 b747fb8 - Keep the Link location cache out of server bundles: buildLocation only creates, reads and writes it when isServer is false. Render React Links on the server without the extra prop copies and the forwarded-ref hook. Link SSR rendering is 20-40% faster in the Link benchmarks and the React Start SSR request loop about 7% faster.

    React activeProps and inactiveProps now follow one precedence rule on every link, including links whose destination is blocked for using a disallowed scheme: state props override element props, ref and event handlers, while href, disabled and target stay controlled by the router. Previously a blocked link ignored a ref or handler from its inactive props.

    React Link and useLinkProps split router options from element props with one key set on the client and the server. Element props pass through as given: external links forward them verbatim, falsy values included, and useLinkProps now returns children for router-controlled links as it already did for external ones.

... (truncated)

Commits

Updates cn from 0.2.6 to 0.3.0

Release notes

Sourced from cn's releases.

cn@0.3.0

Minor Changes

  • #137 9a9c9b5 Thanks @​shadcn! - Add cn/build, the library behind cn build. The CLI now parses arguments and prints; scanning, subsetting, compiling, and writing run in build(options) so build scripts and bundler plugins can call it directly...

    Description has been truncated


    Summary by cubic

    Bumps 15 dependencies in the minor-patch group across package.json and bun.lock.

    Notable changes: @tanstack/react-router changes the JSON wire shape for RawStream server-function arguments (clients and servers must run matching versions) and returns 406 instead of 500 for incompatible Accept headers. @posthog/react adds a resetError callback to error-boundary fallbacks.

    Written for commit 8172804. Summary will update on new commits.

Bumps the minor-patch group with 15 updates:

| Package | From | To |
| --- | --- | --- |
| [@posthog/react](https://github.com/PostHog/posthog-js/tree/HEAD/packages/react) | `1.10.6` | `1.11.0` |
| [@sentry/bun](https://github.com/getsentry/sentry-javascript) | `10.74.0` | `10.75.0` |
| [@sentry/hono](https://github.com/getsentry/sentry-javascript) | `10.74.0` | `10.75.0` |
| [@sentry/react](https://github.com/getsentry/sentry-javascript) | `10.74.0` | `10.75.0` |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.102.8` | `5.103.1` |
| [@tanstack/react-router](https://github.com/TanStack/router/tree/HEAD/packages/react-router) | `1.170.35` | `1.170.38` |
| [cn](https://github.com/shadcn-ui/cn/tree/HEAD/packages/cn) | `0.2.6` | `0.3.0` |
| [hono](https://github.com/honojs/hono) | `4.13.7` | `4.13.8` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.44.0` | `1.47.0` |
| [mapbox-gl](https://github.com/mapbox/mapbox-gl-js) | `3.30.0` | `3.31.0` |
| [posthog-js](https://github.com/PostHog/posthog-js) | `1.430.0` | `1.434.0` |
| [zod](https://github.com/colinhacks/zod) | `4.6.2` | `4.6.5` |
| [@tanstack/router-plugin](https://github.com/TanStack/router/tree/HEAD/packages/router-plugin) | `1.168.37` | `1.168.40` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.5.1` | `26.6.1` |
| [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.82.0` | `1.83.0` |


Updates `@posthog/react` from 1.10.6 to 1.11.0
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/commits/@posthog/react@1.11.0/packages/react)

Updates `@sentry/bun` from 10.74.0 to 10.75.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.75.0/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.74.0...10.75.0)

Updates `@sentry/hono` from 10.74.0 to 10.75.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.75.0/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.74.0...10.75.0)

Updates `@sentry/react` from 10.74.0 to 10.75.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.75.0/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.74.0...10.75.0)

Updates `@tanstack/react-query` from 5.102.8 to 5.103.1
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.103.1/packages/react-query)

Updates `@tanstack/react-router` from 1.170.35 to 1.170.38
- [Release notes](https://github.com/TanStack/router/releases)
- [Changelog](https://github.com/TanStack/router/blob/main/packages/react-router/CHANGELOG.md)
- [Commits](https://github.com/TanStack/router/commits/@tanstack/react-router@1.170.38/packages/react-router)

Updates `cn` from 0.2.6 to 0.3.0
- [Release notes](https://github.com/shadcn-ui/cn/releases)
- [Changelog](https://github.com/shadcn-ui/cn/blob/main/packages/cn/CHANGELOG.md)
- [Commits](https://github.com/shadcn-ui/cn/commits/cn@0.3.0/packages/cn)

Updates `hono` from 4.13.7 to 4.13.8
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.13.7...v4.13.8)

Updates `lucide-react` from 1.44.0 to 1.47.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.47.0/packages/lucide-react)

Updates `mapbox-gl` from 3.30.0 to 3.31.0
- [Release notes](https://github.com/mapbox/mapbox-gl-js/releases)
- [Changelog](https://github.com/mapbox/mapbox-gl-js/blob/main/CHANGELOG.md)
- [Commits](mapbox/mapbox-gl-js@v3.30.0...v3.31.0)

Updates `posthog-js` from 1.430.0 to 1.434.0
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/compare/posthog-js@1.430.0...posthog-js@1.434.0)

Updates `zod` from 4.6.2 to 4.6.5
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.6.2...v4.6.5)

Updates `@tanstack/router-plugin` from 1.168.37 to 1.168.40
- [Release notes](https://github.com/TanStack/router/releases)
- [Changelog](https://github.com/TanStack/router/blob/main/packages/router-plugin/CHANGELOG.md)
- [Commits](https://github.com/TanStack/router/commits/@tanstack/router-plugin@1.168.40/packages/router-plugin)

Updates `@types/node` from 26.5.1 to 26.6.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `oxlint` from 1.82.0 to 1.83.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.83.0/npm/oxlint)

---
updated-dependencies:
- dependency-name: "@posthog/react"
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: "@sentry/bun"
  dependency-version: 10.75.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: "@sentry/hono"
  dependency-version: 10.75.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: "@sentry/react"
  dependency-version: 10.75.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.103.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: "@tanstack/react-router"
  dependency-version: 1.170.38
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: cn
  dependency-version: 0.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: hono
  dependency-version: 4.13.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: lucide-react
  dependency-version: 1.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: mapbox-gl
  dependency-version: 3.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: posthog-js
  dependency-version: 1.434.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: zod
  dependency-version: 4.6.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: "@tanstack/router-plugin"
  dependency-version: 1.168.40
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: "@types/node"
  dependency-version: 26.6.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: oxlint
  dependency-version: 1.83.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Sep 21, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@vercel

vercel Bot commented Sep 21, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated
illinispots Ignored Ignored Sep 21, 2026 7:14am UTC

@coderabbitai

coderabbitai Bot commented Sep 21, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: QUIET

Plan: Advanced

Run ID: c26343d2-f794-4a92-a7f2-a1f5d819a95c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@dependabot @github

dependabot Bot commented on behalf of github Sep 28, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 28, 2026
@dependabot
dependabot Bot deleted the dependabot/bun/minor-patch-d125fce6e1 branch September 28, 2026 07:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants