[renovate]

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@aws-sdk/client-s3 (source)	3.1146.0 → 3.1152.0
@blocknote/code-block (source)	0.54.0 → 0.56.0
@blocknote/core (source)	0.54.0 → 0.56.0
@blocknote/diagram-block (source)	0.54.0 → 0.56.0
@blocknote/mantine (source)	0.54.0 → 0.56.0
@blocknote/math-block (source)	0.54.0 → 0.56.0
@blocknote/react (source)	0.54.0 → 0.56.0
@blocknote/server-util (source)	0.54.0 → 0.56.0
@blocknote/xl-ai (source)	0.54.0 → 0.56.0
@blocknote/xl-docx-exporter (source)	0.54.0 → 0.56.0
@blocknote/xl-multi-column (source)	0.54.0 → 0.56.0
@blocknote/xl-odt-exporter (source)	0.54.0 → 0.56.0
@blocknote/xl-pdf-exporter (source)	0.54.0 → 0.56.0
@fontsource-variable/material-symbols-outlined (source)	5.3.8 → 5.3.9
@​gouvfr-lasuite/ui-components	1.2.0 → 1.3.0
@lottiefiles/dotlottie-react (source)	^0.19.6 → ^0.20.0
@mantine/core (source)	9.7.0 → 9.7.3
@mantine/hooks (source)	9.7.0 → 9.7.3
@next/eslint-plugin-next (source)	16.3.8 → 16.4.2
@playwright/test (source)	1.63.0 → 1.64.1
@react-pdf/math (source)	2.0.1 → 6.0.0
@sentry/node (source)	10.75.0 → 11.8.0
@sentry/profiling-node (source)	10.75.0 → 11.8.0
@tanstack/eslint-plugin-query (source)	5.104.1 → 5.104.4
@tanstack/react-query (source)	5.104.1 → 5.104.4
@tanstack/react-query-devtools (source)	5.104.1 → 5.104.4
@testing-library/user-event	14.6.7 → 14.6.8
@tiptap/core (source)	3.31.4 → 3.32.0
@tiptap/extension-find-and-replace (source)	3.31.4 → 3.32.0
@tiptap/extensions (source)	3.31.4 → 3.32.0
@tiptap/pm (source)	3.31.4 → 3.32.0
@types/lodash (source)	4.17.25 → 4.17.26
@types/node (source)	24.13.6 → 24.19.2
@types/ws (source)	8.18.1 → 8.18.2
@typescript-eslint/eslint-plugin (source)	8.71.0 → 8.71.2
@typescript-eslint/parser (source)	8.71.0 → 8.71.2
@typescript-eslint/utils (source)	8.71.0 → 8.71.2
dotenv	18.0.5 → 18.0.8
eslint (source)	10.12.0 → 10.13.0
eslint (source)	10.11.0 → 10.13.0
eslint-config-next (source)	16.3.8 → 16.4.2
eslint-plugin-jest	29.16.6 → 29.17.0
eslint-plugin-prettier	5.5.6 → 5.5.7
express (source)	5.2.1 → 5.3.0
i18next (source)	26.4.2 → 26.5.2
idb	8.0.3 → 8.0.4
jsdom	30.1.2 → 30.1.3
pixelmatch	7.2.0 → 8.0.0
playwright (source)	1.63.0 → 1.64.1
postcss (source)	8.5.29 → 8.5.31
posthog-js (source)	1.436.1 → 1.438.12
prettier (source)	3.9.9 → 3.9.10
react (source)	19.3.0 → 19.3.1
react-aria-components	1.21.1 → 1.22.1
react-dom (source)	19.3.0 → 19.3.1
react-dropzone	20.1.2 → 20.1.4
react-i18next	17.0.15 → 17.1.0
styled-components (source)	6.5.3 → 6.6.0
ts-jest (source)	29.4.14 → 29.4.15
tsc-alias (source)	1.9.7 → 1.9.8
typescript-eslint (source)	8.71.0 → 8.71.2
typescript-eslint (source)	8.70.0 → 8.71.2
uuid	14.0.2 → 14.0.3
vitest (source)	5.0.3 → 5.0.5
vitest (source)	5.0.1 → 5.0.5
webpack	5.111.1 → 5.112.0
yjs (source)	13.6.32 → 13.6.33
zod (source)	4.6.5 → 4.6.7

---

Release Notes

aws/aws-sdk-js-v3 (@​aws-sdk/client-s3)

v3.1152.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-s3

v3.1151.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-s3

v3.1150.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-s3

v3.1149.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-s3

v3.1148.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-s3

v3.1147.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-s3

TypeCellOS/BlockNote (@​blocknote/code-block)

v0.56.0

Compare Source

🚀 Features

• Down arrow in block without content at end of doc creates paragraph (BLO-1364) (#​3113)
• Update backspace handling in nested blocks (BLO-1326) (#​3124)
• core: ⚠️ Rewrite side menu hover, add hoverMargin and dropMargin options (#​3179)
• ⚠️ Rebuild version history and customize snapshot actions (#​3090)
• Mod+A shortcut changes (BLO-1314) (#​2995)

🔥 Performance

• core: Reduce Inter font swap layout shift (#​3130)

🩹 Fixes

• xl-email-exporter: Escape text instead of injecting it as HTML (#​3100)
• core: Remove unused source preview anchor (#​3099)
• core: Use the default language for a code block typed without one (#​3024)
• Inline code clears comments (BLO-1207) (BLO-1363) (#​2832)
• math-block: Open math previews on the first click (BLO-1372) (#​3129)
• Markdown autolink round trips (BLO-1369) (#​3115)
• math: Update selected inline content styling (#​2983)
• insertInlineContent adding content after cursor (BLO-1356) (#​3112)
• docx: Align fresh-install snapshots with docx 9.8 (#​3139)
• core: Don't throw when the placeholder style is already removed (#​3145)
• Update DOCX snapshots for fresh dependency installs (#​3170)
• core: Keep the formatting toolbar hidden when focus returns to editor UI (#​3187)
• core: Don't reposition the suggestion menu on its own scroll (#​3188)
• react: Place the suggestion menu below unless cramped, keep its side and width while filtering (#​3190)
• core: Don't mark block changes from before the view exists (#​3193)
• core: Dropping a block into a toggle with a real drag (#​3195)
• react: Show the suggestion menu above its trigger when there is room for fewer than five items below (#​3198)
• WebKit scrolling on block drop (BLO-1353) (#​3122)

⚠️ Breaking Changes

• core: ⚠️ Rewrite side menu hover, add hoverMargin and dropMargin options (#​3179)
• ⚠️ Rebuild version history and customize snapshot actions (#​3090)

❤️ Thank You

• Matthew Lipski
• Yousef yousefdardiry@gmail.com
• Nick Perez nick@blocknotejs.org
• Adarshsm adarshmudugal@gmail.com
• Rovshan Muradov

v0.55.0

Compare Source

This release, we have promoted the mobile formatting toolbar from experimental to supported. We recommend you to check our Mobile compatibility getting started guide for more information.

We now have a formattting toolbar that tries to show above the virtual keyboard of your mobile device (ios & android), allowing you to access formating options like changing the block type, bold, italics and more.

🚀 Features

• Mobile formatting toolbar (BLO-1292) (#​2939)
• Enter saves comment in comment editor (#​3103)

🩹 Fixes

• core: Link lookups at the edges of a link (#​3058)
• a11y: Commit popover forms through submit, not a key handler (#​3030)
• core: Enter on Android and iOS, toolbar and side menu fixes on phones (#​3031)

❤️ Thank You

• Matthew Lipski (@​matthewlipski)
• Yousef yousefdardiry@gmail.com
• Nick The Sick (@​nperez0111)

v0.54.2

Compare Source

🩹 Fixes

• xl-typst-compiler: Package wasm without Rust build artifacts (220544ffd)

❤️ Thank You

• Nick The Sick (@​nperez0111)

v0.54.1

Compare Source

🚀 Features

• Typst-powered accessible PDF export (PDF/UA-1) (#​2992)
• pdf: base PDF export on self-hosted Typst compiler (#​3020)

🔥 Performance

• core: Resolve block changes from changed range only (#​2981)

🩹 Fixes

• xl-docx-exporter: Use distinct bullet symbols per nesting level (#​2977)
• core: Only attach table handles to actual table blocks (#​2972)
• xl-docx-exporter: Give each list its own numbering instance (#​2976)
• exporters: Editor-parity rendering fixes + shared-document ground truth tests (#​3021)
• core: Stop schema.extend() mutating the shared default specs (#​3039)
• mantine: Restore compact AI menu items (#​3027)
• Ignore only Dark Reader's writes in node views (#​3062)

❤️ Thank You

• Yousef yousefdardiry@gmail.com
• Adarshsm adarshmudugal@gmail.com
• Nick Perez nick@blocknotejs.org

fontsource/font-files (@​fontsource-variable/material-symbols-outlined)

v5.3.9

Compare Source

LottieFiles/dotlottie-web (@​lottiefiles/dotlottie-react)

v0.20.0

Compare Source

Minor Changes

• e46482e: feat: add DotLottieWorker.setWorkerUrl() for CSP-compatible worker loading

  Ship dist/dotlottie.worker.js as a standalone file and add setWorkerUrl(url) so consumers can self-host the worker script, avoiding worker-src: blob: in Content-Security-Policy.

  Relative src paths are now resolved against the page before reaching the worker.

Patch Changes

• 629eb6c: Avoid loading the initial src twice when the React player is mounted. Both the regular and worker players now rely on their constructor to load the first animation, while later src changes still call load.
• Updated dependencies [e46482e]
  • @​lottiefiles/dotlottie-web@0.81.0

mantinedev/mantine (@​mantine/core)

v9.7.3

Compare Source

• [@mantine/schedule] Add slotLabelInterval prop to DayView and WeekView to display time labels more often than once per hour
• [@mantine/schedule] Add option to customize business hours minutes and change colors
• [@mantine/schedule] MobileMonthView: Add withWeekendDays prop
• [@mantine/charts] Fix right Y axis children rendering (#​9295)
• [@mantine/hooks] use-scroller: Fix next click being ignored after a drag ends by leaving the container (#​9294)
• [@mantine/hooks] use-event-listener: Fix listener being removed after re-render when options object is passed inline (#​9292)
• [@mantine/core] ScrollArea: Add --scrollarea-offset-size CSS variable (#​9290)
• [@mantine/core] Cascader: Fix ArrowLeft and ArrowRight not being mirrored in RTL (#​9286)
• [@mantine/hooks] use-throttled-callback: Handle reentrant calls (#​9284)
• [@mantine/core] Radio, Chip: Fix readOnly prop not preventing value changes (#​9282)
• [@mantine/core] Select: Fix onChange option argument type not including null (#​9281)
• [@mantine/core] Switch: Fix readOnly prop not preventing toggle (#​9280)
• [@mantine/core] Fix searchable inputs ignoring typing when rendered in another window or iframe (#​9278)
• [@mantine/hooks] use-focus-trap: Fix focus not being fully trapped when used with macOS Full Keyboard Access off

v9.7.2

Compare Source

• [@mantine/core] PinInput: Fix readOnly not preventing value changes on Delete, Backspace and paste (#​9258)
• [@mantine/core] Divider: Add aria-orientation (#​9259)
• [@mantine/core] Tooltip: Fix disabled tooltip setting aria-describedby on its target (#​9261)
• [@mantine/core] Transition: Fix frames and callbacks running after unmount during the first frame (#​9263)
• [@mantine/hooks] use-scroll-into-view: Reset start time on cancel (#​9265)
• [@mantine/core] Fix Backspace removing the last value when readOnly is set in MultiSelect and TreeSelect components (#​9267)
• [@mantine/schedule] ResourcesDayView: Fix sticky resource labels covering the time labels row (#​9268)
• [@mantine/hooks] use-debounced-callback: Avoid repeating completed leading calls (#​9269)
• [@mantine/schedule] MobileMonthView: Fix multi-day event time display on start, middle and end days (#​9272)
• [@mantine/form] Add UseContextForm type export (#​9275)
• [@mantine/form] Fix potential global prototype position
• [@mantine/tiptap] Add option to handle images pasted with other rich text elements in the image extension (#​9270)

v9.7.1

Compare Source

• [@mantine/schedule] Fix startScrollTime scroll position (#​9255)
• [@mantine/core] RollingNumber: Fix sub-pixel digit misalignment at fractional zoom levels (#​9251)
• [@mantine/core] Tree: Add aria-expanded to tree items with children (#​9247)
• [@mantine/core] SegmentedControl: Do not call Math.random during render (#​9245)
• [@mantine/core] Popover: Add capture prop to control events capturing phase (#​9243)
• [@mantine/form] Fix clearing state of unrelated fields (#​9242)
• [@mantine/core] AngleSlider: Set aria-disabled on thumb when disabled (#​9238)
• [@mantine/core] Combobox: Set aria-disabled on disabled Combobox.Option (#​9236)
• [@mantine/form] Fix reorderListItem moving errors of items whose index shares a prefix with the reordered index (#​9235)
• [@mantine/schedule] MonthView: Fix quadratic row assignment for weeks with many events (#​9232)
• [@mantine/hooks] use-pagination: Fix single page being replaced with dots on the right side (#​9229)
• [@mantine/core] ScrollArea: Fix wheel listener on document blocking compositor scrolling for the whole page (#​9225)
• [@mantine/dates] DateTimePicker: Fix time not being limited by minDate and maxDate (#​9221)
• [@mantine/core] Select, MultiSelect, Autocomplete, TagsInput: Fix listbox aria-labelledby referencing a missing label element (#​9219) (#​9220)
• [@mantine/hooks] use-debounced-state: Fix leading edge firing only once (#​9214)

vercel/next.js (@​next/eslint-plugin-next)

v16.4.2

Compare Source

What's Changed

• [lts-active] turbo-tasks snapshot consistency fixes (#​99644, #​99732, #​99649) by @​lukesandberg in #​100002
• [lts-active] Turbopack: backport Pages Router dev module graph chaining (#​98823, #​99910, #​100091) by @​sokra in #​100008
• [lts-active] fix(next-code-frame): snap visible window to char boundaries by @​lukesandberg in #​100212
• [lts-active] [turbopack] Fix two GC paths that leave half-torn-down dependency edges by @​lukesandberg in #​100209
• [lts-active] Turbopack: Ignore realpath errors during module resolution, matching node's behavior by @​lukesandberg in #​100217
• [lts-active] Backport docs fixes since v16.4.0 by @​icyJoseph in #​100246
• [lts-active] Fix Turbopack lazy dynamic-import chunk-list collisions by @​lukesandberg in #​100211
• [lts-active] Backport additional documentation fixes since v16.4.0 by @​aurorascharff in #​100262

Full Changelog: vercel/next.js@v16.4.1...v16.4.2

v16.4.1

Compare Source

This release contains security fixes for the following advisories:

Critical:

• Unauthenticated Remote Code Execution in use cache functions returning typed arrays
• Unauthenticated Remote Code Execution in Image Optimization API when SVG files are used

High:

• Denial of Service in App Router using Server Actions

v16.4.0

Compare Source

Check out the 16.4 announcement post to get an overview of the changes.

Core Changes

• Show compiler plugin warning in more situations: #​75682
• fix(scripts): correct typo in rm.mjs error message: #​87015
• docs: improve clarity and punctuation in README: #​86096
• Fix debug build paths Pages Router support entries: #​93529
• bundle-analyzer: record historical snapshots on each analyze run: #​93520
• fix: detect proxy.ts correctly with compound pageExtensions: #​93246
• feat(turbopack): support false values for resolveAlias config: #​93331

Misc Changes

• docs: correction to dynamicParams migration: #​96624
• docs: proxy event argument: #​96435
• docs: remove experimental note from runtime prefetching: #​96615
• Preserve per-segment prefetching after dynamic navigation: #​96583
• Rename static generation stream option to waitForAllReady: #​96564
• Remove obsolete static generation plumbing: #​96563
• [turbopack] Drop dead writes to exports: #​96381
• [turbopack] Ignore writes to exports after a module.exports = {} writes: #​96380
• [turbopack] Add test for sideEffects with optimizePackageImports: #​96549
• [turbopack] Strip leading BOM before parsing CSS: #​96678
• Upgrade React from cbb046ab-20260731 to 7dfc7ccd-20260803: #​96550
• docs: use relative doc links in instant-navigation error pages: #​96672
• Turbopack: terminate failed plugin worker threads: #​96592
• Fix HTML-limited bot matching in prerender bypass rules: #​96584
• [ci] Fix create_release_branch for new repo permissions: #​96641
• test: skip action module instance deploy test: #​96629
• docs: quote the dynamicParams build error in a blockquote: #​96633
• [react-sync] Open pull requests as the bot that authors the commits: #​96682
• [Bench] Fixes for pure Fizz bench: #​96771
• Derive foreground cache revalidation from the consumer: #​96731
• Fix race when navigating Back before hydration: #​96252
• docs: present each Skill as steps in the AI agents guide: #​96751
• Reuse completed cache entries for the rest of a request: #​96727
• Upgrade React from 7dfc7ccd-20260803 to 11eddecd-20260805: #​96735
• Remove WorkStore execution mode: #​96674
• Remove cache revalidation execution mode reads: #​96670
• Separate App Route render and prerender pipelines: #​96662
• Remove App Page execution mode reads: #​96660
• test: fix missing await in css-chunking test: #​96725
• docs (Skills): stop assuming app/ at the root and port 3000: [#​96696

[!IMPORTANT]
✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 08:00 PM and 11:59 PM, only on Sunday (* 20-23 * * 0)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.