chore(deps): bump the bun-minor-patch group across 1 directory with 33 updates

[dependabot]

Bumps the bun-minor-patch group with 32 updates in the / directory:

Package	From	To
@types/bun	1.4.0	1.4.2
@changesets/changelog-github	1.0.0	1.0.1
@changesets/cli	3.0.1	3.0.2
puppeteer-core	25.9.0	25.10.0
@types/node	26.4.0	26.5.1
posthog-js	1.422.1	1.429.1
react	19.2.8	19.3.0
@types/react	19.2.18	19.3.0
react-dom	19.2.8	19.3.0
@types/react-dom	19.2.5	19.3.0
tsdown	0.22.14	0.23.0
@react-email/ui	6.9.3	6.9.5
react-email	6.9.3	6.9.5
resend	6.24.0	6.27.0
maplibre-gl	6.6.0	6.9.0
react-map-gl	8.1.2	8.1.3
@upstash/redis	1.38.3	1.38.4
dompurify	3.4.13	3.4.15
@base-ui/react	1.7.0	1.8.0
react-resizable-panels	4.12.3	4.12.4
@biomejs/biome	2.5.10	2.5.12
@chromatic-com/storybook	5.3.0	5.3.1
@storybook/addon-a11y	10.5.10	10.6.0
@storybook/addon-docs	10.5.10	10.6.0
@storybook/addon-links	10.5.10	10.6.0
@storybook/nextjs-vite	10.5.10	10.6.0
chromatic	18.6.1	18.7.4
cspell	10.1.1	10.3.0
knip	6.32.3	6.35.1
lint-staged	17.4.1	17.5.0
storybook	10.5.10	10.6.0
wrangler	4.127.0	4.130.0

Updates @types/bun from 1.4.0 to 1.4.2

Commits

• See full diff in compare view

Updates @changesets/changelog-github from 1.0.0 to 1.0.1

Release notes

Sourced from @​changesets/changelog-github's releases.

@​changesets/changelog-github@​1.0.1

Patch Changes

• Updated dependencies [4d7b4fb]:
  • @​changesets/get-github-info@​1.0.1

Changelog

Sourced from @​changesets/changelog-github's changelog.

1.0.1

Patch Changes

• Updated dependencies [4d7b4fb]:
  • @​changesets/get-github-info@​1.0.1

Commits

• d7e4a2d Version Packages (#2266)
• See full diff in compare view

Updates @changesets/cli from 3.0.1 to 3.0.2

Release notes

Sourced from @​changesets/cli's releases.

@​changesets/cli@​3.0.2

Patch Changes

• #2270 a0a4dc6 Thanks @​bluwy! - Add review message on pre exit
• Updated dependencies [1f4eb61, 059f70a]:
  • @​changesets/apply-release-plan@​8.1.0
  • @​changesets/git@​4.0.1
  • @​changesets/read@​1.0.1

Changelog

Sourced from @​changesets/cli's changelog.

3.0.2

Patch Changes

• #2270 a0a4dc6 Thanks @​bluwy! - Add review message on pre exit
• Updated dependencies [1f4eb61, 059f70a]:
  • @​changesets/apply-release-plan@​8.1.0
  • @​changesets/git@​4.0.1
  • @​changesets/read@​1.0.1

Commits

• d7e4a2d Version Packages (#2266)
• 68affee Upgrade to Vitest 5 (#2281)
• 5eeb012 Build(deps): Bump human-id in the production-dependencies group (#2279)
• a0a4dc6 Add review message on pre exit (#2270)
• 1f4eb61 Add default changelog message for empty release (#2265)
• 2eb65ba Add script to run unit and e2e tests separately (#2267)
• ff2b075 Build(deps-dev): Bump @​lydell/node-pty (#2254)
• 8eff462 Build(deps-dev): Bump the development-dependencies group across 1 directory w...
• See full diff in compare view

Updates puppeteer-core from 25.9.0 to 25.10.0

Release notes

Sourced from puppeteer-core's releases.

puppeteer-core: v25.10.0

25.10.0 (2026-09-03)

🎉 Features

• implement video-stream-based screen recording via page.record() (#15387) (f6d5e28)
• roll to Firefox 155.0 (#15408) (ed544f7)

🛠️ Fixes

• detect a websocket connection that died without a close (#15406) (8c3576b)
• distinguish an unwritable userDataDir from a running browser (#15405) (b464f6d)
• do not miss the first screencast frame while startScreencast is in flight (#15389) (1969426)
• roll to Chrome 152.0.7977.64 (#15395) (974e536)
• roll to Chrome 152.0.7977.75 (#15409) (89f3f18)
• roll to Firefox 154.0.1 (#15397) (8ac76fd)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • @​puppeteer/browsers bumped from 3.2.1 to 3.2.2

Commits

• 88b517a chore: release main (#15396)
• a84b032 fix: revert launch browsers in detached mode on Windows to fix flakiness (#15...
• 7a17a9a chore(deps): bump the all group across 1 directory with 2 updates (#15368)
• 4ff495d test: explain the CDP-only mouse expectations (#15380)
• c3ca313 test: update webmcp-types dep and simplify execute handler signatures (#15414)
• 8ca9ab4 chore(deps-dev): bump browserslist from 4.28.4 to 4.28.8 (#15413)
• 3744bad chore(deps-dev): bump @​humanfs/node from 0.16.7 to 0.16.8 (#15412)
• 051c195 chore(deps): bump fast-uri from 3.1.5 to 3.1.7 in /website (#15411)
• 89f3f18 fix: roll to Chrome 152.0.7977.75 (#15409)
• ed544f7 feat: roll to Firefox 155.0 (#15408)
• Additional commits viewable in compare view

Updates @types/node from 26.4.0 to 26.5.1

Commits

• See full diff in compare view

Updates posthog-js from 1.422.1 to 1.429.1

Release notes

Sourced from posthog-js's releases.

posthog-js@1.429.1

1.429.1

Patch Changes

• #4861 61b92f9 Thanks @​pauldambra! - Disable browser autofill on input and textarea fields during session replay. (2026-09-09)

posthog-js@1.429.0

1.429.0

Minor Changes

• #4707 b441eb2 Thanks @​posthog! - Segment integration: allow segment to accept an integration config with filterProperties, so customers can filter PostHog-generated enrichment properties before Segment sends an event to its destinations. Returning null or throwing leaves the original Segment event unenriched. (2026-09-09)

Patch Changes

• #4876 0c2a15f Thanks @​dustinbyrne! - Fix dead-click detection for text selection and editable caret gestures when mouse release is delayed, while continuing to report inert text clicks. (2026-09-09)

• #4733 24fa541 Thanks @​dustinbyrne! - fix(web): avoid reporting clicks that select or unselect text as dead clicks (2026-09-09)

• #4882 4bd37b7 Thanks @​lucasheriques! - Fix TypeScript compatibility between public replay events and the replay player. (2026-09-09)

• #4833 f1395b6 Thanks @​posthog! - Keep surveys hidden while capture is disabled and preserve answers if capture stops before submission. (2026-09-09)

• Updated dependencies [0c2a15f, 24fa541, b441eb2]:

  • @​posthog/types@​1.410.0

posthog-js@1.428.11

1.428.11

Patch Changes

• #4725 d5abece Thanks @​bs1180! - fix(surveys): don't show the default "Start typing..." placeholder when the survey's placeholder text is empty (2026-09-09)

posthog-js@1.428.10

1.428.10

Patch Changes

• #4869 891eefa Thanks @​robbie-c! - Apply replay URL privacy settings to URL values in captured JSON-LD payloads. (2026-09-09)
• Updated dependencies [891eefa, 891eefa]:
  • @​posthog/types@​1.409.4
  • @​posthog/core@​1.52.0

... (truncated)

Commits

• 66e0888 chore: update versions and lockfile [version bump]
• 61b92f9 fix(replay): disable autofill on inputs rebuilt for replay (#4861)
• b867751 chore: update versions and lockfile [version bump]
• 4bd37b7 fix(replay): restore public event type compatibility (#4882)
• 0c2a15f fix(browser): correlate meaningful selection with mouse gestures (#4876)
• 24fa541 fix(browser): avoid dead clicks when changing text selection (#4733)
• 272b75b build(rrweb): make semantic checks explicit in every build (#4873)
• 4a4a654 build(rrweb): generate all production declarations with Oxc (#4874)
• f1395b6 fix(surveys): hide surveys while capture is disabled (#4833)
• 2fad74b fix(ai): hold stale prompts on a cooldown after a failed refetch (#4775)
• Additional commits viewable in compare view

Updates react from 19.2.8 to 19.3.0

Release notes

Sourced from react's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

• <ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@​sebmarkbage, @​jackpope, @​gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)
• Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@​jackpope, @​sebmarkbage, @​eps1lon, @​Dhakshin2007, @​chirokas, @​teamleaderleo, @​fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

• browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
  • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

• Enable Trusted Types API integration (@​rickhanlonii #35816)
• Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@​acdlite #37290)
• Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@​hoxyq, @​eps1lon: #37104, #37203, #37491)

All Changes

React

• Fast Refresh Fixes
  • Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@​sophiebits #36965)
  • Fix Fast Refresh so edits to a memo() comparison function take effect (@​sophiebits #36964)
  • Fix Fast Refresh crash when an edit changes the kind of a component's type (@​sophiebits #36963)
  • Unify hot reload type resolution for Fast Refresh (@​sophiebits #36962)
  • Fix Fast Refresh to remount correctly when an edit changes the component kind (@​sophiebits #36950)
  • Double invoke effects in StrictMode after Fast Refresh (@​eps1lon #35962)
• Performance Track Fixes
  • Prevent crash when accessing $$typeof in Performance Tracks (@​eps1lon #35679)
  • Handle non-string function names in Performance Tracks (@​eps1lon #35659)
  • Use minus (-) instead of en dash for removed props in Performance Tracks (@​eps1lon #35649)
  • Handle arrays with bigints in deep objects in Performance Tracks (@​eps1lon #35648)
  • Don't enumerate typed array props in Performance Tracks in DEV (@​UditDewan #36913)
  • Bail out of diffing wide objects and arrays in Performance Tracks (@​eps1lon #34742)
  • Clear potentially large performance measures in DEV (@​hoxyq #34803)
  • Fix missing else branch for renders with no props change in Performance Tracks (@​hoxyq #34837)
• Activity Fixes
  • Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@​sophiebits #36947)
  • Hide portal contents when an Activity is hidden (@​acdlite #35091)
  • Prevent metadata hoisting in hidden <Activity> trees (@​ronnakamoto #34983)
  • Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@​acdlite #35074)
  • Don't unhide a node if a direct parent Offscreen is still hidden (@​sebmarkbage #34821)
  • Don't show internal <Offscreen> component in error messages (@​rickhanlonii #35763)
• Warn in DEV when a component appears to have been unblocked by a conditional use() (@​hoxyq, @​eps1lon: #37104, #37203, #37491)
• Render transitions independently instead of entangling them into a single render (@​acdlite #37290)

... (truncated)

Changelog

Sourced from react's changelog.

19.3.0 (September 9, 2026)

New React Features

• <ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@​sebmarkbage, @​jackpope, @​gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)
• Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@​jackpope, @​sebmarkbage, @​eps1lon, @​Dhakshin2007, @​chirokas, @​teamleaderleo, @​fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

• browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
  • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

• Enable Trusted Types API integration (@​rickhanlonii #35816)
• Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@​acdlite #37290)
• Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@​hoxyq, @​eps1lon: #37104, #37203, #37491)

All Changes

React

• Fast Refresh Fixes
  • Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@​sophiebits #36965)
  • Fix Fast Refresh so edits to a memo() comparison function take effect (@​sophiebits #36964)
  • Fix Fast Refresh crash when an edit changes the kind of a component's type (@​sophiebits #36963)
  • Unify hot reload type resolution for Fast Refresh (@​sophiebits #36962)
  • Fix Fast Refresh to remount correctly when an edit changes the component kind (@​sophiebits #36950)
  • Double invoke effects in StrictMode after Fast Refresh (@​eps1lon #35962)
• Performance Track Fixes
  • Prevent crash when accessing $$typeof in Performance Tracks (@​eps1lon #35679)
  • Handle non-string function names in Performance Tracks (@​eps1lon #35659)
  • Use minus (-) instead of en dash for removed props in Performance Tracks (@​eps1lon #35649)
  • Handle arrays with bigints in deep objects in Performance Tracks (@​eps1lon #35648)
  • Don't enumerate typed array props in Performance Tracks in DEV (@​UditDewan #36913)
  • Bail out of diffing wide objects and arrays in Performance Tracks (@​eps1lon #34742)
  • Clear potentially large performance measures in DEV (@​hoxyq #34803)
  • Fix missing else branch for renders with no props change in Performance Tracks (@​hoxyq #34837)
• Activity Fixes
  • Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@​sophiebits #36947)
  • Hide portal contents when an Activity is hidden (@​acdlite #35091)
  • Prevent metadata hoisting in hidden <Activity> trees (@​ronnakamoto #34983)
  • Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@​acdlite #35074)
  • Don't unhide a node if a direct parent Offscreen is still hidden (@​sebmarkbage #34821)
  • Don't show internal <Offscreen> component in error messages (@​rickhanlonii #35763)
• Warn in DEV when a component appears to have been unblocked by a conditional use() (@​hoxyq, @​eps1lon: #37104, #37203, #37491)
• Render transitions independently instead of entangling them into a single render (@​acdlite #37290)
• Fix hang when updating a dehydrated boundary inside a hidden tree (@​gaearon #37135)
• Don't reacquire Host Singletons during dev effect validation (@​gnoff #37113)
• Only remove properties from Host Singletons on release (@​gnoff #37112)

... (truncated)

Commits

• 2dc7da7 [test] Bump Jest to 30.4 (#37382)
• 4f93894 docs: remove stale parentType param from validateChildKeys JSDoc (#36928)
• dbc3750 Update required references to GitHub repo (#36752)
• 900ae09 [flow] Bump flow to v0.317.0 (#36701)
• fbb1370 [flow] Bump flow to v0.307.1 (#36199)
• 56922cf [react-native-renderer] Delete Paper (legacy) renderer (#36285)
• 74568e8 [Flight] Transport AggregateErrors.errors (#36156)
• e66ef64 [tests] remove withoutStack from assertConsole helpers (#35498)
• db71391 [Fiber] Instrument the lazy initializer thenable in all cases (#35521)
• 3e1abcc [tests] Require exact error messages in assertConsole helpers (#35497)
• Additional commits viewable in compare view

Updates @types/react from 19.2.18 to 19.3.0

Commits

• See full diff in compare view

Updates react-dom from 19.2.8 to 19.3.0

Release notes

Sourced from react-dom's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

• <ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@​sebmarkbage, @​jackpope, @​gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651,

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 49b52f6d-f467-4b88-8708-838dc567014e

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	resq-design	7970447	Commit Preview URL Branch Preview URL	Sep 18 2026, 06:37 AM

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​types/​bun@​1.4.0 ⏵ 1.4.2				-1
	maplibre-gl@​6.6.0 ⏵ 6.9.0			+1	+2
	@​base-ui/​react@​1.7.0 ⏵ 1.8.0			+1
	react-map-gl@​8.1.2 ⏵ 8.1.3			+1	+2
	@​changesets/​cli@​3.0.1 ⏵ 3.0.2				+1
	@​types/​react-dom@​19.2.5 ⏵ 19.3.0	+1		+1
	@​storybook/​react@​10.5.10 ⏵ 10.6.0
	@​storybook/​addon-a11y@​10.5.10 ⏵ 10.6.0	+1		+1
	@​types/​react@​19.2.18 ⏵ 19.3.0
	@​storybook/​nextjs-vite@​10.5.10 ⏵ 10.6.0	+1		+1
	@​types/​node@​26.2.0 ⏵ 26.5.1	+1		+1
	posthog-js@​1.422.1 ⏵ 1.429.1	+1		+2
	react@​19.2.8 ⏵ 19.3.0	+1		+1
	@​react-email/​ui@​6.9.3 ⏵ 6.9.5	+1		+1
	chromatic@​18.1.0 ⏵ 18.7.4	+18		+7
	storybook@​10.5.10 ⏵ 10.6.0	+1		+1
	tsdown@​0.22.14 ⏵ 0.23.0			+1
	react-email@​6.9.3 ⏵ 6.9.5	+1		+1
	wrangler@​4.127.0 ⏵ 4.130.0	+1		+1
	@​chromatic-com/​storybook@​5.3.0 ⏵ 5.3.1	+1		+1
	react-dom@​19.2.8 ⏵ 19.3.0			+1
	react-resizable-panels@​4.12.3 ⏵ 4.12.4			+1	-2
	lint-staged@​17.4.1 ⏵ 17.5.0				-1
	puppeteer-core@​25.9.0 ⏵ 25.10.0	+1		+1	+2
	knip@​6.32.3 ⏵ 6.35.1				+1
	@​changesets/​changelog-github@​1.0.0 ⏵ 1.0.1				+2
	cspell@​10.1.1 ⏵ 10.3.0	+1			+3
	resend@​6.24.0 ⏵ 6.27.0	+1
	@​upstash/​redis@​1.38.3 ⏵ 1.38.4
	@​biomejs/​biome@​2.5.10 ⏵ 2.5.12	+1		+1	+1
	@​storybook/​addon-docs@​10.5.10 ⏵ 10.6.0	+1		+1
	@​storybook/​addon-links@​10.5.10 ⏵ 10.6.0

View full report