chore(deps): bump the npm-production group across 1 directory with 5 updates

[dependabot]

Bumps the npm-production group with 5 updates in the / directory:

Package	From	To
next	16.2.6	16.2.7
posthog-js	1.376.4	1.382.0
react	19.2.4	19.2.7
react-dom	19.2.4	19.2.7
shiki	4.1.0	4.2.0

Updates next from 16.2.6 to 16.2.7

Release notes

Sourced from next's releases.

v16.2.7

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

• Backport documentation fixes for v16.2 (#93804)
• [backport] Patch playwright-core to resolve _finishedPromise on requestFailed (#93920)
• [backport] Fix dev mode hydration failure when page is served from HTTP cache (#93492)
• [backport] Fix catch-all router.query corruption with basePath + rewrites (#93917)
• [backport] Encode non-ASCII characters in cache tags at construction (#93918)
• [backport] Fix server action forwarding loop with middleware rewrites (#93919)
• [backport] Turbopack: switch from base40 to base38 hash encoding (#93932)
• [ci] Disable hanging node 24 typescript tests on 16.2 backport branch (#94164)
• [backport] Fix "type: module" in project dir when using standalone or adapters (#94050)
• [backport] Propagate adapter preferred regions (#94200)
• [16.2.x] Don't drop FormData entries (#94240)
• [backport] feat(turbopack): add LocalPathOrProjectPath PostCSS config resolution (#94284)

Credits

Huge thanks to @​eps1lon, @​icyJoseph, @​unstubbable, @​mischnic, @​bgw, @​timneutkens, and @​lukesandberg for helping!

Commits

• 9bd3c26 v16.2.7
• c63224f [backport] feat(turbopack): add LocalPathOrProjectPath PostCSS config resolut...
• 63115c7 [16.2.x] Don't drop FormData entries (#94240)
• aef22fd [backport] Propagate adapter preferred regions (#94200)
• f126e72 [backport] Fix "type: module" in project dir when using standalone or adapter...
• bda3e2a [ci] Disable hanging node 24 typescript tests on 16.2 backport branch (#94164)
• 7e16e07 [backport] Turbopack: switch from base40 to base38 hash encoding (#93932)
• 6139f4b [backport] Fix server action forwarding loop with middleware rewrites (#93919)
• c021d10 [backport] Encode non-ASCII characters in cache tags at construction (#93918)
• 9184ddb [backport] Fix catch-all router.query corruption with basePath + `rewrite...
• Additional commits viewable in compare view

Updates posthog-js from 1.376.4 to 1.382.0

Release notes

Sourced from posthog-js's releases.

posthog-js@1.382.0

1.382.0

Minor Changes

• #3749 9877710 Thanks @​pauldambra! - Stop classifying intentional repeated clicks as rageclicks. From the 2026-05-30 config defaults, rageclick detection now ignores:

  • text-editing surfaces (textarea, text-like inputs, and contenteditable elements), where rapid clicks are double/triple-click text selection rather than rage (rageclick.ignore_text_selection)
  • +/- stepper buttons, added to the default content_ignorelist

  Symbol-only keywords in content_ignorelist (e.g. +, -, >, <) now match the element's text exactly instead of as a substring, so labels like sign-up, 5 > 3, or C++ are no longer treated as repeatedly-clicked controls. The heatmaps rageclick marker now applies the same suppression as the $rageclick event.

  A partial rageclick config object is now merged with the date-gated defaults instead of replacing them, so e.g. rageclick: { threshold_px: 50 } keeps the default content_ignorelist / ignore_text_selection. Pass an explicit value (e.g. content_ignorelist: false) to override a specific default, or a boolean to opt out entirely.

  Behaviour change for existing content_ignorelist: true users (available since 2025-11-30): the default list already includes > and <. After this release, buttons whose text contains > or < but is not exactly that symbol (e.g. Learn more >, < Back, home > settings) will no longer be suppressed. Bare > and < buttons remain suppressed. This is the intended fix, but if you rely on the old substring behaviour for those keywords, replace content_ignorelist: true with an explicit array listing the exact terms you want to suppress. (2026-06-06)

Patch Changes

• Updated dependencies []:
  • @​posthog/types@​1.382.0
  • @​posthog/core@​1.30.10

posthog-js@1.381.0

1.381.0

Minor Changes

• #3719 a7bd828 Thanks @​lricoy! - Add __preview_cookie_wins_on_conflict opt-in config to prefer cookie values over localStorage when merging persistence state in localStorage+cookie mode, fixing cross-subdomain identify and session disconnects. (2026-06-05)

Patch Changes

• Updated dependencies [a7bd828]:
  • @​posthog/types@​1.381.0
  • @​posthog/core@​1.30.9

posthog-js@1.380.1

1.380.1

Patch Changes

• #3743 ced0039 Thanks @​robbie-c! - fix(surveys): stop the survey CSS from using :has(.survey-question:empty), which crashes some WebKit builds during text-node style invalidation while a survey renders. The empty-header margin tweak now keys off a JS-set question-header--empty class and a sibling selector instead. (2026-06-05)
• Updated dependencies []:
  • @​posthog/types@​1.380.1
  • @​posthog/core@​1.30.8

posthog-js@1.380.0

1.380.0

Minor Changes

... (truncated)

Commits

• d46f0b9 chore: update versions and lockfile [version bump]
• 9877710 feat(autocapture): ignore rageclicks on text inputs and steppers (#3749)
• b3cd546 chore: update versions and lockfile [version bump]
• be7c3c7 fix: preserve OpenAI API promise helpers (#3624)
• e0ebad5 chore: update versions and lockfile [version bump]
• a7bd828 feat(browser): add __preview_cookie_wins_on_conflict for multi-subdomain iden...
• a1a1f6f chore: update versions and lockfile [version bump]
• 70c976e fix(react-native): surface full Xcode sourcemap upload errors (#3747)
• a8fd228 chore: update versions and lockfile [version bump]
• ced0039 fix(surveys): drop :has(.survey-question:empty) that crashes WebKit (#3743)
• Additional commits viewable in compare view

Updates react from 19.2.4 to 19.2.7

Release notes

Sourced from react's releases.

19.2.7 (June 1st, 2026)

React Server Components

• Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (#36566 by @​unstubbable)

19.2.6 (May 6th, 2026)

React Server Components

• Type hardening and performance improvements (#36425 by @​eps1lon and @​unstubbable)

19.2.5 (April 8th, 2026)

React Server Components

• Add more cycle protections (#36236 by @​eps1lon and @​unstubbable)

Commits

• 6117d7c Version 19.2.7 (#36591)
• eaf3e95 Version 19.2.6
• 23f4f9f 19.2.5
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react since your current version.

Updates react-dom from 19.2.4 to 19.2.7

Release notes

Sourced from react-dom's releases.

19.2.7 (June 1st, 2026)

React Server Components

• Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (#36566 by @​unstubbable)

19.2.6 (May 6th, 2026)

React Server Components

• Type hardening and performance improvements (#36425 by @​eps1lon and @​unstubbable)

19.2.5 (April 8th, 2026)

React Server Components

• Add more cycle protections (#36236 by @​eps1lon and @​unstubbable)

Commits

• 6117d7c Version 19.2.7 (#36591)
• eaf3e95 Version 19.2.6
• 23f4f9f 19.2.5
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react-dom since your current version.

Updates shiki from 4.1.0 to 4.2.0

Release notes

Sourced from shiki's releases.

v4.2.0

   🚀 Features

• Add @​shikijs/stream and @​shikijs/magic-move packages  -  by @​antfu in shikijs/shiki#1283 (d031f)

   🐞 Bug Fixes

• transformers: Handle YAML comment prefixes correctly for v3  -  by @​AkaHarshit in shikijs/shiki#1266 (f694a)
• vitepress-twoslash: Scroll blocking on mobile viewports  -  by @​micaiguai in shikijs/shiki#1262 (9e0e8)

    View changes on GitHub

Commits

• 1d56dae chore: release v4.2.0
• See full diff in compare view

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.