Update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@astrojs/react (source)	3.6.2 -> 3.6.3
@astrojs/svelte (source)	5.7.2 -> 5.7.3
@astrojs/vue (source)	4.5.2 -> 4.5.3
@avaya/neo-react (source)	1.4.7 -> 1.4.24
@nanostores/react	0.8.0 -> 0.8.4
@testing-library/dom	10.4.0 -> 10.4.1
@testing-library/jest-dom	6.6.3 -> 6.9.1
@testing-library/react	16.0.1 -> 16.3.0
@testing-library/user-event	14.5.2 -> 14.6.1
@types/estree (source)	1.0.6 -> 1.0.8
@types/react (source)	18.3.12 -> 18.3.26
@types/react-dom (source)	18.3.1 -> 18.3.7
@vitejs/plugin-react (source)	4.3.3 -> 4.7.0
@vitest/coverage-v8 (source)	2.1.4 -> 2.1.9
@vitest/ui (source)	2.1.4 -> 2.1.9
astro (source)	4.16.9 -> 4.16.19
dayjs (source)	1.11.13 -> 1.11.18
fuse.js (source)	7.0.0 -> 7.1.0
html-react-parser	5.1.18 -> 5.2.7
nanostores	0.11.3 -> 0.11.4
octokit	4.0.2 -> 4.1.4
prism-react-renderer	2.4.0 -> 2.4.1
react-markdown	9.0.1 -> 9.1.0
svelte (source)	5.1.9 -> 5.41.2
typescript (source)	5.6.3 -> 5.9.3
vitest (source)	2.1.4 -> 2.1.9
vue (source)	3.5.12 -> 3.5.22

---

Release Notes

withastro/astro (@​astrojs/react)

v3.6.3

Compare Source

Patch Changes

• #​12481 8a46e80 Thanks @​marbrex! - Resolve vite peer dependency problem for strict package managers like Yarn in PnP mode.

withastro/astro (@​astrojs/svelte)

v5.7.3

Compare Source

Patch Changes

• #​12390 6fd3d59 Thanks @​bluwy! - Adds support for Svelte 5's new @render syntax while maintaining backward compatibility with traditional slots.

withastro/astro (@​astrojs/vue)

v4.5.3

Compare Source

Patch Changes

• #​12481 8a46e80 Thanks @​marbrex! - Resolve vite peer dependency problem for strict package managers like Yarn in PnP mode.

avaya-dux/neo-react-library (@​avaya/neo-react)

v1.4.20

Compare Source

v1.4.19

Compare Source

v1.4.18

Compare Source

v1.4.17

Compare Source

v1.4.16

Compare Source

v1.4.15

Compare Source

v1.4.12

Compare Source

v1.4.11

Compare Source

v1.4.10

Compare Source

v1.4.9

Compare Source

v1.4.8

Compare Source

nanostores/react (@​nanostores/react)

v0.8.4

Compare Source

• Fixed React 19 support (by @​Alqanar).

v0.8.3

Compare Source

• Clean package.json.

v0.8.2

Compare Source

• Fixed peer warning with React 19 RC (by @​aminabromand).

v0.8.1

Compare Source

• Fixed peer warning with React 19 RC (by @​aminabromand).

testing-library/dom-testing-library (@​testing-library/dom)

v10.4.1

Compare Source

Bug Fixes

• deps: replace chalk with picocolors (#​1341) (225a3e4)

testing-library/jest-dom (@​testing-library/jest-dom)

v6.9.1

Compare Source

Bug Fixes

• Fix undefined Node error (nodejs) (#​707) (0ff8904)

v6.9.0

Compare Source

Features

• Add .toAppearBefore/.toAppearAfter matcher (#​702) (95f870a)

v6.8.0

Compare Source

Features

• add toBePartiallyPressed matcher (#​203) (#​692) (779b712)

v6.7.0

Compare Source

Features

• add toBePressed matcher (#​203) (#​658) (cfdf8ae)

v6.6.4

Compare Source

Performance Improvements

• replace chalk with picocolors (#​659) (707e647)

testing-library/react-testing-library (@​testing-library/react)

v16.3.0

Compare Source

Features

• add bernardobelchior as a contributor for code, and doc (#​1391) (9fc6a75)

v16.2.0

Compare Source

Features

• Add support for React error handlers (#​1354) (9618c51)

v16.1.0

Compare Source

Features

• Add support for React 19 (#​1367) (85ac253)

testing-library/user-event (@​testing-library/user-event)

v14.6.1

Compare Source

Bug Fixes

• correct description for delay option (#​1175) (2edf14d)
• keyboard: add ContextMenu to defaultKeyMap (#​1079) (3e471d1)
• keyboard: add brackets to defaultKeyMap (#​1226) (543ecb0)
• keyboard: walk through radio group per arrow keys (#​1049) (bf8111c)
• pointer: dispatch mouse events if pointerdown is defaultPrevented (#​1121) (f681f7b)
• pointer: set button and buttons properties on PointerEvent (#​1219) (6614f72)
• pointer: use 1 as default value for PointerEvent.width and PointerEvent.height (#​1224) (f0468d0)
• prevent click event loop on form-associated custom element (#​1238) (465fc7e)
• prevent click event on non-focusable control (#​1130) (e429094)
• upload: apply accept filter more leniently (#​1064) (a344ad4)

v14.6.0

Compare Source

Features

• dispatch FocusEvent in hidden documents (#​1252) (1ed8b15)

Bug Fixes

• clipboard: await DataTransferItem.getAsString() callback (#​1251) (7b11b0e)
• event: assign pointer coords to MouseEvent (#​1039) (8528972)
• pointer: check PointerCoords.x in isDifferentPointerPosition (#​1216) (75edef5)
• pointer: check all fields of PointerCoords in isDifferentPointerPosition() (#​1229) (5f3d28f)

vitejs/vite-plugin-react (@​vitejs/plugin-react)

v4.7.0

Compare Source

Add HMR support for compound components (#​518)

HMR now works for compound components like this:

const Root = () => <div>Accordion Root</div>
const Item = () => <div>Accordion Item</div>

export const Accordion = { Root, Item }

Return Plugin[] instead of PluginOption[] (#​537)

The return type has changed from react(): PluginOption[] to more specialized type react(): Plugin[]. This allows for type-safe manipulation of plugins, for example:

// previously this causes type errors
react({ babel: { plugins: ['babel-plugin-react-compiler'] } })
  .map(p => ({ ...p, applyToEnvironment: e => e.name === 'client' }))

v4.6.0

Compare Source

Add raw Rolldown support

This plugin only worked with Vite. But now it can also be used with raw Rolldown. The main purpose for using this plugin with Rolldown is to use react compiler.

v4.5.2

Compare Source

Suggest @vitejs/plugin-react-oxc if rolldown-vite is detected #​491

Emit a log which recommends @vitejs/plugin-react-oxc when rolldown-vite is detected to improve performance and use Oxc under the hood. The warning can be disabled by setting disableOxcRecommendation: true in the plugin options.

Use optimizeDeps.rollupOptions instead of optimizeDeps.esbuildOptions for rolldown-vite #​489

This suppresses the warning about optimizeDeps.esbuildOptions being deprecated in rolldown-vite.

Add Vite 7-beta to peerDependencies range #​497

React plugins are compatible with Vite 7, this removes the warning when testing the beta.

v4.5.1

Compare Source

Add explicit semicolon in preambleCode #​485

This fixes an edge case when using HTML minifiers that strips line breaks aggressively.

v4.5.0

Compare Source

Add filter for rolldown-vite #​470

Added filter so that it is more performant when running this plugin with rolldown-powered version of Vite.

Skip HMR for JSX files with hooks #​480

This removes the HMR warning for hooks with JSX.

v4.4.1

Compare Source

Fix type issue when using moduleResolution: "node" in tsconfig #​462

v4.4.0

Compare Source

Make compatible with rolldown-vite

This plugin is now compatible with rolldown-powered version of Vite.
Note that currently the __source property value position might be incorrect. This will be fixed in the near future.

v4.3.4

Compare Source

Add Vite 6 to peerDependencies range

Vite 6 is highly backward compatible, not much to add!

Force Babel to output spec compliant import attributes #​386

The default was an old spec (with type: "json"). We now enforce spec compliant (with { type: "json" })

vitest-dev/vitest (@​vitest/coverage-v8)

v2.1.9

Compare Source

This release includes security patches for:

• Browser mode serves arbitrary files | CVE-2025-24963
• Remote Code Execution when accessing a malicious website while Vitest API server is listening | CVE-2025-24964

   🐞 Bug Fixes

• backport #​7317 to v2 - by @​hi-ogawa in #​7318
• (backport #​7340 to v2) restrict served files from /__screenshot-error - by @​hi-ogawa in #​7343

    View changes on GitHub

v2.1.8

Compare Source

   🐞 Bug Fixes

• Support Node 21  -  by @​sheremet-va (92f7a)

    View changes on GitHub

v2.1.7

Compare Source

   🐞 Bug Fixes

• Revert support for Vite 6  -  by @​sheremet-va (fbe5c)
  • This introduced some breaking changes (#​6992). We will enable support for it later. In the meantime, you can still use pnpm.overrides or yarn resolutions to override the vite version in the vitest package - the APIs are compatible.

    View changes on GitHub

v2.1.6

Compare Source

🚀 Features

• Support Vite 6

    View changes on GitHub

v2.1.5

Compare Source

   🐞 Bug Fixes

• dangerouslyIgnoreUnhandledErrors without base reporter  -  by @​AriPerkkio in #​6808 (0bf0a)
• Capture unhandledRejection even when base reporter is not used  -  by @​AriPerkkio in #​6812 (8878b)
• Don't change the working directory when loading workspace projects  -  by @​sheremet-va in #​6811 (f0aea)
• Remove sequence.concurrent from the RuntimeConfig type  -  by @​sheremet-va in #​6880 (6af73)
• Stop the runner before restarting, restart on workspace config change  -  by @​sheremet-va in #​6859 (b01df)
• Don't rerun on Esc or Ctrl-C during watch filter  -  by @​hi-ogawa in #​6895 (98f76)
• Print ssrTransform error  -  by @​hi-ogawa in #​6885 (4c96c)
• Throw an error and a warning if .poll, .element, .rejects/.resolves, and locator.* weren't awaited  -  by @​sheremet-va in #​6877 (93b67)
• browser:
  • Don't process the default css styles  -  by @​sheremet-va in #​6861 (0d67f)
  • Support non US key input  -  by @​hi-ogawa in #​6873 (5969d)
  • Stop the browser rpc when the pool is closed  -  by @​sheremet-va in #​6858 (9a0c9)
  • Init browsers eagerly when tests are running  -  by @​sheremet-va in #​6876 (417bd)
• coverage:
  • Report uncovered files when re-run by enter or 'a'  -  by @​AriPerkkio in #​6848 (487c8)
• ui:
  • Remove crossorigin attributes for same origin assets  -  by @​hi-ogawa in #​6883 (6e793)
• vite-node:
  • Improve esm check to decide external  -  by @​hi-ogawa in #​6816 (7e1fa)
  • Top-level throw in module is not reported properly  -  by @​vanaigr and @​hi-ogawa in #​6840 (cf0cb)
• vitest:
  • Use fetch() implementation from happy-dom  -  by @​capricorn86 in #​6879 (3c56f)

   🏎 Performance

• Limit workspace project concurrency to available cores  -  by @​sheremet-va in #​6869 (f4c04)

    View changes on GitHub

withastro/astro (astro)

v4.16.19

Compare Source

Patch Changes

• #​14241 760acc8 Thanks @​ematipico! - Fixes an issue where remote paths weren't correctly computed when generating assets

v4.16.18

Compare Source

Patch Changes

• #​12757 d0aaac3 Thanks @​matthewp! - Remove all assets created from the server build

• #​12757 d0aaac3 Thanks @​matthewp! - Clean server sourcemaps from static output

v4.16.17

Compare Source

Patch Changes

• #​12632 e7d14c3 Thanks @​ematipico! - Fixes an issue where the checkOrigin feature wasn't correctly checking the content-type header

v4.16.16

Compare Source

Patch Changes

• #​12542 65e50eb Thanks @​kadykov! - Fix JPEG image size determination

• #​12525 cf0d8b0 Thanks @​ematipico! - Fixes an issue where with i18n enabled, Astro couldn't render the 404.astro component for non-existent routes.

v4.16.15

Compare Source

Patch Changes

• #​12498 b140a3f Thanks @​ematipico! - Fixes a regression where Astro was trying to access Request.headers

v4.16.14

Compare Source

Patch Changes

• #​12480 c3b7e7c Thanks @​matthewp! - Removes the default throw behavior in astro:env

• #​12444 28dd3ce Thanks @​ematipico! - Fixes an issue where a server island hydration script might fail case the island ID misses from the DOM.

• #​12476 80a9a52 Thanks @​florian-lefebvre! - Fixes a case where the Content Layer glob() loader would not update when renaming or deleting an entry

• #​12418 25baa4e Thanks @​oliverlynch! - Fix cached image redownloading if it is the first asset

• #​12477 46f6b38 Thanks @​ematipico! - Fixes an issue where the SSR build was emitting the dist/server/entry.mjs file with an incorrect import at the top of the file/

• #​12365 a23985b Thanks @​apatel369! - Fixes an issue where Astro.currentLocale was not correctly returning the locale for 404 and 500 pages.

v4.16.13

Compare Source

Patch Changes

• #​12436 453ec6b Thanks @​martrapp! - Fixes a potential null access in the clientside router

• #​12392 0462219 Thanks @​apatel369! - Fixes an issue where scripts were not correctly injected during the build. The issue was triggered when there were injected routes with the same entrypoint and different pattern

v4.16.12

Compare Source

Patch Changes

• #​12420 acac0af Thanks @​ematipico! - Fixes an issue where the dev server returns a 404 status code when a user middleware returns a valid Response.

v4.16.11

Compare Source

Patch Changes

• #​12305 f5f7109 Thanks @​florian-lefebvre! - Fixes a case where the error overlay would not escape the message

• #​12402 823e73b Thanks @​ematipico! - Fixes a case where Astro allowed to call an action without using Astro.callAction. This is now invalid, and Astro will show a proper error.

  ---
  import { actions } from "astro:actions";
  
  -const result = actions.getUser({ userId: 123 });
  +const result = Astro.callAction(actions.getUser, { userId: 123 });
  ---

• #​12401 9cca108 Thanks @​bholmesdev! - Fixes unexpected 200 status in dev server logs for action errors and redirects.

v4.16.10

Compare Source

Patch Changes

• #​12311 bf2723e Thanks @​dinesh-58! - Adds checked to the list of boolean attributes.

• #​12363 222f718 Thanks @​Fryuni! - Fixes code generated by astro add command when adding a version of an integration other than the default latest.

• #​12368 493fe43 Thanks @​bluwy! - Improves error logs when executing commands

• #​12355 c4726d7 Thanks @​apatel369! - Improves error reporting for invalid frontmatter in MDX files during the astro build command. The error message now includes the file path where the frontmatter parsing failed.

iamkun/dayjs (dayjs)

v1.11.18

Compare Source

Bug Fixes

• error semantic-release dependency (8cfb313)

v1.11.17

Compare Source

Bug Fixes

• [en-AU] locale use the same ordinal as moment (#​2878) (1b95ecd)

v1.11.16

Compare Source

Bug Fixes

• test release workflow (no code changes) (c38c428)

v1.11.15

Compare Source

Bug Fixes

• Fix misspellings in Irish or Irish Gaelic [ga] (#​2861) (9c14a42)

v1.11.14

Compare Source

Bug Fixes

• .utcOffset(0, true) result and its clone are different bug (#​2505) (fefdcd4)

krisk/Fuse (fuse.js)

v7.1.0

Compare Source

Features

• add ignore diacritics (e0fcdb1)
• add option to ignore diacritics (fb012b7)

Bug Fixes

• remove console.log (1c749a3)
• typescript: clarify input to parseIndex ([72b6e25](https://redirect.github.com/krisk/Fuse/commit/72b6e25e14663cd

---

Configuration

📅 Schedule: Branch creation - "on monday before 5am" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

✨ Finishing touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch renovate/all-minor-patch

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}