[dependabot]

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

Bumps the development-dependencies group with 22 updates in the / directory:

Package	From	To
@types/node	26.6.3	26.6.5
@typescript-eslint/parser	8.70.1	8.72.0
eslint	10.11.0	10.13.0
svelte	5.57.1	5.57.2
turbo	2.11.5	2.11.10
mysql2	3.24.4	3.24.6
pg	8.23.0	8.23.1
@playwright/test	1.63.0	1.64.1
@testing-library/dom	10.4.1	10.4.2
@testing-library/user-event	14.6.4	14.6.8
axe-core	4.13.0	4.14.0
concurrently	10.0.4	10.0.6
eslint-plugin-react-refresh	0.5.4	0.5.7
globals	17.11.0	17.13.0
playwright	1.63.0	1.64.1
react-router-dom	7.18.2	7.18.4
typedoc-plugin-markdown	4.12.0	4.14.1
typescript-eslint	8.67.0	8.72.0
@radix-ui/react-focus-scope	1.1.16	1.3.1
vite-plugin-dts	5.0.3	5.1.2
react-grid-layout	2.2.4	2.3.0
@types/vscode	1.125.0	1.140.0

Updates @types/node from 26.6.3 to 26.6.5

Commits

• See full diff in compare view

Updates @typescript-eslint/parser from 8.70.1 to 8.72.0

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.72.0

8.72.0 (2026-10-19)

🚀 Features

• eslint-plugin: lazy load rules (#13010)
• eslint-plugin: [await-thenable] add allowMixedPromiseArrays option (#12992)
• typescript-estree: error on abstract keyword that precedes export (#13019)

🩹 Fixes

• ast-spec: add JSXFragment to JSXAttribute['value'] (#13051)
• eslint-plugin: [prefer-readonly-parameter-types] check where allowed type aliases are declared (#13016)
• eslint-plugin: [no-deprecated] report deprecated properties in object literals (#12704)
• eslint-plugin: use isTypeLiteralType instead of type.isLiteral() to include bigint literals on TS < 5.0 (#13053)
• eslint-plugin: [require-array-sort-compare] check tuples (#13058)
• eslint-plugin: [require-array-sort-compare] ignore extra this type argument on TS < 5.1 (#13055)
• type-utils: discriminateAnyType crashes when calling getAwaitedType on awaited type in TS < 5.0 (#13054)
• typescript-estree: include leading and trailing comments & whitespace in Program range (#12991)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Junichiro Kasuya @​jksy
• Mitch Fultz @​fitchmultz
• Shaan GS @​ShaanGS

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.71.2

8.71.2 (2026-10-12)

🩹 Fixes

• eslint-plugin: [no-unused-vars] avoid false-positives when not using our parser (#12989)
• eslint-plugin: [no-unnecessary-type-parameters] count instantiated mapped type templates (#12974)
• eslint-plugin: [no-unused-vars] ignore type-only refs for after-used (#12977)
• eslint-plugin: [no-unnecessary-type-parameters] parenthesize constraint in optional tuple elements (#12995)
• eslint-plugin: [prefer-optional-chain] safe fix when the chain ends with a strict null comparison (#12805)
• type-utils: match linked packages and packages with missing version in TypeOrValueSpecifier (#12948)

❤️ Thank You

• Abraham Guo
• Brad Zacher @​bradzacher
• Evyatar Daud @​StyleShit
• Josh Goldberg
• Vinccool96

... (truncated)

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.72.0 (2026-10-19)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.71.2 (2026-10-12)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.71.1 (2026-10-05)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.71.0 (2026-09-28)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

• a4c2603 chore(release): publish 8.72.0
• 7488d68 chore(release): publish 8.71.2
• d57b8da chore(release): publish 8.71.1
• 8695664 chore(release): publish 8.71.0
• See full diff in compare view

Updates eslint from 10.11.0 to 10.13.0

Release notes

Sourced from eslint's releases.

v10.13.0

Features

• 48d5cc4 feat: report references inside IIFEs in no-use-before-define (#21238) (Irfan fandi)
• a39d9fb feat: add globalThis to no-obj-calls (#21382) (synthex-byte)
• 66ac583 feat: check yield* expressions in no-unsafe-optional-chaining (#21399) (xbinaryx)

Bug Fixes

• 87bd2ce fix: avoid redeclared let when no-var and one-var fix together (#21389) (Daniel Pinto)

Documentation

• 4783a68 docs: Update README (GitHub Actions Bot)
• 43f0ac9 docs: clarify parameter description in getText (#21287) (lumir)

Chores

• b59d889 chore: update github/codeql-action action to v4.38.3 (#21412) (renovate[bot])
• 95e51a0 ci: re-enable @typescript-eslint/typescript-eslint in ecosystem tests (#21410) (Francesco Trotta)
• 317fcb3 chore: update ecosystem plugins (#21409) (ESLint Bot)
• b92decf perf: skip no-redeclare scan for single-declaration variables (#21365) (James Ross)
• 47b7063 chore: update dependency @​eslint/json to ^2.1.1 (#21398) (renovate[bot])
• e5aea41 chore: update ecosystem plugins (#21390) (ESLint Bot)

v10.12.0

Features

• 4618052 feat: handle astral letters in new-cap (#21357) (sary)
• 4ec5168 feat: allow SourceCode#getText() to accept tokens and comments (#21340) (electrohyun)

Bug Fixes

• bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373) (Daniel Pinto)
• bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332) (xbinaryx)
• efc4d6b fix: astral letters in consistent-return, no-eval, no-invalid-this (#21360) (lumir)
• 93de066 fix: prefer-exponentiation-operator autofix for async function base (#21322) (Vladimir Babin)
• 02e34ff fix: add missing space after else in curly autofix (#21355) (Pixel)
• b14b8bc fix: correct id-length message for long private names (#21348) (Pixel)
• 69aac01 fix: support TSFunctionType in getFunctionHeadLoc (#21335) (xbinaryx)
• 686630e fix: no-loss-of-precision false positive with 0.e5 (#21337) (sethamus)

Documentation

• 67eb586 docs: Update README (GitHub Actions Bot)
• 5370d7e docs: clarify one-var separateRequires matches any require() call (#21192) (sethamus)
• 8816c1d docs: Update README (GitHub Actions Bot)
• 3d2e7ce docs: fix typo in no-unused-expressions documentation (#21346) (bytedoe)

Chores

• 152067f chore: update ecosystem plugins (#21362) (ESLint Bot)
• b56d58e chore: update github/codeql-action action to v4.38.2 (#21376) (renovate[bot])
• bfaea12 perf: cache normalized config globals per languageOptions (#21364) (James Ross)
• 322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369) (Francesco Trotta)
• d166567 chore: update dependency prettier to v3.9.9 (#21371) (renovate[bot])
• 29585ce chore: update dependency eslint-plugin-expect-type to ^0.7.0 (#21359) (renovate[bot])
• 39d79ba chore: update github/codeql-action action to v4.38.1 (#21354) (renovate[bot])

... (truncated)

Commits

• 4637f98 10.13.0
• 96df05c Build: changelog update for 10.13.0
• 4783a68 docs: Update README
• b59d889 chore: update github/codeql-action action to v4.38.3 (#21412)
• 95e51a0 ci: re-enable @typescript-eslint/typescript-eslint in ecosystem tests (#21410)
• 317fcb3 chore: update ecosystem plugins (#21409)
• 48d5cc4 feat: report references inside IIFEs in no-use-before-define (#21238)
• 43f0ac9 docs: clarify parameter description in getText (#21287)
• a39d9fb feat: add globalThis to no-obj-calls (#21382)
• b92decf perf: skip no-redeclare scan for single-declaration variables (#21365)
• Additional commits viewable in compare view

Updates svelte from 5.57.1 to 5.57.2

Release notes

Sourced from svelte's releases.

svelte@5.57.2

Patch Changes

• fix: don't create async deriveds for a component destroyed while waiting for its top-level await (#18931)

• fix: prevent untracked derived reads from retaining disconnected dependencies (#18829)

• fix: error if {:else} is followed by another {:else} or {:else if ...} (#18900)

• fix: avoid tracking SvelteURLSearchParams during URL updates (#18791)

• fix: restore hydration state when custom element attribute updates throw (#18467)

• fix: attach event handlers that are assigned after a top-level await in production (#18933)

• fix: flush anything pending before invoking flushSync callback function (#18878)

• fix: preserve location information for await wrappers (#18859)

• fix: keep a reactive assignment with no dependencies when migrate cannot turn it into a declaration (#18817)

• fix: don't hang migrate on a declaration that shares a line with its script tag (#18816)

• fix: prevent duplicate subscriptions when reconnecting deriveds (#18899)

• fix: recover when an unexpected node replaces a nested boundary comment during hydration (#18925)

• fix: print {#await} blocks that only have a pending branch (#18908)

• fix: don't warn about a redundant link role on <area> elements without an href (#18872)

• fix: don't throw state_unsafe_mutation when the focused element is removed while bind:activeElement is used (#18921)

• fix: don't overwrite an unchanged spread value, preserving incomplete number input (#18864)

• fix: read batch-local array on each-block commit (#18879)

• fix: error at compile time when a declaration in a snippet redeclares one of its parameters (#18842)

• fix: error when using let: directives on a component with a children snippet (#18873)

• fix: ignore stale boundary reset callbacks (#18886)

• fix: handle deferred transitions aborted before initialization (#18776)

• fix: prevent hydration mismatch recovery from being intercepted by error boundaries (#18841)

• fix: preserve dynamic element connections during hydration (#18855)

Changelog

Sourced from svelte's changelog.

5.57.2

Patch Changes

• fix: don't create async deriveds for a component destroyed while waiting for its top-level await (#18931)

• fix: prevent untracked derived reads from retaining disconnected dependencies (#18829)

• fix: error if {:else} is followed by another {:else} or {:else if ...} (#18900)

• fix: avoid tracking SvelteURLSearchParams during URL updates (#18791)

• fix: restore hydration state when custom element attribute updates throw (#18467)

• fix: attach event handlers that are assigned after a top-level await in production (#18933)

• fix: flush anything pending before invoking flushSync callback function (#18878)

• fix: preserve location information for await wrappers (#18859)

• fix: keep a reactive assignment with no dependencies when migrate cannot turn it into a declaration (#18817)

• fix: don't hang migrate on a declaration that shares a line with its script tag (#18816)

• fix: prevent duplicate subscriptions when reconnecting deriveds (#18899)

• fix: recover when an unexpected node replaces a nested boundary comment during hydration (#18925)

• fix: print {#await} blocks that only have a pending branch (#18908)

• fix: don't warn about a redundant link role on <area> elements without an href (#18872)

• fix: don't throw state_unsafe_mutation when the focused element is removed while bind:activeElement is used (#18921)

• fix: don't overwrite an unchanged spread value, preserving incomplete number input (#18864)

• fix: read batch-local array on each-block commit (#18879)

• fix: error at compile time when a declaration in a snippet redeclares one of its parameters (#18842)

• fix: error when using let: directives on a component with a children snippet (#18873)

• fix: ignore stale boundary reset callbacks (#18886)

• fix: handle deferred transitions aborted before initialization (#18776)

• fix: prevent hydration mismatch recovery from being intercepted by error boundaries (#18841)

• fix: preserve dynamic element connections during hydration (#18855)

Commits

• 10fdca7 Version Packages (#18858)
• c580b38 fix: prevent duplicate derived subscriptions on reconnect (#18899)
• 3f885e3 fix: don't throw state_unsafe_mutation when the focused element is removed wi...
• fe4fb46 fix: error if {:else} is followed by another {:else} or {:else if ...} ...
• 179f66b fix: don't create async deriveds for a component destroyed while waiting for ...
• 79a0c0d fix: attach event handlers that are assigned after a top-level await in pro...
• 14136f8 fix: print {#await} blocks that only have a pending branch (#18908)
• 5cbdd34 fix: recover when an unexpected node replaces a nested boundary comment (#18925)
• 7e83327 fix: avoid tracking SvelteURLSearchParams during URL updates (#18791)
• 020242d fix: ensure hydration state restoration for custom element attribute updates ...
• Additional commits viewable in compare view

Updates turbo from 2.11.5 to 2.11.10

Release notes

Sourced from turbo's releases.

Turborepo v2.11.10

What's Changed

Changelog

• fix: Allow non-recursive Turbo commands in root tasks by @​sahyl in vercel/turborepo#14814
• chore: Release Turborepo 2.11.9 by @​github-actions[bot] in vercel/turborepo#14824
• chore(deps): Update dependency @​vercel/geistdocs to v2 by @​vercel-gh-bot-4[bot] in vercel/turborepo#14417
• chore: Update with-gatsby example by @​vercel-gh-bot-3[bot] in vercel/turborepo#14796
• fix: Avoid pnpm batch-shim shutdown hangs on Windows by @​sahyl in vercel/turborepo#14819
• chore(deps): Update dependency @​vercel/geistdocs to v2.11.0 by @​vercel-gh-bot-3[bot] in vercel/turborepo#14832
• fix: Exclude tool-managed directories from local dependency inputs by @​PedroRosalba in vercel/turborepo#14696
• fix: Match git's text=auto binary detection in file hashing by @​PedroRosalba in vercel/turborepo#14697
• fix: Drop @​react-router/dev from Remix match list by @​Pcmhacker-piro in vercel/turborepo#14800
• fix: Match package configuration files and directory inputs in task-level affected detection by @​PedroRosalba in vercel/turborepo#14804
• fix: Parse pnpm 8 single-project lockfiles by @​PedroRosalba in vercel/turborepo#14806
• fix: Keep task env vars in the hash when globalEnv excludes inferred vars by @​PedroRosalba in vercel/turborepo#14805
• docs: Generate the sitemap from Geistdocs sources by @​molebox in vercel/turborepo#14865
• fix: Restore cached symlinks when outputs are already on disk by @​PedroRosalba in vercel/turborepo#14807
• chore: Remove CODEOWNERS file by @​anthonyshew with @​Copilot in vercel/turborepo#14810
• feat: Enable WebMCP for Turborepo docs by @​anthonyshew in vercel/turborepo#14828
• fix: Exit quietly when turbo ls output is piped to a closed reader by @​drakeo338 in vercel/turborepo#14868
• fix: Distrust compromised eMudhra intermediate certificates by @​anthonyshew in vercel/turborepo#14876

Full Changelog: vercel/turborepo@v2.11.9...v2.11.10

Turborepo v2.11.9

What's Changed

Changelog

• chore: Release Turborepo 2.11.8 by @​github-actions[bot] in vercel/turborepo#14789
• perf: Prefetch Cargo metadata during lazy graph construction by @​anthonyshew in vercel/turborepo#14497
• perf: Compute Berry lockfile closures once across workspaces by @​anthonyshew in vercel/turborepo#14499
• perf: Check cache hit outputs in place instead of on the blocking pool by @​anthonyshew in vercel/turborepo#14524
• perf: Speed up Berry lockfile loading by @​anthonyshew in vercel/turborepo#14500
• perf: Parse bun.lock without building a JSON syntax tree by @​anthonyshew in vercel/turborepo#14502
• perf: Skip the dry run cache batch window when there is no remote cache by @​anthonyshew in vercel/turborepo#14505
• perf: Emit lockfile closures pre-sorted and cheapen closure interning by @​anthonyshew in vercel/turborepo#14525
• perf: Reuse configuration derived from turbo.json between the shim and the CLI by @​anthonyshew in vercel/turborepo#14521
• feat: Report locked tools-only setup plans by @​anthonyshew in vercel/turborepo#14483
• perf: Compute Bun lockfile closures once across workspaces by @​anthonyshew in vercel/turborepo#14501
• perf: Reuse open parent directories when restoring cache archives by @​anthonyshew in vercel/turborepo#14506
• perf: Skip dropping the run right before turbo run exits by @​anthonyshew in vercel/turborepo#14507
• perf: Match literal input exclusions without compiling globs by @​anthonyshew in vercel/turborepo#14510
• perf: Copy pruned package files in parallel by @​anthonyshew in vercel/turborepo#14512
• feat: Report proposed first-lock and refresh setup plans by @​anthonyshew in vercel/turborepo#14571
• perf: Compress large cache archives with multithreaded zstd by @​anthonyshew in vercel/turborepo#14698
• perf: Read tracked file stats from directory listings on Windows by @​anthonyshew in vercel/turborepo#14633

... (truncated)

Commits

• e521641 publish 2.11.10 to registry
• aaf5a3a fix: Distrust compromised eMudhra intermediate certificates (#14876)
• 9816503 fix: Exit quietly when turbo ls output is piped to a closed reader (#14868)
• af866e5 feat: Enable WebMCP for Turborepo docs (#14828)
• b42cc68 chore: Remove CODEOWNERS file (#14810)
• 921155f fix: Restore cached symlinks when outputs are already on disk (#14807)
• 9330903 docs: Generate the sitemap from Geistdocs sources (#14865)
• 6048038 fix: Keep task env vars in the hash when globalEnv excludes inferred vars (#1...
• 57ecce3 fix: Parse pnpm 8 single-project lockfiles (#14806)
• d926d6a fix: Match package configuration files and directory inputs in task-level aff...
• Additional commits viewable in compare view

Updates mysql2 from 3.24.4 to 3.24.6

Release notes

Sourced from mysql2's releases.

v3.24.6

3.24.6 (2026-10-13)

Bug Fixes

• allocate a new LOCAL INFILE terminator packet per write (#4580) (8c068ef), closes #4568

v3.24.5

3.24.5 (2026-09-29)

Bug Fixes

• strip the brackets from an IPv6 host in a connection URI (#4570) (b1c39c8)

Changelog

Sourced from mysql2's changelog.

3.24.6 (2026-10-13)

Bug Fixes

• allocate a new LOCAL INFILE terminator packet per write (#4580) (8c068ef), closes #4568

3.24.5 (2026-09-29)

Bug Fixes

• strip the brackets from an IPv6 host in a connection URI (#4570) (b1c39c8)

Commits

• 7f65d9a chore(master): release 3.24.6 (#4592)
• ded9be2 build(deps-dev): bump rollup from 4.64.0 to 4.64.4 in the rollup group (#4605)
• 30201a2 build(deps-dev): bump @​types/node from 26.6.4 to 26.6.5 (#4606)
• 5eb21f4 build(deps-dev): bump prettier (#4604)
• 477ca97 build(deps): bump lucide-react from 1.52.0 to 1.55.0 in /website (#4609)
• 9ea9345 build(deps-dev): bump prettier from 3.9.9 to 3.9.10 in /website (#4608)
• c52e961 build(deps-dev): bump @​types/node from 26.6.4 to 26.6.5 in /website (#4607)
• 1cdba3c build(deps-dev): bump @​biomejs/biome from 2.5.14 to 2.5.15 (#4585)
• a270608 build(deps-dev): bump @​types/node from 26.6.3 to 26.6.4 (#4584)
• 51e02b3 build(deps-dev): bump brace-expansion from 5.0.9 to 5.0.12 (#4601)
• Additional commits viewable in compare view

Updates pg from 8.23.0 to 8.23.1

Changelog

Sourced from pg's changelog.

All major and minor releases are briefly explained below.

For richer information consult the commit log on github with referenced pull requests.

We do not include break-fix version release in this file.

Commits

• 0980cef Publish
• 2759b2c fix(pg): run a named statement with an empty text more than once (#3781)
• 7feb7df fix(pg): expose detail and hint on errors from the native client (#3780)
• 9683053 fix(pg): do not treat Sync as connection ending (#3772)
• 4589038 fix: validate server certificate against host when connecting to an IP addres...
• 9808955 cleanup: Fix typo in comment
• 2b02f64 fix: avoid mutating query config (#3720)
• 0cef6af Reject portal based queries in pipeline mode instead of misrouting rows (#3737)
• 2991480 Deprecate serializing invalid Dates (#3731)
• c940d7c Fail pipelined queries when the connection dies instead of hanging (#3736)
• Additional commits viewable in compare view

Updates @playwright/test from 1.63.0 to 1.64.1

Release notes

Sourced from @​playwright/test's releases.

v1.64.1

Bug Fixes

• #43247 [Bug]: _electron.launch intermittently loses a packaged app's first window since 1.64.0
• #43242 [Regression]: Chromium 155+ aborts a preflighted cross-origin redirect whenever any route is registered (net::ERR_ABORTED)

v1.64.0

🧰 WebMCP

New page.webmcp and frame.webmcp give access to the tools that a page registers through the experimental WebMCP browser API, so you can test them like any other part of your app:

const browser = await chromium.launch({ args: ['--enable-features=WebMCP'] });
const page = await browser.newPage();
await page.goto('https://example.com');
for (const tool of await page.webmcp.tools())
console.log(tool.name, tool.description);
const result = await page.webmcp.callTool('add', { a: 2, b: 40 });
console.log(result.content[0].text); // "42"

Playwright MCP also supports WebMCP by default, with page-defined tools offered to the agent as webmcp_<tool>. Pass --no-webmcp to opt out.

playwright-cli exposes them as well:

playwright-cli webmcp-list
playwright-cli webmcp-call search_catalog --params '{"query":"cats"}'

🎬 Better videos

Videos can now be recorded at a custom frame rate, and the decorations for actions are styled with plain CSS:

// playwright.config.ts
import { defineConfig } from '@playwright/test';
export default defineConfig({
use: {
video: {
mode: 'on',
size: { width: 1920, height: 1080 },
fps: 60,
show: {
actions: {
style: {
point: 'width: 20px; height: 20px; border-radius: 50%; background: red',
</tr></table>

... (truncated)

Commits

• cfe490d cherry-pick(#43353): docs: release notes for v1.64 Python
• 866cbb8 chore: mark v1.64.1 (#43354)
• 1b29247 cherry-pick(#43250): fix(electron): do not drop windows that have not navigat...
• 632d976 cherry-pick(#43249): fix(chromium): disable AvoidCorsURLLoaderRestartOnRedirect
• 824d0c5 cherry-pick(#43217): chore(dotnet): fix async suffix of optional-arg overload...
• 606ecd8 cherry-pick(#43192): fix(locators): parse locators the way the client API bui...
• e4f872c cherry-pick(#43188): feat(api): expose asLocatorDescription via LocalUtils fo...
• f6a439e cherry-pick(#43189): docs(webmcp): expose WebMCP to all languages
• e2335c3 cherry-pick(#43174): fix(mcp): do not close the browser twice when the client...
• d2a436e cherry-pick(#43163): Revert "fix(blob): do not remove existing reports from o...
• Additional commits viewable in compare view

Updates @testing-library/dom from 10.4.1 to 10.4.2

Release notes

Sourced from @​testing-library/dom's releases.

v10.4.2

10.4.2 (2026-09-13)

Bug Fixes

• deps: pin @​types/node to a TypeScript 4-compatible version (#1386) (6049cc0)

Commits

• 6049cc0 fix(deps): pin @​types/node to a TypeScript 4-compatible version (#1386)
• e395d5b Switch to trusted publishing (#1368)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​testing-library/dom since your current version.

Updates @testing-library/user-event from 14.6.4 to 14.6.8

Release notes

Sourced from @​testing-library/user-event's releases.

v14.6.8

14.6.8 (2026-10-13)

Bug Fixes

• treat programmatic null input values as empty string (#1329) (1951eb7)

v14.6.7

14.6.7 (2026-09-02)

Bug Fixes

• normalize DataTransfer format aliases (#1326) (1e0020b)
• feature: Add iframe support for user.keyboard typing (#1275) (1e0020b)

v14.6.6

14.6.6 (2026-08-22)

Bug Fixes

• default pointer event pointerType to empty string instead of the string "undefined" (#1325) (71a5475)

v14.6.5

14.6.5 (2026-08-18)

Bug Fixes

• tab retargeting if focus moved during keydown (#1296) (43efda7)

Commits

• 1951eb7 fix: treat programmatic null input values as empty string (#1329)
• 1e0020b fix: normalize DataTransfer format aliases (#1326)
• d4b0593 feature: Add iframe support for user.keyboard typing (#1275)
• 71a5475 fix: default pointer event pointerType to empty string instead of the string ...

[github-actions]

📓 Docs Drift Check

Nothing in this diff resolved to a documentable surface (no symbol, route or SDK anchor derived from 0 changed package(s)), so this run has no opinion about the docs.

What this run could not see

• a page that states a rule by its inputs shares no identifier with the emitter that implements the rule, so an emitter-only diff cannot list it — not on this run and not on any run. Measured on fix(driver-sql): emit varchar(maxLength) for a text field a declared index keys on #11430: content/docs/protocol/objectql/types.mdx documents the text-family column mapping by the ObjectQL type names it maps FROM (text / textarea / html) while the diff changed createColumn; it went unlisted, and it was the page that diff falsified, in four places. No shared token exists to detect this on, so a rule your change carries has to be re-read by hand in the pages that restate it.
• a key NAME is not a key, so the hand re-read the line above prescribes can land on the wrong schema. The same spelling is authorable on one governed type and a [REMOVED] tombstone on another for each of active, aria, joins, objects, template, tools and version (censused on [finding] tools is a key on BOTH AgentSchema (tombstoned, dead) and SkillSchema (live, cloud-attested), so a name-based search attributes skill examples to the agent key — it produced a false stop-the-line alarm on PR #19059 #19093 over the liveness ledger's governed types, top-level keys); nothing in a search result distinguishes the two, so a grep hit on a LIVE example reads as evidence about the DEAD key. Measured on fix(spec): the agent.tools liveness row says dead — it claimed live on a key the schema tombstoned #19059: content/docs/ai/agents.mdx was reported as contradicting the agent.tools tombstone over its tools: example at :161, which is inside the defineSkill({ block opened at :155 — the page was already correct. Settle ownership by PARSING the value against both schemas, never by the name: that literal PASSES SkillSchema, and as an AgentSchema it FAILS at tools with the tombstone prescription. ⛔ These names are not the whole class — a key retired through a .strict() guidance map leaves no tombstone in the walked shape and none of them here (tool.category, live as AIToolDefinition.category).

Coarse fallback — 0 page(s) merely mention a changed package (the pre-#9192 predicate, kept for the deliberately-wide backstop): node scripts/docs-audit/affected-docs.mjs --json c8583f80ac47177421c9c1fb71e5e33e431ad9cf → packageMentionDocs.

[dependabot]

Looks like these dependencies are no longer being updated by Dependabot, so this is no longer needed.