Skip to content

build(deps): bump the minor-and-patch group in /apps/docs with 11 updates - #51

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/apps/docs/minor-and-patch-dedfef3cdb
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/apps/docs/minor-and-patch-dedfef3cdb

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group in /apps/docs with 11 updates:

Package From To
cnfast 0.1.0 0.2.0
fumadocs-core 16.14.5 16.15.15
fumadocs-mdx 15.3.0 15.4.5
next 16.3.3 16.3.6
react 19.2.8 19.3.0
@types/react 19.2.18 19.3.0
react-dom 19.2.8 19.3.0
@types/react-dom 19.2.4 19.3.0
@types/node 26.2.0 26.6.3
oxlint 1.80.0 1.85.0
postcss 8.5.26 8.5.28

Updates cnfast from 0.1.0 to 0.2.0

Release notes

Sourced from cnfast's releases.

cnfast@0.2.0

Minor Changes

  • 8e85f9a: This release adds new public APIs, a new merge engine, more migration support, and a larger verification suite.

    Public API

    • Add cva as a compatible replacement for class-variance-authority 0.7.1. It supports base classes, variants, default variants, compound variants, boolean and numeric variant keys, and the class and className props.
    • Export the CVA types ClassProp, ClassPropKey, CvaConfig, CvaProps, CxOptions, CxReturn, OmitUndefined, StringToBoolean, VariantProps, and VariantSchema.
    • Add cx as an alias for clsx. This supports code that imports cx from class-variance-authority.
    • Add createCallSiteCn. It creates a separate bounded memo for one call site. It accepts the default cn function or a custom function from createCn. It memoizes repeated primitive argument lists. It does not memoize object, array, or function inputs because these values can change without a new identity.

    CVA execution

    • Compile each CVA configuration on its first call. This removes repeated configuration work from later calls.
    • Add a bounded combination table for configurations without compound variants. The table stores stable class results for known variant combinations.
    • Add fast and wide memo lanes for calls that cannot use the combination table. The memo stores primitive prop combinations and keeps mutable class values on the uncached path.
    • Preserve one property-key coercion per variant value. This matches class-variance-authority when an object has a custom toString method.
    • Preserve byte-identical output for the supported CVA input set. CVA configurations must remain unchanged after the first call. Props must be plain objects. Inherited or non-enumerable props can produce different results.

    Merge performance

    • Replace the class merge path with a single-pass token scanner and a right-to-left conflict resolver. The resolver avoids temporary token strings for known classes.
    • Add bounded token, class, argument, and result caches. The caches use admission checks, generation rotation, and adaptive capacity limits.
    • Add specialized paths for calls with one, two, and three arguments. Add a separate path for calls with more arguments.
    • Add argument-sequence lookup for repeated calls. Add successor prediction for common render sequences. Keep mutable values on the full resolution path.
    • Add JavaScriptCore-specific paths for common calls with falsy values. Keep the V8 paths small enough for inlining.
    • Keep custom configurations from createCn on the same optimized execution paths as the default configuration.

    Tailwind compatibility

    • Align the default conflict rules with the pinned tailwind-merge development configuration used by the parity suite.
    • Update logical spacing, inset, border, and scroll conflict behavior.
    • Update max-h-none, shadow-inner, and related shadow conflict behavior.
    • Preserve support for Tailwind CSS 4.0, 4.1, 4.1.5, and 4.2 syntax covered by the test suite.

    Migration command

    • Extend cnfast migrate to replace imports from class-variance-authority and class-variance-authority/types.
    • Support value imports, type-only imports, re-exports, dynamic imports, and CommonJS require calls for the new CVA migration sources.
    • Preserve local aliases and quote style when the command rewrites an import.

    API change

    • Remove tagged-template support from cn and createCn. Use the variadic cn(...) call form.

    Verification tools

    • Expand the stateful parity checks for cn, the merge cache, call-site memoization, and CVA memoization.
    • Add seeded differential tests against tailwind-merge and class-variance-authority.

... (truncated)

Changelog

Sourced from cnfast's changelog.

0.2.0

Minor Changes

  • 8e85f9a: This release adds new public APIs, a new merge engine, more migration support, and a larger verification suite.

    Public API

    • Add cva as a compatible replacement for class-variance-authority 0.7.1. It supports base classes, variants, default variants, compound variants, boolean and numeric variant keys, and the class and className props.
    • Export the CVA types ClassProp, ClassPropKey, CvaConfig, CvaProps, CxOptions, CxReturn, OmitUndefined, StringToBoolean, VariantProps, and VariantSchema.
    • Add cx as an alias for clsx. This supports code that imports cx from class-variance-authority.
    • Add createCallSiteCn. It creates a separate bounded memo for one call site. It accepts the default cn function or a custom function from createCn. It memoizes repeated primitive argument lists. It does not memoize object, array, or function inputs because these values can change without a new identity.

    CVA execution

    • Compile each CVA configuration on its first call. This removes repeated configuration work from later calls.
    • Add a bounded combination table for configurations without compound variants. The table stores stable class results for known variant combinations.
    • Add fast and wide memo lanes for calls that cannot use the combination table. The memo stores primitive prop combinations and keeps mutable class values on the uncached path.
    • Preserve one property-key coercion per variant value. This matches class-variance-authority when an object has a custom toString method.
    • Preserve byte-identical output for the supported CVA input set. CVA configurations must remain unchanged after the first call. Props must be plain objects. Inherited or non-enumerable props can produce different results.

    Merge performance

    • Replace the class merge path with a single-pass token scanner and a right-to-left conflict resolver. The resolver avoids temporary token strings for known classes.
    • Add bounded token, class, argument, and result caches. The caches use admission checks, generation rotation, and adaptive capacity limits.
    • Add specialized paths for calls with one, two, and three arguments. Add a separate path for calls with more arguments.
    • Add argument-sequence lookup for repeated calls. Add successor prediction for common render sequences. Keep mutable values on the full resolution path.
    • Add JavaScriptCore-specific paths for common calls with falsy values. Keep the V8 paths small enough for inlining.
    • Keep custom configurations from createCn on the same optimized execution paths as the default configuration.

    Tailwind compatibility

    • Align the default conflict rules with the pinned tailwind-merge development configuration used by the parity suite.
    • Update logical spacing, inset, border, and scroll conflict behavior.
    • Update max-h-none, shadow-inner, and related shadow conflict behavior.
    • Preserve support for Tailwind CSS 4.0, 4.1, 4.1.5, and 4.2 syntax covered by the test suite.

    Migration command

    • Extend cnfast migrate to replace imports from class-variance-authority and class-variance-authority/types.
    • Support value imports, type-only imports, re-exports, dynamic imports, and CommonJS require calls for the new CVA migration sources.
    • Preserve local aliases and quote style when the command rewrites an import.

    API change

    • Remove tagged-template support from cn and createCn. Use the variadic cn(...) call form.

    Verification tools

    • Expand the stateful parity checks for cn, the merge cache, call-site memoization, and CVA memoization.
    • Add seeded differential tests against tailwind-merge and class-variance-authority.
    • Expand the focused benchmarks for cached and uncached calls, input shapes, Tailwind syntax, cache boundaries, conditional renders, result reuse, CVA variants, call-site replay, page replay, server rendering, and live data grids.
    • Add paired A/B comparison. Expand the bundle-size checks, V8 deoptimization checks, and repository corpora.
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for cnfast since your current version.


Updates fumadocs-core from 16.14.5 to 16.15.15

Release notes

Sourced from fumadocs-core's releases.

fumadocs@16.15.15

  • @​fumadocs/base-ui@​16.15.15
  • fumadocs-core@16.15.15
  • fumadocs-ui@16.15.15

Fix infinite recursion in the MDX stringifier with mdast-util-to-markdown@2.1.3

The stringifier wraps every toMarkdown handler but dropped their attention and peek properties, which mdast-util-to-markdown@2.1.3 relies on to serialize bold and italic text. Pages containing them overflowed the stack during build.

fumadocs@16.15.14

  • @​fumadocs/base-ui@​16.15.14
  • fumadocs-core@16.15.14
  • fumadocs-ui@16.15.14

Announce copy confirmation to screen readers

Copy buttons are polite live regions whose label switches to "Copied" after a successful copy, so screen readers announce it. The code block's copy button no longer reports success when the clipboard write fails.

Expose the search dialog as a combobox

The search input is now a combobox that controls a listbox of option results and reports the highlighted result through aria-activedescendant, so screen readers announce results as you move through them. Hidden result buttons are removed from the tab order, and the empty state is announced as a status message.

Remove hidden sidebar controls from the tab order

The collapsed sidebar and its floating pill are now inert while hidden, and toggling the sidebar moves focus to the trigger that becomes visible.

Add block TOC style

A TOC style without the track line: headings are indented by depth, and a block slides behind the active headings.

<DocsPage tableOfContent={{ style: 'block' }} />

Wrap page footer descriptions instead of truncating

The previous/next page footer cards now wrap long descriptions instead of cutting them off with an ellipsis.

fumadocs@16.15.13

  • @​fumadocs/base-ui@​16.15.13
  • fumadocs-core@16.15.13
  • fumadocs-ui@16.15.13

Keep the collapsed sidebar's controls off the page title

With the sidebar collapsed, the docs layout floats the reopen and search buttons in a fixed pill at the top-left of the page and starts the article at the same row. Wherever the article is not centered with room to spare, every viewport below about 1280px, the pill covered the page title. The article now leaves room for the pill while the sidebar is collapsed.

AI page actions name the page by the URL the reader is on

... (truncated)

Commits

Updates fumadocs-mdx from 15.3.0 to 15.4.5

Release notes

Sourced from fumadocs-mdx's releases.

fumadocs-mdx@15.4.5

Stop recrawling node_modules on every Vite config resolution

The config hook of fumadocs-mdx/vite walked the dependency tree below Fumadocs packages once per chain reaching a package, so a docs app with a few Fumadocs packages read ~10k package.json files (~0.9s) each time Vite resolved its config, which it does once per build environment.

The crawl now visits each package once, breadth-first, and still records the shortest chain to every CommonJS dependency (fumadocs-ui > @base-ui/react > use-sync-external-store/shim and friends). The result is memoized for the process until the package manager's install state changes, so a build with several environments crawls once.

fumadocs-mdx@15.4.4

Sort glob results for deterministic codegen

fumadocs-mdx's Node codegen now sorts glob-matched files before generating collections, so the output (and anything derived from getPages()) is stable across builds of unchanged content. The Vite codegen path was checked separately: Vite's own import.meta.glob already sorts matched files internally, so it did not need the same fix.

fumadocs-mdx@15.4.3

Fix experimentalBuildCache bloating frontmatter-only imports

With a warm build cache, ?only=frontmatter imports were served the fully compiled page from cache instead of the frontmatter module, so every page was bundled two more times. The cache now only applies to full compilations.

fumadocs-mdx@15.4.2

Fix the _mdast export with removePosition

// fumadocs-mdx collection config
postprocess: {
  includeMDAST: { removePosition: true },
},

This exported _mdast with no value, and getMDAST() then reported that includeMDAST was disabled. removePosition strips positions in place and returns nothing, so JSON.stringify received undefined.

The tree is now cloned, stripped, and serialized from the clone.

Fix SOURCEMAP_BROKEN warnings on Vite

With build.sourcemap enabled, Vite warned once per content and meta file because the loaders returned no source map. They now return an empty map when nothing is generated.

Source maps for MDX stay opt-in, pass SourceMapGenerator from source-map to MDX options:

import { SourceMapGenerator } from 'source-map';
export default defineConfig({
mdxOptions: {
SourceMapGenerator,
},
});

fumadocs-mdx@15.4.1

Mark packages side-effect free

... (truncated)

Commits
  • cb6f3d6 Version Packages (#3600)
  • 6676327 perf(mdx): reduce duplicated file reads
  • f1186d9 fix(openapi): normalize fetch methods
  • a8438dc Version Packages (#3595)
  • 539bada feat(ui): support block toc variant
  • 23bef0b docs: correct stale info
  • e988e54 fix(ui): announce copy confirmation to screen readers
  • 583e2ca fix(ui): keep search dialog active state inside the list
  • 11bc9dc fix(ui): expose the search dialog as a combobox
  • d7fa38c fix(ui): remove hidden sidebar controls from the tab order
  • Additional commits viewable in compare view

Updates next from 16.3.3 to 16.3.6

Release notes

Sourced from next's releases.

v16.3.6

This release contains a security fix for GHSA-vcvr-r3jv-pc5j: Remote Code Execution in next/og ImageResponse

v16.3.5

The following bug fixes have been backported. It does not include all pending features/changes on canary.

  • next/image: Skip 0-byte entries when initializing disk LRU cache (#98185)
  • next/image: Reject empty images when reading/writing to the disk cache (#98186)
  • Emit whole-app server NFTs when output: 'standalone' is used with an adapter (#98167)
  • Add CSP nonce to script tags of loading and template files (#98403)
  • Fix use cache prerender signal retention (#98448)

v16.3.4

Follow-up release to v16.3.3 re-enabling AVIF Image Optimization (#97949).

The following bug fixes have been backported. It does not include all pending features/changes on canary.

  • testmode: Fix infinite recursion in testmode passthrough fetch (#97691)
  • Fix build error when aliasing typescript to @​typescript/typescript6 (#97997)
  • Fix unset crossOrigin in Turbopack manifests (#97930)

Credits

Huge thanks to @​eps1lon, @​mischnic, and @​timneutkens for helping!

Commits
  • a758ffc v16.3.6
  • 868fad3 [active-lts] Harden next/og SVG serialization
  • 8c81cbb [lts-active] test: remove unsupported deployment ID builder cases (#98821)
  • ca2c75e v16.3.5
  • 14fb290 [backport] Fix use cache prerender signal retention (#98448)
  • 2b1f28d [16.3.x] Add CSP nonce to script tags of loading and template files (#98403)
  • 4b56cee [16.3.x] Backport docs fixes (#98317)
  • 5568a02 [backport] docs: local development: Rewrite docker section, add Windows Dev D...
  • 93249ab [16.3.X] Emit whole-app server NFTs when output: 'standalone' is used with ...
  • 6549fd7 [16.3.x] next/image: reject empty image on read/write to disk cache (#98186)
  • Additional commits viewable in compare view

Updates react from 19.2.8 to 19.3.0

Release notes

Sourced from react's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

New React DOM Features

  • browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
    • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

All Changes

React

... (truncated)

Changelog

Sourced from react's changelog.

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

  • browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
    • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

All Changes

React

... (truncated)

Commits

Updates @types/react from 19.2.18 to 19.3.0

Commits

Bumps the minor-and-patch group in /apps/docs with 11 updates:

| Package | From | To |
| --- | --- | --- |
| [cnfast](https://github.com/aidenybai/cnfast/tree/HEAD/packages/cnfast) | `0.1.0` | `0.2.0` |
| [fumadocs-core](https://github.com/fuma-nama/fumadocs) | `16.14.5` | `16.15.15` |
| [fumadocs-mdx](https://github.com/fuma-nama/fumadocs) | `15.3.0` | `15.4.5` |
| [next](https://github.com/vercel/next.js) | `16.3.3` | `16.3.6` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.0` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.4` | `19.3.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.2.0` | `26.6.3` |
| [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.80.0` | `1.85.0` |
| [postcss](https://github.com/postcss/postcss) | `8.5.26` | `8.5.28` |


Updates `cnfast` from 0.1.0 to 0.2.0
- [Release notes](https://github.com/aidenybai/cnfast/releases)
- [Changelog](https://github.com/aidenybai/cnfast/blob/main/packages/cnfast/CHANGELOG.md)
- [Commits](https://github.com/aidenybai/cnfast/commits/cnfast@0.2.0/packages/cnfast)

Updates `fumadocs-core` from 16.14.5 to 16.15.15
- [Release notes](https://github.com/fuma-nama/fumadocs/releases)
- [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs@16.14.5...fumadocs@16.15.15)

Updates `fumadocs-mdx` from 15.3.0 to 15.4.5
- [Release notes](https://github.com/fuma-nama/fumadocs/releases)
- [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs-mdx@15.3.0...fumadocs-mdx@15.4.5)

Updates `next` from 16.3.3 to 16.3.6
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.3.3...v16.3.6)

Updates `react` from 19.2.8 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react)

Updates `@types/react` from 19.2.18 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-dom` from 19.2.8 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom)

Updates `@types/react-dom` from 19.2.4 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `@types/node` from 26.2.0 to 26.6.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `oxlint` from 1.80.0 to 1.85.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.85.0/npm/oxlint)

Updates `postcss` from 8.5.26 to 8.5.28
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.26...8.5.28)

---
updated-dependencies:
- dependency-name: cnfast
  dependency-version: 0.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: fumadocs-core
  dependency-version: 16.15.15
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: fumadocs-mdx
  dependency-version: 15.4.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: next
  dependency-version: 16.3.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: react
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/react"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: react-dom
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/react-dom"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/node"
  dependency-version: 26.6.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: oxlint
  dependency-version: 1.85.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: postcss
  dependency-version: 8.5.28
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants