chore(deps): bump the dev-tooling group across 1 directory with 15 updates by dependabot[bot] · Pull Request #113 · misaon/slop-gate

dependabot · 2026-09-14T22:20:24Z

Bumps the dev-tooling group with 15 updates in the / directory:

Package	From	To
@commitlint/cli	`21.2.1`	`21.2.2`
@commitlint/config-conventional	`21.2.0`	`21.2.2`
@hono/node-server	`2.1.0`	`2.1.1`
@tanstack/react-query	`5.101.4`	`5.102.8`
@tanstack/table-core	`9.0.0`	`9.2.4`
hono	`4.13.0`	`4.13.7`
kysely	`0.29.4`	`0.29.5`
lucide-preact	`1.28.0`	`1.43.0`
motion	`13.0.0`	`13.2.0`
oxc-parser	`0.142.0`	`0.149.0`
oxc-transform	`0.142.0`	`0.149.0`
tsdown	`0.22.14`	`0.23.0`
turbo	`2.10.8`	`2.10.12`
yaml	`2.9.0`	`2.9.1`
zod	`4.4.3`	`4.6.1`

Updates @commitlint/cli from 21.2.1 to 21.2.2

Release notes

Sourced from @commitlint/cli's releases.

v21.2.2

21.2.2 (2026-08-13)

Bug Fixes

parse: require colon after note keywords (conventional-commits-parser 7.1.2) (#4927) (b83c515), closes conventional-changelog/conventional-changelog#1517

fix(container): resolve packages from TypeScript configs by @Guflly in conventional-changelog/commitlint#4914

fix(resolve-extends): support Yarn Plug'n'Play by @Guflly in conventional-changelog/commitlint#4933

Chore, docs, etc.

docs: fix typos in comments and JSDoc by @maxtaran2010 in conventional-changelog/commitlint#4880

docs: fix Deno setup without package.json by @awnoa in conventional-changelog/commitlint#4896

chore: repair broken lockfile from #4939 and add merge queue CI support by @escapedcat in conventional-changelog/commitlint#4941

docs(config-conventional): document rules that go beyond the spec by @escapedcat in conventional-changelog/commitlint#4910

New Contributors

@maxtaran2010 made their first contribution in conventional-changelog/commitlint#4880

@awnoa made their first contribution in conventional-changelog/commitlint#4896

@Guflly made their first contribution in conventional-changelog/commitlint#4914

Full Changelog: conventional-changelog/commitlint@v21.2.1...v21.2.2

Changelog

Sourced from @commitlint/cli's changelog.

21.2.2 (2026-08-13)

Note: Version bump only for package @commitlint/cli

Commits

d00d190 v21.2.2
f2e8dae chore: update dependency typescript to v7 (#4886)
5769d9f docs: fix typos in comments and JSDoc (#4880)
See full diff in compare view

Updates @commitlint/config-conventional from 21.2.0 to 21.2.2

Release notes

Sourced from @commitlint/config-conventional's releases.

v21.2.2

21.2.2 (2026-08-13)

Bug Fixes

parse: require colon after note keywords (conventional-commits-parser 7.1.2) (#4927) (b83c515), closes conventional-changelog/conventional-changelog#1517

fix(container): resolve packages from TypeScript configs by @Guflly in conventional-changelog/commitlint#4914

fix(resolve-extends): support Yarn Plug'n'Play by @Guflly in conventional-changelog/commitlint#4933

Chore, docs, etc.

docs: fix typos in comments and JSDoc by @maxtaran2010 in conventional-changelog/commitlint#4880

docs: fix Deno setup without package.json by @awnoa in conventional-changelog/commitlint#4896

chore: repair broken lockfile from #4939 and add merge queue CI support by @escapedcat in conventional-changelog/commitlint#4941

docs(config-conventional): document rules that go beyond the spec by @escapedcat in conventional-changelog/commitlint#4910

New Contributors

@maxtaran2010 made their first contribution in conventional-changelog/commitlint#4880

@awnoa made their first contribution in conventional-changelog/commitlint#4896

@Guflly made their first contribution in conventional-changelog/commitlint#4914

Full Changelog: conventional-changelog/commitlint@v21.2.1...v21.2.2

v21.2.1

21.2.0 (2026-06-30)

Features

resolve-extends: resolve pure-ESM presets (conventional-changelog v7/v9/v10) (#4859) (fdb566f)

Chore, doc, etc.

chore(read): replace deprecated git-raw-commits with git-client by @igordanchenko in conventional-changelog/commitlint#4860

docs(issue-template): ask for package manager and version by @escapedcat in conventional-changelog/commitlint#4867

New Contributors

@igordanchenko made their first contribution in conventional-changelog/commitlint#4860

Full Changelog: conventional-changelog/commitlint@v21.2.0...v21.2.1

Changelog

Sourced from @commitlint/config-conventional's changelog.

21.2.2 (2026-08-13)

Note: Version bump only for package @commitlint/config-conventional

Commits

d00d190 v21.2.2
3146d04 docs(config-conventional): document rules that go beyond the spec (#4910)
f2e8dae chore: update dependency typescript to v7 (#4886)
See full diff in compare view

Updates @hono/node-server from 2.1.0 to 2.1.1

Release notes

Sourced from @hono/node-server's releases.

v2.1.1

What's Changed

perf: lazily materialize request headers by @BlankParticle in honojs/node-server#389

Full Changelog: honojs/node-server@v2.1.0...v2.1.1

Commits

73c03ad 2.1.1
5515aa0 perf: lazily materialize request headers (#389)
See full diff in compare view

Updates @tanstack/react-query from 5.101.4 to 5.102.8

Release notes

Sourced from @tanstack/react-query's releases.

@tanstack/react-query-devtools@5.102.8

Patch Changes

Updated dependencies []:

@tanstack/query-devtools@5.102.8

@tanstack/react-query@5.102.8

@tanstack/react-query-next-experimental@5.102.8

Patch Changes

Updated dependencies []:

@tanstack/react-query@5.102.8

@tanstack/react-query-persist-client@5.102.8

Patch Changes

Updated dependencies []:

@tanstack/query-persist-client-core@5.102.8

@tanstack/react-query@5.102.8

@tanstack/react-query@5.102.8

Patch Changes

Updated dependencies []:

@tanstack/query-core@5.102.8

@tanstack/react-query-devtools@5.102.7

Patch Changes

Updated dependencies []:

@tanstack/query-devtools@5.102.7

@tanstack/react-query@5.102.7

@tanstack/react-query-next-experimental@5.102.7

Patch Changes

Updated dependencies []:

@tanstack/react-query@5.102.7

@tanstack/react-query-persist-client@5.102.7

Patch Changes

Updated dependencies []:

@tanstack/query-persist-client-core@5.102.7

@tanstack/react-query@5.102.7

@tanstack/react-query@5.102.7

Patch Changes

Updated dependencies []:

... (truncated)

Changelog

Sourced from @tanstack/react-query's changelog.

5.102.8

Patch Changes

Updated dependencies []:

@tanstack/query-core@5.102.8

5.102.7

Patch Changes

Updated dependencies []:

@tanstack/query-core@5.102.7

5.102.6

Patch Changes

#11305 ac2b612 - fix(react-query): throw falsy errors from useQueries and useSuspenseQueries to the error boundary

Updated dependencies []:

@tanstack/query-core@5.102.6

5.102.5

Patch Changes

Updated dependencies [578e5c2]:

@tanstack/query-core@5.102.5

5.102.4

Patch Changes

Updated dependencies [a05df6a]:

@tanstack/query-core@5.102.4

5.102.3

Patch Changes

Updated dependencies []:

@tanstack/query-core@5.102.3

5.102.2

Patch Changes

Updated dependencies [80fbf73]:

@tanstack/query-core@5.102.2

... (truncated)

Commits

2969edf ci: Version Packages (#11316)
2eb3c7c ci: Version Packages (#11313)
714df67 ci: Version Packages (#11306)
ac2b612 fix(react-query): propagate falsy errors to the error boundary (#11305)
1836e61 ci: Version Packages (#11303)
51f12db ci: Version Packages (#11294)
730b3aa ci: Version Packages (#11276)
388bbaf ci: Version Packages (#11265)
bc423b3 ci: Version Packages (#11261)
be1352b test(*): add adapter-level type coverage for optional undefinable mutate vari...
Additional commits viewable in compare view

Updates @tanstack/table-core from 9.0.0 to 9.2.4

Release notes

Sourced from @tanstack/table-core's releases.

@tanstack/table-core@9.2.4

Patch Changes

#6561 f72e516 - Skip missing core rows when rebuilding a worker row-model payload so stale worker results cannot crash the table

@tanstack/table-core@9.2.3

Patch Changes

#6568 468f267 - Fix hierarchical filtered row models so flatRows lists parents before descendants in both filtering modes, preserves filter metadata on cloned rows, and round-trips nested data correctly through worker-backed row models.

#6576 3b94648 - Emit grouped and downstream worker flatRows in parent-first preorder.

@tanstack/table-core@9.1.2

Patch Changes

#6532 ff43666 - Centralize state updates behind a setStateSlice util with an optional structural no-op policy. Equality-guarded slices give their state owner a functional updater that resolves against the owner's latest value and returns the existing reference when nothing changed. Atom and framework state owners can then skip the write and re-render without comparing against a potentially stale controlled table snapshot.

This removes an entire class of render loops where an auto reset (for example autoResetExpanded after a data reference change) fired a change handler with a freshly allocated but semantically identical value, causing controlled-state consumers to re-render, produce a new data reference, and loop.

Behavior notes:

A custom onXChange handler is still invoked for an apparent no-op. Only its state container knows the latest queued value, so it performs the equality check when it applies the guarded updater. This preserves same-tick update composition in frameworks such as React.

State updaters are evaluated once, by the state owner. Controlled fallback atoms therefore remain correct if control is later released, and external atom owners do not run functional updaters twice.

stateSlicesEqual compares enumerable string and symbol keys through the three container levels used by stock state. Sparse arrays remain distinct from explicit undefined entries; deeper or non-plain values compare by reference and safely allow the update.

Structural equality is opt-in per slice. Opaque globalFilter values and row-scaled rowSelection/rowPinning maps stay direct. The high-frequency columnSizing, columnResizing, and ordinary cell-selection write paths also avoid a comparison on every pointer update.

Auto-reset-prone cell selection applies equality specifically to resets, while its drag handler keeps an O(1) active-focus guard. Expanded state similarly guards reset/auto-reset while ordinary writes stay direct, and toggle-all keeps its explicit O(1) no-op checks.

@tanstack/table-core@9.1.1

Patch Changes

#6529 269e0d8 - Fix getSortedRowModel().flatRows listing sub-rows before their parent. This restores the parent-first order used by the v8 sorted model and aligns the flattened result with the sorted rows tree, core row model, and paginated row model.

@tanstack/table-core@9.1.0

Minor Changes

#6526 09598d2 - Support Infinity as a page size and add getCanLastPage for detecting whether a finite last page can be reached.

@tanstack/table-core@9.0.1

No release notes provided.

Changelog

Sourced from @tanstack/table-core's changelog.

9.2.4

Patch Changes

#6561 f72e516 - Skip missing core rows when rebuilding a worker row-model payload so stale worker results cannot crash the table

9.2.3

Patch Changes

#6568 468f267 - Fix hierarchical filtered row models so flatRows lists parents before descendants in both filtering modes, preserves filter metadata on cloned rows, and round-trips nested data correctly through worker-backed row models.

#6576 3b94648 - Emit grouped and downstream worker flatRows in parent-first preorder.

9.1.2

Patch Changes

#6532 ff43666 - Centralize state updates behind a setStateSlice util with an optional structural no-op policy. Equality-guarded slices give their state owner a functional updater that resolves against the owner's latest value and returns the existing reference when nothing changed. Atom and framework state owners can then skip the write and re-render without comparing against a potentially stale controlled table snapshot.

This removes an entire class of render loops where an auto reset (for example autoResetExpanded after a data reference change) fired a change handler with a freshly allocated but semantically identical value, causing controlled-state consumers to re-render, produce a new data reference, and loop.

Behavior notes:

A custom onXChange handler is still invoked for an apparent no-op. Only its state container knows the latest queued value, so it performs the equality check when it applies the guarded updater. This preserves same-tick update composition in frameworks such as React.

State updaters are evaluated once, by the state owner. Controlled fallback atoms therefore remain correct if control is later released, and external atom owners do not run functional updaters twice.

stateSlicesEqual compares enumerable string and symbol keys through the three container levels used by stock state. Sparse arrays remain distinct from explicit undefined entries; deeper or non-plain values compare by reference and safely allow the update.

Structural equality is opt-in per slice. Opaque globalFilter values and row-scaled rowSelection/rowPinning maps stay direct. The high-frequency columnSizing, columnResizing, and ordinary cell-selection write paths also avoid a comparison on every pointer update.

Auto-reset-prone cell selection applies equality specifically to resets, while its drag handler keeps an O(1) active-focus guard. Expanded state similarly guards reset/auto-reset while ordinary writes stay direct, and toggle-all keeps its explicit O(1) no-op checks.

9.1.1

Patch Changes

#6529 269e0d8 - Fix getSortedRowModel().flatRows listing sub-rows before their parent. This restores the parent-first order used by the v8 sorted model and aligns the flattened result with the sorted rows tree, core row model, and paginated row model.

9.1.0

Minor Changes

#6526 09598d2 - Support Infinity as a page size and add getCanLastPage for detecting whether a finite last page can be reached.

9.0.1

Commits

d01c01b ci: Version Packages (#6580)
f72e516 fix: Add realtime (w/ fake data) trading table example (#6561)
3bfc1bf ci: Version Packages (#6575)
3b94648 fix(table-core): preserve grouped flatRows preorder (#6576)
468f267 fix(table-core): ensure getFilteredRowModel().flatRows uses pre-order travers...
faa261b feat: support latest TanStack Devtools and refresh package versions (#6553)
ff7653d ci: Version Packages (#6533)
ff43666 refactor(table-core): centralize no-op state update guarding in setStateSlice...
058a520 ci: Version Packages (#6531)
269e0d8 fix(table-core): flatten sorted parent rows ahead of their sub-rows (#6529)
Additional commits viewable in compare view

Updates hono from 4.13.0 to 4.13.7

Release notes

Sourced from hono's releases.

v4.13.7

Security fixes

This release includes a fix for the following security issue:

hono/jsx renders plain strings unescaped in boundary components, leading to XSS

Affects: Suspense, ErrorBoundary, and Context.Provider in hono/jsx, and renderToString() / renderToReadableStream() in hono/jsx/dom/server. Fixes missing HTML escaping for a plain string placed directly as a child or fallback of these components, or as the root value of the server rendering functions, so untrusted strings could be emitted as markup. GHSA-hxh3-vqpv-xpqv

Users who render untrusted strings inside Suspense, ErrorBoundary, or Context.Provider, or pass them directly to hono/jsx/dom/server, are strongly encouraged to upgrade to this version.

v4.13.6

What's Changed

fix(client): keep a param value of "index" in $url() and $path() in honojs/hono#5297

fix(client): normalize root WebSocket URLs in honojs/hono#5291

fix(types): allow symbol keys in Context get and set fallbacks in honojs/hono#5300

chore: bump editorconfig-checker in honojs/hono#5336

refactor(on-handler): use forEach for consistent handler iteration in honojs/hono#5326

Full Changelog: honojs/hono@v4.13.5...v4.13.6

v4.13.5

Security fixes

This release includes fixes for the following security issues:

Query parser reads parameters after the URL fragment, causing cache-key and proxy interpretation differentials

Affects: Cache Middleware and applications behind a proxy, WAF, or logging layer that inspects query strings. Fixes query parsing that did not stop at the URL fragment, so a ? after a # was treated as the start of a query string and the application could read parameters that the other component never saw. GHSA-crvj-82cr-hjcx

Incomplete fix for CVE-2026-39408: toSSG() still writes files outside the output directory

Affects: toSSG() for Static Site Generation. Fixes a path normalization gap where consecutive parent-directory segments in ssgParams values were not fully collapsed, bypassing the containment check added in 4.12.12. GHSA-gqvv-2mrq-wpjv

Unbounded dot-notation nesting in parseBody() can cause memory exhaustion

Affects: parseBody() when dot-notation parsing is enabled. Fixes unbounded expansion of dot-separated field names, where a small request body could allocate a disproportionately large object graph and concurrent requests could exhaust the heap. GHSA-g6gw-c38x-mqfc

Users who use Cache Middleware, deploy behind a proxy or WAF that inspects query strings, use Static Site Generation, or use parseBody({ dot: true }) are strongly encouraged to upgrade to this version.

v4.13.4

What's Changed

fix(request): handle params on unmatched requests in honojs/hono#5268

fix(jsx/dom): execute previous ref cleanup when ref prop changes on re-render in honojs/hono#5264

fix(reg-exp-router): associate wildcard middleware with matching routes in honojs/hono#5266

perf(router): share null object creation in honojs/hono#5267

... (truncated)

Commits

eebdf7b 4.13.7
2b8ed40 Merge commit from fork
cac0c4d 4.13.6
dac5d57 refactor(on-handler): use forEach for consistent handler iteration (#5326)
ec648d6 chore: bump editorconfig-checker (#5336)
e2740d5 fix(types): allow symbol keys in Context<any> get and set fallbacks (#5300)
499c35e fix(client): normalize root WebSocket URLs (#5291)
50b8788 fix(client): keep a param value of "index" in $url() and $path() (#5297)
06880c4 4.13.5
531e9c5 Merge commit from fork
Additional commits viewable in compare view

Updates kysely from 0.29.4 to 0.29.5

Release notes

Sourced from kysely's releases.

0.29.5

Hey 👋

A small batch of bug fixes. Please report any issues. 🤞😰🤞

TypeScript 7 is allowing for deeper computations which now cause way more instantiations and wall clock times in various scenarios. We're diving deep into our types and finding optimizations. In this version @koskimas brought some nice wins for builder vs. builder assignability checks.

We're also revamping the docs site, working on style, message and usefulness. Swing by our Discord and share your opinions/ideas. We got docs->apidocs search now. The playground is back supporting short links and will allow saving short links very soon.

🚀 Features

🐞 Bugfixes

fix infinite type check recursion by @koskimas in kysely-org/kysely#1960

Add missing beforeThrow calls in getInflightQueryAbortHandler by @lourd in kysely-org/kysely#1971

📖 Documentation

Fix typo in CreateTypeBuilder.asEnum docstring by @anonpay-sh in kysely-org/kysely#1949

chore: revamp docs hero page. by @igalklebanov in kysely-org/kysely#1959

fix(site): various issues with stats section. by @igalklebanov in kysely-org/kysely#1966

chore(site): replace most text proof with logos. by @igalklebanov in kysely-org/kysely#1968

feat(site): migrate to pagefind for cross-site search we own. by @igalklebanov in kysely-org/kysely#1972

chore(site): drop self-narrating captions, make proof arrows a standing cue by @igalklebanov in kysely-org/kysely#1973

feat(site): grow the proof wall (Replicas, EmbedPDF) + fix production hover by @igalklebanov in kysely-org/kysely#1974

feat(site): add AirTrail, bknd, Civitai, Corsair.dev, Hot Updater, Profilarr and Tunarr to the proof wall. by @igalklebanov in kysely-org/kysely#1975

feat(site): proof-strength gauges, query-module evidence, and new wall names by @igalklebanov in kysely-org/kysely#1976

feat(site): explain the proof gauge behind a (?) on the production wall by @igalklebanov in kysely-org/kysely#1977

feat(site): align docs code blocks with the landing page's VS Code themes by @igalklebanov in kysely-org/kysely#1978

📦 CICD & Tooling

chore: bump deps. by @igalklebanov in kysely-org/kysely#1979

chore: bump github actions. by @igalklebanov in kysely-org/kysely#1980

⚠️ Breaking Changes

🐤 New Contributors

@anonpay-sh made their first contribution in kysely-org/kysely#1949

@lourd made their first contribution in kysely-org/kysely#1971

What's Changed

Full Changelog: kysely-org/kysely@v0.29.4...v0.29.5

Commits

f24018c 0.29.5
dc3ce59 chore: bump deno lts.
7c867ba chore: bump github actions. (#1980)
8d8737b chore: bump deps. (#1979)
07d76ed Add missing beforeThrow calls in getInflightQueryAbortHandler (#1971)
507b751 feat(site): align docs code blocks with the landing page's VS Code themes (#1...
73489ce feat(site): explain the proof gauge behind a (?) on the production wall (#1977)
a757ea0 feat(site): proof-strength gauges, query-module evidence, and new wall names ...
a7d717c feat(site): add AirTrail, bknd, Civitai, Corsair.dev, Hot Updater, Profilarr ...
3ac787e feat(site): grow the proof wall (Replicas, EmbedPDF) + fix production hover (...
Additional commits viewable in compare view

Updates lucide-preact from 1.28.0 to 1.43.0

Release notes

Sourced from lucide-preact's releases.

Version 1.43.0

What's Changed

feat(icons): added tic-tac-toe icon by @karsa-mistmere in lucide-icons/lucide#4772

fix(icons): changed id-card icon by @karsa-mistmere in lucide-icons/lucide#4820

fix(icons): changed id-card-lanyard icon by @karsa-mistmere in lucide-icons/lucide#4819

feat(icons): delegate carton/carton-off from lab by @karsa-mistmere in lucide-icons/lucide#4818

Full Changelog: lucide-icons/lucide@1.42.0...1.43.0

Version 1.42.0

What's Changed

feat(docs): added better contribution guide by @karsa-mistmere in lucide-icons/lucide#4746

fix(site): fix HomeHeroIconsCard.data.ts by @karsa-mistmere in lucide-icons/lucide#4805

fix(icons): deprecated swiss franc icons by @karsa-mistmere in lucide-icons/lucide#4799

feat(icons): add gap-horizontal and gap-vertical by @samuelalake in lucide-icons/lucide#4544

feat(icons): added trash-off icon by @lx3133584 in lucide-icons/lucide#4788

feat(icons): added circle-dashed-check icon by @karsa-mistmere in lucide-icons/lucide#4796

feat(icons): added equal-approximately-not icon by @ryck in lucide-icons/lucide#4802

feat(icons): added dome icons by @swastik7805 in lucide-icons/lucide#4261

chore(lucide-react): Add Lucide React integration tests by @ericfennis in lucide-icons/lucide#4804

feat(packages): extract icon build logic into @lucide/shared by @karsa-mistmere in lucide-icons/lucide#4409

fix(icons): changed computer icon by @karsa-mistmere in lucide-icons/lucide#4607

chore(dependencies): Update dependencies by @ericfennis with @Copilot in lucide-icons/lucide#4806

fix(icons): changed table-2 icon by @jguddas in lucide-icons/lucide#4810

feat(icons): added user-group icons by @karsa-mistmere in lucide-icons/lucide#4782

New Contributors

@lx3133584 made their first contribution in lucide-icons/lucide#4788

@ryck made their first contribution in lucide-icons/lucide#4802

Full Changelog: lucide-icons/lucide@1.41.0...1.42.0

Version 1.41.0

What's Changed

feat(icons): Add new icons germ and germ-off by @rrod497 in lucide-icons/lucide#4056

feat(icons): added door-stairwell icon & updated door-* icons by @jguddas in lucide-icons/lucide#3554

feat(icons): added credit-card-reader icon by @jguddas in lucide-icons/lucide#4616

feat(icons): added 'engine' icon by @benhaube in lucide-icons/lucide#4598

feat(icons): fixed germ & germ-off by @karsa-mistmere in lucide-icons/lucide#4789

chore(deps): bump the vue-deps group with 2 updates by @dependabot[bot] in lucide-icons/lucide#4771

feat(icons): added virus/virus-off icon by @karsa-mistmere in lucide-icons/lucide#4765

chore(copilot-reviews): Improve use-cases description. by @ericfennis in lucide-icons/lucide#4558

feat(icons): add can-soda icon by @jaynewey in lucide-icons/lucide#4718

feat(icons): added square-alert Icon by @viralcodex in lucide-icons/lucide#3687

chore(lab): Add label for lab icons by @ericfennis in lucide-icons/lucide#4793

feat(icons): changed lab/bottle-toothbrush-comb icon by @karsa-mistmere in lucide-icons/lucide#4756

ci(@lucide/lab): Create automatic release flow for @lucide/lab by @ericfennis in lucide-icons/lucide#4792

fix(icons): removed trash icon in favour of trash-2 by @jguddas in lucide-icons/lucide#3141

feat(icons): changed leaf icon by @karsa-mistmere in lucide-icons/lucide#4801

... (truncated)

Commits

94e4cb9 chore(dependencies): Update dependencies (#4806)
99d25bd feat(packages): extract icon build logic into @lucide/shared (#4409)
c42aba0 chore(deps-dev): bump the preact-deps group with 2 updates (#4738)
See full diff in compare view

Updates motion from 13.0.0 to 13.2.0

Changelog

Sourced from motion's changelog.

[13.2.0] 2026-09-03

Added

animate.addEffect() for registering effects that lets animate drive non-DOM subjects alongside DOM elements.

threeEffect (motion/three) supporting Three.js objects, materials, shader uniforms, TSL uniform nodes and more.

vgpuEffect (motion/vgpu) supporting shared uniforms, Effect/Draw/Compute bindings ("params.time"), scene nodes, cameras, lights, materials, orbit controls, CSS colors and vector components.

createEffect now accepts test, read and step options and exposes bound motion values via effect.get().

Changed

Reduced filesize and improved performance of spring.

MotionValueState no longer caches values in latest; effect renders read their motion values directly. set() drops its useDefaultValueType argument.

[13.1.1] 2026-08-18

Fixed

Guard animation window access in non-browser runtimes.

AnimatePresence: Improved compat with React 19 strict mode.

[13.1.0] 2026-08-10

Added

Reorder: Multidimensional reorder.

Reorder: Automatic axis detection.

Reorder: RTL support.

Commits

0f1c119 v13.2.0
f73cbd7 Latest
d743b79 Latest
ce2719d Add WebGPURenderer TSL demo
b800e58 Add TSL uniform node support to Three.js animate
d60a956 Merge pull request #3800 from motiondivision/add-uniform-effect
a2d3227 Merge pull request #3799 from motiondivision/generator-filesize-optimisations
55c8f8e Remove redundant comment from inertia bounds check
84c2599 Add GPU adapter preview examples
7b0ac88 Create adapter MotionValues lazily
Additional commits viewable in compare view

Updates oxc-parser from 0.142.0 to 0.149.0

Release notes

Sourced from oxc-parser's releases.

oxc crates_v0.149.0

💥 BREAKING CHANGES

66744f0 parser: [BREAKING] Rename panicked to fatal_error in ParserReturn (#26382) (overlookmotel)

2c9a947 parser: [BREAKING] Reduce MAX_LEN to 256 bytes below u32::MAX (#26352) (overlookmotel)

🚀 Features

32bdc5b allocator: Construct ArenaHashSet with any Default hasher (#26372) (Dunqing)

a17de58 minifier: Process of return/throw in non last position and fix async * inlining (#26214) (Armano)

bfb4c57 parser: Distinguish unapplied no-side-effects comments (#26120) (碳苯 Carbon)

1d9b9d3 ast: Add GetNodeId trait (#26145) (camc314)

🐛 Bug Fixes

b156333 codegen: Order accessibility before abstract on accessors (

…dates Bumps the dev-tooling group with 15 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@commitlint/cli](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli) | `21.2.1` | `21.2.2` | | [@commitlint/config-conventional](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/config-conventional) | `21.2.0` | `21.2.2` | | [@hono/node-server](https://github.com/honojs/node-server) | `2.1.0` | `2.1.1` | | [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.101.4` | `5.102.8` | | [@tanstack/table-core](https://github.com/TanStack/table/tree/HEAD/packages/table-core) | `9.0.0` | `9.2.4` | | [hono](https://github.com/honojs/hono) | `4.13.0` | `4.13.7` | | [kysely](https://github.com/kysely-org/kysely) | `0.29.4` | `0.29.5` | | [lucide-preact](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-preact) | `1.28.0` | `1.43.0` | | [motion](https://github.com/motiondivision/motion) | `13.0.0` | `13.2.0` | | [oxc-parser](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.142.0` | `0.149.0` | | [oxc-transform](https://github.com/oxc-project/oxc/tree/HEAD/napi/transform) | `0.142.0` | `0.149.0` | | [tsdown](https://github.com/rolldown/tsdown) | `0.22.14` | `0.23.0` | | [turbo](https://github.com/vercel/turborepo) | `2.10.8` | `2.10.12` | | [yaml](https://github.com/eemeli/yaml) | `2.9.0` | `2.9.1` | | [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.6.1` | Updates `@commitlint/cli` from 21.2.1 to 21.2.2 - [Release notes](https://github.com/conventional-changelog/commitlint/releases) - [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/cli/CHANGELOG.md) - [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.2.2/@commitlint/cli) Updates `@commitlint/config-conventional` from 21.2.0 to 21.2.2 - [Release notes](https://github.com/conventional-changelog/commitlint/releases) - [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/config-conventional/CHANGELOG.md) - [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.2.2/@commitlint/config-conventional) Updates `@hono/node-server` from 2.1.0 to 2.1.1 - [Release notes](https://github.com/honojs/node-server/releases) - [Commits](honojs/node-server@v2.1.0...v2.1.1) Updates `@tanstack/react-query` from 5.101.4 to 5.102.8 - [Release notes](https://github.com/TanStack/query/releases) - [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md) - [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.102.8/packages/react-query) Updates `@tanstack/table-core` from 9.0.0 to 9.2.4 - [Release notes](https://github.com/TanStack/table/releases) - [Changelog](https://github.com/TanStack/table/blob/main/packages/table-core/CHANGELOG.md) - [Commits](https://github.com/TanStack/table/commits/@tanstack/table-core@9.2.4/packages/table-core) Updates `hono` from 4.13.0 to 4.13.7 - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.13.0...v4.13.7) Updates `kysely` from 0.29.4 to 0.29.5 - [Release notes](https://github.com/kysely-org/kysely/releases) - [Commits](kysely-org/kysely@v0.29.4...v0.29.5) Updates `lucide-preact` from 1.28.0 to 1.43.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.43.0/packages/lucide-preact) Updates `motion` from 13.0.0 to 13.2.0 - [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md) - [Commits](motiondivision/motion@v13.0.0...v13.2.0) Updates `oxc-parser` from 0.142.0 to 0.149.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/napi/parser/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/crates_v0.149.0/napi/parser) Updates `oxc-transform` from 0.142.0 to 0.149.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/napi/transform/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/crates_v0.149.0/napi/transform) Updates `tsdown` from 0.22.14 to 0.23.0 - [Release notes](https://github.com/rolldown/tsdown/releases) - [Commits](rolldown/tsdown@v0.22.14...v0.23.0) Updates `turbo` from 2.10.8 to 2.10.12 - [Release notes](https://github.com/vercel/turborepo/releases) - [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md) - [Commits](vercel/turborepo@v2.10.8...v2.10.12) Updates `yaml` from 2.9.0 to 2.9.1 - [Release notes](https://github.com/eemeli/yaml/releases) - [Commits](eemeli/yaml@v2.9.0...v2.9.1) Updates `zod` from 4.4.3 to 4.6.1 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.4.3...v4.6.1) --- updated-dependencies: - dependency-name: "@commitlint/cli" dependency-version: 21.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dev-tooling - dependency-name: "@commitlint/config-conventional" dependency-version: 21.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dev-tooling - dependency-name: "@hono/node-server" dependency-version: 2.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dev-tooling - dependency-name: "@tanstack/react-query" dependency-version: 5.102.8 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dev-tooling - dependency-name: "@tanstack/table-core" dependency-version: 9.2.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dev-tooling - dependency-name: hono dependency-version: 4.13.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dev-tooling - dependency-name: kysely dependency-version: 0.29.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dev-tooling - dependency-name: lucide-preact dependency-version: 1.43.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dev-tooling - dependency-name: motion dependency-version: 13.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dev-tooling - dependency-name: oxc-parser dependency-version: 0.149.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dev-tooling - dependency-name: oxc-transform dependency-version: 0.149.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dev-tooling - dependency-name: tsdown dependency-version: 0.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dev-tooling - dependency-name: turbo dependency-version: 2.10.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dev-tooling - dependency-name: yaml dependency-version: 2.9.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dev-tooling - dependency-name: zod dependency-version: 4.6.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dev-tooling ... Signed-off-by: dependabot[bot] <support@github.com>

vercel · 2026-09-14T22:20:28Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
slop-gate	Ready	Preview	Sep 14, 2026 10:20pm UTC

codspeed · 2026-09-14T22:22:41Z

Congrats! CodSpeed is installed 🎉

🆕 9 new benchmarks were detected.

You will start to see performance impacts in the reports once the benchmarks are run from your default branch.

Detected benchmarks

padEndDisplay to 100: 41.6 µs
truncateEnd to 40: 640.9 µs
40 lines: 147.5 µs
4000 lines: 9.1 ms
ascii: 81.5 µs
mixed: 472.7 µs
wide and emoji: 283.6 µs
40 lines: 333.8 µs
4000 lines: 1.4 ms

dependabot · 2026-09-21T22:19:55Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 14, 2026

dependabot Bot requested a review from misaon as a code owner September 14, 2026 22:20

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 14, 2026

vercel Bot deployed to Preview September 14, 2026 22:20 View deployment

dependabot Bot closed this Sep 21, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/dev-tooling-b18244d67d branch September 21, 2026 22:20

Navigation Menu

chore(deps): bump the dev-tooling group across 1 directory with 15 updates - #113

chore(deps): bump the dev-tooling group across 1 directory with 15 updates#113
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-tooling-b18244d67d

dependabot Bot commented on behalf of github Sep 14, 2026 •

edited

Loading

Uh oh!

vercel Bot commented Sep 14, 2026 •

edited

Loading

Uh oh!

codspeed Bot commented Sep 14, 2026

Detected benchmarks

Uh oh!

dependabot Bot commented on behalf of github Sep 21, 2026

Uh oh!

This branch was successfully deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v21.2.2

21.2.2 (2026-08-13)

Bug Fixes

Chore, docs, etc.

New Contributors

21.2.2 (2026-08-13)

v21.2.2

21.2.2 (2026-08-13)

Bug Fixes

Chore, docs, etc.

New Contributors

v21.2.1

21.2.0 (2026-06-30)

Features

Chore, doc, etc.

New Contributors

21.2.2 (2026-08-13)

v2.1.1

What's Changed

@​tanstack/react-query-devtools@​5.102.8

Patch Changes

@​tanstack/react-query-next-experimental@​5.102.8

Patch Changes

@​tanstack/react-query-persist-client@​5.102.8

Patch Changes

@​tanstack/react-query@​5.102.8

Patch Changes

@​tanstack/react-query-devtools@​5.102.7

Patch Changes

@​tanstack/react-query-next-experimental@​5.102.7

Patch Changes

@​tanstack/react-query-persist-client@​5.102.7

Patch Changes

@​tanstack/react-query@​5.102.7

Patch Changes

5.102.8

Patch Changes

5.102.7

Patch Changes

5.102.6

Patch Changes

5.102.5

Patch Changes

5.102.4

Patch Changes

5.102.3

Patch Changes

5.102.2

Patch Changes

@​tanstack/table-core@​9.2.4

Patch Changes

@​tanstack/table-core@​9.2.3

Patch Changes

@​tanstack/table-core@​9.1.2

Patch Changes

@​tanstack/table-core@​9.1.1

Patch Changes

@​tanstack/table-core@​9.1.0

Minor Changes

@​tanstack/table-core@​9.0.1

9.2.4

Patch Changes

9.2.3

Patch Changes

9.1.2

Patch Changes

9.1.1

Patch Changes

9.1.0

Minor Changes

9.0.1

v4.13.7

Security fixes

hono/jsx renders plain strings unescaped in boundary components, leading to XSS

v4.13.6

What's Changed

v4.13.5

dependabot Bot commented on behalf of github Sep 14, 2026 •

edited

Loading

`@tanstack/react-query-devtools@5`.102.8

`@tanstack/react-query-next-experimental@5`.102.8

`@tanstack/react-query-persist-client@5`.102.8

`@tanstack/react-query@5`.102.8

`@tanstack/react-query-devtools@5`.102.7

`@tanstack/react-query-next-experimental@5`.102.7

`@tanstack/react-query-persist-client@5`.102.7

`@tanstack/react-query@5`.102.7

`@tanstack/table-core@9`.2.4

`@tanstack/table-core@9`.2.3

`@tanstack/table-core@9`.1.2

`@tanstack/table-core@9`.1.1

`@tanstack/table-core@9`.1.0

`@tanstack/table-core@9`.0.1

`hono/jsx` renders plain strings unescaped in boundary components, leading to XSS

Incomplete fix for CVE-2026-39408: `toSSG()` still writes files outside the output directory

Unbounded dot-notation nesting in `parseBody()` can cause memory exhaustion

vercel Bot commented Sep 14, 2026 •

edited

Loading