[dependabot]

Bumps the minor-and-patch group with 4 updates in the / directory: @assistant-ui/react, react, react-dom and tsdown.

Updates @assistant-ui/react from 0.15.21 to 0.15.29

Release notes

Sourced from @​assistant-ui/react's releases.

@​assistant-ui/react@​0.15.29

Patch Changes

• #9613 6e17b3a - fix: preserve pending attachment selections when unrelated assistant scopes change (@​Kinfe123)

• #9602 c696c16 - fix: ignore an attachment picker's selection after the active thread changes, keeping files out of the replacement conversation. (@​Kinfe123)

• #9753 14eec8a - A run that starts while focus is in a field outside the thread no longer moves focus into the composer, and a composer that already has focus keeps its selection. (@​okisdev)

• #9586 2eb0447 - feat: add OpenAIRealtimeVoiceAdapter for direct browser voice sessions with streamed transcripts, typed input, mute controls, and cancellable WebRTC setup. (@​Kinfe123)

• #9768 c71326f - Clear frame tools and pending calls when the iframe document changes or reloads. (@​okisdev)

• #9747 b4558a5 - useAssistantFrameHost disposes the host when its iframe is removed from the page, so the frame's tools leave the model context and its pending calls reject right away, and it serves a new iframe mounted into the same ref. (@​okisdev)

• #9252 1371e4f - Handle sparse MCP Apps message content without scanning array holes. (@​rupic-app)

• Updated dependencies [b78a043, fe13206, 8289dd1, e09563a, b88d62d, 5588bfb, d6e8a0c, fe7179d, c71326f, 55d065c, 61aaccf, 43c9c7c, 75abfbe, 12dfc85, 1091bbc, 01225b9, d2f04ca, 6537c5f, 2217804, 7ba7c54, cd5fd6c, 5197671, 04c5d36]:

  • @​assistant-ui/core@​0.3.29
  • assistant-stream@0.3.52
  • @​assistant-ui/store@​0.3.21

@​assistant-ui/react@​0.15.28

Patch Changes

• #9323 2be98de - fix(react): render an inert composer's inert attribute on React 18, so the cancel focus loop skips it as it does on React 19 (@​okisdev)
• Updated dependencies [c157aee, 2c1963a, afb9ad2, efbf028, 8b49f28, 4e86339, 28dc601]:
  • @​assistant-ui/core@​0.3.27
  • safe-content-frame@0.0.34
  • assistant-stream@0.3.50
  • @​assistant-ui/tap@​0.9.23

@​assistant-ui/react@​0.15.27

Patch Changes

• #9171 6528ee3 - Guard the composer input example against IME confirmation Enter. (@​rupic-app)

• #9166 b86d6cd - Block typing, attachments, sends, and message editing while a thread is disabled. (@​rupic-app)

• #9247 664f2df - fix(react): pass an MCP App's ui/initialize params to onInitialized as McpAppInitializeParams, including the display modes the app declares (@​rupic-app)

• Updated dependencies [2c10bb1, 16afd50, b86d6cd, 96fd2a2, 2b3e0d3]:

  • assistant-cloud@0.2.7
  • @​assistant-ui/core@​0.3.26
  • @​assistant-ui/store@​0.3.19

@​assistant-ui/react@​0.15.26

Patch Changes

• #8483 7b7c782 - Restore focus to the thread composer after cancelling a message edit with Escape or keyboard/assistive-technology activation of the Cancel button. Pointer activation preserves the existing focus behavior. (@​akim136)

• #8259 0f740cc - fix: show the selection toolbar after a window blur (@​rupic-app)

... (truncated)

Changelog

Sourced from @​assistant-ui/react's changelog.

0.15.29

Patch Changes

• #9613 6e17b3a - fix: preserve pending attachment selections when unrelated assistant scopes change (@​Kinfe123)

• #9602 c696c16 - fix: ignore an attachment picker's selection after the active thread changes, keeping files out of the replacement conversation. (@​Kinfe123)

• #9753 14eec8a - A run that starts while focus is in a field outside the thread no longer moves focus into the composer, and a composer that already has focus keeps its selection. (@​okisdev)

• #9586 2eb0447 - feat: add OpenAIRealtimeVoiceAdapter for direct browser voice sessions with streamed transcripts, typed input, mute controls, and cancellable WebRTC setup. (@​Kinfe123)

• #9768 c71326f - Clear frame tools and pending calls when the iframe document changes or reloads. (@​okisdev)

• #9747 b4558a5 - useAssistantFrameHost disposes the host when its iframe is removed from the page, so the frame's tools leave the model context and its pending calls reject right away, and it serves a new iframe mounted into the same ref. (@​okisdev)

• #9252 1371e4f - Handle sparse MCP Apps message content without scanning array holes. (@​rupic-app)

• Updated dependencies [b78a043, fe13206, 8289dd1, e09563a, b88d62d, 5588bfb, d6e8a0c, fe7179d, c71326f, 55d065c, 61aaccf, 43c9c7c, 75abfbe, 12dfc85, 1091bbc, 01225b9, d2f04ca, 6537c5f, 2217804, 7ba7c54, cd5fd6c, 5197671, 04c5d36]:

  • @​assistant-ui/core@​0.3.29
  • assistant-stream@0.3.52
  • @​assistant-ui/store@​0.3.21

0.15.28

Patch Changes

• #9323 2be98de - fix(react): render an inert composer's inert attribute on React 18, so the cancel focus loop skips it as it does on React 19 (@​okisdev)
• Updated dependencies [c157aee, 2c1963a, afb9ad2, efbf028, 8b49f28, 4e86339, 28dc601]:
  • @​assistant-ui/core@​0.3.27
  • safe-content-frame@0.0.34
  • assistant-stream@0.3.50
  • @​assistant-ui/tap@​0.9.23

0.15.27

Patch Changes

• #9171 6528ee3 - Guard the composer input example against IME confirmation Enter. (@​rupic-app)

• #9166 b86d6cd - Block typing, attachments, sends, and message editing while a thread is disabled. (@​rupic-app)

• #9247 664f2df - fix(react): pass an MCP App's ui/initialize params to onInitialized as McpAppInitializeParams, including the display modes the app declares (@​rupic-app)

• Updated dependencies [2c10bb1, 16afd50, b86d6cd, 96fd2a2, 2b3e0d3]:

  • assistant-cloud@0.2.7
  • @​assistant-ui/core@​0.3.26
  • @​assistant-ui/store@​0.3.19

0.15.26

Patch Changes

... (truncated)

Commits

• a46d663 chore: update versions (#9549)
• c71326f fix(core): tell a reloaded frame document from the one it replaced (#9768)
• 14eec8a fix(react): only focus the composer on run start when focus is free or inside...
• b4558a5 fix(react): dispose a frame host when its iframe is removed (#9747)
• 2eb0447 feat(react): connect voice directly to OpenAI Realtime (#9586)
• 1371e4f fix(mcp-apps): handle sparse ui/message content (#9252)
• 6e17b3a fix(react): preserve attachment picks across unrelated scope changes (#9613)
• c696c16 fix(react): discard file selections after switching threads (#9602)
• 9e2e69d chore: update versions (#9270)
• 2be98de fix(react): render an inert composer's inert attribute on React 18 (#9323)
• Additional commits viewable in compare view

Updates react from 19.3.0 to 19.3.1

Release notes

Sourced from react's releases.

19.3.1 (October 14th, 2026)

React Server Components

• Improve transport protocol (#37845 by @​unstubbable and @​eps1lon)

Commits

• 61aa00d [19.3.x][Flight] Improve transport protocol (#37845)
• See full diff in compare view

Updates react-dom from 19.3.0 to 19.3.1

Release notes

Sourced from react-dom's releases.

19.3.1 (October 14th, 2026)

React Server Components

• Improve transport protocol (#37845 by @​unstubbable and @​eps1lon)

Commits

• 61aa00d [19.3.x][Flight] Improve transport protocol (#37845)
• See full diff in compare view

Updates tsdown from 0.23.0 to 0.23.1

Release notes

Sourced from tsdown's releases.

v0.23.1

   🐞 Bug Fixes

• Preserve false tsconfig option  -  by @​Masutayunikon in rolldown/tsdown#1065 (407f8)
• entry: Honor custom root for object entry  -  by @​giaBaoJS in rolldown/tsdown#1072 (17452)
• pkg: Pack tarball inside npm publish --dry-run  -  by @​giaBaoJS in rolldown/tsdown#1076 (83f0c)

    View changes on GitHub

Commits

• 6493257 chore: release v0.23.1
• ba6acb9 chore: upgrade deps
• 6cbfec7 chore(deps): update dependency unplugin-vue to v8 (#1090)
• eb40c95 chore: declare package side effects
• f9c95d0 chore: align pnpm workspace settings
• e64bde4 chore: configure pnpm via devEngines
• 83f0c57 fix(pkg): pack tarball inside npm publish --dry-run (#1076)
• 1745223 fix(entry): honor custom root for object entry (#1072)
• 9655dcb chore: upgrade deps
• 30da631 docs: correct default value of minify
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.