Bump the bun-dependencies group with 7 updates

[dependabot]

Bumps the bun-dependencies group with 7 updates:

Package	From	To
@earendil-works/pi-coding-agent	0.81.1	0.85.1
@earendil-works/pi-tui	0.81.1	0.85.1
@github/copilot-sdk	1.0.8	1.0.13
@opencode-ai/plugin	1.18.4	1.18.30
bun-types	1.3.14	1.4.2
react	19.2.8	19.3.0
@types/react	19.2.17	19.3.0

Updates @earendil-works/pi-coding-agent from 0.81.1 to 0.85.1

Release notes

Sourced from @​earendil-works/pi-coding-agent's releases.

v0.85.1

New Features

• GPT-6 Astra — Available through OpenAI API keys and OpenAI Codex subscriptions. See API Keys and OpenAI Codex.

Added

• Added GPT-6 Astra for OpenAI API keys and OpenAI Codex subscriptions.
• Added five-times-faster mouse wheel scrolling while holding Alt in fullscreen mode (#9166 by @​xl0).

Fixed

• Fixed configurable save keybindings in the model and thinking selectors (#9149 by @​rwachtler).
• Fixed SDK import failures caused by unintentionally publishing internal experimental code and dependencies in 0.85.0. The experimental client and experimental/plugin subpaths and server/client commands are now source-only through pi-test.sh; the supported local SDK and stdio RPC API are unchanged (#9132).
• Fixed mouse hover changing selection and recentering autocomplete and settings lists, causing clicks to target a different item.
• Fixed long prompt-cache requests for GPT-5.6+ Responses models to use prompt_cache_options.ttl: "30m" instead of prompt_cache_retention: "24h".

v0.85.0

New Features

• Persistent Claude thinking effort — Supported Anthropic transports preserve per-turn effort and recover safely from signed-thinking mismatches. See Model Configuration.
• Fullscreen transcript controls — Jump to the latest message from a scrolled transcript and use the embedded working indicator. See TUI Fullscreen Viewport.
• Restorable in-memory sessions — Resume externally stored session entries through the SDK. See Session Management.

Added

• Added SessionManager.inMemory() support for restoring externally managed session entries (#8980 by @​y-nk).
• Added inherited OpenAI-compatible vllmPriority and supportsMaxOutputTokens model settings for vLLM scheduler priority and OpenAI Responses output-token limits (#9004 by @​AppleDannyClegg, #8941 by @​scturtle).
• Added inherited LaTeX rendering for relational algebra join symbols (#9050 by @​haoqixu).
• Added a clickable "Jump to latest message" label with the tui.altScreen.bottom shortcut to the fullscreen transcript while it is scrolled up (#9080 by @​rwachtler).

Changed

• Moved the streaming working indicator into the default editor border and matched its default spinner and label to the thinking-level border color. Custom editors retain the standalone indicator unless they opt in to embedding it (#8799 by @​cristinaponcela).
• Reduced inherited fullscreen transcript search latency on large transcripts by caching unchanged search results, indexing ASCII runs, and limiting highlight work to visible matches (#8800 by @​cristinaponcela).

Fixed

• Fixed managed fd and ripgrep downloads on Linux musl systems (#9070 by @​Charlie0113-T).
• Removed the unavailable inherited Grok Build 0.1 model from /model (#9093 by @​Jaaneek).
• Fixed inherited provider streams emitting incompatible event sequences and custom tool-call deltas.
• Restored the @earendil-works/pi-coding-agent/client compatibility entry point.
• Fixed the inherited Qwen Token Plan Individual catalog to include Qwen3.8 Flash (#9021).
• Fixed inherited OpenAI Codex SSE parsing to process terminal events that are not followed by a blank line (#9047).
• Fixed inherited GitHub Copilot Claude Fable 5 requests so selected reasoning levels are sent (#8961).
• Fixed inherited Baseten GLM-5.2 models incorrectly advertising image input support (#8293 by @​Panoplos).
• Fixed skills being unavailable when Bash is the only enabled tool (#8552 by @​xl0).
• Fixed concurrent session shares overwriting one another (#8613 by @​wutongyuonce).
• Fixed image orientation detection skipping EXIF data after non-EXIF APP1 segments (#8616 by @​wutongyuonce).
• Fixed imported sessions overwriting an existing session with the same filename (#8985 by @​wutongyuonce).

... (truncated)

Changelog

Sourced from @​earendil-works/pi-coding-agent's changelog.

[0.85.1] - 2026-09-05

New Features

• GPT-6 Astra — Available through OpenAI API keys and OpenAI Codex subscriptions. See API Keys and OpenAI Codex.

Added

• Added GPT-6 Astra for OpenAI API keys and OpenAI Codex subscriptions.
• Added five-times-faster mouse wheel scrolling while holding Alt in fullscreen mode (#9166 by @​xl0).

Fixed

• Fixed configurable save keybindings in the model and thinking selectors (#9149 by @​rwachtler).
• Fixed SDK import failures caused by unintentionally publishing internal experimental code and dependencies in 0.85.0. The experimental client and experimental/plugin subpaths and server/client commands are now source-only through pi-test.sh; the supported local SDK and stdio RPC API are unchanged (#9132).
• Fixed mouse hover changing selection and recentering autocomplete and settings lists, causing clicks to target a different item.
• Fixed long prompt-cache requests for GPT-5.6+ Responses models to use prompt_cache_options.ttl: "30m" instead of prompt_cache_retention: "24h".

[0.85.0] - 2026-09-04

New Features

• Persistent Claude thinking effort — Supported Anthropic transports preserve per-turn effort and recover safely from signed-thinking mismatches. See Model Configuration.
• Fullscreen transcript controls — Jump to the latest message from a scrolled transcript and use the embedded working indicator. See TUI Fullscreen Viewport.
• Restorable in-memory sessions — Resume externally stored session entries through the SDK. See Session Management.

Added

• Added SessionManager.inMemory() support for restoring externally managed session entries (#8980 by @​y-nk).
• Added inherited OpenAI-compatible vllmPriority and supportsMaxOutputTokens model settings for vLLM scheduler priority and OpenAI Responses output-token limits (#9004 by @​AppleDannyClegg, #8941 by @​scturtle).
• Added inherited LaTeX rendering for relational algebra join symbols (#9050 by @​haoqixu).
• Added a clickable "Jump to latest message" label with the tui.altScreen.bottom shortcut to the fullscreen transcript while it is scrolled up (#9080 by @​rwachtler).

Changed

• Moved the streaming working indicator into the default editor border and matched its default spinner and label to the thinking-level border color. Custom editors retain the standalone indicator unless they opt in to embedding it (#8799 by @​cristinaponcela).
• Reduced inherited fullscreen transcript search latency on large transcripts by caching unchanged search results, indexing ASCII runs, and limiting highlight work to visible matches (#8800 by @​cristinaponcela).

Fixed

• Fixed managed fd and ripgrep downloads on Linux musl systems (#9070 by @​Charlie0113-T).
• Removed the unavailable inherited Grok Build 0.1 model from /model (#9093 by @​Jaaneek).
• Fixed inherited provider streams emitting incompatible event sequences and custom tool-call deltas.
• Restored the @earendil-works/pi-coding-agent/client compatibility entry point.
• Fixed the inherited Qwen Token Plan Individual catalog to include Qwen3.8 Flash (#9021).
• Fixed inherited OpenAI Codex SSE parsing to process terminal events that are not followed by a blank line (#9047).
• Fixed inherited GitHub Copilot Claude Fable 5 requests so selected reasoning levels are sent (#8961).
• Fixed inherited Baseten GLM-5.2 models incorrectly advertising image input support (#8293 by @​Panoplos).
• Fixed skills being unavailable when Bash is the only enabled tool (#8552 by @​xl0).
• Fixed concurrent session shares overwriting one another (#8613 by @​wutongyuonce).

... (truncated)

Commits

• d981de1 Release v0.85.1
• cce6553 docs(tui): document Alt-wheel scrolling in unreleased changelogs
• 082f757 fix(coding-agent): make footer debounce tests deterministic
• 6f11c31 fix(coding-agent): assert source-only experimental package exports
• 1a46b92 docs: audit changelogs for v0.85.1
• 1382777 fix(coding-agent): keep remote harness dependencies development-only
• 17de82d feat(ai): add GPT-6 Astra support
• 92d8e2d fix(coding-agent): selector save keybindings (#9149)
• 47236c8 docs(coding-agent): document running pi in Docker Sandboxes (#9077)
• dd7e816 Add [Unreleased] section for next cycle
• Additional commits viewable in compare view

Updates @earendil-works/pi-tui from 0.81.1 to 0.85.1

Release notes

Sourced from @​earendil-works/pi-tui's releases.

v0.85.1

New Features

• GPT-6 Astra — Available through OpenAI API keys and OpenAI Codex subscriptions. See API Keys and OpenAI Codex.

Added

• Added GPT-6 Astra for OpenAI API keys and OpenAI Codex subscriptions.
• Added five-times-faster mouse wheel scrolling while holding Alt in fullscreen mode (#9166 by @​xl0).

Fixed

• Fixed configurable save keybindings in the model and thinking selectors (#9149 by @​rwachtler).
• Fixed SDK import failures caused by unintentionally publishing internal experimental code and dependencies in 0.85.0. The experimental client and experimental/plugin subpaths and server/client commands are now source-only through pi-test.sh; the supported local SDK and stdio RPC API are unchanged (#9132).
• Fixed mouse hover changing selection and recentering autocomplete and settings lists, causing clicks to target a different item.
• Fixed long prompt-cache requests for GPT-5.6+ Responses models to use prompt_cache_options.ttl: "30m" instead of prompt_cache_retention: "24h".

v0.85.0

New Features

• Persistent Claude thinking effort — Supported Anthropic transports preserve per-turn effort and recover safely from signed-thinking mismatches. See Model Configuration.
• Fullscreen transcript controls — Jump to the latest message from a scrolled transcript and use the embedded working indicator. See TUI Fullscreen Viewport.
• Restorable in-memory sessions — Resume externally stored session entries through the SDK. See Session Management.

Added

• Added SessionManager.inMemory() support for restoring externally managed session entries (#8980 by @​y-nk).
• Added inherited OpenAI-compatible vllmPriority and supportsMaxOutputTokens model settings for vLLM scheduler priority and OpenAI Responses output-token limits (#9004 by @​AppleDannyClegg, #8941 by @​scturtle).
• Added inherited LaTeX rendering for relational algebra join symbols (#9050 by @​haoqixu).
• Added a clickable "Jump to latest message" label with the tui.altScreen.bottom shortcut to the fullscreen transcript while it is scrolled up (#9080 by @​rwachtler).

Changed

• Moved the streaming working indicator into the default editor border and matched its default spinner and label to the thinking-level border color. Custom editors retain the standalone indicator unless they opt in to embedding it (#8799 by @​cristinaponcela).
• Reduced inherited fullscreen transcript search latency on large transcripts by caching unchanged search results, indexing ASCII runs, and limiting highlight work to visible matches (#8800 by @​cristinaponcela).

Fixed

• Fixed managed fd and ripgrep downloads on Linux musl systems (#9070 by @​Charlie0113-T).
• Removed the unavailable inherited Grok Build 0.1 model from /model (#9093 by @​Jaaneek).
• Fixed inherited provider streams emitting incompatible event sequences and custom tool-call deltas.
• Restored the @earendil-works/pi-coding-agent/client compatibility entry point.
• Fixed the inherited Qwen Token Plan Individual catalog to include Qwen3.8 Flash (#9021).
• Fixed inherited OpenAI Codex SSE parsing to process terminal events that are not followed by a blank line (#9047).
• Fixed inherited GitHub Copilot Claude Fable 5 requests so selected reasoning levels are sent (#8961).
• Fixed inherited Baseten GLM-5.2 models incorrectly advertising image input support (#8293 by @​Panoplos).
• Fixed skills being unavailable when Bash is the only enabled tool (#8552 by @​xl0).
• Fixed concurrent session shares overwriting one another (#8613 by @​wutongyuonce).
• Fixed image orientation detection skipping EXIF data after non-EXIF APP1 segments (#8616 by @​wutongyuonce).
• Fixed imported sessions overwriting an existing session with the same filename (#8985 by @​wutongyuonce).

... (truncated)

Changelog

Sourced from @​earendil-works/pi-tui's changelog.

[0.85.1] - 2026-09-05

Added

• Added five-times-faster mouse wheel scrolling while holding Alt in fullscreen mode (#9166 by @​xl0).

Fixed

• Fixed mouse hover changing selection and recentering autocomplete and settings lists, causing clicks to target a different item.

[0.85.0] - 2026-09-04

Breaking Changes

• Removed coding-agent environment-variable defaults from pi-tui. Applications must configure the hardware cursor and clear-on-shrink behavior through the renderer constructor and setClearOnShrink(). PI_DEBUG_REDRAW is now PI_TUI_DEBUG_REDRAW; debug and crash log filenames now use the pi-tui- prefix. When no log directory is supplied, redraw logging is disabled and crash dumps are written to the OS temp directory. (#8699 by @​geraschenko)

Added

• Added a TuiAltScreen scrollToEndIndicator option that renders a clickable jump-to-end label on a follow-end primary scroll view while it is scrolled away from the end (#9080 by @​rwachtler).
• Added LaTeX rendering for relational algebra join symbols (#9050 by @​haoqixu).

Changed

• Changed the Loader animation and editor integration to support embedded working indicators (#8799 by @​cristinaponcela).
• Reduced fullscreen transcript search latency on large transcripts by caching unchanged search results, indexing ASCII runs, and limiting highlight work to visible matches (#8800 by @​cristinaponcela).

Fixed

• Fixed drag selection continuing over an editor.
• Fixed terminal startup under restricted seccomp policies that reject the SIGWINCH self-signal (#8898 by @​bartlomiejkida).
• Fixed Zed terminal image capability detection (#8828 by @​Perlence).

[0.84.4] - 2026-08-28

Added

• Added environment and programmatic overrides for OSC 8 hyperlinks, inline image protocols, and truecolor terminal capabilities (#8665).
• Added a TuiAltScreen copyOnSelect option plus helpers to detect and copy the active fullscreen text selection programmatically (#7720).

Changed

• Changed fullscreen scrollbars to render muted thin tracks with contrasting proportional two-cell-minimum thumbs, preserve underlying backgrounds without inheriting foreground styles, reserve an unstyled column in always mode, reveal hidden auto tracks on pointer entry, expand the same-colored thumb on hover, and support track-click jumping in addition to thumb dragging.
• Changed fullscreen transcript search to use a bordered, placeholder-based input with a muted result count, right-aligned clickable key-and-arrow buttons with configurable hover styling, and open-shortcut toggling.

Fixed

• Fixed main-screen rendering crashing when image-heavy output exceeded V8's string length limit (#8028).
• Fixed autocomplete ordering for nested results (#8669).
• Fixed fullscreen double-click word selection splitting paths and kebab-case tokens on / and - (#7746).

... (truncated)

Commits

• d981de1 Release v0.85.1
• cce6553 docs(tui): document Alt-wheel scrolling in unreleased changelogs
• ab9e6f8 feat(tui): accelerate Alt-modified wheel scrolling (#9166)
• 9841914 fix(tui): keep list selection unchanged on mouse hover
• dd7e816 Add [Unreleased] section for next cycle
• 107d79f Release v0.85.0
• 1148f79 docs: audit unreleased changelogs
• 2d41163 fix(tui): make fullscreen transcript search scale linearly
• 457ae8c feat(tui): alt mode scrollbar but prettier (#8801)
• 7968053 feat(tui): add clickable jump-to-end indicator to fullscreen transcript
• Additional commits viewable in compare view

Updates @github/copilot-sdk from 1.0.8 to 1.0.13

Release notes

Sourced from @​github/copilot-sdk's releases.

v1.0.13

Feature: cancellation for host-owned external tools

Host-owned external tool callbacks are now cancelled when their runtime request completes or their SDK session terminates. The cancellation primitive is idiomatic per SDK: .NET passes a request token to AIFunction, Node.js exposes ToolInvocation.signal, Go cancels ToolInvocation.TraceContext, Java cancels the returned CompletableFuture, Python cancels the handler task, and Rust drops the handler future. Go handlers that retain TraceContext for background work must derive a separate lifetime because the invocation context is cancelled when the request ends.

Feature: declare application identity with client info

Client options now accept optional client info (application name and version, integration name and version) across all six SDKs, exposed idiomatically per language (clientInfo in Node.js, client_info in Python and Rust, ClientInfo in Go and .NET, setClientInfo in Java). When set, the SDK forwards it on the server.connect handshake so the telemetry the runtime emits on the connection is attributed to the application and its Copilot integration instead of the runtime's own build. All fields are optional, and leaving client info unset keeps the runtime's default attribution. See Client info.

Feature: Node Agent Factories pagination and run notifications

The experimental Node.js Agent Factories convenience API now supports paginated run history. Existing session.factory.listRuns() calls still return the runs array, while calls with afterSeq, beforeSeq, or limit return the full page with cursor and truncation metadata.

Factory run and resume options now accept notifyOnComplete and logPhaseNames. The SDK forwards these options to the Copilot CLI for new and resumed runs.

Feature: selectable ask_user session behavior

Session create and cold resume now accept a language-specific askUserVariant option with legacy and elicitation values. SDK sessions retain the legacy question-and-answer tool by default. Select elicitation and provide an elicitation handler to expose the structured form-based ask_user tool.

Feature: rotating session-scoped GitHub credentials

All six SDKs can now acquire short-lived GitHub credentials through a session-scoped callback. The SDK registers the callback before session create or resume, maps initial and refresh requests to the owning session, and removes registrations on rollback, replacement, session close, and client close. Static per-session gitHubToken credentials remain supported and are mutually exclusive with the callback.

Token responses use the shared tagged token/cancelled shape and require expiresIn, expressed as the positive number of seconds remaining when the callback completes. See github/copilot-agent-runtime#16381 for the runtime credential-authority implementation.

Initial acquisition occurs during create or resume; cancellation, callback errors, and invalid credentials reject that operation instead of falling back to ambient authentication. Idle sessions refresh only before their next credential-consuming operation.

Feature: extensions can request sensitive environment variables

Copilot CLI extensions can now ask for named sensitive environment variables when they join a session. joinSession() accepts a requestedEnvironmentVariables option listing the variable names the extension needs. The CLI shows a permission prompt naming the extension and the exact variables requested. On approval, only those variables reach that extension and their values are written into the extension process's process.env before joinSession() resolves. On denial, joinSession() rejects, the extension does not load, and its tools never reach the model.

An approval is remembered against the exact set of names the user saw, so an extension that later asks for one more variable prompts again. Names that are unset, or that the CLI does not filter from extensions, are not prompted for. This is the client half of the feature; it requires a Copilot CLI that supports extension environment access, and older CLIs ignore the request and grant nothing.

import { joinSession } from "@github/copilot-sdk/extension";
const session = await joinSession({
requestedEnvironmentVariables: ["GITHUB_TOKEN"],
});
const token = process.env.GITHUB_TOKEN;

Feature: early session-event subscription (Rust)

The Rust SDK can now observe every event routed to a session, starting with that session's very first routed event. Client::prepare_session and Client::prepare_resume_session return an inert PreparedSession that owns the session's event channel, so a subscription can be installed before any protocol activity begins:

let prepared = client.prepare_session(
    SessionConfig::default().with_event_buffer_capacity(2048),
)?;
</tr></table> 

... (truncated)

Changelog

Sourced from @​github/copilot-sdk's changelog.

v1.0.13 (2026-09-04)

Feature: cancellation for host-owned external tools

Host-owned external tool callbacks are now cancelled when their runtime request completes or their SDK session terminates. The cancellation primitive is idiomatic per SDK: .NET passes a request token to AIFunction, Node.js exposes ToolInvocation.signal, Go cancels ToolInvocation.TraceContext, Java cancels the returned CompletableFuture, Python cancels the handler task, and Rust drops the handler future. Go handlers that retain TraceContext for background work must derive a separate lifetime because the invocation context is cancelled when the request ends.

Feature: declare application identity with client info

Client options now accept optional client info (application name and version, integration name and version) across all six SDKs, exposed idiomatically per language (clientInfo in Node.js, client_info in Python and Rust, ClientInfo in Go and .NET, setClientInfo in Java). When set, the SDK forwards it on the server.connect handshake so the telemetry the runtime emits on the connection is attributed to the application and its Copilot integration instead of the runtime's own build. All fields are optional, and leaving client info unset keeps the runtime's default attribution. See Client info.

Feature: Node Agent Factories pagination and run notifications

The experimental Node.js Agent Factories convenience API now supports paginated run history. Existing session.factory.listRuns() calls still return the runs array, while calls with afterSeq, beforeSeq, or limit return the full page with cursor and truncation metadata.

Factory run and resume options now accept notifyOnComplete and logPhaseNames. The SDK forwards these options to the Copilot CLI for new and resumed runs.

Feature: selectable ask_user session behavior

Session create and cold resume now accept a language-specific askUserVariant option with legacy and elicitation values. SDK sessions retain the legacy question-and-answer tool by default. Select elicitation and provide an elicitation handler to expose the structured form-based ask_user tool.

Feature: rotating session-scoped GitHub credentials

All six SDKs can now acquire short-lived GitHub credentials through a session-scoped callback. The SDK registers the callback before session create or resume, maps initial and refresh requests to the owning session, and removes registrations on rollback, replacement, session close, and client close. Static per-session gitHubToken credentials remain supported and are mutually exclusive with the callback.

Token responses use the shared tagged token/cancelled shape and require expiresIn, expressed as the positive number of seconds remaining when the callback completes. See github/copilot-agent-runtime#16381 for the runtime credential-authority implementation.

Initial acquisition occurs during create or resume; cancellation, callback errors, and invalid credentials reject that operation instead of falling back to ambient authentication. Idle sessions refresh only before their next credential-consuming operation.

Feature: extensions can request sensitive environment variables

Copilot CLI extensions can now ask for named sensitive environment variables when they join a session. joinSession() accepts a requestedEnvironmentVariables option listing the variable names the extension needs. The CLI shows a permission prompt naming the extension and the exact variables requested. On approval, only those variables reach that extension and their values are written into the extension process's process.env before joinSession() resolves. On denial, joinSession() rejects, the extension does not load, and its tools never reach the model.

An approval is remembered against the exact set of names the user saw, so an extension that later asks for one more variable prompts again. Names that are unset, or that the CLI does not filter from extensions, are not prompted for. This is the client half of the feature; it requires a Copilot CLI that supports extension environment access, and older CLIs ignore the request and grant nothing.

import { joinSession } from "@github/copilot-sdk/extension";
const session = await joinSession({
requestedEnvironmentVariables: ["GITHUB_TOKEN"],
});
const token = process.env.GITHUB_TOKEN;

Feature: early session-event subscription (Rust)

The Rust SDK can now observe every event routed to a session, starting with that session's very first routed event. Client::prepare_session and Client::prepare_resume_session return an inert PreparedSession that owns the session's event channel, so a subscription can be installed before any protocol activity begins:

let prepared = client.prepare_session(
    SessionConfig::default().with_event_buffer_capacity(2048),
</tr></table> 

... (truncated)

Commits

• f13e4a2 Harden cross-suite E2E process cleanup (#2539)
• 2f81cb0 [maven-release-plugin] prepare for next development iteration
• 06a855c [maven-release-plugin] prepare release java/v1.0.13-preview.6
• c5607b5 docs: update version references to 1.0.13-preview.6
• a65464e Add apply_patch override E2E coverage (#2542)
• 4de05fb Fix stale Java release preparation (#2543)
• e908560 Restore Rust bundled CLI artifact (#2535)
• fbf3486 Update Copilot CLI to 1.0.83 (#2534)
• 1638dca Java: Generate typed catalogue candidates (#2532)
• 570ae11 Use GitHub Releases for SDK runtime artifacts (#2505)
• Additional commits viewable in compare view

Updates @opencode-ai/plugin from 1.18.4 to 1.18.30

Updates bun-types from 1.3.14 to 1.4.2

Release notes

Sourced from bun-types's releases.

Bun v1.4.2

To install Bun v1.4.2

curl -fsSL https://bun.sh/install | bash
# or you can use npm
# npm install -g bun

Windows:

powershell -c "irm bun.sh/install.ps1|iex"

To upgrade to Bun v1.4.2:

bun upgrade

Read Bun v1.4.2's release notes on Bun's blog

Thanks to 3 contributors!

• @​dylan-conway
• @​jarred-sumner
• @​robobun

Bun v1.4.1

To install Bun v1.4.1

curl -fsSL https://bun.sh/install | bash
# or you can use npm
# npm install -g bun

Windows:

powershell -c "irm bun.sh/install.ps1|iex"

To upgrade to Bun v1.4.1:

bun upgrade

Read Bun v1.4.1's release notes on Bun's blog

Thanks to 7 contributors!

• @​alii
• @​dylan-conway

... (truncated)

Commits

• 9c3683f bundler: make --min-chunk-size effective on React apps and cheap; fix the sta...
• 7c18e0d bundler: modulepreload the chunks a split browser import() depends on (#41143)
• d2b71fb bun-types: type with { type } imports on TypeScript 7.1 (#41076)
• 70736fd webview: stop close() and browser death from raising uncatchable unhandled re...
• e8eaae9 bundler: bind property accesses on re-exported namespaces directly (#41009)
• 41906a4 bun-types: keep generic process.removeListener and off signatures visible wit...
• 1ab272b bun-types: defer Event and EventTarget to lib.dom when it is loaded (#40576)
• c6f335f Bun.serve: HTTP/2 support via http2: true (#40137)
• 1a50bfa bundler: with --splitting --target bun, require() of an ES module is a chunk ...
• 52baef6 WebSocket client: pause()/resume(), working bufferedAmount, and a ServerWebSo...
• Additional commits viewable in compare view

Updates react from 19.2.8 to 19.3.0

Release notes

Sourced from react's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

• <ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@​sebmarkbage, @​jackpope, @​gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)
• Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@​jackpope, @​sebmarkbage, @​eps1lon, @​Dhakshin2007, @​chirokas, @​teamleaderleo, @​fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

• browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
  • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

• Enable Trusted Types API integration (@​rickhanlonii #35816)
• Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@​acdlite #37290)
• Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@​hoxyq, @​eps1lon: #37104, #37203, #37491)

All Changes

React

• Fast Refresh Fixes
  • Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@​sophiebits #36965)
  • Fix Fast Refresh so edits to a memo() comparison function take effect (@​sophiebits #36964)
  • Fix Fast Refresh crash when an edit changes the kind of a component's type (@​sophiebits #36963)
  • Unify hot reload type resolution for Fast Refresh (@​sophiebits #36962)
  • Fix Fast Refresh to remount correctly when an edit changes the component kind (@​sophiebits #36950)
  • Double invoke effects in StrictMode after Fast Refresh (@​eps1lon #35962)
• Performance Track Fixes
  • Prevent crash when accessing $$typeof in Performance Tracks (@​eps1lon #35679)
  • Handle non-string function names in Performance Tracks (@​eps1lon #35659)
  • Use minus (-) instead of en dash for removed props in Performance Tracks (@​eps1lon #35649)
  • Handl...

    Description has been truncated

[codecov-commenter]

⚠️ Please install the to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!