build(deps-dev): bump the development-dependencies group across 1 directory with 50 updates

[dependabot]

Bumps the development-dependencies group with 50 updates in the / directory:

Package	From	To
@ai-sdk/gateway	3.0.132	4.0.86
@ai-sdk/provider	3.0.8	4.0.17
@ai-sdk/provider-utils	4.0.23	5.0.44
@ai-sdk/react	3.0.208	4.0.109
@axe-core/playwright	4.12.1	4.13.0
@base-ui/react	1.5.0	1.8.0
@biomejs/biome	2.4.13	2.5.14
@opentelemetry/api	1.9.0	1.9.1
@pierre/trees	1.0.0-beta.3	1.0.0-beta.6
@playwright/test	1.61.1	1.63.0
@radix-ui/react-dialog	1.1.15	1.1.23
@radix-ui/react-dropdown-menu	2.1.16	2.1.24
@radix-ui/react-toggle-group	1.1.15	1.1.19
@radix-ui/react-tooltip	1.2.8	1.2.16
@storybook/addon-a11y	10.5.0	10.6.0
@storybook/addon-vitest	10.5.0	10.6.0
@storybook/react-vite	10.5.0	10.6.0
@tailwindcss/postcss	4.3.1	4.3.3
@tanstack/react-table	8.21.3	9.2.4
@tanstack/react-virtual	3.14.5	3.14.13
@testing-library/jest-dom	6.9.1	7.0.1
@testing-library/react	16.3.2	16.3.3
@testing-library/user-event	14.6.1	14.6.7
@types/node	25.9.3	26.6.1
@vercel/oidc	3.2.0	3.8.8
@vitejs/plugin-react	6.0.2	6.1.1
@xyflow/react	12.11.2	12.11.6
axe-core	4.12.1	4.13.0
electron	41.7.2	44.4.2
jsdom	29.1.1	30.1.0
lucide-react	1.18.0	1.47.0
material-icon-theme	5.36.1	5.38.1
motion	12.40.0	13.4.0
nanoid	5.1.11	6.0.1
react	19.2.5	19.3.0
@types/react	19.2.17	19.3.0
react-dom	19.2.5	19.3.0
@types/react-dom	19.2.3	19.3.0
react-resizable-panels	4.12.1	4.12.4
shadcn	4.11.0	4.21.0
shiki	4.2.0	4.4.3
storybook	10.5.0	10.6.0
streamdown	2.5.0	2.6.0
tailwind-merge	3.6.0	3.7.0
tailwindcss	4.3.1	4.3.3
tsx	4.22.4	4.23.13
typescript	6.0.3	7.0.2
vite	8.0.16	8.3.0
vitest	4.1.10	5.0.1
zustand	5.0.14	5.0.15

Updates @ai-sdk/gateway from 3.0.132 to 4.0.86

Release notes

Sourced from @​ai-sdk/gateway's releases.

@​ai-sdk/openai@​4.0.71

Patch Changes

• e76a0a3: fix(openai): cancel image edit URL downloads when the request is aborted
• Updated dependencies [2973485]
• Updated dependencies [a4db5ea]
• Updated dependencies [2937ea2]
  • @​ai-sdk/provider-utils@​5.0.45

@​ai-sdk/openai@​4.0.70

Patch Changes

• fd75cee: fix(openai): preserve provider file references in Responses tool results
• 1f5bb62: fix(openai): send assistant text as Responses easy input messages
• Updated dependencies [0455398]
  • @​ai-sdk/provider-utils@​5.0.44

@​ai-sdk/mistral@​4.0.48

Patch Changes

• Updated dependencies [2973485]
• Updated dependencies [a4db5ea]
• Updated dependencies [2937ea2]
  • @​ai-sdk/provider-utils@​5.0.45

@​ai-sdk/perplexity@​4.0.48

Patch Changes

• Updated dependencies [2973485]
• Updated dependencies [a4db5ea]
• Updated dependencies [2937ea2]
  • @​ai-sdk/provider-utils@​5.0.45

@​ai-sdk/klingai@​4.0.47

Patch Changes

• Updated dependencies [2973485]
• Updated dependencies [a4db5ea]
• Updated dependencies [2937ea2]
  • @​ai-sdk/provider-utils@​5.0.45

@​ai-sdk/mistral@​4.0.47

Patch Changes

• Updated dependencies [0455398]
  • @​ai-sdk/provider-utils@​5.0.44

@​ai-sdk/perplexity@​4.0.47

Patch Changes

... (truncated)

Changelog

Sourced from @​ai-sdk/gateway's changelog.

4.0.86

Patch Changes

• 4fdf51e: chore(provider/gateway): update gateway model settings files
• Updated dependencies [0455398]
  • @​ai-sdk/provider-utils@​5.0.44

4.0.85

Patch Changes

• 6982e9d: Include evaluation models in getAvailableModels() instead of filtering them out as unknown model types.
• 6982e9d: feat(gateway): add experimental evaluation model support

4.0.84

Patch Changes

• Updated dependencies [215b25e]
• Updated dependencies [d4d96bf]
• Updated dependencies [a7dd893]
• Updated dependencies [3456e2c]
• Updated dependencies [c4e76de]
  • @​ai-sdk/provider-utils@​5.0.43
  • @​ai-sdk/provider@​4.0.17

4.0.83

Patch Changes

• 0c9ab5a: chore(provider/gateway): update gateway model settings files
• 2cce7da: chore(provider/gateway): update gateway model settings files
• Updated dependencies [91c2128]
• Updated dependencies [2cd80b3]
• Updated dependencies [d06bb2a]
• Updated dependencies [123d71f]
• Updated dependencies [2fa5e0e]
  • @​ai-sdk/provider-utils@​5.0.42
  • @​ai-sdk/provider@​4.0.16

4.0.82

Patch Changes

• Updated dependencies [5c0054d]
• Updated dependencies [39535af]
  • @​ai-sdk/provider@​4.0.15
  • @​ai-sdk/provider-utils@​5.0.41

... (truncated)

Commits

• b3033f7 Version Packages (#20979)
• 4fdf51e chore(provider/gateway): update gateway model settings files (#20987)
• a18f576 Version Packages (#20901)
• 6982e9d feat(gateway): add experimental evaluation model support (#20885)
• 1a82df1 Version Packages (#20860)
• c60b9d3 Version Packages (#20799)
• 2cce7da chore(provider/gateway): update gateway model settings files (#20844)
• 0c9ab5a chore(provider/gateway): update gateway model settings files (#20783)
• ccecb2d Version Packages (#20765)
• 39535af feat(openai): add experimental Live WebSocket provider (#20627)
• Additional commits viewable in compare view

Updates @ai-sdk/provider from 3.0.8 to 4.0.17

Changelog

Sourced from @​ai-sdk/provider's changelog.

4.0.17

Patch Changes

• a7dd893: Add experimental evaluation model aliases and registry resolution. customProvider accepts evaluationModels, registries expose evaluationModel, and experimental_evaluate accepts string IDs when an evaluation-capable default provider is explicitly configured. Evaluation never implicitly falls back to Gateway. Model-resolution errors now identify evaluationModel while stable provider contracts remain unchanged.

4.0.16

Patch Changes

• d06bb2a: Allow readonly arrays and objects containing them to be used as JSON values.
• 123d71f: Add experimental_evaluate and the isolated experimental v4 evaluation model specification for Choice, Score, and Boolean questions against shared state. Includes typed answers, optional Choice/Score distributions, required Boolean probabilities, validation, retries, cancellation, and Experimental_EvaluationUnsupportedQuestionTypeError for unsupported questions.

4.0.15

Patch Changes

• 5c0054d: Add optional browser-direct WebRTC for experimental client-delegated Live conversations alongside the existing WebSocket path. Exchange SDP through an application endpoint with api.session, configure server-owned data-channel permissions, and preserve committed React session ownership. Capture follows the selected sender track, borrowed tracks remain caller-owned, and disconnect recovery and finalization stay bounded. Applications continue to handle client delegation and submit context; Live session updates and Responses delegation remain unsupported.

  Serialize microphone sender changes and close the peer if detachment fails, without stopping borrowed tracks. Validate nonempty SDP setup answers with a bounded response body, and document the same-origin broker authentication contract.

• 39535af: Add experimental OpenAI Live provider support through the unified openai.experimental_realtime factory for server WebSocket sessions with client delegation. Applications own their agents and tools, receive continuous audio/transcript events and delegation metadata, and return context through validated channels. Support immutable startup options, microphone mute controls, graceful session close, and cumulative voice usage. Responses delegation and Live session updates reject before sending.

  Route known Live model IDs to Live, allow an OpenAI-specific api override for early-access models, and preserve legacy Realtime defaults for unknown IDs. Token minting follows the same selection rules and rejects Live before requesting unsupported credentials. Extend the realtime v4 specification with optional server WebSocket configuration, per-connection raw-event parsers, and model-wide startup/finalization capabilities. This provider layer supplies connection settings and protocol mapping for server adapters; browser lifecycle and UI integration belong to the core runtime and framework hooks.

  Preserve Realtime client event IDs for session updates and audio appends, and correlate server errors with the originating client event.

4.0.14

Patch Changes

• 5ec21a6: fix: reject unsupported batch request types
• 7469a3b: feat: support image generation requests in batches

4.0.13

Patch Changes

• 9942196: feat: add batch cancel and list APIs

4.0.12

Patch Changes

• 912fb01: feat: add batch cancel and list APIs

4.0.11

Patch Changes

... (truncated)

Commits

• 1a82df1 Version Packages (#20860)
• a7dd893 feat(ai): add experimental evaluation model registry support (#20875)
• c60b9d3 Version Packages (#20799)
• 123d71f feat(ai): add experimental evaluation API and model spec (#20848)
• d06bb2a fix: accept recursively readonly JSON structures as tool-result output (#17282)
• ccecb2d Version Packages (#20765)
• 5c0054d feat(realtime): add optional browser-direct Live WebRTC (#20630)
• 39535af feat(openai): add experimental Live WebSocket provider (#20627)
• 9ed46d2 Version Packages (#20569)
• 7469a3b feat: support image generation requests in batches (#20594)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​ai-sdk/provider since your current version.

Updates @ai-sdk/provider-utils from 4.0.23 to 5.0.44

Release notes

Sourced from @​ai-sdk/provider-utils's releases.

@​ai-sdk/provider-utils@​5.0.44

Patch Changes

• 0455398: fix(provider-utils): make lazy Undici import visible to deployment tracers

Changelog

Sourced from @​ai-sdk/provider-utils's changelog.

5.0.44

Patch Changes

• 0455398: fix(provider-utils): make lazy Undici import visible to deployment tracers

5.0.43

Patch Changes

• 215b25e: Default language-model evaluation adapters to reasoning: 'none', using each provider's existing reasoning mapping. Explicit reasoning settings in providerOptions continue to override the default.
• d4d96bf: Add experimental Choice, Score, and Boolean evaluations through openai.evaluationModel() and a shared structured language-model evaluation adapter in @ai-sdk/provider-utils/experimental-evaluation. Preserve exact labels and metadata, validate score bounds, and return prompted Boolean P(true) estimates validated to be in [0, 1]. Boolean estimates are not guaranteed to be calibrated; application code chooses thresholds.
• 3456e2c: feat(ai): support tool search with direct tool calling
• c4e76de: feat(ai): add native tool search tool
• Updated dependencies [a7dd893]
  • @​ai-sdk/provider@​4.0.17

5.0.42

Patch Changes

• 91c2128: feat(ai): add mid conversation tool discovery/updates for code-mode
• 2cd80b3: Keep default Node.js downloads protected by DNS validation and connection pinning when frameworks or instrumentation wrap global fetch before or after the SDK loads.
• 2fa5e0e: fix(provider-utils): avoid crashing when DOMException is not a global constructor
• Updated dependencies [d06bb2a]
• Updated dependencies [123d71f]
  • @​ai-sdk/provider@​4.0.16

5.0.41

Patch Changes

• Updated dependencies [5c0054d]
• Updated dependencies [39535af]
  • @​ai-sdk/provider@​4.0.15

5.0.40

Patch Changes

• 813bb36: fix(provider-utils): avoid detecting plain text prefixes as BMP or GIF images
• c43e4b7: fix(mcp): prevent SSRF in OAuth metadata discovery
• Updated dependencies [5ec21a6]
• Updated dependencies [7469a3b]
  • @​ai-sdk/provider@​4.0.14

5.0.39

Patch Changes

... (truncated)

Commits

• b3033f7 Version Packages (#20979)
• 0455398 fix(provider-utils): make lazy Undici import visible to deployment tracers (#...
• 1a82df1 Version Packages (#20860)
• 3456e2c feat(ai): support tool search with direct tool calling (#20874)
• 215b25e fix(provider-utils): default language-model evaluations to no reasoning (#20868)
• d4d96bf feat: add experimental evaluation models and shared adapter to openai, google...
• c4e76de feat(ai): add native tool search tool (#20856)
• c60b9d3 Version Packages (#20799)
• 2cd80b3 fix(provider-utils): preserve download DNS protection under wrapped fetch (#2...
• 91c2128 feat(code-mode): add mid conversation tool discovery/updates for code-mode (#...
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​ai-sdk/provider-utils since your current version.

Updates @ai-sdk/react from 3.0.208 to 4.0.109

Release notes

Sourced from @​ai-sdk/react's releases.

@​ai-sdk/react@​4.0.109

Patch Changes

• Updated dependencies [4775577]
• Updated dependencies [6696728]
• Updated dependencies [09516a1]
• Updated dependencies [1aef01e]
• Updated dependencies [9c1ea74]
• Updated dependencies [107343a]
• Updated dependencies [03c3e33]
• Updated dependencies [4b5cb49]
• Updated dependencies [5d42ebd]
• Updated dependencies [4a67783]
• Updated dependencies [1058ed5]
• Updated dependencies [84f5d1b]
• Updated dependencies [2d53a5d]
• Updated dependencies [2a5ed55]
• Updated dependencies [0455398]
  • ai@7.0.106
  • @​ai-sdk/mcp@​2.0.53
  • @​ai-sdk/provider-utils@​5.0.44

@​ai-sdk/react@​3.0.289

Patch Changes

• Updated dependencies [8a9722e]
• Updated dependencies [6a0f2d9]
• Updated dependencies [db02971]
• Updated dependencies [4d91999]
• Updated dependencies [b2ad994]
• Updated dependencies [9c85bd4]
• Updated dependencies [becaa32]
  • ai@6.0.286

Changelog

Sourced from @​ai-sdk/react's changelog.

4.0.109

Patch Changes

• Updated dependencies [4775577]
• Updated dependencies [6696728]
• Updated dependencies [09516a1]
• Updated dependencies [1aef01e]
• Updated dependencies [9c1ea74]
• Updated dependencies [107343a]
• Updated dependencies [03c3e33]
• Updated dependencies [4b5cb49]
• Updated dependencies [5d42ebd]
• Updated dependencies [4a67783]
• Updated dependencies [1058ed5]
• Updated dependencies [84f5d1b]
• Updated dependencies [2d53a5d]
• Updated dependencies [2a5ed55]
• Updated dependencies [0455398]
  • ai@7.0.106
  • @​ai-sdk/mcp@​2.0.53
  • @​ai-sdk/provider-utils@​5.0.44

4.0.108

Patch Changes

• Updated dependencies [6982e9d]
  • ai@7.0.105

4.0.107

Patch Changes

• b0cfd5b: fix(react): allow unused realtime runtime code to be tree-shaken
• Updated dependencies [215b25e]
• Updated dependencies [d4d96bf]
• Updated dependencies [a7dd893]
• Updated dependencies [227f3b0]
• Updated dependencies [3456e2c]
• Updated dependencies [c4e76de]
  • @​ai-sdk/provider-utils@​5.0.43
  • ai@7.0.104
  • @​ai-sdk/provider@​4.0.17
  • @​ai-sdk/mcp@​2.0.52

4.0.106

Patch Changes

... (truncated)

Commits

• b3033f7 Version Packages (#20979)
• a18f576 Version Packages (#20901)
• 1a82df1 Version Packages (#20860)
• b0cfd5b fix: Prevent useChat-only bundles from retaining the realtime browser runtime...
• c60b9d3 Version Packages (#20799)
• ccecb2d Version Packages (#20765)
• 5c0054d feat(realtime): add optional browser-direct Live WebRTC (#20630)
• a050aed feat(react): support Live WebSocket sessions in useRealtime (#20629)
• 4b306c2 feat(ai): add WebSocket continuous realtime sessions (#20628)
• 8c9007b Version Packages (#20751)
• Additional commits viewable in compare view

Updates @axe-core/playwright from 4.12.1 to 4.13.0

Release notes

Sourced from @​axe-core/playwright's releases.

Release 4.13.0

What's Changed

• ci: use pat instead of github token by @​Garbee in dequelabs/axe-core-npm#1334
• chore: bump nyc from 17.1.0 to 18.0.0 by @​dependabot[bot] in dequelabs/axe-core-npm#1311
• chore: increase timeout for axe-core update by @​Garbee in dequelabs/axe-core-npm#1354
• chore: pin node by @​Garbee in dequelabs/axe-core-npm#1355
• test: fix webdriverio esmTest.mjs by @​straker in dequelabs/axe-core-npm#1356
• chore: disable dependabot rebase strategy by @​Garbee in dequelabs/axe-core-npm#1344
• chore: bump actions/checkout from 6 to 6.0.2 in the gha-low-risk group by @​dependabot[bot] in dequelabs/axe-core-npm#1357
• ci: increase timeout for axe-core update by @​Garbee in dequelabs/axe-core-npm#1360
• chore: exclude test/release from npm workspaces by @​Garbee in dequelabs/axe-core-npm#1361
• chore: bump axios from 1.14.0 to 1.17.0 by @​dependabot[bot] in dequelabs/axe-core-npm#1358
• chore: merge master into develop by @​michael-siek in dequelabs/axe-core-npm#1362
• chore: declare @​eslint/js and group eslint deps for dependabot by @​Garbee in dequelabs/axe-core-npm#1348
• chore: bump actions/checkout from 6.0.2 to 6.0.3 in the gha-low-risk group by @​dependabot[bot] in dequelabs/axe-core-npm#1363
• chore: group browser-driver and jest deps for dependabot by @​Garbee in dequelabs/axe-core-npm#1365
• chore: bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in dequelabs/axe-core-npm#1301
• chore: bump handlebars from 4.7.8 to 4.7.9 by @​dependabot[bot] in dequelabs/axe-core-npm#1305
• chore: bump fast-xml-parser from 5.5.1 to 5.8.0 by @​dependabot[bot] in dequelabs/axe-core-npm#1325
• chore: bump lodash from 4.17.21 to 4.18.1 by @​dependabot[bot] in dequelabs/axe-core-npm#1337
• chore: bump ip-address and socks by @​dependabot[bot] in dequelabs/axe-core-npm#1339
• chore: bump fast-xml-builder from 1.1.0 to 1.2.0 by @​dependabot[bot] in dequelabs/axe-core-npm#1342
• chore: bump basic-ftp from 5.2.0 to 5.3.1 by @​dependabot[bot] in dequelabs/axe-core-npm#1341
• chore: bump qs from 6.14.0 to 6.15.2 by @​dependabot[bot] in dequelabs/axe-core-npm#1349
• chore: bump tmp from 0.2.5 to 0.2.7 by @​dependabot[bot] in dequelabs/axe-core-npm#1350
• chore: bump @​babel/plugin-transform-modules-systemjs from 7.29.0 to 7.29.7 by @​dependabot[bot] in dequelabs/axe-core-npm#1343
• chore: bump undici from 6.23.0 to 6.26.0 by @​dependabot[bot] in dequelabs/axe-core-npm#1366
• chore: bump the selenium group with 2 updates by @​dependabot[bot] in dequelabs/axe-core-npm#1369
• chore: bump lint-staged from 16.3.2 to 17.0.7 by @​dependabot[bot] in dequelabs/axe-core-npm#1375
• chore: bump sinon from 21.0.1 to 22.0.0 by @​dependabot[bot] in dequelabs/axe-core-npm#1374
• chore: bump @​playwright/test from 1.58.2 to 1.60.0 in the playwright group by @​dependabot[bot] in dequelabs/axe-core-npm#1371
• feat: Update axe-core to v4.12.1 by @​attest-team-ci in dequelabs/axe-core-npm#1378
• chore: RC v4.12.0 by @​attest-team-ci in dequelabs/axe-core-npm#1381
• chore: RC v4.12.1 by @​attest-team-ci in dequelabs/axe-core-npm#1391
• chore: release v4.12.1 by @​axe-core in dequelabs/axe-core-npm#1393
• chore: merge master into develop by @​attest-team-ci in dequelabs/axe-core-npm#1394
• chore: bump @​sigstore/core from 3.1.0 to 3.2.1 by @​dependabot[bot] in dequelabs/axe-core-npm#1395
• chore: bump axios from 1.17.0 to 1.18.1 by @​dependabot[bot] in dequelabs/axe-core-npm#1400
• chore: bump rollup from 4.46.2 to 4.62.2 by @​dependabot[bot] in dequelabs/axe-core-npm#1402
• chore: bump undici from 6.26.0 to 6.28.0 by @​dependabot[bot] in dequelabs/axe-core-npm#1409
• chore: bump ip-address from 10.2.0 to 10.4.0 by @​dependabot[bot] in dequelabs/axe-core-npm#1408
• ci: remove scheduled trigger from update-axe-core workflow by @​Garbee in dequelabs/axe-core-npm#1411
• feat: update axe-core to v4.13.0 by @​axe-core in dequelabs/axe-core-npm#1413
• chore: RC v4.13.0 by @​attest-team-ci in dequelabs/axe-core-npm#1414
• chore: release v4.13.0 by @​axe-core in dequelabs/axe-core-npm#1416

Full Changelog: dequelabs/axe-core-npm@v4.11.3...v4.13.0

Changelog

Sourced from @​axe-core/playwright's changelog.

4.13.0 (2026-08-10)

Features

• Update axe-core to v4.12.1 (#1378) (4263054)
• update axe-core to v4.13.0 (#1413) (399c5d7), closes #1412

Commits

• See full diff in compare view

Updates @base-ui/react from 1.5.0 to 1.8.0

Release notes

Sourced from @​base-ui/react's releases.

v1.8.0

General changes

• Fix label association when a control unregisters (#5456) by @​atomiks
• Reduce animation completion work (#5535) by @​atomiks
• Fix prop and ref merging for lazy render elements (#5562) by @​atomiks
• Fix roving focus when items are added or removed (#5447) by @​atomiks
• Fix hover and focus interaction issues (#5037) by @​atomiks
• Improve trigger mount performance (#5426) by @​atomiks
• Fix disabled anchor tracking on scroll (#5478) by @​atomiks
• Fix transform origin for start/end alignment (#5015) by @​atomiks
• Remove duplicate options key from arrow middleware (#5606) by @​atomiks
• Register passive touch listeners (#5572) by @​wanxiankai

Alert Dialog

• Ignore outside clicks from presses that began before open (#5378) by @​michaldudak

Autocomplete

• Render groups with the rowgroup role in grid mode (#5564) by @​atomiks
• Allow opening and browsing the popup while readOnly (#5541) by @​vikuscz
• Move aria-orientation to the role owners (#5551) by @​gonzoblasco
• Hide group labels and scrollbars from the accessibility tree (#5598) by @​azeng4499

Avatar

• Add keepMounted prop to <Avatar.Image> (#5536) by @​atomiks

Checkbox

• Fix stale and duplicated control IDs (#5457) by @​atomiks
• Fix controlled blur validation and stale filled state (#5563) by @​atomiks

Checkbox Group

• Fix stale and duplicated control IDs (#5457) by @​atomiks

Combobox

• Fix applying data-readonly to <Combobox.Trigger> (#5418) by @​sai6855
• Add createItems collection API (#5326) by @​atomiks
• Fix cancellation when preserving the filter after selection (#5362) by @​atomiks
• Render groups with the rowgroup role in grid mode (#5564) by @​atomiks
• Allow opening and browsing the popup while readOnly (#5541) by @​vikuscz
• Move aria-orientation to the role owners (#5551) by @​gonzoblasco
• Fix record item label lookup reading from Object.prototype (#5518) by @​XionWCFM
• Anchor multiple selection to the first selected item with a linear lookup (#5573, #5613) by @​atomiks and @​michaldudak
• Hide group labels and scrollbars from the accessibility tree (#5598) by @​azeng4499

... (truncated)

Changelog

Sourced from @​base-ui/react's changelog.

v1.8.0

Sep 4, 2026

General changes

• Fix label association when a control unregisters (#5456) by @​atomiks
• Reduce animation completion work (#5535) by @​atomiks
• Fix prop and ref merging for lazy render elements (#5562) by @​atomiks
• Fix roving focus when items are added or removed (#5447) by @​atomiks
• Fix hover and focus interaction issues (#5037) by @​atomiks
• Improve trigger mount performance (#5426) by @​atomiks
• Fix disabled anchor tracking on scroll (#5478) by @​atomiks
• Fix transform origin for start/end alignment (#5015) by @​atomiks
• Remove duplicate options key from arrow middleware (#5606) by @​atomiks
• Register passive touch listeners (#5572) by @​wanxiankai

Alert Dialog

• Ignore outside clicks from presses that began before open (#5378) by @​michaldudak

Autocomplete

• Render groups with the rowgroup role in grid mode (#5564) by @​atomiks
• Allow opening and browsing the popup while readOnly (#5541) by @​vikuscz
• Move aria-orientation to the role owners (#5551) by @​gonzoblasco
• Hide group labels and scrollbars from the accessibility tree (#5598) by @​azeng4499

Avatar

• Add keepMounted prop to <Avatar.Image> (#5536) by @​atomiks

Checkbox

• Fix stale and duplicated control IDs (#5457) by @​atomiks
• Fix controlled blur validation and stale filled state (#5563) by @​atomiks

Checkbox Group

• Fix stale and duplicated control IDs (#5457) by @​atomiks

Combobox

• Fix applying data-readonly to <Combobox.Trigger> (#5418) by @​sai6855
• Add createItems collection API (#5326) by @​atomiks
• Fix cancellation when preserving the filter after selection (#5362) by @​atomiks
• Render groups with the rowgroup role in grid mode (#5564) by @​atomiks
• Allow opening and browsing the popup while readOnly (#5541) by @​vikuscz

... (truncated)

Commits

• 47b4052 [release] v1.8.0 (#5609)
• dd13809 [toast] Accept an updater function in the update method instead of on data (#...
• 670e95c [docs] Update docs infra to restore generated types (#5616)
• e8526f7 [utils] Restore frozen EMPTY_ARRAY (#5620)
• b7f6683 [number field] Preserve consumer selection when focusing the input (#5619)
• b8c5d78 [context menu] Correct generated API metadata (#5523)
• 261d699 [combobox][autocomplete] Document that items must not contain nullish entries...
• 0a6ff44 [toast] Replace custom data wholesale and accept a function to derive it (#5611)
• 2e1bddd [combobox][select] Make the multiple selection anchor lookup linear (#5613)
• ad83c8a [code-infra] Run TypeScript 7 alongside the TS6 JS API (#5603)
• Additional commits viewable in compare view

Updates @biomejs/biome from 2.4.13 to 2.5.14

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.14

2.5.14

Patch Changes

• #9022 0d49e24 Thanks @​dyc3! - Added the nursery rule noReturnInFinally. This rule disallows return statements in Promise.prototype.finally() callbacks, including inside nested blocks and conditional branches. Returns in nested functions are ignored by the rule.

  // Invalid: return in finally callback
  Promise.resolve(1).finally(() => { return 2 })
  // Valid: no return in finally callback
  Promise.resolve(1).finally(() => { console.log(2) })

  Returning a value from a Promise.prototype.finally() callback does not replace the original promise's fulfillment value, which can be confusing. Returned promises and thenables are awaited, and their rejection rejects the resulting promise.

• #11754 71eaa0d Thanks @​griff-rees! - Added the nursery rule noSvelteAtDebugTags, which disallows Svelte's {@debug} tag.

  <!-- Invalid: leftover debugging tag -->
  {@debug user}

  The {@debug} tag is a debugging aid and should be removed once you no longer need it, as it should not remain in production code. The rule provides a safe fix that removes the tag.

• #11725 5eb5f09 Thanks @​m1handr! - Added the nursery rule useValidTestTitle, which enforces valid titles for unit test cases and suites.

• #11735 9bd70c7 Thanks @​ematipico! - Fixed #8471: source.fixAll.biome ignored formatter.formatWithErrors. It now applies safe fixes without formatting files that have parse errors when the option is disabled.

• #11715 f05a3c3 Thanks @​ematipico! - Fixed #7771: Grit plugins that use sequential no longer panic when Biome processes files.

• #11766 c2542c6 Thanks @​dyc3! - Fixed validation of readonly and accessor modifiers: combining them in either order now reports that they cannot be used together.

• #11461 22e9966 Thanks @​FoundDream! - Fixed #11423: Multiline template interpolations now preserve the indentation of their closing brace when the source indentation is not a multiple of tabWidth.

   const value = `
        ${
          condition
            ? "yes"
            : "no"
  -}
  +     }
   `;

• #11766 c2542c6 Thanks @​dyc3! - Fixed #11763: TypeScript class members using override accessor, such as override accessor value = 1, now parse correctly. The reversed order, accessor override, now reports that override must precede accessor.

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.14

Patch Changes

• #9022 0d49e24 Thanks @​dyc3! - Added the nursery rule noReturnInFinally. This rule disallows return statements in Promise.prototype.finally() callbacks, including inside nested blocks and conditional branches. Returns in nested functions are igno...

  Description has been truncated

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.