Skip to content

chore(deps-dev): bump the website-dependencies group across 1 directory with 7 updates - #760

Merged
Kinfe123 merged 1 commit into
mainfrom
dependabot/npm_and_yarn/website/website-dependencies-c16c7556c1
Oct 30, 2026
Merged

chore(deps-dev): bump the website-dependencies group across 1 directory with 7 updates#760
Kinfe123 merged 1 commit into
mainfrom
dependabot/npm_and_yarn/website/website-dependencies-c16c7556c1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 27, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the website-dependencies group with 7 updates in the /website directory:

Package From To
@farm.js/cli 0.1.21 0.1.38
@farm.js/core 0.1.21 0.1.38
@farming-labs/docs 0.2.120 0.2.132
@farming-labs/farmjs 0.2.120 0.2.132
@farming-labs/theme 0.2.120 0.2.132
lucide-react 1.59.0 1.61.0
vite 8.3.4 8.3.5

Updates @farm.js/cli from 0.1.21 to 0.1.38

Release notes

Sourced from @​farm.js/cli's releases.

Farm.js 0.1.38

performance

  • production pages preload their client modules: the entry's imports, the hydrating page and the components its islands or server tree load, as low-priority modulepreload links (#2292). assistant-ui.com's docs on farm hydrate 260-500 ms sooner
  • docs pages preload their modules and load the docs config alongside the adapter (#2146)

security

  • csp nonce mode stamps only framework scripts and the ones you opt in with getCspNonce() (#2289)
  • docs: guarded pages stay hidden (#2287), non-canonical slugs can't skip guards (#2290)
  • markdown: late page guards hide the source (#2288)
  • agent listings and the mcp manifest leave out path-guarded pages and servers (#2285, #2286)
  • ai: remote file urls from clients are refused (#2291)
  • rsc: only server functions become actions (#2293)

fixes

  • rsc: production servers default NODE_ENV to production (#2294)
  • svelte and vue layouts keep their server markup when they hydrate (#2273)
  • plugin middleware ctx gets a route pathname (#2283)

packages

  • shared group 0.1.38; preact beta.35, solid beta.31, svelte beta.35; react stays beta.32, vue beta.33; plugins pinning core moved to their next beta (sync beta.39, mcp beta.35, otel beta.62, ...)

Farm.js 0.1.37

build

  • route evaluation no longer fails with transport invoke timed out after 60000ms when the production build keeps a small machine busy (a large docs site on a 2-core vercel builder) (#2275)
  • server-only layouts stay out of the client entry (#2263)

security

  • links refuse javascript: hrefs (#2276)
  • middleware: function guards match on the route path (#2277)
  • markdown: page guards decide source access (#2279), mirrors re-enter through the request entry (#2278), the anonymous check drops the client address (#2268)
  • netlify: credentialed isr responses stay off the CDN (#2280)
  • mcp: tool input elements capped (#2269), pages read through the request entry (#2267), dev tool dispatch pinned to its own server (#2266)
  • deps: zod and better-auth floors raised (#2274), cli installs a patched @auth/core (#2270), vue 3.5.44 (#2271)

fixes

  • route data: staleTime: 0 skips the cache (#2281)
  • ppr: server function request reads count (#2282)
  • create-app: new apps start on docs 0.2.130 (#2235)

react compiler

... (truncated)

Commits

Updates @farm.js/core from 0.1.21 to 0.1.38

Release notes

Sourced from @​farm.js/core's releases.

Farm.js 0.1.38

performance

  • production pages preload their client modules: the entry's imports, the hydrating page and the components its islands or server tree load, as low-priority modulepreload links (#2292). assistant-ui.com's docs on farm hydrate 260-500 ms sooner
  • docs pages preload their modules and load the docs config alongside the adapter (#2146)

security

  • csp nonce mode stamps only framework scripts and the ones you opt in with getCspNonce() (#2289)
  • docs: guarded pages stay hidden (#2287), non-canonical slugs can't skip guards (#2290)
  • markdown: late page guards hide the source (#2288)
  • agent listings and the mcp manifest leave out path-guarded pages and servers (#2285, #2286)
  • ai: remote file urls from clients are refused (#2291)
  • rsc: only server functions become actions (#2293)

fixes

  • rsc: production servers default NODE_ENV to production (#2294)
  • svelte and vue layouts keep their server markup when they hydrate (#2273)
  • plugin middleware ctx gets a route pathname (#2283)

packages

  • shared group 0.1.38; preact beta.35, solid beta.31, svelte beta.35; react stays beta.32, vue beta.33; plugins pinning core moved to their next beta (sync beta.39, mcp beta.35, otel beta.62, ...)

Farm.js 0.1.37

build

  • route evaluation no longer fails with transport invoke timed out after 60000ms when the production build keeps a small machine busy (a large docs site on a 2-core vercel builder) (#2275)
  • server-only layouts stay out of the client entry (#2263)

security

  • links refuse javascript: hrefs (#2276)
  • middleware: function guards match on the route path (#2277)
  • markdown: page guards decide source access (#2279), mirrors re-enter through the request entry (#2278), the anonymous check drops the client address (#2268)
  • netlify: credentialed isr responses stay off the CDN (#2280)
  • mcp: tool input elements capped (#2269), pages read through the request entry (#2267), dev tool dispatch pinned to its own server (#2266)
  • deps: zod and better-auth floors raised (#2274), cli installs a patched @auth/core (#2270), vue 3.5.44 (#2271)

fixes

  • route data: staleTime: 0 skips the cache (#2281)
  • ppr: server function request reads count (#2282)
  • create-app: new apps start on docs 0.2.130 (#2235)

react compiler

... (truncated)

Commits
  • 480487c chore: release v0.1.38
  • 8354a7f fix(rsc): default NODE_ENV to production (#2294)
  • 8e27979 perf(build): preload a page's client modules (#2292)
  • 0a74958 fix(security): nonce only framework scripts (#2289)
  • ae35729 fix(docs): non-canonical slugs can't skip guards (#2290)
  • d97996f fix(markdown): late page guards hide the source (#2288)
  • 87b405a fix(docs): hide guarded docs pages (#2287)
  • 24d3449 perf(docs): preload a docs page's modules and load the docs config alongside ...
  • 7e646a5 fix(manifest): hide tools of path-guarded mcp servers (#2286)
  • 7ea4010 fix(agent): keep path-guarded pages out of listings (#2285)
  • Additional commits viewable in compare view

Updates @farming-labs/docs from 0.2.120 to 0.2.132

Updates @farming-labs/farmjs from 0.2.120 to 0.2.132

Updates @farming-labs/theme from 0.2.120 to 0.2.132

Updates lucide-react from 1.59.0 to 1.61.0

Release notes

Sourced from lucide-react's releases.

Version 1.61.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.60.0...1.61.0

Version 1.60.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.59.0...1.60.0

Commits
  • fa238cf chore(deps): bump the react-deps group across 1 directory with 2 updates (#5026)
  • See full diff in compare view

Updates vite from 8.3.4 to 8.3.5

Release notes

Sourced from vite's releases.

v8.3.5

Bug Fixes

  • build: handle missing chunk import maps (#23777) (8d7623d)
  • build: include preload dependencies to chunk import map hashing (#23793) (4d16e7c)
  • bundled-dev: apply server.origin to asset URLs (#23683) (52ba877)
  • bundled-dev: declare utf-8 charset in fallback page (#23846) (197daf6)
  • bundled-dev: ignore build.chunkImportMap (#23685) (cfe917d)
  • bundled-dev: include user import.meta.env.* defines in the import.meta.env object (#23713) (6019aa7)
  • bundled-dev: map forwarded error stacks through the bundle source maps (#23741) (11fe1e4)
  • bundled-dev: normalize served output files (#23684) (df4e02c)
  • bundled-dev: stop hmr propagation at modules that are no longer imported (#23839) (7471e8c)
  • css: don't fail on a literal % in url() (#23676) (50b382d)
  • deps: update all non-major dependencies (#23731) (cf80aa5)
  • deps: update all non-major dependencies (#23826) (77d8373)
  • deps: update rolldown-related dependencies (#23733) (43f0d05)
  • deps: update rolldown-related dependencies (#23827) (c2e0418)
  • optimizer: fall back to yarn.lock for lockfile hash (#23667) (f206096)
  • optimizer: scan oxc.jsxInject imports (#23758) (38f3cb4)
  • optimizer: skip patches dir check for yarn.lock fallback (#23725) (8e890e1)
  • optimizer: skip patches dir hash for nub lockfile (#23761) (a7d5696)
  • resolve: support subpath imports with multiple # (#23631) (0d86b34)
  • resolve: update resolve.exports to 2.0.4 (#23739) (4ea708a)
  • server: handle socket errors on upgrade requests not taken by the HMR server (#23728) (c2c9ef4)
  • server: only strip base when path matches a full segment (#23641) (3dfde87)

Performance Improvements

  • ssr: extract inline source maps without a regexp (#23775) (6a02780)

Miscellaneous Chores

Code Refactoring

  • deps: replace @vercel/detect-agent with std-env (#23744) (ce4293f)
  • dev: consolidate moduleURL to file path utilities (#23828) (df7b40e)
  • dev: separate import resolution from URL conversion (#23791) (6116689)
  • dev: share ModuleURL and BrowserURL conversions (#23790) (446954c)
  • dev: use ModuleURLs throughout HTML transforms (#23815) (a162990)
Changelog

Sourced from vite's changelog.

8.3.5 (2026-10-21)

Bug Fixes

  • build: handle missing chunk import maps (#23777) (8d7623d)
  • build: include preload dependencies to chunk import map hashing (#23793) (4d16e7c)
  • bundled-dev: apply server.origin to asset URLs (#23683) (52ba877)
  • bundled-dev: declare utf-8 charset in fallback page (#23846) (197daf6)
  • bundled-dev: ignore build.chunkImportMap (#23685) (cfe917d)
  • bundled-dev: include user import.meta.env.* defines in the import.meta.env object (#23713) (6019aa7)
  • bundled-dev: map forwarded error stacks through the bundle source maps (#23741) (11fe1e4)
  • bundled-dev: normalize served output files (#23684) (df4e02c)
  • bundled-dev: stop hmr propagation at modules that are no longer imported (#23839) (7471e8c)
  • css: don't fail on a literal % in url() (#23676) (50b382d)
  • deps: update all non-major dependencies (#23731) (cf80aa5)
  • deps: update all non-major dependencies (#23826) (77d8373)
  • deps: update rolldown-related dependencies (#23733) (43f0d05)
  • deps: update rolldown-related dependencies (#23827) (c2e0418)
  • optimizer: fall back to yarn.lock for lockfile hash (#23667) (f206096)
  • optimizer: scan oxc.jsxInject imports (#23758) (38f3cb4)
  • optimizer: skip patches dir check for yarn.lock fallback (#23725) (8e890e1)
  • optimizer: skip patches dir hash for nub lockfile (#23761) (a7d5696)
  • resolve: support subpath imports with multiple # (#23631) (0d86b34)
  • resolve: update resolve.exports to 2.0.4 (#23739) (4ea708a)
  • server: handle socket errors on upgrade requests not taken by the HMR server (#23728) (c2c9ef4)
  • server: only strip base when path matches a full segment (#23641) (3dfde87)

Performance Improvements

  • ssr: extract inline source maps without a regexp (#23775) (6a02780)

Miscellaneous Chores

Code Refactoring

  • deps: replace @vercel/detect-agent with std-env (#23744) (ce4293f)
  • dev: consolidate moduleURL to file path utilities (#23828) (df7b40e)
  • dev: separate import resolution from URL conversion (#23791) (6116689)
  • dev: share ModuleURL and BrowserURL conversions (#23790) (446954c)
  • dev: use ModuleURLs throughout HTML transforms (#23815) (a162990)
Commits
  • 981f07f release: v8.3.5 (#23856)
  • 0d86b34 fix(resolve): support subpath imports with multiple # (#23631)
  • 6a02780 perf(ssr): extract inline source maps without a regexp (#23775)
  • 8e890e1 fix(optimizer): skip patches dir check for yarn.lock fallback (#23725)
  • 197daf6 fix(bundled-dev): declare utf-8 charset in fallback page (#23846)
  • 4d16e7c fix(build): include preload dependencies to chunk import map hashing (#23793)
  • df7b40e refactor(dev): consolidate moduleURL to file path utilities (#23828)
  • a162990 refactor(dev): use ModuleURLs throughout HTML transforms (#23815)
  • 6116689 refactor(dev): separate import resolution from URL conversion (#23791)
  • 446954c refactor(dev): share ModuleURL and BrowserURL conversions (#23790)
  • Additional commits viewable in compare view

@dependabot
dependabot Bot requested a review from a team as a code owner October 27, 2026 10:57
@vercel

vercel Bot commented Oct 27, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
riftri Ready Ready Preview Oct 30, 2026 12:07am UTC

Request Review

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 27, 2026
@Kinfe123

Kinfe123 commented Oct 30, 2026

Copy link
Copy Markdown
Collaborator

@dependabot recreate

@dependabot
chore(deps-dev): bump the website-dependencies group across 1 directo…
668e18f 
…ry with 7 updates

Bumps the website-dependencies group with 7 updates in the /website directory:

| Package | From | To |
| --- | --- | --- |
| [@farm.js/cli](https://github.com/farming-labs/farm.js/tree/HEAD/packages/farm-cli) | `0.1.21` | `0.1.38` |
| [@farm.js/core](https://github.com/farming-labs/farm.js/tree/HEAD/packages/farm) | `0.1.21` | `0.1.38` |
| @farming-labs/docs | `0.2.120` | `0.2.132` |
| @farming-labs/farmjs | `0.2.120` | `0.2.132` |
| @farming-labs/theme | `0.2.120` | `0.2.132` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.59.0` | `1.61.0` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.4` | `8.3.5` |



Updates `@farm.js/cli` from 0.1.21 to 0.1.38
- [Release notes](https://github.com/farming-labs/farm.js/releases)
- [Commits](https://github.com/farming-labs/farm.js/commits/v0.1.38/packages/farm-cli)

Updates `@farm.js/core` from 0.1.21 to 0.1.38
- [Release notes](https://github.com/farming-labs/farm.js/releases)
- [Commits](https://github.com/farming-labs/farm.js/commits/v0.1.38/packages/farm)

Updates `@farming-labs/docs` from 0.2.120 to 0.2.132

Updates `@farming-labs/farmjs` from 0.2.120 to 0.2.132

Updates `@farming-labs/theme` from 0.2.120 to 0.2.132

Updates `lucide-react` from 1.59.0 to 1.61.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.61.0/packages/lucide-react)

Updates `vite` from 8.3.4 to 8.3.5
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.3.5/packages/vite)

---
updated-dependencies:
- dependency-name: "@farm.js/cli"
  dependency-version: 0.1.31
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: website-dependencies
- dependency-name: "@farm.js/core"
  dependency-version: 0.1.31
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: website-dependencies
- dependency-name: "@farming-labs/docs"
  dependency-version: 0.2.128
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: website-dependencies
- dependency-name: "@farming-labs/farmjs"
  dependency-version: 0.2.128
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: website-dependencies
- dependency-name: "@farming-labs/theme"
  dependency-version: 0.2.128
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: website-dependencies
- dependency-name: lucide-react
  dependency-version: 1.61.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: website-dependencies
- dependency-name: vite
  dependency-version: 8.3.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: website-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps-dev): bump the website-dependencies group in /website with 7 updates chore(deps-dev): bump the website-dependencies group across 1 directory with 7 updates Oct 30, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/website/website-dependencies-c16c7556c1 branch from d2c27d4 to 668e18f Compare October 30, 2026 00:07
Kinfe123
Kinfe123 approved these changes Oct 30, 2026
View reviewed changes

@Kinfe123 Kinfe123 left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm, Farm 0.1.38 and farming-labs docs 0.2.132 plus patch bumps; the Website job builds and passes the installer and docs browser tests.

@Kinfe123
Kinfe123 merged commit 401e244 into main Oct 30, 2026
22 checks passed
@Kinfe123
Kinfe123 deleted the dependabot/npm_and_yarn/website/website-dependencies-c16c7556c1 branch October 30, 2026 01:47

This branch was successfully deployed

1 active deployment
Preview — 668e18ff Deployed Oct 30, 2026 by vercel[bot]
View deployment
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Kinfe123 Kinfe123 Kinfe123 approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Kinfe123