chore(deps): bump the production-minor-patch group across 1 directory with 73 updates

[dependabot]

Bumps the production-minor-patch group with 73 updates in the / directory:

Package	From	To
@auth/drizzle-adapter	1.11.1	1.11.3
@builder.io/dev-tools	1.26.12	1.81.3
@builder.io/react	9.1.0	9.4.4
@builder.io/sdk	6.2.0	6.3.3
@c15t/nextjs	2.0.0	2.2.1
@formkit/auto-animate	0.9.0	0.10.0
@fortawesome/fontawesome-svg-core	7.2.0	7.3.1
@fortawesome/free-solid-svg-icons	7.2.0	7.3.1
@fortawesome/react-fontawesome	3.2.0	3.5.0
@hookform/resolvers	5.2.2	5.9.1
@mantine/hooks	9.0.2	9.6.0
@next/third-parties	16.2.4	16.3.4
@number-flow/react	0.5.14	0.6.2
@qwik.dev/partytown	0.11.2	0.14.3
@radix-ui/react-accordion	1.2.12	1.2.20
@radix-ui/react-alert-dialog	1.1.15	1.1.23
@radix-ui/react-aspect-ratio	1.1.8	1.1.15
@radix-ui/react-avatar	1.1.11	1.2.6
@radix-ui/react-checkbox	1.3.3	1.3.11
@radix-ui/react-collapsible	1.1.12	1.1.20
@radix-ui/react-context-menu	2.2.16	2.3.7
@radix-ui/react-dialog	1.1.15	1.1.23
@radix-ui/react-dropdown-menu	2.1.16	2.1.24
@radix-ui/react-hover-card	1.1.15	1.1.23
@radix-ui/react-label	2.1.8	2.1.15
@radix-ui/react-menubar	1.1.16	1.1.24
@radix-ui/react-navigation-menu	1.2.14	1.2.22
@radix-ui/react-popover	1.1.15	1.1.23
@radix-ui/react-progress	1.1.8	1.1.16
@radix-ui/react-radio-group	1.3.8	1.4.7
@radix-ui/react-scroll-area	1.2.10	1.2.18
@radix-ui/react-select	2.2.6	2.3.7
@radix-ui/react-separator	1.1.8	1.1.15
@radix-ui/react-slider	1.3.6	1.4.7
@radix-ui/react-slot	1.2.4	1.3.3
@radix-ui/react-switch	1.2.6	1.3.7
@radix-ui/react-tabs	1.1.13	1.1.21
@radix-ui/react-toast	1.2.15	1.2.23
@radix-ui/react-toggle	1.1.10	1.1.18
@radix-ui/react-toggle-group	1.1.11	1.1.19
@radix-ui/react-tooltip	1.2.8	1.2.16
@statsig/js-client	3.32.6	3.33.5
@statsig/react-bindings	3.32.6	3.33.5
@statsig/session-replay	3.32.6	3.33.5
@statsig/web-analytics	3.32.6	3.33.5
@t3-oss/env-core	0.13.10	0.13.11
@t3-oss/env-nextjs	0.13.10	0.13.11
@tabler/icons-react	3.36.1	3.46.0
@tanstack/react-query	5.90.21	5.102.8
@trpc/client	11.10.0	11.18.0
@trpc/react-query	11.10.0	11.18.0
@trpc/server	11.10.0	11.18.0
date-fns	4.1.0	4.4.0
drizzle-orm	0.45.1	0.45.2
geist	1.7.0	1.7.2
input-otp	1.4.2	1.5.0
jotai	2.17.1	2.20.3
next	16.2.10	16.3.4
nuqs	2.8.9	2.10.1
postgres	3.4.7	3.4.9
posthog-js	1.369.2	1.427.0
react	19.2.4	19.2.8
react-dom	19.2.4	19.2.8
react-hook-form	7.71.1	7.87.0
react-hotkeys-hook	5.2.4	5.3.3
react-is	19.2.4	19.2.8
react-resizable-panels	4.7.6	4.12.3
recharts	3.8.1	3.10.1
resend	6.12.0	6.26.0
sonner	2.0.7	2.0.8
tailwind-merge	3.4.1	3.6.0
use-debounce	10.1.0	10.1.1
zustand	5.0.11	5.0.15

Updates @auth/drizzle-adapter from 1.11.1 to 1.11.3

Release notes

Sourced from @​auth/drizzle-adapter's releases.

@​auth/drizzle-adapter@​1.11.3

Other

• @​auth/core: dependency update (8a933f95)

@​auth/drizzle-adapter@​1.11.2

Other

• @​auth/core: dependency update (67f2b168)

Commits

• 5af7357 chore(release): bump package version(s) [skip ci]
• 8a933f9 fix(core): document that getToken returns null for malformed authorization he...
• 5b1aa47 chore(ci): pin surrealdb test server to the v2 image for the 1.3 client (#13468)
• 1116034 Chore/nodemailer 8 peer deps (#13434)
• 7b35fc3 fix(docs): repair docs build broken by floating TypeScript resolution (#13450)
• b24abfa fix(proxy): override Vercel build command so it doesn't run turbo (#13448)
• a99514b chore(deps): resolve remaining Dependabot alerts via cross-major dependency u...
• d008b9b Merge commit from fork
• af42d8f chore: lint (#13446)
• e707770 Merge commit from fork
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by better-gustavo, a new releaser for @​auth/drizzle-adapter since your current version.

Updates @builder.io/dev-tools from 1.26.12 to 1.81.3

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​builder.io/dev-tools since your current version.

Updates @builder.io/react from 9.1.0 to 9.4.4

Release notes

Sourced from @​builder.io/react's releases.

@​builder.io/react@9.4.4

Patch Changes

• Updated dependencies [c8f3d4a]
  • @​builder.io/sdk@6.3.3

@​builder.io/react@9.4.3

Patch Changes

• 771e834: Fixed Image components to render an explicit empty alt attribute when alt text is blank or missing
• Updated dependencies [d9afb88]
  • @​builder.io/sdk@6.3.2

@​builder.io/react@9.4.2

Patch Changes

• bbcd9d7: Exposed the existing Image sizes field and fixed responsive source selection in Gen 2 SDKs.

@​builder.io/react@9.4.1

Patch Changes

• 95c6a94: Validate visual editor message origins with exact trusted hostnames and reject malformed or non-HTTP origins.
• Updated dependencies [95c6a94]
  • @​builder.io/sdk@6.3.1

@​builder.io/react@9.4.0

Minor Changes

• f3d7a3d: Improve state inspector reliability in visual editor for gen1 react sdk

@​builder.io/react@9.3.0

Minor Changes

• 5096d69: Prepend sizes="auto" to and elements to reduce oversized image downloads

@​builder.io/react@9.2.0

Minor Changes

• 560a5d0: Added fetchTotalCount param to getAll() in gen1 sdks

Patch Changes

• Updated dependencies [560a5d0]
  • @​builder.io/sdk@6.3.0

@​builder.io/react@9.1.3

Patch Changes

• 8001b0f: fix: handle errors in makeFn() when serialising functions

Commits

• See full diff in compare view

Updates @builder.io/sdk from 6.2.0 to 6.3.3

Release notes

Sourced from @​builder.io/sdk's releases.

@​builder.io/sdk@6.3.3

Patch Changes

• c8f3d4a: Types: allow showIf callbacks to receive the existing parent arguments and the current editor locale through context.locale.

@​builder.io/sdk@6.3.2

Patch Changes

• d9afb88: Types: add optional group?: string to the component metadata type used by Builder.registerComponent, so TypeScript integrations can bucket custom components into their own accordions in the editor's insert menu without excess-property errors.

@​builder.io/sdk@6.3.1

Patch Changes

• 95c6a94: Validate visual editor message origins with exact trusted hostnames and reject malformed or non-HTTP origins.

@​builder.io/sdk@6.3.0

Minor Changes

• 560a5d0: Added fetchTotalCount param to getAll() in gen1 sdks

@​builder.io/sdk@6.2.1

Patch Changes

• fffde77: fix trackConversion method for sdks

Commits

• See full diff in compare view

Updates @c15t/nextjs from 2.0.0 to 2.2.1

Changelog

Sourced from @​c15t/nextjs's changelog.

2.2.1

Patch Changes

• Restore enabled: false so all client-side consents are granted, initialization requests are skipped, and consent-gated scripts load immediately.

  Fix www handling in CORS origin matching. *.example.com now accepts https://www.example.com, and a schemeless www.example.com entry accepts both the apex and www forms.

  Support native WebView app schemes in trustedOrigins (capacitor://localhost, ionic://localhost, custom iosScheme values), matched on both scheme and host.

  Declare hono as ^4.12.34 rather than an exact pin so you can take Hono security releases without waiting for a new @c15t/backend.

• Updated dependencies

  • c15t@2.2.1
  • @​c15t/react@​2.2.1
  • @​c15t/translations@​2.2.1

2.2.0

Patch Changes

• Read the c15t 2.2.0 changelog for the complete release notes and upgrade context.
• Updated dependencies
  • c15t@2.2.0
  • @​c15t/react@​2.2.0
  • @​c15t/translations@​2.2.0

2.2.0-canary-20260731105620

Patch Changes

• Updated dependencies [c187c9d]
  • @​c15t/react@​2.2.0-canary-20260731105620
  • c15t@2.2.0-canary-20260731105620

2.2.0-canary-20260727202135

Minor Changes

• b032a69: Add ConsentDialogTriggerToolbar to React and Next.js as an opt-in, draggable toolbar with app-owned actions and exactly one built-in consent preferences action. The existing ConsentDialogTrigger remains unchanged.

• 0c97773: Add consent-aware Google Maps and YouTube components for React and Next.js, plus useConsentScript for building custom SDK integrations.

  • GoogleMap keeps the Maps JavaScript API off the page until consent, shares one page-level loader across map instances, supports retries and loader configuration, and provides accessible blocked, loading, and error states.
  • YouTubeEmbed keeps the iframe unmounted until consent and provides a responsive, privacy-enhanced embed with type-safe URL configuration.
  • Add customizable frame.loading and frame.error messages for integration loading and failure states.

... (truncated)

Commits

• f52519e Version Packages
• 017433b Version Packages (#872)
• 8a1144d chore: publish canary snapshot (#950)
• 131b41f chore: publish canary snapshot (#888)
• 0c97773 feat(react): add consent-aware integration wrappers (#865)
• 16a1f82 chore: dependency audit — TypeScript 7, rslib 0.23, security sweep (#922)
• 1e1d918 Fix ShieldCN README badge color modes (#897)
• fbac095 Refresh README badges (#895)
• 1e111b4 Improve README AEO positioning (#893)
• 6449261 Fix broken documentation links (#886)
• Additional commits viewable in compare view

Updates @formkit/auto-animate from 0.9.0 to 0.10.0

Release notes

Sourced from @​formkit/auto-animate's releases.

v0.10.0

Features

• Marko v6 integration — a new <auto-animate> tag exported from @formkit/auto-animate/marko (#239). Pass your parent element's tag variable (<ul/listRef> → parent=listRef), with optional options and a reactive enabled attribute. SSR/resume safe. Thanks @​defunkt-dev!

Docs

• New Marko usage section and framework tabs at https://auto-animate.formkit.com

CI

• Releases are now published to npm via OIDC trusted publishing on v* tag pushes.

Commits

• b6a6fee ci: use bundled npm for trusted publishing
• 00b8944 ci: add trusted publishing and release workflows
• 75ba14d chore: release v0.10.0
• a73b637 test: scope framework demo selectors and cover Marko example
• 01c5f5b Merge pull request #239 from defunkt-dev/master
• e0a1b15 docs support
• 35ac0ad fix some ts errors
• 7f1d60a e2e ssr test suite for marko
• 8b1ef37 e2e test suite for marko
• 304efab feat: marko v6 auto-animate integration
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​formkit/auto-animate since your current version.

Updates @fortawesome/fontawesome-svg-core from 7.2.0 to 7.3.1

Release notes

Sourced from @​fortawesome/fontawesome-svg-core's releases.

Release 7.3.1

Change log available at https://fontawesome.com/docs/changelog/

Release 7.3.0

Change log available at https://fontawesome.com/docs/changelog/

Commits

• 14c65a3 Release 7.3.1 (#21630)
• 70fb2dd Release 7.3.0 (#21612)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by fortawesome-admin, a new releaser for @​fortawesome/fontawesome-svg-core since your current version.

Updates @fortawesome/free-solid-svg-icons from 7.2.0 to 7.3.1

Release notes

Sourced from @​fortawesome/free-solid-svg-icons's releases.

Release 7.3.1

Change log available at https://fontawesome.com/docs/changelog/

Release 7.3.0

Change log available at https://fontawesome.com/docs/changelog/

Commits

• 14c65a3 Release 7.3.1 (#21630)
• 70fb2dd Release 7.3.0 (#21612)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by fortawesome-admin, a new releaser for @​fortawesome/free-solid-svg-icons since your current version.

Updates @fortawesome/react-fontawesome from 3.2.0 to 3.5.0

Release notes

Sourced from @​fortawesome/react-fontawesome's releases.

v3.5.0

3.5.0 (2026-07-20)

Features

• add new canvas options (c5333b9)

Chores

• deps: roll back commitlint to fix release notes generation (d5f3376)
• fix missing changelog for 3.4.0 (e33cff5)

v3.4.0

3.4.0 (2026-07-08)

Features

• Support for new animations introduced in FontAwesome v7.3.0 (#651)

Chores

• deps: bump fast-uri from 3.1.0 to 3.1.2 (FortAwesome/react-fontawesome@a193c11)
• deps-dev: bump dev dependencies to use FA 7.3.0 (FortAwesome/react-fontawesome@cc540d8)

Full Changelog: FortAwesome/react-fontawesome@v3.3.1...v3.4.0

v3.3.1

3.3.1 (2026-04-20)

Just a few dependency bumps to close off CVEs (not that our lib is really affected anyway).

Chores

• deps-dev: bump handlebars from 4.7.8 to 4.7.9 (f1d6d94)
• deps-dev: bump lodash-es from 4.17.23 to 4.18.1 (212496a)
• deps-dev: bump picomatch from 2.3.1 to 2.3.2 (557ceaf)
• deps: bump lodash from 4.17.23 to 4.18.1 (2d06890)
• deps: node 22.22.2, bump all dev dependencies (99ba500)

v3.3.0

3.3.0 (2026-03-20)

Highlights:

• Added Custom Gradient Support! (see PR #625 and Issue #368)
• Added new API Reference documentation! (see https://fortawesome.github.io/react-fontawesome/)

Features

... (truncated)

Changelog

Sourced from @​fortawesome/react-fontawesome's changelog.

3.5.0 (2026-07-20)

Features

• add new canvas options (c5333b9)

Chores

• deps: roll back commitlint to fix release notes generation (d5f3376)
• fix missing changelog for 3.4.0 (e33cff5)

3.4.0 (2026-07-08)

Features

• Support for new animations introduced in FontAwesome v7.3.0 (#651)

Chores

• deps: bump fast-uri from 3.1.0 to 3.1.2 (a193c11)
• deps-dev: bump dev dependencies to use FA 7.3.0 (cc540d8)

3.3.1 (2026-04-20)

Chores

• deps-dev: bump handlebars from 4.7.8 to 4.7.9 (f1d6d94)
• deps-dev: bump lodash-es from 4.17.23 to 4.18.1 (212496a)
• deps-dev: bump picomatch from 2.3.1 to 2.3.2 (557ceaf)
• deps: bump lodash from 4.17.23 to 4.18.1 (2d06890)
• deps: node 22.22.2, bump all dev dependencies (99ba500)

3.3.0 (2026-03-20)

Features

• style: add support for custom gradient fills (d14cdc5)
• style: use single prop for gradient fills, add unit tests (2282d16)

Chores

• docs: add typedoc-generated API reference docs (5894156)
• docs: clean up API docs output structure, rewrite html links (a7782b8)
• docs: update README with FontAwesome documentation links (c540f90)

CI/CD

• actions: fix publish action env setting (eb4b40a)
• actions: only run full test matrix on PRs and main (3434d60)
• actions: update deprecated actions (6382b20)

... (truncated)

Commits

• 162b1cd chore(release): 3.5.0 [skip ci]
• d5f3376 chore(deps): roll back commitlint to fix release notes generation
• 94a3d3e Merge pull request #652 from FortAwesome/new-7-3-canvas-options
• c5333b9 feat: add new canvas options
• e33cff5 chore: fix missing changelog for 3.4.0
• 814990b chore(release): 3.4.0 [skip ci]
• cc540d8 chore(deps): bump dev to FA 7.3.0
• 949c7a1 Merge pull request #651 from FortAwesome/new-7-3-animations
• 3dfea93 fix: more accurate links to animations
• 4415c9e feat: new animations to support 7.3.0
• Additional commits viewable in compare view

Updates @hookform/resolvers from 5.2.2 to 5.9.1

Release notes

Sourced from @​hookform/resolvers's releases.

v5.9.1

5.9.1 (2026-08-17)

Bug Fixes

• isNameInFieldArray fails to recognise bracket-notation array paths causing nested errors overwriting (#876) (f18ddfb)

v5.9.0

5.9.0 (2026-08-15)

Features

• update joi to v18 (#873) (c8159ae)

v5.8.0

5.8.0 (2026-08-13)

Features

• support Vest 6 (a5100ab)

v5.7.1

5.7.1 (2026-08-02)

Bug Fixes

• ata-validator peer dependency version (#871) (827f20b)

v5.7.0

5.7.0 (2026-08-02)

Features

• support vine v4 (#867) (4cfba18)

v5.6.0

5.6.0 (2026-08-01)

Features

• improve all resovlers drops validation errors for special root field names (b011a5f)

v5.5.8

5.5.8 (2026-08-01)

... (truncated)

Commits

• f18ddfb fix: isNameInFieldArray fails to recognise bracket-notation array paths causi...
• c8159ae feat: update joi to v18 (#873)
• a5100ab feat: support Vest 6
• 28ec539 fix(vest)!: support Vest 6 (#874)
• 827f20b fix: ata-validator peer dependency version (#871)
• 4cfba18 feat: support vine v4 (#867)
• 58d2e2d remove dead image
• b011a5f feat: improve all resovlers drops validation errors for special root field names
• 5483a03 improve all resolvers (#870)
• 2f28787 fix: Zod resolver drops validation errors for special root field names (#869)
• Additional commits viewable in compare view

Updates @mantine/hooks from 9.0.2 to 9.6.0

Release notes

Sourced from @​mantine/hooks's releases.

9.6.0

View changelog with demos on mantine.dev website

Support Mantine development

You can now sponsor Mantine development with OpenCollective. All funds are used to improve Mantine and create new features and components.

@​mantine/lightbox package

New @​mantine/lightbox package – a full-screen media lightbox with carousel navigation, zoom, thumbnails, toolbar customization, and store-based API. Supports image, video, and custom slides:

import '@mantine/lightbox/styles.css';
import { useState } from 'react';
import { Image, SimpleGrid } from '@mantine/core';
import { Lightbox, LightboxSlideData } from '@mantine/lightbox';
const images = [
'https://raw.githubusercontent.com/mantinedev/mantine/master/.demo/images/bg-1.png',
'https://raw.githubusercontent.com/mantinedev/mantine/master/.demo/images/bg-2.png',
'https://raw.githubusercontent.com/mantinedev/mantine/master/.demo/images/bg-3.png',
'https://raw.githubusercontent.com/mantinedev/mantine/master/.demo/images/bg-4.png',
'https://raw.githubusercontent.com/mantinedev/mantine/master/.demo/images/bg-5.png',
];
const slides: LightboxSlideData[] = images.map((src) => ({ src }));
function Demo() {
const [opened, setOpened] = useState(false);
const [index, setIndex] = useState(0);
return (
<>
<Lightbox
opened={opened}
onClose={() => setOpened(false)}
slides={slides}
currentIndex={index}
onIndexChange={setIndex}
/>
  &lt;SimpleGrid cols={3}&gt;
    {images.map((src, i) =&gt; (
      &lt;Image
        key={src}
        src={src}
        radius=&quot;md&quot;
        style={{ cursor: 'pointer' }}

</tr></table>

... (truncated)

Commits

• de1a39d [release] Version: 9.6.0
• 8a284e2 [release] Version: 9.5.2
• 1f93ee5 [@​mantine/hooks] use-debounced-value: Fix leading: true firing multiple tim...
• 0f57eaf [release] Version: 9.5.1
• ce00cdd [@​mantine/hooks] use-scroll-spy: Allow usage with refs (#9025)
• ca9bc6f [release] Version: 9.5.1-alpha.1
• 8f1ad1b [release] Version: 9.5.1-alpha.0
• 953192e [@​mantine/core] FloatingWindow: Add support for onSizeChange and `onResize...
• f1d3306 [release] Version: 9.5.0
• 7320562 [release] Version: 9.4.3
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​mantine/hooks since your current version.

Updates @next/third-parties from 16.2.4 to 16.3.4

Release notes

Sourced from @​next/third-parties's releases.

v16.3.4

Follow-up release to v16.3.3 re-enabling AVIF Image Optimization (#97949).

The following bug fixes have been backported. It does not include all pending features/changes on canary.

• testmode: Fix infinite recursion in testmode passthrough fetch (#97691)
• Fix build error when aliasing typescript to @​typescript/typescript6 (#97997)
• Fix unset crossOrigin in Turbopack manifests (#97930)

Credits

Huge thanks to @​eps1lon, @​mischnic, and @​timneutkens for helping!

v16.3.3

This release contains security fixes for the following advisories:

Critical:

• Unauthenticated Remote Code Execution on windows-hosted servers
• Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used

v16.3.2

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

• [backport] Scope app-entry export validation to files inside the app directory (#97357)
• [backport] Fix catch-all index page being served for every other slug (#97416)
• [16.3] Turbopack: don't trace embedded WASM loader helpers (#97353) (#97463)
• [16.3] Turbopack: retain conditions when replacing resolve request keys (#97453)
• [16.3.x] Fix Turbopack worker chunk loading with asset prefix (#97419)
• [16.3.x] Authenticate Turborepo remote caching with OIDC instead of a static PAT (#97603)

Credits

Huge thanks to @​lubieowoce, @​unstubbable, @​timneutkens, @​mischnic, and @​eps1lon for helping!

v16.3.1

What's Changed

• [16.x] Turbopack: don't strip async-module runtime from shared runtime chunks by @​lukesandberg in vercel/next.js#96653
• [16.x] [turbopack] Add turbopack_ecmascript and turbopack_wasm's embeded FS to internal_assets_conditions by @​lukesandberg in vercel/next.js#96655
• [16.x] [turbopack] Collapse nested promises in the analyzer by @​sampoder in vercel/next.js#96675
• [16.x] fix(next/image): preserve image response after optimization by @​styfle in vercel/next.js#96733
• [16.3.x] Default deploy e2e tests to the repo next version by @​eps1lon in vercel/next.js#96900
• [backport] Bump @​swc/helpers by @​mischnic in vercel/next.js#96885
• [backport] [turbopack] Raise registration calls in hoisted modules to the top by @​lukesandberg in vercel/next.js#97308
• [backport] Fix missing styled-jsx styles in Pages Router SSR on adapter builds by @​lukesandberg in vercel/next.js#97302
• [backport] [turbopack] Fix HMR for dynamic imports evaluated from layouts by @​lukesandberg in vercel/next.js#97317
• [backport] Restore the live headers() view of the incoming request by @​unstubbable in vercel/next.js#97311

... (truncated)

Commits

• 299180d v16.3.4
• a9a1cb7 v16.3.3
• d0ac882 v16.3.2
• 3d32eb8 v16.3.1
• d73f562 v16.3.0
• 4fd843f v16.3.0-canary.107
• 9480f7f v16.3.0-canary.106
• a8dcd25 v16.3.0-canary.105
• 38f0cde v16.3.0-canary.104
• f3edea1 v16.3.0-canary.103
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​next/third-parties since your current version.

Updates @number-flow/react from 0.5.14 to 0.6.2

Release notes

Sourced from @​number-flow/react's releases.

@​number-flow/react@​0.6.2

Patch Changes

• Updated dependencies [116b054]:
  • number-flow@0.6.2

@​number-flow/react@​0.6.1

Patch Changes

• Guard DOM globals in browser (see #188) (a73a383)

• Updated dependencies [a73a383]:

  • number-flow@0.6.1

@​number-flow/react@​0.6.0

Minor Changes

• Remove --number-flow-char-height CSS property in favor of line-height (e8a8904)

Patch Changes

• Updated dependencies [e8a8904]:
  • number-flow@0.6.0

Commits

• See full diff in compare view

Updates @qwik.dev/partytown from 0.11.2 to 0.14.3

Release notes

Sourced from @​qwik.dev/partytown's releases.

v0.14.3

Patch Changes

• 🐞🩹 large non-blocking DOM operation batches now yield the main thread every ~40ms, keeping tasks under the 50ms long-task threshold and reducing reported TBT (by @​gioboa in #756)

• ✨ automatically execute partytown scripts added to the page after initialization, e.g. on client-side route transitions, without needing to dispatch a ptupdate event (by @​gioboa in #746)

• ✨ GTM's Tag Assistant preview now connects to pages running GTM inside Partytown: scripts the worker can't read (no CORS headers, like the debug bootstrap) fall back to the main thread, the container's debug queue is bridged during gtm_debug sessions, and window.opener / message event.source work from the worker (by @​gioboa in #753)

• ✨ CSP Trusted Types support: Partytown now works on pages enforcing require-trusted-types-for 'script' — add partytown to the trusted-types directive to allow its policy (by @​gioboa in #754)

• 🐞🩹 load cross-origin iframes natively when their content can't be fetched, so widgets like the reCAPTCHA badge work instead of crashing with a NetworkError (by @​gioboa in #749)

• 🐞🩹 partytown scripts added after the main thread fallback ran, e.g. gtm.js injected by the GTM snippet, now fall back too — previously they were silently dropped in webviews without service worker support (by @​gioboa in #751)

• 🐞🩹 ship partytown-sandbox-sw.html as a real library file, so requests that bypass the service worker (crawlers, private browsing, encoded urls) get a 200 instead of a 404 (by @​gioboa in #750)

• 🐞🩹 methods called unbound by scripts (e.g. var f = win.fn; f()) no longer crash the worker proxy, fixing Google Publisher Tag ad serving (by @​gioboa in #755)

v0.14.2

Patch Changes

• 🧹 remove the unused dotenv dependency, the package has zero runtime dependencies again (by @​gioboa in #742)

• ✨ fallbackTimeout: 0 disables the main thread fallback entirely (by @​gioboa in #741)

• 🐞🩹 don't throw when the snippet runs in an iframe with a cross-origin top, run Partytown in the iframe itself instead (by @​gioboa in #735)

• 🐞🩹 support document.createRange().createContextualFragment() and document.fonts (load/check/ready) in the worker (by @​gioboa in #731)

• 🐞🩹 the main thread fallback now loads external scripts through their src, previously only inline content was copied (by @​gioboa in #739)

• 🐞🩹 keep forwarded globals (e.g. dataLayer) local to the worker instead of sync-proxying them to the main thread, forward items already pushed before Partytown loads, and stop dropping forwarded events when the worker global doesn't exist yet (by @​gioboa in #721)

• 🐞🩹 don't crash initialization when a Proxy global (e.g. vinxi's MANIFEST) returns unclonable objects during the window snapshot (by @​gioboa in #737)

• 🐞🩹 run navigator.sendBeacon and iframe contentWindow.fetch urls through resolveUrl, so analytics requests like GA4's /g/collect can be proxied (by @​gioboa in #740)

• 🐞🩹 allocate the atomics SharedArrayBuffer small and grow it on demand instead of eagerly reserving 1GB, which newer Chrome versions can refuse (by @​gioboa in #729)

• 🐞🩹 add a noindex robots meta to the sandbox html so crawlers stop reporting 404s for it in Search Console (by @​gioboa in #738)

• 🐞🩹 stop rewriting this inside string literals, template literal text and comments when preparing scripts for the worker (by @​gioboa in

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
bones	Error		Sep 7, 2026 10:41am UTC