build(deps): bump the dependencies group across 1 directory with 41 updates

[dependabot]

Bumps the dependencies group with 41 updates in the / directory:

Package	From	To
@better-auth/api-key	1.6.23	1.7.7
@content-collections/core	0.15.2	0.15.3
@content-collections/vite	0.3.0	0.3.1
@fontsource-variable/geist	5.2.9	5.3.0
@hono/zod-openapi	1.5.1	1.6.3
@llamaindex/llama-cloud	2.11.0	2.18.0
@mistralai/mistralai	2.5.0	2.7.0
@tanstack/react-devtools	0.10.8	0.10.13
@tanstack/react-query	5.101.2	5.104.1
@tanstack/react-router	1.170.18	1.170.41
@tanstack/react-router-devtools	1.167.0	1.167.2
@tanstack/react-router-ssr-query	1.167.1	1.167.3
@tanstack/react-start	1.168.30	1.168.60
autumn-js	1.2.43	1.4.17
better-auth	1.6.23	1.7.7
drizzle-orm	0.45.2	0.45.4
hono	4.12.31	4.13.13
posthog-js	1.404.1	1.438.7
posthog-node	5.45.2	5.55.1
radix-ui	1.6.2	1.7.0
react	19.2.7	19.3.0
@types/react	19.2.17	19.3.0
react-dom	19.2.7	19.3.0
@types/react-dom	19.2.3	19.3.0
tailwind-merge	3.6.0	3.7.0
zod	4.4.3	4.6.5
@cloudflare/vite-plugin	1.45.1	1.63.1
@commitlint/cli	21.2.1	21.2.3
@commitlint/config-conventional	21.2.0	21.2.3
@tanstack/devtools-vite	0.8.1	0.8.5
@types/node	22.20.1	26.6.5
@types/react	19.2.17	19.3.0
@types/react-dom	19.2.3	19.3.0
@vitejs/plugin-react	6.0.3	6.1.2
drizzle-kit	0.31.10	0.31.11
typescript	6.0.3	7.0.2
wrangler	4.112.0	4.149.0
file-type	22.0.1	22.1.1
@cloudflare/workers-types	5.20260721.1	5.20261010.1
@llamaindex/liteparse	2.8.0	2.15.1
@firecrawl/pdf-inspector	1.11.1	1.25.2
vite-plus	0.2.5	1.1.0
vitest	4.1.10	5.0.3

Updates @better-auth/api-key from 1.6.23 to 1.7.7

Release notes

Sourced from @​better-auth/api-key's releases.

v1.7.7

better-auth

Magic Link upgrade: Upgrade servers sharing verification storage together, request new Magic Links, and restart pending OAuth/SAML sign-ins. No database migration is required. See the critical advisory for affected configurations and custom storage changes.

Bug Fixes

• Fixed a critical Magic Link account-takeover vulnerability. (#11494)
• Fixed ID-token sign-in ignoring the social provider’s disableSignUp setting. (#11491)
• Fixed OAuth Proxy accepting sign-in state as a provider profile. (#11494) Upgrade all OAuth Proxy participants together; see the OAuth Proxy upgrade guidance.
• Fixed CAPTCHA errors missing the JSON Content-Type header. (#11476)
• Fixed the active organization failing to refresh after sign-in when a session hook selects the initial organization. (#11375)
• Fixed rate-limit errors missing the JSON Content-Type header. (#11469)

For detailed changes, see CHANGELOG

@better-auth/oauth-provider

Features

• Added optional validateRedirectUri validation for trusted deployments with dynamic OAuth redirect URIs. (#8686)
• Added verifyOAuthQueryParams to verify signed authorization queries before rendering a custom consent page. (#11402)

For detailed changes, see CHANGELOG

@better-auth/drizzle-adapter

Bug Fixes

• Fixed concurrent PostgreSQL requests exceeding database-backed rate limits. (#11331)

For detailed changes, see CHANGELOG

@better-auth/kysely-adapter

Bug Fixes

• Fixed consumeOne deleting a record after a concurrent write invalidates its original condition. (#11495)

For detailed changes, see CHANGELOG

Contributors

Thanks to everyone who contributed to this release:

@​aryan1306, @​bytaesu, @​gitmotion, @​gustavovalverde, @​lennondotw

Full changelog: v1.7.6...v1.7.7

... (truncated)

Changelog

Sourced from @​better-auth/api-key's changelog.

1.7.7

1.7.6

1.7.5

1.7.4

1.7.3

1.7.2

1.7.1

1.7.0

1.7.0-rc.6

1.7.0-rc.5

1.7.0-rc.4

1.7.0-rc.3

1.7.0-rc.2

1.7.0-rc.1

1.7.0-rc.0

1.7.0-beta.10

1.7.0-beta.9

Patch Changes

• Updated dependencies []:
  • better-auth@1.7.0-beta.9
  • @​better-auth/core@​1.7.0-beta.9

1.7.0-beta.8

Patch Changes

• Updated dependencies [7c7313c, 06daf70, a83152e, 97903c9, 3a79aff]:
  • better-auth@1.7.0-beta.8
  • @​better-auth/core@​1.7.0-beta.8

1.7.0-beta.7

... (truncated)

Commits

• db02f23 chore: release v1.7.7 (#11413)
• 229a02a chore: release v1.7.6 (#11322)
• 5468e6b chore: release v1.7.5 (#11245)
• 735008f chore: release v1.7.4 (#11216)
• 597d39c chore: release v1.7.3 (#11032)
• c0444dc fix: align OpenAPI required fields with Zod 4.5 (#11066)
• ba12fcd chore: release v1.7.2 (#10870)
• 2344536 chore: release v1.7.1 (#10864)
• f577ec5 chore: exit pre-release mode for v1.7.0
• 69258d1 chore: sync main to next
• Additional commits viewable in compare view

Updates @content-collections/core from 0.15.2 to 0.15.3

Release notes

Sourced from @​content-collections/core's releases.

@​content-collections/core@​0.15.3

Patch Changes

• 8691108 Thanks @​sdorra! - Replace gray-matter with @​11ty/gray-matter, see issue #798

Changelog

Sourced from @​content-collections/core's changelog.

0.15.3

Patch Changes

• 8691108 Thanks @​sdorra! - Replace gray-matter with @​11ty/gray-matter, see issue #798

Commits

• f400907 chore(release): version packages
• f492198 build(deps-dev): bump vitest from 4.0.6 to 4.1.11
• a8c5b19 chore(core): update core dependecies
• 030fac1 chore(core): update core runtime dependencies
• 26f7cd5 fix(core): #798 replace gray-matter with @​11ty/gray-matter
• See full diff in compare view

Updates @content-collections/vite from 0.3.0 to 0.3.1

Release notes

Sourced from @​content-collections/vite's releases.

@​content-collections/vite@​0.3.1

Patch Changes

• #807 e0574ed Thanks @​sdorra! - Stop the content watcher when the Vite server closes

• Updated dependencies []:

  • @​content-collections/integrations@​0.5.0

Changelog

Sourced from @​content-collections/vite's changelog.

0.3.1

Patch Changes

• #807 e0574ed Thanks @​sdorra! - Stop the content watcher when the Vite server closes

• Updated dependencies []:

  • @​content-collections/integrations@​0.5.0

Commits

• f400907 chore(release): version packages
• f492198 build(deps-dev): bump vitest from 4.0.6 to 4.1.11
• e0574ed fix(vite): #806 unsubscribe watcher when vite closes
• See full diff in compare view

Updates @fontsource-variable/geist from 5.2.9 to 5.3.0

Commits

• See full diff in compare view

Updates @hono/zod-openapi from 1.5.1 to 1.6.3

Release notes

Sourced from @​hono/zod-openapi's releases.

@​hono/zod-openapi@​1.6.3

Patch Changes

• #2087 3b0860026438694e76c3155737cf0b8df32384f5 Thanks @​WolfieLeader! - fix: return 415 when a JSON or form request body's Content-Type matches none of the route's declared media types, instead of validating an empty object

@​hono/zod-openapi@​1.6.2

Patch Changes

• #2115 525564dc5c275bfe8468b330902ea12dc450f54d Thanks @​scttcper! - Flatten batched route type inference so large openapiRoutes tuples do not hit TypeScript's recursive instantiation limit.

• #2116 38232db06e1c366e5eb1fb7cf6949c2541debd8c Thanks @​scttcper! - Reuse projected response types between openapi() route handlers and returned schemas to reduce TypeScript checker work.

• #1986 28f1d39cd2a480d9d3bd557df9037c054a674279 Thanks @​VihaanAgarwal! - fix(zod-openapi): infer route middleware env in defineOpenAPIRoute handler

@​hono/zod-openapi@​1.6.1

Patch Changes

• #1988 4fce28c6fbba41795b316becaf7d8cffa11fb521 Thanks @​thekiwi! - Reduce route-typing type instantiations (~54% on TS6, ~48% on TS7 in a 100-route benchmark) by binding expensive sub-expressions once and sharing the input intersection / response-shape conditional.

@​hono/zod-openapi@​1.6.0

Minor Changes

• #2086 1dc1a4a5418be24d571652e1013b8a6a925824c0 Thanks @​WolfieLeader! - feat: support the HTTP QUERY method in createRoute() by bumping @asteasolutions/zod-to-openapi to v9

@​hono/zod-openapi@​1.5.3

Patch Changes

• #2084 9a9324937cfa77db210a966be33e8c73bbbe33e3 Thanks @​kamaal111! - Revert the local z binding export because it causes zod types to degrade to any when built with tsdown.

@​hono/zod-openapi@​1.5.2

Patch Changes

• #2069 fc0377c5595bde3147d181e5013a3fc710175e40 Thanks @​edenbuilds! - fix(zod-openapi): keep the z import edge so .openapi() survives bundling

  Re-exporting zod's z as a pass-through let esbuild code-splitting resolve import { z } from '@hono/zod-openapi' straight to zod and drop the edge to the module that runs extendZodWithOpenApi(z), so schemas could be built before the patch applied and .openapi() was undefined at runtime. Export z as an alias declaration instead: it compiles to a binding local to the module, which keeps that edge, while still carrying zod's type namespace so z.infer, z.ZodType and the rest continue to work. Fixes #2051.

Changelog

Sourced from @​hono/zod-openapi's changelog.

1.6.3

Patch Changes

• #2087 3b0860026438694e76c3155737cf0b8df32384f5 Thanks @​WolfieLeader! - fix: return 415 when a JSON or form request body's Content-Type matches none of the route's declared media types, instead of validating an empty object

1.6.2

Patch Changes

• #2115 525564dc5c275bfe8468b330902ea12dc450f54d Thanks @​scttcper! - Flatten batched route type inference so large openapiRoutes tuples do not hit TypeScript's recursive instantiation limit.

• #2116 38232db06e1c366e5eb1fb7cf6949c2541debd8c Thanks @​scttcper! - Reuse projected response types between openapi() route handlers and returned schemas to reduce TypeScript checker work.

• #1986 28f1d39cd2a480d9d3bd557df9037c054a674279 Thanks @​VihaanAgarwal! - fix(zod-openapi): infer route middleware env in defineOpenAPIRoute handler

1.6.1

Patch Changes

• #1988 4fce28c6fbba41795b316becaf7d8cffa11fb521 Thanks @​thekiwi! - Reduce route-typing type instantiations (~54% on TS6, ~48% on TS7 in a 100-route benchmark) by binding expensive sub-expressions once and sharing the input intersection / response-shape conditional.

1.6.0

Minor Changes

• #2086 1dc1a4a5418be24d571652e1013b8a6a925824c0 Thanks @​WolfieLeader! - feat: support the HTTP QUERY method in createRoute() by bumping @asteasolutions/zod-to-openapi to v9

1.5.3

Patch Changes

• #2084 9a9324937cfa77db210a966be33e8c73bbbe33e3 Thanks @​kamaal111! - Revert the local z binding export because it causes zod types to degrade to any when built with tsdown.

1.5.2

Patch Changes

• #2069 fc0377c5595bde3147d181e5013a3fc710175e40 Thanks @​edenbuilds! - fix(zod-openapi): keep the z import edge so .openapi() survives bundling

  Re-exporting zod's z as a pass-through let esbuild code-splitting resolve import { z } from '@hono/zod-openapi' straight to zod and drop the edge to the module that runs extendZodWithOpenApi(z), so schemas could be built before the patch applied and .openapi() was undefined at runtime. Export z as an alias declaration instead: it compiles to a binding local to the module, which keeps that edge, while still carrying zod's type namespace so z.infer, z.ZodType and the rest continue to work. Fixes #2051.

Commits

• bc7d9e6 Version Packages (#2123)
• 3b08600 fix(zod-openapi): return 415 for request bodies with undeclared content type ...
• b125de5 Version Packages (#2121)
• 28f1d39 fix(zod-openapi): infer route middleware env in defineOpenAPIRoute handler (#...
• 525564d perf(zod-openapi): Flatten batched route schemas (#2115)
• 38232db perf(zod-openapi): Reuse route response projections (#2116)
• fdad95a Version Packages (#2101)
• 4fce28c fix(zod-openapi): reduce route type instantiations (#1988)
• eb5f75d Version Packages (#2088)
• 1dc1a4a feat(zod-openapi): support the HTTP QUERY method (#2086)
• Additional commits viewable in compare view

Updates @llamaindex/llama-cloud from 2.11.0 to 2.18.0

Release notes

Sourced from @​llamaindex/llama-cloud's releases.

v2.18.0

2.18.0 (2026-10-09)

Features

• sdk: publish Verify as client.alpha.verify (PROD-10334) (3006cd4)

Chores

• stlc: seal custom-code tracking files (f4e293b)

v2.17.0

2.17.0 (2026-10-07)

Features

• add redline prompt changes to new prod version (#27635) (707e112)
• chat: let a chat session refuse queries from its share link (#27012) (d280021)
• parse: add detected_form_types to the per-page enriched forms output (#26052) (bd48711)
• parse: add option to include hidden PPTX slides (#27938) (6bca4de)
• parse: agentic 2026-09-09 — cache-stable prompt order + Flash Lite MINIMAL thinking (#26273) (ec4e4a6)
• parse: apply watermark_handling to text output; add watermark e2e test (#27932) (ffdb962)
• parse: display enriched Forms granular highlights (#26366) (f3bd48f)
• parse: remove_watermark output option with 2026-09-28 tier versions (#27813) (f578a05)
• parse: ship the illegible-classification prompts as agentic_plus 2026-09-11 (latest) (#26490) (7fbc672)
• sdk: publish beta.attachments list and get (d5c9d25)
• split: accept a parse config or parse_job_id like extract_v2 (#26303) (d7d3283)

Bug Fixes

• chat: report every index a chat turn could not query (#26981) (37ecf9d)
• classifier: drop the dead classify v1 job mappings (methods were removed from the SDKs in 2.16.0 / 1.7.0) (5a74795)
• extract: refuse to delete a non-terminal job (LI-8700) (#23793) (eb97463)
• split: process target_pages in the order written, matching Extract (#28173) (9f29030)

Documentation

• changelog: record the classify v1 removal in 2.16.0 (f65c1b3)
• changelog: record the classify v1 removal in 2.16.0 (e3d9c9a)
• update Extract versions and pricing (#28128) (7a3dd36)

v2.16.0

2.16.0 (2026-09-08)

... (truncated)

Changelog

Sourced from @​llamaindex/llama-cloud's changelog.

2.18.0 (2026-10-09)

Features

• sdk: publish Verify as client.alpha.verify (PROD-10334) (3006cd4)

Chores

• stlc: seal custom-code tracking files (f4e293b)

2.17.0 (2026-10-07)

Features

• add redline prompt changes to new prod version (#27635) (707e112)
• chat: let a chat session refuse queries from its share link (#27012) (d280021)
• parse: add detected_form_types to the per-page enriched forms output (#26052) (bd48711)
• parse: add option to include hidden PPTX slides (#27938) (6bca4de)
• parse: agentic 2026-09-09 — cache-stable prompt order + Flash Lite MINIMAL thinking (#26273) (ec4e4a6)
• parse: apply watermark_handling to text output; add watermark e2e test (#27932) (ffdb962)
• parse: display enriched Forms granular highlights (#26366) (f3bd48f)
• parse: remove_watermark output option with 2026-09-28 tier versions (#27813) (f578a05)
• parse: ship the illegible-classification prompts as agentic_plus 2026-09-11 (latest) (#26490) (7fbc672)
• sdk: publish beta.attachments list and get (d5c9d25)
• split: accept a parse config or parse_job_id like extract_v2 (#26303) (d7d3283)

Bug Fixes

• chat: report every index a chat turn could not query (#26981) (37ecf9d)
• classifier: drop the dead classify v1 job mappings (methods were removed from the SDKs in 2.16.0 / 1.7.0) (5a74795)
• extract: refuse to delete a non-terminal job (LI-8700) (#23793) (eb97463)
• split: process target_pages in the order written, matching Extract (#28173) (9f29030)

Documentation

• changelog: record the classify v1 removal in 2.16.0 (f65c1b3)
• changelog: record the classify v1 removal in 2.16.0 (e3d9c9a)
• update Extract versions and pricing (#28128) (7a3dd36)

2.14.1 (2026-08-20)

Features

• parse: expose legal-document preset in v2 (#24192) (e80af33)

... (truncated)

Commits

• 33db6c5 Merge pull request #107 from run-llama/release-please--branches--main--compon...
• 1f066e6 release: 2.18.0
• 2714d1d Merge pull request #106 from run-llama/stainless/release
• f4e293b chore(stlc): seal custom-code tracking files
• 3006cd4 feat(sdk): publish Verify as client.alpha.verify (PROD-10334)
• 6479de2 Merge pull request #24 from run-llama/stlc/from-prod
• 142761c Build SDK
• 9ce967e Build SDK
• 8dd3ecf Index sync_in_progress behind expand, read from job rows before Temporal (#28...
• 98aff0b Merge pull request #104 from run-llama/release-please--branches--main--compon...
• Additional commits viewable in compare view

Updates @mistralai/mistralai from 2.5.0 to 2.7.0

Release notes

Sourced from @​mistralai/mistralai's releases.

typescript - v2.7.0 - 2026-09-09 13:10:23

Generated by Speakeasy CLI

2026-09-09 10:26:10

API changes

Removed (19):

• betaConnectorsCreateOrUpdateOrganizationCredentials
• betaConnectorsCreateOrUpdateUserCredentials
• betaConnectorsCreateOrUpdateWorkspaceCredentials
• betaObservabilityCampaignsCreate
• betaObservabilityCampaignsDelete
• betaObservabilityCampaignsFetch
• betaObservabilityCampaignsFetchStatus
• betaObservabilityCampaignsList
• betaObservabilityCampaignsListEvents
• betaObservabilityChatCompletionEventsFetch
• betaObservabilityChatCompletionEventsFetchSimilarEvents
• betaObservabilityChatCompletionEventsFieldsFetchOptionCounts
• betaObservabilityChatCompletionEventsFieldsFetchOptions
• betaObservabilityChatCompletionEventsFieldsList
• betaObservabilityChatCompletionEventsJudge
• betaObservabilityChatCompletionEventsSearch
• betaObservabilityChatCompletionEventsSearchIds
• betaObservabilityDatasetsImportFromCampaign
• betaObservabilityDatasetsImportFromExplorer

Added (17):

• betaConnectorsCreateCredentials
• betaConnectorsShareToOrganization
• betaConnectorsUnshareFromOrganization
• betaConnectorsUpdateCredentials
• betaObservabilityEvaluationsCreatePipelineConfig
• betaObservabilityEvaluationsDeletePipelineConfig
• betaObservabilityEvaluationsGetPipelineConfig
• betaObservabilityEvaluationsListPipelineConfigs
• betaObservabilityEvaluationsUpdatePipelineConfig
• betaServiceAccountsCreate
• betaServiceAccountsDelete
• betaServiceAccountsGet
• betaServiceAccountsList
• betaServiceAccountsListAssignableRoles
• betaServiceAccountsListRoles
• betaServiceAccountsSetRoles
• betaServiceAccountsUpdate

Breaking changes

Connectors

• connectors.create now takes a single request object, and connectors.update

... (truncated)

Changelog

Sourced from @​mistralai/mistralai's changelog.

2024-08-07 14:12:46

Changes

Based on:

• OpenAPI Doc
• Speakeasy CLI 1.356.0 (2.388.1) https://github.com/speakeasy-api/speakeasy

Generated

• [typescript v1.0.0] .

Releases

• [NPM v1.0.0] https://www.npmjs.com/package/@​mistralai/mistralai/v/1.0.0 - .

2024-08-07 17:09:34

Changes

Based on:

• OpenAPI Doc
• Speakeasy CLI 1.356.0 (2.388.1) https://github.com/speakeasy-api/speakeasy

Generated

• [typescript v1.0.1] .

Releases

• [NPM v1.0.1] https://www.npmjs.com/package/@​mistralai/mistralai/v/1.0.1 - .

2024-08-08 18:05:34

Changes

Based on:

• OpenAPI Doc
• Speakeasy CLI 1.357.4 (2.390.6) https://github.com/speakeasy-api/speakeasy

Generated

• [typescript v1.0.2] .

Releases

• [NPM v1.0.2] https://www.npmjs.com/package/@​mistralai/mistralai/v/1.0.2 - .

2024-08-20 08:43:27

Changes

Based on:

• OpenAPI Doc
• Speakeasy CLI 1.376.0 (2.402.5) https://github.com/speakeasy-api/speakeasy

Generated

• [typescript v1.0.3] .

Releases

• [NPM v1.0.3] https://www.npmjs.com/package/@​mistralai/mistralai/v/1.0.3 - .

2024-08-23 13:33:36

Changes

Based on:

• OpenAPI Doc
• Speakeasy CLI 1.378.0 (2.404.3) https://github.com/speakeasy-api/speakeasy

Generated

• [typescript v1.0.4] .

Releases

... (truncated)

Commits

• d8f2d25 Merge pull request #270 from mistralai/sdk-sync
• 93e8eb8 docs: note the breaking changes in this release
• daa76db chore: sync generated SDK from upstream @ 6a7ee233
• f669ec8 Use named OpenTelemetry semantic convention imports (#269)
• f4f52c0 Merge pull request #265 from mistralai/julienbirgand/obs-2122-document-typesc...
• bf8b9bf docs(observability): add serverless telemetry example
• 7ed5ba7 ci: regenerated with OpenAPI Doc , Speakeasy CLI 1.763.6 (#263)
• 1fdbf62 Merge pull request #262 from mistralai/julienbirgand/obs-2121-port-flushtelem...
• d357763 feat(observability): add flushTelemetry to drain spans without shutdown
• bd70158 Merge pull request #261 from mistralai/speakeasy-sdk-regen-1786636243
• Additional commits viewable in compare view

Updates @tanstack/react-devtools from 0.10.8 to 0.10.13

Release notes

Sourced from @​tanstack/react-devtools's releases.

@​tanstack/react-devtools@​0.10.12

Patch Changes

• Updated dependencies [4ecd46e]:
  • @​tanstack/devtools@​0.14.2

@​tanstack/react-devtools@​0.10.11

Patch Changes

• Updated dependencies [cf8e678, cf8e678, cf8e678]:
  • @​tanstack/devtools@​0.14.1

@​tanstack/react-devtools@​0.10.10

Patch Changes

• Updated dependencies [a46d1f5, a46d1f5]:
  • @​tanstack/devtools@​0.14.0

@​tanstack/react-devtools@​0.10.9

Patch Changes

• Updated dependencies [d061f0c]:
  • @​tanstack/devtools@​0.13.0

Changelog

Sourced from @​tanstack/react-devtools's changelog.

0.10.13

Patch Changes

• Updated dependencies [02a67f1, 589304f, dc61e1e, 45f39ee]:
  • @​tanstack/devtools@​0.15.0

0.10.12

Patch Changes

• Updated dependencies [4ecd46e]:
  • @​tanstack/devtools@​0.14.2

0.10.11

Patch Changes

• Updated dependencies [cf8e678, cf8e678, cf8e678]:
  • @​tanstack/devtools@​0.14.1

0.10.10

Patch Changes

• Updated dependencies [a46d1f5, a46d1f5]:
  • @​tanstack/devtools@​0.14.0

0.10.9

Patch Changes

• Updated dependencies [d061f0c]:
  • @​tanstack/devtools@​0.13.0

Commits

• ba7842e ci: Version Packages (#295)
• f58a87b ci: prepare for trusted publishing (#288)
• f4ae997 ci: Version Packages (#287)
• 946bfb2 ci: Version Packages (#285)
• e0d58d5 feat: add preact devtools (#283)
• 66722f5 docs: correct local relative links (#282)
• 8e354af ci: Version Packages (#273)
• 87764c2 ci: Version Packages (#260)
• cf1b57a ci: Version Packages (#251)
• d524864 Custom Trigger Component for devtools (#228)
• Additional commits viewable in compare view

Updates @tanstack/react-query from 5.101.2 to 5.104.1

Release notes

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-devtools@​5.104.1

Patch Changes

• Updated dependencies [ec060b6]:
  • @​tanstack/query-devtools@​5.104.1
  • @​tanstack/react-query@​5.104.1

@​tanstack/react-query-next-experimental@​5.104.1

Patch Changes

• Updated dependencies []:
  • @​tanstack/react-query@​5.104.1

@​tanstack/react-query-persist-client@​5.104.1

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-persist-client-core@​5.104.1
  • @​tanstack/react-query@​5.104.1

@​tanstack/react-query@​5.104.1

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-core@​5.104.1

@​tanstack/react-query-devtools@​5.104.0

Minor Changes

• #11650 5279b05 - Build projects with Vite 8

Patch Changes

• Updated dependencies [5279b05]:
  • @​tanstack/query-devtools@​5.104.0
  • @​tanstack/react-query@​5.104.0

@​tanstack/react-query-next-experimental@​5.104.0

Minor Changes

• #11650 5279b05 - Build projects with Vite 8

Patch Changes

• Updated dependencies [5279b05]:
  • @​tanstack/react-query@​5.104.0

@​tanstack/react-query-persist-client@​5.104.0

Minor Changes

... (truncated...

Description has been truncated

---

^{Need help on this PR? Tag @codesmith-bot with what you need.}

Polylane reviews this pull request when you ask:

---

Summary by cubic

Bumps 41 production and dev dependencies across the app, CLI, filerouter, and native parser services, including major version updates for TypeScript, vitest, vite-plus, and @types/node.

Needs attention

• better-auth 1.7.7 fixes a critical Magic Link account-takeover vulnerability and requires the OAuth Proxy upgrade guidance; no database migration is needed.
• @mistralai/mistralai 2.7.0 removes 19 beta APIs and changes connectors.create/connectors.update to accept a single request object.
• Major version jumps to typescript 7, vitest 5, vite-plus 1.x, and @types/node 26 may require migration and code changes.

^{Written for commit be773e0. Summary will update on new commits.}

[greptile-apps]

PR author is in the excluded authors list.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: b3aefd4a-cfb3-4451-8b7b-f0dfbfbcce31

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}