chore(deps): update all non-major dependencies

Fix security warnings in external-editor

Released by SBoudrias on 5/31/2026

`@inquirer/prompts@8.5.2`

Fix security warnings in external-editor

Released by SBoudrias on 5/31/2026

`inquirer@14.0.1`

Rolled back mute-stream dependency from v4 to v3 to undo breaking compatible engines.
Added tooling to prevent regression of the above in the future. This surfaced our min engines already enforced a higher limit, so adjusted the explicit limits to match the current state.

Released by SBoudrias on 5/29/2026

microsoft/playwright (@playwright/test)

1.58.2 -> 1.61.1

Bug Fixes

#41365 [Bug]: Expect.Extend matcher with same name as default matcher in same expect instance overrides default matchers implementation to custom matcher
#41351 [Bug]: Playwright UI mode: apiRequestContext._wrapApiCall reports unexpected number of bytes (same test passes in headed mode)
#41360 [Bug]: Trace viewer: message times in websockets are downscaled by 1000
#41311 [Bug]: [Regression]: Sync loader throws "context.conditions?.includes is not a function" on Node 22.15
#41371 [Regression]: Sync ESM loader (registerHooks) fails to resolve extensionless .ts subpath imports across pnpm workspace symlinks

Released by dgozman on 6/23/2026

🔑 WebAuthn passkeys

New Credentials virtual authenticator, available via browserContext.credentials, lets tests register passkeys and answer navigator.credentials.create() / navigator.credentials.get() ceremonies in the page — no real hardware key required, works in all browsers:

const context = await browser.newContext();

// Seed a passkey your backend provisioned for a test user.
await context.credentials.create('example.com', {
  id: credentialId,
  userHandle,
  privateKey,
  publicKey,
});
await context.credentials.install();

const page = await context.newPage();
await page.goto('https://example.com/login');
// The page's navigator.credentials.get() is answered with the seeded passkey.

You can also let the app register a passkey once in a setup test, read it back with [credentials.get()](https://playwright.dev/docs/api/clas...

[View full release notes]

Released by dgozman on 6/15/2026

`v1.60.0`

🌐 HAR recording on Tracing

tracing.startHar() / tracing.stopHar() expose HAR recording as a first-class tracing API, with the same content, mode and urlFilter options as recordHar. The returned Disposable makes it easy to scope a recording with await using:

await using har = await context.tracing.startHar('trace.har');
const page = await context.newPage();
await page.goto('https://playwright.dev');
// HAR is finalized when `har` goes out of scope.

🪝 Drop API

New locator.drop() simulates an external drag-and-drop of files or clipboard-like data onto an element. Playwright dispatches dragenter, dragover, and drop with a synthetic [DataTransfer] in the page context — works cross-browser and is great for testi...

[View full release notes]

Released by yury-s on 5/11/2026

storybookjs/storybook (@storybook/react)

10.4.6 -> 10.5.3

`v10.6.0-alpha.2`

10.6.0-alpha.2

Search: Show docs stories as docs search result item instead of a story-group search result item - #35495, thanks kroeder!
TanStack: Keep Start's document shell out of stories - #35504, thanks unpunnyfuns!

Released by github-actions[bot] on 7/20/2026

`v10.5.3`

10.5.3

Dependencies: Upgrade TypeScript to 6.0.3 - #34971, thanks valentinpalkovic!

Released by github-actions[bot] on 7/20/2026

`v10.6.0-alpha.1`

10.6.0-alpha.1

Angular-Vite: Drop angular/platform-browser-dynamic peer dependency - #35457, thanks valentinpalkovic!
Angular-Vite: Widen TypeScript peer dependency range to support TypeScript 6 - #35455, thanks valentinpalkovic!
Dependencies: Upgrade TypeScript to 6.0.3 - #34971, thanks valentinpalkovic!
Init: Detect TanStack packages in peerdependencies - #34969, thanks huang-julien!
Manager API: Add experimental_setFilters batch API - #35413, thanks valentinpalkovic!
TanStack: Fix createServerFn validator mock - #35185, thanks [sjh9714](https:/...

[View full release notes]

Released by github-actions[bot] on 7/16/2026

storybookjs/storybook (@storybook/react-vite)

10.4.6 -> 10.5.3

`v10.6.0-alpha.2`

10.6.0-alpha.2

Search: Show docs stories as docs search result item instead of a story-group search result item - #35495, thanks kroeder!
TanStack: Keep Start's document shell out of stories - #35504, thanks unpunnyfuns!

Released by github-actions[bot] on 7/20/2026

`v10.5.3`

10.5.3

Dependencies: Upgrade TypeScript to 6.0.3 - #34971, thanks valentinpalkovic!

Released by github-actions[bot] on 7/20/2026

`v10.6.0-alpha.1`

10.6.0-alpha.1

Angular-Vite: Drop angular/platform-browser-dynamic peer dependency - #35457, thanks valentinpalkovic!
Angular-Vite: Widen TypeScript peer dependency range to support TypeScript 6 - #35455, thanks valentinpalkovic!
Dependencies: Upgrade TypeScript to 6.0.3 - #34971, thanks valentinpalkovic!
Init: Detect TanStack packages in peerdependencies - #34969, thanks huang-julien!
Manager API: Add experimental_setFilters batch API - #35413, thanks valentinpalkovic!
TanStack: Fix createServerFn validator mock - #35185, thanks [sjh9714](https:/...

[View full release notes]

Released by github-actions[bot] on 7/16/2026

DefinitelyTyped/DefinitelyTyped (@types/vscode)

1.109.0 -> 1.125.0

TypeScript definitions for vscode

stacksjs/dtsx (bun-plugin-dtsx)

0.11.1 -> 0.21.17

A Bun Bundler plugin that auto generates your DTS types extremely fast.

capricorn86/happy-dom (happy-dom)

20.10.6 -> 20.11.1

`v20.11.1`

:construction_worker_man: Patch fixes

Improve performance of query selectors by avoiding construction of DOMException when not needed - By @cyfung1031 in task #2228

Released by github-actions[bot] on 7/22/2026

`v20.11.0`

:art: Features

Adds support for CookieStore API - By TrevorBurnham in task #1864
Adds support for Element.checkVisibility() - By capricorn86 in task #1506

Released by github-actions[bot] on 7/18/2026

sindresorhus/ora (ora)

9.3.0 -> 9.4.1

`v9.4.1`

https://github.com/sindresorhus/ora/compare/v9.4.0...v9.4.1

Fix type definitions (#257) 431ebc4
Fix failText type to accept unknown instead of Error, matching the actual promise rejection value bc3a283

Released by sindresorhus on 6/22/2026

`v9.4.0`

https://github.com/sindresorhus/ora/compare/v9.3.0...v9.4.0

Add successSymbol and failSymbol options to oraPromise 3d2e0a9

Released by sindresorhus on 4/22/2026

storybookjs/storybook (storybook)

10.4.6 -> 10.5.3

Storybook: Develop, document, and test UI components in isolation

davidmyersdev/vite-plugin-node-polyfills (vite-plugin-node-polyfills)

0.25.0 -> 0.28.0

`v0.28.0`

Normalize trailing slashes (fix for Vite 8)
Run unit tests against Vite 8 & Vitest 4 in CI
Update @playwright/test

Released by davidmyersdev on 5/18/2026

`v0.27.0`

Use inject plugin instead of esbuild.banner (thanks to sapphi-red)

Released by davidmyersdev on 5/15/2026

`v0.26.0`

Add support for Vite v8 (thanks to sapphi-red)

Released by davidmyersdev on 3/29/2026

solana-program/token-2022 (@solana/spl-token)

0.4.14 -> 0.4.15

`js@v0.13.0`

What's new

Publish js@v0.13.0 by github-actions[bot]
Bump JS client to solana/kit v7 (#1308) by lorisleiva
Upgrade TypeScript to 6.0 (both clients) (#1283) by clankmaxxing-clod
Update solana/sysvars peer dependency (#1277) by AnAllergyToAnalogy
Derive confidential transfer auditor from mint (#1269) by catmcgee
Add confidential balance and empty account helpers (#1267) by catmcgee

Released by github-actions[bot] on 7/15/2026

`js-legacy@v0.4.15`

What's new

Publish js-legacy@v0.4.15 by github-actions[bot]
Update package.json for trusted publishing (#1303) by joncinque
Upgrade TypeScript to 6.0 (both clients) (#1283) by clankmaxxing-clod
Decode instructions with optional COption fields when data is zero-padded (#1017) by babuClawd
Add permissioned burn extension (#818) by Szegoo
Fix typo in isUiAmountToAmountInstruction function name (#903) by XD637
Add unwrap_lamports instruction (#857) by abelmarnk
Update files with new info (#774) by joncinque

Released by github-actions[bot] on 7/9/2026

`interface@v3.1.1`

What's new

Add support for mixed proof locations for confidential mint burn instruction constructors (#1263) by samkim-crypto

Released by joncinque on 6/26/2026

stacksjs/clapp (@stacksjs/clapp)

0.2.10 -> 0.2.12

`v0.2.12`

Released by github-actions[bot] on 7/21/2026

`v0.2.11`

Released by github-actions[bot] on 7/21/2026

DefinitelyTyped/DefinitelyTyped (@types/bun)

1.3.9 -> 1.3.14

TypeScript definitions for bun

vuejs/test-utils (@vue/test-utils)

2.4.6 -> 2.4.11

`v2.4.11`

compare changes

🩹 Fixes

Drop legacy Mutation Event listener entries (#2844)
Handle setData() correctly for components using both setup() and data() (#2846)
Export GlobalMountOptions type (#2851)
Set spec-compliant event.code on keydown/keyup (#2850)

❤️ Contributors

Cédric Exbrayat ([cexbrayat](https://github.com/cexbrayat))
Renato de Leão ([renatodeleao](https://github.com/renatodeleao))
Matt Van Horn ([mvanhorn](https://github.com/mvanhorn))
Carsten Brachem ([cbrachem](https://github.com/cbrachem))
Ahmad Hanan ([AhmadHannan037](https://github.com/AhmadHannan037))
Paul Cochrane ([[paultcochrane](htt...

[View full release notes]

Released by cexbrayat on 6/4/2026

`v2.4.10`

compare changes

🩹 Fixes

Restore text()/html() for single-root components (#2835)

❤️ Contributors

Cédric Exbrayat (cexbrayat)
Lorenz van Herwaarden (lorenzvanherwaarden)

Released by cexbrayat on 5/12/2026

`v2.4.9`

compare changes

🩹 Fixes

Tolerate duplicate attachTo cleanup (#2830)

📖 Documentation

Document release process (#2834)

🏡 Chore

Migrate renovate config (5d37934)

🤖 CI

Pin github actions to commit hashes (75dcef3)

❤️ Contributors

Cédric Exbrayat (cexbrayat)
Daniel Roe (danielroe)

Released by danielroe on 4/27/2026

stacksjs/better-dx (better-dx)

0.2.15 -> 0.2.20

`v0.2.20`

Released by github-actions[bot] on 7/21/2026

`v0.2.19`

Released by github-actions[bot] on 7/16/2026

`v0.2.18`

Released by github-actions[bot] on 7/15/2026

stacksjs/bunfig (bunfig)

0.15.14 -> 0.15.15

`v0.15.15`

Released by github-actions[bot] on 7/16/2026

vuejs/core (vue)

3.5.39 -> 3.5.40

`v3.6.0-rc.2`

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Released by github-actions[bot] on 7/22/2026

`v3.6.0-rc.1`

Vue 3.6 is now entering the RC phase as we have completed the intended feature set for Vapor Mode.

3.6 also includes a major refactor of @vue/reactivity based on alien-signals, which significantly improves the reactivity system's performance and memory usage.

For more details about Vapor Mode, see the About Vapor Mode section later in this release note.

Bug Fixes

hydration: avoid resolving inherited fallback in forwarded slots (4c215b5)
hydration: remove adopted SSR DOM for unresolved async setup (3859af4)
runtime-vapor: avoid patching invalid VNode slot content (25f5a8a)
runtime-vapor: clean up detached slot branches ([b41009d](https://github.com...

[View full release notes]

Released by github-actions[bot] on 7/18/2026

`v3.5.40`

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Released by github-actions[bot] on 7/16/2026

vuejs/language-tools (vue-tsc)

3.3.7 -> 3.3.8

`v3.3.8`