[dependabot]

Bumps the development group with 8 updates in the / directory:

Package	From	To
@types/node	22.20.1	26.2.0
@vitejs/plugin-react	6.0.5	6.1.0
bun	1.3.14	1.4.0
@types/bun	1.3.14	1.4.0
eslint-config-next	16.3.1	16.3.2
fumadocs-mdx	15.2.3	15.3.1
opencode-ai	1.18.18	1.18.21
vitest	4.1.10	4.1.11

Updates @types/node from 22.20.1 to 26.2.0

Commits

• See full diff in compare view

Updates @vitejs/plugin-react from 6.0.5 to 6.1.0

Release notes

Sourced from @​vitejs/plugin-react's releases.

plugin-react@6.1.0

Add experimental native React Compiler support (#1419)

Add experimental native React Compiler support.

You can use it by installing oxc-transform-react and enabling it via the compiler option:

npm install -D oxc-transform-react

import { defineConfig } from 'vite'
import react from '@vitejs/plugin-react'
export default defineConfig({
plugins: [
react({ compiler: true })
]
})

Changelog

Sourced from @​vitejs/plugin-react's changelog.

6.1.0 (2026-08-19)

Add experimental native React Compiler support (#1419)

Add experimental native React Compiler support.

You can use it by installing oxc-transform-react and enabling it via the compiler option:

npm install -D oxc-transform-react

import { defineConfig } from 'vite'
import react from '@vitejs/plugin-react'
export default defineConfig({
plugins: [
react({ compiler: true })
]
})

Commits

• 39b3173 release: plugin-react@6.1.0 (#1428)
• f1340b0 feat(react): add native React Compiler support (#1419)
• 9ab698e fix(deps): update all non-major dependencies (#1375)
• See full diff in compare view

Updates bun from 1.3.14 to 1.4.0

Release notes

Sourced from bun's releases.

Bun v1.4

To install Bun v1.4

curl -fsSL https://bun.com/install | bash
# or you can use npm
# npm install -g bun

Windows:

powershell -c "irm bun.com/install.ps1|iex"

To upgrade to Bun v1.4.0:

bun upgrade

Read the blog post:

Thank you

Bun is free, open source, and MIT-licensed. We receive a lot of contributions from the community, and we'd like to thank everyone who fixed a bug or contributed since Bun v1.3.

• @​190n
• @​alanstott
• @​alii
• @​alinalihassan
• @​amdad121
• @​ant-kurt
• @​anthonybaldwin
• @​avarayr
• @​baboon-king
• @​billywhizz
• @​bmwalters
• @​Boshen
• @​braden-w
• @​c-stoeckl
• @​carlsmedstad
• @​chrislloyd
• @​cirospaciari
• @​coleleavitt
• @​connerlphillippi

... (truncated)

Commits

• 34cbb9a Fix edgecase in v8 CPU profiler
• cfa9f8e valkey: add ERR_REDIS_SERVER_ERROR for server error replies (#39573)
• 6ee3009 Read BUN_FEATURE_FLAG_EXPERIMENTAL_BAKE and BUN_FEATURE_FLAG_NO_LIBDEFLATE fr...
• 0a4e3b1 process: NUL-terminate the PSI trigger that arms memoryPressure on Linux (#39...
• 4199361 tls: send a bare RST from terminate(), no close_notify (#39632)
• a356964 usockets: skip the poll-error close for a socket a handler already closed (#3...
• 24c0063 valkey: fix null array, null CRLF, big number and blob error replies (#39544)
• 8226b3d css: keep the lower bound when simplifying clamp() (#39577)
• 88165c6 buffer: restore swap16/32/64 and multi-byte indexOf throughput (#39616)
• 118154c libjpeg-turbo: use the clz intrinsic and enable the x86_64 SIMD kernels (#39523)
• Additional commits viewable in compare view

Updates @types/bun from 1.3.14 to 1.4.0

Commits

• See full diff in compare view

Updates eslint-config-next from 16.3.1 to 16.3.2

Release notes

Sourced from eslint-config-next's releases.

v16.3.2

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

• [backport] Scope app-entry export validation to files inside the app directory (#97357)
• [backport] Fix catch-all index page being served for every other slug (#97416)
• [16.3] Turbopack: don't trace embedded WASM loader helpers (#97353) (#97463)
• [16.3] Turbopack: retain conditions when replacing resolve request keys (#97453)
• [16.3.x] Fix Turbopack worker chunk loading with asset prefix (#97419)
• [16.3.x] Authenticate Turborepo remote caching with OIDC instead of a static PAT (#97603)

Credits

Huge thanks to @​lubieowoce, @​unstubbable, @​timneutkens, @​mischnic, and @​eps1lon for helping!

Commits

• d0ac882 v16.3.2
• See full diff in compare view

Updates fumadocs-mdx from 15.2.3 to 15.3.1

Release notes

Sourced from fumadocs-mdx's releases.

fumadocs-mdx@15.3.1

Scope lastModified git log to the content directory

git log is scoped to the collection's content directory instead of buffering the repository's entire history in every worker.

Fix Vite dev server crash on declaration-only dependencies

The injected Vite config no longer pre-bundles packages without runtime JavaScript, such as @types/mdx. Pre-bundling them made esbuild parse .d.ts files and fail on imports that only exist in type space, crashing the dev server.

Encode import.meta.glob query values

The Vite codegen passed the query to import.meta.glob as an object, letting the bundler serialize it. Rolldown inlines the values as-is, so a macro id such as src/lib/source.ts#docs left an unescaped / in the content file's module id and relative imports from that module (e.g. images from ![Banner](https://github.com/fuma-nama/fumadocs/blob/HEAD/logo.png)) failed to resolve, since the importer's directory is derived from the raw id.

The query is now serialized (and percent-encoded) by Fumadocs itself, matching what the Node.js codegen already did.

fumadocs-mdx@15.3.0

Sätteri 0.10

@fumadocs/satteri now requires satteri ^0.10.3, and the plugins were rewritten on its new capabilities:

• Exports (frontmatter, toc, structuredData, …) are emitted by an after document hook instead of an anchor marker appended to the source, so plugins no longer see (or need to skip) the anchor node.
• remark-steps, remark-admonition and remark-code-tab still detect their targets through node visitors (so documents without the construct cost nothing), but process each parent exactly once in an after hook, replacing the per-visit dedup workarounds.
• remark-llms stringifies the document root from a before hook instead of subscribing to 19 node types to find it.
• Markdown documents compile through Sätteri's own markdownToJs; the hand-assembled pipeline is gone. Raw HTML in .md files is still dropped, matching the previous behavior.
• rehype-katex parses KaTeX output with Sätteri's htmlToHast, dropping the hast-util-from-html dependency.
• No plugin reads node.position, so Sätteri now skips source-position tracking entirely (~15% faster parse).

Breaking: ExtraPluginHooks.beforeToJs was removed. Seed ctx.data from a Sätteri before hook on the plugin definition instead — it also receives the document root:

import { defineMdastPlugin } from 'satteri';
defineMdastPlugin({
name: 'my-plugin',
before(root, ctx) {
ctx.data.myValue ??= [];
},
});

Commits

• f548dab Version Packages (#3491)
• 992beee fix(mdx): encode import query
• 01b920c feat(sanity): adopt to Next.js cache API
• 967cb9b perf(mdx): add queue to index-file generation
• 21ac4f8 perf(notion): cache asset request
• 771d556 fix(core): heading & text results from algolia client
• e15eaf4 fix(api-docs): ignore self-recursive $ref
• 442d24c perf(core): shiki checks
• 36c53f3 perf(mdx): scope lastModified git log to the content directory
• 030bc4e perf(asyncapi): cache the document proxy in toStaticData
• Additional commits viewable in compare view

Updates opencode-ai from 1.18.18 to 1.18.21

Release notes

Sourced from opencode-ai's releases.

v1.18.21

Core

Bugfixes

• Continue responses when a model reports an unknown finish reason instead of stopping early
• Route Vertex AI eu and us multi-region Gemini requests through REP endpoints

Desktop

Bugfixes

• Keep file search results visible while the next search is loading
• Register the archive session command in both desktop layouts (@​NathanTCode)

Thank you to 1 community contributor:

• @​NathanTCode:
  • fix(app): register archive session command in both layouts (#41741)

v1.18.20

Core

Bugfixes

• Surface failed subagent tool calls with a resumable task_id.
• Retry provider responses that end with finish_reason: network_error.
• Retry more network error variants, including network-error and network_error.
• Surface resumable subagent failures instead of returning an empty result.
• Preserve Cerebras max_completion_tokens without applying an extra output cap.
• Answer permission requests triggered by subagents during opencode run.
• Retry xAI capacity and temporary unavailability stream errors.

v1.18.19

Core

Improvements

• Added native OpenAI and Anthropic passthroughs for Cloudflare AI Gateway models.
• Matched Codex rate limits more closely to ChatGPT subscription limits. (@​GameOn223)

Bugfixes

• Removed built-in Qwen sampling defaults that could send unsupported settings.
• Properly show authenticated providers in /connect. (@​OpeOginni)
• Ignore malformed model pricing instead of breaking usage cost calculation.
• Fall back when OpenAI websocket requests exceed message size limits.
• Forward ChatGPT workspace compute residency to Codex requests.
• Updated the default Console URL used by account connection flows.
• Enabled web search when using the OpenCode Go provider.
• Preserved compatibility with existing v1 databases.

Desktop

... (truncated)

Commits

• 826d9ad release: v1.18.21
• 57fa34f fix(opencode): continue unknown finish responses (#43892)
• 0af9dd6 fix(stats): merge renamed model data (#43883)
• 8ecd4c2 chore: generate
• 361a71f fix(opencode): route Vertex multi-regions through REP (#42648)
• fa8f170 chore: generate
• 813e6f3 docs(go): add DeepSeek vision model (#43866)
• ba72a6f fix(go): align Ox Alpha model ID (#43837)
• b6a1f95 fix(app): preserve file search results while loading (#43836)
• f357e70 fix(app): register archive session command in both layouts (#41741)
• Additional commits viewable in compare view

Updates vitest from 4.1.10 to 4.1.11

Release notes

Sourced from vitest's releases.

v4.1.11

   🐞 Bug Fixes

• Revive global concurrency limit for test lifecycle [backport to v4]  -  by @​sheremet-va and @​hi-ogawa in vitest-dev/vitest#10992 (5146d)
• browser:
  • Encode iframeId in tester iframe URL [backport to v4]  -  by @​sheremet-va, Pduhard and Claude Opus 4.8 in vitest-dev/vitest#10955 (10b2c)
  • Trigger playwright/chromium gc on lower disk availability [backport to v4]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode in vitest-dev/vitest#10951 (9851d)
• mocker:
  • Restrict redirect mocks to the fs allowlist [backport to v4]  -  by @​sheremet-va in vitest-dev/vitest#10974 (fe5a1)

    View changes on GitHub

Commits

• 9bd8d46 chore: release v4.1.11 (#10995)
• 9851dbc fix(browser): trigger playwright/chromium gc on lower disk availability [back...
• See full diff in compare view

[diegosouzapw]

Re-homed to release/v3.8.51: v3.8.50 entered its release freeze, so the branch now belongs to the release captain and development continues on the next cycle. Nothing is wrong with this PR — it just needed a live base. No action needed from you; CI will re-run against the new base.

[diegosouzapw]

Retargeted from release/v3.8.50, this branch carries ~90 orphaned v3.8.50-lineage commits as a phantom diff. The bump itself needs one decision before landing: it moves the deliberately-pinned bun devDependency (1.3.14 -> 1.4.0). Please comment @dependabot recreate to rebuild off the current v3.8.51 tip, then either keep the pin (drop the bun update) or validate 1.4.0 by running the five bun gate scripts + test:bun:db.

[diegosouzapw]

@dependabot recreate