build(deps): bump the workspace-minor-patch group across 1 directory with 24 updates

[dependabot]

Bumps the workspace-minor-patch group with 24 updates in the / directory:

Package	From	To
silvery	0.23.1	0.23.2
ws	8.21.1	8.21.2
@biomejs/biome	2.5.5	2.5.7
@types/node	26.1.1	26.1.2
@types/react	19.2.17	19.2.18
tsx	4.23.1	4.23.8
@base-ui/react	1.6.0	1.7.0
@capacitor/android	8.4.2	8.5.0
@capacitor/cli	8.4.2	8.5.0
@codemirror/lang-html	6.4.11	6.4.12
@codemirror/lang-markdown	6.5.1	6.5.2
@codemirror/view	6.43.6	6.43.8
lucide-react	1.27.0	1.28.0
mermaid	11.16.0	11.16.1
react-hook-form	7.83.0	7.84.0
shiki	4.3.1	4.4.2
@cloudflare/workers-types	5.20260726.1	5.20260804.1
@types/react-dom	19.2.3	19.2.4
@vitejs/plugin-react	6.0.4	6.0.5
globals	17.7.0	17.9.0
postcss	8.5.23	8.5.25
typescript-eslint	8.65.0	8.66.0
vite	8.1.5	8.2.0
@modelcontextprotocol/sdk	1.29.0	1.30.0

Updates silvery from 0.23.1 to 0.23.2

Commits

• 23c3347 release: v0.23.2
• 79b4ba8 feat(scroll-area): expose composable relative scrolling
• caf21cf feat(document): make scrolling and style precedence semantic
• 70d61ef feat(ag-react): add shared document primitives (22586)
• 991ab03 fix(list-view): remove false height divergence guard
• c521cbc Merge pull request #10 from beorn/ci/22460-repair-links
• 8960fda docs: repair stale public links
• 62ec12c merge(silvery): bring hh's pinned MarkdownView onto main — clears the last DI...
• f75329a feat(ag-react): add MarkdownView — minimal Markdown → Silvery renderer
• See full diff in compare view

Updates ws from 8.21.1 to 8.21.2

Release notes

Sourced from ws's releases.

8.21.2

Bug fixes

• Fixed a test for CITGM (2eb3be0b).

Commits

• 787ebf2 [dist] 8.21.2
• b4d62eb Revert "[ci] Trust Coveralls Homebrew tap"
• e4bb883 [security] Use GitHub PVR as main reporting channel
• 2eb3be0 [test] Skip test on Node.js versions where it does not apply
• See full diff in compare view

Updates @biomejs/biome from 2.5.5 to 2.5.7

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.7

2.5.7

Patch Changes

• #10822 c171b3b Thanks @​pkallos! - Added the option ignoreIfStatements to useNullishCoalescing. Biome now flags if statements that only assign to a nullish variable (such as if (!a) { a = b }) and can rewrite them to ??=. When enabled, Biome ignores those if statements.

• #11136 e63354c Thanks @​AkashNaickar! - Added a new nursery rule noExtendNative, which reports extending the prototype of a built-in object.

• #10094 e007143 Thanks @​THEjacob1000! - Added the nursery rule noTailwindArbitraryValue. Biome now reports Tailwind CSS arbitrary values such as w-[400px], including in HTML/JSX class attributes, configured utility functions, and tagged templates.

• #11184 135f476 Thanks @​subotac! - Fixed #11176: noUnknownPseudoClass now recognizes Vue's :deep() pseudo-class inside .vue style blocks.

• #8239 a519f9d Thanks @​cormacrelf! - Fixed #8233, where Biome CLI in stdin mode didn't work correctly when handling files in projects with nested configurations. For example, with the following structure, --stdin-file-path=subdirectory/... would not use the nested configuration in subdirectory/biome.json:

  ├── biome.json
  └── subdirectory
      ├── biome.json
      └── lib.js
  

  biome format --write --stdin-file-path=subdirectory/lib.js < subdirectory/lib.js

  Now, the nested configuration is correctly picked up and applied.

  In addition, Biome now shows a warning if --stdin-file-path is provided but that path is ignored and therefore not formatted or fixed.

• #11138 8c2c6bd Thanks @​ematipico! - Fixed noUnnecessaryConditions: Biome now chooses the same function overload as TypeScript when an argument is a callback, so conditions that were previously missed are reported.

  The following code is now invalid, because a parameter typed () => void accepts an async callback and schedule therefore returns string:

  declare function schedule(handler: () => void): string;
  declare function schedule(handler: () => Promise<void>): string | undefined;
  schedule(async () => {}) ?? "fallback";

  The following code is also now invalid, because map(() => 42) returns 42:

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.7

Patch Changes

• #10822 c171b3b Thanks @​pkallos! - Added the option ignoreIfStatements to useNullishCoalescing. Biome now flags if statements that only assign to a nullish variable (such as if (!a) { a = b }) and can rewrite them to ??=. When enabled, Biome ignores those if statements.

• #11136 e63354c Thanks @​AkashNaickar! - Added a new nursery rule noExtendNative, which reports extending the prototype of a built-in object.

• #10094 e007143 Thanks @​THEjacob1000! - Added the nursery rule noTailwindArbitraryValue. Biome now reports Tailwind CSS arbitrary values such as w-[400px], including in HTML/JSX class attributes, configured utility functions, and tagged templates.

• #11184 135f476 Thanks @​subotac! - Fixed #11176: noUnknownPseudoClass now recognizes Vue's :deep() pseudo-class inside .vue style blocks.

• #8239 a519f9d Thanks @​cormacrelf! - Fixed #8233, where Biome CLI in stdin mode didn't work correctly when handling files in projects with nested configurations. For example, with the following structure, --stdin-file-path=subdirectory/... would not use the nested configuration in subdirectory/biome.json:

  ├── biome.json
  └── subdirectory
      ├── biome.json
      └── lib.js
  

  biome format --write --stdin-file-path=subdirectory/lib.js < subdirectory/lib.js

  Now, the nested configuration is correctly picked up and applied.

  In addition, Biome now shows a warning if --stdin-file-path is provided but that path is ignored and therefore not formatted or fixed.

• #11138 8c2c6bd Thanks @​ematipico! - Fixed noUnnecessaryConditions: Biome now chooses the same function overload as TypeScript when an argument is a callback, so conditions that were previously missed are reported.

  The following code is now invalid, because a parameter typed () => void accepts an async callback and schedule therefore returns string:

  declare function schedule(handler: () => void): string;
  declare function schedule(handler: () => Promise<void>): string | undefined;
  schedule(async () => {}) ?? "fallback";

  The following code is also now invalid, because map(() => 42) returns 42:

  type Mapper<T> = () => T;
  declare function map<T>(mapper: Mapper<T>): T;

... (truncated)

Commits

• 191d051 ci: release (#11119)
• 9847e68 feat(lint): add noNonScalableViewport rule (#11168)
• e63354c feat(lint): add noExtendNative nursery rule (#11136)
• 2fa0a62 docs: rework CLI (#11134)
• e007143 feat(lint): add nursery rule noTailwindArbitraryValue (#10094)
• c171b3b feat(lint): add ignoreIfStatements option to useNullishCoalescing (#10822)
• 1139f1c ci: release (#11022)
• 781d68d feat(lint/js): add noRestrictedProperties (#9806)
• See full diff in compare view

Updates @types/node from 26.1.1 to 26.1.2

Commits

• See full diff in compare view

Updates @types/react from 19.2.17 to 19.2.18

Commits

• See full diff in compare view

Updates tsx from 4.23.1 to 4.23.8

Release notes

Sourced from tsx's releases.

v4.23.8

4.23.8 (2026-08-05)

Bug Fixes

• preserve package subpath resolution (be1315e)
• preserve typeless ESM dependency exports (70dfc5e)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.23.7

4.23.7 (2026-08-05)

Bug Fixes

• prevent tsImport cache collisions (4e5a138)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.23.6

4.23.6 (2026-08-05)

Bug Fixes

• compose resolver URL metadata (5040762)
• preserve Node resolution with allowJs (2046d9e)
• preserve resolver URL metadata (a91df46)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.23.5

4.23.5 (2026-08-02)

Bug Fixes

• detect the Node inspector enabled via NODE_OPTIONS (3c1d051)

---

This release is also available on:

• npm package (@​latest dist-tag)

... (truncated)

Commits

• be1315e fix: preserve package subpath resolution
• 5efba41 docs: organize transform backend research
• 70dfc5e fix: preserve typeless ESM dependency exports
• a74ee91 docs: document engineering principles
• 4e5a138 fix: prevent tsImport cache collisions
• 205868f test: wait for complete PTY lines
• 5040762 fix: compose resolver URL metadata
• a91df46 fix: preserve resolver URL metadata
• 2046d9e fix: preserve Node resolution with allowJs
• 6241bae test: force-kill unresponsive PTY shells
• Additional commits viewable in compare view

Updates @base-ui/react from 1.6.0 to 1.7.0

Release notes

Sourced from @​base-ui/react's releases.

v1.7.0

General changes

• Restore visible focus after keyboard close in Safari and Firefox (#5093) by @​lyzno1
• Type render callback props based on the rendered element (#5104) by @​atomiks
• Reduce popup bundle size (#5233) by @​atomiks
• Reduce store bundle size (#5250) by @​atomiks
• Keep unpositioned popups at the viewport origin (#5299) by @​flaviendelangle
• Correct layout and passive effect timing (#5337) by @​atomiks
• Remove redundant lifecycle synchronization (#5341) by @​atomiks
• Prevent stale cleanup from clearing registered part IDs (#5340) by @​atomiks
• Complete popup unmounting after a canceled exit transition (#5401) by @​atomiks
• Fix rendered trigger ID ownership (#5110) by @​atomiks
• Prevent unwanted flip with capped scrollable content (#5120) by @​atomiks
• Fix collisionPadding off-by-one on the biased side (#5143) by @​atomiks
• Reduce shared popup bundle size (#5192) by @​atomiks
• Mount popup subtrees synchronously when opening in React 17 (#5309) by @​atomiks
• Fix auto-resize origin for left-anchored popups (#5370) by @​sai6855
• Avoid redundant re-renders during lazy flipping (#5372) by @​mdm317
• Strip implementation-only types from published .d.ts files (#5165) by @​michaldudak
• Fix usePreviousValue equality comparison (#5264) by @​lyzno1

Accordion

• Remove the implicit dir attribute from <Accordion.Root> (#5117) by @​chuganzy

Alert Dialog

• Prevent <AlertDialog.Root> from reopening after remounting with a reused handle (#5109) by @​michaldudak

Autocomplete

• Respect locale when filtering (#5195) by @​atomiks
• Add input-press to change event details (#5356) by @​chuganzy
• Add cancel-open to change event details (#5376) by @​chuganzy
• Reset list scroll position on filter (#5231) by @​atomiks
• Remove dead code and deduplicate handlers (#5194) by @​atomiks
• Fix listbox separator semantics (#5399) by @​sarthakmalik0810

Avatar

• Show <Avatar.Fallback> immediately when delay={0} (#5147) by @​chuganzy

Button

• Fix keyboard click handling for custom elements (#4838) by @​atomiks

Checkbox

• Remove redundant validation input ref (#5188) by @​nami8824

... (truncated)

Changelog

Sourced from @​base-ui/react's changelog.

v1.7.0

Aug 4, 2026

General changes

• Restore visible focus after keyboard close in Safari and Firefox (#5093) by @​lyzno1
• Type render callback props based on the rendered element (#5104) by @​atomiks
• Reduce popup bundle size (#5233) by @​atomiks
• Reduce store bundle size (#5250) by @​atomiks
• Keep unpositioned popups at the viewport origin (#5299) by @​flaviendelangle
• Correct layout and passive effect timing (#5337) by @​atomiks
• Remove redundant lifecycle synchronization (#5341) by @​atomiks
• Prevent stale cleanup from clearing registered part IDs (#5340) by @​atomiks
• Complete popup unmounting after a canceled exit transition (#5401) by @​atomiks
• Fix rendered trigger ID ownership (#5110) by @​atomiks
• Prevent unwanted flip with capped scrollable content (#5120) by @​atomiks
• Fix collisionPadding off-by-one on the biased side (#5143) by @​atomiks
• Reduce shared popup bundle size (#5192) by @​atomiks
• Mount popup subtrees synchronously when opening in React 17 (#5309) by @​atomiks
• Fix auto-resize origin for left-anchored popups (#5370) by @​sai6855
• Avoid redundant re-renders during lazy flipping (#5372) by @​mdm317
• Strip implementation-only types from published .d.ts files (#5165) by @​michaldudak
• Fix usePreviousValue equality comparison (#5264) by @​lyzno1

Accordion

• Remove the implicit dir attribute from <Accordion.Root> (#5117) by @​chuganzy

Alert Dialog

• Prevent <AlertDialog.Root> from reopening after remounting with a reused handle (#5109) by @​michaldudak

Autocomplete

• Respect locale when filtering (#5195) by @​atomiks
• Add input-press to change event details (#5356) by @​chuganzy
• Add cancel-open to change event details (#5376) by @​chuganzy
• Reset list scroll position on filter (#5231) by @​atomiks
• Remove dead code and deduplicate handlers (#5194) by @​atomiks
• Fix listbox separator semantics (#5399) by @​sarthakmalik0810

Avatar

• Show <Avatar.Fallback> immediately when delay={0} (#5147) by @​chuganzy

Button

• Fix keyboard click handling for custom elements (#4838) by @​atomiks

... (truncated)

Commits

• 254f474 [release] v1.7.0 (#5404)
• 9222cda [meter] Format clamped values (#5409)
• becc19a [combobox][autocomplete][select] Fix listbox separator semantics (#5399)
• 7cc0eef [drawer] Fix click-only outside dismissal after swipe (#5392)
• 1a2ca3c [all components] Fix canceled exit unmount (#5401)
• 166e8ac [popups] Fix quadratic dev-mode trigger registration check (#5400)
• 071e892 [all components] Avoid unused popup handle attachments (#5394)
• cbc87d1 [select] Stabilize scroll arrow cleanup test (#5402)
• 3b5715c [all components] Fix popup handle lifecycle regressions (#5387)
• 54cfcc1 [typescript] Preserve published internals types (#5386)
• Additional commits viewable in compare view

Updates @capacitor/android from 8.4.2 to 8.5.0

Release notes

Sourced from @​capacitor/android's releases.

8.5.0

8.5.0 (2026-07-31)

Bug Fixes

• cli: support TypeScript 7 when loading capacitor.config.ts (#8534) (4c1c870)

Features

• cli: add migrator functionality for adopting UIScene (#8544) (984fa85)
• ios: UIScene Support (#8536) (3fa04a3)

Changelog

Sourced from @​capacitor/android's changelog.

8.5.0 (2026-07-31)

Bug Fixes

• cli: support TypeScript 7 when loading capacitor.config.ts (#8534) (4c1c870)

Features

• cli: add migrator functionality for adopting UIScene (#8544) (984fa85)
• ios: UIScene Support (#8536) (3fa04a3)

Commits

• 3ab4139 Release 8.5.0
• 984fa85 feat(cli): add migrator functionality for adopting UIScene (#8544)
• 3fa04a3 feat(ios): UIScene Support (#8536)
• 4c1c870 fix(cli): support TypeScript 7 when loading capacitor.config.ts (#8534)
• f368a1b chore(android): fix lint issues (#8542)
• See full diff in compare view

Updates @capacitor/cli from 8.4.2 to 8.5.0

Release notes

Sourced from @​capacitor/cli's releases.

8.5.0

8.5.0 (2026-07-31)

Bug Fixes

• cli: support TypeScript 7 when loading capacitor.config.ts (#8534) (4c1c870)

Features

• cli: add migrator functionality for adopting UIScene (#8544) (984fa85)
• ios: UIScene Support (#8536) (3fa04a3)

Changelog

Sourced from @​capacitor/cli's changelog.

8.5.0 (2026-07-31)

Bug Fixes

• cli: support TypeScript 7 when loading capacitor.config.ts (#8534) (4c1c870)

Features

• cli: add migrator functionality for adopting UIScene (#8544) (984fa85)
• ios: UIScene Support (#8536) (3fa04a3)

Commits

• 3ab4139 Release 8.5.0
• 984fa85 feat(cli): add migrator functionality for adopting UIScene (#8544)
• 3fa04a3 feat(ios): UIScene Support (#8536)
• 4c1c870 fix(cli): support TypeScript 7 when loading capacitor.config.ts (#8534)
• f368a1b chore(android): fix lint issues (#8542)
• See full diff in compare view

Updates @codemirror/lang-html from 6.4.11 to 6.4.12

Commits

• See full diff in compare view

Updates @codemirror/lang-markdown from 6.5.1 to 6.5.2

Commits

• See full diff in compare view

Updates @codemirror/view from 6.43.6 to 6.43.8

Commits

• See full diff in compare view

Updates lucide-react from 1.27.0 to 1.28.0

Release notes

Sourced from lucide-react's releases.

Version 1.28.0

What's Changed

• feat(icons): improve calendar icons centre of gravity by @​karsa-mistmere in lucide-icons/lucide#4614

Full Changelog: lucide-icons/lucide@1.27.0...1.28.0

Commits

• See full diff in compare view

Updates mermaid from 11.16.0 to 11.16.1

Release notes

Sourced from mermaid's releases.

mermaid@11.16.1

Patch Changes

• #8022 12d472c Thanks @​aloisklink! - fix: handle CSS sibling combinators in compileCSS

• #8022 2cd6dcf Thanks @​aloisklink! - fix: increase protections against prototype pollution

  User-controlled input already has protections against prototype pollution.

  Fixes: GHSA-c4c3-pg64-4m4v

• #8022 99af3fc Thanks @​aloisklink! - fix(architecture): use Maps and Sets to store groups/services

  Services are now rendered in the order they are defined and more service IDs are now supported.

• #8022 2cd6dcf Thanks @​aloisklink! - deprecate: Deprecate the mermaidAPI.setConfig() function

  Calling this function has no observable effect, as the next time a render() or parse() is called, the currentConfig is cleared.

• #8022 630aa7e Thanks @​aloisklink! - fix(xychart): support zero-width x-axis ranges

• #8022 59b22fa Thanks @​aloisklink! - fix(radar): limit number of ticks to 32

  Setting a ticks value higher than this would only show 32 ticks.

Commits

• 7ecca0c Version Packages (#8023)
• 95b1b9c docs: change mermaidAPI.setConfig() changeset (#8024)
• acc69f1 Merge pull request #8022 from mermaid-js/release/11.16.1
• eba7287 docs: point changesets to correct commit hashes
• 12d472c Merge commit from fork
• 2cd6dcf Merge commit from fork
• 630aa7e Merge commit from fork
• 59b22fa Merge commit from fork
• 99af3fc Merge commit from fork
• 2337f7e Merge branch 'test/improve-example.html' into release/11.16.1
• Additional commits viewable in compare view

Updates react-hook-form from 7.83.0 to 7.84.0

Release notes

Sourced from react-hook-form's releases.

Version 7.84.0

✨ Improvements

• enhance <Form /> submit behavior (#13605)
• improve performance and reduce bundle size (#13591)

🐞 Fixes

• fix: values + keepDirtyValues silently corrupting arrays and freezing objects on refetch (#13628)
• fix: setValue not updating FieldArray values correctly (#13623)
• fix: FormState type definitions (#13620)
• fix: FieldArray and FormState exports (#13619)

🧪 Tests

• add Blob coverage for FieldErrors type tests (#13624)

♻️ Refactors

• extract shared ErrorNamespacePath type (#13615)

🏗️ Chores

• rename <FormStateSubscribe /> back to <FormState /> (#13602)
• bump @babel/core from 7.26.0 to 7.29.7 (#13614)

Thanks to @​candymask0712, @​EduardF1, @​in-ch, @​johnstrand, @​wanxiankai, @​nobu-da, and @​bluebill1049 for their contributions! 🎉

Changelog

Sourced from react-hook-form's changelog.

[7.84.0] - 2026-08-01

Improvements

• handleSubmit returns the typed result of the onValid callback instead of discarding it
• <Form /> supports a function-based action (Server Action style) in addition to URL-string actions
• Improve performance and reduce bundle size

Fixed

• reset() with resetOptions.keepDirtyValues freezing clean sibling fields in a nested object when another field in that object is dirty
• Restore missing FieldArray and FormState type exports
• setValues not notifying useFieldArray subscribers, leaving rendered fields stale

Commits

• 81b9a4c 7.84.0
• 8b51621 🐞 fix #13627 issue values + keepDirtyValues silently corrupts arrays and free...
• 41f32af 🧪 test: cover Blob in FieldErrors type tests (#13624)
• 9705dc6 🐞 #13621 fix setValues not update fieldArrays (#13623)
• e2444e7 🤧 fix FormState type (#13620)
• ab77353 🐞 fix #13618 FieldArray & FormState export (#13619)
• d349d08 ♻️ refactor(types): extract shared ErrorNamespacePath (#13615)
• e47b090 📖 update changelog v7.83.0
• c51f3d8 🦦 perf: improve perf and save bundle size (#13591)
• 86c529a 🐲 feat: enhance <Form /> submit (#13605)
• Additional commits viewable in compare view

Updates shiki from 4.3.1 to 4.4.2

Release notes

Sourced from shiki's releases.

v4.4.2

   🐞 Bug Fixes

• Unbreak CI after vite 8 bump and grammar/deps updates  -  by @​antfubot in shikijs/shiki#1300 (c5d31)

   🏎 Performance

• core: Token split performance improvements  -  by @​amadeus in shikijs/shiki#1301 (41896)

    View changes on GitHub

v4.4.1

   🚀 Features

• Update deps  -  by @​antfu (e07fd)

    View changes on GitHub

v4.4.0

   🚀 Features

• Update grammars and themes  -  by @​antfu (dec2a)

   🐞 Bug Fixes

• core: Guess yaml from frontmatter segments  -  by @​antfubot in shikijs/shiki#1299 (1b8b6)

    View changes on GitHub

Commits

• 2aec856 chore: release v4.4.2
• c5d310b fix: unbreak CI after vite 8 bump and grammar/deps updates (#1300)
• 407dca0 chore: release v4.4.1
• a64bab1 chore: release v4.4.0
• dec2a32 feat: update grammars and themes
• See full diff in compare view

Updates @cloudflare/workers-types from 5.20260726.1 to 5.20260804.1

Commits

• See full diff in compare view

Updates @types/react-dom from 19.2.3 to 19.2.4

Commits

• See full diff in compare view

Updates @vitejs/plugin-react from 6.0.4 to 6.0.5

Release notes

Sourced from @​vitejs/plugin-react's releases.

plugin-react@6.0.5

Fixed the react compiler preset filter to be linear (#1353)

The improved filter in v6.0.3 was non-linear and caused a performance regression (#1349). The filter was changed to be linear to avoid that.

Changelog

Sourced from @​vitejs/plugin-react's changelog.

6.0.5 (2026-07-30)

Fixed the react compiler preset filter to be linear (#1353)

The improved filter in v6.0.3 was non-linear and caused a performance regression (#1349). The filter was changed to be linear to avoid that.

Commits

• 68c0cb8 release: plugin-react@6.0.5 (#1362)
• 555cdbc fix(react): make the react compiler preset filter linear (#1353)
• a00a9f8 fix(de...

  Description has been truncated

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
✅ Deployment successful! View logs	push	bc7113e	Aug 08 2026, 09:53 PM

[push-agent]

This is a routine Dependabot workspace-minor-patch bump touching only the three package.json manifests and pnpm-lock.yaml, with 24 updates applied consistently across app, root, and the GitHub MCP server. Investigation confirms the lockfile importer snapshots match the manifest specifiers, the MCP SDK is consumed only through stable subpath imports unaffected by the 1.29→1.30 minor bump, and the substantive CI jobs (MCP typecheck/build, Android build, app lint/test/build, CLI tests, Electron) all pass. The only red check is a non-build Dependabot metadata check, not a code regression.

---

Review by Push · fugu

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.