chore(deps): bump the npm-web-nonbreaking group across 1 directory with 12 updates by dependabot[bot] · Pull Request #264 · webrenew/agent-observer

dependabot · 2026-06-07T04:54:33Z

Bumps the npm-web-nonbreaking group with 12 updates in the /web directory:

Package	From	To
fumadocs-core	`16.9.1`	`16.9.3`
fumadocs-ui	`16.9.1`	`16.9.3`
next	`16.2.6`	`16.2.7`
react	`19.2.6`	`19.2.7`
@types/react	`19.2.15`	`19.2.17`
react-dom	`19.2.6`	`19.2.7`
zustand	`5.0.13`	`5.0.14`
@next/eslint-plugin-next	`16.2.6`	`16.2.7`
@types/node	`22.19.19`	`22.19.20`
eslint-config-next	`16.2.6`	`16.2.7`
typescript-eslint	`8.59.4`	`8.60.1`
vite	`6.4.2`	`6.4.3`

Updates fumadocs-core from 16.9.1 to 16.9.3

Release notes

Sourced from fumadocs-core's releases.

fumadocs-core@16.9.3

Patch Changes

42f0255: Support invalidate & revalidate on dynamic loader

a807798: Improve source API utils & types

Commits

34b75a0 Version Packages (#3324)
73b9cec docs: fix build
d35d0d6 fix(mdx): respect root in Vite config
a9f95ff chore: bump deps
783c048 fix(preview): fix invalid content type in /img endpoint
42f0255 feat(core): support invalidate & revalidate on dynamic loader
a807798 fix(core): improve source API utils & types
8b17019 docs: document LLM_GATEWAY_MODEL for Ask AI (#3319)
cad622e Merge pull request #3318 from smakosh/feat/llmgateway-ai-provider
ee98724 fix(openapi): newer scalar client
Additional commits viewable in compare view

Updates fumadocs-ui from 16.9.1 to 16.9.3

Release notes

Sourced from fumadocs-ui's releases.

fumadocs-ui@16.9.3

Patch Changes

Updated dependencies [42f0255]

Updated dependencies [a807798]

fumadocs-core@16.9.3

Commits

34b75a0 Version Packages (#3324)
73b9cec docs: fix build
d35d0d6 fix(mdx): respect root in Vite config
a9f95ff chore: bump deps
783c048 fix(preview): fix invalid content type in /img endpoint
42f0255 feat(core): support invalidate & revalidate on dynamic loader
a807798 fix(core): improve source API utils & types
8b17019 docs: document LLM_GATEWAY_MODEL for Ask AI (#3319)
cad622e Merge pull request #3318 from smakosh/feat/llmgateway-ai-provider
ee98724 fix(openapi): newer scalar client
Additional commits viewable in compare view

Updates next from 16.2.6 to 16.2.7

Release notes

Sourced from next's releases.

v16.2.7

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

Backport documentation fixes for v16.2 (#93804)

[backport] Patch playwright-core to resolve _finishedPromise on requestFailed (#93920)

[backport] Fix dev mode hydration failure when page is served from HTTP cache (#93492)

[backport] Fix catch-all router.query corruption with basePath + rewrites (#93917)

[backport] Encode non-ASCII characters in cache tags at construction (#93918)

[backport] Fix server action forwarding loop with middleware rewrites (#93919)

[backport] Turbopack: switch from base40 to base38 hash encoding (#93932)

[ci] Disable hanging node 24 typescript tests on 16.2 backport branch (#94164)

[backport] Fix "type: module" in project dir when using standalone or adapters (#94050)

[backport] Propagate adapter preferred regions (#94200)

[16.2.x] Don't drop FormData entries (#94240)

[backport] feat(turbopack): add LocalPathOrProjectPath PostCSS config resolution (#94284)

Credits

Huge thanks to @eps1lon, @icyJoseph, @unstubbable, @mischnic, @bgw, @timneutkens, and @lukesandberg for helping!

Commits

9bd3c26 v16.2.7
c63224f [backport] feat(turbopack): add LocalPathOrProjectPath PostCSS config resolut...
63115c7 [16.2.x] Don't drop FormData entries (#94240)
aef22fd [backport] Propagate adapter preferred regions (#94200)
f126e72 [backport] Fix "type: module" in project dir when using standalone or adapter...
bda3e2a [ci] Disable hanging node 24 typescript tests on 16.2 backport branch (#94164)
7e16e07 [backport] Turbopack: switch from base40 to base38 hash encoding (#93932)
6139f4b [backport] Fix server action forwarding loop with middleware rewrites (#93919)
c021d10 [backport] Encode non-ASCII characters in cache tags at construction (#93918)
9184ddb [backport] Fix catch-all router.query corruption with basePath + `rewrite...
Additional commits viewable in compare view

Updates react from 19.2.6 to 19.2.7

Release notes

Sourced from react's releases.

19.2.7 (June 1st, 2026)

React Server Components

Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (#36566 by @unstubbable)

Commits

6117d7c Version 19.2.7 (#36591)
See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react since your current version.

Updates @types/react from 19.2.15 to 19.2.17

Commits

See full diff in compare view

Updates react-dom from 19.2.6 to 19.2.7

Release notes

Sourced from react-dom's releases.

19.2.7 (June 1st, 2026)

React Server Components

Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (#36566 by @unstubbable)

Commits

6117d7c Version 19.2.7 (#36591)
See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react-dom since your current version.

Updates zustand from 5.0.13 to 5.0.14

Release notes

Sourced from zustand's releases.

v5.0.14

This release fixes a type issue in devtools.

What's Changed

fix(devtools): improve type inference for Devtools initializer by @dbritto-dev in pmndrs/zustand#3511

New Contributors

@TheSeydiCharyyev made their first contribution in pmndrs/zustand#3487

@brofrong made their first contribution in pmndrs/zustand#3496

@hyun907 made their first contribution in pmndrs/zustand#3506

Full Changelog: pmndrs/zustand@v5.0.13...v5.0.14

Commits

bfb2a9e 5.0.14
62b2aff chore(deps): update dev dependencies (#3513)
ad77bd3 fix(devtools): improve type inference for Devtools initializer (#3511)
8476d2c update pnpm etc (#3512)
d690ec2 docs(combine): add object constraints to T and U in signature (#3506)
fd8c601 docs(react): add Action constraint to redux middleware signature (#3492)
2ce8226 docs(immer): fix setPerson updater type in usage examples (#3502)
038b938 docs(updating-state): use curried create form with explicit state type (#3503)
60a91b4 docs(devtools): add missing devtools import to troubleshooting example (#3501)
efad169 Update FUNDING.json
Additional commits viewable in compare view

Updates @next/eslint-plugin-next from 16.2.6 to 16.2.7

Release notes

Sourced from @next/eslint-plugin-next's releases.

v16.2.7

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

Backport documentation fixes for v16.2 (#93804)

[backport] Patch playwright-core to resolve _finishedPromise on requestFailed (#93920)

[backport] Fix dev mode hydration failure when page is served from HTTP cache (#93492)

[backport] Fix catch-all router.query corruption with basePath + rewrites (#93917)

[backport] Encode non-ASCII characters in cache tags at construction (#93918)

[backport] Fix server action forwarding loop with middleware rewrites (#93919)

[backport] Turbopack: switch from base40 to base38 hash encoding (#93932)

[ci] Disable hanging node 24 typescript tests on 16.2 backport branch (#94164)

[backport] Fix "type: module" in project dir when using standalone or adapters (#94050)

[backport] Propagate adapter preferred regions (#94200)

[16.2.x] Don't drop FormData entries (#94240)

[backport] feat(turbopack): add LocalPathOrProjectPath PostCSS config resolution (#94284)

Credits

Huge thanks to @eps1lon, @icyJoseph, @unstubbable, @mischnic, @bgw, @timneutkens, and @lukesandberg for helping!

Commits

9bd3c26 v16.2.7
See full diff in compare view

Updates @types/node from 22.19.19 to 22.19.20

Commits

See full diff in compare view

Updates eslint-config-next from 16.2.6 to 16.2.7

Release notes

Sourced from eslint-config-next's releases.

v16.2.7

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

Backport documentation fixes for v16.2 (#93804)

[backport] Patch playwright-core to resolve _finishedPromise on requestFailed (#93920)

[backport] Fix dev mode hydration failure when page is served from HTTP cache (#93492)

[backport] Fix catch-all router.query corruption with basePath + rewrites (#93917)

[backport] Encode non-ASCII characters in cache tags at construction (#93918)

[backport] Fix server action forwarding loop with middleware rewrites (#93919)

[backport] Turbopack: switch from base40 to base38 hash encoding (#93932)

[ci] Disable hanging node 24 typescript tests on 16.2 backport branch (#94164)

[backport] Fix "type: module" in project dir when using standalone or adapters (#94050)

[backport] Propagate adapter preferred regions (#94200)

[16.2.x] Don't drop FormData entries (#94240)

[backport] feat(turbopack): add LocalPathOrProjectPath PostCSS config resolution (#94284)

Credits

Huge thanks to @eps1lon, @icyJoseph, @unstubbable, @mischnic, @bgw, @timneutkens, and @lukesandberg for helping!

Commits

9bd3c26 v16.2.7
See full diff in compare view

Updates typescript-eslint from 8.59.4 to 8.60.1

Release notes

Sourced from typescript-eslint's releases.

v8.60.1

8.60.1 (2026-06-01)

🩹 Fixes

eslint-plugin: respect ECMAScript line terminators in ts-comment rules (#12352)

eslint-plugin: [no-shadow] correct rule to match ESLint v10 handling (#12182)

❤️ Thank You

lumir

Nevette Bailey @nevette-bailey

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.60.0

8.60.0 (2026-05-25)

🚀 Features

rule-tester: added updates of RuleTester from upstream (#12291)

🩹 Fixes

playground TS version selector is not working (#12326, #12325)

❤️ Thank You

Evyatar Daud @StyleShit

Vinccool96

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.60.1 (2026-06-01)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.60.0 (2026-05-25)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

4f84a69 chore(release): publish 8.60.1
1849b53 chore: typecheck using tsgo (#12139)
f891c29 chore(release): publish 8.60.0
See full diff in compare view

Updates vite from 6.4.2 to 6.4.3

Release notes

Sourced from vite's releases.

v6.4.3

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

6.4.3 (2026-06-01)

fix: backport #22572, reject windows alternate paths (#22576) (96b0c10), closes #22572 #22576

fix(deps): backport #22571, reject UNC paths for launch-editor-middleware (#22575) (8fed5cf), closes #22571 #22575

Commits

6c2c881 release: v6.4.3
96b0c10 fix: backport #22572, reject windows alternate paths (#22576)
8fed5cf fix(deps): backport #22571, reject UNC paths for launch-editor-middleware (#2...
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

^{Need help on this PR? Tag /codesmith with what you need. Autofix is disabled.}

…th 12 updates Bumps the npm-web-nonbreaking group with 12 updates in the /web directory: | Package | From | To | | --- | --- | --- | | [fumadocs-core](https://github.com/fuma-nama/fumadocs) | `16.9.1` | `16.9.3` | | [fumadocs-ui](https://github.com/fuma-nama/fumadocs) | `16.9.1` | `16.9.3` | | [next](https://github.com/vercel/next.js) | `16.2.6` | `16.2.7` | | [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.6` | `19.2.7` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.15` | `19.2.17` | | [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.6` | `19.2.7` | | [zustand](https://github.com/pmndrs/zustand) | `5.0.13` | `5.0.14` | | [@next/eslint-plugin-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-plugin-next) | `16.2.6` | `16.2.7` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.19.19` | `22.19.20` | | [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.2.6` | `16.2.7` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.59.4` | `8.60.1` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `6.4.2` | `6.4.3` | Updates `fumadocs-core` from 16.9.1 to 16.9.3 - [Release notes](https://github.com/fuma-nama/fumadocs/releases) - [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs-core@16.9.1...fumadocs-core@16.9.3) Updates `fumadocs-ui` from 16.9.1 to 16.9.3 - [Release notes](https://github.com/fuma-nama/fumadocs/releases) - [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs-ui@16.9.1...fumadocs-ui@16.9.3) Updates `next` from 16.2.6 to 16.2.7 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v16.2.6...v16.2.7) Updates `react` from 19.2.6 to 19.2.7 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react) Updates `@types/react` from 19.2.15 to 19.2.17 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `react-dom` from 19.2.6 to 19.2.7 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react-dom) Updates `zustand` from 5.0.13 to 5.0.14 - [Release notes](https://github.com/pmndrs/zustand/releases) - [Commits](pmndrs/zustand@v5.0.13...v5.0.14) Updates `@next/eslint-plugin-next` from 16.2.6 to 16.2.7 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](https://github.com/vercel/next.js/commits/v16.2.7/packages/eslint-plugin-next) Updates `@types/node` from 22.19.19 to 22.19.20 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `eslint-config-next` from 16.2.6 to 16.2.7 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](https://github.com/vercel/next.js/commits/v16.2.7/packages/eslint-config-next) Updates `typescript-eslint` from 8.59.4 to 8.60.1 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.60.1/packages/typescript-eslint) Updates `vite` from 6.4.2 to 6.4.3 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v6.4.3/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v6.4.3/packages/vite) --- updated-dependencies: - dependency-name: fumadocs-core dependency-version: 16.9.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-web-nonbreaking - dependency-name: fumadocs-ui dependency-version: 16.9.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-web-nonbreaking - dependency-name: next dependency-version: 16.2.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-web-nonbreaking - dependency-name: react dependency-version: 19.2.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-web-nonbreaking - dependency-name: "@types/react" dependency-version: 19.2.17 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-web-nonbreaking - dependency-name: react-dom dependency-version: 19.2.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-web-nonbreaking - dependency-name: zustand dependency-version: 5.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-web-nonbreaking - dependency-name: "@next/eslint-plugin-next" dependency-version: 16.2.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-web-nonbreaking - dependency-name: "@types/node" dependency-version: 22.19.20 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-web-nonbreaking - dependency-name: eslint-config-next dependency-version: 16.2.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-web-nonbreaking - dependency-name: typescript-eslint dependency-version: 8.60.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-web-nonbreaking - dependency-name: vite dependency-version: 6.4.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-web-nonbreaking ... Signed-off-by: dependabot[bot] <support@github.com>

vercel · 2026-06-07T04:54:37Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
agent-space-web	Error		Jun 7, 2026 4:54am

mogplex · 2026-06-07T04:54:54Z

Mogplex PR Review

Status: No material issues found

Summary

This is a straightforward Dependabot dependency bump PR updating 12 packages in the web/ directory, all at patch level within their current major/minor range. No breaking changes, no security concerns introduced, and no application code modified.

Critical Issues

None.

Warnings

None.

Suggestions

web/package.json — The @next/eslint-plugin-next entry uses a pinned version (16.2.7 without ^) while eslint-config-next uses a caret range (^16.2.7). This inconsistency exists in the prior version too, so it's pre-existing — just noting it for awareness.

Verdict

✅ APPROVE — All updates are patch-level bumps with no breaking changes. The React/Next.js updates fix a real FormData regression, and the Vite update patches a path traversal vector. Safe to merge assuming CI passes.

Affected files:

web/package.json

View check run

charlesrhoward · 2026-06-13T01:05:40Z

Superseded by #265 — the root npm-root-nonbreaking group included the identical web/package.json bumps plus the workspace lockfile update this PR was missing (web/ is in the pnpm workspace, so without the root pnpm-lock.yaml change every pnpm install --frozen-lockfile job failed).

dependabot · 2026-06-13T01:05:42Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 7, 2026

vercel Bot had a problem deploying to Preview June 7, 2026 04:54 Failure

charlesrhoward closed this Jun 13, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/web/npm-web-nonbreaking-ac1dd5082f branch June 13, 2026 01:05

Navigation Menu

chore(deps): bump the npm-web-nonbreaking group across 1 directory with 12 updates - #264

chore(deps): bump the npm-web-nonbreaking group across 1 directory with 12 updates#264
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/web/npm-web-nonbreaking-ac1dd5082f

dependabot Bot commented on behalf of github Jun 7, 2026 •

edited by blacksmith-sh Bot

Loading

Uh oh!

vercel Bot commented Jun 7, 2026 •

edited

Loading

Uh oh!

mogplex Bot commented Jun 7, 2026

Uh oh!

charlesrhoward commented Jun 13, 2026

Uh oh!

dependabot Bot commented on behalf of github Jun 13, 2026

Uh oh!

This branch had an error being deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Jun 7, 2026 • edited by blacksmith-sh Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

fumadocs-core@16.9.3

Patch Changes

fumadocs-ui@16.9.3

Patch Changes

v16.2.7

Core Changes

Credits

19.2.7 (June 1st, 2026)

React Server Components

19.2.7 (June 1st, 2026)

React Server Components

v5.0.14

What's Changed

New Contributors

v16.2.7

Core Changes

Credits

v16.2.7

Core Changes

Credits

v8.60.1

8.60.1 (2026-06-01)

🩹 Fixes

❤️ Thank You

v8.60.0

8.60.0 (2026-05-25)

🚀 Features

🩹 Fixes

❤️ Thank You

8.60.1 (2026-06-01)

8.60.0 (2026-05-25)

v6.4.3

6.4.3 (2026-06-01)

Uh oh!

vercel Bot commented Jun 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

mogplex Bot commented Jun 7, 2026

Mogplex PR Review

Summary

Critical Issues

Warnings

Suggestions

Verdict

Uh oh!

charlesrhoward commented Jun 13, 2026

Uh oh!

dependabot Bot commented on behalf of github Jun 13, 2026

Uh oh!

This branch had an error being deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Jun 7, 2026 •

edited by blacksmith-sh Bot

Loading

vercel Bot commented Jun 7, 2026 •

edited

Loading