chore(deps): bump the patch-and-minor group across 1 directory with 52 updates

[dependabot]

Bumps the patch-and-minor group with 52 updates in the / directory:

Package	From	To
@biomejs/biome	2.5.7	2.5.14
@types/bun	1.3.14	1.4.2
lefthook	2.1.10	2.1.14
zod	4.4.3	4.6.5
ws	8.21.2	8.21.3
@better-auth/passkey	1.6.26	1.7.5
@codemirror/commands	6.10.4	6.11.1
@codemirror/lang-html	6.4.11	6.4.12
@codemirror/state	6.7.1	6.7.5
@codemirror/view	6.43.8	6.43.12
@node-rs/argon2	2.0.2	2.2.1
@tanstack/query-async-storage-persister	5.101.4	5.103.1
@tanstack/query-persist-client-core	5.101.4	5.103.1
@tanstack/react-query	5.101.4	5.103.1
@tanstack/react-virtual	3.14.9	3.14.13
@tiptap/core	3.29.2	3.31.3
@tiptap/extension-code-block-lowlight	3.29.2	3.31.3
@tiptap/extension-highlight	3.29.2	3.31.3
@tiptap/extension-image	3.29.2	3.31.3
@tiptap/extension-list	3.29.2	3.31.3
@tiptap/extension-table	3.29.2	3.31.3
@tiptap/extensions	3.29.2	3.31.3
@tiptap/pm	3.29.2	3.31.3
@tiptap/react	3.29.2	3.31.3
@tiptap/starter-kit	3.29.2	3.31.3
@vercel/functions	3.7.7	3.9.8
better-auth	1.6.26	1.7.5
dompurify	3.4.13	3.4.15
html-to-pdfmake	2.5.33	2.5.34
lucide-react	1.28.0	1.47.0
motion	13.1.1	13.4.0
next	16.3.4	16.3.5
prettier	3.9.6	3.9.8
react	19.2.8	19.3.0
@types/react	19.2.18	19.3.0
react-dom	19.2.8	19.3.0
@types/react-dom	19.2.7	19.3.0
tailwind-merge	3.6.0	3.7.0
web-vitals	6.1.0	6.2.2
@happy-dom/global-registrator	20.11.1	20.14.5
@playwright/test	1.62.1	1.63.0
@testing-library/dom	10.4.1	10.4.2
@testing-library/jest-dom	7.0.0	7.0.1
@testing-library/react	16.3.2	16.3.3
@testing-library/user-event	14.6.3	14.6.7
@types/node	26.1.2	26.6.2
@types/react	19.2.18	19.3.0
@types/react-dom	19.2.7	19.3.0
pg	8.22.0	8.23.0
@aws-sdk/client-s3	3.1103.0	3.1136.0
@aws-sdk/s3-request-presigner	3.1103.0	3.1136.0
marked	18.0.9	18.0.13
resend	6.18.1	6.28.1
uuid	14.0.1	14.0.2

Updates @biomejs/biome from 2.5.7 to 2.5.14

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.14

2.5.14

Patch Changes

• #9022 0d49e24 Thanks @​dyc3! - Added the nursery rule noReturnInFinally. This rule disallows return statements in Promise.prototype.finally() callbacks, including inside nested blocks and conditional branches. Returns in nested functions are ignored by the rule.

  // Invalid: return in finally callback
  Promise.resolve(1).finally(() => { return 2 })
  // Valid: no return in finally callback
  Promise.resolve(1).finally(() => { console.log(2) })

  Returning a value from a Promise.prototype.finally() callback does not replace the original promise's fulfillment value, which can be confusing. Returned promises and thenables are awaited, and their rejection rejects the resulting promise.

• #11754 71eaa0d Thanks @​griff-rees! - Added the nursery rule noSvelteAtDebugTags, which disallows Svelte's {@debug} tag.

  <!-- Invalid: leftover debugging tag -->
  {@debug user}

  The {@debug} tag is a debugging aid and should be removed once you no longer need it, as it should not remain in production code. The rule provides a safe fix that removes the tag.

• #11725 5eb5f09 Thanks @​m1handr! - Added the nursery rule useValidTestTitle, which enforces valid titles for unit test cases and suites.

• #11735 9bd70c7 Thanks @​ematipico! - Fixed #8471: source.fixAll.biome ignored formatter.formatWithErrors. It now applies safe fixes without formatting files that have parse errors when the option is disabled.

• #11715 f05a3c3 Thanks @​ematipico! - Fixed #7771: Grit plugins that use sequential no longer panic when Biome processes files.

• #11766 c2542c6 Thanks @​dyc3! - Fixed validation of readonly and accessor modifiers: combining them in either order now reports that they cannot be used together.

• #11461 22e9966 Thanks @​FoundDream! - Fixed #11423: Multiline template interpolations now preserve the indentation of their closing brace when the source indentation is not a multiple of tabWidth.

   const value = `
        ${
          condition
            ? "yes"
            : "no"
  -}
  +     }
   `;

• #11766 c2542c6 Thanks @​dyc3! - Fixed #11763: TypeScript class members using override accessor, such as override accessor value = 1, now parse correctly. The reversed order, accessor override, now reports that override must precede accessor.

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.14

Patch Changes

• #9022 0d49e24 Thanks @​dyc3! - Added the nursery rule noReturnInFinally. This rule disallows return statements in Promise.prototype.finally() callbacks, including inside nested blocks and conditional branches. Returns in nested functions are ignored by the rule.

  // Invalid: return in finally callback
  Promise.resolve(1).finally(() => { return 2 })
  // Valid: no return in finally callback
  Promise.resolve(1).finally(() => { console.log(2) })

  Returning a value from a Promise.prototype.finally() callback does not replace the original promise's fulfillment value, which can be confusing. Returned promises and thenables are awaited, and their rejection rejects the resulting promise.

• #11754 71eaa0d Thanks @​griff-rees! - Added the nursery rule noSvelteAtDebugTags, which disallows Svelte's {@debug} tag.

  <!-- Invalid: leftover debugging tag -->
  {@debug user}

  The {@debug} tag is a debugging aid and should be removed once you no longer need it, as it should not remain in production code. The rule provides a safe fix that removes the tag.

• #11725 5eb5f09 Thanks @​m1handr! - Added the nursery rule useValidTestTitle, which enforces valid titles for unit test cases and suites.

• #11735 9bd70c7 Thanks @​ematipico! - Fixed #8471: source.fixAll.biome ignored formatter.formatWithErrors. It now applies safe fixes without formatting files that have parse errors when the option is disabled.

• #11715 f05a3c3 Thanks @​ematipico! - Fixed #7771: Grit plugins that use sequential no longer panic when Biome processes files.

• #11766 c2542c6 Thanks @​dyc3! - Fixed validation of readonly and accessor modifiers: combining them in either order now reports that they cannot be used together.

• #11461 22e9966 Thanks @​FoundDream! - Fixed #11423: Multiline template interpolations now preserve the indentation of their closing brace when the source indentation is not a multiple of tabWidth.

   const value = `
        ${
          condition
            ? "yes"
            : "no"
  -}
  +     }
   `;

• #11766 c2542c6 Thanks @​dyc3! - Fixed #11763: TypeScript class members using override accessor, such as override accessor value = 1, now parse correctly. The reversed order, accessor override, now reports that override must precede accessor.

• #11790 17d0ff0 Thanks @​ematipico! - Fixed #10248: noUselessFragments now allows fragments with props in Astro files, such as <Fragment slot="name">{text}</Fragment> inside template expressions.

... (truncated)

Commits

• af4365d ci: release (#11711)
• 7ee3a6c fix(useExhaustiveSwitchCases): add option requireExplicitCase (#11777)
• 02ea438 feat(json_analyze): implement noJsonUnsafeValues (#9758)
• 64fd314 feat(json_analyze): implement useConsistentObjectKeys (#9797)
• a9c4aa0 feat(html): detect undeclared custom Vue directives (#11651)
• 1fc17e3 feat: expand useIncludes (#11739)
• 71eaa0d feat(lint/html/svelte): add noSvelteAtDebugTags (#11754)
• 9bd70c7 fix: various bug fixes (#11735)
• c7c4e2b fix(analyzer): various bugs (#11720)
• 5eb5f09 feat(biome_js_analyze): implement useValidTestTitle rule (#9176) (#11725)
• Additional commits viewable in compare view

Updates @types/bun from 1.3.14 to 1.4.2

Commits

• See full diff in compare view

Updates lefthook from 2.1.10 to 2.1.14

Release notes

Sourced from lefthook's releases.

v2.1.14

Changelog

v2.1.12

Changelog

• b8350fde604197b2422adfc4ae0af080725822b9 ci: fix npm publishing by bumping Node to 24 (#1508)
• 9fb290d786a0e122fe113b1b49a45bbd0ffa7d28 fix: LEFTHOOK_OUTPUT precedence (#1506)
• 2f0a9f37cef73e10d95043ba3754329a21850d57 fix: fail the hook when staging fixed files errors (#1484)

v2.1.11

Changelog

• e5b10ac3a2645784ee2e4260620c49c31b44992a deps: bump Go to 1.26.6 (#1495)
• d4a259f460b7c1d8c512dd75eedc7068310ee961 fix: inherit terminal size for PTY commands (#1498)

Changelog

Sourced from lefthook's changelog.

2.1.13/2.1.14 (2026-09-14)

• fix: error when --job/--command matches nothing (#1512) by @​nityanand123gupta
• fix: disable tty things when stdout is not TTY (#1545) by @​mrexox
• docs: document files inheritance for grouped jobs (#1536) by @​chiliec
• fix: force colors when colors are explicitly enabled (#1538) by @​Yash121l
• fix: resolve file_types paths from the repo root (#1537) by @​Yash121l
• fix: don't force-install hooks from the npm postinstall (#1510) by @​hamodywe
• docs: quote template run examples (#1472) by @​Guflly

2.1.12 (2026-08-28)

• fix: fail the hook when staging fixed files errors (#1484) by @​teddytennant
• fix: LEFTHOOK_OUTPUT precedence (#1506) by @​Yuki9814
• ci: fix npm publishing by bumping Node to 24 (#1508) by @​mariokresic

2.1.11 (2026-08-21)

• fix: inherit terminal size for PTY commands (#1498) by @​mariokresic
• docs: correct Lefthook commit message configuration (#1499) by @​codersjj
• docs: hide contributors regenerate tip from the site (#1500) by @​MikevPeeren
• docs: clarify signed-off commit example (#1492) by @​nightcityblade
• deps: bump Go to 1.26.6 (#1495) by @​quaacxlok
• docs: fix em notice by @​mrexox
• docs: update docmd (#1481) by @​mrexox
• docs: fix EM mention HTML by @​mrexox
• docs: clarify remote script folders (#1477) by @​scop
• docs: document script args (#1479) by @​lntutor
• docs: update em logo by @​mrexox

Commits

• 1e23553 2.1.14: small fixes and spinner improvements
• a2c9d37 2.1.13: small fixes and spinner improvements
• c7b4983 fix(run): error when --job/--command matches nothing (#1512)
• e4ca4a1 fix: disable tty things when stdout is not TTY (#1545)
• aa3fa89 docs: document files inheritance for grouped jobs (#1536)
• 250f028 fix: force colors when colors are explicitly enabled (#1538)
• 62f4d5e fix: resolve file_types paths from the repo root (#1537)
• ef092eb fix(npm) don't force past core.hooksPath guard in npm postinstall (#1475)
• 3667aeb fix: don't force-install hooks from the npm postinstall (#1510)
• 354df23 docs: quote template run examples (#1472)
• Additional commits viewable in compare view

Updates zod from 4.4.3 to 4.6.5

Release notes

Sourced from zod's releases.

v4.6.5

Commits:

• d2b135cfb7a3582b9eb515756b9166bcb9521f4a docs: add the 4.6.x patch highlights to the 4.6 post
• f1448f7cee00df9fe1e9ad84a000aa1828cc8bc1 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections
• de65a5cb39ed22a507fac935788f718fa88d104f docs: lead the properties section with the check and add a Zod Mini tab (#6598)
• 56222cd1532c07bcb91b67df529cab4c0a215330 feat(instanceof): key the .properties() shape off the instance type (#6600)
• ca0229a404818290e6cdcfefcd7eb2d04bcbb543 Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)"
• cc4cd4ee9c52fcaa10964e48cc144541e41a5ed9 Revert "Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)""
• 0f3f5ee3ca56c7574bf849e54f79e9a6e02562ee 4.6.5
• 59bbc03e10c636b9eb3c393dfeb552819774ec21 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump

v4.6.4

A patch on top of 4.6.3.

• d6bc1e30 feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)
• ad32d751 perf: z.url() rejects an invalid URL with URL.canParse() instead of a throwing constructor, about 50x faster; fewer allocations on the validation path (#6588)
• 2bb08717 chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump
• f6e1701a chore(deps): bump next to 15.5.25 and vite to 7.3.6 (#6153)

v4.6.3

A patch on top of 4.6.2.

• 413cce9a fix(v4): make z.properties() a check again (#6594) — removes the standalone z.properties() schema from 4.6.0; z.instanceof().properties() and .check(...z.properties()) are unchanged
• 75d63ee1 docs: show only the .properties() method form in the 4.6 post
• 46da9572 docs: match the error-message examples to what the parsers emit

v4.6.2

A patch on top of 4.6.1.

• 9446b5cc fix: preserve undefined prefault outputs and object keys (#6587) — closes #6585
• 0c483c58 docs: the Zod 4.6 announcement post (#6546)
• a00c3f34 docs: use Trigger.dev's brand-kit lockups for the platinum card

v4.6.1

A patch on top of 4.6.0.

• b12aa523 fix: preserve unique tags with defaulted discriminators (#6582) — closes #6577
• dd9c36fa fix(v4): defer recursive object index inference (#6580)
• 3b154992 feat(lang): add Tajik (tg) locale (#6581) by @​ismoil77
• 2efa8b80 ci: give the npm wait a real budget and drop the back-publish path (#6583)

v4.6.0

Zod 4.6 is now available.

npm install zod@latest

At a glance:

... (truncated)

Commits

• 59bbc03 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump
• 0f3f5ee 4.6.5
• cc4cd4e Revert "Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, ref...
• ca0229a Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed w...
• 56222cd feat(instanceof): key the .properties() shape off the instance type (#6600)
• de65a5c docs: lead the properties section with the check and add a Zod Mini tab (#6598)
• f1448f7 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections
• d2b135c docs: add the 4.6.x patch highlights to the 4.6 post
• 2bb0871 chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump
• 743aedb 4.6.4
• Additional commits viewable in compare view

Updates ws from 8.21.2 to 8.21.3

Release notes

Sourced from ws's releases.

8.21.3

Bug fixes

• The server now correctly rejects permessage-deflate offers if the incoming client_max_window_bits parameter value is smaller than its configured clientMaxWindowBits (e97a20ea).

Commits

• c791e70 [dist] 8.21.3
• e97a20e [fix] Reject offers with client_max_window_bits below config
• See full diff in compare view

Updates @better-auth/passkey from 1.6.26 to 1.7.5

Release notes

Sourced from @​better-auth/passkey's releases.

v1.7.5

better-auth

Features

• Added database.schemaName support for direct PostgreSQL connections. (#11203)

Bug Fixes

• Improved server-side logging for Cloudflare Turnstile verification failures. (#11283)
• Fixed PostgreSQL migrations incorrectly identifying tables and views across schemas. (#11270)
• Fixed MySQL index validation for existing string columns. (#11272)
• Removed the unused optional better-sqlite3 peer dependency to prevent installation conflicts. (#11209)

For detailed changes, see CHANGELOG

@better-auth/core

Features

• Added database.schemaName support for direct PostgreSQL connections. (#11203)

Bug Fixes

• Fixed database option type inference outside Cloudflare Workers. (#11290)

For detailed changes, see CHANGELOG

@better-auth/cimd

Bug Fixes

• Fixed unnecessary pacing of consecutive CIMD OAuth requests when metadata cannot be cached. (#11161)

For detailed changes, see CHANGELOG

@better-auth/drizzle-adapter

Bug Fixes

• Fixed lazy database initialization when using Drizzle relations. (#11263)

For detailed changes, see CHANGELOG

@better-auth/kysely-adapter

Features

• Added database.schemaName support for direct PostgreSQL connections. (#11203)

... (truncated)

Changelog

Sourced from @​better-auth/passkey's changelog.

1.7.5

1.7.4

1.7.3

1.7.2

1.7.1

1.7.0

Minor Changes

• #9873 2f3a714 Thanks @​GautamBytes! - Add the optional createSession setting to passkey registration. When enabled, successful registration signs the user in, sets the session cookie, and returns the session and user with the registered passkey.

1.7.0-rc.6

1.7.0-rc.5

1.7.0-rc.4

1.7.0-rc.3

Minor Changes

• #9873 2f3a714 Thanks @​GautamBytes! - Add the optional createSession setting to passkey registration. When enabled, successful registration signs the user in, sets the session cookie, and returns the session and user with the registered passkey.

1.7.0-rc.2

1.7.0-rc.1

1.7.0-rc.0

1.7.0-beta.10

1.7.0-beta.9

Patch Changes

• Updated dependencies []:
  • better-auth@1.7.0-beta.9
  • @​better-auth/core@​1.7.0-beta.9

1.7.0-beta.8

Patch Changes

• Updated dependencies [7c7313c, 06daf70, a83152e, 97903c9, 3a79aff]:
  • better-auth@1.7.0-beta.8

... (truncated)

Commits

• 5468e6b chore: release v1.7.5 (#11245)
• 735008f chore: release v1.7.4 (#11216)
• 597d39c chore: release v1.7.3 (#11032)
• c0444dc fix: align OpenAPI required fields with Zod 4.5 (#11066)
• ba12fcd chore: release v1.7.2 (#10870)
• 2344536 chore: release v1.7.1 (#10864)
• f577ec5 chore: exit pre-release mode for v1.7.0
• 69258d1 chore: sync main to next
• e84ec5e chore: release v1.6.30 (#10840)
• bc93b27 chore: release v1.7.0-rc.6 (#10772)
• Additional commits viewable in compare view

Updates @codemirror/commands from 6.10.4 to 6.11.1

Commits

• See full diff in compare view

Updates @codemirror/lang-html from 6.4.11 to 6.4.12

Commits

• See full diff in compare view

Updates @codemirror/state from 6.7.1 to 6.7.5

Commits

• See full diff in compare view

Updates @codemirror/view from 6.43.8 to 6.43.12

Commits

• See full diff in compare view

Updates @node-rs/argon2 from 2.0.2 to 2.2.1

Commits

• 56c64a1 chore(release): publish
• f8d6b3e fix: record and lock Rust release dependencies (#1206)
• b8b4fae fix: remove forced SSE4.2 from x64 builds (#1205)
• 7769109 fix: disable mimalloc arch optimizations on Linux ARM64 (#1204)
• bb467e8 chore(deps): lock file maintenance (#1202)
• e692dfa chore(deps): update dependency oxfmt to ^0.67.0 (#1203)
• 784f4c3 chore(deps): update rust to v1.98.1 (#1201)
• 1f53bf3 chore(deps): update dependency oxfmt to ^0.66.0 (#1198)
• cb6b2b2 chore(deps): lock file maintenance (#1197)
• fa136ac chore(release): publish
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​node-rs/argon2 since your current version.

Updates @tanstack/query-async-storage-persister from 5.101.4 to 5.103.1

Release notes

Sourced from @​tanstack/query-async-storage-persister's releases.

@​tanstack/query-async-storage-persister@​5.103.1

Patch Changes

• Updated dependencies [8330b2f, 3212966]:
  • @​tanstack/query-core@​5.103.1
  • @​tanstack/query-persist-client-core@​5.103.1

@​tanstack/query-async-storage-persister@​5.103.0

Patch Changes

• Updated dependencies [e57f816, 4c7cdbb, fdae2ce, a1119e5, cbf77bf]:
  • @​tanstack/query-core@​5.103.0
  • @​tanstack/query-persist-client-core@​5.103.0

Changelog

Sourced from @​tanstack/query-async-storage-persister's changelog.

5.103.1

Patch Changes

• Updated dependencies [8330b2f, 3212966]:
  • @​tanstack/query-core@​5.103.1
  • @​tanstack/query-persist-client-core@​5.103.1

5.103.0

Patch Changes

• Updated dependencies [e57f816, 4c7cdbb, fdae2ce, a1119e5, cbf77bf]:
  • @​tanstack/query-core@​5.103.0
  • @​tanstack/query-persist-client-core@​5.103.0

5.102.8

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-core@​5.102.8
  • @​tanstack/query-persist-client-core@​5.102.8

5.102.7

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-core@​5.102.7
  • @​tanstack/query-persist-client-core@​5.102.7

5.102.6

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-core@​5.102.6
  • @​tanstack/query-persist-client-core@​5.102.6

5.102.5

Patch Changes

• Updated dependencies [578e5c2]:
  • @​tanstack/query-core@​5.102.5
  • @​tanstack/query-persist-client-core@​5.102.5

5.102.4

... (truncated)

Commits

• c08f576 ci: Version Packages (#11511)
• 19ccf27 ci: Version Packages (#11339)
• 58ad3e2 fix: isolate TypeScript test output (#11503)
• 2969edf ci: Version Packages (#11316)
• 2eb3c7c ci: Version Packages (#11313)
• 714df67 ci: Version Packages (#11306)
• 1836e61 ci: Version Packages (#11303)
• 51f12db ci: Version Packages (#11294)
• 730b3aa ci: Version Packages (#11276)
• 388bbaf ci: Version Packages (#11265)
• Additional commits viewable in compare view

Updates @tanstack/query-persist-client-core from 5.101.4 to 5.103.1

Release notes

Sourced from @​tanstack/query-persist-client-core's releases.

@​tanstack/query-persist-client-core@​5.103.1

Patch Changes

• Updated dependencies [8330b2f, 3212966]:
  • @​tanstack/query-core@​5.103.1

@​tanstack/query-persist-client-core@​5.103.0

Patch Changes

• #11509 4c7cdbb - Restore non-nullish falsy values from custom query persister storage.

• Updated dependencies [e57f816, fdae2ce, a1119e5, cbf77bf]:

  • @​tanstack/query-core@​5.103.0

Changelog

Sourced from @​tanstack/query-persist-client-core's changelog.

5.103.1

Patch Changes

• Updated dependencies [8330b2f, 3212966]:
  • @​tanstack/query-core@​5.103.1

5.103.0

Patch Changes

• #11509 4c7cdbb - Restore non-nullish falsy values from custom query persister storage.

• Updated dependencies [e57f816, fdae2ce, a1119e5, cbf77bf]:

  • @​tanstack/query-core@​5.103.0

5.102.8

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-core@​5.102.8

5.102.7

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-core@​5.102.7

5.102.6

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-core@​5.102.6

5.102.5

Patch Changes

• Updated dependencies [578e5c2]:
  • @​tanstack/query-core@​5.102.5

5.102.4

Patch Changes

• Updated dependencies [a05df6a]:
  • @​tanstack/query-core@​5.102.4

... (truncated)

Commits

• c08f576 ci: Version Packages (#11511)
• 19ccf27 ci: Version Packages (#11339)
• 4c7cdbb fix(query-persist-client-core): restore falsy storage values (#11509)
• 58ad3e2 fix: isolate TypeScript test output (#11503)
• 2969edf ci: Version Packages (#11316)
• 2eb3c7c ci: Version Packages (#11313)
• 714df67 ci: Version Packages (#11306)
• 1836e61 ci: Version Packages (#11303)
• 51f12db ci: Version Packages (#11294)
• 730b3aa ci: Version Packages (#11276)
• Additional commits viewable in

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository: Noveum/orbit/.coderabbit.yaml

Review profile: CHILL

Plan: Advanced

Run ID: 650b2c42-fb1e-495c-99c4-0906f3123cdb

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Thanks for your first pull request to Orbit.

Two things that will save you a review round: bun run verify runs the
same four checks CI does, and the repo has no comments in code by policy,
so bun run check-comments will flag any you added out of habit.

A maintainer will review this shortly. Ask anything on the thread.

[imshashank]

This replacement still has the build failures flagged on #475: Better Auth no longer exports the MCP helpers we import. Local typechecking also fails on MCP/Zod schemas and incompatible ProseMirror copies. Please split the compatible updates from packages that need migration work, align the dependency overrides, and rerun all checks. We should not merge this group while auth and MCP are broken.

[imshashank]

Rechecked the updated head and the completed CI logs. Build and both browser suites still fail because Better Auth no longer exports mcp and oAuthProtectedResourceMetadata, and the dependency deduplication check also fails. Please separate compatible updates from the auth, MCP and editor migrations, align the overrides and rerun all checks. This is still blocked for the reasons in the earlier review.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.