chore(deps): update all non-major dependencies #9

2026-10-26T15:58:28-07:00

renovate-bot commented

2026-10-26 15:58:28 -07:00

This PR contains the following updates:

Package	Change	Age	Confidence
@base-ui/react (source)	`1.8.0` → `1.9.0`
@testing-library/dom	`10.4.1` → `10.4.2`
@testing-library/user-event	`14.6.7` → `14.6.8`
@types/node (source)	`24.13.4` → `24.19.2`
@vitest/coverage-v8 (source)	`5.0.0` → `5.0.5`
eslint-plugin-react-refresh	`^0.4.24` → `^0.5.0`
jsdom	`30.0.1` → `30.1.3`
react (source)	`19.3.0` → `19.3.1`
react-dom (source)	`19.3.0` → `19.3.1`
react-router (source)	`7.18.3` → `7.18.4`
shadcn (source)	`4.21.0` → `4.22.1`
socket.io-client (source)	`4.8.3` → `4.8.4`
tailwind-merge (source)	`3.6.0` → `3.7.0`
typescript-eslint (source)	`8.70.0` → `8.72.0`
vitest (source)	`5.0.0` → `5.0.5`
zustand	`5.0.15` → `5.0.16`

Release Notes

mui/base-ui (@base-ui/react)

`v1.9.0`

Compare Source

Oct 9, 2026

General changes

Export CssVariables and DataAttributes types (#5243) by @superhooman
Fix stale focused field state (#5345) by @atomiks
Fix animation waits retaining detached elements (#5719) by @flaviendelangle
Keep item registration in sync when items change under Strict Mode (#5862) by @atomiks
Avoid re-rendering inactive triggers on open and close (#5865) by @atomiks

Accordion

Fix <Accordion.Trigger>'s data-value and data-index attributes (#5705) by @cpruijsen
Apply the native disabled attribute to <Accordion.Trigger> when using native buttons (#5607) by @atomiks
Expand hiddenUntilFound panels synchronously on beforematch (#5514) by @aarongarciah

Alert Dialog

Don't associate a programmatically opened popup with a trigger that did not open it (#5641) by @michaldudak

Autocomplete

Fix autoHighlight for asynchronous results (#5818) by @atomiks
Pass the originating event to onItemHighlighted. Pointer events may be MouseEvent or PointerEvent; typing reports the reason none (#5838) by @atomiks
Decouple automatic unmounting from actionsRef. Call eventDetails.preventUnmountOnClose() in onOpenChange to opt out of automatic unmounting (#5734) by @michaldudak

Checkbox

Prefer aria-label over associated labels (#5787) by @atomiks

Collapsible

Apply the native disabled attribute to <Collapsible.Trigger> when using native buttons (#5607) by @atomiks
Finish closing when the render function removes the panel (#5890) by @michaldudak
Restore animations when a removed panel reopens (#5891) by @michaldudak
Expand hiddenUntilFound panels synchronously on beforematch (#5514) by @aarongarciah

Combobox

Fix stale chip focus after returning to the input (#5879) by @mdm317
Fix autoHighlight for asynchronous results (#5818) by @atomiks
Decouple automatic unmounting from actionsRef. Call eventDetails.preventUnmountOnClose() in onOpenChange to opt out of automatic unmounting (#5734) by @michaldudak
Fix label focus in Shadow DOM (#5871) by @lyzno1
Pass the originating event to onItemHighlighted. Pointer events may be MouseEvent or PointerEvent; typing reports the reason none (#5838) by @atomiks
Reset typeahead state when closing without moving focus (#5816) by @mdm317
Accept readonly arrays for multiple values (#5710) by @MonstraG
Share item indicator implementation (#5728) by @flaviendelangle
Improve mount performance of large lists (#5819) by @atomiks
Combine item store subscriptions (#5863) by @atomiks

Dialog

Keep parent open when closing a nested dialog in a closed shadow root (#5780) by @atomiks
Don't associate a programmatically opened popup with a trigger that did not open it (#5641) by @michaldudak

Drawer

Preserve swipe release velocity after a trailing stationary pointer event (#5658) by @padd60
Fix swipe release velocity on 120 Hz input (#5845) by @atomiks
Remove excess virtual keyboard scroll space (#5768) by @atomiks
Avoid excess keyboard spacing in Chrome on iOS (#5774) by @atomiks
Fix native focus scrolling on iOS 27 (#5769) by @atomiks
Handle CloseWatcher close requests from the cancel event (#5770) by @atomiks
Add x and y options to data-base-ui-swipe-ignore (#5808) by @citrus
Scroll instead of swiping when a drag starts on an SVG (#5844) by @atomiks
Avoid touch event overhead while the drawer is closed (#5864) by @atomiks
Preserve item taps when dismissing the virtual keyboard (#5882) by @atomiks
Avoid retaining unmounted drawers in <Drawer.Provider> (#5921) by @atomiks
Don't associate a programmatically opened popup with a trigger that did not open it (#5641) by @michaldudak

Field

Avoid warnings when an uncontrolled <Field.Control>'s defaultValue changes (#5881) by @atomiks
Fix label focus in Shadow DOM (#5871) by @lyzno1

Add menu filtering behavior with <Menu.FilterProvider>, <Menu.Input>, and the onItemHighlighted callback (preview) (#5527, #5838, #5840, #5868) by @atomiks and @jjenzz
Fix nested menus without a root trigger (#5645) by @LukasTy
Fix event listener cleanup in <Menu.Trigger> (#5764) by @sai6855
Release parent menu subscriptions when a submenu unmounts (#5833) by @santiago-ramos-02
Pass the native event to onOpenChange when an item press closes the menu (#5789) by @michaldudak
Close submenu when focus returns through its guard (#5793) by @jjenzz
Toggle submenus on repeated trigger activation (#5824) by @jjenzz
Reset typeahead state when closing without moving focus (#5816) by @mdm317
Fix focus guard loop when the trigger is the only tabbable element (#5733) by @atomiks
Fix hover-out animations when switching between detached triggers (#4261) by @michaldudak
Don't start a viewport transition when the trigger remounts while closed (#5887) by @michaldudak
Keep transition state consistent when reopening a retained popup (#5738) by @LukasTy
Improve mount performance of large lists (#5819) by @atomiks

Number Field

Fire <NumberField.ScrubArea>'s onClick once per click (#5889) by @michaldudak

OTP Field

Fix Safari IME composition over-filling slots (#5098) by @atomiks

Popover

Fix focus guard loop when the trigger is the only tabbable element (#5733) by @atomiks
Fix hover-out animations when switching between detached triggers (#4261) by @michaldudak
Don't start a viewport transition when the trigger remounts while closed (#5887) by @michaldudak
Keep transition state consistent when reopening a retained popup (#5738) by @LukasTy

Preview Card

Don't start a viewport transition when the trigger remounts while closed (#5887) by @michaldudak

Radio Group

Prefer aria-label over associated labels (#5787) by @atomiks
Prevent ignored arrow keys from selecting on refocus (#5643) by @tjdsksro90
Correct inputRef forwarding and cleanup (#5775) by @lyzno1

Scroll Area

Remove presentational viewport role (#5813) by @sarthakmalik0810

Select

Decouple automatic unmounting from actionsRef. Call eventDetails.preventUnmountOnClose() in onOpenChange to opt out of automatic unmounting (#5734) by @michaldudak
Fix label focus in Shadow DOM (#5871) by @lyzno1
Reset typeahead state when closing without moving focus (#5816) by @mdm317
Synchronize root props through the store (#5589) by @flaviendelangle
Share item indicator implementation (#5728) by @flaviendelangle
Improve mount performance of large lists (#5819) by @atomiks
Combine item store subscriptions (#5863) by @atomiks
Accept readonly arrays for multiple values (#5710) by @MonstraG

Slider

Fix label focus in Shadow DOM (#5871) by @lyzno1
End drags on touchcancel and pointercancel (#5639) by @brijeshb42
Fix touch track taps not firing onValueCommitted (#5779) by @atomiks
Preserve single-element array values on pointer interaction (#5781) by @atomiks

Switch

Prefer aria-label over associated labels (#5787) by @atomiks

Tabs

Fix selecting tabs with function values (#5886) by @michaldudak

Toast

Keep timers paused during overlapping interactions (#5809) by @lyzno1

Tooltip

Don't start a viewport transition when the trigger remounts while closed (#5887) by @michaldudak

All contributors of this release in alphabetical order: @aarongarciah, @atomiks, @brijeshb42, @citrus, @cpruijsen, @flaviendelangle, @jjenzz, @LukasTy, @lyzno1, @mdm317, @michaldudak, @MonstraG, @padd60, @sai6855, @santiago-ramos-02, @sarthakmalik0810, @superhooman, @tjdsksro90

testing-library/dom-testing-library (@testing-library/dom)

`v10.4.2`

Compare Source

Bug Fixes

deps: pin @types/node to a TypeScript 4-compatible version (#1386) (6049cc0)

testing-library/user-event (@testing-library/user-event)

`v14.6.8`

Compare Source

Bug Fixes

treat programmatic null input values as empty string (#1329) (1951eb7)

vitest-dev/vitest (@vitest/coverage-v8)

`v5.0.5`

Compare Source

🐞 Bug Fixes

Keep vite default fs.deny with api token file - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in #11578 (28dc1)
Handle quoted file names in --changed - by @sheremet-va in #11583 (14921)
Add data to the import.meta.hot stub - by @sheremet-va in #11590 (3a828)
Set skip in skipIf, ignore undefined options - by @sheremet-va in #11591 (d523a)
Skip builtin loading in async leak detector - by @sheremet-va in #11598 (fe86a)
Keep the import frame in native loader errors - by @sheremet-va in #11599 (9697b)
Run hook cleanups when a later hook fails - by @sheremet-va in #11605 (6c5a4)
Release mocks of finished test files - by @sheremet-va in #11607 (e9c3d)
Abort all running tests on cancel - by @sheremet-va in #11606 (6621a)
browser:
- Ignore synthetic pagehide events - by @sheremet-va in #11582 (ca081)
- Run plugin buildStart on server creation - by @sheremet-va in #11593 (ea611)
- Drop late connections of closed sessions - by @sheremet-va in #11600 (f161e)
- Wait 30s for the browser to close - by @sheremet-va in #11601 (6498b)
- Run global setup once with instances - by @sheremet-va in #11596 (8dd67)
reporter:
- End reason &#39;failed&#39; on worker crash - by @AriPerkkio in #11568 (6ae8e)

View changes on GitHub

`v5.0.4`

Compare Source

🚀 Features

experimental:
- Tag cache directories with CACHEDIR.TAG - by @lifeiscontent in #11461 (a8ea3)
- Support test.ui.theme option - by @sheremet-va in #11499 (1da66)
- Highlight selector multiple matches in trace view - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in #11489 (5abba)
- Print how many tests were affected and a total when running --changed - by @sheremet-va in #11424 (a2336)
- Add an option to cache dependencies instead of statically parsing them - by @sheremet-va in #11515 (c0601)
- Add fit and zoom controls to trace viewer - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in #11490 (f5dd9)

🐞 Bug Fixes

Fail the run on git and location filter errors - by @sheremet-va in #11430 (30d03)
Enable fsModuleCache by default - by @sheremet-va in #11435 (ad208)
Track project files and mocks with --changed - by @sheremet-va in #11432 (b0f2b)
Refactor caching, fix : in project and change the shape of results cache - by @sheremet-va in #11453 (9673c)
Keep full $ string values when taskTitleValueFormatTruncate is 0 - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in #11485 (4f7e1)
Resolve node builtins in client environments - by @sheremet-va in #11417 (56b31)
Fix module graph builtin externals after #11421 - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in #11491 and #11421 (008e1)
Wrap module mocks during in-source testing - by @sheremet-va in #11505 (36d19)
Handle line endings in snapshot - by @sheremet-va in #11522 (4c468)
Respect root in projects - by @sheremet-va in #11521 (26642)
Resolve mocks in directories with spaces - by @sheremet-va in #11539 (caaef)
api:
- Publish the api token atomically - by @umairnawaz333 in #11323 (6f990)
browser:
- Close the mock route interception race - by @cplieger and @sheremet-va in #8339 and #11083 (d6620)
- Allow toHaveTextContent without arguments - by @nomadical in #11425 (8ebcf)
- Apply API options without browser config - by @sheremet-va in #10852 (ad055)
- Preserve undefined command arguments - by @sheremet-va and @AriPerkkio in #11497 (1576d)
- Wait for setup mocks before importing a test file - by @kasperpeulen in #11520 (b61d1)
- Avoid extra scroll outside the iframe - by @sheremet-va in #11523 (662e8)
- Run browser instances as workers - by @sheremet-va in #11525 (bf04b)
  - ⚠️ This can degrade performance if you have a custom maxWorkers setting. Previously, it was applied incorrectly and could lead to Vitest using too many resources. For example, a lower number would still open too many browsers. Fixing it means Vitest opens less instances by default now.
- Open one cdp session per tester - by @sheremet-va in #11542 (69e63)
- Clean up unmocked and pending mocks - by @sheremet-va in #11537 (5c955)
coverage:
- V8 browser memory leak between test files - by @AriPerkkio in #11466 (2297d)
- allowExternal fails to include uncovered files - by @AriPerkkio in #11513 (4ef00)
- Filenames containing brackets incorrectly showing as uncovered - by @AriPerkkio in #11531 (0fa80)
- Istanbul coverage wrong when module transform warmups - by @AriPerkkio in #11529 (9f61d)
deps:
- Update all non-major dependencies - by @sheremet-va in #11167 (c74e0)
expect:
- Fix Map and Set deep equality in some assertions - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in #11402 (b4e79)
- Check value in chai-style returned - by @sheremet-va in #11500 (1aca0)
mocker:
- Fix native loader mocking edge cases - by @sheremet-va in #11540 (cd423)
pretty-format:
- Support boxed symbols - by @lehni in #11445 and #11446 (eba44)
reporters:
- Junit to strip ANSI sequences from all XML attributes - by @meganemura and Claude Opus 5.5 in #11407 (e1a73)
runner:
- Don't cache failed fixture setups - by @hamed-bavar in #11237 and #11238 (4ee66)
typecheck:
- Use typescript pool in toTestSpecification - by @sheremet-va in #11451 (5f273)
ui:
- Remove duplicate browser-open call opening two tabs - by @feastyr69 in #11356 and #11358 (d7e13)
- Simplify explorer filtering + fix nested tests when search matches a suite - by @hi-ogawa, Hiroshi Ogawa, Codex and Claude Opus 5.5 in #11262 (a627b)
- Store module graph once per environment - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in #11421 (af903)
- Mount index.html handler on the ui base path - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in #11517 (1bc24)
- Center split pane resize handle - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in #11506 (e658b)
vm:
- Bind this to module.exports - by @sheremet-va in #11504 (b618a)

🏎 Performance

Reuse fsModuleCache when filtering by source - by @sheremet-va in #11428 (7ebd9)
spy: Reset only mocks that were called or reconfigured - by @johan-gorter and Claude Opus 5.5 in #11197 (28ef9)

View changes on GitHub

`v5.0.3`

Compare Source

🐞 Bug Fixes

Isolate result.status between repeats runs - by @hi-ogawa, Hiroshi Ogawa and Codex (GPT-6) in #11218 (5dbeb)
Don't print an interceptor warning in browser mode - by @sheremet-va in #11377 (15cc0)
Don't retry when test.fails expectedly failed - by @hi-ogawa, Hiroshi Ogawa and Codex (GPT-6) in #11219 (b2458)
Scope cache key generators to projects - by @ecoyoung in #11281 and #11301 (92ba7)
browser:
- Delay server listen until tests start running - by @sheremet-va in #11366 (7d8ed)
- Check mock path boundaries - by @saryn17, Ryosei Sato and @sheremet-va in #11361 and #11362 (1c388)
- Keep config of browser-consumed environments - by @kasperpeulen and Claude in #11378 (aafc0)
- Ignore page crash while cancelling - by @sheremet-va in #11386 (7c367)
- toMatchScreenshot uses wrong reference on retried tests - by @macarie in #11393 (c22ab)
cache:
- Revalidate imports of cached modules - by @sheremet-va in #11381 (38f98)
deps:
- Pin why-is-node-running to 3.2.1 to avoid users running into ERR_PNPM_TRUST_DOWNGRADE - by @AriPerkkio in #11403 (f6c9a)
expect:
- Pass current equality testers to expect.extend asymmetric matchers - by @hi-ogawa, Hiroshi Ogawa and Claude in #11401 (3e794)
jsdom:
- Support Blob on jsdom 30.1 - by @sheremet-va in #11379 (6c49b)
pool:
- Preserve unique pool ids when groupOrder is set - by @mtorp in #11392 (50312)
ui:
- Split-pane handle overlapping iframe - by @macarie in #11221 (f91db)
vitest:
- Remove root temp dir on close - by @abhinav-phi in #11248 (7c711)
vm:
- Do not optimize deps from index.html - by @ezefernandezyf, Hiroshi Ogawa and Codex (GPT-6) in #11329 and #11360 (caf28)
- Don't reuse scripts across vite environments - by @MO2k4, Martin Oehlert and Claude in #11395 (346d3)

View changes on GitHub

`v5.0.2`

Compare Source

🐞 Bug Fixes

Bind process in case global is overwritten - by @AriPerkkio in #11343 (0b792)
detect-async-leaks:
- Ignore process.stdio handles - by @AriPerkkio in #11333 (0fd6b)
expect:
- Fix toMatchObject with asymmetric matchers - by @ShreeBohara, Claude Opus 5, @hi-ogawa, Hiroshi Ogawa and Codex (GPT-5) in #11100 (42523)
jsdom:
- Fix Request with Blob body on jsdom 28+ - by @harshit-d3v in #11295 (d1c3e)
reporter:
- agent to respect --silent - by @Raj4478 and @AriPerkkio in #11271 (5b95e)
reporters:
- Handle concurrent createReport calls - by @7rulnik in #11278 (e8e55)
- hanging-process to use ESM entrypoint - by @AriPerkkio in #11316 (4e91e)
spy:
- Fix stack overflow when spying Set.prototype.add - by @fengmk2 in #11299 (a0a93)
ui:
- Persist authentication cookie beyond current browser session - by @hi-ogawa, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in #11066 (f8819)

View changes on GitHub

`v5.0.1`

Compare Source

🚀 Features

ui:
- Move trace attempts selector to viewer header - by @hi-ogawa, Hiroshi Ogawa and Codex in #11189 (5dc4b)
- Add focused trace view layout mode - by @hi-ogawa, Hiroshi Ogawa, OpenCode (gpt-5.6-sol) and Codex in #11190 (376dc)

🐞 Bug Fixes

Exit 1 when vitest list fails collection - by @hamed-bavar in #11145 and #11146 (6108b)
Keep parse error details in static collection - by @hamed-bavar in #11150 and #11151 (7c818)
Avoid recursive prototype in automocking - by @sheremet-va in #11195 (99fc5)
Prevent false Vitest import resolution - by @sheremet-va in #11196 (b426c)
Keep metadata file when clearing the cache - by @sheremet-va in #11199 (73614)
Correct typos in error message and comments - by @shinji00222 and Shinji in #11187 (115c3)
Resolve ResolvedConfig exactOptionalPropertyTypes errors - by @LukeAbby in #11175 (498fb)
Share the server on self-referencing extends - by @sheremet-va in #11034 (23dda)
Warn when deprecated deps.optimizer.web is used - by @im10furry in #11214 (2ce29)
browser:
- Avoid double quotes in config.define - by @sheremet-va in #11198 (972e2)
doctor:
- Measure vm pools for custom environments - by @sheremet-va in #11212 (91ab1)
expect:
- Correct return value in toMatchAriaSnapshot - by @sheremet-va in #11208 (c119b)
fakeTimers:
- Force queueMicrotask and nextTick in toNotFake - by @kingmakeruix, kingmakeruix, Hiroshi Ogawa, Codex and @hi-ogawa in #11261 (a47d7)
snapshot:
- Report obsolete keys next to skipped tests - by @hamed-bavar, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in #11157 and #11158 (17e2b)
types:
- Make public declarations self-contained - by @ZoeySigel in #11141 (45546)
ui:
- Fix collapse/expand suite with file name search - by @hi-ogawa, Hiroshi Ogawa and Codex in #11260 (0a712)
- Fix explorer file summary count - by @hi-ogawa, Hiroshi Ogawa, OpenCode (gpt-5.6-sol) and Codex in #11125 (05982)
utils:
- Fix deepMerge to handle prototype - by @hi-ogawa, Hiroshi Ogawa and Codex in #11215 (4944c)

View changes on GitHub

ArnaudBarre/eslint-plugin-react-refresh (eslint-plugin-react-refresh)

`v0.5.7`

Compare Source

Add `allowCompoundComponents` option (#117)

Default: false (true in vite config)

Don't warn when components are exported as an object gathering them. Every member of the object must be a component, and a member holding an anonymous function requires a component name as key.

This should be enabled if the fast refresh implementation correctly handles this case. Vite supports it since @vitejs/plugin-react 4.7.0, @vitejs/plugin-react-swc 3.11.0.

{
  "react-refresh/only-export-components": [
    "error",
    { "allowCompoundComponents": true }
  ]
}

Enabling this option allows code such as the following:

const Root = () => <></>;
const Label = () => <></>;
export const Tag = { Root, Label };

`v0.5.6`

Compare Source

Support re-exporting namespace components (fixes #116)

`v0.5.5`

Compare Source

Fix SCREAMING_SNAKE_CASE constant exported via export { Name } incorrectly treated as React component #114 (fixes #113)
Add contentType and size to allowExportNames in Next config #115

`v0.5.4`

Compare Source

Add instant to allowExportNames in Next config #112

`v0.5.3`

Compare Source

Fix check for non component class exported via export { } #110 (fixes #109)

`v0.5.2`

Compare Source

Support nested function calls for extraHOCs (actually fixes #104)

`v0.5.1`

Compare Source

Mark ESLint v10 as supported
Support false positives with TypeScript function overloading (fixes #105)
Support nested function calls for extraHOCs (fixes #104)

`v0.5.0`

Compare Source

Breaking changes

The package now ships as ESM and requires ESLint 9 + node 20. Because legacy config doesn't support ESM, this requires to use flat config
A new reactRefresh export is available and prefered over the default export. It's an object with two properties:
- plugin: The plugin object with the rules
- configs: An object containing configuration presets, each exposed as a function. These functions accept your custom options, merge them with sensible defaults for that config, and return the final config object.
customHOCs option was renamed to extraHOCs
Validation of HOCs calls is now more strict, you may need to add some HOCs to the extraHOCs option

Config example:

import { defineConfig } from "eslint/config";
import { reactRefresh } from "eslint-plugin-react-refresh";

export default defineConfig(
  /* Main config */
  reactRefresh.configs.vite({ extraHOCs: ["someLibHOC"] }),
);

Config example without config:

import { defineConfig } from "eslint/config";
import { reactRefresh } from "eslint-plugin-react-refresh";

export default defineConfig({
  files: ["**/*.ts", "**/*.tsx"],
  plugins: {
    // other plugins
    "react-refresh": reactRefresh.plugin,
  },
  rules: {
    // other rules
    "react-refresh/only-export-components": [
      "warn",
      { extraHOCs: ["someLibHOC"] },
    ],
  },
});

Why

This version follows a revamp of the internal logic to better make the difference between random call expressions like export const Enum = Object.keys(Record) and actual React HOC calls like export const MemoComponent = memo(Component). (fixes #93)

The rule now handles ternaries and patterns like export default customHOC(props)(Component) which makes it able to correctly support files like this one given this config:

{
  "react-refresh/only-export-components": [
    "warn",
    { "extraHOCs": ["createRootRouteWithContext"] }
  ]
}

[!NOTE]
Actually createRoute functions from TanStack Router are not React HOCs, they return route objects that fake to be a memoized component but are not. When only doing createRootRoute({ component: Foo }), HMR will work fine, but as soon as you add a prop to the options that is not a React component, HMR will not work. I would recommend to avoid adding any TanStack function to extraHOCs it you want to preserve good HMR in the long term. Bluesky thread.

Because I'm not 100% sure this new logic doesn't introduce any false positive, this is done in a major-like version. This also give me the occasion to remove the hardcoded connect from the rule. If you are using connect from react-redux, you should now add it to extraHOCs like this:

{
  "react-refresh/only-export-components": ["warn", { "extraHOCs": ["connect"] }]
}

jsdom/jsdom (jsdom)

`v30.1.3`

Compare Source

Improved performance of getComputedStyle() and computed CSS property reads, including with stylesheets containing attribute selectors. (@scttcper, @asamuzaK)
Fixed slowdowns when focusing elements and running interaction tests, which regressed in v30.1.2. (@scttcper)
Fixed XMLHttpRequest reusing credentials supplied to xhr.open() after cross-origin redirects, including in response to authentication challenges from the destination.
Fixed XMLHttpRequest incorrectly sending and accepting cookies after cross-origin redirects back to the document's origin when xhr.withCredentials is false.
Fixed exceptions from malformed CSS math functions, such as calc(0px - @submenu_space), while parsing documents, stylesheets, and style declarations. (@rnavarro)
Fixed getComputedStyle() ignoring style rules nested inside multiple @media rules.
Fixed CSS shorthands overwriting longhands with higher priority or specificity during style computation, including declarations containing CSS variables.
Fixed getComputedStyle() returning unresolved or inconsistent shorthand values, including for 'background', 'border', 'flex', 'font', 'margin', and 'padding', and incorrect shorthand defaults and inheritance.
Fixed computed background positions to resolve font-relative lengths using the final font size and handle multiple image layers correctly.
Fixed computed 'color' values depending on property read order, including unresolved color-mix() results, which regressed in v29.0.2.
Fixed currentcolor border colors incorrectly becoming transparent when 'color' uses light-dark() or relative color syntax.
Fixed CSS calculations that reduce to a percentage incorrectly producing pixel values, which regressed in v30.0.0.
Fixed numeric font weights in the 'font' shorthand incorrectly setting 'line-height'.
Fixed selector matching involving XML namespaces, and selectors such as [data-a|=""] failing to match empty values and values beginning with -. (@asamuzaK)

`v30.1.2`

Compare Source

Updated URLs to support Unicode v18.0.0 in internationalized domain names.
Reduced package size and memory use for CSS property definitions. (@scttcper)
Fixed severe slowdowns when building large DOM trees, including SVG charts with D3, which regressed in v30.1.0. (@cmdcolin)
Fixed exponentially slow reads of empty inherited CSS custom properties in deeply nested documents, and custom properties incorrectly inheriting past an initial reset. (@scttcper)
Fixed getComputedStyle() returning stale results after editing stylesheet declarations, selectors, or media queries, including in imported stylesheets.
Fixed selector matching and computed styles after changes to form control checkedness, indeterminacy, selection, values, and validity, including during form resets and canceled clicks.
Fixed computed styles for :focus, :focus-visible, :focus-within, and selectors containing them after focus changes, including inside focus and blur listeners. (@asamuzaK)
Fixed element.focus() incorrectly focusing elements hidden by 'display', including through shadow hosts and slots, and elements excluded by shadow DOM slot assignment. (@asamuzaK)
Fixed getComputedStyle() throwing for elements without inline-style support, including XML and MathML elements.
Fixed a memory leak where stylesheet parsing retained the last parsed stylesheet's window after window.close().
Fixed memory growth from long-lived MutationObserver instances retaining bookkeeping for garbage-collected nodes. (@scttcper)
Fixed retained select.selectedOptions collections becoming stale after selection changes and form resets.
Fixed rejection of negative CSS sizing values, including for 'min-width', 'min-height', 'max-width', and 'max-height', which regressed in v30.1.0.
Fixed handling of deeply nested color-mix() expressions, including exceptions during color resolution. (@asamuzaK)

`v30.1.1`

Compare Source

Fixed spurious window blur and focusout events and incorrect event.relatedTarget values when focusing an element after removing the previously focused element, which regressed in v30.1.0. (@asamuzaK)
Fixed focus and blur behavior across frames, and focusing the document's viewport through document.documentElement.focus(). (@asamuzaK)
Fixed focus targets removed or disabled by blur listeners becoming active, and text selections made by focus and blur listeners being overwritten. (@asamuzaK)
Fixed element.focus() incorrectly focusing disabled form controls and <input type="hidden"> elements with tabindex="". (@scttcper)
Fixed invalid style.setProperty() calls changing existing !important priorities, serialized styles, or mutation records. (@FedgeNo)
Fixed !important handling when updating CSS longhands after shorthands, using variables or CSS-wide keywords, and assigning style properties directly. (@FedgeNo)
Fixed <noscript> parsing with includeNodeLocations: true or inside frames to honor the runScripts option.
Fixed the storageQuota option being ignored by frames.
Fixed encoding detection of HTML and XML byte input to honor XML encoding declarations and detect UTF-16 without a byte order mark.
Fixed exceptions caused by truncated charset parameters in <meta> elements, and encoding detection incorrectly using incomplete <meta> tags. (@FedgeNo)
Fixed XML serialization errors for namespaces named constructor, toString, __proto__, or "null", and incorrect reuse of namespace prefixes declared on sibling elements.
Fixed element.innerHTML and element.outerHTML in XML documents to reject invalid characters in attribute values and avoid stack overflows on large strings.
Fixed selector matching for :lang(), :nth-child(... of ...) after mutations, and :has() with duplicate IDs or nested logical pseudo-classes. (@asamuzaK)

`v30.1.0`

Compare Source

jsdom is feeling the AGI!

This release is dedicated to @scttcper, who unleashed @codex upon jsdom and found tons of performance improvements. Along the way, he found and fixed many correctness issues as well.

We really appreciate his thoughtful PRs, which did a great job following the project's contribution guidelines, and were clearly human-curated, with their PR descriptions edited to be brief and respectful of the maintainers' time.

Thanks to @scttcper, as well as all the other contributors of this release (most of whom were AI-assisted).

Added named access to elements on document, such as document.myForm for <form name="myForm">. (@vojtisprime11)
Added QuotaExceededError, including its use for storage quota errors and oversized crypto.getRandomValues() requests.
Added support for the relaxed DOM naming rules when creating elements, attributes, and document types.
Improved performance of DOM construction, tree mutations, range operations, and live collection access, especially on large documents. (@scttcper, @erezrokah)
Improved performance of getComputedStyle(), style changes, and CSS serialization. (@scttcper, @jhult)
Improved performance of event dispatch, form control and label lookups, and updates to <select> elements and radio button groups. (@scttcper)
Reduced memory use when creating and working with DOM nodes, attributes, event listeners, and mutation observers. (@scttcper)
Changed window.close() to preserve access to the document and its DOM through retained references.
Fixed element.querySelectorAll() returning no matches when the first part of the selector matches the element itself, which regressed in v30.0.0. (@asamuzaK)
Fixed case sensitivity in CSS attribute selectors, including selectors matching data-state="", title="", and other case-sensitive values. (@asamuzaK)
Fixed document.querySelector() failing to find a matching element when an earlier element has the same ID but does not match the rest of the selector. (@vojtisprime11)
Fixed :focus matching in shadow trees. (@asamuzaK)
Fixed DOM insertion and replacement, including valid document.replaceChildren() calls, invalid document element and doctype placements, and mutations during element.replaceWith().
Fixed the ordering of script execution, custom element callbacks, iframe loading, and mutation observer notifications during DOM insertion, including in shadow trees.
Fixed queued events and navigation continuing after window.close() or iframe removal, and prevented new scripts, resource loads, timers, and animation frames from starting in destroyed documents. (@scttcper)
Fixed parent documents waiting indefinitely for loading to finish when a child iframe removes itself during loading.
Fixed request cancellation across redirects, during pending requestInterceptor() callbacks, and when reusing an XMLHttpRequest after aborting it.
Fixed resource loading and JSDOM.fromURL() potentially hanging when response handling throws and response stream cleanup does not finish.
Fixed successful cached resource loads being treated as aborted.
Fixed getComputedStyle() and document.styleSheets using the wrong stylesheet order after inserting or updating <style> elements.
Fixed getComputedStyle() ignoring nested @import and @media rules in imported stylesheets, and returning stale results after imports finish loading.
Fixed style invalidation, stylesheet removal, and frame source updates in shadow trees.
Fixed repeated getComputedStyle() calls changing case-sensitive background URLs, and inconsistent resolution of border shorthands containing system colors. (@scttcper)
Fixed computed border widths, including borderless elements incorrectly reporting 16px, which regressed in v30.0.0. (@Alberto-BaseNet)
Fixed getComputedStyle() to resolve 'font-weight' keywords to numeric values. (@tianrking)
Fixed getComputedStyle() to convert lengths to pixels inside CSS math functions containing percentages, and to resolve percentages in 'font-size' math functions. (@soroushm)
Fixed serialization of min() and max() containing nested calc(), which regressed in v30.0.0. (@asamuzaK)
Fixed CSS values mixing lengths or percentages with math functions, such as 'grid-template-columns' values containing both 100px and calc(). (@rome-xi)
Fixed parsing of 'background' and 'border' shorthands with adjacent components, such as url(a.png)no-repeat, including a crash when parsing inline styles. Also fixed handling of invalid shorthand assignments and escaped or unusual characters in CSS declarations. (@asamuzaK)
Fixed parsing of unitless zero values in 'flex' shorthands, such as 35 1 0, and rejection of negative 'flex-basis' lengths and percentages. (@asamuzaK)
Fixed shorthand style assignments producing extra mutation records and custom element callbacks for intermediate values. (@scttcper)
Fixed Range and Selection handling of CDATA sections, including boundary offsets and range cloning, extraction, deletion, insertion, and stringification. (@scttcper)
Fixed text.normalize() incorrectly removing the text node or merging its siblings. (@scttcper)
Fixed cloning and importing CDATA sections and processing instructions whose contents have been modified, and serialization of CDATA sections adopted into HTML documents.
Fixed stale named-property collections on window, and incorrect named access from empty or namespaced id="" and name="" values. (@scttcper)
Fixed elements in documents created with DOMParser or document.implementation.createHTMLDocument() appearing as named properties on window and being retained in memory. (@Iaotle)
Fixed memory leaks from mutation observers retaining observed nodes, abort signals retaining removed event listeners, and storage event tracking retaining closed windows. (@scttcper)
Fixed storage events being sent to windows created after the storage change, and ensured surviving recipients still receive events when the source document is destroyed.
Fixed attribute lookups after namespace prefix changes, and namespaced attributes incorrectly affecting ID lookups and element behavior. (@scttcper)
Fixed input.list in detached element trees. (@scttcper)
Fixed attr.ownerDocument after setting an attribute node on an element in another document or adopting its element. (@Kjubikstronk)
Fixed fresh element.getElementsByTagName() calls using the previous document's case-sensitivity rules after adoption between HTML and XML documents. (@Kjubikstronk)
Fixed element.tagName returning stale casing after adoption between HTML and XML documents.
Fixed radio button grouping and checkedness updates for controls with different form owners, controls outside their form, unnamed controls, and canceled clicks.
Fixed <select> selection updates when moving options, and unintended selection resets when moving a whole <select> or changing unrelated descendants.
Fixed cloning <input> elements to preserve input.indeterminate.
Fixed focus state after removing a focused element or its ancestor, including inside shadow trees.
Fixed script execution when inserting children into a connected, empty <script>. (@Kjubikstronk)
Fixed incorrect script execution after changes to src="", and handling of type="", for="", and event="".
Fixed document.currentScript during nested script execution and scripts in shadow trees.
Fixed event dispatch, window.event, and default passive listener handling for non-node event targets, and event dispatch when user code modifies window.constructor.
Fixed volumechange and ratechange events to fire asynchronously. (@christianaurichzm)
Fixed DOM APIs accepting user-created proxies around DOM objects where genuine DOM objects are required.
Fixed XPath iterator invalidation after DOM mutations and errors for invalid result types.
Fixed NodeIterator traversal when its filter removes nodes.
Fixed fileReader.readAsText() to honor the blob's MIME type charset when no supported explicit encoding is supplied.
Fixed fractional seconds in time input parsing and serialization. (@Jaybhade)
Fixed large input.valueAsNumber assignments for time and local date/time inputs.
Fixed hard wrapping of <textarea> values to use the numeric textarea.cols value.
Fixed document.readyState to be "complete" for documents created with document.implementation.createDocument() and document.implementation.createHTMLDocument().
Fixed element.translate for empty translate="" values and elements without a parent.
Fixed XML parsing of lone surrogates to replace them with the Unicode replacement character.
Fixed node.lookupNamespaceURI() for the xml and xmlns prefixes. (@vojtisprime11)
Fixed <base> elements to ignore data: and javascript: URLs. (@vojtisprime11)
Fixed svgElement.viewportElement inside <symbol> elements.
Fixed the default blobEvent.timecode to be NaN.
Fixed the object shape and property descriptors of CSS.

react/react (react)

`v19.3.1`: 19.3.1 (October 14th, 2026)

Compare Source

React Server Components

Improve transport protocol (#37845 by @unstubbable and @eps1lon)

remix-run/react-router (react-router)

`v7.18.4`: v7.18.4

Compare Source

See the changelog for release notes: https://github.com/remix-run/react-router/blob/v7/CHANGELOG.md#v7184

shadcn-ui/ui (shadcn)

`v4.22.1`

Compare Source

Patch Changes

#12360 4381eeb Thanks @shadcn! - Fix shadcn add --all and the component picker to only include components available for the project's style.

`v4.22.0`

Compare Source

Minor Changes

#12298 954ce95 Thanks @shadcn! - Upgrade to Zod 4. shadcn/schema and @shadcn/registry/schema now export Zod 4 schemas, so passing them to Zod 3's z no longer typechecks. On Zod 3, use the exported types (RegistryItem, RegistryItemFile, Config) and the schema's own methods (registryItemSchema.array()) instead of z.infer and z.array. Zod errors expose issues, not errors. Validation messages now use Zod 4's wording.

Patch Changes

Updated dependencies [954ce95]:
- @shadcn/registry@0.2.0

`v4.21.5`

Compare Source

Patch Changes

#12214 4407349 Thanks @dependabot! - Update @modelcontextprotocol/sdk, browserslist, open and postcss-selector-parser.
#12192 dd34945 Thanks @shadcn! - Move @shadcn/registry modules out of utils.
#12297 7aa2110 Thanks @mattzcarey! - Fix MCP search and list results showing [object Promise] instead of the add command.
#12174 2af71ac Thanks @dependabot! - Update @modelcontextprotocol/sdk to 1.31.0.
#12048 cfb4cb6 Thanks @dependabot! - Update undici to 7.29.1.
Updated dependencies [97ddbf4, dd34945, cfb4cb6]:
- @shadcn/registry@0.1.4

Patch Changes

#12148 596be8dda8f94927281184b8c4575150531f85ea Thanks @shadcn! - Fix ERR_REQUIRE_CYCLE_MODULE when running the CLI with pnpm dlx on Windows.
Updated dependencies [596be8dda8f94927281184b8c4575150531f85ea]:
- @shadcn/registry@0.1.2

`v4.21.2`

Compare Source

Patch Changes

#12143 8c2bf3882cb856ac10abbb162bdc0b8383ebd432 Thanks @shadcn! - Accept components.json and package.json files that start with a UTF-8 byte order mark.
#12142 95efb5cd8d7f13adba70b58b1119211e8980683f Thanks @shadcn! - replace cosmiconfig with a smaller custom reader.
#12140 3b1ae6e43f082dd82d0e5710b813cfad929abdb4 Thanks @shadcn! - Skip npm audit and the funding check when installing or removing dependencies, or creating a project, with npm.
Updated dependencies [8c2bf3882cb856ac10abbb162bdc0b8383ebd432, 95efb5cd8d7f13adba70b58b1119211e8980683f, 3b1ae6e43f082dd82d0e5710b813cfad929abdb4]:
- @shadcn/registry@0.1.1

`v4.21.1`

Compare Source

Patch Changes

#12087 bf6646b449684e687f28531305eca4e4768c2782 Thanks @shadcn! - Add @shadcn/registry, the registry engine behind the CLI. shadcn now depends on it, and shadcn/registry and shadcn/schema re-export it, so there are no changes for existing users.
#12061 a9c1da49ec4eab488dc99c69ae20a7ffaa4897d4 Thanks @shadcn! - fix shimmer reduced motion handling when used with a variant
#12087 bf6646b449684e687f28531305eca4e4768c2782 Thanks @shadcn! - shadcn docs only rewrites links on the ui.shadcn.com host.
Updated dependencies [bf6646b449684e687f28531305eca4e4768c2782]:
- @shadcn/registry@0.1.0

socketio/socket.io (socket.io-client)

`v4.8.4`

Compare Source

Bug Fixes

types: export ExtendedError for connect_error event (#5548) (c0d5450)
types: export reserved event interfaces (#5533) (03945df)

Dependencies

engine.io-client@~6.6.1 (no change)
ws@~8.21.0 (diff)

dcastil/tailwind-merge (tailwind-merge)

`v3.7.0`

Compare Source

New Features

Prepare some upcoming changes by @dcastil in #713
- Theme getters returned by fromTheme now expose the theme key they read as a themeKey property, so tooling can identify the referenced theme scale without calling the getter.
- Release tags now include the package name, starting with tailwind-merge@3.7.0.

Bug Fixes

Fix arbitrary values using color() or light-dark() being classified as lengths instead of colors by @ddussi in #712
Fix bare bg-conic not merging with other background image classes by @dcastil in #708
Fix columns-auto not conflicting with other columns classes by @dcastil in #707
Fix container sizes like inline-2xl not merging by @dcastil in #706
Fix max-h-none missing in max-h class group by @mutewinter in #704
Fix axis shorthands like px not overriding logical sides like ps by @dcastil in #705
Fix leading-none being removed when the leading theme scale is overridden by @chatman-media in #689
Fix deprecated shadow-inner being classified as shadow color instead of shadow by @dcastil in #703

Documentation

Add Deno to install instructions by @bartlomieju in #687
Add missing text-shadow theme key to configuration docs by @dcastil in 3e6d208

Other

Switch package manager from yarn to pnpm by @dcastil in #680
Harden CI security by @dcastil in #679

Full Changelog: v3.6.0...v3.7.0

Thanks to @brandonmcconnell, @manavm1990, @langy, @roboflow, @syntaxfm, @getsentry, @codecov, a private sponsor, @openclaw, @sourcegraph, @cesarvcanal, @CasperKristiansson, @jbisasky, @frontendmasters and more via @thnxdev for sponsoring tailwind-merge! ❤️

typescript-eslint/typescript-eslint (typescript-eslint)