chore(deps): bump the minor-and-patch group across 1 directory with 8 updates

[dependabot]

Bumps the minor-and-patch group with 8 updates in the / directory:

Package	From	To
maplibre-gl	6.5.0	6.9.0
next	16.3.2	16.3.4
react	19.2.8	19.3.0
@types/react	19.2.18	19.3.0
react-dom	19.2.8	19.3.0
@types/react-dom	19.2.4	19.3.0
@types/node	22.20.1	22.20.2
tsx	4.23.12	4.23.13

Updates maplibre-gl from 6.5.0 to 6.9.0

Release notes

Sourced from maplibre-gl's releases.

v6.9.0

✨ Features and improvements

• Improved support for drawing the letters of Devanagari, Khmer, Burmese and the other complex scripts and also draws Arabic and Hebrew labels correctly without loading a right-to-left text plugin, which deprecates setRTLTextPlugin and getRTLTextPluginStatus (#8343) (by @​HarelM)
• Read sprite and image pixels back through an OffscreenCanvas where available, removing a main-thread stall of tens of milliseconds on GPU-accelerated browsers when a sprite loads (#8339) (by @​cherenkov)
• Skip clipping masks for layers hidden at the current zoom and stop re-binding dynamic buffers on cached vertex array binds, removing redundant WebGL calls every frame (#8369) (by @​johncarmack1984)
• Re-render at most one stale terrain drape per frame and keep drapes that differ only by zoom while the map moves, so a finger lift over terrain no longer re-renders every tile at once (#8368) (by @​johncarmack1984)

🐞 Bug fixes

• Fix setStyle() throwing while terrain is still loading because an intermediate render tried to compile a terrain shader before the replacement style initialized its projection (#6824) (by @​miakh)
• Fix queued GeoJSON updateData property removals throwing after geometry-only updates or retaining previously updated values (#8372) (by @​jokrasno)
• Treat camera options passed as undefined as not given in jumpTo, easeTo and flyTo; they were coerced to NaN (#8373) (by @​vlumi)
• Fix a Not implemented. error that broke panning and zooming when the projection was changed while the camera was moving, on maps with terrain enabled or a transformCameraUpdate callback (#8351) (by @​lazerg)
• Fix a map created inside a hidden container staying at the 400x300 fallback size when the container is shown before the resize observer's first notification is delivered (#8277) (by @​spliffone)
• Fix MercatorTransform throwing when it is resized to a zero width, and skip the matrix calculation of every projection while the transform has a zero width or height (#8374) (by @​avosa)
• Fix every style update opening a redundant sky and light transition, which kept idle from firing for the transition duration after the map was otherwise done, and could ease the sky and the light on a different curve from the layers (#8348) (by @​cherenkov)
• Fix DOM sanitization for iframe and srcdoc (#8396) (by @​HarelM)

v6.8.0

✨ Features and improvements

• Add map.getStyleUrl(), which returns the URL the style was loaded from, or null when the style was given as an object (#7109) (by @​bradymadden97 and @​giswqs)
• Sample terrain render-to-texture output through mipmaps with trilinear filtering, so draped layers stop shimmering and aliasing at high pitch (#8328, continues #7673) (by @​AveryanAlex)
• Build the Intl.Segmenter instances used for text shaping on first use instead of at import, shaving several milliseconds off loading MapLibre on the main thread (#8337) (by @​cherenkov)
• Link shader programs before reading their compile status, so the driver can overlap the compiles and the main thread waits less on shader compilation (#8338) (by @​cherenkov)
• Build the default Marker pin once and clone it per marker, so creating many default markers takes roughly half the constructor time (#8340) (by @​cherenkov)
• Add SDF rendering support for fill patterns, using fill-color as the foreground color (#7747) (by @​bradymadden97 and @​deniial00)
• Warn once when the canvas is clamped to maxCanvasSize, which previously lowered the rendered resolution silently (#8200) (by @​str0kes)

🐞 Bug fixes

• Fix a marker's popup jumping to another world copy when the marker is moved across the antimeridian on a zoomed-out map (#5655, #8326, continues #5956) (by @​yuiseki)
• Fix terrain drape textures not being refreshed after zoom changes, causing stale rendering at the new zoom level (#8251) (by @​patte)
• Fix a gap between the sky and the ground at high pitch while globe transitions to mercator (#7382) (by @​birkskyum)
• Treat an empty tile response (e.g. HTTP 204) as no data: raster-DEM tiles now load without elevation instead of failing with a dem dimension mismatch error, and empty raster tiles render as transparent (#1551) (by @​clement-igonet)
• Validate the before layer in map.moveLayer before reordering, so passing the id of a layer that does not exist leaves the layer order untouched instead of dropping the moved layer out of it (#8301) (by @​lazerg)
• Fix visible seams between hillshade tiles when using linear interpolation. (#8302) (by @​Turbo87)
• Fix the map freezing when a render task throws an error (#6093) (by @​UberMouse)
• Fix getCameraAltitude() returning NaN under globe and vertical-perspective, which disabled marker terrain occlusion and the camera terrain check; the altitude now follows the sphere (#6584) (by @​bigmistqke and @​patte)
• Draw an elevated symbol on globe when the symbol itself is in view but the ground under it is behind the horizon; occlusion now follows the line of sight to the elevated point (#8253) (by @​clement-igonet)
• Fix setTiles producing stale tile URLs when loadTile runs in the same frame (#8323) (by @​johncarmack1984 and @​nostrorom)
• Keep the tile under an elevated symbol from being culled near the horizon, so a symbol with a large symbol-height-offset stays visible until it is behind the planet (#8316) (by @​clement-igonet)

v6.7.0

✨ Features and improvements

• Support the style specification's font-faces property, with map.setFontFaces and map.getFontFaces and improve complex script languages such as Devanagari, Khmer, Burmese and Hebrew (#8237) (by @​HarelM)

... (truncated)

Changelog

Sourced from maplibre-gl's changelog.

6.9.0

✨ Features and improvements

• Improved support for drawing the letters of Devanagari, Khmer, Burmese and the other complex scripts and also draws Arabic and Hebrew labels correctly without loading a right-to-left text plugin, which deprecates setRTLTextPlugin and getRTLTextPluginStatus (#8343) (by @​HarelM)
• Read sprite and image pixels back through an OffscreenCanvas where available, removing a main-thread stall of tens of milliseconds on GPU-accelerated browsers when a sprite loads (#8339) (by @​cherenkov)
• Skip clipping masks for layers hidden at the current zoom and stop re-binding dynamic buffers on cached vertex array binds, removing redundant WebGL calls every frame (#8369) (by @​johncarmack1984)
• Re-render at most one stale terrain drape per frame and keep drapes that differ only by zoom while the map moves, so a finger lift over terrain no longer re-renders every tile at once (#8368) (by @​johncarmack1984)

🐞 Bug fixes

• Fix setStyle() throwing while terrain is still loading because an intermediate render tried to compile a terrain shader before the replacement style initialized its projection (#6824) (by @​miakh)
• Fix queued GeoJSON updateData property removals throwing after geometry-only updates or retaining previously updated values (#8372) (by @​jokrasno)
• Treat camera options passed as undefined as not given in jumpTo, easeTo and flyTo; they were coerced to NaN (#8373) (by @​vlumi)
• Fix a Not implemented. error that broke panning and zooming when the projection was changed while the camera was moving, on maps with terrain enabled or a transformCameraUpdate callback (#8351) (by @​lazerg)
• Fix a map created inside a hidden container staying at the 400x300 fallback size when the container is shown before the resize observer's first notification is delivered (#8277) (by @​spliffone)
• Fix MercatorTransform throwing when it is resized to a zero width, and skip the matrix calculation of every projection while the transform has a zero width or height (#8374) (by @​avosa)
• Fix every style update opening a redundant sky and light transition, which kept idle from firing for the transition duration after the map was otherwise done, and could ease the sky and the light on a different curve from the layers (#8348) (by @​cherenkov)
• Fix DOM sanitization for iframe and srcdoc (#8396) (by @​HarelM)

6.8.0

✨ Features and improvements

• Add map.getStyleUrl(), which returns the URL the style was loaded from, or null when the style was given as an object (#7109) (by @​bradymadden97 and @​giswqs)
• Sample terrain render-to-texture output through mipmaps with trilinear filtering, so draped layers stop shimmering and aliasing at high pitch (#8328, continues #7673) (by @​AveryanAlex)
• Build the Intl.Segmenter instances used for text shaping on first use instead of at import, shaving several milliseconds off loading MapLibre on the main thread (#8337) (by @​cherenkov)
• Link shader programs before reading their compile status, so the driver can overlap the compiles and the main thread waits less on shader compilation (#8338) (by @​cherenkov)
• Build the default Marker pin once and clone it per marker, so creating many default markers takes roughly half the constructor time (#8340) (by @​cherenkov)
• Add SDF rendering support for fill patterns, using fill-color as the foreground color (#7747) (by @​bradymadden97 and @​deniial00)
• Warn once when the canvas is clamped to maxCanvasSize, which previously lowered the rendered resolution silently (#8200) (by @​str0kes)

🐞 Bug fixes

• Fix a marker's popup jumping to another world copy when the marker is moved across the antimeridian on a zoomed-out map (#5655, #8326, continues #5956) (by @​yuiseki)
• Fix terrain drape textures not being refreshed after zoom changes, causing stale rendering at the new zoom level (#8251) (by @​patte)
• Fix a gap between the sky and the ground at high pitch while globe transitions to mercator (#7382) (by @​birkskyum)
• Treat an empty tile response (e.g. HTTP 204) as no data: raster-DEM tiles now load without elevation instead of failing with a dem dimension mismatch error, and empty raster tiles render as transparent (#1551) (by @​clement-igonet)
• Read the map container's dimensions before mutating it in Map#_setupContainer, avoiding a forced synchronous layout reflow on every map initialization (#8307) (by @​lazerg)
• Validate the before layer in map.moveLayer before reordering, so passing the id of a layer that does not exist leaves the layer order untouched instead of dropping the moved layer out of it (#8301) (by @​lazerg)
• Fix visible seams between hillshade tiles when using linear interpolation. (#8302) (by @​Turbo87)
• Fix the map freezing when a render task throws an error (#6093) (by @​UberMouse)
• Fix getCameraAltitude() returning NaN under globe and vertical-perspective, which disabled marker terrain occlusion and the camera terrain check; the altitude now follows the sphere (#6584) (by @​bigmistqke and @​patte)
• Draw an elevated symbol on globe when the symbol itself is in view but the ground under it is behind the horizon; occlusion now follows the line of sight to the elevated point (#8253) (by @​clement-igonet)
• Fix setTiles producing stale tile URLs when loadTile runs in the same frame (#8323) (by @​johncarmack1984 and @​nostrorom)
• Keep the tile under an elevated symbol from being culled near the horizon, so a symbol with a large symbol-height-offset stays visible until it is behind the planet (#8316) (by @​clement-igonet)

6.7.0

✨ Features and improvements

... (truncated)

Commits

• f985318 Bump js version to 6.9.0 (#8398)
• b51d10a improve sanitization (#8396)
• 3603401 chore(deps-dev): bump cssnano from 9.0.2 to 9.0.3 (#8390)
• 3e3c447 chore(deps): bump @​maplibre/maplibre-gl-style-spec from 26.4.1 to 26.4.2 (#8391)
• ea9f7df chore(deps): bump zensical/zensical from 0.0.59 to 0.0.60 (#8392)
• ce10d22 feat: add bidi support and deprecate RTL plugin (#8343)
• 86901c5 fix: stop re-opening sky and light transitions on every style update (#8350)
• 54dfab1 chore(deps-dev): bump @​types/node from 26.4.0 to 26.4.1 (#8352)
• 209e342 perf: skip hidden layers before their clipping masks and drop the dynamic buf...
• 71a12d8 fix: skip terrain drawing until replacement projection is ready (#8258)
• Additional commits viewable in compare view

Updates next from 16.3.2 to 16.3.4

Release notes

Sourced from next's releases.

v16.3.4

Follow-up release to v16.3.3 re-enabling AVIF Image Optimization (#97949).

The following bug fixes have been backported. It does not include all pending features/changes on canary.

• testmode: Fix infinite recursion in testmode passthrough fetch (#97691)
• Fix build error when aliasing typescript to @​typescript/typescript6 (#97997)
• Fix unset crossOrigin in Turbopack manifests (#97930)

Credits

Huge thanks to @​eps1lon, @​mischnic, and @​timneutkens for helping!

v16.3.3

This release contains security fixes for the following advisories:

Critical:

• Unauthenticated Remote Code Execution on windows-hosted servers
• Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used

Commits

• 299180d v16.3.4
• 12e173d [16.3.x] Re-enable AVIF image optimization and require sharp 0.35.4 (#97949)
• 5d9022e [backport] Fix unset crossOrigin in Turbopack manifests (#97930)
• d8f4560 [16.3.x] Fix build error when aliasing typescript to @​typescript/typescript6 ...
• 656aebf [16.3] testmode: Fix infinite recursion in testmode passthrough fetch (#97691)
• f37c1d6 [16.3.x] ci: remove pull_request_stats workflow (#97975)
• a9a1cb7 v16.3.3
• 968b9fc [16.3.x] Fix ISR misses with backslashes in segments when deployed on Windows
• 3a15b4a [16.3.x] [next/image]: disable avif image optimization
• 7378b51 Backport/docs fixes 16.3 (#97649)
• Additional commits viewable in compare view

Updates react from 19.2.8 to 19.3.0

Release notes

Sourced from react's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

• <ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@​sebmarkbage, @​jackpope, @​gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)
• Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@​jackpope, @​sebmarkbage, @​eps1lon, @​Dhakshin2007, @​chirokas, @​teamleaderleo, @​fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

• browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
  • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

• Enable Trusted Types API integration (@​rickhanlonii #35816)
• Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@​acdlite #37290)
• Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@​hoxyq, @​eps1lon: #37104, #37203, #37491)

All Changes

React

• Fast Refresh Fixes
  • Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@​sophiebits #36965)
  • Fix Fast Refresh so edits to a memo() comparison function take effect (@​sophiebits #36964)
  • Fix Fast Refresh crash when an edit changes the kind of a component's type (@​sophiebits #36963)
  • Unify hot reload type resolution for Fast Refresh (@​sophiebits #36962)
  • Fix Fast Refresh to remount correctly when an edit changes the component kind (@​sophiebits #36950)
  • Double invoke effects in StrictMode after Fast Refresh (@​eps1lon #35962)
• Performance Track Fixes
  • Prevent crash when accessing $$typeof in Performance Tracks (@​eps1lon #35679)
  • Handle non-string function names in Performance Tracks (@​eps1lon #35659)
  • Use minus (-) instead of en dash for removed props in Performance Tracks (@​eps1lon #35649)
  • Handle arrays with bigints in deep objects in Performance Tracks (@​eps1lon #35648)
  • Don't enumerate typed array props in Performance Tracks in DEV (@​UditDewan #36913)
  • Bail out of diffing wide objects and arrays in Performance Tracks (@​eps1lon #34742)
  • Clear potentially large performance measures in DEV (@​hoxyq #34803)
  • Fix missing else branch for renders with no props change in Performance Tracks (@​hoxyq #34837)
• Activity Fixes
  • Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@​sophiebits #36947)
  • Hide portal contents when an Activity is hidden (@​acdlite #35091)
  • Prevent metadata hoisting in hidden <Activity> trees (@​ronnakamoto #34983)
  • Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@​acdlite #35074)
  • Don't unhide a node if a direct parent Offscreen is still hidden (@​sebmarkbage #34821)
  • Don't show internal <Offscreen> component in error messages (@​rickhanlonii #35763)
• Warn in DEV when a component appears to have been unblocked by a conditional use() (@​hoxyq, @​eps1lon: #37104, #37203, #37491)
• Render transitions independently instead of entangling them into a single render (@​acdlite #37290)

... (truncated)

Changelog

Sourced from react's changelog.

19.3.0 (September 9, 2026)

New React Features

• <ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@​sebmarkbage, @​jackpope, @​gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)
• Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@​jackpope, @​sebmarkbage, @​eps1lon, @​Dhakshin2007, @​chirokas, @​teamleaderleo, @​fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

• browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
  • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

• Enable Trusted Types API integration (@​rickhanlonii #35816)
• Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@​acdlite #37290)
• Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@​hoxyq, @​eps1lon: #37104, #37203, #37491)

All Changes

React

• Fast Refresh Fixes
  • Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@​sophiebits #36965)
  • Fix Fast Refresh so edits to a memo() comparison function take effect (@​sophiebits #36964)
  • Fix Fast Refresh crash when an edit changes the kind of a component's type (@​sophiebits #36963)
  • Unify hot reload type resolution for Fast Refresh (@​sophiebits #36962)
  • Fix Fast Refresh to remount correctly when an edit changes the component kind (@​sophiebits #36950)
  • Double invoke effects in StrictMode after Fast Refresh (@​eps1lon #35962)
• Performance Track Fixes
  • Prevent crash when accessing $$typeof in Performance Tracks (@​eps1lon #35679)
  • Handle non-string function names in Performance Tracks (@​eps1lon #35659)
  • Use minus (-) instead of en dash for removed props in Performance Tracks (@​eps1lon #35649)
  • Handle arrays with bigints in deep objects in Performance Tracks (@​eps1lon #35648)
  • Don't enumerate typed array props in Performance Tracks in DEV (@​UditDewan #36913)
  • Bail out of diffing wide objects and arrays in Performance Tracks (@​eps1lon #34742)
  • Clear potentially large performance measures in DEV (@​hoxyq #34803)
  • Fix missing else branch for renders with no props change in Performance Tracks (@​hoxyq #34837)
• Activity Fixes
  • Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@​sophiebits #36947)
  • Hide portal contents when an Activity is hidden (@​acdlite #35091)
  • Prevent metadata hoisting in hidden <Activity> trees (@​ronnakamoto #34983)
  • Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@​acdlite #35074)
  • Don't unhide a node if a direct parent Offscreen is still hidden (@​sebmarkbage #34821)
  • Don't show internal <Offscreen> component in error messages (@​rickhanlonii #35763)
• Warn in DEV when a component appears to have been unblocked by a conditional use() (@​hoxyq, @​eps1lon: #37104, #37203, #37491)
• Render transitions independently instead of entangling them into a single render (@​acdlite #37290)
• Fix hang when updating a dehydrated boundary inside a hidden tree (@​gaearon Description has been truncated