Update all dependencies

[renovate]

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
@eslint/js (source)	9.38.0 -> 9.39.1					devDependencies	minor
@mantine/carousel (source)	8.3.6 -> 8.3.9					dependencies	patch
@mantine/code-highlight (source)	8.3.6 -> 8.3.9					dependencies	patch
@mantine/core (source)	8.3.6 -> 8.3.9					dependencies	patch
@mantine/dropzone (source)	8.3.6 -> 8.3.9					dependencies	patch
@mantine/form (source)	8.3.6 -> 8.3.9					dependencies	patch
@mantine/hooks (source)	8.3.6 -> 8.3.9					dependencies	patch
@mantine/spotlight (source)	8.3.6 -> 8.3.9					dependencies	patch
@next/bundle-analyzer (source)	16.0.1 -> 16.0.7					dependencies	patch
@storybook/addon-themes (source)	10.0.1 -> 10.1.4					devDependencies	minor
@storybook/nextjs (source)	10.0.1 -> 10.1.4					devDependencies	minor
@storybook/react (source)	10.0.1 -> 10.1.4					devDependencies	minor
@types/eslint-plugin-jsx-a11y (source)	6.9.0 -> 6.10.1					devDependencies	minor
@types/node (source)	24.9.2 -> 24.10.1					devDependencies	minor
@types/react (source)	19.2.2 -> 19.2.7					devDependencies	patch
dayjs (source)	1.11.18 -> 1.11.19					dependencies	patch
eslint (source)	9.38.0 -> 9.39.1					devDependencies	minor
node (source)	24.10.0 -> 24.11.1						minor
prettier (source)	3.6.2 -> 3.7.4					devDependencies	minor
react (source)	19.2.0 -> 19.2.1					dependencies	patch
react-dom (source)	19.2.0 -> 19.2.1					dependencies	patch
shiki (source)	3.14.0 -> 3.19.0					dependencies	minor
storybook (source)	10.0.1 -> 10.1.4					devDependencies	minor
typescript-eslint (source)	8.46.2 -> 8.48.1					devDependencies	minor
yarn (source)	4.10.3 -> 4.12.0					packageManager	minor

---

Release Notes

eslint/eslint (@​eslint/js)

v9.39.1

Compare Source

v9.39.0

Compare Source

mantinedev/mantine (@​mantine/carousel)

v8.3.9

Compare Source

What's Changed

• [@mantine/core] ColorInput: Fix incorrect action icon size (#​8481)
• [@mantine/form] Fix insertListItem and replaceListItem handlers not being type safe (#​8478)
• [@mantine/dates] DatePickerInput: Fix placeholder Styles API selector not working (#​8405)
• [@mantine/core] ColorInput: Fix incorrect font-size if size prop not set explicitly (#​8472)
• [@mantine/emotion] Add mergeSx utility function (#​8471)
• [@mantine/core] ActionIcon: Fix incorrect disabled state background-color for gradient variant
• [@mantine/modals] Fix breaking changes accidentally introduced in the previous patch (#​8476)
• [@mantine/core] Combobox: Add withAlignedLabels prop support to offset selected check icon in the dropdown options (#​8391)
• [@mantine/core] Badge: Fix circle prop not working when radius prop is set explicitly (#​8466)
• [@mantine/core] Checkbox: Fix incorrect indeterminate state calculation (#​8460)
• [@mantine/core] Radio: Fix Radio.Group switching from uncontrolled to controlled mode when value is explicitly set (#​8453)

New Contributors

• @​semimikoh made their first contribution in #​8466
• @​oguzgelal made their first contribution in #​8471
• @​Copilot made their first contribution in #​8478

Full Changelog: mantinedev/mantine@8.3.8...8.3.9

v8.3.8

Compare Source

What's Changed

• [@mantine/modals] Improve types of context modals (#​8439)
• [@mantine/core] Combobox: Fix keyboard interactions not working when used in shadow DOM (#​8438)
• [@mantine/core] NumberInput: Fix , decimal separator not being converted to . when entering value from mobile keyboard
• [@mantine/core] NumberInput: Fix incorrect keyboard displayed on iOS 26
• [@mantine/charts] Add cellProps prop support to DonutChart and PieChart (#​8444)
• [@mantine/core] Alert: Allow overriding role attribute (#​8447)
• [@mantine/core] Menu: Add openDelay prop support to Menu.Sub component (#​8437)

New Contributors

• @​ScotchAndSoda made their first contribution in #​8444
• @​justinwhall made their first contribution in #​8438

Full Changelog: mantinedev/mantine@8.3.7...8.3.8

v8.3.7

Compare Source

What's Changed

• [@mantine/modals] Add ConfirmModalProps type exports (#​8414)
• [@mantine/core] AppShell: Fix unexpected Header transition when scrollbar becomes hidden via scroll lock (#​8420)
• [@mantine/core] Add disabled prop for Radio.Group, Checkbox.Group and Switch.Group (#​8396)
• [@mantine/core] Fix missing sub Menu components exports (#​8419)
• [@mantine/tiptap] Fix editor control being overridden by custom onClick handler (#​8421)
• [@mantine/core] PasswordInput: Add aria-pressed attribute to the visibility toggle (#​8425)
• [@mantine/tiptap] Fix bubble menu being overlapped by the toolbar (#​8416)
• [@mantine/core] Chip: Remove iconWrapper if icon is exlicitly disabled
• [@mantine/charts] Add labelFormatter support to the default tooltip (#​8404)

New Contributors

• @​Visualizeit made their first contribution in #​8419
• @​Spichkenss made their first contribution in #​8407
• @​schummar made their first contribution in #​8420

Full Changelog: mantinedev/mantine@8.3.6...8.3.7

vercel/next.js (@​next/bundle-analyzer)

v16.0.7

Compare Source

Please see CVE-2025-66478 for additional details about this release.

v16.0.6

Compare Source

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

• bump the browserslist version to silence a warning in CI (#​86625)

Credits

Huge thanks to @​lukesandberg for helping!

v16.0.5

Compare Source

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

• fix(nodejs-middleware): await for body cloning to be properly finalized (#​85418)

Credits

Huge thanks to @​lucasadrianof for helping!

v16.0.4

Compare Source

v16.0.3

Compare Source

Core Changes

• fix: Rspack throw error when using ForceCompleteRuntimePlugin: #​85221
• fix: build CLI output not displaying Proxy (Middleware) when nodejs runtime: #​85403
• fix: staleTimes.static should consistently enforce a 30s minimum: #​85479
• [turbopack] fix build of empty entries of pages: #​84873
• Cache the head separately from the route tree: #​84724
• Allow inspecting dev server on default port with next dev --inspect: #​85037
• Avoid proxying React modules through workUnitStore: #​85486
• fix: redirect should always return updated router state: #​85533
• Upgrade React from b4455a6e-20251027 to 4f931700-20251029: #​85518
• [turbopack] Move generation of cacheLife types out of the webpack plugin and into the dev bundler directly: #​85539
• Ensure user-space stack frame for 'use cache' in page/layout component: #​85519
• Update parallel routes in build-complete: #​85546
• fully remove clientSegmentCache flag: #​85541
• [turbopack] Support relative paths in turbopack source maps.: #​85146
• Release unnecessary memory on hydration finish: #​84967
• Preserve interception markers in parameter types: #​85526
• move segment cache entries to top level segment-cache dir: #​85542
• Upgrade React from 4f931700-20251029 to 561ee24d-20251101: #​85670
• [devtools] Remove title from preferences: #​85698
• Update font data: #​85708
• Don't invalidate hot reloader excessively during dev server boot: #​85732
• [codemod] fix: next-lint-to-eslint-cli did not handle 'next' plugin: #​85749
• Upgrade React from 561ee24d-20251101 to 67f7d47a-20251103: #​85762
• Tracing: Fix memory leak in span map: #​85529
• Fix documentation typo in refresh function: #​85696
• fix: eslint-config-next types was exporting to dist/src: #​85768
• Upgrade React from 67f7d47a-20251103 to f646e8ff-20251104: #​85772
• remove unused RSC payload property: #​85746
• [runtime prefetching]: fix runtime prefetching when deployed: #​85595
• Turbopack: next build --analyze: #​85197
• Build: Log amount of workers during static generation: #​85706
• Upgrade React from f646e8ff-20251104 to dd048c3b-20251105: #​85819
• Sync devFallbackParams when generateStaticParams change: #​85741
• chore: upgrade rspack 1.6.0: #​84210
• [mcp] get_routes mcp tool: #​85773
• Split each path param into a separate cache key : #​85758
• [turbopack] change server source maps in production to use relative paths: #​85576
• fix: skip collecting metadata for app-error in webpack: #​85892
• fix: support root span attributes with a custom server: #​85521
• fix isDynamicRSC condition when deployed: #​85919
• [turbopack] Make it possible to synchronously access native bindings: #​85787
• Upgrade React from dd048c3b-20251105 to fa50caf5-20251107: #​85906
• Fix telemetry event loss on build failures and server shutdown: #​85867
• Remove one stack frame from 'use cache' call stacks: #​85966
• Upgrade React from fa50caf5-20251107 to 52684925-20251110: #​85980
• Deployment adapter: fix metadata for "/" route: #​85820
• Enable React's default Transition indicator behind a flag: #​86000
• update routes-manifest to include whether app has pages routes: #​86051

Misc Changes

• chore: Add opt-level = s for not frequently used crates: #​85426
• [test] Deflake cache-components-allow-otel-spans: #​85466
• [test] Move remaining experimental.cacheLife: #​85467
• Turbopack: chore: Remove mopa dependency in turbo-tasks (2nd attempt): #​85286
• Update Proxy docs: #​85439
• [CNA] Do not prompt for Turbopack: #​85404
• Clean up new release process: #​85458
• Update E2E tests workflow: #​85485
• Update E2E deploy tests manifest: #​85483
• docs: example are incorrect async function exports only: #​85453
• [test] Handle CLI assertions where no "Compiling..." log is present: #​85499
• [test] Speed up refresh test: #​85505
• [test] Add test cases for dynamic caches without suspense boundaries: #​85500
• docs: Routes are wrapped w/ Activity in Cache Components: #​85309
• docs: GET handler behavior under cache components: #​85389
• [test] Avoid needless start/stop from using createSandbox: #​85507
• [test] Use --debug-build-paths instead of NEXT_PRIVATE_APP_PATHS: #​85504
• docs: revalidateTag requires second argument: #​85284
• Refactor GTM implementation to support google tag gateway: #​81011
• Update Rspack production test manifest: #​85494
• Update Rspack development test manifest: #​85495
• [docs] Fix a typo: #​85492
• [test] Regenerate tsconfig.json files: #​85515
• [Turbopack] clean up completion.rs a bit: #​84863
• [test] Remove maxRetries and hardError parameters: #​85536
• Turbopack: remove the .into() alias to .cell(): #​85516
• [test] Consolidate identical snapshots across different bundlers: #​85532
• [turbopack] Change where cells are created in resolve_raw to make cell allocation order deterministic.: #​85525
• Turbopack: Make tasks deterministic: #​85524
• [test] Separate act and assertions: #​85508
• [test] assert* -> waitFor* when the util is not instant: #​85450
• Turbopack: move whole_app_module_graphs to top level: #​84897
• [test] Bail on sending requests to Next.js instance if it's no longer available: #​85557
• [test] Deflake tests comparing two random numbers: #​85571
• [test] Disallow custom RegExp-like implementations in check: #​85537
• [test] Deflake prerender suite: #​85563
• Turbopack: chore: Remove some dead MagicAny serialization code from turbo_tasks::value: #​85577
• [test]: fix broken scroll restoration test: #​85599
• [test] Deflake nested after() tests: #​85566
• [test] Stop installing unused dependencies: #​85569
• [test] Consider test/integration/ in flake detection tests: #​85590
• Turbopack: more checks on verify_serialization: #​84952
• Turbopack: add track_caller to improve panics: #​85565
• Turbopack: add verify_determinism feature to check if tasks are deterministic: #​85559
• docs: cache life rework: #​85224
• Turbopack: fix hanging dev server and builds with fs cache: #​85606
• Turbopack: Fix compound assignment expression evaluation (#​85478): #​85593
• Turbopack: fix Scope holding Arc too long: #​85611
• [ci] Improve change detection logic in run-for-change script: #​85619
• [test] Ignore in deploy tests if a child process isn't available: #​85636
• Turbopack: add size_hint and len for Chunk iterator: #​85622
• [test]: move resume-data-cache to e2e test: #​85647
• Update Rspack development test manifest: #​85662
• Update Rspack production test manifest: #​85661
• Update Rspack production test manifest: #​85688
• Update Rspack development test manifest: #​85689
• [test] Deflake root-optional-revalidate: #​85584
• docs: fix generateImageMetadata example to use normal params object: #​85658
• Turbopack: Upgrade image crate: #​85084
• docs: update multi sitemap argumenmt type: #​85701
• [test] Move all files to .ts (6/6): #​85641
• Turbopack: add a batch add method to the storage: #​84270
• docs: recommend reverse-proxy when self-hosting: #​85650
• [test] Deflake prefetching.stale-times: #​85733
• [test] Deflake custom cache handler test: #​85610
• [test] Allow CLI integration test to be retryable: #​85586
• docs: update docs to mention ESLint as default: #​85740
• docs(next.config): this docs should remove ".mts" is not supported.: #​85716
• Turbopack: cleanup StyleSheetLike: #​85718
• Turbopack: disable tree shaking for tracing: #​85722
• [test] Move all files to .ts (3/6): #​85638
• [test] Move all files to .ts (2/6): #​85637
• [test] Move all files to .ts (1/6): #​85634
• docs: generateSitemap passes id as promise: #​85767
• [test] Move all files to .ts (4/6): #​85639
• docs: disclosure on path-to-regexp: #​85629
• chore: update rspack binding to 1.6.0: #​85717
• Turbopack: trace worker_threads worker entry: #​85734
• Update Rspack development test manifest: #​85761
• Turbopack: chore: Remove extern crate and macro_use syntax: #​85778
• [turbopack] Drop duration and allocation tracking from CaptureFuture: #​85534
• Turbopack: chore: Remove dead RouteMatcher stuff: #​85784
• docs: fresh up getting started 00: #​85736
• Turbopack: chore: Remove the serde_regex dependency, which wasn't very heavily used: #​85578
• Turbopack: use batch add in connect children: #​85623
• [test] Move all files to .ts (5/6): #​85640
• [test] Deflake legacy-link-behavior: #​85805
• Resolve request ID confusion: #​85809
• Turbopack: use batch add to add initial followers: #​85624
• Turbopack: chore: Remove dead experimental.ppr struct field: #​85792
• Turbopack: chore: Avoid string clones in Glob::parse by using RcStr: #​85579
• Update Rspack production test manifest: #​85795
• docs: getting started updates 01: #​85750
• chore: Update patricia_tree dependency, remove manual serde impls: #​85785
• docs: keywords in system reqs and add browserslist: #​85838
• Honour NEXT_TEST_PREFER_OFFLINE in install-native.mjs: #​85850
• Turbopack: chore: Update anyhow, remove old backtrace feature: #​85844
• Turbopack: Remove some dead (or useless) code from next-core/src/next_client_reference/visit_client_reference.rs: #​85843
• sort dependencies for smaller diffs: #​82291
• Update Rspack development test manifest: #​85846
• Turbopack: Remove non_operation_vc_strongly_consistent feature usage from next-api: #​85874
• Turbopack: remove the streaming hack for improved stability: #​85858
• test: Port clean-distdir integration test to the modern e2e test framework: #​85828
• Update font data: #​85920
• Update deploy manifest: #​85924
• Turbopack: chore: Merge turbo-tasks-macros-shared crate into turbo-tasks-macros: #​85917
• Turbopack: Fix IO concurrency for MacOS: #​85861
• Add Appwrite Sites to supported adapters: #​85830
• [turbopack] Remove LocalTaskType::Native, it is dead: #​85480
• [test] Increase response timeout in next.browserWithResponse(): #​85911
• Hoist inner 'use cache' functions to reduce function allocations: #​85904
• docs: eslint config update: #​85969
• Fix Turbopack local font font-family declaration: #​85913
• switch to slice in createRuntimePrefetchTransformStream: #​85822
• Update authentication.mdx: Fix Auth0 Link: #​85953
• Turbopack: remove unused function: #​85974
• docs: cacheHandlers: #​85311
• docs: Feedback item on proxy default: #​86004
• [test] Add missing test fixtures for cacheLife & cacheTag in client: #​85872
• Fix false-positive build error for cacheLife & cacheTag: #​85875
• [cna] For pnpm ignore postinstall from sharp and unrs-resolver: #​83168
• Turbopack: refactor evaluate to take module_graph: #​85971
• Turbopack: remove duplicate traversal implementations: #​85853
• Omit unused encryptActionBoundArgs/decryptActionBoundArgs imports: #​86015
• Turbopack: cleanup db log and add verbose option: #​85965
• [ci]: fix retry_deploy_test workflow: #​85981
• Fix typo in documentation: #​86054

Credits

Huge thanks to @​kdy1, @​eps1lon, @​SyMind, @​bgw, @​swarnava, @​devjiwonchoi, @​ztanner, @​ijjk, @​huozhi, @​icyJoseph, @​acdlite, @​unstubbable, @​gnoff, @​gusfune, @​vercel-release-bot, @​lukesandberg, @​sokra, @​hayes, @​shuding, @​wyattjoh, @​marjan-ahmed, @​timneutkens, @​ajstrongdev, @​zigang93, @​mischnic, @​Nayeem-XTREME, @​hamirmahal, @​eli0shin, @​tessamero, @​gaojude, @​jamesdaniels, @​georgesfarah, and @​timeyoutakeit for helping!

v16.0.2

Compare Source

[!NOTE]
This version includes no code or feature changes. To get the latest change, please look for the next patch release v16.0.3 or next@​latest

storybookjs/storybook (@​storybook/addon-themes)

v10.1.4

Compare Source

• Core: Enhance getPrettier function to provide prettier interface - #​33260, thanks @​valentinpalkovic!
• NextJS: Alias image to use fileURLToPath for better resolution - #​33256, thanks @​ndelangen!
• Telemetry: Cache Storybook metadata by main config content hash - #​33247, thanks @​valentinpalkovic!

v10.1.3

Compare Source

• Angular: Honor --loglevel and --logfile in dev/build - #​33212, thanks @​valentinpalkovic!
• Core: Minor UI fixes - #​33218, thanks @​ghengeveld!
• Telemetry: Add playwright-prompt - #​33229, thanks @​valentinpalkovic!

v10.1.2

Compare Source

• Checklist: Fix how state changes are reported and drop some completion restrictions - #​33217, thanks @​ghengeveld!

v10.1.1

Compare Source

• Core: Improve globbing using dynamic CWD (REVERT) - #​33201, thanks @​ndelangen!
• Solid: Add Solid to the list of supported frameworks for addon-vitest - #​33084, thanks @​valentinpalkovic!
• UI: Fix excessive height in TabbedArgsTable - #​33205, thanks @​Sidnioulz!

v10.1.0

Compare Source

Easier to setup, more accessible to use

Storybook 10.1 focuses on two key improvements: installation and accessibility:

• ♿ UI overhaul to fix hundreds of a11y issues
• 🧑‍💻 CLI overhaul for faster, more reliable install
• ✅ Checklist-based onboarding guide for new users

The release also contains compatibility fixes for:

• 🅰️ Angular 21 support
• 🦀 RSbuild install support in CLI
• ⚡️ Preact support for Vitest addon

Finally, it contains two highly-requested experimental features:

• 📋 Component manifest for Storybook MCP
• ⚛️ Improved JSX code snippets for React

List of all updates

• A11y: Add aria-selected attribute to tab buttons - #​32656, thanks @​Nischit-Ekbote!
• A11y: Make search clear button keyboard accessible - #​32590, thanks @​ritoban23!
• Addon-Vitest: Ensure Storybook starts correctly across platforms by using shell in spawn - #​33116, thanks @​valentinpalkovic!
• Angular: Add preset entry point for framework - #​33154, thanks @​valentinpalkovic!
• Angular: Add support for v21 - #​33098, thanks @​valentinpalkovic!
• Angular: Don't kill dev command by using observables - #​33185, thanks @​valentinpalkovic!
• Angular: Migrate from RxJS to async/await in command builders and run Compodoc utility as spinner - #​33156, thanks @​valentinpalkovic!
• Angular: Replace deprecated import of ApplicationConfig - #​33125, thanks @​EtiennePasteur!
• Automigration: Update description and link for addon-a11y-addon-test - #​33133, thanks @​valentinpalkovic!
• Build: Add Rsbuild-based sandboxes - #​33039, thanks @​valentinpalkovic!
• Build: Fix async telemetry event sending - #​33115, thanks @​valentinpalkovic!
• Build: Update dependencies in yarn.lock and clean up comments - #​33089, thanks [@​ndelangen](h

---

Configuration

📅 Schedule: Branch creation - "before 5am on sunday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.