deps(deps): bump the all-dependencies group across 1 directory with 37 updates

[dependabot]

Bumps the all-dependencies group with 36 updates in the / directory:

Package	From	To
@eslint-react/eslint-plugin	2.3.12	2.3.13
@eslint/js	9.39.1	9.39.2
@typescript-eslint/eslint-plugin	8.48.1	8.49.0
@typescript-eslint/parser	8.48.1	8.49.0
eslint	9.39.1	9.39.2
react	19.2.1	19.2.3
typescript-eslint	8.48.1	8.49.0
vite	7.2.6	7.2.7
wrangler	4.53.0	4.54.0
@ai-sdk/openai	2.0.77	2.0.86
@better-auth/passkey	1.4.5	1.4.7
@trpc/server	11.7.2	11.8.0
ai	5.0.107	5.0.113
better-auth	1.4.5	1.4.7
drizzle-orm	0.45.0	0.45.1
resend	6.5.2	6.6.0
@cloudflare/workers-types	4.20251205.0	4.20251213.0
@types/bun	1.3.3	1.3.4
hono	4.10.7	4.11.1
@tanstack/react-router	1.139.14	1.141.2
@trpc/client	11.7.2	11.8.0
@trpc/tanstack-react-query	11.7.2	11.8.0
jotai	2.15.2	2.16.0
jotai-effect	2.1.5	2.2.1
lucide-react	0.556.0	0.561.0
react-dom	19.2.1	19.2.3
@tailwindcss/postcss	4.1.17	4.1.18
@tanstack/react-router-devtools	1.139.14	1.141.2
@tanstack/router-plugin	1.139.14	1.141.2
@types/node	24.10.1	25.0.2
@vitejs/plugin-react	5.1.1	5.1.2
autoprefixer	10.4.22	10.4.23
vite-tsconfig-paths	5.1.4	6.0.1
react-email	5.0.5	5.0.8
@react-email/preview-server	5.0.5	5.0.8
astro	5.16.4	5.16.5

Updates @eslint-react/eslint-plugin from 2.3.12 to 2.3.13

Release notes

Sourced from @​eslint-react/eslint-plugin's releases.

v2.3.13 (2025-12-09)

What's Changed

🐞 Fixes

• Clean up the code structure of the AST utils and fix an issue where isNodeEqual did not handle as expressions correctly, closes #1340 by @​Rel1cx in Rel1cx/eslint-react#1341

🪄 Improvements

• Update next and react to latest versions across all packages

Full Changelog: Rel1cx/eslint-react@v2.3.12...v2.3.13

Changelog

Sourced from @​eslint-react/eslint-plugin's changelog.

v2.3.13 (2025-12-09)

🐞 Fixes

• Clean up the code structure of the AST utils and fix an issue where isNodeEqual did not handle as expressions correctly, closes #1340 by @​Rel1cx in Rel1cx/eslint-react#1341

🪄 Improvements

• Update next and react to latest versions across all packages

Full Changelog: Rel1cx/eslint-react@v2.3.12...v2.3.13

Commits

• e68f8ad release: 2.3.13
• cd7a1a8 release: 2.3.13-beta.7
• 4309202 release: 2.3.13-next.7
• 421c8a7 release: 2.3.13-beta.6
• cd5da63 release: 2.3.13-next.6
• 47bce33 Enhance isNodeValueEqual function in var package
• 0c226ae release: 2.3.13-beta.5
• e27df95 release: 2.3.13-next.5
• b6b85a7 release: 2.3.13-beta.4
• cb18bac release: 2.3.13-next.4
• Additional commits viewable in compare view

Updates @eslint/js from 9.39.1 to 9.39.2

Release notes

Sourced from @​eslint/js's releases.

v9.39.2

Bug Fixes

• 5705833 fix: warn when eslint-env configuration comments are found (#20381) (sethamus)

Build Related

• 506f154 build: add .scss files entry to knip (#20391) (Milos Djermanovic)

Chores

• 7ca0af7 chore: upgrade to @eslint/js@9.39.2 (#20394) (Francesco Trotta)
• c43ce24 chore: package.json update for @​eslint/js release (Jenkins)
• 4c9858e ci: add v9.x-dev branch (#20382) (Milos Djermanovic)

Commits

• c43ce24 chore: package.json update for @​eslint/js release
• See full diff in compare view

Updates @typescript-eslint/eslint-plugin from 8.48.1 to 8.49.0

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.49.0

8.49.0 (2025-12-08)

🚀 Features

• eslint-plugin: use Intl.Segmenter instead of graphemer (#11804)

🩹 Fixes

• deps: update dependency prettier to v3.7.2 (#11820)

❤️ Thank You

• Justin McBride
• Kirk Waiblinger @​kirkwaiblinger

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.49.0 (2025-12-08)

🚀 Features

• eslint-plugin: use Intl.Segmenter instead of graphemer (#11804)

🩹 Fixes

• deps: update dependency prettier to v3.7.2 (#11820)

❤️ Thank You

• Justin McBride
• Kirk Waiblinger @​kirkwaiblinger

You can read about our versioning strategy and releases on our website.

Commits

• 864595a chore(release): publish 8.49.0
• 32b7e89 chore(deps): update dependency @​vitest/eslint-plugin to v1.5.1 (#11816)
• 56149a2 feat(eslint-plugin): use Intl.Segmenter instead of graphemer (#11804)
• 34a49a4 fix(deps): update dependency prettier to v3.7.2 (#11820)
• d2d7ace docs: fixes bad link to jest docs in unbound-method rule page (#11823)
• See full diff in compare view

Updates @typescript-eslint/parser from 8.48.1 to 8.49.0

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.49.0

8.49.0 (2025-12-08)

🚀 Features

• eslint-plugin: use Intl.Segmenter instead of graphemer (#11804)

🩹 Fixes

• deps: update dependency prettier to v3.7.2 (#11820)

❤️ Thank You

• Justin McBride
• Kirk Waiblinger @​kirkwaiblinger

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.49.0 (2025-12-08)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

Commits

• 864595a chore(release): publish 8.49.0
• 32b7e89 chore(deps): update dependency @​vitest/eslint-plugin to v1.5.1 (#11816)
• See full diff in compare view

Updates eslint from 9.39.1 to 9.39.2

Release notes

Sourced from eslint's releases.

v9.39.2

Bug Fixes

• 5705833 fix: warn when eslint-env configuration comments are found (#20381) (sethamus)

Build Related

• 506f154 build: add .scss files entry to knip (#20391) (Milos Djermanovic)

Chores

• 7ca0af7 chore: upgrade to @eslint/js@9.39.2 (#20394) (Francesco Trotta)
• c43ce24 chore: package.json update for @​eslint/js release (Jenkins)
• 4c9858e ci: add v9.x-dev branch (#20382) (Milos Djermanovic)

Commits

• 9278324 9.39.2
• 542266a Build: changelog update for 9.39.2
• 7ca0af7 chore: upgrade to @eslint/js@9.39.2 (#20394)
• c43ce24 chore: package.json update for @​eslint/js release
• 5705833 fix: warn when eslint-env configuration comments are found (#20381)
• 506f154 build: add .scss files entry to knip (#20391)
• 4c9858e ci: add v9.x-dev branch (#20382)
• See full diff in compare view

Updates react from 19.2.1 to 19.2.3

Release notes

Sourced from react's releases.

19.2.3 (December 11th, 2025)

React Server Components

• Add extra loop protection to React Server Functions (@​sebmarkbage #35351)

19.2.2 (December 11th, 2025)

React Server Components

• Move react-server-dom-webpack/*.unbundled to private react-server-dom-unbundled (@​eps1lon facebook/react#35290)
• Patch Promise cycles and toString on Server Functions (@​sebmarkbage, @​unstubbable #35289, #35345)

Commits

• 612e371 Version 19.2.3
• b910fc1 Version 19.2.2
• See full diff in compare view

Updates typescript-eslint from 8.48.1 to 8.49.0

Release notes

Sourced from typescript-eslint's releases.

v8.49.0

8.49.0 (2025-12-08)

🚀 Features

• eslint-plugin: use Intl.Segmenter instead of graphemer (#11804)

🩹 Fixes

• deps: update dependency prettier to v3.7.2 (#11820)

❤️ Thank You

• Justin McBride
• Kirk Waiblinger @​kirkwaiblinger

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.49.0 (2025-12-08)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

Commits

• 864595a chore(release): publish 8.49.0
• 32b7e89 chore(deps): update dependency @​vitest/eslint-plugin to v1.5.1 (#11816)
• See full diff in compare view

Updates vite from 7.2.6 to 7.2.7

Release notes

Sourced from vite's releases.

v7.2.7

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

7.2.7 (2025-12-08)

Bug Fixes

• plugin shortcut support (#21211) (721f163)

Commits

• 317b3b2 release: v7.2.7
• 721f163 fix: plugin shortcut support (#21211)
• See full diff in compare view

Updates wrangler from 4.53.0 to 4.54.0

Release notes

Sourced from wrangler's releases.

wrangler@4.54.0

Minor Changes

• #11512 c15e99e Thanks @​emily-shen! - Enable using ctx.exports with containers

  You can now use containers with Durable Objects that are accessed via ctx.exports.

  Now your config file can look something like this:

  {
  	"name": "container-app",
  	"main": "src/index.ts",
  	"compatibility_date": "2025-12-01",
  	"compatibility_flags": ["enable_ctx_exports"], // compat flag needed for now.
  	"containers": [
  		{
  			"image": "./Dockerfile",
  			"class_name": "MyDOClassname",
  			"name": "my-container"
  		},
  	],
  	"migrations": [
  		{
  			"tag": "v1",
  			"new_sqlite_classes": ["MyDOClassname"],
  		},
  	],
  	// no need to declare your durable object binding here
  }
  

  Note that when using ctx.exports, where you previously accessed a Durable Object via something like env.DO, you should now access with ctx.exports.MyDOClassname.

  Refer to the docs for more information on using ctx.exports.

• #11508 b17797c Thanks @​dario-piotrowicz! - Wrangler will no longer try to add additional configuration to projects using @cloudflare/vite-plugin when deploying or running wrangler setup

• #11508 b17797c Thanks @​dario-piotrowicz! - When a Vite project is detected, install @cloudflare/vite-plugin

• #11576 bb47e20 Thanks @​dario-piotrowicz! - Support Analog projects in autoconfig

• #10582 991760d Thanks @​flakey5! - Add containers ssh command

Patch Changes

• #11467 235d325 Thanks @​edmundhung! - fix: prevent reporting SQLite error from wrangler d1 execute to Sentry

• #11414 41103f5 Thanks @​petebacondarwin! - add extra logging to user log-in flow for diagnosing failed login requests

• #11559 ea6fbec Thanks @​nikitassharma! - Remove image validation for containers on wrangler deploy.

... (truncated)

Commits

• d9eae49 Version Packages (#11538)
• 235d325 fix(wrangler): prevent SQLite users error from being reported to Sentry (#11467)
• bb47e20 Support Analog in autoconfig (#11576)
• c15e99e support using containers with ctx.exports (#11512)
• c6dd86f chore(deps): bump the workerd-and-workers-types group with 2 updates (#11584)
• bd5f087 chore(deps): bump the workerd-and-workers-types group with 2 updates (#11583)
• d090d48 Introduce internal isWorkerNotFoundError utility and avoid worker-not-found...
• 31c162a chore(deps): bump the workerd-and-workers-types group with 2 updates (#11552)
• ea6fbec Remove image registry validation for containers on deploy (#11559)
• 991760d feat: containers ssh command (#10582)
• Additional commits viewable in compare view

Updates @ai-sdk/openai from 2.0.77 to 2.0.86

Release notes

Sourced from @​ai-sdk/openai's releases.

@​ai-sdk/openai@​2.0.86

Patch Changes

• a909bcf: fix(openai); fix url_citation schema in chat api

@​ai-sdk/openai@​2.0.85

Patch Changes

• e79430b: fix(openai): change find action type to find_in_page action type

@​ai-sdk/openai@​2.0.84

Patch Changes

• 041a4fc: feat(openai): add gpt-5.2 models

@​ai-sdk/openai@​2.0.83

Patch Changes

• edc807f: feat(provider/openai): add GPT 5.1 Codex Max to OpenAI Responses model IDs list

@​ai-sdk/openai@​2.0.82

Patch Changes

• e31dfa4: feat(provider/openai): add support for OpenAI xhigh reasoning effort

@​ai-sdk/openai@​2.0.81

Patch Changes

• Updated dependencies [ef6d784]
  • @​ai-sdk/provider-utils@​3.0.19

Commits

• a1f554b Version Packages (#11142)
• a909bcf Backport: fix(openai): fix url_citation schema in chat api (#11141)
• 97c861d Backport: fix(google-vertex): remove duplicate gemini-1.0-pro-001 model ID (#...
• 654cca4 Version Packages (#11138)
• 7e6fb4d Backport: fix(gateway): log friendly user message in non-production environme...
• e35db9b Backport: docs(svelte): fix link in getting started documentation (#11123)
• 3adfd51 Version Packages (#11121)
• 3716d34 Backport: fix(anthropic): support PDF responses in web_fetch_tool_result sche...
• 35f1dd5 Version Packages (#11118)
• e79430b Backport: fix(openai): change find action type to find_in_page action type (#...
• Additional commits viewable in compare view

Updates @better-auth/passkey from 1.4.5 to 1.4.7

Release notes

Sourced from @​better-auth/passkey's releases.

v1.4.7

   🚀 Features

• admin:
  • Add support role with permissions for user updates and enforce role change validation  -  by @​Bekacru and Copilot in better-auth/better-auth#6699 (6c68e)
• one-time-token:
  • Support setting session cookie on ott verify  -  by @​Bekacru in better-auth/better-auth#3659 (7a4e8)
• phone-number:
  • Add password length validation for reset functionality  -  by @​Bekacru in better-auth/better-auth#6674 (700f4)
• saml:
  • Assertion timestamp validation with per-provider clock skew  -  by @​Paola3stefania in better-auth/better-auth#6706 (f9875)
• sso:
  • Add InResponseTo validation  -  by @​Paola3stefania in better-auth/better-auth#6557 (5a49f)
  • Add OIDC discovery  -  by @​Paola3stefania and @​Bekacru in better-auth/better-auth#6395 (b9d4b)
  • Add URL normalization and validation to all discovery URLs  -  by @​jonathansamines, Paola Estefanía de Campos, @​Paola3stefania and @​Bekacru in better-auth/better-auth#6503 (50248)

   🐞 Bug Fixes

• Prevent stateless refresh with database configured  -  by @​Bekacru in better-auth/better-auth#6700 (9fed2)
• api-key: Check metadata is enabled for api key update endpoint  -  by @​Bekacru in better-auth/better-auth#6632 (87441)
• line: Enforce nonce  -  by @​Bekacru in better-auth/better-auth#6631 (66699)
• saml: Remove signature validation bypass  -  by @​Paola3stefania in better-auth/better-auth#6682 (9c1a3)

   🏎 Performance

• Add index on organizations slug field  -  by @​matteobad and matteobadini in better-auth/better-auth#6303 (c3fe9)

    View changes on GitHub

v1.4.7-beta.4

   🚀 Features

• saml: Assertion timestamp validation with per-provider clock skew  -  by @​Paola3stefania in better-auth/better-auth#6706 (90c59)
• sso: Add OIDC discovery  -  by @​Paola3stefania and @​Bekacru in better-auth/better-auth#6395 (57400)

    View changes on GitHub

v1.4.7-beta.3

   🚀 Features

• admin: Add support role with permissions for user updates and enforce role change validation  -  by @​Bekacru and Copilot in better-auth/better-auth#6699 (a0a16)
• sso: Add InResponseTo validation  -  by @​Paola3stefania in better-auth/better-auth#6557 (50ffe)

   🐞 Bug Fixes

• saml: Remove signature validation bypass  -  by @​Paola3stefania in better-auth/better-auth#6682 (dce3c)

    View changes on GitHub

v1.4.7-beta.2

... (truncated)

Commits

• e79b900 chore: bump package versions to 1.4.7 for better-auth modules
• cc3c7bf Revert "chore: independent pkg bumping (#6628)"
• 7a4e863 feat(one-time-token): support setting session cookie on ott verify (#3659)
• 700f40a feat(phone-number): add password length validation for reset functionality (#...
• 22a0053 chore: independent pkg bumping (#6628)
• 30b867a chore: add types linter (#6648)
• 262df9b chore: remove unused variables (#6647)
• f6f3752 chore: release v1.4.6
• 14d5ef9 chore: configure code coverage for project (#6339)
• a2e3a31 chore: fix tsdown config (#6575)
• Additional commits viewable in compare view

Updates @trpc/server from 11.7.2 to 11.8.0

Release notes

Sourced from @​trpc/server's releases.

v11.8.0

What's Changed

• feat(server): support streaming in API Gateway REST API by @​anatolzak in trpc/trpc#7039

Commits

• a247ce2 v11.8.0
• 78629d5 Fix bug (#7043)
• 9a17cef feat(server): support streaming in API Gateway REST API (#7039)
• fa8d806 chore(deps): update dependency valibot to v1.2.0 [security] (#7026)
• See full diff in compare view

Updates ai from 5.0.107 to 5.0.113

Release notes

Sourced from ai's releases.

ai@5.0.113

Patch Changes

• 7e6fb4d: fix(gateway): throw error with user-friendly message in non-production environments if AI_GATEWAY_API_KEY is not configured

ai@5.0.112

Patch Changes

• Updated dependencies [041a4fc]
  • @​ai-sdk/gateway@​2.0.21

ai@5.0.111

Patch Changes

• Updated dependencies [ef6d784]
  • @​ai-sdk/provider-utils@​3.0.19
  • @​ai-sdk/gateway@​2.0.20

ai@5.0.110

Patch Changes

• Updated dependencies [51bbaa1]
  • @​ai-sdk/gateway@​2.0.19

Commits

• 654cca4 Version Packages (#11138)
• 7e6fb4d Backport: fix(gateway): log friendly user message in non-production environme...
• e35db9b Backport: docs(svelte): fix link in getting started documentation (#11123)
• 3adfd51 Version Packages (#11121)
• 3716d34 Backport: fix(anthropic): support PDF responses in web_fetch_tool_result sche...
• 35f1dd5 Version Packages (#11118)
• e79430b Backport: fix(openai): change find action type to find_in_page action type (#...
• 7a0af34 Version Packages (#11102)
• 041a4fc Backport: feat(openai): add gpt-5.2 models (#11099)
• 0f4d6cb Version Packages (#11094)
• Additional commits viewable in compare view

Updates better-auth from 1.4.5 to 1.4.7

Release notes

Sourced from better-auth's releases.

v1.4.7

   🚀 Features

• admin:
  • Add support role with permissions for user updates and enforce role change validation  -  by @​Bekacru and Copilot in better-auth/better-auth#6699 (6c68e)
• one-time-token:
  • Support setting session cookie on ott verify  -  by @​Bekacru in better-auth/better-auth#3659 (7a4e8)
• phone-number:
  • Add password length validation for reset functionality  -  by @​Bekacru in better-auth/better-auth#6674 (700f4)
• saml:
  • Assertion timestamp validation with per-provider clock skew  -  by @​Paola3stefania in better-auth/better-auth#6706 (f9875)
• sso:
  • Add InResponseTo validation  -  by @​Paola3stefania in better-auth/better-auth#6557 (5a49f)
  • Add OIDC discovery  -  by @​Paola3stefania and @​Bekacru in better-auth/better-auth#6395 (b9d4b)
  • Add URL normalization and validation to all discovery URLs  -  by @​jonathansamines, Paola Estefanía de Campos, @​Paola3stefania and @​Bekacru in better-auth/better-auth#6503 (50248)

   🐞 Bug Fixes

• Prevent stateless refresh with database configured  -  by @​Bekacru in better-auth/better-auth#6700 (9fed2)
• api-key: Check metadata is enabled for api key update endpoint  -  by @​Bekacru in better-auth/better-auth#6632 (87441)
• line: Enforce nonce  -  by @​Bekacru in better-auth/better-auth#6631 (66699)
• saml: Remove signature validation bypass  -  by @​Paola3stefania in better-auth/better-auth#6682 (9c1a3)

   🏎 Performance

• Add index on organizations slug field  -  by @​matteobad and matteobadini in better-auth/better-auth#6303 (c3fe9)

    View changes on GitHub

v1.4.7-beta.4

   🚀 Features

• saml: Assertion timestamp validation with per-provider clock skew  -  by @​Paola3stefania in better-auth/better-auth#6706 (90c59)
• sso: Add OIDC discovery  -  by @​Paola3stefania and @​Bekacru in better-auth/better-auth#6395 (57400)

    View changes on GitHub

v1.4.7-beta.3

   🚀 Features

• admin: Add support role with permissions for user updates and enforce role change validation  -  by @​Bekacru and Copilot in better-auth/better-auth#6699 (a0a16)
• sso: Add InResponseTo validation  -  by @​Paola3stefania in better-auth/better-auth#6557 (50ffe)

   🐞 Bug Fixes

• saml: Remove signature validation bypass  -  by @​Paola3stefania in better-auth/better-auth#6682 (dce3c)

    View changes on GitHub

v1.4.7-beta.2

... (truncated)

Commits

• e79b900 chore: bump package versions to 1.4.7 for better-auth modules
• cc3c7bf Revert "chore: independent pkg bumping (#6628)"
• 7a4e863 feat(one-time-token): support setting session cookie on ott verify (#3659)
• 3001419 chore: properly validate body on email signup (#6744)
• cecaadd chore: set listSessions token to "" instead of undefined (#6745)
• 700f40a feat(phone-number): add password length validation for reset functionality (#...
• 87441c5 fix(api-key): check metadata is enabled for api key update endpoint (#6632)
• 9fed2ff fix: prevent stateless refresh with database configured (#6700)
• 99defea chore: bump react and next (#6707)
• 3d849d8 chore(organization): export getAdapter for plugin extensibility (#6726)
• Additional commits viewable in compare view

Updates drizzle-orm from 0.45.0 to 0.45.1

Release notes

Sourced from drizzle-orm's releases.

0.45.1

• Fixed pg-native Pool detection in node-postgres transactions breaking in environments with forbidden require() (#5107)

Commits

• a086f59 Fixed pg-native Pool detection in node-postgres transactions breaking in envi...
• See full diff in compare view

Updates resend from 6.5.2 to 6.6.0

Release notes

Sourced from resend's releases.

v6.6.0

What's Changed

• feat: add open_tracking, click_tracking, and tls fields to domain create by