chore: bump the npm group across 1 directory with 58 updates

[dependabot]

Bumps the npm group with 58 updates in the / directory:

Package	From	To
@arborium/arborium	2.18.1	2.18.2
@atlaskit/pragmatic-drag-and-drop	3.0.0	3.1.0
@atlaskit/pragmatic-drag-and-drop-auto-scroll	3.0.1	3.2.0
@atlaskit/pragmatic-drag-and-drop-hitbox	2.1.0	2.2.2
@choochmeque/tauri-plugin-sharekit-api	0.4.0-rc.5	0.4.0-rc.7
@lottiefiles/dotlottie-react	0.19.14	0.19.16
@lottiefiles/dotlottie-web	0.79.1	0.80.0
@matrix-org/matrix-sdk-crypto-wasm	18.4.0	18.8.0
@noble/hashes	2.3.0	2.4.0
@sableclient/tauri-plugin-livekit-mobile	0.2.0	0.3.0
@sentry/react	10.70.0	10.75.0
@tanstack/react-query	5.101.4	5.103.1
@tanstack/react-query-devtools	5.101.4	5.103.1
@tanstack/react-virtual	3.14.9	3.14.13
@tauri-apps/plugin-clipboard-manager	2.3.2	2.3.3
@tauri-apps/plugin-deep-link	2.4.9	2.4.10
@tauri-apps/plugin-dialog	2.7.2	2.7.3
@tauri-apps/plugin-fs	2.5.1	2.5.2
@tauri-apps/plugin-http	2.5.9	2.6.1
@tauri-apps/plugin-opener	2.5.4	2.5.5
@tauri-apps/plugin-store	2.4.4	2.4.5
@tauri-apps/plugin-updater	2.10.1	2.11.0
dompurify	3.4.13	3.4.15
folds	2.7.1	2.7.2
html-react-parser	6.1.7	6.1.8
i18next	26.3.6	26.4.2
i18next-http-backend	4.0.1	4.0.2
immer	11.1.17	11.1.18
jotai	2.20.2	3.0.0
katex	0.18.4	0.18.7
livekit-client	2.22.0	2.22.3
marked	18.0.9	18.0.13
matrix-js-sdk	42.3.0	42.4.0
matrix-widget-api	1.18.0	1.19.0
pdfjs-dist	6.2.108	6.3.289
prosemirror-view	1.42.2	1.42.3
react	19.2.8	19.3.0
@types/react	19.2.18	19.3.0
react-aria	3.51.0	3.52.1
react-colorful	5.8.0	5.8.1
react-dom	19.2.8	19.3.0
@types/react-dom	19.2.4	19.3.0
react-i18next	17.0.11	17.0.14
react-router	8.3.0	8.4.0
virtua	0.50.1	0.51.3
@playwright/test	1.62.1	1.63.0
@testing-library/react	16.3.2	16.3.3
@testing-library/user-event	14.6.4	14.6.7
@types/node	26.2.0	26.6.1
@types/react	19.2.18	19.3.0
@types/react-dom	19.2.4	19.3.0
@vitejs/plugin-react	6.0.5	6.1.1
@vitest/coverage-v8	4.1.10	5.0.1
@vitest/ui	4.1.10	5.0.1
jsdom	30.0.1	30.1.0
knip	6.32.2	6.36.0
oxfmt	0.63.0	0.68.0
oxlint	1.78.0	1.83.0
vite	8.2.1	8.3.0
vitest	4.1.10	5.0.1

Updates @arborium/arborium from 2.18.1 to 2.18.2

Commits

• See full diff in compare view

Updates @atlaskit/pragmatic-drag-and-drop from 3.0.0 to 3.1.0

Commits

• See full diff in compare view

Updates @atlaskit/pragmatic-drag-and-drop-auto-scroll from 3.0.1 to 3.2.0

Commits

• See full diff in compare view

Updates @atlaskit/pragmatic-drag-and-drop-hitbox from 2.1.0 to 2.2.2

Commits

• See full diff in compare view

Updates @choochmeque/tauri-plugin-sharekit-api from 0.4.0-rc.5 to 0.4.0-rc.7

Release notes

Sourced from @​choochmeque/tauri-plugin-sharekit-api's releases.

v0.4.0-rc.7

Maintenance release — dependency, CI and example-app updates only; no functional changes to the plugin API.

Changes

• Widen the clippy allow on the desktop stubs share_text / share_file to unknown_lints, clippy::unused_async, clippy::unused_async_trait_impl; lint compatibility only, the stubs still return Error::UnsupportedPlatform (5443132)

Build & tooling

• Kotlin Gradle plugin 1.9.25 → 2.1.21 for the Android example (bbbcb20)
• CI: Node 24 in every workflow (2d568b1)
• CI: refresh the apt index before cache-apt-pkgs-action, add libglib2.0-dev to the package list and bump the apt cache key to 1.2 (8806dee, 1d634f7)
• CI: forward ANDROID_NDK_LATEST_HOME into NDK_HOME / ANDROID_NDK_HOME at shell runtime for the Android demo build; pin Xcode 26.5 and drop MetalToolchain for the iOS demo build (62fede7)
• CI: publish.yml apt setup aligned with checks.yml — index refresh, libglib2.0-dev, cache key 1.2 (#245)
• Security advisories resolved in transitive dependencies: picomatch, and serde_with / tauri in the example app (#244)

Dependencies

• eslint 10.4.1 → 10.9.1, typescript-eslint 8.61.0 → 8.68.0, prettier 3.8.4 → 3.9.6, rollup 4.61.1 → 4.63.1, eslint-plugin-security 4.0.0 → 4.0.1
• actions/checkout 6 → 7, actions/setup-node 6 → 7, actions/setup-java 5 → 6
• example app: vite 8.0.16 → 8.2.2, @​sveltejs/kit 2.65.0 → 2.70.3, @​sveltejs/vite-plugin-svelte 7.1.2 → 7.3.0, svelte 5.56.3 → 5.56.10, svelte-check 4.6.0 → 4.7.6, @​tauri-apps/cli 2.11.2 → 2.11.4, @​tauri-apps/api 2.11.0 → 2.11.1, picomatch 4.0.4 → 4.0.7
• example app (Cargo): tauri 2.11.0 → 2.11.1, serde_with 3.16.1 → 3.21.0
• example app (Gradle): androidx.webkit:webkit 1.14.0 → 1.17.0

Full changelog: Choochmeque/tauri-plugin-sharekit@v0.4.0-rc.5...v0.4.0-rc.7

Commits

• c2a9cc3 Bump version to 0.4.0-rc.7
• 92eb711 Merge pull request #246 from Choochmeque/ci/publish-pnpm
• f523645 Pin the npm self-update to major 11
• aa6a33b Bump version to 0.4.0-rc.6
• 6ce6b60 Merge pull request #245 from Choochmeque/fix/publish-apt
• 5f53b95 Align publish.yml apt setup with checks.yml
• 7d2256d Merge pull request #244 from Choochmeque/chore/advisories-20260830
• 13f9c1f Resolve security advisories in example app dependencies (serde_with, tauri)
• a9e81b6 Resolve security advisories in dependencies (picomatch)
• 14c262d Merge pull request #235 from Choochmeque/dependabot/npm_and_yarn/eslint-10.9.1
• Additional commits viewable in compare view

Updates @lottiefiles/dotlottie-react from 0.19.14 to 0.19.16

Release notes

Sourced from @​lottiefiles/dotlottie-react's releases.

@​lottiefiles/dotlottie-react@​0.19.16

Patch Changes

• Updated dependencies [0874fae]
• Updated dependencies [727add3]
  • @​lottiefiles/dotlottie-web@​0.80.0

@​lottiefiles/dotlottie-react@​0.19.15

Patch Changes

• Updated dependencies [14aee74]
  • @​lottiefiles/dotlottie-web@​0.79.2

Changelog

Sourced from @​lottiefiles/dotlottie-react's changelog.

0.19.16

Patch Changes

• Updated dependencies [0874fae]
• Updated dependencies [727add3]
  • @​lottiefiles/dotlottie-web@​0.80.0

0.19.15

Patch Changes

• Updated dependencies [14aee74]
  • @​lottiefiles/dotlottie-web@​0.79.2

Commits

• bb5abcf chore: update versions (#964)
• 7f717f9 chore: update versions (#956)
• See full diff in compare view

Updates @lottiefiles/dotlottie-web from 0.79.1 to 0.80.0

Release notes

Sourced from @​lottiefiles/dotlottie-web's releases.

@​lottiefiles/dotlottie-web@​0.80.0

Minor Changes

• 0874fae: feat: add experimental support for MP4 video assets in dotLottie files

Patch Changes

• 727add3: fix: setWasmUrl() disables the jsdelivr/unpkg fallback instead of still reaching unpkg when the configured URL fails; DotLottieWorker.setWasmUrl() resolves relative URLs against the page (the blob worker can't) and reaches workers that exist but haven't started loading

@​lottiefiles/dotlottie-web@​0.79.2

Patch Changes

• 14aee74: Update dotlottie-rs WASM bindings to 0f16fb8.

Changelog

Sourced from @​lottiefiles/dotlottie-web's changelog.

0.80.0

Minor Changes

• 0874fae: feat: add experimental support for MP4 video assets in dotLottie files

Patch Changes

• 727add3: fix: setWasmUrl() disables the jsdelivr/unpkg fallback instead of still reaching unpkg when the configured URL fails; DotLottieWorker.setWasmUrl() resolves relative URLs against the page (the blob worker can't) and reaches workers that exist but haven't started loading

0.79.2

Patch Changes

• 14aee74: Update dotlottie-rs WASM bindings to 0f16fb8.

Commits

• bb5abcf chore: update versions (#964)
• 0874fae feat: video assets in dotLottie files (#958)
• 727add3 fix(web): make setWasmUrl opt out of the CDN fallback (#962)
• 7f717f9 chore: update versions (#956)
• 14aee74 chore: update dotlottie-rs wasm bindings to 0f16fb8 (#955)
• See full diff in compare view

Updates @matrix-org/matrix-sdk-crypto-wasm from 18.4.0 to 18.8.0

Release notes

Sourced from @​matrix-org/matrix-sdk-crypto-wasm's releases.

v18.8.0

matrix-sdk-crypto-wasm v18.8.0

• Update matrix-rust-sdk to 6bcb11f

  • [breaking] Sas::emoji() and Sas::emoji_index() now return None when the emoji method was not part of the negotiated short authentication string methods, instead of returning an emoji representation the remote side never agreed to display. Previously a client that offered only the (mandatory) decimal method would negotiate ["decimal"] in the m.key.verification.accept event, yet a peer built on this crate would still be handed emoji and could show them to its user — leaving the two users comparing a decimal string against emoji, two incomparable projections of the same SAS bytes.

  • A user identity whose master key carries a valid X.509 signature chaining to one of the configured trust anchors now confers trust on that user's devices.

    Previously, such an identity was reported as verified by UserIdentity::is_verified(), but its devices would still be reported as unverified by Device::is_verified(), and the room key sharing strategies withheld room keys from them.

    Requires the experimental-x509-identity-verification feature and a configured X.509 verifier.

  • [breaking] Removed OwnUserIdentityData::is_identity_verified().

    This method asked whether we had verified another user's identity from the perspective of our own identity, and so only ever considered cross-signing.

    Use UserIdentity::is_verified() or OtherUserIdentity::is_verified() instead, which account for every root of trust we have in that identity, including an X.509 signature on its master key.

v18.7.0

matrix-sdk-crypto-wasm v18.7.0

• Add OlmMachine.receiveSyncChangesMsc4186, for processing the encryption state from a simplified sliding sync (MSC4186) response. It behaves like receiveSyncChanges, except that a missing one-time key count means "unchanged" rather than "zero keys on the server". (#345)

• Update matrix-rust-sdk to f333a32.

v18.6.0

matrix-sdk-crypto-wasm v18.6.0

• Allow providing rawX509Signer and rawX509Validity to OlmMachine::initialize and OlmMachine::initFromStore, allowing the user's identity to be signed using the supplied JavaScript function. Both the signer and validity function must be supplied, or neither. #341

• Update matrix-rust-sdk to 64b12e0b80

  • Change the return type of X509Signer::validity_not_after to Duration to make it easier for downstream crates to implement. (#6904)

  • Make X.509 signing an async operation, meaning that the experimental RawX509Signer::sign now returns a Future. (#6867)

• Fix UserIdentity methods to correctly set up the logging framework while

... (truncated)

Changelog

Sourced from @​matrix-org/matrix-sdk-crypto-wasm's changelog.

matrix-sdk-crypto-wasm v18.8.0

• Update matrix-rust-sdk to 6bcb11f

  • [breaking] Sas::emoji() and Sas::emoji_index() now return None when the emoji method was not part of the negotiated short authentication string methods, instead of returning an emoji representation the remote side never agreed to display. Previously a client that offered only the (mandatory) decimal method would negotiate ["decimal"] in the m.key.verification.accept event, yet a peer built on this crate would still be handed emoji and could show them to its user — leaving the two users comparing a decimal string against emoji, two incomparable projections of the same SAS bytes.

  • A user identity whose master key carries a valid X.509 signature chaining to one of the configured trust anchors now confers trust on that user's devices.

    Previously, such an identity was reported as verified by UserIdentity::is_verified(), but its devices would still be reported as unverified by Device::is_verified(), and the room key sharing strategies withheld room keys from them.

    Requires the experimental-x509-identity-verification feature and a configured X.509 verifier.

  • [breaking] Removed OwnUserIdentityData::is_identity_verified().

    This method asked whether we had verified another user's identity from the perspective of our own identity, and so only ever considered cross-signing.

    Use UserIdentity::is_verified() or OtherUserIdentity::is_verified() instead, which account for every root of trust we have in that identity, including an X.509 signature on its master key.

matrix-sdk-crypto-wasm v18.7.0

• Add OlmMachine.receiveSyncChangesMsc4186, for processing the encryption state from a simplified sliding sync (MSC4186) response. It behaves like receiveSyncChanges, except that a missing one-time key count means "unchanged" rather than "zero keys on the server". #345

matrix-sdk-crypto-wasm v18.6.0

• Allow providing rawX509Signer and rawX509Validity to OlmMachine::initialize and OlmMachine::initFromStore, allowing the user's identity to be signed using the supplied JavaScript function. Both the signer and validity function must be supplied, or neither. #341

... (truncated)

Commits

• c403153 v18.8.0
• aa0235e chore: Reformat with nightly rustfmt
• 81dfdef chore: Update README for v18.8.0
• e5b1c8b chore: Bump matrix-rust-sdk to 6bcb11f
• 6f728f8 Merge pull request #346 from matrix-org/release-v18.7.0
• e5f8295 v18.7.0
• b7b2e5d chore: Bump dependencies and prepare for release
• e2025ef Merge pull request #345 from matrix-org/feat/kaylendog/msc4186-sync-receiver
• 0077ce1 docs: Update CHANGELOG.md
• 0fab14d tests: Assert receiveSyncChangesMsc4186 behaviour
• Additional commits viewable in compare view

Updates @noble/hashes from 2.3.0 to 2.4.0

Release notes

Sourced from @​noble/hashes's releases.

2.4.0

Security and correctness

• Protect passed options against mutation / pollution
• keccakprg: fail until entropy is added
• webcrypto: reject output sizes which crashed engine
• blake3: fix tree merging for multi-terabyte streams
• Improve zeroization

Misc

• Speed-up Argon2 by 20%
• Argon2 cost options are now optional. The defaults are t: 3, m: 1024 ** 2 KiB (1 GiB), p: 1, dkLen: 32, and a 1 GiB maxmem limit; larger-memory calls must set maxmem explicitly.
• Corrected scrypt's default maxmem to work for N: 2 ** 20, r: 8, and p: 1
• nextTick and asyncLoop now yield through scheduler.yield() when available or setTimeout otherwise, allowing timers, I/O, and rendering to progress. They also accept optional rejection cleanup; async Argon2, PBKDF2, and scrypt use it to wipe work state if scheduling is aborted.

Full Changelog: paulmillr/noble-hashes@2.3.0...2.4.0

Changelog

Sourced from @​noble/hashes's changelog.

2.4.0 (2026-08-27)

Security and correctness

• Protect passed options against mutation / pollution
• keccakprg: fail until entropy is added
• webcrypto: reject output sizes which crashed engine
• blake3: fix tree merging for multi-terabyte streams
• Improve zeroization

Misc

• Speed-up Argon2 by 20%
• Argon2 cost options are now optional. The defaults are t: 3, m: 1024 ** 2 KiB (1 GiB), p: 1, dkLen: 32, and a 1 GiB maxmem limit; larger-memory calls must set maxmem explicitly.
• Corrected scrypt's default maxmem to work for N: 2 ** 20, r: 8, and p: 1
• nextTick and asyncLoop now yield through scheduler.yield() when available or setTimeout otherwise, allowing timers, I/O, and rendering to progress. They also accept optional rejection cleanup; async Argon2, PBKDF2, and scrypt use it to wipe work state if scheduling is aborted.

Commits

• 663c2ae Release 2.4.0.
• a6f7519 Add changelog
• 1bbc433 webcrypto: snapshot opts
• 5bd2e15 Remove unused files
• a3bc7ff Bump vectors
• fcb6cb6 README
• 64f3033 readme
• 9ac6165 Bump ci workflows
• 6587b51 Fix test on bun
• 91ecf91 Fix tests
• Additional commits viewable in compare view

Updates @sableclient/tauri-plugin-livekit-mobile from 0.2.0 to 0.3.0

Release notes

Sourced from @​sableclient/tauri-plugin-livekit-mobile's releases.

v0.3.0

What's Changed

• feat: expose reportIncomingCall for the system incoming-call screen by @​eleboucher in SableClient/tauri-plugin-livekit-mobile#1

New Contributors

• @​eleboucher made their first contribution in SableClient/tauri-plugin-livekit-mobile#1

Full Changelog: SableClient/tauri-plugin-livekit-mobile@v0.2.0...v0.3.0

NPM

pnpm add @sableclient/tauri-plugin-livekit-mobile@0.3.0

Commits

• 9d0607b Merge pull request #1 from SableClient/feat/report-incoming-call
• fa24d22 feat: expose reportIncomingCall for the system incoming-call screen
• See full diff in compare view

Updates @sentry/react from 10.70.0 to 10.75.0

Release notes

Sourced from @​sentry/react's releases.

10.75.0

Important Changes

• feat(v10/effect): Capture errors through the Effect v4 ErrorReporter API (#24445)

  On Effect v4, Sentry.effectLayer now registers a Sentry ErrorReporter. Failures that pass through Effect.withErrorReporting, ErrorReporter.report or the built-in HTTP and RPC reporting boundaries are captured automatically, with ErrorReporter.ignore, ErrorReporter.severity and ErrorReporter.attributes annotations respected. Nothing changes on Effect v3.

Other Changes

• feat(v10/core): Accept a CollectBehavior shorthand for dataCollection.httpHeaders (#24339)
• fix(v10/browser): Release the XHR virtualError once the request completed (#24307)
• fix(v10/browser-utils): Skip nullish LCP entries in vendored web-vitals (#24349)
• fix(v10/bundler-plugins): Stamp debug IDs onto emitted source maps when disable-upload is set (#24332)
• fix(v10/core): Don't instrument the SDK's own envelope requests (#24276)
• fix(v10/nextjs): Only include emitted chunk directories in Turbopack sourcemap upload (#24295)
• fix(v10/nitro): Import from nitro/h3 instead of h3 directly (#24444)
• fix(v10/node-core): Don't recurse in logAndExitProcess on a broken stdio pipe (#24353)
• fix(v10/nuxt): Detect Nitro version via the app's Nuxt dependency chain (#24025)
• fix(v10/replay): Don't rewrite already-emitted nodes when syncing mirror attributes (#23588)

Bundle size 📦

Path	Size
@​sentry/browser	27.18 KB
@​sentry/browser - with treeshaking flags	25.66 KB
@​sentry/browser (incl. Tracing)	45.6 KB
@​sentry/browser (incl. Tracing + Span Streaming)	47.34 KB
@​sentry/browser (incl. Tracing, Profiling)	50.24 KB
@​sentry/browser (incl. Tracing, Replay)	83.99 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags	73.84 KB
@​sentry/browser (incl. Tracing, Replay with Canvas)	88.6 KB
@​sentry/browser (incl. Tracing, Replay, Feedback)	100.94 KB
@​sentry/browser (incl. Feedback)	43.94 KB
@​sentry/browser (incl. sendFeedback)	31.87 KB
@​sentry/browser (incl. FeedbackAsync)	36.88 KB
@​sentry/browser (incl. Metrics)	28.25 KB
@​sentry/browser (incl. Logs)	28.47 KB
@​sentry/browser (incl. Metrics & Logs)	29.15 KB
@​sentry/react	28.93 KB
@​sentry/react (incl. Tracing)	47.81 KB
@​sentry/vue	32.47 KB
@​sentry/vue (incl. Tracing)	47.55 KB
@​sentry/svelte	27.21 KB
CDN Bundle	29.53 KB
CDN Bundle (incl. Tracing)	47.52 KB
CDN Bundle (incl. Logs, Metrics)	31.07 KB
CDN Bundle (incl. Tracing, Logs, Metrics)	48.81 KB
CDN Bundle (incl. Replay, Logs, Metrics)	69.49 KB
CDN Bundle (incl. Tracing, Replay)	84.22 KB

... (truncated)

Changelog

Sourced from @​sentry/react's changelog.

10.75.0

Important Changes

• feat(v10/effect): Capture errors through the Effect v4 ErrorReporter API (#24445)

  On Effect v4, Sentry.effectLayer now registers a Sentry ErrorReporter. Failures that pass through Effect.withErrorReporting, ErrorReporter.report or the built-in HTTP and RPC reporting boundaries are captured automatically, with ErrorReporter.ignore, ErrorReporter.severity and ErrorReporter.attributes annotations respected. Nothing changes on Effect v3.

Other Changes

• feat(v10/core): Accept a CollectBehavior shorthand for dataCollection.httpHeaders (#24339)
• fix(v10/browser): Release the XHR virtualError once the request completed (#24307)
• fix(v10/browser-utils): Skip nullish LCP entries in vendored web-vitals (#24349)
• fix(v10/bundler-plugins): Stamp debug IDs onto emitted source maps when disable-upload is set (#24332)
• fix(v10/core): Don't instrument the SDK's own envelope requests (#24276)
• fix(v10/nextjs): Only include emitted chunk directories in Turbopack sourcemap upload (#24295)
• fix(v10/nitro): Import from nitro/h3 instead of h3 directly (#24444)
• fix(v10/node-core): Don't recurse in logAndExitProcess on a broken stdio pipe (#24353)
• fix(v10/nuxt): Detect Nitro version via the app's Nuxt dependency chain (#24025)
• fix(v10/replay): Don't rewrite already-emitted nodes when syncing mirror attributes (#23588)

10.74.0

• feat(v10): Streamline isolation scope handling & reset in isolation scopes (#24152)
• fix(server-utils): Include Gemini reasoning tokens in Vercel AI token usage (#23433)
• fix(v10/browser): Set user_agent.original on all spans for consistent filtering (#24226)
• fix(v10/cloudflare): Auto-instrument classes re-exported from the worker entry (#24181)
• fix(v10/core): Guard loadModule default parameter against ESM scope (#24154)
• fix(v10/core): Match wrapped Facebook Mobile browser errors in DEFAULT_IGNORE_ERRORS (#23877)
• fix(v10/core): Resolve MCP capture policy per operation (#23796)
• fix(v10/nextjs): Fix SDK import crashing under jsdom/happy-dom (#23906)
• fix(v10/nextjs): Keep the Pages Router runtime out of App Router client bundles (#24223)
• fix(v10/nextjs): Register Vercel AI span processors on Next.js (#23773)
• fix(v10/nuxt): Windows file:// for import-in-the-middle hook and isAbsolute for C:\ (#24026)
• fix(v10/profiling-node): Bump @​sentry/node-cpu-profiler to 2.4.4 (#24238)
• fix(v10/sveltekit): Handle SvelteKit 3 error kinds in handleErrorWithSentry (#23995)
• fix(v10/sveltekit): Read Cloudflare execution context from platform.ctx (#23994)
• fix(v10/sveltekit): Read SvelteKit config from the Vite plugin (#23998)

• test(e2e): Assert Next.js Cloudflare worker bundle stays free of orchestrion bundler plugins (#23910)

Work in this release was contributed by @​halillusion and @​zkasuran. Thank you for your contributions!

10.73.0

... (truncated)

Commits

• 9ffb58c release: 10.75.0
• 664c906 meta(changelog): Update changelog for 10.75.0 (#24446)
• e3e7acc fix(v10/nitro): Import from nitro/h3 instead of h3 directly (#24444)
• 4bb51d1 feat(v10/effect): Capture errors through the Effect v4 ErrorReporter API (#24...
• 738f17e fix(v10/core): Don't instrument the SDK's own envelope requests (#24276)
• f63c56a fix(v10/node-core): Don't recurse in logAndExitProcess on a broken stdio pipe...
• 0e24355 fix(v10/browser-utils): Skip nullish LCP entries in vendored web-vitals (#24349)
• ac3ea13 fix(v10/nuxt): Detect Nitro version via the app's Nuxt dependency chain (#24025)
• 9235d43 fix(v10/nextjs): Only include emitted chunk directories in Turbopack sourcema...
• e2deda0 feat(v10/core): Accept CollectBehavior shorthand for `dataCollection.httpHe...
• Additional commits viewable in compare view

Updates @tanstack/react-query from 5.101.4 to 5.103.1

Release notes

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-devtools@​5.103.1

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-devtools@​5.103.1
  • @​tanstack/react-query@​5.103.1

@​tanstack/react-query-next-experimental@​5.103.1

Patch Changes

• Updated dependencies []:
  • @​tanstack/react-query@​5.103.1

@​tanstack/react-query-persist-client@​5.103.1

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-persist-client-core@​5.103.1
  • @​tanstack/react-query@​5.103.1

@​tanstack/react-query@​5.103.1

Patch Changes

• Updated dependencies [8330b2f, 3212966]:
  • @​tanstack/query-core@​5.103.1

@​tanstack/react-query-devtools@​5.103.0

Patch Changes

• #11501 9567367 - Declare dependencies used by the published devtools source and type declarations so they resolve with strict package managers. Keep runtime dependencies bundled in the compiled devtools.

  Declare the React types used by React Query Devtools as a peer dependency, compatible with React 18 and 19.

• Updated dependencies [9567367]:

  • @​tanstack/query-devtools@​5.103.0
  • @​tanstack/react-query@​5.103.0

@​tanstack/react-query-next-experimental@​5.103.0

Patch Changes

• Updated dependencies []:
  • @​tanstack/react-query@​5.103.0

@​tanstack/react-query-persist-client@​5.103.0

Patch Changes

• Updated dependencies [4c7cdbb]:
  • @​tanstack/query-persist-client-core@​5.103.0
  • @​tanstack/react-query@​5.103.0

... (truncated)

Changelog

Sourced from @​tanstack/react-query's changelog.

5.103.1

Patch Changes

• Updated dependencies [8330b2f, 3212966]:
  • @​tanstack/query-core@​5.103.1

5.103.0

Patch Changes

• Updated dependencies [e57f816, fdae2ce, a1119e5, cbf77bf]:
  • @​tanstack/query-core@​5.103.0

5.102.8

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-core@​5.102.8

5.102.7

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-core@​5.102.7

5.102.6

Patch Changes

• #11305 ac2b612 - fix(react-query): throw falsy errors from useQueries and useSuspenseQueries to the error boundary

• Updated dependencies []:

  • @​tanstack/query-core@​5.102.6

5.102.5

Patch Changes

• Updated dependencies [578e5c2]:
  • @​tanstack/query-core@​5.102.5

5.102.4

Patch Changes

• Updated dependencies [a05df6a]:
  • @​tanstack/query-core@​5.102.4

... (truncated)

Commits

• c08f576 ci: Version Packages (#11511)
• 19ccf27 ci: Version Packages (#11339)
• 2da46cd chore(*): use eslint description syntax for grandfathered 'no-restricted-synt...
• 58ad3e2 fix: isolate TypeScript test output (#11503)
• d63afc7 Simplifed query methods/internal tests new lint (#11347)
• 23fbdc3 test({react,preact,solid,angular}-query): remove 'fromGenericOptionsQueryFn' ...
• 50680b9 test({react,preact,solid,svelte}-query,angular-query-experimental): rename 'm...
• 0b326b6 test({react,preact}-query/useMutation): add tests for 'MutationFunctionContex...
• a1119e5 ref(hydration): remove outdated dehydratedAt fallback (#11436)
• 1a51bb8 docs(*): clarify 'Promise.all' only waits for all mutateAsync calls when they...
• Additional commits viewable in compare view

Updates @tanstack/react-query-devtools from 5.101.4 to 5.103.1

Release notes

Sourced from @​tanstack/react-query-devtools's releases.

@​tanstack/react-query-devtools@​5.103.1

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-devtools@​5.103.1
  • @​tanstack/react-query@​5.103.1

@​tanstack/react-query-devtools@​5.103.0

Patch Changes

• #11501 9567367 - Declare dependencies used by the published devtools source and type declarations so they resolve with strict package managers. Keep runtime dependencies bundled in the compiled devtools.

  Declare the React types used by React Query Devtools as a peer dependency, compatible with React 18 and 19.

• Updated dependencies [9567367]:

  • @​tanstack/query-devtools@​5.103.0
  • @​tanstack/react-query@​5.103.0

Changelog

Sourced from @​tanstack/react-query-devtools's changelog.

5.103.1

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-devtools@​5.103.1
  • @​tanstack/react-query@​5.103.1

5.103.0

Patch Changes

• #11501 9567367 - Declare dependencies used by the published devtools source and type declarations so they resolve with strict package managers. Keep runtime dependencies bundled in the compiled devtools.

  Declare the React types used by React Query Devtools as a peer dependency, compatible with React 18 and 19.

• Updated dependencies [9567367]:

  • @​tanstack/query-devtools@​5.103.0
  • @​tanstack/react-query@​5.103.0

5.102.8

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-devtools@​5.102.8
  • @​tanstack/react-query@​5.102.8

5.102.7

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-devtools@​5.102.7
  • @​tanstack/react-query@​5.102.7

5.102.6

Patch Changes

• Updated dependencies [ac2b612]:
  • @​tanstack/react-query@​5.102.6
  • @​tanstack/query-devtools@​5.102.6

5.102.5

Patch Changes

• Updated dependencies [ef1eff1]:
  • @​tanstack/query-devtools@​5.102.5

... (truncated)

Commits

• c08f576 ci: Version Packages (#11511)
• 19ccf27 ci: Version Packages (#11339)
• 58ad3e2 fix: isolate TypeScript test output (#11503)
• 9567367 fix: declare devtools dependencies and enforce strict workspace checks (#11501)
• 2969edf ci: Version Packages (#11316)
• 2eb3c7c ci: Version Packages (#11313)
• 714df67 ci: Version Packages (#11306)
• 1836e61 ci: Version Packages (#11303)
• 51f12db ci: Version Packages (#11294)
• 730b3aa ci: Version Packages (#11276)
• Additional commits viewable in compare view

Updates @tanstack/react-virtual from 3.14.9 to 3.14.13

Release notes

Sourced from @​tanstack/react-virtual's releases.

@​tanstack/react-virtual@​3.14.13

Patch Changes

• #1282 b48e3b0 - Skip flushSync for the synchronous notify raised from measureElement. React calls ...

  Description has been truncated

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.