chore(deps): bump the patch group across 7 directories with 15 updates

[dependabot]

Bumps the patch group with 15 updates in the / directory:

Package	From	To
@biomejs/biome	2.3.6	2.3.8
@changesets/cli	2.29.7	2.29.8
@vitest/coverage-v8	4.0.10	4.0.15
turbo	2.6.1	2.6.3
vitest	4.0.10	4.0.15
@apollo/gateway	2.12.1	2.12.2
@apollo/server	5.1.0	5.2.0
@types/express	5.0.5	5.0.6
@types/node	24.10.1	24.10.2
jose	6.1.2	6.1.3
node-mock-http	1.0.3	1.0.4
cookie	1.0.2	1.1.1
@types/react	19.2.6	19.2.7
graphql-yoga	5.16.2	5.17.1
@typescript-eslint/eslint-plugin	8.47.0	8.49.0

Bumps the patch group with 5 updates in the /packages/apollo directory:

Package	From	To
@vitest/coverage-v8	4.0.10	4.0.15
vitest	4.0.10	4.0.15
@apollo/gateway	2.12.1	2.12.2
@apollo/server	5.1.0	5.2.0
@types/express	5.0.5	5.0.6

Bumps the patch group with 6 updates in the /packages/core directory:

Package	From	To
@vitest/coverage-v8	4.0.10	4.0.15
vitest	4.0.10	4.0.15
@types/express	5.0.5	5.0.6
jose	6.1.2	6.1.3
node-mock-http	1.0.3	1.0.4
cookie	1.0.2	1.1.1

Bumps the patch group with 4 updates in the /packages/express-adapter directory: @vitest/coverage-v8, vitest, @types/express and cookie.
Bumps the patch group with 2 updates in the /packages/fastify-adapter directory: @vitest/coverage-v8 and vitest.
Bumps the patch group with 5 updates in the /packages/react directory:

Package	From	To
@vitest/coverage-v8	4.0.10	4.0.15
vitest	4.0.10	4.0.15
@types/express	5.0.5	5.0.6
jose	6.1.2	6.1.3
@types/react	19.2.6	19.2.7

Bumps the patch group with 5 updates in the /packages/yoga directory:

Package	From	To
@vitest/coverage-v8	4.0.10	4.0.15
vitest	4.0.10	4.0.15
@types/express	5.0.5	5.0.6
graphql-yoga	5.16.2	5.17.1
@typescript-eslint/eslint-plugin	8.47.0	8.49.0

Updates @biomejs/biome from 2.3.6 to 2.3.8

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.3.8

2.3.8

Patch Changes

• #8188 4ca088c Thanks @​ematipico! - Fixed #7390, where Biome couldn't apply the correct configuration passed via --config-path.

  If you have multiple root configuration files, running any command with --config-path will now apply the chosen configuration file.

• #8171 79adaea Thanks @​dibashthapa! - Added the new rule noLeakedRender. This rule helps prevent potential leaks when rendering components that use binary expressions or ternaries.

  For example, the following code triggers the rule because the component would render 0:

  const Component = () => {
    const count = 0;
    return <div>{count && <span>Count: {count}</span>}</div>;
  };

• #8116 b537918 Thanks @​Netail! - Added the nursery rule noDuplicatedSpreadProps. Disallow JSX prop spreading the same identifier multiple times.

  Invalid:

  <div {...props} something="else" {...props} />

• #8256 f1e4696 Thanks @​cormacrelf! - Fixed a bug where logs were discarded (the kind from --log-level=info etc.). This is a regression introduced after an internal refactor that wasn't adequately tested.

• #8226 3f19b52 Thanks @​dyc3! - Fixed #8222: The HTML parser, with Vue directives enabled, can now parse v-slot shorthand syntax, e.g. \<template #foo>.

• #8007 182ecdc Thanks @​brandonmcconnell! - Added support for dollar-sign-prefixed filenames in the useFilenamingConvention rule.

  Biome now allows filenames starting with the dollar-sign (e.g. $postId.tsx) by default to support naming conventions used by frameworks such as TanStack Start for file-based-routing.

• #8218 91484d1 Thanks @​hirokiokada77! - Added the noMultiStr rule, which disallows creating multiline strings by escaping newlines.

  Invalid:

  const foo =
    "Line 1\n\
  Line 2";

  Valid:

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.3.8

Patch Changes

• #8188 4ca088c Thanks @​ematipico! - Fixed #7390, where Biome couldn't apply the correct configuration passed via --config-path.

  If you have multiple root configuration files, running any command with --config-path will now apply the chosen configuration file.

• #8171 79adaea Thanks @​dibashthapa! - Added the new rule noLeakedRender. This rule helps prevent potential leaks when rendering components that use binary expressions or ternaries.

  For example, the following code triggers the rule because the component would render 0:

  const Component = () => {
    const count = 0;
    return <div>{count && <span>Count: {count}</span>}</div>;
  };

• #8116 b537918 Thanks @​Netail! - Added the nursery rule noDuplicatedSpreadProps. Disallow JSX prop spreading the same identifier multiple times.

  Invalid:

  <div {...props} something="else" {...props} />

• #8256 f1e4696 Thanks @​cormacrelf! - Fixed a bug where logs were discarded (the kind from --log-level=info etc.). This is a regression introduced after an internal refactor that wasn't adequately tested.

• #8226 3f19b52 Thanks @​dyc3! - Fixed #8222: The HTML parser, with Vue directives enabled, can now parse v-slot shorthand syntax, e.g. \<template #foo>.

• #8007 182ecdc Thanks @​brandonmcconnell! - Added support for dollar-sign-prefixed filenames in the useFilenamingConvention rule.

  Biome now allows filenames starting with the dollar-sign (e.g. $postId.tsx) by default to support naming conventions used by frameworks such as TanStack Start for file-based-routing.

• #8218 91484d1 Thanks @​hirokiokada77! - Added the noMultiStr rule, which disallows creating multiline strings by escaping newlines.

  Invalid:

  const foo =
    "Line 1\n\
  Line 2";

  Valid:

  const foo = "Line 1\nLine 2";
  const bar = `Line 1

... (truncated)

Commits

• 0a6b6fb chore: restore version and yaml how they were
• 5d15cd5 chore: revert version
• 59fa146 ci: release (#8263)
• f7e836f feat(biome_js_analyze): implement noProto rule (#8276)
• b537918 feat(js_biome_analyze): implement noDuplicatedSpreadProps (#8116)
• 91484d1 feat(biome_js_analyze): implement noMultiStr rule (#8218)
• 68c052e feat(biome_js_analyze): implement noEqualsToNull rule (#8214)
• 79adaea feat(lint): added new rule no-leaked-render from eslint-react (#8171)
• cd2edd7 feat(js_analyze): implement noTernary (#8201)
• 8e97b89 ci: release (#8161)
• Additional commits viewable in compare view

Updates @changesets/cli from 2.29.7 to 2.29.8

Commits

• See full diff in compare view

Updates @vitest/coverage-v8 from 4.0.10 to 4.0.15

Release notes

Sourced from @​vitest/coverage-v8's releases.

v4.0.15

   🚀 Experimental Features

• cache: Add opt-out on a plugin level, fix internal root cache  -  by @​sheremet-va in vitest-dev/vitest#9154 (a68f7)
• reporters: Print import duration breakdown  -  by @​sheremet-va in vitest-dev/vitest#9105 (122ff)

   🐞 Bug Fixes

• Keep built-in id as is in bun and deno  -  by @​sheremet-va in vitest-dev/vitest#9117 (075ab)
• Use optimizeDeps.rolldownOptions to fix depreated warning + fix ssr.external: true  -  by @​hi-ogawa in vitest-dev/vitest#9121 (fd8bd)
• Fix external behavior with deps.optimizer  -  by @​hi-ogawa in vitest-dev/vitest#9125 (4c754)
• Very minor typo in "Chrome DevTools Protocol"  -  by @​HowToTestFrontend in vitest-dev/vitest#9146 (20997)
• browser: Run toMatchScreenshot only once when used with expect.element  -  by @​macarie in vitest-dev/vitest#9132 (0d2e7)
• coverage: Istanbul provider to not break source maps  -  by @​AriPerkkio in vitest-dev/vitest#9040 (e4ca9)
• deps: Update dependency tinyexec to v1  -  in vitest-dev/vitest#9122 (fd786)
• docs: Remove --browser.provider from docs  -  by @​sheremet-va in vitest-dev/vitest#9115 (120b3)
• expect: Preserve currentTestName in extended matchers  -  by @​macarie in vitest-dev/vitest#9106 (e4345)
• pool: Terminate workers on CTRL+c forceful exits  -  by @​AriPerkkio in vitest-dev/vitest#9140 (d57d8)
• reporters: Show project in github reporter  -  by @​sheremet-va in vitest-dev/vitest#9138 (bb65e)
• spy: Do not mock overriden method, if parent was automocked  -  by @​sheremet-va in vitest-dev/vitest#9116 (1a246)
• web-worker: MessagePort objects passed to Worker.postMessage work when clone === "native"  -  by @​whitphx in vitest-dev/vitest#9118 (deee8)

    View changes on GitHub

v4.0.14

   🚀 Experimental Features

• browser: Expose utils.configurePrettyDOM  -  by @​sheremet-va in vitest-dev/vitest#9103 (2cc34)
• runner: Add full names to tasks  -  by @​macarie in vitest-dev/vitest#9087 (821aa)
• ui: Add tabbed failure view for toMatchScreenshot with comparison slider  -  by @​macarie in vitest-dev/vitest#8813 (c37c2)

   🐞 Bug Fixes

• Externalize before caching  -  by @​sheremet-va in vitest-dev/vitest#9077 (e1b2e)
• Collect the duration of external imports  -  by @​sheremet-va in vitest-dev/vitest#9097 (3326c)
• Rename collect to import, remove prepare  -  by @​sheremet-va in vitest-dev/vitest#9091 (1256b)
• browser:
  • Unsubscribe onCancel on rpc destroy  -  by @​AriPerkkio in vitest-dev/vitest#9088 (f5b72)
  • Revert the viewport scaling in non-ui mode #9018  -  by @​sheremet-va in vitest-dev/vitest#9072 and vitest-dev/vitest#9018 (64502)
• coverage:
  • Invalidate circular modules correctly on rerun with coverage  -  by @​aicest in vitest-dev/vitest#9096 (6f22c)
• expect:
  • Allow function as standard schema  -  by @​hi-ogawa in vitest-dev/vitest#9099 (ed8a2)
• jsdom:
  • Reuse abort signals if possible  -  by @​sheremet-va in vitest-dev/vitest#9090 (2c468)
• pool:
  • Init VITEST_POOL_ID + VITEST_WORKER_ID before environment setup  -  by @​AriPerkkio in vitest-dev/vitest#9085 (37918)
• web-worker:
  • postMessage to send ports to workers  -  by @​whitphx and @​AriPerkkio in vitest-dev/vitest#9078 (9d176)

... (truncated)

Commits

• eb1abf0 chore: release v4.0.15
• 9ca74cf chore: release v4.0.14
• acc5152 perf: replace debug with obug (#9057)
• 73b54ce chore: release v4.0.13
• 5aa84d5 chore: release v4.0.12
• c3befb0 chore: release v4.0.11
• See full diff in compare view

Updates turbo from 2.6.1 to 2.6.3

Release notes

Sourced from turbo's releases.

Turborepo v2.6.3

What's Changed

turbo-ignore

• fix: Command injection in turbo-ignore by @​pyrytakala in vercel/turborepo#11154

Examples

• examples(security): Upgrade Next.js versions by @​2qp in vercel/turborepo#11195

Changelog

• fix: Prevent vt100 TUI crash during column wrap by @​neel3o115 in vercel/turborepo#11170
• feat: Add GitHub Actions environment variable as default passthrough by @​louis-bompart in vercel/turborepo#10740
• docs: Updating READMEs by @​anthonyshew in vercel/turborepo#11190
• fix: Handle pidlock AlreadyOwned without failing init in LSP by @​AryanBagade in vercel/turborepo#10831
• ci: Fix integration test logging style by @​anthonyshew in vercel/turborepo#11194
• fix: Normalize config dir env vars to absolute by @​Vansh0204 in vercel/turborepo#11146
• fix(vercel-api): Add VIEWER_FOR_PLUS and SECURITY role variants by @​amondnet in vercel/turborepo#11169

New Contributors

• @​neel3o115 made their first contribution in vercel/turborepo#11170
• @​louis-bompart made their first contribution in vercel/turborepo#10740
• @​AryanBagade made their first contribution in vercel/turborepo#10831
• @​Vansh0204 made their first contribution in vercel/turborepo#11146
• @​amondnet made their first contribution in vercel/turborepo#11169
• @​pyrytakala made their first contribution in vercel/turborepo#11154

Full Changelog: vercel/turborepo@v2.6.2...v2.6.3

Turborepo v2.6.3-canary.0

What's Changed

Changelog

• fix: Prevent vt100 TUI crash during column wrap by @​neel3o115 in vercel/turborepo#11170
• feat: Add GitHub Actions environment variable as default passthrough by @​louis-bompart in vercel/turborepo#10740

New Contributors

• @​neel3o115 made their first contribution in vercel/turborepo#11170
• @​louis-bompart made their first contribution in vercel/turborepo#10740

Full Changelog: vercel/turborepo@v2.6.2...v2.6.3-canary.0

Turborepo v2.6.2

What's Changed

Docs

• docs: Add mentions to turborepo-summary and turborepo-summary-action by @​charpeni in vercel/turborepo#11023
• docs: Add new testimonial to home page by @​anthonyshew in vercel/turborepo#11116
• docs: Fix copy-pasted testimonial quote by @​anthonyshew in vercel/turborepo#11117
• docs: Fix typo in tailwind set up guide by @​hookim in vercel/turborepo#11143

... (truncated)

Changelog

Sourced from turbo's changelog.

Release Documentation

Quick Start

Release Turborepo CLI

1. Create a release by triggering the [Turborepo Release][1] workflow

   • Specify the semver increment using the SemVer Increment field (start with prerelease)
   • Check the "Dry Run" box to run the full release workflow without publishing any packages. Artifacts will be created that you can test with locally.

2. A PR is automatically opened to merge the release branch created in step 1 back into main

   • ⚠️ Merge this in! You don't need to wait for tests to pass (because they won't pass until after this PR is merged in). It's important to merge this branch soon after the publish is successful.

Release @turbo/repository

1. Run [bump-version.sh][4] to update the versions of the packages. Merge in the changes to main.

2. Create a release by triggering the [Turborepo Library Release][5] workflow.

   • Check the "Dry Run" box to run the full release workflow without publishing any packages.

Notes

• GitHub Release Notes are published automatically using the config from [turborepo-release.yml][2], triggered by the [turbo-orchestrator][3] bot.

---

Turborepo CLI Release Process - In-Depth Guide

This section provides comprehensive documentation on how the Turborepo CLI is released, including the architecture, workflows, and detailed step-by-step processes.

Table of Contents

1. Architecture Overview
2. Version Management
3. Release Workflow Stages
4. Packages Released
5. Platform-Specific Binaries
6. Technical Reference
7. Best Practices

---

Architecture Overview

The Turborepo release process is a multi-stage pipeline that:

1. Manages versions centrally via version.txt at the repository root

... (truncated)

Commits

• 13612aa publish 2.6.3 to registry
• fe34922 fix: Command injection in turbo-ignore (#11154)
• d5162c0 fix(vercel-api): Add VIEWER_FOR_PLUS and SECURITY role variants (#11169)
• ab3259e fix: Normalize config dir env vars to absolute (#11146)
• 164606f examples(security): Upgrade Next.js versions (#11195)
• 91a194c ci: Remove debug logging (#11193)
• 0412c00 ci: Fix integration test logging style (#11194)
• 8c4ac9b fix: Handle pidlock AlreadyOwned without failing init in LSP (#10831)
• 2ceec77 release(turborepo): 2.6.3-canary.0 (#11191)
• 2bb1cc2 docs: Updating READMEs (#11190)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for turbo since your current version.

Updates vitest from 4.0.10 to 4.0.15

Release notes

Sourced from vitest's releases.

v4.0.15

   🚀 Experimental Features

• cache: Add opt-out on a plugin level, fix internal root cache  -  by @​sheremet-va in vitest-dev/vitest#9154 (a68f7)
• reporters: Print import duration breakdown  -  by @​sheremet-va in vitest-dev/vitest#9105 (122ff)

   🐞 Bug Fixes

• Keep built-in id as is in bun and deno  -  by @​sheremet-va in vitest-dev/vitest#9117 (075ab)
• Use optimizeDeps.rolldownOptions to fix depreated warning + fix ssr.external: true  -  by @​hi-ogawa in vitest-dev/vitest#9121 (fd8bd)
• Fix external behavior with deps.optimizer  -  by @​hi-ogawa in vitest-dev/vitest#9125 (4c754)
• Very minor typo in "Chrome DevTools Protocol"  -  by @​HowToTestFrontend in vitest-dev/vitest#9146 (20997)
• browser: Run toMatchScreenshot only once when used with expect.element  -  by @​macarie in vitest-dev/vitest#9132 (0d2e7)
• coverage: Istanbul provider to not break source maps  -  by @​AriPerkkio in vitest-dev/vitest#9040 (e4ca9)
• deps: Update dependency tinyexec to v1  -  in vitest-dev/vitest#9122 (fd786)
• docs: Remove --browser.provider from docs  -  by @​sheremet-va in vitest-dev/vitest#9115 (120b3)
• expect: Preserve currentTestName in extended matchers  -  by @​macarie in vitest-dev/vitest#9106 (e4345)
• pool: Terminate workers on CTRL+c forceful exits  -  by @​AriPerkkio in vitest-dev/vitest#9140 (d57d8)
• reporters: Show project in github reporter  -  by @​sheremet-va in vitest-dev/vitest#9138 (bb65e)
• spy: Do not mock overriden method, if parent was automocked  -  by @​sheremet-va in vitest-dev/vitest#9116 (1a246)
• web-worker: MessagePort objects passed to Worker.postMessage work when clone === "native"  -  by @​whitphx in vitest-dev/vitest#9118 (deee8)

    View changes on GitHub

v4.0.14

   🚀 Experimental Features

• browser: Expose utils.configurePrettyDOM  -  by @​sheremet-va in vitest-dev/vitest#9103 (2cc34)
• runner: Add full names to tasks  -  by @​macarie in vitest-dev/vitest#9087 (821aa)
• ui: Add tabbed failure view for toMatchScreenshot with comparison slider  -  by @​macarie in vitest-dev/vitest#8813 (c37c2)

   🐞 Bug Fixes

• Externalize before caching  -  by @​sheremet-va in vitest-dev/vitest#9077 (e1b2e)
• Collect the duration of external imports  -  by @​sheremet-va in vitest-dev/vitest#9097 (3326c)
• Rename collect to import, remove prepare  -  by @​sheremet-va in vitest-dev/vitest#9091 (1256b)
• browser:
  • Unsubscribe onCancel on rpc destroy  -  by @​AriPerkkio in vitest-dev/vitest#9088 (f5b72)
  • Revert the viewport scaling in non-ui mode #9018  -  by @​sheremet-va in vitest-dev/vitest#9072 and vitest-dev/vitest#9018 (64502)
• coverage:
  • Invalidate circular modules correctly on rerun with coverage  -  by @​aicest in vitest-dev/vitest#9096 (6f22c)
• expect:
  • Allow function as standard schema  -  by @​hi-ogawa in vitest-dev/vitest#9099 (ed8a2)
• jsdom:
  • Reuse abort signals if possible  -  by @​sheremet-va in vitest-dev/vitest#9090 (2c468)
• pool:
  • Init VITEST_POOL_ID + VITEST_WORKER_ID before environment setup  -  by @​AriPerkkio in vitest-dev/vitest#9085 (37918)
• web-worker:
  • postMessage to send ports to workers  -  by @​whitphx and @​AriPerkkio in vitest-dev/vitest#9078 (9d176)

... (truncated)

Commits

• eb1abf0 chore: release v4.0.15
• a68f74e feat(cache): add opt-out on a plugin level, fix internal root cache (#9154)
• 122ff32 feat(reporters): print import duration breakdown (#9105)
• 0d2e7e3 fix(browser): run toMatchScreenshot only once when used with `expect.elemen...
• d57d8bf fix(pool): terminate workers on CTRL+c forceful exits (#9140)
• bb65e15 fix(reporters): show project in github reporter (#9138)
• 52b242b chore(deps): update all non-major dependencies (#9133)
• 4c75492 fix: fix external behavior with deps.optimizer (#9125)
• a5d98fd refactor(vitest): get current test name from task property (#9120)
• fd8bd6d fix: use optimizeDeps.rolldownOptions to fix depreated warning + fix `ssr.e...
• Additional commits viewable in compare view

Updates @apollo/gateway from 2.12.1 to 2.12.2

Release notes

Sourced from @​apollo/gateway's releases.

@​apollo/gateway@​2.12.2

Patch Changes

• Updated dependencies [238d9d71e831e4f3e8d8e334ad6952cc19c073b1]:
  • @​apollo/federation-internals@​2.12.2
  • @​apollo/composition@​2.12.2
  • @​apollo/query-planner@​2.12.2

Changelog

Sourced from @​apollo/gateway's changelog.

2.12.2

Patch Changes

• Updated dependencies [238d9d71e831e4f3e8d8e334ad6952cc19c073b1]:
  • @​apollo/federation-internals@​2.12.2
  • @​apollo/composition@​2.12.2
  • @​apollo/query-planner@​2.12.2

Commits

• fec0c7d release: on branch main (#3358)
• See full diff in compare view

Updates @apollo/server from 5.1.0 to 5.2.0

Release notes

Sourced from @​apollo/server's releases.

@​apollo/server-integration-testsuite@​5.2.0

Patch Changes

• Updated dependencies [51acbeb]:
  • @​apollo/server@​5.2.0

@​apollo/server@​5.2.0

Minor Changes

• #8161 51acbeb Thanks @​jerelmiller! - Fix an issue where some bundlers would fail to build because of the dynamic import for the optional peer dependency on @yaacovcr/transform introduced in @apollo/server 5.1.0. To provide support for the legacy incremental format, you must now provide the legacyExperimentalExecuteIncrementally option to the ApolloServer constructor.

  import { legacyExecuteIncrementally } from '@yaacovcr/transform';
  const server = new ApolloServer({
  // ...
  legacyExperimentalExecuteIncrementally: legacyExecuteIncrementally,
  });

  If the legacyExperimentalExecuteIncrementally option is not provided and the client sends an Accept header with a value of multipart/mixed; deferSpec=20220824, an error is returned by the server.

Changelog

Sourced from @​apollo/server's changelog.

5.2.0

Minor Changes

• #8161 51acbeb Thanks @​jerelmiller! - Fix an issue where some bundlers would fail to build because of the dynamic import for the optional peer dependency on @yaacovcr/transform introduced in @apollo/server 5.1.0. To provide support for the legacy incremental format, you must now provide the legacyExperimentalExecuteIncrementally option to the ApolloServer constructor.

  import { legacyExecuteIncrementally } from '@yaacovcr/transform';
  const server = new ApolloServer({
  // ...
  legacyExperimentalExecuteIncrementally: legacyExecuteIncrementally,
  });

  If the legacyExperimentalExecuteIncrementally option is not provided and the client sends an Accept header with a value of multipart/mixed; deferSpec=20220824, an error is returned by the server.

Commits

• 7be3686 Version Packages (#8163)
• 51acbeb Require legacy incremental execute as an ApolloServer option instead of a d...
• See full diff in compare view

Updates @types/express from 5.0.5 to 5.0.6

Commits

• See full diff in compare view

Updates @types/node from 24.10.1 to 24.10.2

Commits

• See full diff in compare view

Updates jose from 6.1.2 to 6.1.3

Release notes

Sourced from jose's releases.

v6.1.3

Refactor

• avoid export * as for google closure's compiler sake (6303d98), closes #832

Changelog

Sourced from jose's changelog.

6.1.3 (2025-12-02)

Refactor

• avoid export * as for google closure's compiler sake (6303d98), closes #832

Commits

• ebb8774 chore(release): 6.1.3
• 6303d98 refactor: avoid export * as for google closure's compiler sake
• 39c8805 chore: bump packages
• cf5726e chore: update error message
• 0154775 chore: update threat model

[changeset-bot]

⚠️ No Changeset found

Latest commit: c244bf8

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR