chore(deps): bump the frontend-dependencies group across 1 directory with 21 updates

[dependabot]

Bumps the frontend-dependencies group with 21 updates in the /frontend directory:

Package	From	To
@capacitor/android	8.5.0	8.5.2
@capacitor/camera	8.2.2	8.2.4
@capacitor/core	8.5.0	8.5.2
@capacitor/geolocation	8.2.1	8.2.2
@capacitor/ios	8.5.0	8.5.2
@capacitor/share	8.0.1	8.0.2
@sentry/react	10.70.0	10.75.0
i18next	26.3.6	26.4.2
onnxruntime-web	1.27.0	1.30.0
react	19.2.8	19.3.0
react-dom	19.2.8	19.3.0
react-i18next	17.0.11	17.0.14
@axe-core/playwright	4.12.1	4.13.0
@capacitor/cli	8.5.0	8.5.2
@playwright/test	1.62.1	1.63.0
@testing-library/react	16.3.2	16.3.3
@testing-library/user-event	14.6.3	14.6.7
@vitejs/plugin-react	6.0.5	6.1.1
jsdom	30.0.1	30.1.0
vite	8.2.1	8.3.0
vitest	4.1.11	5.0.1

Updates @capacitor/android from 8.5.0 to 8.5.2

Release notes

Sourced from @​capacitor/android's releases.

8.5.2

8.5.2 (2026-09-11)

Bug Fixes

• android: add null checks for plugin annotation when retrieving permissions (#8400) (035b16a)
• ios: do not forward scene lifecycle events to the page before it has loaded (#8595) (c567328)
• resolve issues with safe area / systembars plugin (#8535) (e37d9c6)

8.5.1

8.5.1 (2026-08-31)

Bug Fixes

• block navigation to the internal HTTP proxy path (ee586ae)
• cli: use POSIX paths in CapApp-SPM Package.swift (#8549) (5e5bb3b)
• core: prevent removeListener from removing wrong listener (#8271) (5ac4dd6)

Changelog

Sourced from @​capacitor/android's changelog.

8.5.2 (2026-09-11)

Bug Fixes

• android: add null checks for plugin annotation when retrieving permissions (#8400) (035b16a)
• ios: do not forward scene lifecycle events to the page before it has loaded (#8595) (c567328)
• resolve issues with safe area / systembars plugin (#8535) (e37d9c6)

8.5.1 (2026-08-31)

Bug Fixes

• block navigation to the internal HTTP proxy path (ee586ae)
• cli: use POSIX paths in CapApp-SPM Package.swift (#8549) (5e5bb3b)
• core: prevent removeListener from removing wrong listener (#8271) (5ac4dd6)

Commits

• 5e0f678 Release 8.5.2
• e37d9c6 fix: resolve issues with safe area / systembars plugin (#8535)
• 035b16a fix(android): add null checks for plugin annotation when retrieving permissio...
• c567328 fix(ios): do not forward scene lifecycle events to the page before it has loa...
• 0c9e35d Release 8.5.1
• ee586ae fix: block navigation to the internal HTTP proxy path
• 5ac4dd6 fix(core): prevent removeListener from removing wrong listener (#8271)
• 5e5bb3b fix(cli): use POSIX paths in CapApp-SPM Package.swift (#8549)
• See full diff in compare view

Updates @capacitor/camera from 8.2.2 to 8.2.4

Release notes

Sourced from @​capacitor/camera's releases.

v8.2.4

8.2.4 (2026-09-01)

Bug Fixes

• ios: align ion-ios-camera version range across SwiftPM and CocoaPods (#79) (89e7b58), closes #46 #50 #66 #77
• ios: bump ion-ios-camera to 2.0.0 (#77) (9e227e8)

---

This release is also available on:

• npm package (@​latest dist-tag)

v8.2.3

8.2.3 (2026-08-19)

Bug Fixes

• android: only apply kotlin-android plugin if not already applied (#71) (32f3094)

---

This release is also available on:

• npm package (@​latest dist-tag)

v8.2.3-next.1

8.2.3-next.1 (2026-08-03)

Bug Fixes

• ios: bump ion-ios-camera to 1.0.5 for iOS 27 UIScene compliance (#67) (b110010)

---

This release is also available on:

• npm package (@​next dist-tag)

Changelog

Sourced from @​capacitor/camera's changelog.

8.2.4 (2026-09-01)

Bug Fixes

• ios: align ion-ios-camera version range across SwiftPM and CocoaPods (#79) (89e7b58), closes #46 #50 #66 #77
• ios: bump ion-ios-camera to 2.0.0 (#77) (9e227e8)

8.2.3 (2026-08-19)

Bug Fixes

• android: only apply kotlin-android plugin if not already applied (#71) (32f3094)

Commits

• e1a47e6 chore(release): 8.2.4 [skip ci]
• 89e7b58 fix(ios): align ion-ios-camera version range across SwiftPM and CocoaPods (#79)
• 9e227e8 fix(ios): bump ion-ios-camera to 2.0.0 (#77)
• bf45acb chore(release): 8.2.3 [skip ci]
• 32f3094 fix(android): only apply kotlin-android plugin if not already applied (#71)
• See full diff in compare view

Updates @capacitor/core from 8.5.0 to 8.5.2

Release notes

Sourced from @​capacitor/core's releases.

8.5.2

8.5.2 (2026-09-11)

Bug Fixes

• android: add null checks for plugin annotation when retrieving permissions (#8400) (035b16a)
• ios: do not forward scene lifecycle events to the page before it has loaded (#8595) (c567328)
• resolve issues with safe area / systembars plugin (#8535) (e37d9c6)

8.5.1

8.5.1 (2026-08-31)

Bug Fixes

• block navigation to the internal HTTP proxy path (ee586ae)
• cli: use POSIX paths in CapApp-SPM Package.swift (#8549) (5e5bb3b)
• core: prevent removeListener from removing wrong listener (#8271) (5ac4dd6)

Changelog

Sourced from @​capacitor/core's changelog.

8.5.2 (2026-09-11)

Bug Fixes

• android: add null checks for plugin annotation when retrieving permissions (#8400) (035b16a)
• ios: do not forward scene lifecycle events to the page before it has loaded (#8595) (c567328)
• resolve issues with safe area / systembars plugin (#8535) (e37d9c6)

8.5.1 (2026-08-31)

Bug Fixes

• block navigation to the internal HTTP proxy path (ee586ae)
• cli: use POSIX paths in CapApp-SPM Package.swift (#8549) (5e5bb3b)
• core: prevent removeListener from removing wrong listener (#8271) (5ac4dd6)

Commits

• 5e0f678 Release 8.5.2
• e37d9c6 fix: resolve issues with safe area / systembars plugin (#8535)
• 035b16a fix(android): add null checks for plugin annotation when retrieving permissio...
• c567328 fix(ios): do not forward scene lifecycle events to the page before it has loa...
• 0c9e35d Release 8.5.1
• ee586ae fix: block navigation to the internal HTTP proxy path
• 5ac4dd6 fix(core): prevent removeListener from removing wrong listener (#8271)
• 5e5bb3b fix(cli): use POSIX paths in CapApp-SPM Package.swift (#8549)
• See full diff in compare view

Updates @capacitor/geolocation from 8.2.1 to 8.2.2

Release notes

Sourced from @​capacitor/geolocation's releases.

v8.2.2

8.2.2 (2026-08-13)

Bug Fixes

• android: only apply kotlin-android plugin if not already applied (#97) (d7024ed)

---

This release is also available on:

• npm package (@​latest dist-tag)

Changelog

Sourced from @​capacitor/geolocation's changelog.

8.2.2 (2026-08-13)

Bug Fixes

• android: only apply kotlin-android plugin if not already applied (#97) (d7024ed)

Commits

• 5df28c2 chore(release): 8.2.2 [skip ci]
• b94274d docs: fix unclosed admonitions (#99)
• d7024ed fix(android): only apply kotlin-android plugin if not already applied (#97)
• See full diff in compare view

Updates @capacitor/ios from 8.5.0 to 8.5.2

Release notes

Sourced from @​capacitor/ios's releases.

8.5.2

8.5.2 (2026-09-11)

Bug Fixes

• android: add null checks for plugin annotation when retrieving permissions (#8400) (035b16a)
• ios: do not forward scene lifecycle events to the page before it has loaded (#8595) (c567328)
• resolve issues with safe area / systembars plugin (#8535) (e37d9c6)

8.5.1

8.5.1 (2026-08-31)

Bug Fixes

• block navigation to the internal HTTP proxy path (ee586ae)
• cli: use POSIX paths in CapApp-SPM Package.swift (#8549) (5e5bb3b)
• core: prevent removeListener from removing wrong listener (#8271) (5ac4dd6)

Changelog

Sourced from @​capacitor/ios's changelog.

8.5.2 (2026-09-11)

Bug Fixes

• android: add null checks for plugin annotation when retrieving permissions (#8400) (035b16a)
• ios: do not forward scene lifecycle events to the page before it has loaded (#8595) (c567328)
• resolve issues with safe area / systembars plugin (#8535) (e37d9c6)

8.5.1 (2026-08-31)

Bug Fixes

• block navigation to the internal HTTP proxy path (ee586ae)
• cli: use POSIX paths in CapApp-SPM Package.swift (#8549) (5e5bb3b)
• core: prevent removeListener from removing wrong listener (#8271) (5ac4dd6)

Commits

• 5e0f678 Release 8.5.2
• e37d9c6 fix: resolve issues with safe area / systembars plugin (#8535)
• 035b16a fix(android): add null checks for plugin annotation when retrieving permissio...
• c567328 fix(ios): do not forward scene lifecycle events to the page before it has loa...
• 0c9e35d Release 8.5.1
• ee586ae fix: block navigation to the internal HTTP proxy path
• 5ac4dd6 fix(core): prevent removeListener from removing wrong listener (#8271)
• 5e5bb3b fix(cli): use POSIX paths in CapApp-SPM Package.swift (#8549)
• See full diff in compare view

Updates @capacitor/share from 8.0.1 to 8.0.2

Release notes

Sourced from @​capacitor/share's releases.

@​capacitor/share@​8.0.2

8.0.2 (2026-09-16)

Bug Fixes

• share: Add nonce validation to broadcast receiver on Android (#2592) (fa8ddfb)

Commits

• 467dafd chore(release): publish [skip ci]
• fa8ddfb fix(share): Add nonce validation to broadcast receiver on Android (#2592)
• 89070d4 chore: migrate local notifications to new repo (#2584)
• 8697a12 chore: remove commented cocoapods-deploy.yml (#2582)
• 47402f4 chore: one last? fixup
• 7aa810e chore: changed manifest for monorepo
• 7d6db06 chore: changed manifest for monorepo
• 7888ae6 chore: change release-please release type
• 816b70f chore: bootstrap releases with release-please (#2575)
• 0bfde98 chore(release): publish [skip ci]
• Additional commits viewable in compare view

Updates @sentry/react from 10.70.0 to 10.75.0

Release notes

Sourced from @​sentry/react's releases.

10.75.0

Important Changes

• feat(v10/effect): Capture errors through the Effect v4 ErrorReporter API (#24445)

  On Effect v4, Sentry.effectLayer now registers a Sentry ErrorReporter. Failures that pass through Effect.withErrorReporting, ErrorReporter.report or the built-in HTTP and RPC reporting boundaries are captured automatically, with ErrorReporter.ignore, ErrorReporter.severity and ErrorReporter.attributes annotations respected. Nothing changes on Effect v3.

Other Changes

• feat(v10/core): Accept a CollectBehavior shorthand for dataCollection.httpHeaders (#24339)
• fix(v10/browser): Release the XHR virtualError once the request completed (#24307)
• fix(v10/browser-utils): Skip nullish LCP entries in vendored web-vitals (#24349)
• fix(v10/bundler-plugins): Stamp debug IDs onto emitted source maps when disable-upload is set (#24332)
• fix(v10/core): Don't instrument the SDK's own envelope requests (#24276)
• fix(v10/nextjs): Only include emitted chunk directories in Turbopack sourcemap upload (#24295)
• fix(v10/nitro): Import from nitro/h3 instead of h3 directly (#24444)
• fix(v10/node-core): Don't recurse in logAndExitProcess on a broken stdio pipe (#24353)
• fix(v10/nuxt): Detect Nitro version via the app's Nuxt dependency chain (#24025)
• fix(v10/replay): Don't rewrite already-emitted nodes when syncing mirror attributes (#23588)

Bundle size 📦

Path	Size
@​sentry/browser	27.18 KB
@​sentry/browser - with treeshaking flags	25.66 KB
@​sentry/browser (incl. Tracing)	45.6 KB
@​sentry/browser (incl. Tracing + Span Streaming)	47.34 KB
@​sentry/browser (incl. Tracing, Profiling)	50.24 KB
@​sentry/browser (incl. Tracing, Replay)	83.99 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags	73.84 KB
@​sentry/browser (incl. Tracing, Replay with Canvas)	88.6 KB
@​sentry/browser (incl. Tracing, Replay, Feedback)	100.94 KB
@​sentry/browser (incl. Feedback)	43.94 KB
@​sentry/browser (incl. sendFeedback)	31.87 KB
@​sentry/browser (incl. FeedbackAsync)	36.88 KB
@​sentry/browser (incl. Metrics)	28.25 KB
@​sentry/browser (incl. Logs)	28.47 KB
@​sentry/browser (incl. Metrics & Logs)	29.15 KB
@​sentry/react	28.93 KB
@​sentry/react (incl. Tracing)	47.81 KB
@​sentry/vue	32.47 KB
@​sentry/vue (incl. Tracing)	47.55 KB
@​sentry/svelte	27.21 KB
CDN Bundle	29.53 KB
CDN Bundle (incl. Tracing)	47.52 KB
CDN Bundle (incl. Logs, Metrics)	31.07 KB
CDN Bundle (incl. Tracing, Logs, Metrics)	48.81 KB
CDN Bundle (incl. Replay, Logs, Metrics)	69.49 KB
CDN Bundle (incl. Tracing, Replay)	84.22 KB

... (truncated)

Changelog

Sourced from @​sentry/react's changelog.

10.75.0

Important Changes

• feat(v10/effect): Capture errors through the Effect v4 ErrorReporter API (#24445)

  On Effect v4, Sentry.effectLayer now registers a Sentry ErrorReporter. Failures that pass through Effect.withErrorReporting, ErrorReporter.report or the built-in HTTP and RPC reporting boundaries are captured automatically, with ErrorReporter.ignore, ErrorReporter.severity and ErrorReporter.attributes annotations respected. Nothing changes on Effect v3.

Other Changes

• feat(v10/core): Accept a CollectBehavior shorthand for dataCollection.httpHeaders (#24339)
• fix(v10/browser): Release the XHR virtualError once the request completed (#24307)
• fix(v10/browser-utils): Skip nullish LCP entries in vendored web-vitals (#24349)
• fix(v10/bundler-plugins): Stamp debug IDs onto emitted source maps when disable-upload is set (#24332)
• fix(v10/core): Don't instrument the SDK's own envelope requests (#24276)
• fix(v10/nextjs): Only include emitted chunk directories in Turbopack sourcemap upload (#24295)
• fix(v10/nitro): Import from nitro/h3 instead of h3 directly (#24444)
• fix(v10/node-core): Don't recurse in logAndExitProcess on a broken stdio pipe (#24353)
• fix(v10/nuxt): Detect Nitro version via the app's Nuxt dependency chain (#24025)
• fix(v10/replay): Don't rewrite already-emitted nodes when syncing mirror attributes (#23588)

10.74.0

• feat(v10): Streamline isolation scope handling & reset in isolation scopes (#24152)
• fix(server-utils): Include Gemini reasoning tokens in Vercel AI token usage (#23433)
• fix(v10/browser): Set user_agent.original on all spans for consistent filtering (#24226)
• fix(v10/cloudflare): Auto-instrument classes re-exported from the worker entry (#24181)
• fix(v10/core): Guard loadModule default parameter against ESM scope (#24154)
• fix(v10/core): Match wrapped Facebook Mobile browser errors in DEFAULT_IGNORE_ERRORS (#23877)
• fix(v10/core): Resolve MCP capture policy per operation (#23796)
• fix(v10/nextjs): Fix SDK import crashing under jsdom/happy-dom (#23906)
• fix(v10/nextjs): Keep the Pages Router runtime out of App Router client bundles (#24223)
• fix(v10/nextjs): Register Vercel AI span processors on Next.js (#23773)
• fix(v10/nuxt): Windows file:// for import-in-the-middle hook and isAbsolute for C:\ (#24026)
• fix(v10/profiling-node): Bump @​sentry/node-cpu-profiler to 2.4.4 (#24238)
• fix(v10/sveltekit): Handle SvelteKit 3 error kinds in handleErrorWithSentry (#23995)
• fix(v10/sveltekit): Read Cloudflare execution context from platform.ctx (#23994)
• fix(v10/sveltekit): Read SvelteKit config from the Vite plugin (#23998)

• test(e2e): Assert Next.js Cloudflare worker bundle stays free of orchestrion bundler plugins (#23910)

Work in this release was contributed by @​halillusion and @​zkasuran. Thank you for your contributions!

10.73.0

... (truncated)

Commits

• 9ffb58c release: 10.75.0
• 664c906 meta(changelog): Update changelog for 10.75.0 (#24446)
• e3e7acc fix(v10/nitro): Import from nitro/h3 instead of h3 directly (#24444)
• 4bb51d1 feat(v10/effect): Capture errors through the Effect v4 ErrorReporter API (#24...
• 738f17e fix(v10/core): Don't instrument the SDK's own envelope requests (#24276)
• f63c56a fix(v10/node-core): Don't recurse in logAndExitProcess on a broken stdio pipe...
• 0e24355 fix(v10/browser-utils): Skip nullish LCP entries in vendored web-vitals (#24349)
• ac3ea13 fix(v10/nuxt): Detect Nitro version via the app's Nuxt dependency chain (#24025)
• 9235d43 fix(v10/nextjs): Only include emitted chunk directories in Turbopack sourcema...
• e2deda0 feat(v10/core): Accept CollectBehavior shorthand for `dataCollection.httpHe...
• Additional commits viewable in compare view

Updates i18next from 26.3.6 to 26.4.2

Release notes

Sourced from i18next's releases.

v26.4.2

• fix: $&, $`, $' and $$ inside a nested value ($t(key)) now stay literal. nest() handed the resolved value straight to String.replace as the replacement argument, so those sequences were read as replacement patterns: $& re-inserted the $t(...) match, $` / $' inserted the text before / after it, and $$ collapsed to $. Through t() the $& case was worse than a wrong string: the nested lookup resets the shared nesting regexp, so the re-inserted $t(...) was matched again on every pass and t() never returned — also under the default escapeValue: true when the value arrives via a variable forwarded through nesting options ($t(key, { "name": "{{name}}" }) with a name containing $&). The value is now $-escaped at the String.replace call, the same guard interpolate() already has, and a non-string value returned by a formatter in the nesting chain ($t(key, myFormat)) is stringified before that. Nested values are still not HTML-escaped (#854). Thanks @​mahirhir (#2447).

v26.4.1

• fix(types): the selector-form keyPrefix overload of getFixedT() is now available under enableSelector: 'strict'. Its constraint was gated on true | 'optimize' only, so under 'strict' it collapsed to never, the overload dropped out, and the returned t silently lost its keyPrefix scope (t(($) => $.deep) failed with Property 'deep' does not exist on type '{}'). The same call already typechecked under true and 'optimize'. Thanks @​hovelopin (#2446).

v26.4.0

• perf: cache toResolveHierarchy results per (code, fallbackCode) pair. The hierarchy resolver runs on every t() call and calls Intl.getCanonicalLocales multiple times, which showed up prominently when profiling render-heavy UIs (e.g. virtualized data grids); with the cache the per-call cost drops from ~886 ns to ~41 ns. The cache is invalidated automatically when options.fallbackLng changes (reassignment or in-place array mutation); if you mutate other resolution-relevant options at runtime (load, lowerCaseLng, cleanCode, nonExplicitSupportedLngs), call i18next.services.languageUtils.clearCache() afterwards. Function-valued fallbackLng and per-call array/object fallbackLng options are never cached, so dynamic fallbacks keep working as before. Thanks @​equaterina (#2444).
• chore: update all devDependencies (Babel stays on 7.x until @rollup/plugin-babel supports 8, eslint on 9.x for neostandard). Removed the unused coveralls package (CI uses the Coveralls GitHub Action) and replaced sinon with nise + vitest.spyOn in the v1 compatibility tests, which resolves all open npm audit findings (0 vulnerabilities) and should close the dependabot alerts on the lockfile.

Changelog

Sourced from i18next's changelog.

26.4.2

• fix: $&, $`, $' and $$ inside a nested value ($t(key)) now stay literal. nest() handed the resolved value straight to String.replace as the replacement argument, so those sequences were read as replacement patterns: $& re-inserted the $t(...) match, $` / $' inserted the text before / after it, and $$ collapsed to $. Through t() the $& case was worse than a wrong string: the nested lookup resets the shared nesting regexp, so the re-inserted $t(...) was matched again on every pass and t() never returned — also under the default escapeValue: true when the value arrives via a variable forwarded through nesting options ($t(key, { "name": "{{name}}" }) with a name containing $&). The value is now $-escaped at the String.replace call, the same guard interpolate() already has, and a non-string value returned by a formatter in the nesting chain ($t(key, myFormat)) is stringified before that. Nested values are still not HTML-escaped (#854). Thanks @​mahirhir (#2447).

26.4.1

• fix(types): the selector-form keyPrefix overload of getFixedT() is now available under enableSelector: 'strict'. Its constraint was gated on true | 'optimize' only, so under 'strict' it collapsed to never, the overload dropped out, and the returned t silently lost its keyPrefix scope (t(($) => $.deep) failed with Property 'deep' does not exist on type '{}'). The same call already typechecked under true and 'optimize'. Thanks @​hovelopin (#2446).

26.4.0

• perf: cache toResolveHierarchy results per (code, fallbackCode) pair. The hierarchy resolver runs on every t() call and calls Intl.getCanonicalLocales multiple times, which showed up prominently when profiling render-heavy UIs (e.g. virtualized data grids); with the cache the per-call cost drops from ~886 ns to ~41 ns. The cache is invalidated automatically when options.fallbackLng changes (reassignment or in-place array mutation); if you mutate other resolution-relevant options at runtime (load, lowerCaseLng, cleanCode, nonExplicitSupportedLngs), call i18next.services.languageUtils.clearCache() afterwards. Function-valued fallbackLng and per-call array/object fallbackLng options are never cached, so dynamic fallbacks keep working as before. Thanks @​equaterina (#2444).
• chore: update all devDependencies (Babel stays on 7.x until @rollup/plugin-babel supports 8, eslint on 9.x for neostandard). Removed the unused coveralls package (CI uses the Coveralls GitHub Action) and replaced sinon with nise + vitest.spyOn in the v1 compatibility tests, which resolves all open npm audit findings (0 vulnerabilities) and should close the dependabot alerts on the lockfile.

Commits

• 4dba50f 26.4.2
• e436b62 build
• d955fb0 fix: stringify formatter results in nested values, changelog v26.4.2
• dfafa3c fix: keep replacement patterns literal in nested values (#2447)
• 3c9981e chore: keep dev-only and local files out of the npm package
• c057ee0 26.4.1
• 02e3e16 changelog v26.4.1
• 6f198f2 fix(types): allow selector keyPrefix in getFixedT under enableSelector 'stric...
• 652847e 26.4.0
• 6c6025f prettier fix
• Additional commits viewable in compare view

Updates onnxruntime-web from 1.27.0 to 1.30.0

Release notes

Sourced from onnxruntime-web's releases.

ONNX Runtime v1.30.0

ONNX Runtime 1.30.0 expands generative AI inference, improves CPU and GPU performance, adds Go bindings, and strengthens runtime reliability. These notes cover changes since ONNX Runtime 1.29.1.

Highlights

• Expanded CUDA inference support with variable-length causal convolution for continuous batching, speculative decoding in paged XQA, and INT4 paged KV caches with per-channel scales (#32168, #32340, #32515).
• Improved WebGPU PagedAttention, added GPT-OSS support and INT8 KV-cache block quantization, and extended convolution optimizations (#31727, #32277, #32284, #32420).
• Added fused CPU LinearAttention kernels for AVX-512, Arm64 NEON, and SVE, plus AVX2 LayerNorm/RMSNorm acceleration (#31674, #31973, #32178, #32356).
• Added Go bindings for the ONNX Runtime C API and DeepSeek Engram contrib operators (#29615, #32268).

Announcements & Compatibility

• FP4 QMoE kernels are now enabled by default in CUDA builds, with Windows build support added in this release. Source builds can opt out with -Donnxruntime_USE_FP4_QMOE=OFF (#32096, #32163).
• CUDA fpA-intB builds now default to a compact kernel set for FP16 activations, INT4/INT8 weights, scale-only quantization, and block_size=32. Set -Donnxruntime_USE_FPA_INTB_GEMM_FULL=ON when building from source to retain the full kernel set, including BF16, zero-point, bias, larger-block-size, and native Hopper variants (#32324).
• CPU FP16 Gemm and MatMul execution is gated on hardware acceleration. CPU-assigned FP16 nodes without a matching kernel now fall back to FP32 (#32301, #32197).
• WebGPU plugin EP packaging now supports Linux AArch64. Plugin versions were advanced to WebGPU 0.4.0 and CUDA 0.2 (#32287, #31960, #31970).

Security & Reliability

Model Loading, Memory, and Input Validation

• Limited nested model-graph depth and canonicalized external-data locations to harden model loading (#32344, #32135).
• Added checked rounding for BFC arena allocations and fixed prepacked-weight reference lifetimes (#32010, #32040).
• Strengthened shape, rank, and parameter validation for Split, Scan, GatherND, ScatterND, SpaceToDepth/DepthToSpace, Crop, Conv, Normalizer, and pooling (#29461, #31668, #32034, #32039, #32076, #32157, #32160, #32161, #32345, #32349).
• Hardened generation and attention input handling, including attention-attribute narrowing, BifurcationDetector inputs, generation subgraph shapes, and QEmbed segment inputs. BeamSearch buffer expansion now uses dynamic shape storage (#31648, #31701, #32009, #32078, #32144).
• Validated TreeEnsemble node references and bounded subtree comparison, rejected non-finite CPU RoiAlign coordinates, and required ImageScaler bias to match the channel count (#32031, #32043, #32011, #32002).
• Added an allowlist of safe LoRA adapter parameter data types, validated MatMulFpQ4 shape inputs, and checked MLAS blockwise quantization/dequantization index ranges (#31682, #32032, #32007).

GPU Bounds and Resource Lifetimes

• Hardened CUDA indexing and buffer-size arithmetic in MatMulNBits, RemovePadding, RotaryEmbedding, SparseAttention, Whisper beam search, NMS, QDQ, and GatherElements (#31643, #31994, #31995, #31996, #31998, #32014, #32029, #32030).
• Fixed overflow in CUDA reduction scans and Softmax offset arithmetic, and handled zero-sized outputs in CUDA random-generator kernels (#32137, #32330, #31997).
• Fixed CUDA MultiHeadAttention shared-cache scratch lifetimes and kept CudaAsyncBuffer staging storage alive across CUDA graph replay (#31968, #32121).
• Fixed WebGPU out-of-bounds subgroup-matrix loads for partial tiles, zero-initialized writable device-allocator buffers, and rejected foreign GPU handles in built-in data transfers (#32364, #32063, #32317).

Dependencies and Tooling

• Upgraded Protobuf to 33.6 and refreshed Python documentation dependencies, including an ONNX security-related update (#29906,