deps(deps): bump the npm-minor-and-patch group across 1 directory with 74 updates

[dependabot]

Bumps the npm-minor-and-patch group with 25 updates in the /client directory:

Package	From	To
react	19.2.7	19.2.8
@types/react	19.2.17	19.2.18
react-dom	19.2.7	19.2.8
@types/react-dom	19.2.3	19.2.4
@vitejs/plugin-react	6.0.3	6.1.0
eslint-plugin-react-refresh	0.5.3	0.5.4
globals	17.7.0	17.11.0
typescript-eslint	8.63.0	8.67.0
vite	8.1.4	8.2.2
vitest	4.1.10	4.1.11
@csstools/color-helpers	6.1.0	6.1.1
@csstools/css-calc	3.2.1	3.3.0
@csstools/css-color-parser	4.1.9	4.2.0
@csstools/css-syntax-patches-for-csstree	1.1.6	1.1.8
@eslint-community/eslint-utils	4.9.1	4.10.1
@napi-rs/wasm-runtime	1.1.6	1.2.3
acorn	8.17.0	8.18.0
comment-parser	1.4.7	1.4.8
es-module-lexer	2.3.1	2.3.2
flatted	3.4.2	3.4.4
get-tsconfig	4.14.0	4.14.3
obug	2.1.3	2.1.4
own-keys	1.0.1	1.0.2
tinyexec	1.2.4	1.3.0
tldts	7.4.8	7.4.11

Updates react from 19.2.7 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

• Performance improvements when decoding (#37087 by @​eps1lon)

Commits

• 1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
• b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
• See full diff in compare view

Updates @types/react from 19.2.17 to 19.2.18

Commits

• See full diff in compare view

Updates react-dom from 19.2.7 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

• Performance improvements when decoding (#37087 by @​eps1lon)

Commits

• 1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
• b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
• See full diff in compare view

Updates @types/react-dom from 19.2.3 to 19.2.4

Commits

• See full diff in compare view

Updates @types/react from 19.2.17 to 19.2.18

Commits

• See full diff in compare view

Updates @types/react-dom from 19.2.3 to 19.2.4

Commits

• See full diff in compare view

Updates @vitejs/plugin-react from 6.0.3 to 6.1.0

Release notes

Sourced from @​vitejs/plugin-react's releases.

plugin-react@6.1.0

Add experimental native React Compiler support (#1419)

Add experimental native React Compiler support.

You can use it by installing oxc-transform-react and enabling it via the compiler option:

npm install -D oxc-transform-react

import { defineConfig } from 'vite'
import react from '@vitejs/plugin-react'
export default defineConfig({
plugins: [
react({ compiler: true })
]
})

plugin-react@6.0.5

Fixed the react compiler preset filter to be linear (#1353)

The improved filter in v6.0.3 was non-linear and caused a performance regression (#1349). The filter was changed to be linear to avoid that.

plugin-react@6.0.4

Fixed $RefreshSig$ is not defined error when running vite dev with NODE_ENV=production

When running vite dev with NODE_ENV=production, the app errored with $RefreshSig$ is not defined. This error is now fixed.

Changelog

Sourced from @​vitejs/plugin-react's changelog.

6.1.0 (2026-08-19)

Add experimental native React Compiler support (#1419)

Add experimental native React Compiler support.

You can use it by installing oxc-transform-react and enabling it via the compiler option:

npm install -D oxc-transform-react

import { defineConfig } from 'vite'
import react from '@vitejs/plugin-react'
export default defineConfig({
plugins: [
react({ compiler: true })
]
})

6.0.5 (2026-07-30)

Fixed the react compiler preset filter to be linear (#1353)

The improved filter in v6.0.3 was non-linear and caused a performance regression (#1349). The filter was changed to be linear to avoid that.

6.0.4 (2026-07-22)

Fixed $RefreshSig$ is not defined error when running vite dev with NODE_ENV=production

When running vite dev with NODE_ENV=production, the app errored with $RefreshSig$ is not defined. This error is now fixed.

Commits

• 39b3173 release: plugin-react@6.1.0 (#1428)
• f1340b0 feat(react): add native React Compiler support (#1419)
• 9ab698e fix(deps): update all non-major dependencies (#1375)
• 68c0cb8 release: plugin-react@6.0.5 (#1362)
• 555cdbc fix(react): make the react compiler preset filter linear (#1353)
• a00a9f8 fix(deps): update all non-major dependencies (#1327)
• f4b5498 release: plugin-react@6.0.4
• 7a40659 fix(react): $RefreshSig$ is not defined with NODE_ENV=production vite dev ...
• 98b32d4 fix(deps): update react 19.2.8 (#1298)
• 8ae5449 fix: babel-plugin-react-compiler cannot be imported when used in a framework ...
• Additional commits viewable in compare view

Updates eslint-plugin-react-refresh from 0.5.3 to 0.5.4

Release notes

Sourced from eslint-plugin-react-refresh's releases.

v0.5.4

• Add instant to allowExportNames in Next config #112

Changelog

Sourced from eslint-plugin-react-refresh's changelog.

0.5.4

• Add instant to allowExportNames in Next config #112

Commits

• e316617 [publish] Add instant to allowExportNames in Next config (#112)
• See full diff in compare view

Updates globals from 17.7.0 to 17.11.0

Release notes

Sourced from globals's releases.

v17.11.0

• Add react-native globals (#337) 61eafbf

---

sindresorhus/globals@v17.10.0...v17.11.0

v17.10.0

• Add GM_cookie to Greasemonkey globals (#349) f468407

---

sindresorhus/globals@v17.9.0...v17.10.0

v17.9.0

• Update globals (2026-08-01) (#348) 5a958ed

---

sindresorhus/globals@v17.8.0...v17.9.0

v17.8.0

• Update globals (2026-07-01) (#347) 7394811

---

sindresorhus/globals@v17.7.0...v17.8.0

Commits

• 8c59927 17.11.0
• 61eafbf Add react-native globals (#337)
• 7bed4af 17.10.0
• f468407 Add GM_cookie to Greasemonkey globals (#349)
• 8e7b935 17.9.0
• 5a958ed Update globals (2026-08-01) (#348)
• 36c7659 17.8.0
• 7394811 Update globals (2026-07-01) (#347)
• See full diff in compare view

Updates typescript-eslint from 8.63.0 to 8.67.0

Release notes

Sourced from typescript-eslint's releases.

v8.67.0

8.67.0 (2026-08-10)

🚀 Features

• typescript-eslint: export basic globs for using tseslint (#12105)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Josh Goldberg ✨
• Kirk Waiblinger @​kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.66.0

8.66.0 (2026-08-03)

🚀 Features

• typescript-estree: handle import.defer() as ImportExpression (#12609)

🩹 Fixes

• eslint-plugin: [no-unnecessary-type-conversion] ignore shadowed built-ins (#12590)
• eslint-plugin: [prefer-nullish-coalescing] handle shadowed Boolean calls (#12591)
• eslint-plugin: [no-useless-default-assignment] don't report defaults used by other overloads (#12607)
• eslint-plugin: [no-unnecessary-type-parameters] check MappedType key remapping (#12588)
• eslint-plugin: [class-literal-property-style] preserve type annotations and don't drop decorators (#12617)
• website: list onUnsupportedTypeScriptVersion in parser options (#12585)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Kirk Waiblinger @​kirkwaiblinger
• Steffen Schroeder
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.65.0

8.65.0 (2026-07-20)

🚀 Features

• add warning when TS 7 is detected (#12529)

... (truncated)

Changelog

Sourced from typescript-eslint's changelog.

8.67.0 (2026-08-10)

🚀 Features

• typescript-eslint: export basic globs for using tseslint (#12105)

❤️ Thank You

• Claude Sonnet 5
• Evyatar Daud @​StyleShit
• Josh Goldberg
• Josh Goldberg ✨
• Kirk Waiblinger @​kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.66.0 (2026-08-03)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.65.0 (2026-07-20)

🚀 Features

• add warning when TS 7 is detected (#12529)

❤️ Thank You

• Josh Goldberg ✨
• Kirk Waiblinger @​kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.64.0 (2026-07-13)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

• 20a261f chore(release): publish 8.67.0
• c245fbb feat(typescript-eslint): export basic globs for using tseslint (#12105)
• 3b155bb chore: use typescript 7 for typechecking (#12601)
• e51b11b chore(release): publish 8.66.0
• 63ba81b chore(release): publish 8.65.0
• eaf4576 feat: add warning when TS 7 is detected (#12529)
• 0d06406 chore: add attw validation to repo (#12437)
• c2386e4 chore(deps): update dependency prettier to v3.9.5 (#12486)
• 414d9ab chore(release): publish 8.64.0
• See full diff in compare view

Updates vite from 8.1.4 to 8.2.2

Release notes

Sourced from vite's releases.

plugin-legacy@8.2.2

Please refer to CHANGELOG.md for details.

v8.2.2

Please refer to CHANGELOG.md for details.

plugin-legacy@8.2.1

Please refer to CHANGELOG.md for details.

v8.2.1

Please refer to CHANGELOG.md for details.

create-vite@8.2.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.2.0

Please refer to CHANGELOG.md for details.

v8.2.0

Please refer to CHANGELOG.md for details.

v8.2.0-beta.0

Please refer to CHANGELOG.md for details.

v8.1.5

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.2.2 (2026-08-20)

Features

• deps: widen @vitejs/devtools peer range to v0.5.0 (#23302) (495d9ff)

Bug Fixes

• bundled-dev: handle lazy request error (#23291) (3ba026d)
• bundled-dev: hot update through circular imports instead of reloading (#23259) (3dbddef)
• config: resolve sourcemap paths against sourcemap location (#23239) (05a003e)
• css: don't pass empty targets to lightningcss (#23295) (2804636)
• define: fix match escaped dots to support $-prefixed define keys (#23249) (dcf88bd)
• deps: update all non-major dependencies (#23217) (ba958bd)
• deps: update rolldown-related dependencies (#23218) (83ecb2c)
• module-runner: exclude completed modules from in-flight cycle detection (fix #22999) (#23009) (d9b10a9)
• optimizer: close custom extension analysis bundles (#23207) (8fb7675)
• reduce Windows 8.3-short-name detection false-positives (#23066) (02cffa9)
• respect resolve.preserveSymlinks when resolving root (fix #23197) (#23198) (8413052)
• ssr: rewrite computed key of destructing parameter (#23307) (9db0b61)
• vite: update outdated upstream file links in license comments (#23285) (c0f2fc6)

Documentation

• build: note cssTarget precedence (#23200) (a20a35e)

Miscellaneous Chores

• fix ts errors in build test cases (#23209) (a0cfcf7)

Code Refactoring

• use JSON import attributes instead of readFileSync in constants (#23258) (1d9fa39)
• use named regex constants over inline literals (#22964) (5c1c6c6)

Tests

• define: close rolldown bundler after generate (#23231) (b4d66fe)
• module-runner: add TLA circular import case (#23299) (4a261f2)
• module-runner: simplify server-hmr tests (#23300) (599b44b)
• ssr: add destructing assignment case for moduleRunnerTransform (#23308) (cb77e2a)

Build System

• use JSON import attributes instead of readFIleSync in rolldown configs (#23251) (d615bcd)

8.2.1 (2026-08-06)

Bug Fixes

• build: make client chunkImportMap work with sharedPlugins: true (#23184) (15f0307)
• bundled-dev: inject client script tag before chunk scripts (#23161) (eac0cc8)

... (truncated)

Commits

• de1111a release: v8.2.2
• cb77e2a test(ssr): add destructing assignment case for moduleRunnerTransform (#23308)
• 9db0b61 fix(ssr): rewrite computed key of destructing parameter (#23307)
• 8413052 fix: respect resolve.preserveSymlinks when resolving root (fix #23197) (#23...
• 05a003e fix(config): resolve sourcemap paths against sourcemap location (#23239)
• 495d9ff feat(deps): widen @vitejs/devtools peer range to v0.5.0 (#23302)
• 1d9fa39 refactor: use JSON import attributes instead of readFileSync in constants (#2...
• 2804636 fix(css): don't pass empty targets to lightningcss (#23295)
• 599b44b test(module-runner): simplify server-hmr tests (#23300)
• 4a261f2 test(module-runner): add TLA circular import case (#23299)
• Additional commits viewable in compare view

Updates vitest from 4.1.10 to 4.1.11

Release notes

Sourced from vitest's releases.

v4.1.11

   🐞 Bug Fixes

• Revive global concurrency limit for test lifecycle [backport to v4]  -  by @​sheremet-va and @​hi-ogawa in vitest-dev/vitest#10992 (5146d)
• browser:
  • Encode iframeId in tester iframe URL [backport to v4]  -  by @​sheremet-va, Pduhard and Claude Opus 4.8 in vitest-dev/vitest#10955 (10b2c)
  • Trigger playwright/chromium gc on lower disk availability [backport to v4]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode in vitest-dev/vitest#10951 (9851d)
• mocker:
  • Restrict redirect mocks to the fs allowlist [backport to v4]  -  by @​sheremet-va in vitest-dev/vitest#10974 (fe5a1)

    View changes on GitHub

Commits

• 9bd8d46 chore: release v4.1.11 (#10995)
• 9851dbc fix(browser): trigger playwright/chromium gc on lower disk availability [back...
• See full diff in compare view

Updates @csstools/color-helpers from 6.1.0 to 6.1.1

Changelog

Sourced from @​csstools/color-helpers's changelog.

6.1.1

August 15, 2026

• Updated: gamut mapping algorithm

Commits

• See full diff in compare view

Updates @csstools/css-calc from 3.2.1 to 3.3.0

Changelog

Sourced from @​csstools/css-calc's changelog.

3.3.0

July 22, 2026

• Add support for calc-mix()
• Update random() to match the latest spec

Commits

• See full diff in compare view

Updates @csstools/css-color-parser from 4.1.9 to 4.2.0

Changelog

Sourced from @​csstools/css-color-parser's changelog.

4.2.0

August 15, 2026

• Add computedValue() serialization function for color data.
• Mandatory alpha in the relative alpha() function.
• Updated @csstools/color-helpers to 6.1.1 (patch)

4.1.10

July 22, 2026

• Fix handling of none in some edge cases
• Updated @csstools/css-calc to 3.3.0 (minor)

Commits

• See full diff in compare view

Updates @csstools/css-syntax-patches-for-csstree from 1.1.6 to 1.1.8

Changelog

Sourced from @​csstools/css-syntax-patches-for-csstree's changelog.

1.1.8

August 15, 2026

• Update @webref/css to v8.7.1

1.1.7

July 22, 2026

• Update @webref/css to v8.7.0

Commits

• See full diff in compare view

Updates @eslint-community/eslint-utils from 4.9.1 to 4.10.1

Release notes

Sourced from @​eslint-community/eslint-utils's releases.

v4.10.1

4.10.1 (2026-07-22)

Bug Fixes

• add missing typings @​types/node (#336) (f16575f)
• Revert "feat: upgrade eslint-visitor-keys v5" (#333) (c160dba)
• Revert "feat!: update Node.js version support to drop Node 18" (#332) (330a309)

v4.10.0

4.10.0 (2026-07-22)

Features

• upgrade eslint-visitor-keys v5 (#330) (3a4159a)

Commits

• f16575f fix: add missing typings @​types/node (#336)
• 9594631 chore: run Prettier
• 330a309 fix: Revert "feat!: update Node.js version support to drop Node 18" (#332)
• c160dba fix: Revert "feat: upgrade eslint-visitor-keys v5" (#333)
• 80268bc chore(deps): bump actions/setup-node from 6 to 7 (#328)
• 3a4159a feat: upgrade eslint-visitor-keys v5 (#330)
• 3b082a6 feat!: update Node.js version support to drop Node 18 (#329)
• 13a44bb chore(deps): bump actions/checkout from 6 to 7 (#327)
• eb6000e chore(deps): bump codecov/codecov-action from 6 to 7 (#326)
• 9c5d334 chore(deps): bump actions/upload-pages-artifact from 4 to 5 (#323)
• Additional commits viewable in compare view

Updates @napi-rs/wasm-runtime from 1.1.6 to 1.2.3

Changelog

Sourced from @​napi-rs/wasm-runtime's changelog.

1.2.3 (2026-08-12)

Bug Fixes

• cli: compatible with emnapi v1 & v2 (#3454) (aeba312)
• deps: update emnapi to v2.0.0-alpha.4 (#3451) (b8ba732)

1.2.2 (2026-07-31)

Performance Improvements

• wasm-runtime: remove sourcemap (#3428) (0fd17fa)

1.2.1 (2026-07-30)

Bug Fixes

• wasm-runtime: preserve emnapi v1 compatibility (#3426) (856326b)

1.2.0 (2026-07-28)

Features

• cli: support non-threaded WASI targets (#3353) (b5ecfa3), closes #3352 #3400 #3405

Commits

• 70c1493 chore(release): publish
• aeba312 fix(cli): compatible with emnapi v1 & v2 (#3454)
• b8ba732 fix(deps): update emnapi to v2.0.0-alpha.4 (#3451)
• 9c10fc5 build(wasm-runtime): use Rolldown (#3429)
• 5b344c3 chore(release): publish
• 0fd17fa perf(wasm-runtime): remove sourcemap (#3428)
• 164a1ca chore(release): publish
• 856326b fix(wasm-runtime): preserve emnapi v1 compatibility (#3426)
• fb91bcd chore(release): publish
• c646a46 chore: upgrade memfs
• Additional commits viewable in compare view

Updates @oxc-project/types from 0.139.0 to 0.146.0

Release notes

Sourced from @​oxc-project/types's releases.

oxc crates_v0.146.0

🚀 Features

• 83cb516 minifier: Improve negation of expressions in boolean context (#25755) (Armano)

🐛 Bug Fixes

• 82a790d codegen: Narrow printSync input type (#25871) (camc314)
• 134fb22 isolated-declarations: Preserve unresolved parameter types (#25909) (Dunqing)
• 526c2b3 codegen: Remove deprecated test APIs (#25889) (camc314)
• 344a9b2 codegen: Align enum template sourcemaps (#25872) (camc314)

⚡ Performance

• 603b904 packages/codegen: Check sourceText only once (#25887) (overlookmotel)
• 5ef0c93 minifier: Unwrap all unary exprs without creating dummy expressions (#25891) (Armano)
• 8783524 packages/codegen: Remove loop from growMappingBuffer (#25886) (overlookmotel)
• b6b14c0 packages/codegen: Remove redundant branch (#25885) (overlookmotel)
• be6adf0 packages/sourcemap: Make location passed to recordSourceMapping always a number (#25884) (overlookmotel)
• f720f15 packages/codegen: Take named-mapping only code off hot path in recordSourceMapping (#25883) (overlookmotel)
• a734af5 packages/codegen: Remove redundant setting of last in printImportAttributes and printIf (#25882) (overlookmotel)
• c6e44c6 packages/codegen: Combine 2 writes in printJSXElement (#25881) (overlookmotel)
• 8801662 packages/codegen: Remove redundant mapping from printParams (#25880) (overlookmotel)

📚 Documentation

• 5ad330e packages/codegen: Reformat comments (#25876) (overlookmotel)

oxc crates_v0.145.0

💥 BREAKING CHANGES

• 365274e packages/codegen: [BREAKING] printSync return an object (#25720) (overlookmotel)

🚀 Features

• 6a7eb60 packages/codegen: Alter capitalization of sourceFilename option (#25854) (overlookmotel)
• 300763f packages/codegen: Add full source map support (#25585) (camc314)
• a169e4a napi/minify: Expose property name mangling options (#24741) (Dunqing)
• 2f5cdb1 minifier: Add property name mangling (#24740) (Dunqing)
• 4922141 mangler: Deduplicate private accessor names (#25601) (camc314)
• 1c4f519 napi: Add Relay transform plugin (#25503) (Boshen)
• a4478e9 codegen: Add oxc-codegen package (#25488) (overlookmotel)

🐛 Bug Fixes

• 0fbcf64 codegen: Validate sourcemap options (#25860) (camc314)
• 345f981 react_compiler: Skip node_modules by default (#25859) (Boshen)
• ab81f3f minifier: Drop side-effect-free additions (#25639) (Dunqing)
• 241c559 napi/minify: Accept RegExp for property filters (#25827) (Dunqing)
• 4cc7ea4 codegen: Reject invalid indent options (#25807) (camc314)

... (truncated)

Changelog

Sourced from @​oxc-project/types's changelog.

Changelog

All notable changes to this package will be documented in this file.

The format is based on Keep a Changelog.

[0.145.0] - 2026-08-18

🐛 Bug Fixes

• 0c68b7f estree: Emit decorators on FormalParameterRest (#25582) (camc314)

[0.144.0] - 2026-08-10

💥 BREAKING CHANGES

• 44fd320 ast: [BREAKING] Split TS external modules & Namespace Declarations (#25284) (camc314)

[0.141.0] - 2026-07-20

💥 BREAKING CHANGES

• 54cc121 ast: [BREAKING] Split MetaProperty into ImportMeta and NewTarget (#24557) (camc314)

Commits

• 0389c40 release(crates): oxc v0.146.0 (#25912)
• 4a4a1fb release(crates): oxc v0.145.0 (#25865)
• 0c68b7f fix(estree): emit decorators on FormalParameterRest (#25582)
• b6f1458 release(crates): oxc v0.144.0 (#25474)
• 44fd320 feat(ast)!: split TS external modules & Namespace Declarations (#25284)
• 45a17c2 release(crates): oxc v0.143.0 (#25250)
• fc702c1 release(crates): oxc v0.142.0 (#24977)
• 14533a3 release(crates): oxc v0.141.0 (#24714)
• 54cc121 feat(ast)!: split MetaProperty into ImportMeta and NewTarget (#24557)
• 8e0ed2e release(crates): oxc v0.140.0 (#24453)
• See full diff in compare view

Updates @rolldown/binding-android-arm64 from 1.1.5 to 1.2.5

Release notes

Sourced from @​rolldown/binding-android-arm64's releases.

v1.2.5

[1.2.5] - 2026-08-19

🚀 Features

• bench: record per-suite peak memory in the node benchmark (#10704) by @​IWANABETHATGUY
• binding: allocation-tracking global allocator behind the tracking_allocator feature (#10703) by @​IWANABETHATGUY
• add armv7 android (armv7-linux-androideabi) support (#10691) by @​shulaoda
• add NAMESPACE_CONFLICT warning for conflicting star re-exports (#7452) by @​AliceLanniste

🐛 Bug Fixes

• rolldown_plugin_vite_reporter: avoid ANSI erase-line escape in non-TTY output (#10692) by @​shulaoda
• rolldown_plugin_vite_resolve: preserve Yarn PnP virtual importer (#10591) by @​Freakazo
• exclude hash placeholders from case-insensitive filename deconfliction (#10590) by @​Ni...

  Description has been truncated