Skip to content

chore(deps): bump the frontend group across 1 directory with 16 updates - #147

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend-7d88e153d0
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend-7d88e153d0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 26, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the frontend group with 16 updates in the / directory:

Package From To
@graphql-codegen/cli 7.4.0 7.4.3
@graphql-codegen/client-preset 6.1.3 6.2.0
eslint 10.10.0 10.11.0
eslint-plugin-jsdoc 64.2.0 64.5.4
eslint-plugin-sonarjs 4.2.0 4.2.1
eslint-plugin-tsdoc 0.5.2 0.5.3
knip 6.35.1 6.37.0
oxlint 1.82.0 1.83.0
typescript-eslint 8.70.0 8.70.1
@tanstack/react-query 5.102.8 5.103.1
@tanstack/react-router 1.170.36 1.170.39
@types/node 26.5.1 26.6.2
jsdom 30.0.1 30.1.0
vite 8.2.2 8.3.0
@graphql-inspector/cli 6.0.8 7.0.0
smtp-server 3.19.12 3.19.13

Updates @graphql-codegen/cli from 7.4.0 to 7.4.3

Changelog

Sourced from @​graphql-codegen/cli's changelog.

7.4.3

Patch Changes

7.4.2

Patch Changes

  • #10956 cec9c1c Thanks @​eddeee888! - Fix dynamically-loaded plugins/presets in ESM builds. Previously, ESM used the bare module specifier without resolving it relative to the consuming project first, so a plugin only loaded if it happened to be reachable from the CLI package's own node_modules. Resolving it the same way the CJS build already does (relativeRequire.resolve(mod)) fixes that, but the resolved absolute path also has to be converted to a file:// URL (pathToFileURL(...).href) before being passed to import() — otherwise, on Windows, the loader misparses a raw path like C:\... as a c: protocol scheme and throws ERR_UNSUPPORTED_ESM_URL_SCHEME.

  • #10966 3029b60 Thanks @​eddeee888! - Fix lifecycle hook scripts (e.g. hooks: { afterAllFileWrite: ['prettier --write'] } }) failing on Windows when the file paths passed to them contain a backslash or other POSIX shell-special character. Hook arguments were always quoted using POSIX single-quoting, but child_process.exec() runs through cmd.exe on Windows by default, which doesn't strip single quotes — so the hook script received the literal quote characters as part of its argument and failed to find the file. Arguments are now quoted per-platform: POSIX quoting stays unchanged elsewhere, and Windows arguments are wrapped in double quotes only when they actually need it, matching cmd.exe's own convention.

  • #10959 7dffaae Thanks @​eddeee888! - Fix the CLI reporting success (exit code 0) when a generates output's preset can't be resolved. The error was shown in the terminal but never counted toward the run's failure state, so allowPartialOutputs: false (the default) never took effect for this case.

7.4.1

Patch Changes

... (truncated)

Commits
  • bec802b chore(release): update monorepo packages versions (#10984)
  • 5e06d7f feat: add description for --check flag to build options (#10225)
  • 1cb0310 chore(release): update monorepo packages versions (#10962)
  • cec9c1c [graphql-codegen-cli] fix: resolve dynamic plugin/preset imports in ESM, incl...
  • 17b158a [graphql-codegen-cli] test: add windows-latest coverage to dev-tests, then ve...
  • 3029b60 [graphql-codegen-cli] fix: quote lifecycle hook arguments per-platform on Win...
  • 62d0765 test: reproduce hooks.ts POSIX-only shell quoting breaking on Windows (#10965)
  • 7dffaae fix(cli): route preset-resolution errors into ctx.errors so allowPartialOutpu...
  • c9e38b1 test: reproduce silent preset-resolution failure under allowPartialOutputs=fa...
  • 6fc6ff2 Reorganize dev-test-apollo-tooling into dev-test directory (#10955)
  • Additional commits viewable in compare view

Updates @graphql-codegen/client-preset from 6.1.3 to 6.2.0

Changelog

Sourced from @​graphql-codegen/client-preset's changelog.

6.2.0

Minor Changes

  • #10946 a6a3348 Thanks @​eddeee888! - Add skipIndexFile preset config option to client-preset to allow disabling generation of the index.ts barrel file that re-exports the other generated files. Defaults to false (unchanged behavior); set to true to skip generating index.ts, for example when your project avoids barrel files for tree-shaking or lint rule reasons.

Patch Changes

  • b545f6b Thanks @​eddeee888! - Add /* eslint-disable */ to the generated index.ts barrel file, matching the other files generated by client-preset (graphql.ts, gql.ts, fragment-masking.ts), which already had it.
Commits
  • 9e70bcb feat: add importExtension configuration option (#10510)
  • b7f90b0 chore(release): update monorepo packages versions (#10500)
  • d359d0b feat: allow deferredFields works with fragment (#9565)
  • 135ce4d chore(release): update monorepo packages versions (#10484)
  • bcd8f2a chore(release): update monorepo packages versions (#10473)
  • 1debf51 change documents type from array to object when no operations are found (#10032)
  • f1e5ae0 chore(release): update monorepo packages versions (#10460)
  • 87184aa [client-preset] Forward immutableTypes option to client preset (#10459)
  • 21dd6c8 chore(release): update monorepo packages versions (#10457)
  • 91c4bcd chore(release): update monorepo packages versions (#10450)
  • Additional commits viewable in compare view

Updates eslint from 10.10.0 to 10.11.0

Release notes

Sourced from eslint's releases.

v10.11.0

Features

  • d136fa4 feat: object-shorthand handle quoted properties for ignoreConstructors (#21271) (Pavel)
  • 397b3b8 feat: report unsafe labeled continue in no-unsafe-finally rule (#21316) (electrohyun)
  • d3dd47f feat: only exempt new-cap built-ins that reference the global (#21290) (sethamus)

Bug Fixes

  • 22b09f5 fix: ignore __proto__ properties in prefer-object-spread (#21311) (xbinaryx)
  • b684bb1 fix: make TimePass.parse optional in types and docs (#21313) (ntnyq)
  • 26d11bc fix: don't report __proto__ properties in object-shorthand (#21310) (xbinaryx)

Documentation

  • 9ecfdc5 docs: note that --cache can serve stale results for cross-file rules (#21312) (bytedoe)
  • 6c789ff docs: Update README (GitHub Actions Bot)
  • 5997825 docs: clarify preserve-caught-error known limitation (#21294) (Akinyemi Toluwalase)

Chores

  • 520dd77 perf: Implement fast paths in critical areas (#21210) (Nicholas C. Zakas)
  • 92086c8 test: update EMFILE error generation for Node.js 26.9.0 compatibility (#21330) (Francesco Trotta)
  • 9ac7eb6 chore: update github/codeql-action action to v4.38.0 (#21331) (renovate[bot])
  • 24310e3 chore: update ecosystem plugins (#21324) (ESLint Bot)
  • 45ad79e ci: bump pnpm/action-setup from 6.0.10 to 6.1.0 (#21318) (dependabot[bot])
  • ac74e37 chore: Add AGENTS.md with AI disclosure requirements (#21221) (Nicholas C. Zakas)
  • c832660 chore: Upgrade Stylelint to the latest version in docs (#21245) (Jung Hyeon Jun)
  • f9f88fc chore: update ecosystem plugins (#21308) (ESLint Bot)
  • fc81076 ci: add more types integration tests (#20395) (Nitin Kumar)
Commits
  • 3c0b7c6 10.11.0
  • 321f0a7 Build: changelog update for 10.11.0
  • 520dd77 perf: Implement fast paths in critical areas (#21210)
  • 9ecfdc5 docs: note that --cache can serve stale results for cross-file rules (#21312)
  • 92086c8 test: update EMFILE error generation for Node.js 26.9.0 compatibility (#21330)
  • 9ac7eb6 chore: update github/codeql-action action to v4.38.0 (#21331)
  • 22b09f5 fix: ignore __proto__ properties in prefer-object-spread (#21311)
  • 24310e3 chore: update ecosystem plugins (#21324)
  • d136fa4 feat: object-shorthand handle quoted properties for ignoreConstructors (#21...
  • 45ad79e ci: bump pnpm/action-setup from 6.0.10 to 6.1.0 (#21318)
  • Additional commits viewable in compare view

Updates eslint-plugin-jsdoc from 64.2.0 to 64.5.4

Release notes

Sourced from eslint-plugin-jsdoc's releases.

v64.5.4

64.5.4 (2026-09-19)

Bug Fixes

  • no-unnecessary-type-assertion: only try typescript if the rule is enabled; fixes #1773 (3c1c209)

v64.5.3

64.5.3 (2026-09-18)

Bug Fixes

v64.5.2

64.5.2 (2026-09-16)

Bug Fixes

  • set optional typescript peer dep. to any to undo breaking change (f469cdf)

v64.5.1

64.5.1 (2026-09-16)

Bug Fixes

  • specify typescript as an optional peer dependency; fixes #1768 (d147779)

v64.5.0

64.5.0 (2026-09-15)

Features

  • ts-ban-ts-comments: add rule mirrorring typescript-eslint's ban-ts-comments rule (afff498)

v64.4.0

64.4.0 (2026-09-14)

Features

  • convert-to-jsdoc-comments, no-bad-blocks: add LibreJS tags (99d2abf)

v64.3.10

64.3.10 (2026-09-12)

... (truncated)

Commits
  • 3c1c209 fix(no-unnecessary-type-assertion): only try typescript if the rule is enab...
  • a142875 chore: update jsdoccomment, typescript-eslint/utils, comment-parser, devDeps
  • 2d85fed fix: for @​link targets, check properties within export class declarations; fi...
  • f1f318a chore: update ncurc format
  • f469cdf fix: set optional typescript peer dep. to any to undo breaking change
  • d147779 fix: specify typescript as an optional peer dependency; fixes #1768
  • afff498 feat(ts-ban-ts-comments): add rule mirrorring typescript-eslint's `ban-ts-c...
  • 99d2abf feat(convert-to-jsdoc-comments, no-bad-blocks): add LibreJS tags
  • 64a8dca fix(convert-to-jsdoc-comments): merge stacked line comments into a single J...
  • eade377 fix(no-undefined-types): recognize class members from the class's own JSDoc
  • Additional commits viewable in compare view

Updates eslint-plugin-sonarjs from 4.2.0 to 4.2.1

Commits

Updates eslint-plugin-tsdoc from 0.5.2 to 0.5.3

Changelog

Sourced from eslint-plugin-tsdoc's changelog.

0.5.3

Wed, 16 Sep 2026 01:24:29 GMT

Patches

  • Declare eslint as an optional peer dependency so published typings resolve against the consumer's ESLint under non-hoisted installers.
Commits
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for eslint-plugin-tsdoc since your current version.


Updates knip from 6.35.1 to 6.37.0

Release notes

Sourced from knip's releases.

Release 6.37.0

  • fix(graphql-codegen): mark near-operation-file outputs as entries, not the documents directory (#2048) (06a68fcf99a90e559daeb0b8fb2d24e173124774) - thanks @​RobHannay!
  • fix: enable JSX in the config loader (#1959) (5b21dc9192f773613d1c5db8edf35f0a68820268) - thanks @​addielaruee!
  • Match binaries only to their actual dependency providers (c5bdb69ccbcb7e1056233f346d0ada3495d1013d)
  • Preserve executable references across package manager commands (54af171638db22f5d903faae05c37c2ea6adc869)
  • Correct binary provider metadata in Relay fixtures (e67dfcb96d055c27be9c8601e077656855bb632b)
  • Separate shell binary expectations from reporting exemptions (resolve #2022) (c1d7d75a3529d9faff7f4c0df11dd0ca1bdfb149)
  • Respect npx no-install flags before the executable (4237010c9a834eb8b04f4a528c76d10a5c38ee98)
  • Update dependencies (038ea179f7d6bf7ca43bc5daf553a68b13a9067c)
  • Remove npm auth check now that's in release-it (4aaf77c58004ac64063a1982b98e53107c2ebe93)
  • Fix --format name resolution in the ESLint plugin (#2046) (1269e98bb700384811fadc124d69ea720832037e) - thanks @​bytedoe!

Release 6.36.0

  • Add @​tailwindcss/webpack as Tailwind plugin enabler (#2027) (b5ac0cf734dda3c6c6c51c817981dfc558b7c582) - thanks @​igas!
  • Fix Next.js Turbopack loader dependencies (23419b4edfd48796dd484fa880e1bad49a043d2e)
  • Explain ambiguous star exports in traces (#2025) (3c2c1a53f9c2b7ff3057a4e46761791979e0b09c) - thanks @​gioboa!
  • Fix eslintrc parserOptions.parser handling in ESLint plugin (#2028) (c79463cec81d09518eda325ec00e6f12327dea8d) - thanks @​bytedoe!
  • fix(compilers): require word boundary around import keyword (#2029) (68bbe51c39b564022b63942bc83cb570778cca00) - thanks @​thanadolps!
  • fix: recover from corrupt cache file (#2034) (30ff7568c84e0a6731ca634a52314228d23d1a2b) - thanks @​gioboa!
  • fix: fix trailing comma on dependency removal (#2033) (adfaf4f78878b6d55b0939a92d70a1fbb0ae1240) - thanks @​gioboa!
  • Document built-in compiler scope (a05e155276dad4ead16992580d17572cebf045e7)
  • Add babel, khan and oxc to projects and optimize svgs (1c26560b98bc3109e93d15761d02f089213bfb6c)
  • Add section to test preview packages & extension (d911c18385f0aa41f53653a2a15cc90a1e0251b8)
  • Fix shared info/exclude handling in linked Git worktrees (#2037) (c1f18d5a7d25fc5a614747bbcbd62d043457eb48) - thanks @​kenfdev!
  • Shard Node specs on Windows and enable Bun test parallelism (66e966b6edec4460b40b05847fefa9f90ee69068)
  • Add Varlock plugin support (#2000) (e4fbf46acff08e78370e72b142e795bd81f28561) - thanks @​Joehoel!
  • Apply NODE_OPTIONS inputs to package manager binaries (#2038) (c8df8a28e9a19484efe7097f984abc0c6556aff5) - thanks @​giaBaoJS!
  • Handle array form of import/resolver setting in ESLint plugin (#2041) (a80d386a80fdafc89c610d4887ec82184ac178db) - thanks @​bytedoe!
  • fix(node): add valueless Node CLI flags to boolean options (#2042) (4c6768501f7115a894d7ece9e5c32090b684cc6f) - thanks @​shoutoutuoadi325!
  • fix(typedoc): accept string form of plugin and theme options (#2043) (ce387b05c8f136546e860ec73e29557563c63afa) - thanks @​giaBaoJS!
  • Add textlint plugin (#2039) (532dab595fc9a910e320418dc0390222fb2d7478) - thanks @​anandghegde!
  • fix: Correctly resolve Vitest setupFiles from nested configs (#2040) (84a494334e125d229dc865893b21d69d0d201e85) - thanks @​CruseCtrl!
  • Add n8n to projects (3f756a7e70c4164d57a7dbbd58f3604afe4043e2)
  • Resolve re-export traces to their defining bindings (43b3f9bbd7701ab44fca0554908f7550fbe84649)
  • Show ambiguous, shadowed and converged exports (f1e97b998d80906f0cef3f5e3946833b7166cbdc)
  • Document export tracing and editor contention (0188e7da1a481c7f6493d50580dfa8a7ecdf8c72)
  • Resolve local extends files in eslintrc configs (#2044) (62b5bf5aef5e6d3fc4784a1b5ef9933d383609ea) - thanks @​bytedoe!
  • docs: link each page to its own OG image (#2045) (a85eb4e2aab46c3fa0813b1f1e13e93e134b8be7) - thanks @​bytedoe!
  • fix: fix language server bundled knip fallback (#2035) (882ba3abb0b99c2bfe3e13a241d889376fe87c4c) - thanks @​gioboa!
Commits
  • 675c1b1 Release knip@6.37.0
  • 1269e98 Fix --format name resolution in the ESLint plugin (#2046)
  • 038ea17 Update dependencies
  • 4237010 Respect npx no-install flags before the executable
  • c1d7d75 Separate shell binary expectations from reporting exemptions (resolve #2022)
  • e67dfcb Correct binary provider metadata in Relay fixtures
  • 54af171 Preserve executable references across package manager commands
  • c5bdb69 Match binaries only to their actual dependency providers
  • 5b21dc9 fix: enable JSX in the config loader (#1959)
  • 06a68fc fix(graphql-codegen): mark near-operation-file outputs as entries, not the do...
  • Additional commits viewable in compare view

Updates oxlint from 1.82.0 to 1.83.0

Changelog

Sourced from oxlint's changelog.

Changelog

All notable changes to this package will be documented in this file.

The format is based on Keep a Changelog.

Commits

Updates typescript-eslint from 8.70.0 to 8.70.1

Release notes

Sourced from typescript-eslint's releases.

v8.70.1

8.70.1 (2026-09-21)

🩹 Fixes

  • ast-spec: narrow import attribute keys to identifiers and strings (#12879)
  • eslint-plugin: [no-useless-default-assignment] avoid false positives on tuples with a rest element (#12768)
  • eslint-plugin: [no-unnecessary-type-parameters] handle type precedence in the suggestion fixer (#12637)
  • eslint-plugin: [no-explicit-any] use unknown[] for bare any rest parameters (#12818)
  • eslint-plugin: [no-generated-empty-object-type] don't report a mapped type whose keys are not resolved yet (#12854)
  • eslint-plugin: [no-misused-spread] omit WeakMap spread suggestions (#12850)
  • eslint-plugin: [no-unnecessary-type-assertion] false positive for empty object asserted to a type alias of Record (#12869)
  • eslint-plugin: [no-meaningless-void-operator] allow void on assignment expressions (#12873)
  • eslint-plugin: [await-thenable] prevent autofix from breaking code when removing await (#12716)
  • eslint-plugin: [no-unnecessary-parameter-property-assignment] account for parameter reassignment (#12880)
  • eslint-plugin: [unbound-method] treat Intl.Collator.prototype.compare as spec-bound (#12845)
  • eslint-plugin: [no-unnecessary-condition] handle union-keyed index access on the left-hand side of nullish assignment (#12747)
  • eslint-plugin: [no-useless-default-assignment] convert the fixer to a suggestion fixer (#12826)
  • eslint-plugin: [no-misused-promises] handle multiple Promise constituents (#12904)
  • rule-tester: test the final autofix output instead of the first pass (#12867)
  • scope-manager: merge implicit global definitions (#12809)
  • type-utils: match package specifiers on whole path components (#12838)
  • typescript-estree: resolve symlinked paths when matching files to projects (#12725)
  • typescript-estree: add missing < token opening type arguments (#12821)
  • typescript-estree: require string literal import attribute values (#12894)
  • website: prevent playground from breaking down after opening link with the .js file type (#12777)

❤️ Thank You

See GitHub Releases for more information.

... (truncated)

Changelog

Sourced from typescript-eslint's changelog.

8.70.1 (2026-09-21)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Updates @tanstack/react-query from 5.102.8 to 5.103.1

Changelog

Sourced from @​tanstack/react-query's changelog.

5.103.1

Patch Changes

5.103.0

Patch Changes

Commits
  • c08f576 ci: Version Packages (#11511)
  • 19ccf27 ci: Version Packages (#11339)
  • 2da46cd chore(*): use eslint description syntax for grandfathered 'no-restricted-synt...
  • 58ad3e2 fix: isolate TypeScript test output (#11503)
  • d63afc7 Simplifed query methods/internal tests new lint (#11347)
  • 23fbdc3 test({react,preact,solid,angular}-query): remove 'fromGenericOptionsQueryFn' ...
  • 50680b9 test({react,preact,solid,svelte}-query,angular-query-experimental): rename 'm...
  • 0b326b6 test({react,preact}-query/useMutation): add tests for 'MutationFunctionContex...
  • a1119e5 ref(hydration): remove outdated dehydratedAt fallback (#11436)
  • 1a51bb8 docs(*): clarify 'Promise.all' only waits for all mutateAsync calls when they...
  • Additional commits viewable in compare view

Updates @tanstack/react-router from 1.170.36 to 1.170.39

Release notes

Sourced from @​tanstack/react-router's releases.

@​tanstack/react-router@​1.170.39

Patch Changes

  • #8435 73bfc15 - Avoid hydration-triggered rerenders for links that do not compare URL hashes while preserving hash-sensitive active state and ClientOnly behavior.

@​tanstack/react-router@​1.170.38

Patch Changes

@​tanstack/react-router@​1.170.37

Patch Changes

  • #8418 e561fa1 - deepEqual now takes its flags as positional arguments — deepEqual(a, b, partial?, explicitUndefined?) — instead of an options object. The router's hot callers (Link option stabilization and active-state checks, matchRoute) no longer allocate an options object per comparison, and the comparator reads two booleans instead of a polymorphic object. explicitUndefined replaces ignoreUndefined: false. deepEqual is an internal helper; it stays exported for compatibility of two-argument calls.

  • #8419 a1c8d1a - resolvePath (internal helper) now takes positional arguments — resolvePath(base, to, trailingSlash?, cache?) — so buildLocation and matchRoute no longer allocate an options object per path resolution.

  • #8204 cbbfbe3 - Stream large deferred SSR hydration payloads through a backpressure-aware router transport, fail known setup errors before response creation, and close cancelled or expired transforms safely.

    Start now cancels discarded middleware and HEAD response bodies, including plain streams and derived branches.

    Server-function raw streams share one ordered response. Arbitrary or sequential consumption can require potentially unbounded buffering of unread data on the client. Cancelling one raw stream discards it locally, while aborting the whole call cancels the response and server work. Consume streams concurrently, cancel unused streams promptly, or use separate calls when independent backpressure is required. A raw stream that exceeds its unread-byte limit now fails alone; sibling streams and the JSON result keep flowing.

    The JSON wire shape of a RawStream server-function argument changed. Clients and servers must run matching versions for requests that pass a RawStream.

    The frame-protocol constants (FRAME_TYPE_*, MAX_FRAME_PAYLOAD_SIZE, MAX_FRAMED_STREAMS) moved from the @tanstack/start-client-core root to the @tanstack/start-client-core/client-rpc subpath.

    Router requests whose Accept header allows neither text/html nor */* now receive 406 Not Acceptable instead of 500.

    Framework adapters share the body <Scripts> composition (getSsrBodyScriptParts, composeSsrBodyScripts) and the eager HTML response wrapper (renderSsrHtmlResponse) from @tanstack/router-core.

    Solid SSR now emits one document type and renders late lazy errors through route boundaries. A Solid <Await> without a fallback no longer holds the streamed shell; it renders inside the nearest <Suspense> boundary like React and Vue, and now renders falsy resolved values.

    Static server functions decode cached RawStream values with the client deserializer plugins.

    SSR Query integrations now keep request cleanup and stream ownership aligned with the router lifecycle.

  • #8420 8e164d2 - useLinkProps no longer calls through an internal wrapper. The host element Link renders on is an @internal overload parameter that is stripped from the published declarations, so the public useLinkProps(options, forwardedRef?) signature is unchanged.

  • Updated dependencies [bc80866, e561fa1, cbbfbe3, a1c8d1a, cbbfbe3, a0b2ad9, 1ca361b]:

    • @​tanstack/router-core@​1.171.31
Changelog

Sourced from @​tanstack/react-router's changelog.

1.170.39

Patch Changes

  • #8435 73bfc15 - Avoid hydration-triggered rerenders for links that do not compare URL hashes while preserving hash-sensitive active state and ClientOnly behavior.

1.170.38

Patch Changes

1.170.37

Patch Changes

  • #8418 e561fa1 - deepEqual now takes its flags as positional arguments — deepEqual(a, b, partial?, explicitUndefined?) — instead of an options object. The router's hot callers (Link option stabilization and active-state checks, matchRoute) no longer allocate an options object per comparison, and the comparator reads two booleans instead of a polymorphic object. explicitUndefined replaces ignoreUndefined: false. deepEqual is an internal helper; it stays exported for compatibility of two-argument calls.

  • #8419 a1c8d1a - resolvePath (internal helper) now takes positional arguments — resolvePath(base, to, trailingSlash?, cache?) — so buildLocation and matchRoute no longer allocate an options object per path resolution.

  • #8204 cbbfbe3 - Stream large deferred SSR hydration payloads through a backpressure-aware router transport, fail known setup errors before response creation, and close cancelled or expired transforms safely.

    Start now cancels discarded middleware and HEAD response bodies, including plain streams and derived branches.

    Server-function raw streams share one ordered response. Arbitrary or sequential consumption can require potentially unbounded buffering of unread data on the client. Cancelling one raw stream discards it locally, while aborting the whole call cancels the response and server work. Consume streams concurrently, cancel unused streams promptly, or use separate calls when independent backpressure is required. A raw stream that exceeds its unread-byte limit now fails alone; sibling streams and the JSON result keep flowing.

    The JSON wire shape of a RawStream server-function argument changed. Clients and servers must run matching versions for requests that pass a RawStream.

    The frame-protocol constants (FRAME_TYPE_*, MAX_FRAME_PAYLOAD_SIZE, MAX_FRAMED_STREAMS) moved from the @tanstack/start-client-core root to the @tanstack/start-client-core/client-rpc subpath.

    Router requests whose Accept header allows neither text/html nor */* now receive 406 Not Acceptable instead of 500.

    Framework adapters share the body <Scripts> composition (getSsrBodyScriptParts, composeSsrBodyScripts) and the eager HTML response wrapper (renderSsrHtmlResponse) from @tanstack/router-core.

    Solid SSR now emits one document type and renders late lazy errors through route boundaries. A Solid <Await> without a fallback no longer holds the streamed shell; it renders inside the nearest <Suspense> boundary like React and Vue, and now renders falsy resolved values.

    Static server functions decode cached RawStream values with the client deserializer plugins.

    SSR Query integrations now keep request cleanup and stream ownership aligned with the router lifecycle.

  • #8420 8e164d2 - useLinkProps no longer calls through an internal wrapper. The host element Link renders on is an @internal overload parameter that is stripped from the published declarations, so the public useLinkProps(options, forwardedRef?) signature is unchanged.

  • Updated dependencies [bc80866, e561fa1, cbbfbe3, a1c8d1a, cbbfbe3, a0b2ad9, 1ca361b]:

    • @​tanstack/router-core@​1.171.31
Commits
  • ddad69a ci: Version Packages (#8486)
  • 73bfc15 perf(react-router): avoid redundant link hydration updates...

    Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 26, 2026
@coderabbitai

coderabbitai Bot commented Sep 26, 2026 •

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository: gopherium/AlphOne/.coderabbit.yaml

Review profile: CHILL

Plan: Advanced

Run ID: cae2b77e-ffb8-4507-b927-f6d834b48b5d

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@codecov

codecov Bot commented Sep 26, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/frontend-7d88e153d0 branch from b97b660 to d871d30 Compare September 26, 2026 17:00
Bumps the frontend group with 16 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@graphql-codegen/cli](https://github.com/dotansimha/graphql-code-generator/tree/HEAD/packages/graphql-codegen-cli) | `7.4.0` | `7.4.3` |
| [@graphql-codegen/client-preset](https://github.com/dotansimha/graphql-code-generator/tree/HEAD/packages/presets/client) | `6.1.3` | `6.2.0` |
| [eslint](https://github.com/eslint/eslint) | `10.10.0` | `10.11.0` |
| [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc) | `64.2.0` | `64.5.4` |
| [eslint-plugin-sonarjs](https://github.com/SonarSource/SonarJS) | `4.2.0` | `4.2.1` |
| [eslint-plugin-tsdoc](https://github.com/microsoft/tsdoc/tree/HEAD/eslint-plugin) | `0.5.2` | `0.5.3` |
| [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) | `6.35.1` | `6.37.0` |
| [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.82.0` | `1.83.0` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.70.0` | `8.70.1` |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.102.8` | `5.103.1` |
| [@tanstack/react-router](https://github.com/TanStack/router/tree/HEAD/packages/react-router) | `1.170.36` | `1.170.39` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.5.1` | `26.6.2` |
| [jsdom](https://github.com/jsdom/jsdom) | `30.0.1` | `30.1.0` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.2.2` | `8.3.0` |
| [@graphql-inspector/cli](https://github.com/graphql-hive/graphql-inspector/tree/HEAD/packages/cli) | `6.0.8` | `7.0.0` |
| [smtp-server](https://github.com/nodemailer/smtp-server) | `3.19.12` | `3.19.13` |



Updates `@graphql-codegen/cli` from 7.4.0 to 7.4.3
- [Release notes](https://github.com/dotansimha/graphql-code-generator/releases)
- [Changelog](https://github.com/dotansimha/graphql-code-generator/blob/master/packages/graphql-codegen-cli/CHANGELOG.md)
- [Commits](https://github.com/dotansimha/graphql-code-generator/commits/@graphql-codegen/cli@7.4.3/packages/graphql-codegen-cli)

Updates `@graphql-codegen/client-preset` from 6.1.3 to 6.2.0
- [Release notes](https://github.com/dotansimha/graphql-code-generator/releases)
- [Changelog](https://github.com/dotansimha/graphql-code-generator/blob/master/packages/presets/client/CHANGELOG.md)
- [Commits](https://github.com/dotansimha/graphql-code-generator/commits/@graphql-codegen/cli@6.2.0/packages/presets/client)

Updates `eslint` from 10.10.0 to 10.11.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.10.0...v10.11.0)

Updates `eslint-plugin-jsdoc` from 64.2.0 to 64.5.4
- [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases)
- [Commits](gajus/eslint-plugin-jsdoc@v64.2.0...v64.5.4)

Updates `eslint-plugin-sonarjs` from 4.2.0 to 4.2.1
- [Release notes](https://github.com/SonarSource/SonarJS/releases)
- [Changelog](https://github.com/SonarSource/SonarJS/blob/master/docs/RELEASE.md)
- [Commits](https://github.com/SonarSource/SonarJS/commits)

Updates `eslint-plugin-tsdoc` from 0.5.2 to 0.5.3
- [Changelog](https://github.com/microsoft/tsdoc/blob/main/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/microsoft/tsdoc/commits/HEAD/eslint-plugin)

Updates `knip` from 6.35.1 to 6.37.0
- [Release notes](https://github.com/webpro-nl/knip/releases)
- [Commits](https://github.com/webpro-nl/knip/commits/knip@6.37.0/packages/knip)

Updates `oxlint` from 1.82.0 to 1.83.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.83.0/npm/oxlint)

Updates `typescript-eslint` from 8.70.0 to 8.70.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.70.1/packages/typescript-eslint)

Updates `@tanstack/react-query` from 5.102.8 to 5.103.1
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.103.1/packages/react-query)

Updates `@tanstack/react-router` from 1.170.36 to 1.170.39
- [Release notes](https://github.com/TanStack/router/releases)
- [Changelog](https://github.com/TanStack/router/blob/main/packages/react-router/CHANGELOG.md)
- [Commits](https://github.com/TanStack/router/commits/@tanstack/react-router@1.170.39/packages/react-router)

Updates `@types/node` from 26.5.1 to 26.6.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `jsdom` from 30.0.1 to 30.1.0
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Commits](jsdom/jsdom@v30.0.1...v30.1.0)

Updates `vite` from 8.2.2 to 8.3.0
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/create-vite@8.3.0/packages/vite)

Updates `@graphql-inspector/cli` from 6.0.8 to 7.0.0
- [Release notes](https://github.com/graphql-hive/graphql-inspector/releases)
- [Changelog](https://github.com/graphql-hive/graphql-inspector/blob/master/packages/cli/CHANGELOG.md)
- [Commits](https://github.com/graphql-hive/graphql-inspector/commits/@graphql-inspector/core@7.0.0/packages/cli)

Updates `smtp-server` from 3.19.12 to 3.19.13
- [Release notes](https://github.com/nodemailer/smtp-server/releases)
- [Changelog](https://github.com/nodemailer/smtp-server/blob/master/CHANGELOG.md)
- [Commits](nodemailer/smtp-server@v3.19.12...v3.19.13)

---
updated-dependencies:
- dependency-name: "@graphql-codegen/cli"
  dependency-version: 7.4.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend
- dependency-name: "@graphql-codegen/client-preset"
  dependency-version: 6.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend
- dependency-name: "@graphql-inspector/cli"
  dependency-version: 7.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: frontend
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.103.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend
- dependency-name: "@tanstack/react-router"
  dependency-version: 1.170.39
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend
- dependency-name: "@types/node"
  dependency-version: 26.6.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend
- dependency-name: eslint
  dependency-version: 10.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend
- dependency-name: eslint-plugin-jsdoc
  dependency-version: 64.5.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend
- dependency-name: eslint-plugin-sonarjs
  dependency-version: 4.2.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend
- dependency-name: eslint-plugin-tsdoc
  dependency-version: 0.5.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend
- dependency-name: jsdom
  dependency-version: 30.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend
- dependency-name: knip
  dependency-version: 6.37.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend
- dependency-name: oxlint
  dependency-version: 1.83.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend
- dependency-name: smtp-server
  dependency-version: 3.19.13
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend
- dependency-name: typescript-eslint
  dependency-version: 8.70.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend
- dependency-name: vite
  dependency-version: 8.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): bump the frontend group across 1 directory with 16 updates chore(deps): bump the frontend group across 1 directory with 16 updates Sep 27, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/frontend-7d88e153d0 branch from d871d30 to 0781545 Compare September 27, 2026 18:17

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants