chore(deps): bump the npm-minor-patch group across 1 directory with 42 updates

[dependabot]

Bumps the npm-minor-patch group with 39 updates in the / directory:

Package	From	To
@hono/node-server	2.0.4	2.0.8
@radix-ui/react-alert-dialog	1.1.15	1.1.19
@radix-ui/react-checkbox	1.3.3	1.3.7
@radix-ui/react-collapsible	1.1.12	1.1.16
@radix-ui/react-dropdown-menu	2.1.16	2.1.20
@radix-ui/react-hover-card	1.1.15	1.1.19
@radix-ui/react-label	2.1.8	2.1.11
@radix-ui/react-popover	1.1.15	1.1.19
@radix-ui/react-scroll-area	1.2.10	1.2.14
@radix-ui/react-separator	1.1.8	1.1.11
@radix-ui/react-switch	1.2.6	1.3.3
@radix-ui/react-toggle	1.1.10	1.1.14
@radix-ui/react-toggle-group	1.1.11	1.1.15
@radix-ui/react-tooltip	1.2.8	1.2.12
@tanstack/react-virtual	3.13.25	3.14.5
defuddle	0.18.1	0.19.1
dexie	4.4.2	4.4.4
dompurify	3.4.5	3.4.12
feedsmith	2.9.4	2.9.5
hono	4.12.23	4.12.29
lucide-react	1.16.0	1.24.0
marked	18.0.4	18.0.6
react	19.2.6	19.2.7
@types/react	19.2.15	19.2.17
react-dom	19.2.6	19.2.7
react-resizable-panels	4.11.2	4.12.1
stripe	22.1.1	22.3.1
tsx	4.22.3	4.23.0
zustand	5.0.13	5.0.14
@playwright/test	1.60.0	1.61.1
@tailwindcss/typography	0.5.19	0.5.20
@tailwindcss/vite	4.3.0	4.3.2
@types/chrome	0.1.42	0.2.2
@vitejs/plugin-react	6.0.2	6.0.3
happy-dom	20.9.0	20.10.6
lint-staged	17.0.5	17.0.8
shadcn	4.8.2	4.13.0
vite	8.0.14	8.1.4
@vercel/blob	2.4.0	2.6.1

Updates @hono/node-server from 2.0.4 to 2.0.8

Release notes

Sourced from @​hono/node-server's releases.

v2.0.8

What's Changed

• ci(release): add --no-git-checks option for pnpm stage publish by @​yusukebe in honojs/node-server#369

Full Changelog: honojs/node-server@v2.0.7...v2.0.8

v2.0.7

What's Changed

• chore: migrate to pnpm by @​BlankParticle in honojs/node-server#367
• fix(serve-static): serve precompressed files for application/octet-stream by @​yusukebe in honojs/node-server#366
• chore: bump supertest by @​yusukebe in honojs/node-server#368

Full Changelog: honojs/node-server@v2.0.6...v2.0.7

v2.0.6

What's Changed

• ci: publish to npm from CI with OIDC trusted publishing and bump np by @​yusukebe in honojs/node-server#361
• ci: use npm Staged publishing by @​yusukebe in honojs/node-server#364
• fix: preserve status and statusText when cloning a Response with liveheaders by @​usualoma in honojs/node-server#363

Full Changelog: honojs/node-server@v2.0.5...v2.0.6

v2.0.5

Security Fix

Fixed a security issue in Serve Static Middleware where prefix-mounted middleware could be bypassed on Windows. This only affects applications running on Windows that use Serve Static Middleware. Affected users are encouraged to upgrade to this version.

See GHSA-frvp-7c67-39w9 for details.

Commits

• 114c15e 2.0.8
• 5db2d5d ci(release): add --no-git-checks option for pnpm stage publish (#369)
• a528a77 2.0.7
• b2d610c chore: bump supertest (#368)
• 1b0040a fix(serve-static): serve precompressed files for application/octet-stream (#366)
• ad5b13a chore: migrate to pnpm (#367)
• ff75c61 2.0.6
• 814720f fix: preserve status and statusText when cloning a Response with live headers...
• a76209a ci: use npm Staged publishing (#364)
• 44c365a ci: publish to npm from CI with OIDC trusted publishing and bump np (#361)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​hono/node-server since your current version.

Updates @radix-ui/react-alert-dialog from 1.1.15 to 1.1.19

Changelog

Sourced from @​radix-ui/react-alert-dialog's changelog.

1.1.19

• Updated dependencies: @radix-ui/primitive@1.1.5, @radix-ui/react-context@1.2.0, @radix-ui/react-dialog@1.1.19

1.1.18

• Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-dialog@1.1.18

1.1.17

• Removed dev-only warnings for dialogs when title and/or description is not rendered.
• Updated dependencies: @radix-ui/react-dialog@1.1.17, @radix-ui/react-primitive@2.1.6

1.1.16

• Added repository.directory to all package.json files
• Updated dependencies: @radix-ui/react-dialog@1.1.16, @radix-ui/react-slot@1.2.5, @radix-ui/primitive@1.1.4, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.1.4, @radix-ui/react-primitive@2.1.5

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​radix-ui/react-alert-dialog since your current version.

Updates @radix-ui/react-checkbox from 1.3.3 to 1.3.7

Changelog

Sourced from @​radix-ui/react-checkbox's changelog.

1.3.7

• Updated dependencies: @radix-ui/primitive@1.1.5, @radix-ui/react-context@1.2.0, @radix-ui/react-presence@1.1.7

1.3.6

• Updated dependencies: @radix-ui/react-primitive@2.1.7

1.3.5

• Updated dependencies: @radix-ui/react-primitive@2.1.6

1.3.4

• Added repository.directory to all package.json files
• Updated dependencies: @radix-ui/react-presence@1.1.6, @radix-ui/primitive@1.1.4, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.1.4, @radix-ui/react-primitive@2.1.5, @radix-ui/react-use-controllable-state@1.2.3, @radix-ui/react-use-previous@1.1.2, @radix-ui/react-use-size@1.1.2

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​radix-ui/react-checkbox since your current version.

Updates @radix-ui/react-collapsible from 1.1.12 to 1.1.16

Changelog

Sourced from @​radix-ui/react-collapsible's changelog.

1.1.16

• Updated dependencies: @radix-ui/primitive@1.1.5, @radix-ui/react-context@1.2.0, @radix-ui/react-presence@1.1.7

1.1.15

• Updated dependencies: @radix-ui/react-primitive@2.1.7

1.1.14

• Updated dependencies: @radix-ui/react-primitive@2.1.6

1.1.13

• Fixed triggers referencing a non-existent element via aria-controls when their content is removed from the DOM (credit to @​dodomorandi for the original PR)
• Added repository.directory to all package.json files
• Updated dependencies: @radix-ui/react-presence@1.1.6, @radix-ui/primitive@1.1.4, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.1.4, @radix-ui/react-id@1.1.2, @radix-ui/react-primitive@2.1.5, @radix-ui/react-use-controllable-state@1.2.3, @radix-ui/react-use-layout-effect@1.1.2

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​radix-ui/react-collapsible since your current version.

Updates @radix-ui/react-dialog from 1.1.15 to 1.1.19

Changelog

Sourced from @​radix-ui/react-dialog's changelog.

1.1.19

• Updated dependencies: @radix-ui/react-dismissable-layer@1.1.15, @radix-ui/primitive@1.1.5, @radix-ui/react-context@1.2.0, @radix-ui/react-focus-scope@1.1.12, @radix-ui/react-presence@1.1.7

1.1.18

• Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-dismissable-layer@1.1.14, @radix-ui/react-focus-scope@1.1.11, @radix-ui/react-portal@1.1.13

1.1.17

• Removed dev-only warnings for dialogs when title and/or description is not rendered.
• Fixed Dismissable Layer so outside interactions stopped by extension UI overlays do not dismiss dialogs or popovers.
• Updated dependencies: @radix-ui/react-slot@1.3.0, @radix-ui/react-dismissable-layer@1.1.13, @radix-ui/react-primitive@2.1.6, @radix-ui/react-focus-scope@1.1.10, @radix-ui/react-portal@1.1.12

1.1.16

• Fixed disabled pointer events in closed dialogs
• Fixed a bug where iOS text selection and editing on HTML inputs within react-dialog were broken
• Fixed triggers referencing a non-existent element via aria-controls when their content is removed from the DOM (credit to @​dodomorandi for the original PR)
• Added repository.directory to all package.json files
• Updated dependencies: @radix-ui/react-presence@1.1.6, @radix-ui/react-slot@1.2.5, @radix-ui/react-focus-guards@1.1.4, @radix-ui/react-dismissable-layer@1.1.12, @radix-ui/primitive@1.1.4, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.1.4, @radix-ui/react-focus-scope@1.1.9, @radix-ui/react-id@1.1.2, @radix-ui/react-portal@1.1.11, @radix-ui/react-primitive@2.1.5, @radix-ui/react-use-controllable-state@1.2.3

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​radix-ui/react-dialog since your current version.

Updates @radix-ui/react-dropdown-menu from 2.1.16 to 2.1.20

Changelog

Sourced from @​radix-ui/react-dropdown-menu's changelog.

2.1.20

• Fixed menu items, tab triggers, toolbar links, and select items intercepting Space/Enter keys that originate from focusable descendants.
• Updated dependencies: @radix-ui/primitive@1.1.5, @radix-ui/react-context@1.2.0, @radix-ui/react-menu@2.1.20

2.1.19

• Fixed infinite re-render loop in React 19 caused by unstable composed ref callback references.

Other updates

• Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-menu@2.1.19

2.1.18

• Fixed a bug where menus and submenus remained open after a window loses focus.
• Updated dependencies: @radix-ui/react-menu@2.1.18, @radix-ui/react-primitive@2.1.6

2.1.17

• Added repository.directory to all package.json files
• Updated dependencies: @radix-ui/react-menu@2.1.17, @radix-ui/primitive@1.1.4, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.1.4, @radix-ui/react-id@1.1.2, @radix-ui/react-primitive@2.1.5, @radix-ui/react-use-controllable-state@1.2.3

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​radix-ui/react-dropdown-menu since your current version.

Updates @radix-ui/react-hover-card from 1.1.15 to 1.1.19

Changelog

Sourced from @​radix-ui/react-hover-card's changelog.

1.1.19

• Updated dependencies: @radix-ui/react-dismissable-layer@1.1.15, @radix-ui/primitive@1.1.5, @radix-ui/react-context@1.2.0, @radix-ui/react-presence@1.1.7, @radix-ui/react-popper@1.3.3

1.1.18

• Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-dismissable-layer@1.1.14, @radix-ui/react-popper@1.3.2, @radix-ui/react-portal@1.1.13

1.1.17

• Updated dependencies: @radix-ui/react-popper@1.3.1, @radix-ui/react-dismissable-layer@1.1.13, @radix-ui/react-primitive@2.1.6, @radix-ui/react-portal@1.1.12

1.1.16

• Added repository.directory to all package.json files
• Updated dependencies: @radix-ui/react-presence@1.1.6, @radix-ui/react-popper@1.3.0, @radix-ui/react-dismissable-layer@1.1.12, @radix-ui/primitive@1.1.4, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.1.4, @radix-ui/react-portal@1.1.11, @radix-ui/react-primitive@2.1.5, @radix-ui/react-use-controllable-state@1.2.3

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​radix-ui/react-hover-card since your current version.

Updates @radix-ui/react-label from 2.1.8 to 2.1.11

Changelog

Sourced from @​radix-ui/react-label's changelog.

2.1.11

• Updated dependencies: @radix-ui/react-primitive@2.1.7

2.1.10

• Updated dependencies: @radix-ui/react-primitive@2.1.6

2.1.9

• Added repository.directory to all package.json files
• Updated dependencies: @radix-ui/react-primitive@2.1.5

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​radix-ui/react-label since your current version.

Updates @radix-ui/react-popover from 1.1.15 to 1.1.19

Changelog

Sourced from @​radix-ui/react-popover's changelog.

1.1.19

• Updated dependencies: @radix-ui/react-dismissable-layer@1.1.15, @radix-ui/primitive@1.1.5, @radix-ui/react-context@1.2.0, @radix-ui/react-focus-scope@1.1.12, @radix-ui/react-presence@1.1.7, @radix-ui/react-popper@1.3.3

1.1.18

• Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-dismissable-layer@1.1.14, @radix-ui/react-focus-scope@1.1.11, @radix-ui/react-popper@1.3.2, @radix-ui/react-portal@1.1.13

1.1.17

• Fixed Dismissable Layer so outside interactions stopped by extension UI overlays do not dismiss dialogs or popovers.
• Updated dependencies: @radix-ui/react-slot@1.3.0, @radix-ui/react-popper@1.3.1, @radix-ui/react-dismissable-layer@1.1.13, @radix-ui/react-primitive@2.1.6, @radix-ui/react-focus-scope@1.1.10, @radix-ui/react-portal@1.1.12

1.1.16

• Fixed a bug where iOS text selection and editing on HTML inputs within react-dialog were broken
• Fixed triggers referencing a non-existent element via aria-controls when their content is removed from the DOM (credit to @​dodomorandi for the original PR)
• Added repository.directory to all package.json files
• Updated dependencies: @radix-ui/react-presence@1.1.6, @radix-ui/react-popper@1.3.0, @radix-ui/react-slot@1.2.5, @radix-ui/react-focus-guards@1.1.4, @radix-ui/react-dismissable-layer@1.1.12, @radix-ui/primitive@1.1.4, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.1.4, @radix-ui/react-focus-scope@1.1.9, @radix-ui/react-id@1.1.2, @radix-ui/react-portal@1.1.11, @radix-ui/react-primitive@2.1.5, @radix-ui/react-use-controllable-state@1.2.3

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​radix-ui/react-popover since your current version.

Updates @radix-ui/react-scroll-area from 1.2.10 to 1.2.14

Changelog

Sourced from @​radix-ui/react-scroll-area's changelog.

1.2.14

• Fixed --radix-scroll-area-corner-width and --radix-scroll-area-corner-height not resetting to 0 when the corner is removed (eg. when one of the scrollbars is no longer visible). Previously these values would stick around and leave a permanent gap on the remaining scrollbar.
• Updated dependencies: @radix-ui/primitive@1.1.5, @radix-ui/react-context@1.2.0, @radix-ui/react-presence@1.1.7

1.2.13

• Fixed infinite re-render loop in React 19 caused by unstable composed ref callback references.

Other updates

• Updated dependencies: @radix-ui/react-primitive@2.1.7

1.2.12

• Stabilized the viewport style tag unless the nonce changes.
• Fixed Duplicate index signature errors that surfaced when consuming multiple packages together.
• Updated dependencies: @radix-ui/react-primitive@2.1.6

1.2.11

• Fixed missing data-state attribute for Scroll Area scrollbars
• Added repository.directory to all package.json files
• Updated dependencies: @radix-ui/react-presence@1.1.6, @radix-ui/react-direction@1.1.2, @radix-ui/number@1.1.2, @radix-ui/primitive@1.1.4, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.1.4, @radix-ui/react-primitive@2.1.5, @radix-ui/react-use-callback-ref@1.1.2, @radix-ui/react-use-layout-effect@1.1.2

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​radix-ui/react-scroll-area since your current version.

Updates @radix-ui/react-separator from 1.1.8 to 1.1.11

Changelog

Sourced from @​radix-ui/react-separator's changelog.

1.1.11

• Updated dependencies: @radix-ui/react-primitive@2.1.7

1.1.10

• Updated dependencies: @radix-ui/react-primitive@2.1.6

1.1.9

• Added repository.directory to all package.json files
• Updated dependencies: @radix-ui/react-primitive@2.1.5

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​radix-ui/react-separator since your current version.

Updates @radix-ui/react-slot from 1.2.4 to 1.3.0

Changelog

Sourced from @​radix-ui/react-slot's changelog.

1.3.0

Added generic type arguments for SlotProps and createSlot

SlotProps and createSlot now accept generic type arguments to specify the type of element a slot should render, as well as its props.

const Slot = createSlot<HTMLButtonElement, MyCustomButtonProps>('Slot');

1.2.5

• Fixed infinite re-render loop in React 19 caused by Slot creating a new ref callback on every render
• Added support for nested Slottable via a render prop, so a slotted element can be wrapped while still merging Slot props and refs onto it
• Added repository.directory to all package.json files
• Improved error messages for invalid slot children
• Updated dependencies: @radix-ui/react-compose-refs@1.1.3

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​radix-ui/react-slot since your current version.

Updates @radix-ui/react-switch from 1.2.6 to 1.3.3

Changelog

Sourced from @​radix-ui/react-switch's changelog.

1.3.3

• Fixed a bug in form control components to ensure their values are updated when their associated form's is reset. This affects RadioGroup, Slider, Select, and Switch.
• Updated dependencies: @radix-ui/primitive@1.1.5, @radix-ui/react-context@1.2.0

1.3.2

• Updated dependencies: @radix-ui/react-primitive@2.1.7

1.3.1

• Updated dependencies: @radix-ui/react-primitive@2.1.6

1.3.0

• Added unstable Provider, Trigger and BubbleInput parts to Switch. These expose the previously internal composition (context provider, the interactive control, and the hidden form input) so consumers can directly access and recompose them. The Switch component continues to render them by default.
• Added repository.directory to all package.json files
• Updated dependencies: @radix-ui/primitive@1.1.4, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.1.4, @radix-ui/react-primitive@2.1.5, @radix-ui/react-use-controllable-state@1.2.3, @radix-ui/react-use-previous@1.1.2, @radix-ui/react-use-size@1.1.2

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​radix-ui/react-switch since your current version.

Updates @radix-ui/react-toggle from 1.1.10 to 1.1.14

Changelog

Sourced from @​radix-ui/react-toggle's changelog.

1.1.14

• Updated dependencies: @radix-ui/primitive@1.1.5

1.1.13

• Updated dependencies: @radix-ui/react-primitive@2.1.7

1.1.12

• Updated dependencies: @radix-ui/react-primitive@2.1.6

1.1.11

• Added repository.directory to all package.json files
• Updated dependencies: @radix-ui/primitive@1.1.4, @radix-ui/react-primitive@2.1.5, @radix-ui/react-use-controllable-state@1.2.3

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​radix-ui/react-toggle since your current version.

Updates @radix-ui/react-toggle-group from 1.1.11 to 1.1.15

Changelog

Sourced from @​radix-ui/react-toggle-group's changelog.

1.1.15

• Updated dependencies: @radix-ui/primitive@1.1.5, @radix-ui/react-context@1.2.0, @radix-ui/react-roving-focus@1.1.15, @radix-ui/react-toggle@1.1.14

1.1.14

• Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-roving-focus@1.1.14, @radix-ui/react-toggle@1.1.13

1.1.13

• Updated single-select and multi-select toggle groups to use the radiogroup and toolbar roles, respectively.
• Updated dependencies: @radix-ui/react-primitive@2.1.6, @radix-ui/react-roving-focus@1.1.13, @radix-ui/react-toggle@1.1.12

1.1.12

• Added repository.directory to all package.json files
• Updated dependencies: @radix-ui/react-direction@1.1.2, @radix-ui/primitive@1.1.4, @radix-ui/react-context@1.1.4, @radix-ui/react-primitive@2.1.5, @radix-ui/react-roving-focus@1.1.12, @radix-ui/react-toggle@1.1.11, @radix-ui/react-use-controllable-state@1.2.3

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​radix-ui/react-toggle-group since your current version.

Updates @radix-ui/react-tooltip from 1.2.8 to 1.2.12

Changelog

Sourced from @​radix-ui/react-tooltip's changelog.

1.2.12

• Updated dependencies: @radix-ui/react-dismissable-layer@1.1.15, @radix-ui/primitive@1.1.5, @radix-ui/react-context@1.2.0, @radix-ui/react-presence@1.1.7, @radix-ui/react-popper@1.3.3

1.2.11

• Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-dismissable-layer@1.1.14, @radix-ui/react-popper@1.3.2, @radix-ui/react-portal@1.1.13, @radix-ui/react-visually-hidden@1.2.7

1.2.10

• Updated dependencies: @radix-ui/react-slot@1.3.0, @radix-ui/react-popper@1.3.1, @radix-ui/react-dismissable-layer@1.1.13, @radix-ui/react-primitive@2.1.6, @radix-ui/react-portal@1.1.12, @radix-ui/react-visually-hidden@1.2.6

1.2.9

• Fixed runtime error when event target is non-Node
• Fixed a Tooltip bug so that skipDelayDuration={0} works as expected. Previously, the open delay could still be skipped when moving between triggers.
• Added repository.directory to all package.json files
• Updated dependencies: @radix-ui/react-presence@1.1.6, @radix-ui/react-popper@1.3.0, @radix-ui/react-slot@1.2.5, @radix-ui/react-dismissable-layer@1.1.12, @radix-ui/primitive@1.1.4, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.1.4, @radix-ui/react-id@1.1.2, @radix-ui/react-portal@1.1.11, @radix-ui/react-primitive@2.1.5, @radix-ui/react-use-controllable-state@1.2.3, @radix-ui/react-visually-hidden@1.2.5

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​radix-ui/react-tooltip since your current version.

Updates @tanstack/react-virtual from 3.13.25 to 3.14.5

Release notes

Sourced from @​tanstack/react-virtual's releases.

@​tanstack/react-virtual@​3.14.5

Patch Changes

• Updated dependencies [767ead4, bc8643b]:
  • @​tanstack/virtual-core@​3.17.3

@​tanstack/react-virtual@​3.14.4

Patch Changes

• Updated dependencies [b04f9ee, 37be284]:
  • @​tanstack/virtual-core@​3.17.2

@​tanstack/react-virtual@​3.14.3

Patch Changes

• #1201 2ba5eb6 - Make directDomUpdates a no-op for direct DOM writes when containerRef is omitted. Previously the virtualizer still wrote item positions while never sizing the container (a broken half-state). Now omitting containerRef skips all direct writes while still skipping re-renders, letting consumers own the DOM updates themselves (e.g. in onChange).

• Updated dependencies [ef69ea3]:

  • @​tanstack/virtual-core@​3.17.1

@​tanstack/react-virtual@​3.14.2

Patch Changes

• Updated dependencies [c0b84c8, fbf3bdb]:
  • @​tanstack/virtual-core@​3.17.0

@​tanstack/react-virtual@​3.14.1

Patch Changes

• Updated dependencies [c746841]:
  • @​tanstack/virtual-core@​3.16.1

@​tanstack/react-virtual@​3.14.0

Minor Changes

• Add opt-in direct DOM updates for scroll positioning with directDomUpdates, directDomUpdatesMode, and containerRef. (#1180)

@​tanstack/react-virtual@​3.13.26

Patch Changes

• Updated dependencies [fc992ab]:
  • @​tanstack/virtual-core@​3.16.0

Changelog

Sourced from @​tanstack/react-virtual's changelog.

3.14.5

Patch Changes

• Updated dependencies [767ead4, bc8643b]:
  • @​tanstack/virtual-core@​3.17.3

3.14.4

Patch Changes

• Updated dependencies [b04f9ee, 37be284]:
  • @​tanstack/virtual-core@​3.17.2

3.14.3

Patch Changes

• #1201 2ba5eb6 - Make directDomUpdates a no-op for direct DOM writes when containerRef is omitted. Previously the virtualizer still wrote item positions while never sizing the container (a broken half-state). Now omitting containerRef skips all direct writes while still skipping re-renders, letting consumers own the DOM updates themselves (e.g. in onChange).

• Updated dependencies [ef69ea3]:

  • @​tanstack/virtual-core@​3.17.1

3.14.2

Patch Changes

• Updated dependencies [c0b84c8, fbf3bdb]:
  • @​tanstack/virtual-core@​3.17.0

3.14.1

Patch Changes

• Updated dependencies [c746841]:
  • @​tanstack/virtual-core@​3.16.1

3.14.0

Minor Changes

• Add opt-in direct DOM updates for scroll positioning with directDomUpdates, directDomUpdatesMode, and containerRef. (#1180)

3.13.26

Patch Changes

• Updated dependencies [fc992ab]:
  • @​tanstack/virtual-core@​3.16.0

Commits

• 151e9f4 ci: Version Packages (#1213)
• d73a538 ci: Version Packages (#1210)
• 75ae896 ci: Version Packages (#1202)
• 2ba5eb6 fix(react-virtual): make directDomUpdates a no-op without containerRef (#1201)
• ef69ea3 fix(virtual-core): adjust scroll on first measurement during backward scroll ...
• 932c358 test(react-virtual): add e2e test for React Compiler with directDomUpdates, b...
• b983b21 ci: Version Packages (#1184)
• fbf3bdb feat(virtual-core): add useCachedMeasurements option to preserve sizes when...
• 13dec39 docs: add directDomUpdates and directDomUpdatesMode options (#1185)
• c33902f ci: Version Packages (#1182)
• Additional commits viewable in compare view

Updates defuddle from 0.18.1 to 0.19.1

Release notes

Sourced from defuddle's releases.

0.19.1

• Sanitize extractor HTML #326
• Update deps

0.19.0

• Bilibili: video subtitle/transcript extraction (#271)
• ChatGPT: preserve citation footnotes (#311), fix content after Thought sections (#302)
• CLI: --frontmatter flag for YAML metadata output (#313), --user-agent flag for fetched URLs, read HTML from stdin (#192)
• Math: reconstruct MathML from MathJax CHTML render tree (#250), fix Markdown conversion for complex and aligned math (#301), flatten tagged single-equation tables so they render horizontally
• Tables: preserve trailing columns in ragged tables (#299)
• X/Twitter: prefer async extraction in Node for X articles (#318), fix non-English aria-label reply extraction (#290), fix FxTwitter facet indices for surrogate-pair emoji (#281)
• YouTube: fetch videoData from a more reliable source (#211)
• Fix: don't mutate the live document in parse()
• Fix: don't strip sections with delimiter-less anchor ids (#303)
• Fix: author/date byline heuristic no longer matches day-of-week as a date (#291)
• Markdown: encapsulate links with spaces (#278)
• Remove subhead (#316); remove <style> from SVGs for security
• Add CI; dependency upgrades (esbuild, mathml-to-latex, temml)

Commits

• 6c39f09 chore: normalize package-lock peer metadata (Node 22 npm)
• 75282bc Bump version
• 6a3f5b1 chore: patch website dev deps (undici/ws) and pin Node 22
• baf2eae Sanitize extractor HTML (#326)
• 19520ad Bump version
• c012fc7 Preserve ChatGPT citation footnotes (#311)
• 853c240 Add Bilibili video subtitle/transcript extraction (#271)
• aa349b6 ci: fix matrix — drop Node 18 (toolchain needs 20+) and jsdom (fixtures are l...
• a1132f9 Add CI
• 96532f5 CLI: add --frontmatter flag for YAML metadata output (#313)
• Additional commits viewable in compare view

Updates dexie from 4.4.2 to 4.4.4

Release notes

Sourced from dexie's releases.

Dexie v4.4.4

This is a maintenance release that resolves a bug in useLiveQuery caching and includes a TypeScript typing enhancement.

Related Package Releases

Package	Version
dexie	4.4.4
dexie-cloud-addon	4.4.13 (no change)
dexie-react-hooks	4.4.0 (no change)
y-dexie	4.4.0 (no change)

Bug Fixes

dexie@4.4.4

• fix: useLiveQuery fails to detect updates when mutating queried objects in-place and calling put() — In default/cloned cache mode (cache: 'cloned'), mutating queried objects in-place and subsequently calling put() on them would pollute the cache directly, preventing subsequent live-queries from detecting the change because the "before" and "after" states in the cache became identical. Live-queries now deeply clone results on read to completely isolate query results from in-place consumer mutations. (#2310). Reported in #2309 by @​laukaichung. Fixed by @​liz709 and @​dfahlander .

Other Changes

dexie@4.4.4

• fix: typescript typings - add missing table4 parameter to transaction method — Added the missing table4 parameter to the typescript type definition of Dexie.transaction(), aligning it with other table parameters. Contributed by @​renbaoshuo (#2311)

Dexie v4.4.3

This is a maintenance release with bug fixes and a configuration API improvement.

Related Package Releases

Package	Version
dexie	4.4.3
dexie-cloud-addon	4.4.13

Bug Fixes

dexie@4.4.3

• fix: delByKeyPath() creates empty intermediate objects on missing path — Dexie.delByKeyPath(obj, "foo.bar") on an object without foo would create {foo: {}} as a side effect instead of doing nothing. This caused a real-world bug in dexie-cloud-addon where clearing a dotted key from a changeSpec (e.g. claims.sub) would leave {claims: {}} in the spec, which then overwrote the inline primary key with undefined, resulting in: DataError: Evaluating the object store's key path did not yield a value. Fixed in setByKeyPath to bail out early when value is undefined and the intermediate path doesn't exist. (#2303)

• fix: Collection.sortBy() mutates frozen array in immutable cache mode — calling .sortBy() on a table when using immutable cache mode could throw TypeError: Cannot assign to read only property because Array.sort() was called on a frozen array. Fixed by sorting on a copy instead. (#2294)

dexie-cloud-addon@4.4.12

• rename: maxStringLength → largeStringThreshold — the string offloading option is renamed for clarity. The old name is kept as a backward-compatible alias. (#2290)

• fix: blob writebacks routed through BlobSavingQueue to avoid PSD context loss — after an async native fetch (blob download), Dexie's PSD zone is no longer active, causing table.mutate() to crash with Cannot read properties of undefined (reading 'table'). This surfaced as [dexie-cloud:blobResolve] Failed to resolve BlobRefs. Fixed by always routing blob writebacks through BlobSavingQueue.saveBlobs(), which opens a proper Dexie rw-transaction in a fresh JS task. Fixes lazy blob mode crash when using Dexie hooks with dexie-cloud-addon. (#2302)

• fix: eager blob downloader could starve RAM — the eager downloader triggered blobResolveMiddleware which resolved all pending blobs into memory at once. Fixed by downloading blobs in chunks with a query limit, so memory usage stays bounded regardless of how many blobs are pending. (#2302)

... (truncated)

Commits

• f151e96 chore: bump version to 4.4.4
• 0cc46ac perf(live-query): avoid redundant double deepClone on initial query cache pop...
• fb5d3b7 test(live-query): revert prettier formatting and keep only targeted test fixes
• 8c8c24d test(live-query): parameterize issue 2309 test and fix pre-existing syntax/pr...
• bb4c265 test(live-query): change actualResults to let to avoid TypeError in tests
• a6edadb fix(live-query): clone results on cache read when cache: 'cloned' is used (is...
• 9485361 Add missing table4 parameter typing to transaction method
• 30134f6 Trigger new dev build
• 9dd614d DataError after updating a user in dexie cloud when that user got an update f...
• 0919742 Trigger dev build
• Additional commits viewable in compare view

Updates dompurify from 3.4.5 to 3.4.12

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.12

• Fixed an issue where a hook would not get called for custom elements, thanks @​Rikuxx0
• Hardened the handling of hooks removing elements, @​mkrause-bee360
• Added support for a few new SVG attributes, thanks @​cbn-falias & @​Develop-KIM
• Hardened the handling of declarative partial updates
• Updated the documentation is several spots, README, wiki, etc.
• Bumped several dependencies where possible

DOMPurify 3.4.11

• Fixed an issue with a leaky config for hooks via setConfig, thanks @​trace37labs
• Bumped vulnerable development dependencies to arrive at plain 0 with npm audit
• Updated the osv-scanner suppression list as no vulnerable dependencies are left for now
• Updated up the linting tool-chain and removed now-redundant lint directives
• Updated the documentation is several spots, README, wiki, etc.
• Bumped several dependencies where possible

DOMPurify 3.4.10

• Refactored codebase for clarity: extracted the public type declarations into types.ts
• Decomposed the three largest sanitizer functions into focused helpers
• Removed duplicated defaults and dead branches, consolidated SAFE_FOR_TEMPLATES scrubbing into single shared path
• Improved per-node performance by hoisting the mXSS probe regexes and testing textContent before innerHTML
• Added a deterministic micro-benchmark harness (npm run bench) with a --compare mode
• Reduced CI cost by running the full three-engine browser suite once per PR
• Refreshed the demos/ folder so every demo runs again, and added a SVG-via-<img> demo
• Documented the bench and test:happydom scripts in the README
• Completed the Attack Classes & Bypass History wiki page
• Bumped several dependencies where possible

DOMPurify 3.4.9

• Further improved the handling of Trusted Types config options, thanks @​offset
• Further improved the handling of IN_PLACE sanitization, thanks @​mozfreddyb
• Added more test coverage for IN_PLACE and Trusted Types related usage
• Bumped several dependencies where possible
• Updated README and wiki with more accurate documentation & attack samples

DOMPurify 3.4.8

• Cleaned up the repository root, renamed some and removed unneeded files
• Fixed an issue with handling of Trusted Types policies, thanks @​fulstadev
• Fixed the n...

  Description has been truncated

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
feedzero	Ready	Preview, Comment	Jul 11, 2026 2:58pm