ℹ️ Note
This PR body was truncated due to platform limits.
This PR contains the following updates:
Release Notes
tailwindlabs/tailwindcss (@​tailwindcss/postcss)
v4.2.3
Fixed
- Canonicalization: improve canonicalizations for
tracking-*utilities by preferring non-negative utilities (e.g.-tracking-tighter→tracking-wider) (#19827) - Fix crash due to invalid characters in candidate (exceeding valid unicode code point range) (#19829)
- Ensure query params in imports are considered unique resources when using
@tailwindcss/webpack(#19723) - Canonicalization: collapse arbitrary values into shorthand utilities (e.g.
px-[1.2rem] py-[1.2rem]→p-[1.2rem]) (#19837) - Canonicalization: collapse
border-{t,b}-*intoborder-y-*,border-{l,r}-*intoborder-x-*, andborder-{t,r,b,l}-*intoborder-*(#19842) - Canonicalization: collapse
scroll-m{t,b}-*intoscroll-my-*,scroll-m{l,r}-*intoscroll-mx-*, andscroll-m{t,r,b,l}-*intoscroll-m-*(#19842) - Canonicalization: collapse
scroll-p{t,b}-*intoscroll-py-*,scroll-p{l,r}-*intoscroll-px-*, andscroll-p{t,r,b,l}-*intoscroll-p-*(#19842) - Canonicalization: collapse
overflow-{x,y}-*intooverflow-*(#19842) - Canonicalization: collapse
overscroll-{x,y}-*intooverscroll-*(#19842) - Read from
--placeholder-colorinstead of--background-colorforplaceholder-*utilities (#19843) - Upgrade: ensure files are not emptied out when killing the upgrade process while it's running (#19846)
- Upgrade: use
config.contentwhen migrating from Tailwind CSS v3 to Tailwind CSS v4 (#19846) - Upgrade: never migrate files that are ignored by git (#19846)
- Add
.envand.env.*to default ignored content files (#19846) - Canonicalization: migrate
overflow-ellipsisintotext-ellipsis(#19849) - Canonicalization: migrate
start-full→inset-s-full,start-auto→inset-s-auto,start-px→inset-s-px, andstart-<number>→inset-s-<number>as well as negative versions (#19849) - Canonicalization: migrate
end-full→inset-e-full,end-auto→inset-e-auto,end-px→inset-e-px, andend-<number>→inset-e-<number>as well as negative versions (#19849) - Canonicalization: move the
-sign inside the arbitrary value-left-[9rem]→left-[-9rem](#19858) - Canonicalization: move the
-sign outside the arbitrary valueml-[calc(-1*var(--width))]→-ml-(--width)(#19858) - Improve performance when scanning JSONL / NDJSON files (#19862)
- Support
NODE_PATHenvironment variable in standalone CLI (#19617)
v4.2.2
Fixed
- Don't crash when candidates contain prototype properties like
row-constructor(#19725) - Canonicalize
calc(var(--spacing)*…)expressions into--spacing(…)(#19769) - Fix crash in canonicalization step when handling utilities containing
@propertyat-rules (e.g.shadow-sm border) (#19727) - Skip full reload for server only modules scanned by client CSS when using
@tailwindcss/vite(#19745) - Add support for Vite 8 in
@tailwindcss/vite(#19790) - Improve canonicalization for bare values exceeding default spacing scale suggestions (e.g.
w-1234 h-1234→size-1234) (#19809) - Fix canonicalization resulting in empty list (e.g.
w-5 h-5 size-5→''instead ofsize-5) (#19812)
vitejs/vite-plugin-vue (@​vitejs/plugin-vue)
v6.0.6
Features
Bug Fixes
Miscellaneous Chores
v6.0.5
Miscellaneous Chores
v6.0.4
Bug Fixes
- deps: update all non-major dependencies (#709) (924b28e)
- deps: update all non-major dependencies (#722) (8a95809)
- deps: update all non-major dependencies (#726) (e69d751)
Miscellaneous Chores
- add metadata for vite-plugin-registry (#730) (239eb6a)
- deps: update dependency rollup to ^4.57.1 (#733) (cd0c8a8)
- deps: update upstream (#727) (fa3ea0e)
v6.0.3
Features
- add Vite 8 support (2080d41)
Bug Fixes
- deps: update all non-major dependencies (#707) (799f419)
- hmr: reload when components switch between vapor and vdom (#714) (6c45fe5)
Performance Improvements
Miscellaneous Chores
v6.0.2
Bug Fixes
- deps: update all non-major dependencies (#643) (b702c1f)
- deps: update all non-major dependencies (#653) (c6bd324)
- deps: update all non-major dependencies (#663) (dbcd1d0)
- deps: update all non-major dependencies (#665) (428dde0)
- deps: update all non-major dependencies (#671) (59e0a51)
- deps: update all non-major dependencies (#679) (f226dab)
- deps: update all non-major dependencies (#685) (d990206)
- deps: update all non-major dependencies (#688) (46edd7e)
- deps: update all non-major dependencies (#692) (13accf3)
- deps: update all non-major dependencies (#694) (9c77f01)
- deps: update all non-major dependencies (#704) (ecb581a)
- fix hmr of dynamically loaded vue sfc modules in apps with tailwind (#702) (0a883f7)
Miscellaneous Chores
- deps: update dependency rollup to ^4.52.3 (#674) (dd91393)
- deps: update dependency rollup to ^4.52.5 (#684) (a291b66)
- deps: update dependency rollup to ^4.53.1 (#695) (0b238ea)
- deps: update dependency rollup to ^4.53.2 (#703) (847808f)
- deps: update upstream (#638) (f7cef18)
- deps: update upstream (#642) (be57955)
- deps: update upstream (#652) (3030263)
- deps: update upstream (#666) (e6ece54)
- deps: update upstream (#670) (5d3313f)
- deps: update upstream (#678) (3f0593f)
actions/cache (actions/cache)
v5.0.5
What's Changed
- Update ts-http-runtime dependency by @yacaovsnc in #1747
Full Changelog: https://github.com/actions/cache/compare/v5...v5.0.5
v5.0.4
actions/checkout (actions/checkout)
v5.0.1
What's Changed
- Port v6 cleanup to v5 by @ericsciple in #2301
Full Changelog: https://github.com/actions/checkout/compare/v5...v5.0.1
eslint/eslint (eslint)
v9.39.4
Bug Fixes
f18f6c8fix: update dependency minimatch to ^3.1.5 (#20564) (Milos Djermanovic)a3c868ffix: update dependency @eslint/eslintrc to ^3.3.4 (#20554) (Milos Djermanovic)234d005fix: minimatch security vulnerability patch for v9.x (#20549) (Andrej Beles)b1b37eefix: updateajvto6.14.0to address security vulnerabilities (#20538) (루밀LuMir)
Documentation
Chores
b8b4eb1chore: update dependencies for ESLint v9.39.4 (#20596) (Francesco Trotta)71b2f6bchore: package.json update for @eslint/js release (Jenkins)1d16c2fci: pin Node.js 25.6.1 (#20563) (Milos Djermanovic)
v9.39.3
Bug Fixes
Chores
8594a43chore: upgrade @eslint/js@9.39.3 (#20529) (Milos Djermanovic)9ceef92chore: package.json update for @eslint/js release (Jenkins)af498c6chore: ignore/docs/v9.xin link checker (#20453) (Milos Djermanovic)
v9.39.2
vercel/next.js (eslint-config-next)
v16.2.4
v16.2.3
v16.2.2
v16.2.1
[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.
Core Changes
- docs: post release amends (#91715)
- docs: fix broken Activity Patterns demo link in preserving UI state guide (#91698)
- Fix adapter outputs for dynamic metadata routes (#91680)
- Turbopack: fix webpack loader runner layer (#91727)
- Fix server actions in standalone mode with
cacheComponents(#91711) - turbo-persistence: remove Unmergeable mmap advice (#91713)
- Fix layout segment optimization: move app-page imports to server-utility transition (#91701)
- Turbopack: lazy require metadata and handle TLA (#91705)
- [turbopack] Respect
{eval:true}in worker_threads constructors (#91666)
Credits
Huge thanks to @icyJoseph, @abhishekmardiya, @ijjk, @mischnic, @unstubbable, @sokra, and @lukesandberg for helping!
v16.2.0
v16.1.7
oven-sh/setup-bun (oven-sh/setup-bun)
v2.2.0
oven-sh/setup-bun is the github action for setting up Bun.
What's Changed
- build: update action runtime to Node.js 24 by @adam0white in #176
- ci: use
actions/checkout@v6.0.2in the test workflow by @tcely in #173 - ci: update actions for the
autofix.ciworkflow by @tcely in #174 - ci: update actions for the
Release new action versionworkflow by @tcely in #175 - release: v2.2.0 by @xhyrom in #177
New Contributors
- @adam0white made their first contribution in #176
- @tcely made their first contribution in #173
Full Changelog: https://github.com/oven-sh/setup-bun/compare/v2...v2.2.0
v2.1.3
oven-sh/setup-bun is the github action for setting up Bun.
What's Changed
- perf: avoid unnecessary api calls by @xhyrom in #161
- feat: add bun- prefix to cache keys by @maschwenk in #160
- fix: use native Windows ARM64 binary for Bun >= 1.3.10 by @oddrationale in #165
- feat: add AVX2 support detection for x64 Linux systems by @GoForceX in #167
- fix: validate cached binary version matches requested version (#146) by @wyMinLwin in #169
- release: v2.1.3 by @xhyrom in #170
New Contributors
- @oddrationale made their first contribution in #165
- @GoForceX made their first contribution in #167
- @wyMinLwin made their first contribution in #169
Full Changelog: https://github.com/oven-sh/setup-bun/compare/v2...v2.1.3
v2.1.2
oven-sh/setup-bun is the github action for setting up Bun.
What's Changed
Full Changelog: https://github.com/oven-sh/setup-bun/compare/v2...v2.1.2
v2.1.1
oven-sh/setup-bun is the github action for setting up Bun.
What's Changed
- feat: implement wildcard resolution into the action by @xhyrom in #93
- feat: fallback arm64 to x64 architecture for win32 platform by @xhyrom in #131
- feat: use packageManager from package.json as default bun version by @xhyrom in #152
- bump the
form-datadependency to version v4.0.5 due to https://github.com/advisories/GHSA-fjxv-7rqg-78g4 by @Jarred-Sumner
Full Changelog: https://github.com/oven-sh/setup-bun/compare/v2.1.0...v2.1.1
v2.1.0
oven-sh/setup-bun is the github action for setting up Bun.
What's Changed
- chore: add settings for vscode by @okineadev in #120
- feat: support for multiple registries by @xhyrom in #109
- feat: read engines from package json by @xhyrom in #132
- ci: disable tests with version selectors by @xhyrom in #133
- chore(ci): Pin GitHub Actions to SHA-1s by @dgilmanuni in #140
- feat: Check for existing bun before downloading by @erikaxel in #138
- docs: restore missing
no-cacheinput by @bashonly in #149 - release: v2.1.0 by @xhyrom in #151
New Contributors
- @dgilmanuni made their first contribution in #140
- @erikaxel made their first contribution in #138
- @bashonly made their first contribution in #149
Full Changelog: https://github.com/oven-sh/setup-bun/compare/v2...v2.1.0
facebook/react (react)
v19.2.5: 19.2.5 (April 8th, 2026)
React Server Components
- Add more cycle protections (#36236 by @eps1lon and @unstubbable)
v19.2.4: 19.2.4 (January 26th, 2026)
React Server Components
- Add more DoS mitigations to Server Actions, and harden Server Components (#35632 by @gnoff, @lubieowoce, @sebmarkbage, @unstubbable)
v19.2.3: 19.2.3 (December 11th, 2025)
React Server Components
- Add extra loop protection to React Server Functions (@sebmarkbage #35351)
v19.2.2: 19.2.2 (December 11th, 2025)
React Server Components
- Move
react-server-dom-webpack/*.unbundledto privatereact-server-dom-unbundled(@eps1lon #35290) - Patch Promise cycles and toString on Server Functions (@sebmarkbage, @unstubbable #35289)
v19.2.1: 19.2.1 (December 3rd, 2025)
React Server Components
- Bring React Server Component fixes to Server Actions (@sebmarkbage #35277)
shivammathur/setup-php (shivammathur/setup-php)
v2.37.0
Changelog
Updated the action to use Node.js 24. (#1049)
Added support for
masterin thephp-versioninput. It should now set up a nightly build from the master branch ofphp-src.Added support to install
ioncubeandzephir_parserextensions on PHP 8.5.Expanded support for installing extensions using Homebrew on macOS from the
shivammathur/homebrew-extensionstap. This includespdo_firebird,sqlsrv,pdo_sqlsrv,pecl_http,swow,xhprof, and several other supported extensions.Improved switching PHP versions on Linux. Missing alternatives should now be registered automatically before switching versions. #1067
Improved support for Homebrew on macOS. It should now retry stuck
brewcommands with an inactivity watchdog.Improved support for adding tools. It should now correctly use the latest release download URL when a version is not specified. (#1064)
Improved tool setup and caching on self-hosted runners.
Improved support for
sqlsrvandpdo_sqlsrvon PHP 8.1 and 8.2.Fixed installing
pecl_httpon Windows. Switched todownloads.php.netfor fixingICUversion post install.Fixed cached
couchbaseinstalls on macOS using theshivammathur/cache-extensionsaction.Replaced
@actions/corewith local functions to reduce bundle size.Refactored to use ES2024+ features for Node 24.
Updated actions used in examples to their latest versions.
Updated Node.js dependencies.
Thanks @theluckystrike for the contribution 🎉
Thanks @code-kudu, @ssddanbrown, @RoundingWell, and @ntzrbtr for the sponsorship ❤️
For the complete list of changes, please refer to the Full Changelog
vuejs/core (vue)
v3.5.32
Bug Fixes
- runtime-core: prevent currentInstance leak into sibling render during async setup re-entry (#14668) (f166353), closes #14667
- teleport: handle updates before deferred mount (#14642) (32b44f1), closes #14640
- types: allow customRef to have different getter/setter types (#14639) (e20ddb0)
- types: use private branding for shallowReactive (#14641) (302c47a), closes #14638 #14493
Reverts
- Revert "fix(server-renderer): cleanup component effect scopes after SSR render" (#14674) (219d83b), closes #14674 #14669
v3.5.31
Bug Fixes
- compiler-sfc: allow Node.js subpath imports patterns in asset urls (#13045) (95c3356), closes #9919
- compiler-sfc: support template literal as defineModel name (#14622) (bd7eef0), closes #14621
- reactivity: normalize toRef property keys before dep lookup + improve types (#14625) (1bb28d0), closes #12427 #12431
- runtime-core: invalidate detached v-for memo vnodes after unmount (#14624) (560def4), closes #12708 #12710
- runtime-core: preserve nullish event handlers in mergeProps ([#14550](https:/
Configuration
📅 Schedule: (UTC)
- Branch creation
- At any time (no schedule defined)
- Automerge
- At any time (no schedule defined)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
- If you want to rebase/retry this PR, check this box
This PR was generated by Mend Renovate. View the repository job log.