fix(deps): update bun minor and patch dependencies by renovate[bot] · Pull Request #1069 · nicotsx/zerobyte

renovate · 2026-07-22T05:56:47Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@base-ui/react (source)	`^1.6.0` → `^1.7.0`
@better-auth/api-key (source)	`1.6.23` → `1.6.26`
@better-auth/passkey (source)	`^1.6.23` → `^1.6.26`
@better-auth/sso (source)	`^1.6.23` → `^1.6.26`
@better-auth/utils	`0.4.2` → `0.5.0`
@cloudflare/vite-plugin (source)	`^1.45.1` → `^1.51.1`
@effect/language-service	`^0.87.0` → `^0.87.2`
@fontsource-variable/jetbrains-mono (source)	`^5.2.8` → `^5.3.0`
@hono/standard-validator (source)	`^0.3.0` → `^0.4.0`
@hookform/resolvers (source)	`^5.4.0` → `^5.7.1`
@playwright/test (source)	`^1.61.1` → `^1.62.1`
@radix-ui/react-alert-dialog (source)	`^1.1.19` → `^1.1.23`
@radix-ui/react-checkbox (source)	`^1.3.7` → `^1.3.11`
@radix-ui/react-dialog (source)	`^1.1.19` → `^1.1.23`
@radix-ui/react-dropdown-menu (source)	`^2.1.20` → `^2.1.24`
@radix-ui/react-hover-card (source)	`^1.1.19` → `^1.1.23`
@radix-ui/react-label (source)	`^2.1.11` → `^2.1.15`
@radix-ui/react-progress (source)	`^1.1.12` → `^1.1.16`
@radix-ui/react-scroll-area (source)	`^1.2.14` → `^1.2.18`
@radix-ui/react-select (source)	`^2.3.3` → `^2.3.7`
@radix-ui/react-separator (source)	`^1.1.11` → `^1.1.15`
@radix-ui/react-slot (source)	`^1.3.0` → `^1.3.3`
@radix-ui/react-switch (source)	`^1.3.3` → `^1.3.7`
@radix-ui/react-tabs (source)	`^1.1.17` → `^1.1.21`
@radix-ui/react-tooltip (source)	`^1.2.12` → `^1.2.16`
@scalar/hono-api-reference (source)	`^0.11.11` → `^0.11.13`
@tanstack/devtools-vite (source)	`^0.8.1` → `^0.8.3`
@tanstack/react-devtools (source)	`^0.10.8` → `^0.10.9`
@tanstack/react-query (source)	`^5.101.2` → `^5.101.4`
@tanstack/react-query-devtools (source)	`^5.101.2` → `^5.101.4`
@tanstack/react-router (source)	`^1.170.18` → `^1.170.25`
@tanstack/react-router-devtools (source)	`^1.167.0` → `^1.167.1`
@tanstack/react-start (source)	`^1.168.30` → `^1.168.42`
@tanstack/router-plugin (source)	`^1.168.22` → `^1.168.29`
@testing-library/user-event	`^14.6.1` → `^14.6.3`
@types/node (source)	`^26.1.1` → `^26.2.0`
@types/react (source)	`^19.2.17` → `^19.2.18`
@types/react-dom (source)	`^19.2.3` → `^19.2.4`
@types/semver (source)	`^7.7.1` → `^7.8.0`
@vitejs/plugin-react (source)	`^6.0.3` → `^6.0.5`
better-auth (source)	`^1.6.23` → `^1.6.26`
cron-parser	`^5.6.2` → `^5.8.1`
drizzle-orm (source)	`1.0.0-rc.4-5d5b77c` → `1.0.0-rc.4-fb12281`
effect (source)	`^3.22.0` → `^3.22.1`
electron	`^43.1.1` → `^43.3.0`
es-toolkit (source)	`^1.49.0` → `^1.50.0`
esbuild	`^0.28.1` → `^0.28.2`
fumadocs-core	`^16.11.5` → `^16.14.3`
fumadocs-mdx	`^15.2.0` → `^15.2.3`
fumadocs-ui	`^16.11.5` → `^16.14.3`
happy-dom	`^20.11.0` → `^20.11.2`
hono (source)	`^4.12.31` → `^4.13.1`
ipaddr.js	`^2.4.0` → `^2.5.0`
lucide-react (source)	`^1.25.0` → `^1.31.0`
oxfmt (source)	`0.59.0` → `0.62.0`
oxlint (source)	`1.73.0` → `1.77.0`
oxlint-tsgolint	`0.24.0` → `0.25.0`
react (source)	`^19.2.7` → `^19.2.8`
react-dom (source)	`^19.2.7` → `^19.2.8`
react-hook-form (source)	`^7.82.0` → `^7.85.0`
recharts	`3.9.2` → `3.10.1`
shadcn (source)	`^4.13.1` → `^4.16.2`
sonner (source)	`^2.0.7` → `^2.0.8`
vite (source)	`^8.1.5` → `^8.2.1`
vite-plus (source)	`^0.2.5` → `^0.2.8`
wrangler (source)	`^4.112.0` → `^4.120.0`

Release Notes

mui/base-ui (@base-ui/react)

`v1.7.0`

Compare Source

Aug 4, 2026

General changes

Restore visible focus after keyboard close in Safari and Firefox (#5093) by @lyzno1
Type render callback props based on the rendered element (#5104) by @atomiks
Reduce popup bundle size (#5233) by @atomiks
Reduce store bundle size (#5250) by @atomiks
Keep unpositioned popups at the viewport origin (#5299) by @flaviendelangle
Correct layout and passive effect timing (#5337) by @atomiks
Remove redundant lifecycle synchronization (#5341) by @atomiks
Prevent stale cleanup from clearing registered part IDs (#5340) by @atomiks
Complete popup unmounting after a canceled exit transition (#5401) by @atomiks
Fix rendered trigger ID ownership (#5110) by @atomiks
Prevent unwanted flip with capped scrollable content (#5120) by @atomiks
Fix collisionPadding off-by-one on the biased side (#5143) by @atomiks
Reduce shared popup bundle size (#5192) by @atomiks
Mount popup subtrees synchronously when opening in React 17 (#5309) by @atomiks
Fix auto-resize origin for left-anchored popups (#5370) by @sai6855
Avoid redundant re-renders during lazy flipping (#5372) by @mdm317
Strip implementation-only types from published .d.ts files (#5165) by @michaldudak
Fix usePreviousValue equality comparison (#5264) by @lyzno1

Accordion

Remove the implicit dir attribute from <Accordion.Root> (#5117) by @chuganzy

Alert Dialog

Prevent <AlertDialog.Root> from reopening after remounting with a reused handle (#5109) by @michaldudak

Autocomplete

Respect locale when filtering (#5195) by @atomiks
Add input-press to change event details (#5356) by @chuganzy
Add cancel-open to change event details (#5376) by @chuganzy
Reset list scroll position on filter (#5231) by @atomiks
Remove dead code and deduplicate handlers (#5194) by @atomiks
Fix listbox separator semantics (#5399) by @sarthakmalik0810

Avatar

Show <Avatar.Fallback> immediately when delay={0} (#5147) by @chuganzy

Button

Fix keyboard click handling for custom elements (#4838) by @atomiks

Checkbox

Remove redundant validation input ref (#5188) by @nami8824
Stop internal input clicks from reaching ancestors (#5176) by @atomiks
Reduce bundle size (#5223) by @atomiks

Checkbox Group

Focus invalid checkbox (#5216) by @atomiks
Align form values with native submission (#5218) by @atomiks
Reduce bundle size (#5223) by @atomiks

Combobox

Add input-press to change event details (#5356) by @chuganzy
Add cancel-open to change event details (#5376) by @chuganzy
Stop filtering grouped items after limit (#5086) by @lyzno1
Remove leaky value registry (#5198) by @atomiks
Set initial highlight in inline combobox (#5230) by @atomiks
Return highlight to selected item on query clear (#5232) by @atomiks
Expose expanded state for inline comboboxes (#5332) by @sarthakmalik0810
Keep portalled popup content open (#5334) by @obeattie
Reset list scroll position on filter (#5231) by @atomiks
Fix hovered item stealing highlight when the list scrolls in Safari (#5265) by @arikchakma
Inherit the disabled state from <Combobox.Root> in <Combobox.Item> (#5365) by @chuganzy
Widen trigger slip-out release tolerance (#5159) by @atomiks
Remove dead code and deduplicate handlers (#5194) by @atomiks
Fix listbox separator semantics (#5399) by @sarthakmalik0810

Composite

Fix nested list reorder detection (#5156) by @jjenzz
Always skip natively disabled items during list navigation (#5185) by @atomiks
Fix scroll alignment for RTL direction in scrollIntoViewIfNeeded (#5234) by @sai6855
Simplify keyboard bookkeeping (#5249) by @atomiks

Dialog

Fix touch outside-press dismissal without a backdrop (#5096) by @atomiks
Prevent <Dialog.Root> from reopening after remounting with a reused handle (#5109) by @michaldudak
Fix scroll lock handoff with external overlays (#4665) by @atomiks
Reduce bundle size (#5193) by @atomiks

Drawer

Prevent <Drawer.Root> from reopening after remounting with a reused handle (#5109) by @michaldudak
Fix unreliable swipe-to-open gestures (#5105) by @atomiks
Fix popup flashing fully open for a frame on swipe area re-grab (#5112) by @atomiks
Deduplicate swipe math to reduce bundle size (#5181) by @atomiks
Fix scroll handling when focus moves while the virtual keyboard is open (#5179) by @atomiks
Fix cross-axis scroll blocked on iOS below the touchmove slop (#5257) by @atomiks
Fix snap point jump when pinned pointer moves leave the drag offset unchanged (#5308) by @atomiks
Fix Shadow DOM swipe gestures (#5360) by @atomiks

Field

Keep invalid state on disabled fields (#5116) by @atomiks
Reduce bundle size (#5225) by @atomiks
Fix data-dirty tracking for null-valued controls (#5290) by @sai6855

Fieldset

Reduce bundle size (#5225) by @atomiks

Form

Reduce bundle size (#5225) by @atomiks
Focus the first invalid field in document order (#5287) by @atomiks

Ignore pinch-zoom shifting (#4485) by @atomiks
Cancel stale submenu hover-open when Chrome drops mouseleave (#5153) by @atomiks
Fix exit animation not running on uncheck of item (#5252) by @sai6855
Fix duplicate onOpenChange calls when closing a submenu (#5178) by @atomiks
Fix VoiceOver announcement when opening a submenu (#5342) by @atomiks
Propagate disabled state to items (#5363) by @chuganzy
Open submenus on Android TalkBack press (#5384) by @atomiks
Prevent <Menu.Root> from reopening after remounting with a reused handle (#5149) by @michaldudak
Widen trigger slip-out release tolerance (#5159) by @atomiks

Meter

Format clamped values (#5409) by @atomiks
Reduce bundle size (#5224) by @atomiks

Number Field

Fix keyboard editing with multi-character format symbols (#5111) by @atomiks
Reduce bundle size (#5220) by @atomiks

OTP Field

Keep focus on the invalid field when autoSubmit is blocked (#5089) by @lyzno1

Popover

Prevent <Popover.Root> from reopening after remounting with a reused handle (#5149) by @michaldudak
Reduce bundle size (#5193) by @atomiks

Preview Card

Prevent <PreviewCard.Root> from reopening after remounting with a reused handle (#5149) by @michaldudak

Progress

Fix custom min/max semantics to match the indicator (#5095) by @atomiks
Reduce bundle size (#5224) by @atomiks

Radio Group

Remove unnecessary ARIA attributes from <Radio.Root> (#5213) by @sai6855
Stop internal input clicks from reaching ancestors (#5176) by @atomiks
Align form values with native submission (#5238) by @atomiks
Reduce bundle size (#5223) by @atomiks

Scroll Area

Fix thumb-drag divide-by-zero and per-scroll re-render (#5099) by @atomiks
Fix scrollbar visibility during touch scrolling on iOS (#5157) by @atomiks
Add WebKit overscroll feedback to <ScrollArea.Thumb> (#5145) by @atomiks
Reduce bundle size (#5217) by @atomiks
Prevent scroll snapping while dragging the thumb (#5259) by @atomiks
End thumb drag when the primary button is no longer held (#5374) by @atomiks

Select

Fix hovered item stealing highlight when the list scrolls in Safari (#5265) by @arikchakma
Inherit the disabled state from <Select.Root> in <Select.Item> (#5365) by @chuganzy
Widen trigger slip-out release tolerance (#5159) by @atomiks
Do not force-mount the popup on programmatic value changes (#5119) by @atomiks
Remove dead code and deduplicate handlers (#5194) by @atomiks
Fix listbox separator semantics (#5399) by @sarthakmalik0810

Slider

Fix assorted issues (#5097) by @atomiks
Reduce bundle size (#5222) by @atomiks
Exclude the prehydration script from client bundles (#5003) by @michaldudak

Switch

Stop internal input clicks from reaching ancestors (#5176) by @atomiks
Reduce bundle size (#5223) by @atomiks

Tabs

Position pre-hydration indicator inside streamed Suspense (#5171) by @brijeshb42
Exclude the prehydration script from client bundles (#5003) by @michaldudak
Reduce bundle size (#5221) by @atomiks

Toast

Fix remaining toast timer calculation (#5261) by @sai6855
Reduce bundle size (#5219) by @atomiks
Render content passed through the render prop in <Toast.Title>, <Toast.Description>, and <Toast.Action> (#5210) by @m2na7
Fix re-adding a closing toast (#5258) by @atomiks
Fix swipe direction locking for two-axis swipes (#5295) by @sai6855
Fix <Toast.Provider> prop effect ordering (#5338) by @atomiks

Toggle Group

Reduce bundle size (#5224) by @atomiks

Toolbar

Reduce bundle size (#5221) by @atomiks

Tooltip

Prevent <Tooltip.Root> from reopening after remounting with a reused handle (#5149) by @michaldudak

All contributors of this release in alphabetical order: @arikchakma, @atomiks, @bernardobelchior, @brijeshb42, @chuganzy, @DiegoAndai, @DreierF, @flaviendelangle, @jjenzz, @lyzno1, @m2na7, @mdm317, @michaldudak, @nami8824, @obeattie, @sai6855, @sarthakmalik0810

better-auth/better-auth (@better-auth/api-key)

Patch Changes

Updated dependencies [5124c34, 0ffd1fb, 7439359]:
- better-auth@1.6.25
- @better-auth/core@1.6.25

`v1.6.24`

Compare Source

Patch Changes

Updated dependencies [03dc5a0, 7508940, bae7198, ef4d273, 6758231, 99dbdd7, 086ca91, 8f2dedd, 4e685ee, 3bf0e49, f59a0ee, 54fab08, 0f2cc1b, ae78109, 46d2bf0, 29a373e, f6d18fa, f23ce50, c4d1dda]:
- better-

✂ Note

PR body was truncated to here.

socket-security · 2026-07-25T18:01:42Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		Obfuscated code: npm `effect` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: apps/agent/package.json → `npm/effect@3.22.1` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/effect@3.22.1`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

socket-security · 2026-08-09T18:05:45Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Quality	Maintenance
	npm/happy-dom@20.11.0 ⏵ 20.11.2		⁺¹	⁺⁴
	npm/@radix-ui/react-label@2.1.11 ⏵ 2.1.15	⁺¹	⁺¹	^-1
	npm/@radix-ui/react-separator@1.1.11 ⏵ 1.1.15	⁺¹	⁺¹	^-1
	npm/@radix-ui/react-progress@1.1.12 ⏵ 1.1.16	⁺¹	⁺¹	^-1
	npm/@radix-ui/react-slot@1.3.0 ⏵ 1.3.3	⁺¹	⁺¹	^-1
	npm/@radix-ui/react-tabs@1.1.17 ⏵ 1.1.21	⁺¹	⁺¹	^-1
	npm/@tanstack/react-query-devtools@5.101.2 ⏵ 5.101.4	⁺¹		⁺²
	npm/@radix-ui/react-alert-dialog@1.1.19 ⏵ 1.1.23			⁺¹
	npm/@radix-ui/react-hover-card@1.1.19 ⏵ 1.1.23			^-1
	npm/@radix-ui/react-switch@1.3.3 ⏵ 1.3.7	⁺¹	⁺¹	^-1
	npm/@radix-ui/react-checkbox@1.3.7 ⏵ 1.3.11	⁺¹	⁺¹	^-1
	npm/@radix-ui/react-dropdown-menu@2.1.20 ⏵ 2.1.24			^-1
	npm/@radix-ui/react-dialog@1.1.19 ⏵ 1.1.23		⁺¹	^-1
	npm/@radix-ui/react-tooltip@1.2.12 ⏵ 1.2.16		⁺¹	^-1
	npm/@radix-ui/react-scroll-area@1.2.14 ⏵ 1.2.18	⁺¹	⁺¹	^-1
	npm/fumadocs-mdx@15.2.0 ⏵ 15.2.3	⁺¹	⁺¹	⁺²
	npm/@radix-ui/react-select@2.3.3 ⏵ 2.3.7			^-1
	npm/@tanstack/react-router-devtools@1.167.0 ⏵ 1.167.1		⁺⁶
	npm/@types/semver@7.7.1 ⏵ 7.8.0		⁺¹	⁺²
	npm/@types/react-dom@19.2.3 ⏵ 19.2.4	⁺¹	⁺¹
	npm/@tanstack/react-router@1.170.18 ⏵ 1.170.25	⁺¹	⁺⁴	⁺¹
	npm/@tanstack/devtools-vite@0.8.1 ⏵ 0.8.3	⁺¹	^-3	⁺¹
	npm/fumadocs-core@16.11.5 ⏵ 16.14.3			⁺¹
	npm/fumadocs-ui@16.11.5 ⏵ 16.14.3	⁺¹		⁺¹
	npm/@better-auth/api-key@1.6.23 ⏵ 1.6.26		⁺¹
	npm/@better-auth/sso@1.6.23 ⏵ 1.6.26	⁺¹	⁺¹
	npm/@tanstack/router-plugin@1.168.22 ⏵ 1.168.29			⁺¹
	npm/@types/react@19.2.17 ⏵ 19.2.18	⁺¹	⁺¹
	npm/vite-plus@0.2.5 ⏵ 0.2.8		⁺¹
	npm/sonner@2.0.7 ⏵ 2.0.8		⁺¹	^-6
	npm/lucide-react@1.25.0 ⏵ 1.31.0		⁺¹	⁺¹
	npm/@types/node@26.1.1 ⏵ 26.2.0	⁺¹	⁺¹
See 33 more rows in the dashboard

View full report

renovate Bot force-pushed the renovate/bun-minor-and-patch-dependencies branch 13 times, most recently from c4497de to 5dd73b4 Compare July 25, 2026 18:00

renovate Bot force-pushed the renovate/bun-minor-and-patch-dependencies branch 16 times, most recently from c6aafa5 to 3a5d670 Compare July 29, 2026 04:48

renovate Bot force-pushed the renovate/bun-minor-and-patch-dependencies branch 26 times, most recently from 6e6279c to a063a05 Compare August 9, 2026 02:01

renovate Bot force-pushed the renovate/bun-minor-and-patch-dependencies branch 2 times, most recently from 40f1572 to fb5668d Compare August 9, 2026 18:05

fix(deps): update bun minor and patch dependencies

8accb67

Navigation Menu

fix(deps): update bun minor and patch dependencies - #1069

fix(deps): update bun minor and patch dependencies#1069
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/bun-minor-and-patch-dependencies

renovate Bot commented Jul 22, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jul 25, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Aug 9, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Jul 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v1.7.0

General changes

Accordion

Alert Dialog

Autocomplete

Avatar

Button

Checkbox

Checkbox Group

Combobox

Composite

Dialog

Drawer

Field

Fieldset

Form

Menu

Meter

Navigation Menu

Number Field

OTP Field

Popover

Preview Card

Progress

Radio Group

Scroll Area

Select

Slider

Switch

Tabs

Toast

Toggle Group

Toolbar

Tooltip

v1.6.26

Patch Changes

v1.6.25

Patch Changes

v1.6.24

Patch Changes

Uh oh!

socket-security Bot commented Jul 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Aug 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Jul 22, 2026 •

edited

Loading

`v1.7.0`

`v1.6.26`

`v1.6.25`

`v1.6.24`

socket-security Bot commented Jul 25, 2026 •

edited

Loading

socket-security Bot commented Aug 9, 2026 •

edited

Loading