chore(deps): bump the minor-and-patch group across 1 directory with 28 updates

[dependabot]

Bumps the minor-and-patch group with 28 updates in the / directory:

Package	From	To
@ai-sdk/provider-utils	5.0.28	5.0.34
@astryxdesign/cli	0.4.5	0.5.2
@biomejs/biome	2.5.9	2.5.11
@types/node	26.2.0	26.4.0
knip	6.32.2	6.33.0
intl-messageformat	11.2.12	11.2.14
fs-native-extensions	1.5.0	1.5.1
@ai-sdk/anthropic	4.0.40	4.0.46
@ai-sdk/code-mode	1.0.27	1.0.42
@ai-sdk/cohere	4.0.28	4.0.35
@ai-sdk/google	4.0.47	4.0.58
@ai-sdk/open-responses	2.0.34	2.0.36
@ai-sdk/openai	4.0.44	4.0.52
@ai-sdk/openai-compatible	3.0.32	3.0.41
@slack/socket-mode	3.0.0	3.0.1
@slack/web-api	8.0.0	8.1.1
ai	7.0.70	7.0.85
undici	8.10.0	8.10.1
zod	4.4.3	4.5.4
@earendil-works/pi-tui	0.84.2	0.84.4
katex	0.16.47	0.18.5
lucide-react	1.33.0	1.38.0
mermaid	11.17.0	11.17.2
@types/react-dom	19.2.4	19.2.5
@jackwener/opencli	1.8.6	1.8.7
@ant-design/icons-svg	4.5.0	4.6.0
@vitejs/plugin-react	6.1.0	6.1.1
simple-icons	16.28.0	16.29.0

Updates @ai-sdk/provider-utils from 5.0.28 to 5.0.34

Changelog

Sourced from @​ai-sdk/provider-utils's changelog.

5.0.34

Patch Changes

• Updated dependencies [aa45741]
  • @​ai-sdk/provider@​4.0.9

5.0.33

Patch Changes

• 90192f1: Mark transient network errors that occur while reading successful response bodies as retryable.

5.0.32

Patch Changes

• 3e125ba: Allow manual tool approval statuses to include a reason and preserve it across core, model, and UI approval requests. OPA requires-approval decisions now surface their reason to human approvers. UI request chunks serialize the optional reason, while UI messages retain it as approval.requestReason separately from an approver's response reason.

5.0.31

Patch Changes

• a9782e1: fix: align batch result parsing, request counts, and lifecycle behavior across providers
• 35841f5: feat: normalize mid-stream provider error events across supported providers into public StreamProviderError instances and preserve provider-owned type, code, status, retry, and raw payload metadata
• d2f3353: Split OpenAI and Azure OpenAI embedding requests by a conservative UTF-8 byte budget derived from their aggregate token limit, in addition to input count limits.

5.0.30

Patch Changes

• Updated dependencies [591d25b]
  • @​ai-sdk/provider@​4.0.8

5.0.29

Patch Changes

• b74971f: Preserve schema-valued additional properties when converting Zod 4 schemas.

Commits

• 69428b1 Version Packages (#19931)
• 0a0f271 Version Packages (#19857)
• 90192f1 fix: mark response body network errors as retryable (#19890)
• c93fa8d Version Packages (#19748)
• 3e125ba fix: human tool approval requests omit policy reasons (#19658)
• a01c481 Version Packages (#19478)
• 35841f5 feat: normalize mid-stream provider error events into public typed errors wit...
• d2f3353 fix: split large embedding batches that exceed provider aggregate token limit...
• a9782e1 fix(batch): align result parsing, request counts, and behavior across provide...
• 3d3afac Version Packages (#19362)
• Additional commits viewable in compare view

Updates @astryxdesign/cli from 0.4.5 to 0.5.2

Release notes

Sourced from @​astryxdesign/cli's releases.

Astryx 0.5.2 — all @astryxdesign/* packages ship at this version.

npx astryx upgrade --apply

@​astryxdesign/core

Fixes

• Rename the Data Input component category to Form Controls (#5686)

Performance

• Improve frequent translation lookups by pre-building locale maps (#4696)

@​astryxdesign/cli

Fixes

• Rename the Data Input component category to Form Controls (#5686)

Contributors

Thanks to everyone who contributed to this release:

@​ngolin @​rubyycheung

Full Changelog: facebook/astryx@v0.5.1...v0.5.2

Astryx 0.5.1 — all @astryxdesign/* packages ship at this version.

npx astryx upgrade --apply

@​astryxdesign/core

New Features

• add shape prop ('circle' | 'rounded' | 'square') to Avatar for non-circular form factors (#4205) (#4327)

• Card: make the variant axis theme-extensible through a CardVariantMap interface (#5551) CardVariant was a hand-written union backed by a closed style record, so a theme could not add a card variant: an unknown value neither type-checked nor rendered. It is now keyof CardVariantMap, an interface exported from @astryxdesign/core/Card that a theme build augments — the same shape Button, Badge, Section and the other extensible axes already ship.

  keyof CardVariantMap resolves to exactly the thirteen values CardVariant had, so no existing call site changes. A variant a theme adds falls through to base styles and the theme's own card['variant:<name>'] rule paints it.

  On SelectableCard that variant's selection ring is drawn in --selectable-card-ring-color, defaulting to the accent. No token the component could pick is guaranteed to contrast with a fill the component cannot know, so a theme rule that adds a variant sets the ring colour in the same rule as its backgroundColor.

• CheckboxInput and Switch now name their own label as a theme target: astryx-checkbox-label and astryx-switch-label, alongside the astryx-field-label every label already carries. A theme could previously only reach one astryx-field-label target, so styling a checkbox's label — which shares a row with its control — meant styling every form field's label above its input too. The control passes the target down, so the name says what the thing is rather than encoding how it is arranged, and nothing can set it untruthfully. (#5183)

• The checkbox indicator now exposes stable theme targets for its two marks — astryx-checkbox-indicator-check (the checkmark) and astryx-checkbox-indicator-dash (the indeterminate bar) — mirroring the existing astryx-radio-indicator-dot. Both reflect size. A theme restyling the mark itself (stroke weight, colour, the dash's proportions) previously had to reach it with .astryx-checkbox-indicator > svg and > span, which are element-and-order selectors that break silently on any restructure. Purely additive; no visual change. (#5426)

... (truncated)

Changelog

Sourced from @​astryxdesign/cli's changelog.

0.5.2

Fixes

• Rename the Data Input component category to Form Controls (#5686)

Contributors

Thanks to everyone who contributed to this release:

• @​rubyycheung

---

0.5.1

New Features

• Component docs can declare structured usage.accessibility requirements, and astryx component renders them as a dedicated Accessibility section in full and compact output. Translated and dense documentation overlays preserve the base accessibility guidance unless they explicitly replace it. (#5646)

• Icon APIs and themes accept namespaced extension keys, and NumberInput steppers use numberInput:stepperDown without widening the required IconRegistry keys (#5466) <Icon icon>, useIcon, and defineTheme({icons}) accept keys such as numberInput:stepperDown and richtext:bold; misspelled built-in names remain type errors. NumberInput keeps a compact centered Core fallback, while themes can override its steppers independently from the shared chevronDown semantic.

• Rebuild the settings-dialog page template with searchable navigation, responsive grouped controls, live appearance previews, configurable keyboard shortcuts, and docsite gallery visibility. (#5568)

• New table-filter page template: a table page built around a filter token list (#5448) Ports the feature set of the internal XDS table page pattern onto Astryx primitives. The filter row is a token list of quick-filter toggles and field controls — Selector, MultiSelector, and a ComplexSelector wrapping a range Slider — that swaps to PowerSearch for anything the tokens can't express. Both modes read and write the same PowerSearchFilter[], so a filter built in either survives the swap. Controls carry field chrome when unset and a pressed fill once they hold a value, so the row reads as one family whether a clause came from a toggle or a selector.

  Around that: saved views that capture the filters and the whole table configuration, a bulk-edit bar that slides in on selection, and a view options popover with four panels — a drag-and-drop column transfer list, density, sticky edges, and grouping — that apply instantly. Clicking a row opens a resizable detail panel. The list pages in by infinite scroll against an IntersectionObserver, with skeleton rows aligned to the table's own column grid standing in for the batch in flight, and empty states for the no-results and no-data paths. The toolbar wraps to a second row under a container query rather than a viewport one, so it responds to the width the detail panel leaves it.

  Uses the Table - Filtering category, already reserved in the TemplateCategory union.

Fixes

• build/search no longer rank a partially-matched template above one matching every term, no longer index TypeScript generic arguments as rendered components, and no longer treat breadth of rendered components as full-strength relevance. (#5614)

• Component and hook names resolve case-exactly on macOS and Windows, matching Linux (#5478) findComponentReadme, findComponentSource and findHookDoc probed candidate paths with fs.existsSync, which answers through the filesystem's own case folding. On a case-insensitive filesystem astryx component button resolved to Button instead of reporting an unknown component with suggestions, and findHookDoc(core, 'mediaquery') returned .../hooks/useMediaquery.doc.mjs — a spelling that exists nowhere, and that breaks any consumer reading it on Linux. The probes now verify each path segment against its parent's real directory listing, so these component and hook lookups resolve the same names to the same real paths on every host. The deliberate case-insensitive hook lookup is unchanged; it now returns the file's true casing.

• The 56 --color-data-* defaults now reach runtime CSS and built themes from the same source, while dashboard template fallbacks match those defaults (#5562, #5566) The defaults live once at :root in @layer astryx-base, so nested themes inherit parent overrides and astryx theme build matches <Theme> while generateThemeCSS keeps its existing return shape.

  Visual change. A chart or template that previously painted nothing or used a mismatched hex fallback now paints the data token's default. Pin an explicit color to preserve a previous fallback.

• The theme-showcase page no longer clips its own controls. In the store's product cards the quantity field and "Add to cart" button spilled out of both sides of the card; in the checkout card the card number truncated mid-number (1234 1234 12), the country selector ellipsized, and the pay button was left with only a few pixels of slack. (#5539) The product-card row is the more visible of the two. It had no width of its own — the enclosing stack centers rather than stretches its children — so it sized to its contents and, being centered, overflowed the card at both edges once those contents outgrew it. That stayed hidden while the quantity field was narrow, and surfaced when NumberInput moved to type="text" for formatted display: a text input's default size=20 made the field ~200px instead of ~65px, and the template was pinning it with a style minWidth (a floor, not a cap) plus flexShrink: 0. The field now uses NumberInput's width prop, which is what actually sizes a field, and the row is pinned to the card width and allowed to wrap so the button drops to its own full-width line instead of ellipsizing on a narrow card.

  The checkout sat in a grid track with a 200px minimum, so its width was a fraction of however many tracks happened to fit — it swung between 208px and 328px as the viewport resized, and the narrow end is well under what the form needs. Themes with a large spacing scale suffered most: Matcha's --spacing-5 card padding alone spends 60px of that budget.

  The checkout and chat panels are now a wrapping flex row. They share a row at roughly 1:2 while both flex bases fit, then the chat drops to its own full-width row, which makes 300px a floor for the checkout rather than an accident of the track count. Raising the track minimum instead would have left a tall gap beside the checkout at mid widths, since a two-track row can't hold a two-track span.

  Two narrower fixes ride along, both text the card was breaking rather than fitting: the payment-method grid's minimum goes 70px to 80px so "Google" stops breaking mid-word on Matcha and Y2K, and on phones the card drops one padding step and sheds the card number's decorative start icon, which together buy back the room a 16-digit number needs at 360px.

Documentation

... (truncated)

Commits

• c7df10c chore: version packages for v0.5.2 (#5695)
• 046f6ea fix(docs): rename input category to form controls (#5686)
• f64186a chore: version packages for v0.5.1 (#5661)
• 88fde91 feat(cli): add component accessibility sections
• 5839db0 fix(DateTimeInput): stack fields in narrow containers (#5609)
• d51dbad feat(core): add mobile DateTimeInput picker (#5582)
• 8e2751b docs(cli): describe page templates by structure so build can find them (#5615)
• 9362563 fix(build): remove rimraf from package cleanup (#5624)
• c6041cf fix(cli): stop build ranking partial query matches above full ones (#5614)
• a5f4b03 feat(Spinner): make the ring geometry and colors themeable (#5214)
• Additional commits viewable in compare view

Updates @biomejs/biome from 2.5.9 to 2.5.11

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.11

2.5.11

Patch Changes

• #11499 9743d0c Thanks @​scs0209! - Fixed #11496: useValidAnchor now treats Astro JSX shorthand attributes like <a {href}> as a valid href.

• #11437 88f805e Thanks @​Princesseuh! - Fixed #9944: adjacent elements inside an Astro expression now parse as an implicit fragment instead of raising an error.

  {options.map(() =>
    <div />
    <div />
  )}

• #11437 88f805e Thanks @​Princesseuh! - Fixed Astro templates rejecting unclosed HTML void elements, such as {cond && <br>}.

• #11507 e2fc036 Thanks @​dyc3! - Fixed #11157: noUnusedVariables no longer reports Vue <script setup> bindings used by CSS v-bind() as unused.

• #11398 afc4615 Thanks @​dyc3! - Fixed #11389: Files passed through --stdin-file-path now use full HTML support for Astro, Svelte, and Vue when it is enabled.

• #11526 372cd68 Thanks @​dyc3! - Fixed noVueRefAsOperand to track Vue refs through declaration aliases and toRefs() properties, and to recognize useTemplateRef() results. The rule no longer reports false positives such as plain ref transfers, plain toRefs() property access, defineModel() modifiers, or the supported .effect member as operands.

  The refactor enabling these fixes also improves the performance of the rule.

• #11458 a7cd286 Thanks @​dyc3! - Fixed #11436: GritQL snippets such as export { $specifiers } from $source now match named re-exports with aliases, inline type modifiers, and multiple specifiers.

• #11515 382b15d Thanks @​dyc3! - Fixed #11390, where noFloatingPromises performed expensive full type inference for calls to non-Promise methods declared on third-party TypeScript classes. The rule now classifies those calls using targeted type information.

• #11516 6f40e82 Thanks @​levrik! - Fixed noVueRefAsOperand so it no longer reports a callback parameter (e.g. from .find(), .map()) as an unwrapped ref value just because it's nested inside a ref(), computed(), or similar call.

  const result = computed(() => list.find((item) => item.label === "a"));

  Previously, item here was incorrectly treated as a ref value because the rule attributed it to the outer computed() call.

• #11495 496268d Thanks @​Netail! - Fixed useGraphqlNamingConvention so it no longer reports GraphQL enum value definitions with comments & descriptions and now displays a more accurate diagnostic range.

• #11407 6ef52b0 Thanks @​1678092075! - Fixed #11214: noUnusedVariables no longer reports type parameters declared by non-default function overload signatures that have an implementation.

• #11322 5c353e6 Thanks @​jp-knj! - Added a new nursery rule noAstroSetHtmlDirective, which disallows Astro's set:html directive because untrusted content can introduce cross-site scripting vulnerabilities.

  For example, the following snippet triggers the rule:

  <div set:html={content} />

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.11

Patch Changes

• #11499 9743d0c Thanks @​scs0209! - Fixed #11496: useValidAnchor now treats Astro JSX shorthand attributes like <a {href}> as a valid href.

• #11437 88f805e Thanks @​Princesseuh! - Fixed #9944: adjacent elements inside an Astro expression now parse as an implicit fragment instead of raising an error.

  {options.map(() =>
    <div />
    <div />
  )}

• #11437 88f805e Thanks @​Princesseuh! - Fixed Astro templates rejecting unclosed HTML void elements, such as {cond && <br>}.

• #11507 e2fc036 Thanks @​dyc3! - Fixed #11157: noUnusedVariables no longer reports Vue <script setup> bindings used by CSS v-bind() as unused.

• #11398 afc4615 Thanks @​dyc3! - Fixed #11389: Files passed through --stdin-file-path now use full HTML support for Astro, Svelte, and Vue when it is enabled.

• #11526 372cd68 Thanks @​dyc3! - Fixed noVueRefAsOperand to track Vue refs through declaration aliases and toRefs() properties, and to recognize useTemplateRef() results. The rule no longer reports false positives such as plain ref transfers, plain toRefs() property access, defineModel() modifiers, or the supported .effect member as operands.

  The refactor enabling these fixes also improves the performance of the rule.

• #11458 a7cd286 Thanks @​dyc3! - Fixed #11436: GritQL snippets such as export { $specifiers } from $source now match named re-exports with aliases, inline type modifiers, and multiple specifiers.

• #11515 382b15d Thanks @​dyc3! - Fixed #11390, where noFloatingPromises performed expensive full type inference for calls to non-Promise methods declared on third-party TypeScript classes. The rule now classifies those calls using targeted type information.

• #11516 6f40e82 Thanks @​levrik! - Fixed noVueRefAsOperand so it no longer reports a callback parameter (e.g. from .find(), .map()) as an unwrapped ref value just because it's nested inside a ref(), computed(), or similar call.

  const result = computed(() => list.find((item) => item.label === "a"));

  Previously, item here was incorrectly treated as a ref value because the rule attributed it to the outer computed() call.

• #11495 496268d Thanks @​Netail! - Fixed useGraphqlNamingConvention so it no longer reports GraphQL enum value definitions with comments & descriptions and now displays a more accurate diagnostic range.

• #11407 6ef52b0 Thanks @​1678092075! - Fixed #11214: noUnusedVariables no longer reports type parameters declared by non-default function overload signatures that have an implementation.

• #11322 5c353e6 Thanks @​jp-knj! - Added a new nursery rule noAstroSetHtmlDirective, which disallows Astro's set:html directive because untrusted content can introduce cross-site scripting vulnerabilities.

  For example, the following snippet triggers the rule:

  <div set:html={content} />

• #11462 18883b7 Thanks @​dyc3! - Fixed #10776: useVueHyphenatedAttributes no longer reports lowercase attribute names containing punctuation, such as pt:header:data-test-id and some_attr.

... (truncated)

Commits

• 4d9c1d5 ci: release (#11457)
• 18883b7 fix(html): ignore punctuation in Vue attribute casing (#11462)
• 5c353e6 feat: adds the noAstroSetHtmlDirective rule for .astro (#11322)
• 3e5367f feat(lint): rule noUndeclaredCustomProperties (#11191)
• 05797b1 ci: release (#11450)
• 5f1ed34 chore: add CodSpeed and Cloudflare to sponsors (#11410)
• See full diff in compare view

Updates @types/node from 26.2.0 to 26.4.0

Commits

• See full diff in compare view

Updates knip from 6.32.2 to 6.33.0

Release notes

Sourced from knip's releases.

Release 6.33.0

• Support package manifest resolution under Yarn PnP (#1946) (a82efb62b290e004bdabee40bcb337baf3701a1b) - thanks @​WooWan!
• Resolve oxlint jsPlugins from .oxlintrc.jsonc (#1973) (d055023182789555a574eaefde80dac997190437) - thanks @​DreierF!
• Update dependency bun to v1.4.0 (#1964) (937ab38ad514a00edafecff4ca04603b015bf921) - thanks @​renovate[bot]!
• Expose defineConfig on a ./config entrypoint (#1960) (17f7a6051d9781860f248cc2a745dbe837713cd9) - thanks @​theRizwan!
• Preserve all environment variables in exec.ts (#1979) (c0a9ecf8d1c0cdd7789c1e1bea893706c060239d) - thanks @​DreamLongYT!
• Add support for TypeScript content mappers (#1978) (db67f9bd8cebf0ea3c298690d462c154827aa462) - thanks @​remcohaszing!
• fix(vitest): resolve array entries and root-relative setup dependencies (#1982) (0ecf48538c339437e6f9dfe9a6013d307783cbd3) - thanks @​DreamLongYT!
• Fix type annotation in dynamic configuration function example (ada88c7f01563b73643af34a147a71fd9ab9d2dc)
• Format docs with remark (7764c2a4ebecdbf226c19494d255d9cb14550822)
• Throw on configuration that is not an object (d7ac0cf1de8f79be6ec53412cac9f7edf8f35ba7)
• Clarify dependency inputs, isTypeOnly and toConfig in plugin docs (2bd367961554ad1addb520bdfad5e31125885969)
• Resolve content mapper process from package.json#typescript.contentMapper.exec (74640c03e450624409692f4cc17699775108fd7e)
• Encode argv arrays before parsing them as shell commands (b79234c15153fbf592e82c94e4e4e9f41b4479e0)
• Update dependencies (28510146c2b97d88f7188f1239b9307aac7dbf0c)
• Replace non-breaking space in module graph comment (4e22bfcd09deccc92ed158f5554fe3e03f3a2c51)
• Update fix format test for oxfmt package.json key sorting (65011bf6054d03fb5580f3381867b07d1b8a9a0c)
• fix(webpack): resolve entry descriptors using import field (#1981) (cad8910e7fb89c2510fc9f5885289335dd4e60da) - thanks @​DreamLongYT!
• fix: count enum element access as a whole-object read (#1958) (5a47d603aa23b388ae7ce4fe301656f1abc43b14) - thanks @​addielaruee!
• Resolve oxlint/vite-plus import resolvers from settings (#1983) (c1165b70efe27398b86fa50bcea7d85c253d3ee7) - thanks @​DreierF!
• fix(nuxt): resolve string extends configs (#1984) (4a5d7068d6264ea45c78c832abe7ba052763517e) - thanks @​DreamLongYT!
• Wrap up webpack entry resolution (505decdb821f9b76d194742cee7e98c75ef7d8e9)
• Keep element access precise for number-like enum member names (bcbac3a8b8283da3b32256584b3cc6569ae5c02f)
• Resolve Object.* enum enumeration through import aliases (347967daaed817ca20e1ad6148388a66ec8b421b)
• Resolve named string-key access on namespace-qualified enums (2ac1fbc1e92f3dae662ca4d4701cf010346be49a)
• Normalize line endings in nuxt-config-string fixture (9fe2b2b2db8690685ec7c6cf8b3d39b9ed7b3fdc)
• Resolve nuxt layer sources from all extends entry shapes (db136151d9f98801837b33646ef7b02ae7b5a86d)
• Report unused exports behind Vitest module promise mocks (resolve #1966) (74954c219367ca1577184cca08c30dbb3fb6222e)
• Check line endings against .gitattributes in pnpm run ci (ddc9fd0cc3328260665203c8573702bb6c9d0dd6)

Release 6.32.3

• Update sentry production snapshot (9f18cba93c91de8554636b13692d6e7a937b7697)
• Pin TypeScript ecosystem test (de5162952d223050f3135afb02d4e8de6d46f381)
• Update query snapshot (f6964dd577d8f7967f9be6778f5c3953632e3c96)
• fix(tsup): match config files with .cts and .mts extensions (#1938) (68d6f52f7913cfa1e36618e6b03f90734da34149) - thanks @​codeAnqiang-ma!
• fix(lefthook): match all config file names and extensions (#1940) (4015ae0330c78e97360a2c8f697d17f82c5c24ae) - thanks @​codeAnqiang-ma!
• fix(binaries): resolve missing pnpm subcommands (#1945) (deedbf69dcbd6a59d6705a72cadb4e40ad9c8029) - thanks @​marcalexiei!
• Fix nested gitignore negation inside ignored dot-directories (#1913) (#1942) (0201641af48f52edfbe72076118944ee6273718e) - thanks @​DSeaStar!
• fix(webdriver-io): match all supported config file extensions (#1948) (dc7aca5a865d1762a41dd97493b73398ec3abc19) - thanks @​solomonaustin!
• Resolve vitest include patterns relative to test.dir (#1929) (ee555d227208dd6a34e002318bd6710dedb4d5ca) - thanks @​kirthi-b!
• Change GitHub stars badge style to flat (#1967) (ff0d791e8130430524dc88c4df73ad87f82879f7) - thanks @​DreamLongYT!
• Ignore printf as global binary (#1972) (a0c0b0805a8a26a6efdedfe2561b168da2a22b68) - thanks @​taracutie!
• fix: add bun 1.4 dedupe subcommand (#1969) (d1d5d4276ece6daf2215f5ff3f4224b5b50dcac3) - thanks @​NimmLor!
• Resolve Vitest mocks from test root (e655b0ba0192546a2688d702323c8e7c58fecde1)
• Resolve local Vitest reporters from test root (resolve #1953) (f4ff31ad0385c5955627ec1b3bed2bc0000b14fe)

Commits

• fb25ece Release knip@6.33.0
• 74954c2 Report unused exports behind Vitest module promise mocks (resolve #1966)
• db13615 Resolve nuxt layer sources from all extends entry shapes
• 9fe2b2b Normalize line endings in nuxt-config-string fixture
• 2ac1fbc Resolve named string-key access on namespace-qualified enums
• 347967d Resolve Object.* enum enumeration through import aliases
• bcbac3a Keep element access precise for number-like enum member names
• 505decd Wrap up webpack entry resolution
• 4a5d706 fix(nuxt): resolve string extends configs (#1984)
• c1165b7 Resolve oxlint/vite-plus import resolvers from settings (#1983)
• Additional commits viewable in compare view

Updates intl-messageformat from 11.2.12 to 11.2.14

Release notes

Sourced from intl-messageformat's releases.

intl-messageformat: 11.2.14

11.2.14 (2026-08-07)

What's Changed

• chore(deps): update dependency svelte to v5.56.7 by @​renovate[bot] in formatjs/formatjs#6940
• chore(deps): update dependency ts-jest to v29.4.12 by @​renovate[bot] in formatjs/formatjs#6941
• chore(deps): update radix-ui-primitives monorepo by @​renovate[bot] in formatjs/formatjs#6942
• chore(deps): update dependency rolldown-plugin-dts to v0.27.14 by @​renovate[bot] in formatjs/formatjs#6947
• chore(deps): update radix-ui-primitives monorepo by @​renovate[bot] in formatjs/formatjs#6948
• chore(deps): update tailwindcss monorepo to v4.3.3 by @​renovate[bot] in formatjs/formatjs#6949
• chore(deps): update vue monorepo to v3.5.40 by @​renovate[bot] in formatjs/formatjs#6950
• chore(deps): update dependency svelte to v5.56.8 by @​renovate[bot] in formatjs/formatjs#6951
• chore(deps): update radix-ui-primitives monorepo by @​renovate[bot] in formatjs/formatjs#6952
• fix(deps): update dependency eslint-plugin-formatjs to v6.4.19 by @​renovate[bot] in formatjs/formatjs#6953
• fix(deps): update formatjs monorepo by @​renovate[bot] in formatjs/formatjs#6954
• chore(deps): update dependency fs-extra to v11.4.0 by @​renovate[bot] in formatjs/formatjs#6959
• chore(deps): update dependency happy-dom to v20.11.1 by @​renovate[bot] in formatjs/formatjs#6960
• chore(deps): update dependency lucide-react to v1.27.0 by @​renovate[bot] in formatjs/formatjs#6963
• chore(deps): update dependency oxlint to v1.75.0 by @​renovate[bot] in formatjs/formatjs#6964
• fix(formatjs_cli): extract id-only messages by @​longlho in formatjs/formatjs#6962
• chore(deps): update dependency tinybench to v6.1.2 by @​renovate[bot] in formatjs/formatjs#6966
• chore(deps): update dependency webpack to v5.109.0 by @​renovate[bot] in formatjs/formatjs#6967
• chore(deps): update dependency rollup to v4.62.3 by @​renovate[bot] in formatjs/formatjs#6970
• chore: release main by @​longlho in formatjs/formatjs#6955
• docs: add internationalization best practices by @​longlho in formatjs/formatjs#6972
• docs: add i18n best practices skill by @​longlho in formatjs/formatjs#6973
• feat(formatjs_icu_messageformat): add Rust message formatter by @​longlho in formatjs/formatjs#6974
• feat(formatjs_intl): add Rust intl runtime by @​longlho in formatjs/formatjs#6975
• chore: release main by @​longlho in formatjs/formatjs#6977
• Documented how to use ember-intl by @​ijlee2 in formatjs/formatjs#6946
• fix: support Rust 1.92 in new intl crates by @​longlho in formatjs/formatjs#6978
• chore: release main by @​longlho in formatjs/formatjs#6979
• fix: queue crate release workflows by @​longlho in formatjs/formatjs#6980
• docs: document Rust support by @​longlho in formatjs/formatjs#6981
• feat(formatjs_intl): add message fallbacks by @​longlho in formatjs/formatjs#6982
• chore(deps): update dependency @​vitejs/plugin-react to v6.0.5 by @​renovate[bot] in formatjs/formatjs#6983
• chore(deps): update dependency @​rspack/core to v2.1.7 by @​renovate[bot] in formatjs/formatjs#6986
• feat(formatjs_intl): support precompiled catalogs by @​longlho in formatjs/formatjs#6985
• chore: release main by @​longlho in formatjs/formatjs#6984
• chore(deps): update dependency webpack to v5.109.2 by @​renovate[bot] in formatjs/formatjs#6987
• build: remove root npmrc by @​longlho in formatjs/formatjs#6988
• fix: skip unpublished Rust crates by @​longlho in formatjs/formatjs#6992
• chore(deps): update rust crate serde_json to v1.0.151 by @​renovate[bot] in formatjs/formatjs#6945
• chore(deps): update rust crate serde to v1.0.229 by @​renovate[bot] in formatjs/formatjs#6944
• chore(deps): update rust crate anyhow to v1.0.104 by @​renovate[bot] in formatjs/formatjs#6943
• fix(deps): update rust crate base64 to 0.23 by @​renovate[bot] in formatjs/formatjs#6971
• chore(deps): update rust crate fast-glob to v1.1.0 by @​renovate[bot] in formatjs/formatjs#6969
• chore(deps): update rust crate proc-macro2 to v1.0.107 by @​renovate[bot] in formatjs/formatjs#6990
• fix: handle Cargo publish and merge options by @​longlho in formatjs/formatjs#6993
• chore(deps): update pnpm to v11.18.0 by @​renovate[bot] in formatjs/formatjs#6968

... (truncated)

Commits

• 629124f chore: release main (#6997)
• 1c76864 chore(deps): update actions/stale action to v11 (#7011)
• ca657be fix(deps): update dependency babel-plugin-formatjs to v13 (#7014)
• b195fda fix(deps): update rust crate syn to v3 (#7017)
• 4fe91fe feat(formatjs_intl): add extractable format_message macro (#7018)
• 89749ca fix(formatjs_cli): fail on input resolution errors (#7005)
• 61429d3 chore(deps): update dependency vite to v8.2.0 (#7007)
• 6e356ac chore(deps): update dependency oxlint to v1.76.0 (#7003)
• edfe9ec chore(deps): update dependency codescythe to ^0.10.0 (#7000)
• 0795aad chore(deps): update dependency lucide-react to v1.28.0 (#7001)
• Additional commits viewable in compare view

Updates fs-native-extensions from 1.5.0 to 1.5.1

Commits

• d67c02b 1.5.1

[Astro-Han]

Reviewed current head 9ad5eebb9e48e56a1a69b563c3cff958f18972fe (OPEN, MERGEABLE, hosted checks red — see below). Two P1, both blocking; no P0/P3. The diff touches only 10 package manifest/lockfile files.

P1 — full install fails at postinstall: patch was made for the old version

package.json:108 bumps @ai-sdk/provider-utils to 5.0.34, but the repo still carries patches/@ai-sdk+provider-utils+5.0.28.patch. scripts/apply-dependency-patches.mjs:21-31,48-60 applies existing patches with patch-package --error-on-fail. Hosted test, package, audit and several platform/packaging jobs fail with Patch was made for version: 5.0.28 / Installed version: 5.0.34. The patch is not empty — it changes StreamingToolCallTracker behavior — so it cannot just be deleted. Please regenerate the patch against 5.0.34 for the intended behavior, or pin back to 5.0.28, then re-run full CI.

P1 — the new lockfile resolves the Slack peer dependency into an invalid tree

packages/runtime/package.json:155 directly depends on undici ^8.10.1, while the new package-lock.json entry for @slack/socket-mode@3.0.1 still declares peer undici ^7.0.0. The old lockfile's nested @slack/socket-mode/node_modules/undici@7.29.0 copy is gone, so it now resolves to the runtime's undici@8.10.1. A clean npm ci --ignore-scripts followed by npm ls --workspace @maka/runtime undici @slack/socket-mode --all --json reproducibly returns ELSPROBLEMS, marking undici@8.10.1 invalid against ^7.0.0; hosted audit fails on the same invalid tree. Please keep a 7.x copy satisfying the Slack peer, or confirm a Slack release accepting 8.x before upgrading, then regenerate the lockfile and verify npm ls plus full CI.

Notes

The third-party notices check cannot proceed past the same invalid npm ls tree, so the compliance loop cannot be claimed green on this head either. git diff --check is clean. What I could not judge: whether any other peer ranges in the bumped group hide similar silent resolutions beyond these two.

---

Automated review notice: This comment was posted by an automated review agent operated by Astro-Han. It is not an independent human review and does not replace one.

简体中文

本条结论全部来自 @未开智选手 的审查。我自己没有读这份 diff；我核的是当前 head 有没有漂移、以及 exact-head 的 CI 状态。当前 head 是 9ad5eeb，多项检查失败。P1 一是补丁版本对不上导致全量安装失败，P1 二是新锁文件把 Slack 的 peer 依赖解析成无效树。修好并推新 head 后再审。