build(deps): bump the npm_and_yarn group with 4 updates

[dependabot]

Bumps the npm_and_yarn group with 4 updates: fumadocs-core, fumadocs-ui, next and @aws-sdk/client-s3.

Updates fumadocs-core from 16.15.15 to 16.15.17

Release notes

Sourced from fumadocs-core's releases.

fumadocs@16.15.17

• @​fumadocs/base-ui@​16.15.17
• fumadocs-core@16.15.17
• fumadocs-ui@16.15.17

Apply the Vite base path to the "View as Markdown" link

<ViewOptionsPopover /> linked to markdownUrl without the Vite base, so sites served under a base path got a 404. It now prefixes the URL like <MarkdownCopyButton /> does.

Fix #3620

fumadocs@16.15.16

• @​fumadocs/base-ui@​16.15.16
• fumadocs-core@16.15.16
• fumadocs-ui@16.15.16

Don't copy failed Markdown responses

<MarkdownCopyButton /> copied the body of error responses, like a 404 page, and kept it cached until a full reload. Failed responses are rejected, and only successful ones are cached.

Fix #3612

Get pages by decoded slugs

getPage() accepts both URI encoded and decoded slugs. React Router and TanStack Router pass decoded params, so pages with spaces or non-ASCII characters in their slugs were not found.

Fix #3613

Commits

• bb43b61 Version Packages (#3621)
• 6791d6f fix(ui): apply the Vite base path to the "View as Markdown" link
• bc42c20 Version Packages (#3618)
• 2516fba feat(openapi): show auth descriptions in a hover card
• abdba4e clean code
• b7f5431 fix(openapi): follow-ups to #3617
• 1e88d6f Fix OpenAPI issues (#3617)
• See full diff in compare view

Updates fumadocs-ui from 16.15.15 to 16.15.17

Release notes

Sourced from fumadocs-ui's releases.

fumadocs@16.15.17

• @​fumadocs/base-ui@​16.15.17
• fumadocs-core@16.15.17
• fumadocs-ui@16.15.17

Apply the Vite base path to the "View as Markdown" link

<ViewOptionsPopover /> linked to markdownUrl without the Vite base, so sites served under a base path got a 404. It now prefixes the URL like <MarkdownCopyButton /> does.

Fix #3620

fumadocs@16.15.16

• @​fumadocs/base-ui@​16.15.16
• fumadocs-core@16.15.16
• fumadocs-ui@16.15.16

Don't copy failed Markdown responses

<MarkdownCopyButton /> copied the body of error responses, like a 404 page, and kept it cached until a full reload. Failed responses are rejected, and only successful ones are cached.

Fix #3612

Get pages by decoded slugs

getPage() accepts both URI encoded and decoded slugs. React Router and TanStack Router pass decoded params, so pages with spaces or non-ASCII characters in their slugs were not found.

Fix #3613

Commits

• bb43b61 Version Packages (#3621)
• 6791d6f fix(ui): apply the Vite base path to the "View as Markdown" link
• bc42c20 Version Packages (#3618)
• 2516fba feat(openapi): show auth descriptions in a hover card
• abdba4e clean code
• b7f5431 fix(openapi): follow-ups to #3617
• 1e88d6f Fix OpenAPI issues (#3617)
• See full diff in compare view

Updates next from 16.3.6 to 16.3.7

Release notes

Sourced from next's releases.

v16.3.7

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

• turbo-tasks-backend: fix strongly consistent read hanging on a canceled task (#98931)

Credits

Huge thanks to @​lukesandberg for helping!

Commits

• 4c20699 v16.3.7
• 2521aec [backport] turbo-tasks-backend: fix strongly consistent read hanging on a can...
• See full diff in compare view

Updates @aws-sdk/client-s3 from 3.1142.0 to 3.1143.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1143.0

3.1143.0(2026-09-29)

New Features

• client-inspector2: The ListFindingAggregations API now includes Low, Informational, and Untriaged counts alongside the existing severity counts in SeverityCounts. (523ef402)
• client-appstream: Add support for NVIDIA GRID driver version metadata in Workspace Applications image responses through the new ImageSoftwareMetadata field. (87e9c22f)
• client-bedrock-agent-runtime: Amazon Bedrock Agentic Retrieve now supports the Bedrock Mantle (OpenAI Responses) endpoint via a new MantleFoundationModel configuration with an optional projectId. (9529fe9e)
• client-sagemaker: Adds support for cpu flex type instances on SageMaker Training and Processing. Also contains minor updates to DescribeTrainingPlan to support ARN inputs. (ca45f9e9)
• client-opensearch: Amazon OpenSearch Service now supports advisory pre-validations for domain config changes. Non-critical checks now surface as warnings you can acknowledge (via the new AcceptedWarnings parameter) and proceed, instead of hard-blocking. Severity is reported in change-progress and dry-run results. (2419dc69)
• client-securityagent: Adds support for Azure DevOps and Bitbucket Data Center integration providers. (8fda1d16)
• client-transfer: AWS Transfer Family now supports configuring up to three custom ports on public SFTP servers, instead of the single default port 22. You can also set each port's communication mode (server-talk-first or client-talk-first) so legacy and modern SFTP clients connect reliably. (b5745934)
• client-mediatailor: AWS Elemental MediaTailor now supports beaconing configuration on playback configurations. In Insights reporting mode, MediaTailor will now gather client side beaconing metrics. Set the reporting mode to Disabled to turn this off. (99e75af3)
• client-deadline: AWS Deadline Cloud now supports Docker software add-ons on service-managed fleets. Adds support for Open Job Description EXPR and Feature Bundle 1 job templates with typed job parameters and job, step, and parameter names up to 512 characters. (33fcaa7b)
• client-identitystore: Add support for network access controls to restrict Identity Store API and SCIM access to trusted networks, optimistic locking for users and groups via resource revisions, and resource ARNs as identifiers in requests. (b1ec66e6)
• client-elementalinference: Adds an extendedAnalysis setting to contextual metadata outputs to control detection of people, environments, brands, and on-screen text, and updates the summaryGeneration documentation. (c121ec60)
• client-elasticache: Amazon ElastiCache Serverless now supports public endpoints for Valkey caches. With the new Connection Type parameter, you can create a serverless cache accessible over the internet without any VPC configuration. Public endpoint caches require IAM authentication. (c674d6c7)
• client-ec2: Adds the LaunchStatus field to CapacityReservation in the DescribeCapacityReservations response. This field indicates whether you can currently launch instances into an UltraServer. (5bb9e116)
• client-glue: Add support for Glue system-managed materialized views. (bddd698d)
• client-rds: Adds the TargetResourceConfigurations parameter to CreateBlueGreenDeployment, letting you specify a target KMS key for each resource in the green environment. (6875fe52)
• client-sesv2: Added Filter support for ListTenants, ListEmailIdentities, and ListConfigurationSets APIs. (aa080a6f)

Bug Fixes

• lib-transfer-manager: retry worker path download part failures (#8285) (13f49fff)

Tests

• undici-http-handler: temporarily skip e2e test (#8320) (2c59e394)

---

For list of updated packages, view updated-packages.md in assets-3.1143.0.zip

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1143.0 (2026-09-29)

Note: Version bump only for package @​aws-sdk/client-s3

Commits

• 81afad0 Publish v3.1143.0
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

🤖 Auto-merge enabled (minor update). GitHub will squash-merge this automatically once the required CI checks pass.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.