chore(deps-dev): bump the dev-dependencies-minor-patch group across 1 directory with 20 updates

[dependabot]

Bumps the dev-dependencies-minor-patch group with 20 updates in the / directory:

Package	From	To
@tanstack/ai	0.66.0	0.68.0
@tanstack/ai-client	0.39.0	0.39.2
@types/node	26.6.4	26.6.5
vite	8.3.3	8.3.4
zod	4.6.5	4.6.6
@tanstack/react-query	5.104.1	5.104.2
@tanstack/solid-query	5.104.1	5.104.2
@tanstack/svelte-query	6.3.1	6.3.2
@tanstack/vue-query	5.104.1	5.104.2
blume	2.2.2	2.2.3
effect	4.0.2	4.0.3
ai	7.0.130	7.0.137
@types/bun	1.4.2	1.4.3
evlog	2.30.1	2.31.0
express	5.2.1	5.3.0
@tanstack/angular-query-experimental	5.104.1	5.104.2
@tanstack/query-core	5.104.1	5.104.2
@vitejs/plugin-react	6.1.1	6.1.2
@swc/core	1.16.13	1.16.18
@tanstack/react-query-next-experimental	5.104.1	5.104.2

Updates @tanstack/ai from 0.66.0 to 0.68.0

Release notes

Sourced from @​tanstack/ai's releases.

@​tanstack/ai@​0.67.0

Minor Changes

• #1685 7dbfaf6 - Text adapters can now give inputModalities at run time: the input kinds that the model reads, for example ['text', 'image', 'document']. undefined means that the adapter does not know.

  • TextAdapter has the new optional inputModalities property. A BaseTextAdapter subclass sets it from its model metadata.
  • The text adapters of OpenAI, Anthropic, Gemini, Mistral, Groq, BytePlus, Grok, OpenRouter, and LLM Gateway set it. A known model gives its input kinds. An unknown model gives undefined.

• #1683 88fd67c - A middleware onAfterToolCall hook can now replace the result of a tool call. Return { type: 'replaceResult', result } from the hook.

  • The model and the stream (TOOL_CALL_RESULT) get the new result.
  • Middleware run in order. Each hook gets the result of the hook before it as info.result.
  • An error result stays an error.
  • A hook that returns undefined, or any value that is not a replaceResult decision, keeps the result.
  • onAfterToolCall after an onBeforeToolCall skip now gets the parsed skip result, the same value that goes to the model.
  • The new AfterToolCallDecision type is exported from @tanstack/ai.

• #1682 3aa2e3d - Add fakeText() at the new @tanstack/ai/testing subpath. It is a text adapter that answers from a script. Use it to test chat(), tools, and middleware with no network and no API key.

  • Queue answers with setResponses and appendResponses. An answer is { text?, thinking?, toolCalls?, finishReason?, error? }, or a function that gets { request, state }. An empty queue fails with "No more fake responses queued".
  • Token usage is an estimate: ceil(characters / 4). With cache: true, the part of a request that matches the previous request of the same thread counts as cached tokens.
  • Options: model, contextWindow, and tokensPerSecond for stream pacing. The stream stops when the request aborts.
  • RUN_STARTED carries parentRunId when the call has one.
  • The default tool call id is fake-call-<fake>-<call>-<index>. It is unique across fakeText() instances.

• #1684 c5ae415 - Add keyedAdapter(provider, create) and isKeyedAdapter(value). Import them from @tanstack/ai or @tanstack/ai/byok.

  • keyedAdapter wraps an adapter factory that needs a provider key. provider is a BYOK descriptor (for example openaiByok) or a provider id. It throws when the provider id is not valid.
  • A host finds the key, for example with getByokKey(request, keyed.provider), and calls keyed.create(key) just before the call. The key is not in your code.
  • isKeyedAdapter tells a keyed adapter apart from a plain adapter.
  • It works for every adapter kind: text, image, speech, audio, video, and the rest.

  For several providers, use keyedAdapters({ openai: (key) => ..., anthropic: keyedAdapter(anthropicByok, ...) }). The map key is the provider id, so a key goes only to its own provider. An entry that is a keyed adapter for another provider throws at startup. In a route, keyedAdapterFromRequest(request, models) from @tanstack/ai/byok/server builds the adapter of the provider that has a key. The user's x-byok-<id> header wins, then the env names of descriptor entries, in map order. It gives null when no provider has a key.

• #1678 13ba1b0 - A RUN_ERROR now tells you how long the provider asks you to wait before a retry.

  • @tanstack/ai: RunErrorEvent has a new retryAfterMs field, in milliseconds. chat() moves it to metadata.tanstack.retryAfterMs. The new toRetryAfterMs(error) helper on @tanstack/ai/adapter-internals reads the retry-after-ms header first, then the retry-after header in seconds or as an HTTP date.
  • @tanstack/openai-base and @tanstack/ai-anthropic: the text adapters set retryAfterMs on a RUN_ERROR when the error response has one of these headers. This includes every adapter that uses @tanstack/openai-base.

• #1680 377262c - Add wrapFetch to chat(), to the middleware onConfig config, and to TextOptions. A wrapper gets the next fetch and gives back a new fetch. Use it to change the URL, the headers, the request, or the response of a model call. The new FetchWrapper type names the wrapper.

  The engine chains the chat() wrapper and the middleware wrappers into one function. A middleware wrapper runs inside the chat() wrapper and applies to one model call only.

  These text adapters send their requests through the wrapper: every adapter on @tanstack/openai-base (OpenAI, the OpenAI-compatible adapters, Grok, Groq, BytePlus, LLM Gateway, Lovable, Vercel AI Gateway, Cloudflare, and the Bedrock Chat Completions and Responses APIs), Anthropic, Mistral, Ollama, and OpenRouter. The wrapper wraps the fetch of the adapter config, not the global fetch. An Anthropic or Ollama adapter with an injected client ignores wrapFetch. In Cloudflare binding mode, the wrapper runs, but the binding does not send the URL or the headers. Without wrapFetch, the requests do not change.

Changelog

Sourced from @​tanstack/ai's changelog.

0.68.0

Minor Changes

• #1695 723b4a4 - fakeText() takes an input option, for example fakeText({ input: ['text', 'image'] }). It sets the fake's inputModalities, so you can test code that checks what a model accepts. It also sets the adapter's input modality type.

Patch Changes

• #1605 d84a49e - Fix a server tool call that the next turn sent twice when you use withPersistence. When a model call starts with a tool call and no text (often after thinking), StreamProcessor gave that message the id of the next model call. The next turn then replaced the stored answer with a copy that also held the tool call, so the provider got the same tool_use twice. The client now keeps the id of the message the tool call belongs to.

0.67.0

Minor Changes

• #1685 7dbfaf6 - Text adapters can now give inputModalities at run time: the input kinds that the model reads, for example ['text', 'image', 'document']. undefined means that the adapter does not know.

  • TextAdapter has the new optional inputModalities property. A BaseTextAdapter subclass sets it from its model metadata.
  • The text adapters of OpenAI, Anthropic, Gemini, Mistral, Groq, BytePlus, Grok, OpenRouter, and LLM Gateway set it. A known model gives its input kinds. An unknown model gives undefined.

• #1683 88fd67c - A middleware onAfterToolCall hook can now replace the result of a tool call. Return { type: 'replaceResult', result } from the hook.

  • The model and the stream (TOOL_CALL_RESULT) get the new result.
  • Middleware run in order. Each hook gets the result of the hook before it as info.result.
  • An error result stays an error.
  • A hook that returns undefined, or any value that is not a replaceResult decision, keeps the result.
  • onAfterToolCall after an onBeforeToolCall skip now gets the parsed skip result, the same value that goes to the model.
  • The new AfterToolCallDecision type is exported from @tanstack/ai.

• #1682 3aa2e3d - Add fakeText() at the new @tanstack/ai/testing subpath. It is a text adapter that answers from a script. Use it to test chat(), tools, and middleware with no network and no API key.

  • Queue answers with setResponses and appendResponses. An answer is { text?, thinking?, toolCalls?, finishReason?, error? }, or a function that gets { request, state }. An empty queue fails with "No more fake responses queued".
  • Token usage is an estimate: ceil(characters / 4). With cache: true, the part of a request that matches the previous request of the same thread counts as cached tokens.
  • Options: model, contextWindow, and tokensPerSecond for stream pacing. The stream stops when the request aborts.
  • RUN_STARTED carries parentRunId when the call has one.
  • The default tool call id is fake-call-<fake>-<call>-<index>. It is unique across fakeText() instances.

• #1684 c5ae415 - Add keyedAdapter(provider, create) and isKeyedAdapter(value). Import them from @tanstack/ai or @tanstack/ai/byok.

  • keyedAdapter wraps an adapter factory that needs a provider key. provider is a BYOK descriptor (for example openaiByok) or a provider id. It throws when the provider id is not valid.
  • A host finds the key, for example with getByokKey(request, keyed.provider), and calls keyed.create(key) just before the call. The key is not in your code.
  • isKeyedAdapter tells a keyed adapter apart from a plain adapter.
  • It works for every adapter kind: text, image, speech, audio, video, and the rest.

  For several providers, use keyedAdapters({ openai: (key) => ..., anthropic: keyedAdapter(anthropicByok, ...) }). The map key is the provider id, so a key goes only to its own provider. An entry that is a keyed adapter for another provider throws at startup. In a route, keyedAdapterFromRequest(request, models) from @tanstack/ai/byok/server builds the adapter of the provider that has a key. The user's x-byok-<id> header wins, then the env names of descriptor entries, in map order. It gives null when no provider has a key.

• #1678 13ba1b0 - A RUN_ERROR now tells you how long the provider asks you to wait before a retry.

  • @tanstack/ai: RunErrorEvent has a new retryAfterMs field, in milliseconds. chat() moves it to metadata.tanstack.retryAfterMs. The new toRetryAfterMs(error) helper on @tanstack/ai/adapter-internals reads the retry-after-ms header first, then the retry-after header in seconds or as an HTTP date.
  • @tanstack/openai-base and @tanstack/ai-anthropic: the text adapters set retryAfterMs on a RUN_ERROR when the error response has one of these headers. This includes every adapter that uses @tanstack/openai-base.

• #1680 377262c - Add wrapFetch to chat(), to the middleware onConfig config, and to TextOptions. A wrapper gets the next fetch and gives back a new fetch. Use it to change the URL, the headers, the request, or the response of a model call. The new FetchWrapper type names the wrapper.

  The engine chains the chat() wrapper and the middleware wrappers into one function. A middleware wrapper runs inside the chat() wrapper and applies to one model call only.

  These text adapters send their requests through the wrapper: every adapter on @tanstack/openai-base (OpenAI, the OpenAI-compatible adapters, Grok, Groq, BytePlus, LLM Gateway, Lovable, Vercel AI Gateway, Cloudflare, and the Bedrock Chat Completions and Responses APIs), Anthropic, Mistral, Ollama, and OpenRouter. The wrapper wraps the fetch of the adapter config, not the global fetch. An Anthropic or Ollama adapter with an injected client ignores wrapFetch. In Cloudflare binding mode, the wrapper runs, but the binding does not send the URL or the headers. Without wrapFetch, the requests do not change.

... (truncated)

Commits

• See full diff in compare view

Updates @tanstack/ai-client from 0.39.0 to 0.39.2

Release notes

Sourced from @​tanstack/ai-client's releases.

@​tanstack/ai-client@​0.39.1

Patch Changes

• Updated dependencies [7dbfaf6, 88fd67c, 3aa2e3d, c5ae415, 13ba1b0, 377262c]:
  • @​tanstack/ai@​0.67.0

Changelog

Sourced from @​tanstack/ai-client's changelog.

0.39.2

Patch Changes

• Updated dependencies [723b4a4, d84a49e]:
  • @​tanstack/ai@​0.68.0

0.39.1

Patch Changes

• Updated dependencies [7dbfaf6, 88fd67c, 3aa2e3d, c5ae415, 13ba1b0, 377262c]:
  • @​tanstack/ai@​0.67.0

Commits

• See full diff in compare view

Updates @types/node from 26.6.4 to 26.6.5

Commits

• See full diff in compare view

Updates vite from 8.3.3 to 8.3.4

Release notes

Sourced from vite's releases.

v8.3.4

Features

• bundled-dev: support import.meta.hot.acceptExports (#23463) (bc0f21c)

Bug Fixes

• avoid mutating hmr defaults (fix #23575) (#23576) (574d5e3)
• build: correct preloads when chunkImportMap is enabled with non-root base (#23698) (2a8c0f0)
• build: wait for in-flight stylesheets in preload helper (fix #23652) (#23662) (036b745)
• bundled-dev: serve /@vite/client and stub @vite/env (#23664) (5afc5a8)
• client: skip rewriting unchanged adopted styles (#23697) (fa71469)
• css: resolve imported preprocessors from their file path with lightningcss (#23688) (cf52011)
• deps: update all non-major dependencies (#23648) (8a4c19c)
• deps: update rolldown-related dependencies (#23649) (794516d)
• dev: a restart requested during a restart used to be dropped (fix #23392) (#23484) (70d56ea)
• don't treat modules ending with js-like query as js (#23687) (fcb6f12)
• html: avoid adding filesystem root to watcher (#23689) (3a7f2ae)
• html: skip caching CSS of chunks in a cycle (fix #23628) (#23636) (15d82f7)
• optimizer: scan deep imports with custom extensions (#23678) (8579189)
• remove input option unescaping for now (#23694) (facc2fb)
• server: match static aliases on path boundaries (#23643) (b28db28)
• watcher: normalize file before root check in ensureWatchedFile (#23673) (12bb28c)

Performance Improvements

• module-runner: skip cloning call sites that have no source map (#23646) (3d67486)

Code Refactoring

• bundled-dev: import CSS HMR helpers from /@vite/client (#23674) (182f5b2)

Changelog

Sourced from vite's changelog.

8.3.4 (2026-10-08)

Features

• bundled-dev: support import.meta.hot.acceptExports (#23463) (bc0f21c)

Bug Fixes

• avoid mutating hmr defaults (fix #23575) (#23576) (574d5e3)
• build: correct preloads when chunkImportMap is enabled with non-root base (#23698) (2a8c0f0)
• build: wait for in-flight stylesheets in preload helper (fix #23652) (#23662) (036b745)
• bundled-dev: serve /@vite/client and stub @vite/env (#23664) (5afc5a8)
• client: skip rewriting unchanged adopted styles (#23697) (fa71469)
• css: resolve imported preprocessors from their file path with lightningcss (#23688) (cf52011)
• deps: update all non-major dependencies (#23648) (8a4c19c)
• deps: update rolldown-related dependencies (#23649) (794516d)
• dev: a restart requested during a restart used to be dropped (fix #23392) (#23484) (70d56ea)
• don't treat modules ending with js-like query as js (#23687) (fcb6f12)
• html: avoid adding filesystem root to watcher (#23689) (3a7f2ae)
• html: skip caching CSS of chunks in a cycle (fix #23628) (#23636) (15d82f7)
• optimizer: scan deep imports with custom extensions (#23678) (8579189)
• remove input option unescaping for now (#23694) (facc2fb)
• server: match static aliases on path boundaries (#23643) (b28db28)
• watcher: normalize file before root check in ensureWatchedFile (#23673) (12bb28c)

Performance Improvements

• module-runner: skip cloning call sites that have no source map (#23646) (3d67486)

Code Refactoring

• bundled-dev: import CSS HMR helpers from /@vite/client (#23674) (182f5b2)

Commits

• b6c20f6 release: v8.3.4 (#23702)
• b28db28 fix(server): match static aliases on path boundaries (#23643)
• bc0f21c feat(bundled-dev): support import.meta.hot.acceptExports (#23463)
• fa71469 fix(client): skip rewriting unchanged adopted styles (#23697)
• 2a8c0f0 fix(build): correct preloads when chunkImportMap is enabled with non-root bas...
• 3a7f2ae fix(html): avoid adding filesystem root to watcher (#23689)
• facc2fb fix: remove input option unescaping for now (#23694)
• 70d56ea fix(dev): a restart requested during a restart used to be dropped (fix #23392...
• cf52011 fix(css): resolve imported preprocessors from their file path with lightningc...
• fcb6f12 fix: don't treat modules ending with js-like query as js (#23687)
• Additional commits viewable in compare view

Updates zod from 4.6.5 to 4.6.6

Release notes

Sourced from zod's releases.

v4.6.6

Six malicious commits pushed to main on September 21 with a compromised git credential were reverted the same day in #6620 and have since been removed from the history of main. None were ever published to npm. The npm provenance for 4.6.6 names 284243fb, the pre-rewrite copy of 9c219833 with identical contents.

Commits:

• 0cd3af5e9f50ad11bbcd4407a46a21b8848ba574 docs: load the en locale directly in Zod Mini
• 9d5e60f162997b764b40d45aa02481888db50dea docs: import locales from zod/locales, not z.locales
• 34a626f307871ecbb0123947559328dc52ed5e3e docs: tighten the z.locales tree-shaking note
• 74304ce5b5796b5edb9a88ceb8e170b6ea3e82df release: stage npm versions instead of publishing them (#6622)
• b2ef983e0711ff6517d6020b021071e2e5653efa docs: add Code for Japan to bronze sponsors
• 8fb2faf0584828a6a027d8279db36f6f52784462 docs: crop the Code for Japan logo and list it first in bronze
• bacad518c41610d654658172d325874bf0ee6290 docs: square the Code for Japan logo to match the other bronze tiles
• c42596bd1c87e941d7241d10e012c5c196adcc10 release: hold the run on the release-approval environment until the staged versions are approved (#6638)
• a2ba4a67986a3e6b2b131be30084a2f460d9ea67 fix(types): declare record output and input as members, not base type arguments (#6645)
• a0ebf970f2d752e5f58527cd2942ff48be4f46bd fix(v4): check array, set and map size bounds before parsing elements (#6652)
• 529f78dd9431b07f49647fee3aa0819b3f8b66b7 4.6.6
• 9c219833c3a3764fa1f1ea9c5ecec8254a63c0b1 ci: stage at verbose so a failed OIDC token exchange says why

Commits

• 9c21983 ci: stage at verbose so a failed OIDC token exchange says why
• 529f78d 4.6.6
• a0ebf97 fix(v4): check array, set and map size bounds before parsing elements (#6652)
• a2ba4a6 fix(types): declare record output and input as members, not base type argumen...
• c42596b release: hold the run on the release-approval environment until the staged ve...
• bacad51 docs: square the Code for Japan logo to match the other bronze tiles
• 8fb2faf docs: crop the Code for Japan logo and list it first in bronze
• b2ef983 docs: add Code for Japan to bronze sponsors
• 74304ce release: stage npm versions instead of publishing them (#6622)
• 34a626f docs: tighten the z.locales tree-shaking note
• Additional commits viewable in compare view

Updates @tanstack/react-query from 5.104.1 to 5.104.2

Release notes

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-devtools@​5.104.2

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-devtools@​5.104.2
  • @​tanstack/react-query@​5.104.2

@​tanstack/react-query-next-experimental@​5.104.2

Patch Changes

• Updated dependencies []:
  • @​tanstack/react-query@​5.104.2

@​tanstack/react-query-persist-client@​5.104.2

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-persist-client-core@​5.104.2
  • @​tanstack/react-query@​5.104.2

@​tanstack/react-query@​5.104.2

Patch Changes

• Updated dependencies [03e8c39]:
  • @​tanstack/query-core@​5.104.2

Changelog

Sourced from @​tanstack/react-query's changelog.

5.104.2

Patch Changes

• Updated dependencies [03e8c39]:
  • @​tanstack/query-core@​5.104.2

Commits

• b699b52 ci: Version Packages (#11849)
• e22e7c4 chore: test TypeScript 7.1 preview and drop 5.6 (#11947)
• df78a9d chore(*): pass the root 'settings' to the package oxlint configs, which 'exte...
• 833062c chore: replace prettier with oxfmt (#11939)
• d0cfa6a chore: replace eslint with oxlint (#11938)
• 0012ec1 docs(react-query): add JSDoc to the properties of the exported interfaces and...
• b5e8e7b docs(react-query): add JSDoc to the exported classes, methods, and arrow func...
• 01abab3 docs(*): note that 'throwOnError' makes the hook rethrow the errors of 'mutat...
• b42166e docs(react-query): add JSDoc to the exported interfaces and type aliases (#11...
• 205d422 docs(*): add missing JSDoc descriptions and enforce 'jsdoc/require-descriptio...
• Additional commits viewable in compare view

Updates @tanstack/solid-query from 5.104.1 to 5.104.2

Release notes

Sourced from @​tanstack/solid-query's releases.

@​tanstack/solid-query-devtools@​5.104.2

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-devtools@​5.104.2
  • @​tanstack/solid-query@​5.104.2

@​tanstack/solid-query-persist-client@​5.104.2

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-persist-client-core@​5.104.2
  • @​tanstack/solid-query@​5.104.2

@​tanstack/solid-query@​5.104.2

Patch Changes

• Updated dependencies [03e8c39]:
  • @​tanstack/query-core@​5.104.2

Changelog

Sourced from @​tanstack/solid-query's changelog.

5.104.2

Patch Changes

• Updated dependencies [03e8c39]:
  • @​tanstack/query-core@​5.104.2

Commits

• b699b52 ci: Version Packages (#11849)
• e22e7c4 chore: test TypeScript 7.1 preview and drop 5.6 (#11947)
• df78a9d chore(*): pass the root 'settings' to the package oxlint configs, which 'exte...
• 833062c chore: replace prettier with oxfmt (#11939)
• d0cfa6a chore: replace eslint with oxlint (#11938)
• aab3528 chore(solid-query*): add 'eslint-plugin-solid' (#11929)
• 4e1476c test(solid-query): add the 'override' modifier to test classes that override ...
• b18e7ab docs(solid-query): add JSDoc to the properties of the exported interfaces and...
• 2c39f03 docs(solid-query): add JSDoc to the exported classes, methods, and arrow func...
• 01abab3 docs(*): note that 'throwOnError' makes the hook rethrow the errors of 'mutat...
• Additional commits viewable in compare view

Updates @tanstack/svelte-query from 6.3.1 to 6.3.2

Release notes

Sourced from @​tanstack/svelte-query's releases.

@​tanstack/svelte-query-devtools@​6.3.2

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-devtools@​5.104.2
  • @​tanstack/svelte-query@​6.3.2

@​tanstack/svelte-query-persist-client@​6.3.2

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-persist-client-core@​5.104.2
  • @​tanstack/svelte-query@​6.3.2

@​tanstack/svelte-query@​6.3.2

Patch Changes

• Updated dependencies [03e8c39]:
  • @​tanstack/query-core@​5.104.2

Changelog

Sourced from @​tanstack/svelte-query's changelog.

6.3.2

Patch Changes

• Updated dependencies [03e8c39]:
  • @​tanstack/query-core@​5.104.2

Commits

• b699b52 ci: Version Packages (#11849)
• e22e7c4 chore: test TypeScript 7.1 preview and drop 5.6 (#11947)
• df78a9d chore(*): pass the root 'settings' to the package oxlint configs, which 'exte...
• 833062c chore: replace prettier with oxfmt (#11939)
• d0cfa6a chore: replace eslint with oxlint (#11938)
• 1e6b561 docs(svelte-query): add JSDoc to the properties of the exported interfaces an...
• 71c6635 docs(svelte-query): add JSDoc to the exported classes, methods, and arrow fun...
• baf66c5 docs(svelte-query): add JSDoc to the exported interfaces and type aliases (#1...
• 4736791 docs(*): end JSDoc descriptions with a period and start them with an uppercas...
• 205d422 docs(*): add missing JSDoc descriptions and enforce 'jsdoc/require-descriptio...
• Additional commits viewable in compare view

Updates @tanstack/vue-query from 5.104.1 to 5.104.2

Release notes

Sourced from @​tanstack/vue-query's releases.

@​tanstack/vue-query@​5.104.2

Patch Changes

• #11796 69e114a - Export the MutationResult type so inferred useMutation return types can be named when emitting declarations
• Updated dependencies [03e8c39]:
  • @​tanstack/query-core@​5.104.2

Changelog

Sourced from @​tanstack/vue-query's changelog.

5.104.2

Patch Changes

• #11796 69e114a - Export the MutationResult type so inferred useMutation return types can be named when emitting declarations
• Updated dependencies [03e8c39]:
  • @​tanstack/query-core@​5.104.2

Commits

• b699b52 ci: Version Packages (#11849)
• e22e7c4 chore: test TypeScript 7.1 preview and drop 5.6 (#11947)
• df78a9d chore(*): pass the root 'settings' to the package oxlint configs, which 'exte...
• 833062c chore: replace prettier with oxfmt (#11939)
• d0cfa6a chore: replace eslint with oxlint (#11938)
• 7153697 docs(vue-query/useMutation): add JSDoc to 'MutationResult' (#11937)
• 69e114a fix(vue-query): export MutationResult type (#11796)
• 866d542 refactor(vue-query): add the 'override' modifier to members that override a b...
• 25c1e6c docs(vue-query): add JSDoc to the properties of the exported interfaces and t...
• 27a8a89 docs(vue-query): add JSDoc to the exported interfaces and type aliases (#11871)
• Additional commits viewable in compare view

Updates blume from 2.2.2 to 2.2.3

Release notes

Sourced from blume's releases.

blume@2.2.3

Patch Changes

• 528f95e: The assistant now reads a page's links to other pages ([Install](https://github.com/haydenbleasel/blume/tree/HEAD/packages/blume/blob/HEAD/install), [Setup](https://github.com/haydenbleasel/blume/tree/HEAD/packages/blume/blob/setup.md), [Setup](https://github.com/haydenbleasel/blume/tree/HEAD/packages/blume/blob/HEAD/guides/setup.md)) as the routes they mean, as the .md mirrors, llms-full.txt, and MCP get_page already did, so the links it cites in an answer land on the page they mean. A link on a translated page to a page that isn't translated yet points at the page the assistant can read. Pages from a remote or CMS source, such as mdxRemote(), now get that rewrite on every agent surface too. Before, the assistant read such links as written and could cite ../setup.md, a link that led nowhere from the answer, and a remote page's links stayed as written on the agent surfaces, though the rendered page and blume validate resolved them. A relative link in a raw HTML <a href> now points on the agent surfaces where it goes on the rendered page, resolved against the page's URL as the browser resolves it, rather than the way a Markdown link resolves.
• 87cb8c4: The assistant cites pages as links more reliably on smaller models. Each documentation excerpt it reads, and each search_docs and read_page result, is now headed by the Markdown link to cite (## [Page Title](https://github.com/haydenbleasel/blume/tree/HEAD/packages/blume/blob/HEAD/route)), and the model is asked to copy that link. A page whose route has a space, a parenthesis, or a percent sign is cited with those characters percent-encoded (%20, %28, %29, %25), so its link works too. Before, the heading was ## Page Title (/route), and a model that copied it wrote [Page Title (/route)], [[Page Title (/route)]], or [/route], which showed in the answer as raw text instead of a link.
• e41c71f: Search now keeps words whole whatever Latin letters they hold. Orama's default tokenizer split words at any letter beyond ASCII and a few accented vowels, so Swedish "när" was indexed as "n" and "r" and matched unrelated pages, and German "Prüfung" as "pr" and "fung". Blume now keeps every Latin letter, folding accents the way Orama already folded "café" and spelling ø, ł and ß as o, l and ss, in the default Orama search dialog, the MCP server's search_docs, and the assistant. A soft hyphen (­) no longer splits the word it sits in, and a result found by folding is highlighted and excerpted at the accented word. ASCII text is tokenized exactly as before.
• 2a0628c: The language switcher keeps the reader's place: the chosen link carries the current URL fragment.
• 34b3e0f: Add SEO options for docs that live inside another site: shared JSON-LD entity ids and attribution (seo.jsonLd), a default social image in place of generated cards (seo.og.image), publication dates from git for pages without a front matter date (seo.datePublished: "git"), and hreflang alternates in the sitemap (seo.sitemap: { alternates: true }). Page JSON-LD now also carries the page's social image and credits its front matter authors, and hreflang links leave out noindex, hidden, and canonical-elsewhere translations.

Changelog

Sourced from blume's changelog.

2.2.3

Patch Changes

• 528f95e: The assistant now reads a page's links to other pages ([Install](https://github.com/haydenbleasel/blume/blob/main/packages/blume/install), [Setup](https://github.com/haydenbleasel/blume/blob/main/packages/setup.md), [Setup](https://github.com/haydenbleasel/blume/blob/main/packages/blume/guides/setup.md)) as the routes they mean, as the .md mirrors, llms-full.txt, and MCP get_page already did, so the links it cites in an answer land on the page they mean. A link on a translated page to a page that isn't translated yet points at the page the assistant can read. Pages from a remote or CMS source, such as mdxRemote(), now get that rewrite on every agent surface too. Before, the assistant read such links as written and could cite ../setup.md, a link that led nowhere from the answer, and a remote page's links stayed as written on the agent surfaces, though the rendered page and blume validate resolved them. A relative link in a raw HTML <a href> now points on the agent surfaces where it goes on the rendered page, resolved against the page's URL as the browser resolves it, rather than the way a Markdown link resolves.
• 87cb8c4: The assistant cites pages as links more reliably on smaller models. Each documentation excerpt it reads, and each search_docs and read_page result, is now headed by the Markdown link to cite (## [Page Title](https://github.com/haydenbleasel/blume/blob/main/packages/blume/route)), and the model is asked to copy that link. A page whose route has a space, a parenthesis, or a percent sign is cited with those characters percent-encoded (%20, %28, %29, %25), so its link works too. Before, the heading was ## Page Title (/route), and a model that copied it wrote [Page Title (/route)], [[Page Title (/route)]], or [/route], which showed in the answer as raw text instead of a link.
• e41c71f: Search now keeps words whole whatever Latin letters they hold. Orama's default tokenizer split words a...

  Description has been truncated

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	orpc	ee5e3b4	Commit Preview URL Branch Preview URL	Oct 13 2026, 08:27 AM

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[pkg-pr-new]

More templates

• @orpc/bun-playground
• @orpc/cloudflare-playground
• @orpc/nest-playground
• @orpc/next-playground

@orpc/ai-sdk

npm i https://pkg.pr.new/@orpc/ai-sdk@2216

@orpc/arktype

npm i https://pkg.pr.new/@orpc/arktype@2216

@orpc/bun

npm i https://pkg.pr.new/@orpc/bun@2216

@orpc/client

npm i https://pkg.pr.new/@orpc/client@2216

@orpc/cloudflare

npm i https://pkg.pr.new/@orpc/cloudflare@2216

@orpc/contract

npm i https://pkg.pr.new/@orpc/contract@2216

@orpc/experimental-effect

npm i https://pkg.pr.new/@orpc/experimental-effect@2216

@orpc/evlog

npm i https://pkg.pr.new/@orpc/evlog@2216

@orpc/hibernation

npm i https://pkg.pr.new/@orpc/hibernation@2216

@orpc/json-schema

npm i https://pkg.pr.new/@orpc/json-schema@2216

@orpc/experimental-lock

npm i https://pkg.pr.new/@orpc/experimental-lock@2216

@orpc/experimental-msw

npm i https://pkg.pr.new/@orpc/experimental-msw@2216

@orpc/nest

npm i https://pkg.pr.new/@orpc/nest@2216

@orpc/next

npm i https://pkg.pr.new/@orpc/next@2216

@orpc/node

npm i https://pkg.pr.new/@orpc/node@2216

@orpc/openapi

npm i https://pkg.pr.new/@orpc/openapi@2216

@orpc/opentelemetry

npm i https://pkg.pr.new/@orpc/opentelemetry@2216

@orpc/pinia-colada

npm i https://pkg.pr.new/@orpc/pinia-colada@2216

@orpc/pino

npm i https://pkg.pr.new/@orpc/pino@2216

@orpc/publisher

npm i https://pkg.pr.new/@orpc/publisher@2216

@orpc/ratelimit

npm i https://pkg.pr.new/@orpc/ratelimit@2216

@orpc/server

npm i https://pkg.pr.new/@orpc/server@2216

@orpc/shared

npm i https://pkg.pr.new/@orpc/shared@2216

@orpc/swr

npm i https://pkg.pr.new/@orpc/swr@2216

@orpc/tanstack-query

npm i https://pkg.pr.new/@orpc/tanstack-query@2216

@orpc/trpc

npm i https://pkg.pr.new/@orpc/trpc@2216

@orpc/valibot

npm i https://pkg.pr.new/@orpc/valibot@2216

@orpc/zod

npm i https://pkg.pr.new/@orpc/zod@2216

commit: ee5e3b4

[codspeed]

Merging this PR will degrade performance by 17.95%

⚠️ 5 benchmarks spent significant time in system calls

System calls cannot be consistently instrumented, so they are not included in the measure, which understates the real cost. Please switch to the Walltime instrument to accurately measure system calls.

Measurement and system calls

• serve file
• serve deeply nested encoded path
• range request
• not modified (304)
• not found fall through

ℹ️ 12 benchmarks have no flame graph

The flamegraph could not be generated because too much time was spent in runtime internals, making the visualization not useful for performance analysis.

• buffered
• serve file
• middlewares
• validated
• buffered
• full (middlewares + validated + interceptors)
• event stream
• serve deeply nested encoded path
• range request
• not modified (304)
• …and 2 more

⚠️ Different runtime environments detected

Some benchmarks with significant performance changes were compared across different runtime environments,
which may affect the accuracy of the results.

Open the report in CodSpeed to investigate

❌ 1 regressed benchmark
✅ 27 untouched benchmarks
⏩ 2 skipped benchmarks¹

Warning

Please fix the performance issues or acknowledge them on CodSpeed.

Performance Changes

	Benchmark	BASE	HEAD	Efficiency
❌	1KB payload	252.1 µs	307.2 µs	-17.95%

Tip

Investigate this regression by commenting @codspeedbot fix this regression on this PR, or directly use the CodSpeed MCP with your agent.

---

_{Comparing dependabot/npm_and_yarn/dev-dependencies-minor-patch-75cd80c3cc (ee5e3b4) with main (10e2df9)}

Footnotes

1. 2 benchmarks were skipped, so the baseline results were used instead. If they were deleted from the codebase, click here and archive them to remove them from the performance reports. ↩