deps: bump the production group across 1 directory with 11 updates

[dependabot]

Bumps the production group with 11 updates in the / directory:

Package	From	To
@aws-sdk/client-bedrock-runtime	3.1112.0	3.1116.0
dompurify	3.4.13	3.4.14
fumadocs-core	16.14.4	16.15.0
fumadocs-ui	16.14.4	16.15.0
jose	6.2.9	6.2.10
lucide-react	1.31.0	1.33.0
marked	18.0.9	18.0.10
mermaid	11.16.1	11.17.0
next	16.3.1	16.3.2
onnxruntime-node	1.24.3	1.27.0
wreq-js	3.0.0	3.1.0

Updates @aws-sdk/client-bedrock-runtime from 3.1112.0 to 3.1116.0

Release notes

Sourced from @​aws-sdk/client-bedrock-runtime's releases.

v3.1116.0

3.1116.0(2026-08-21)

Chores

• codegen:
  • bump smithyVersion to 1.73.0 (#8273) (64f21cd0)
  • update to sync with the latest smithy-ts (#8272) (8369ada7)

Documentation Changes

• client-backup: Updating CLI Docs for Backup Audit Manager List Job Summaries APIs. (98f47ffe)
• client-wafv2: DataProtectionConfig field Key Documentation Update (a8f1fb90)

New Features

• client-cloudwatch: Allows customers to specify an initial warm up period to wait for metrics to arrive when creating metric or log alarms (e354f162)
• client-device-farm: Added support to CreateRemoveAccessSession for selecting a server version on the mobile WebDriver endpoint. (d91e09c8)
• client-bedrock-agentcore: Increase spans count from 1k to 20k (e83264aa)
• client-kinesis: Generate account endpoint for Kinesis Data Streams requests when the account ID is available (ed9966e2)
• client-bedrock-agentcore-control: Update Dataset schema to THIRDPARTYEVALUATIONV1 (f0fe8db3)

---

For list of updated packages, view updated-packages.md in assets-3.1116.0.zip

v3.1115.0

3.1115.0(2026-08-20)

Documentation Changes

• client-pricing-plan-manager: Documentation update for the CreateSubscription API to correct the default value of the approval mode parameter. The default value for paid subscriptions is MANUAL, not IMMEDIATE as previously documented. The default value remains IMMEDIATE for FREE tier subscriptions. (50d16ae3)

New Features

• client-sesv2: Amazon SES now supports per-message tracking overrides. You can use the new ConfigurationOverrides parameter in SendEmail and SendBulkEmail to enable or disable open and click tracking for individual messages without changing your account-level or configuration set settings. (da56caa5)
• client-arc-region-switch: Adds support for Rds switchover read replica for Oracle databases in Region switch plans (85ffb20a)
• client-ec2: EC2 marks UEFI instance metadata field as sensitive. (c232746a)
• client-direct-connect: This release adds custom route prefix pool allocations for Direct Connect. You can set IPv4 and IPv6 route prefix counts on private and transit virtual interfaces, and view pool size and unallocated counts on connections and LAGs, plus direct connect gateway attachment prefix allocation totals. (a94fb978)
• client-amplify: Increased the maximum allowed length from 255 to 4,096 characters to support longer access tokens. (f7f8ecd1)
• client-batch: AWS Batch now supports a new compute environment type that provides fully managed EC2 capacity with broader compute flexibility than Fargate, including GPU instances, bare metal, and specific instance type selection, without infrastructure management overhead. (9c559a73)
• client-sagemaker: Added IAM Identity Center (IdC) support to CreatePartnerApp and UpdatePartnerApp APIs. Added Customer Managed Key (CMK) support to CreateMlflowApp and DescribeMlflowApp. (55485887)
• client-lambda: Adds support for full JSON resource-based policies, enabling customers to create, retrieve, update, and delete function resource policies as complete JSON documents. (72573a2a)
• client-cloudfront: Added SigV4a as a supported signing protocol for Origin Access Control (OAC), enabling CloudFront to sign requests to Amazon S3 Multi-Region Access Point (S3-MRAP) origins. (95476293)

---

For list of updated packages, view updated-packages.md in assets-3.1115.0.zip

... (truncated)

Changelog

Sourced from @​aws-sdk/client-bedrock-runtime's changelog.

3.1116.0 (2026-08-21)

Note: Version bump only for package @​aws-sdk/client-bedrock-runtime

3.1115.0 (2026-08-20)

Note: Version bump only for package @​aws-sdk/client-bedrock-runtime

3.1114.0 (2026-08-19)

Note: Version bump only for package @​aws-sdk/client-bedrock-runtime

3.1113.0 (2026-08-18)

Note: Version bump only for package @​aws-sdk/client-bedrock-runtime

Commits

• d760a00 Publish v3.1116.0
• 8369ada chore(codegen): update to sync with the latest smithy-ts (#8272)
• efc86fc Publish v3.1115.0
• 5318b44 Publish v3.1114.0
• 73a06d2 Publish v3.1113.0
• See full diff in compare view

Updates dompurify from 3.4.13 to 3.4.14

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.14

• Fixed an issue with possible bypasses when risky tags are allow-listed, thanks @​AlirezaRouhbakhsh
• Fixed a couple of edge cases with mixed document contexts, thanks @​fishjojo1
• Added the SVG pointer-events and vector-effect presentation attributes to the allow-list, thanks @​Jaybhade
• Conducted another refactoring run, removed dead branches and duplicated logic, flattened attribute validation
• Updated the documentation in several spots, README, wiki, etc., thanks @​Akokonunes
• Updated several development dependencies and CI workflow actions

Commits

• 4e6fe24 release: 3.4.14 (#1587)
• See full diff in compare view

Updates fumadocs-core from 16.14.4 to 16.15.0

Release notes

Sourced from fumadocs-core's releases.

fumadocs@16.15.0

• @​fumadocs/base-ui@​16.15.0
• fumadocs-core@16.15.0
• fumadocs-ui@16.15.0

Redesign source API

Content sources can hook into the static loader they are attached to, and dynamic sources can opt out of the loader's in-memory file cache.

configureStatic runs when a source is attached to loader(), and again whenever dynamicLoader() builds a new static loader:

export function createMySource(): DynamicSource {
  return {
    cache: 'custom',
    async files() {
      return loadFiles();
    },
    configureStatic({ loader, source }) {
      // `loader` is the created static loader
      // `source` is the record key when using named sources
    },
    configure(loader, { source }) {
      loader.invalidate();
    },
  };
}

• cache: 'memory' (default): files() is called once until invalidate().
• cache: 'custom': the source caches itself. dynamicLoader() re-runs files() on get() and rebuilds only when the file list is shallowly different (by identity).

Integrations

GraphQL cross-links are generated from the attached loader instead of a baseUrl option on staticSource(). Local, OpenAPI, and AsyncAPI dynamicSource() use cache: 'custom' and reuse generated files by identity until invalidate().

Sanity now uses cache: 'custom' when given a sanityFetch from next-sanity/live, calling invalidate() in draft mode is no longer needed.

Return heading and text results from the Algolia client

algoliaClient grouped hits into page, heading and text results, then dropped everything except pages. All three are now returned with highlighting, matching the other search clients.

Fix locale-only pages leaking into other locales

i18n storages no longer share folder arrays with the fallback locale. Locale-only pages previously appeared in every locale's page tree as duplicate nodes.

Index pages by URL

getPageByHref resolves absolute URLs through an index instead of scanning all pages on every call.

... (truncated)

Commits

• f548dab Version Packages (#3491)
• 992beee fix(mdx): encode import query
• 01b920c feat(sanity): adopt to Next.js cache API
• 967cb9b perf(mdx): add queue to index-file generation
• 21ac4f8 perf(notion): cache asset request
• 771d556 fix(core): heading & text results from algolia client
• e15eaf4 fix(api-docs): ignore self-recursive $ref
• 442d24c perf(core): shiki checks
• 36c53f3 perf(mdx): scope lastModified git log to the content directory
• 030bc4e perf(asyncapi): cache the document proxy in toStaticData
• Additional commits viewable in compare view

Updates fumadocs-ui from 16.14.4 to 16.15.0

Release notes

Sourced from fumadocs-ui's releases.

fumadocs@16.15.0

• @​fumadocs/base-ui@​16.15.0
• fumadocs-core@16.15.0
• fumadocs-ui@16.15.0

Redesign source API

Content sources can hook into the static loader they are attached to, and dynamic sources can opt out of the loader's in-memory file cache.

configureStatic runs when a source is attached to loader(), and again whenever dynamicLoader() builds a new static loader:

export function createMySource(): DynamicSource {
  return {
    cache: 'custom',
    async files() {
      return loadFiles();
    },
    configureStatic({ loader, source }) {
      // `loader` is the created static loader
      // `source` is the record key when using named sources
    },
    configure(loader, { source }) {
      loader.invalidate();
    },
  };
}

• cache: 'memory' (default): files() is called once until invalidate().
• cache: 'custom': the source caches itself. dynamicLoader() re-runs files() on get() and rebuilds only when the file list is shallowly different (by identity).

Integrations

GraphQL cross-links are generated from the attached loader instead of a baseUrl option on staticSource(). Local, OpenAPI, and AsyncAPI dynamicSource() use cache: 'custom' and reuse generated files by identity until invalidate().

Sanity now uses cache: 'custom' when given a sanityFetch from next-sanity/live, calling invalidate() in draft mode is no longer needed.

Return heading and text results from the Algolia client

algoliaClient grouped hits into page, heading and text results, then dropped everything except pages. All three are now returned with highlighting, matching the other search clients.

Fix locale-only pages leaking into other locales

i18n storages no longer share folder arrays with the fallback locale. Locale-only pages previously appeared in every locale's page tree as duplicate nodes.

Index pages by URL

getPageByHref resolves absolute URLs through an index instead of scanning all pages on every call.

... (truncated)

Commits

• f548dab Version Packages (#3491)
• 992beee fix(mdx): encode import query
• 01b920c feat(sanity): adopt to Next.js cache API
• 967cb9b perf(mdx): add queue to index-file generation
• 21ac4f8 perf(notion): cache asset request
• 771d556 fix(core): heading & text results from algolia client
• e15eaf4 fix(api-docs): ignore self-recursive $ref
• 442d24c perf(core): shiki checks
• 36c53f3 perf(mdx): scope lastModified git log to the content directory
• 030bc4e perf(asyncapi): cache the document proxy in toStaticData
• Additional commits viewable in compare view

Updates jose from 6.2.9 to 6.2.10

Release notes

Sourced from jose's releases.

v6.2.10

Fixes

• jose: consume serialization members once (9bee285)
• jose: reject empty protected and JWE AAD members (8da4145)
• jose: validate serialized header values (b711d8f)
• jwe: conceal invalid decrypted CEK lengths (41fafe0)
• jwe: enforce AES-GCM tag boundaries (9a5b744)
• jwe: validate explicit encryption parameters (7a02697)
• jwk: accept empty octet-sequence keys (3f871e7)
• jwk: normalize key resolution inputs (f54ee7b)
• jwks: enforce verification key metadata (f9ba510)
• jwks: order overlapping remote reloads (9a1a913)
• jwks: reject invalid remote duration values (7bdb9e5)
• jwk: validate ext and key_ops parameters (4d91c37)
• jws: reject mixed payload encoding modes (dc69713)
• jws: validate unencoded payload strings (541f282)
• jwt: enforce explicit verification policies (b347182)
• jwt: prevent replacing protected headers (ae07d09)
• jwt: reject invalid duration inputs (282f9aa)
• jwt: validate builder claim values (ea03f83)
• jwt: validate unsecured protected headers (230c14e)
• key: validate generation and import options (15d880e)
• reject mixed b64 modes for empty General JWS payloads (61a2ef7)
• x509: reject DER truncated past its outer length (d8db9f6)

Documentation

• jwks: correct cache timestamp units (01a44d9)

Refactor

• jose: share binary input validation (eedb124)
• jose: share compact token processing internals (85e30ed)
• jwe: consolidate CBC decryption failures (1ee6f61)
• jwe: specialize compact processing (a998927)
• jwe: streamline single-recipient encryption (290aaa6)
• jwks: compact JWK Set shape validation (930c7df), references Array#every
• jwks: compact local key selection (4cb5ae5)
• jwks: compact remote resolver state (ef5eaf4)
• jws: specialize compact processing (021abf4)
• jwt: compact claim validation helpers (f390683)
• jwt: consolidate replicated claim checks (7dd5591)
• jwt: share producer claim state (52ba159)
• key: compact JWK algorithm selection (a6b29da)
• key: compact secret length parsing (cc03be8)

Changelog

Sourced from jose's changelog.

6.2.10 (2026-08-21)

Fixes

• jose: consume serialization members once (9bee285)
• jose: reject empty protected and JWE AAD members (8da4145)
• jose: validate serialized header values (b711d8f)
• jwe: conceal invalid decrypted CEK lengths (41fafe0)
• jwe: enforce AES-GCM tag boundaries (9a5b744)
• jwe: validate explicit encryption parameters (7a02697)
• jwk: accept empty octet-sequence keys (3f871e7)
• jwk: normalize key resolution inputs (f54ee7b)
• jwks: enforce verification key metadata (f9ba510)
• jwks: order overlapping remote reloads (9a1a913)
• jwks: reject invalid remote duration values (7bdb9e5)
• jwk: validate ext and key_ops parameters (4d91c37)
• jws: reject mixed payload encoding modes (dc69713)
• jws: validate unencoded payload strings (541f282)
• jwt: enforce explicit verification policies (b347182)
• jwt: prevent replacing protected headers (ae07d09)
• jwt: reject invalid duration inputs (282f9aa)
• jwt: validate builder claim values (ea03f83)
• jwt: validate unsecured protected headers (230c14e)
• key: validate generation and import options (15d880e)
• reject mixed b64 modes for empty General JWS payloads (61a2ef7)
• x509: reject DER truncated past its outer length (d8db9f6)

Documentation

• jwks: correct cache timestamp units (01a44d9)

Refactor

• jose: share binary input validation (eedb124)
• jose: share compact token processing internals (85e30ed)
• jwe: consolidate CBC decryption failures (1ee6f61)
• jwe: specialize compact processing (a998927)
• jwe: streamline single-recipient encryption (290aaa6)
• jwks: compact JWK Set shape validation (930c7df), references Array#every
• jwks: compact local key selection (4cb5ae5)
• jwks: compact remote resolver state (ef5eaf4)
• jws: specialize compact processing (021abf4)
• jwt: compact claim validation helpers (f390683)
• jwt: consolidate replicated claim checks (7dd5591)
• jwt: share producer claim state (52ba159)
• key: compact JWK algorithm selection (a6b29da)
• key: compact secret length parsing (cc03be8)

Commits

• 3eab152 chore(release): 6.2.10
• 021abf4 refactor(jws): specialize compact processing
• a998927 refactor(jwe): specialize compact processing
• eedb124 refactor(jose): share binary input validation
• 52ba159 refactor(jwt): share producer claim state
• 85e30ed refactor(jose): share compact token processing internals
• 0bd81d2 test(jose): cover hidden critical-header options
• 9cf7876 test(jose): reject callable object impostors
• f23cafd test(jose): preserve resolved key data properties
• 1ee6f61 refactor(jwe): consolidate CBC decryption failures
• Additional commits viewable in compare view

Updates lucide-react from 1.31.0 to 1.33.0

Release notes

Sourced from lucide-react's releases.

Version 1.33.0

What's Changed

• feat(icons): add list-clock icon by @​lazerg in lucide-icons/lucide#4636
• feat(icons): add square-dimensions by @​samuelalake in lucide-icons/lucide#4547
• feat(icons): added usb-c-port icon by @​karsa-mistmere in lucide-icons/lucide#4556
• docs(site): correct Vanilla icon import casing by @​hugosmoreira in lucide-icons/lucide#4597
• feat(icons): added audio-lines-off icon by @​karsa-mistmere in lucide-icons/lucide#4589
• chore(icon-discussions): add icon design template by @​jguddas in lucide-icons/lucide#4691
• feat(icons): added mop icon by @​karsa-mistmere in lucide-icons/lucide#4682
• chore(scripts): Potential fix for code scanning alert no. 31: Inefficient regular expression by @​ericfennis in lucide-icons/lucide#4723
• chore(deps-dev): bump the svelte-deps group with 3 updates by @​dependabot[bot] in lucide-icons/lucide#4720
• feat(icon-discussions): close discussions with banned phrases by @​jguddas in lucide-icons/lucide#4692
• feat(icons): added midi-port icon by @​simoncoudeville in lucide-icons/lucide#3754

New Contributors

• @​hugosmoreira made their first contribution in lucide-icons/lucide#4597
• @​simoncoudeville made their first contribution in lucide-icons/lucide#3754

Full Changelog: lucide-icons/lucide@1.32.0...1.33.0

Version 1.32.0

What's Changed

• feat(icons): added car-battery icon by @​andreynaz4renko in lucide-icons/lucide#4088
• fix(categories): fixes emoji.json by @​karsa-mistmere in lucide-icons/lucide#4697
• chore(deps): bump vue from 3.5.40 to 3.5.41 in the vue-deps group across 1 directory by @​dependabot[bot] in lucide-icons/lucide#4695
• chore(dev): upgrade ESLint to latest compatible stack (v10) by @​ericfennis with @​Copilot in lucide-icons/lucide#4378
• feat(icons): add square-text by @​samuelalake in lucide-icons/lucide#4609

New Contributors

• @​andreynaz4renko made their first contribution in lucide-icons/lucide#4088

Full Changelog: lucide-icons/lucide@1.31.0...1.32.0

Commits

• 75b5516 chore(dev): upgrade ESLint to latest compatible stack (v10) (#4378)
• See full diff in compare view

Updates marked from 18.0.9 to 18.0.10

Release notes

Sourced from marked's releases.

v18.0.10

18.0.10 (2026-08-18)

Bug Fixes

• keep the em/strong mask the same length as the source (#4044) (681373c)
• parse EOF backtick fences after paragraphs (#4039) (81bd750)
• place task checkboxes after list loose is finalized (#4046) (b8cf7dc), closes #4045

Commits

• 8698d35 chore(release): 18.0.10 [skip ci]
• 58367a5 chore(deps-dev): bump eslint from 10.8.0 to 10.8.1 (#4055)
• a426c4d chore(deps-dev): bump esbuild from 0.28.1 to 0.28.2 (#4056)
• a5cf277 chore(deps-dev): bump highlight.js from 11.11.1 to 11.12.0 (#4057)
• ca00e95 docs: replace nonexistent test:all script with npm test (#4054)
• b8cf7dc fix: place task checkboxes after list loose is finalized (#4046)
• 9552b6b chore(deps-dev): bump semantic-release from 25.0.8 to 25.0.9 (#4049)
• 681373c fix: keep the em/strong mask the same length as the source (#4044)
• 81bd750 fix: parse EOF backtick fences after paragraphs (#4039)
• 2e21cd3 docs: move theme button to menu (#4043)
• Additional commits viewable in compare view

Updates mermaid from 11.16.1 to 11.17.0

Release notes

Sourced from mermaid's releases.

mermaid@11.17.0

Minor Changes

• #7842 3670b4e Thanks @​filipsajdak! - feat(c4): render C4 elements through the unified shape system, using the new person shape

• #7812 cdfc0ea Thanks @​knsv-bot! - feat(class): route classDiagram to the unified (v2) renderer by default

  Set class: { defaultRenderer: 'dagre-d3' } in the config to restore the legacy renderer.

• #7785 c45cde9 Thanks @​knsv-bot! - feat(flowchart): add collapsible flowchart subgraphs via subgraphId@{ view: collapsed }

• #7828 8eb3afc Thanks @​knsv-bot! - feat(elk): add elk.keepEntryNodeOnTop config option to keep a recursive flow's entry node on top

• #7803 74e44eb Thanks @​knsv-bot! - feat(elk): add elk.nodePlacementAlignment config option

• #7792 ea55b31 Thanks @​RodrigojndSantos! - feat(er): add subgraph support to ER diagrams.

• #7970 a2c0fb6 Thanks @​filipsajdak! - feat(flowchart): add folder, bucket, console (terminal window) and browser shapes

• #7842 ae3e115 Thanks @​filipsajdak! - feat(flowchart): add person shape (circular head above a rounded body), usable in flowcharts via A@{ shape: person }

• #7724 0fd7a9f Thanks @​xdumaine! - feat(xyChart): add legends for named line and bar series

Patch Changes

• #7847 215fe89 Thanks @​filipsajdak! - fix(c4): named attributes such as $tags, $link and $sprite are no longer clobbered to undefined when they arrive in an earlier positional slot of Person/System/Container/Component/Boundary/Rel statements.

• #7871 8d874c4 Thanks @​knsv-bot! - fix(flowchart): stop dagre layout from spamming warn-level logs on every node/edge/cluster

• #8071 b3d1f63 Thanks @​pbrolin47! - fix(block): sibling blocks overlapping in block diagrams when one has a label wider than 200px

• #7870 71b8843 Thanks @​knsv-bot! - fix: a RangeError: Invalid array length crash when rendering certain edges.

• #7924 9cbef5d Thanks @​nightt5879! - fix(treeView): icons disappearing after strict security sanitization.

• #7850 a34cbf0 Thanks @​aloisklink! - fix(block): allow classdefs to update text color

• #7937 f9cbe1e Thanks @​filipsajdak! - fix(dagre): let a diagram's own nodeSpacing/rankSpacing take effect in the unified dagre layout

• #8005 90eeece Thanks @​pbrolin47! - fix(flowchart): reverts the behavior change from #7672 (fix/4648-directions), since arrows between subgraphs are broken

• #7951 afa2f80 Thanks @​aloisklink! - perf: use fastdom to batch DOM measurements (up to 25% speedup)

• Updated dependencies [e848423]:

  • @​mermaid-js/parser@​1.2.1

Commits

• 293b1c1 Merge pull request #8074 from mermaid-js/changeset-release/master
• f484a36 Version Packages
• 0a07bf6 Bump layout-elk version (#8078)
• 1127c5f Merge pull request #8071 from mermaid-js/release/11.17.0
• 8628ef1 docs: remove C4 typescript conversion changeset
• 349ebd3 docs: remove non-user visible changeset
• b5a744a docs: scope to all v11.17.0 changeset messages
• 4150c73 Make changesets less verbose
• 7ba4b6f [autofix.ci] apply automated fixes
• b3d1f63 Fixed block rendering due to failing SS in applitools
• Additional commits viewable in compare view

Updates next from 16.3.1 to 16.3.2

Release notes

Sourced from next's releases.

v16.3.2

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

• [backport] Scope app-entry export validation to files inside the app directory (#97357)
• [backport] Fix catch-all index page being served for every other slug (#97416)
• [16.3] Turbopack: don't trace embedded WASM loader helpers (#97353) (#97463)
• [16.3] Turbopack: retain conditions when replacing resolve request keys (#97453)
• [16.3.x] Fix Turbopack worker chunk loading with asset prefix (#97419)
• [16.3.x] Authenticate Turborepo remote caching with OIDC instead of a static PAT (#97603)

Credits

Huge thanks to @​lubieowoce, @​unstubbable, @​timneutkens, @​mischnic, and @​eps1lon for helping!

Commits

• d0ac882 v16.3.2
• 81deb92 [16.3.x] Authenticate Turborepo remote caching with OIDC instead of a static ...
• cd714d9 [16.3.x] Fix Turbopack worker chunk loading with asset prefix (#97419)
• 5ac2327 [16.3] Turbopack: retain conditions when replacing resolve request keys (#97453)
• 0ccb3e7 [16.3] Turbopack: don't trace embedded WASM loader helpers (#97353) (#97463)
• f4dc7c8 [backport] Fix catch-all index page being served for every other slug (#97416)
• eba236b [backport] Scope app-entry export validation to files inside the app director...
• See full diff in compare view

Updates onnxruntime-node from 1.24.3 to 1.27.0

Release notes

Sourced from onnxruntime-node's releases.

ONNX Runtime v1.27.0

n.b. This release is targeting ONNX 1.21. ONNX 1.22 will be supported in ORT 1.28. n.b. This changelog was generated via LLM. Only the contributor list has been verified. As always, only trust the commit history.

Announcements & Breaking Changes

• CUDA 12 package files are now explicitly named as such.
• CUDA 12 packages are deprecated, please move to CUDA 13 ASAP.

---

Security Fixes

• Fixed out-of-bounds read in SoftmaxCrossEntropyLoss via label bounds validation (#28004)
• Hardened OneHot input validation and output-size computation (#28014)
• Added SafeInt overflow protection in Expand and capped constant-folding output sizes (#28055)
• Bounded total output allocation size in Tile kernel (#28070)
• Added mask/input shape consistency checks in MaxpoolWithMask::Compute (#28223)
• Fixed BitShift UB for shift amounts greater than or equal to bit width (#28272)
• Validated sequence bounds in GQA (seqlens_k vs cos_cache) (#28277)
• Validated conv bias shape in WordConvEmbedding to prevent OOB reads (#28279)
• Fixed int32 overflow in CUDA Cast and UnaryElementWise kernels for very large tensors (#28386)
• Fixed out-of-bounds read in CropBase scale handling (#28399)
• Fixed rank-underflow bug in Inverse kernel trailing-dimension indexing (#28400)
• Added sparse tensor external file path validation and additional external-path hardening (#28408, #28709, #28725)
• Switched remaining torch.load() calls to weights_only=True (#28421)
• Added CPU cache-indirection beam-index validation (#28486)
• Added additional overflow/bounds checks and test coverage in runtime buffers (#28713, #28747)

---

New Features

Execution Provider Plugin API

• Added zero-copy I/O for plugin EPs with HOST_ACCESSIBLE memory (#28037)
• Added OrtEp::OnSessionInitializationEnd() callback (#28319)
• Added plugin EP session-options getters (#28377)
• Added CUDA Plugin EP provider options for streams and external allocators (#28603)

Core APIs & Runtime

• Added support for ONNX overloaded functions (IR v10+) (#28275)
• Added FLOAT8E8M0 datatype support in ONNX Runtime (#28381)
• Added CPU Cast support for FLOAT8E8M0 (#28435)
• Added kOrtEpDevice_EpMetadataKey_OSDriverVersion example and docs (#28282)

Quantization & Training Tooling

• Added calibration cache support to quantize_static (#28221)

... (truncated)

Commits

• 8f0278c [CUDA] Optimize QMoE SoftmaxTopK router for small-batch decode (#29026)
• 66916b0 fix: NodeJS pkging stage needs to use CFS (#29007)
• af99e19 Disable OrtEp::ort_version_supported sanity check to work around EPs that don...
• 6fc112f 1.27.0 - cherry pick 2 (

[diegosouzapw]

Re-homed to release/v3.8.51: v3.8.50 entered its release freeze, so the branch now belongs to the release captain and development continues on the next cycle. Nothing is wrong with this PR — it just needed a live base. No action needed from you; CI will re-run against the new base.

[diegosouzapw]

Retargeted from release/v3.8.50, this branch carries ~90 orphaned v3.8.50-lineage commits as a phantom diff and conflicts on package-lock.json. Content-wise most updates are mechanical, but two need explicit validation after @dependabot recreate: the pinned native onnxruntime-node jump (1.24.3 -> 1.27.0, affects native-dep hydration/packaging) and wreq-js 3.x minor in the codex/github executor request path. Recreate first, then a build + focused executor smoke.

[diegosouzapw]

@dependabot recreate