Skip to content

chore(deps): bump the dependencies group across 1 directory with 11 updates - #21

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-c89753ef40
Open

chore(deps): bump the dependencies group across 1 directory with 11 updates#21
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-c89753ef40

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 21, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the dependencies group with 11 updates in the / directory:

Package From To
@openuidev/react-ui 0.16.3 0.18.1
next 16.4.0 16.4.2
react 19.2.3 19.3.1
react-dom 19.2.3 19.3.1
zod 4.6.5 4.6.7
@openuidev/cli 0.5.0 0.6.0
@playwright/test 1.63.0 1.64.1
eslint-config-next 16.3.0 16.4.2
jsdom 30.1.2 30.1.3
prettier 3.9.9 3.9.10
vitest 5.0.3 5.0.5

Updates @openuidev/react-ui from 0.16.3 to 0.18.1

Release notes

Sourced from @​openuidev/react-ui's releases.

@​openuidev/react-ui@​0.18.1

Patch Changes

  • #1327 86da07f Thanks @​shubham-thesys! - Refresh the AgentInterface shell: a collapsed sidebar rail with a History menu and a draggable, remembered width; a pill composer and a shared ~72ch reading column; a centred welcome screen with starter tabs and a card starter variant; AgentInterface.ThreadHeader gains start / center / end slots, the chat title and a Rename/Delete menu; a Rename option in the thread menu; a shared menu style for Select, ModelSwitcher and dropdowns; a mascot loader in place of the dot-matrix loader; an exported WelcomeMascot (blinks, follows the cursor, squishes on click); an AgentInterface.SidebarFooter slot with AgentInterface.ThemeModeToggle, backed by the new useThemeModePreference hook; a redesigned tool call timeline with animated tool glyphs, plain-language labels (toolLabel, ToolLabelsProvider) and a live "Working" row; defaultLabel is deprecated in favour of toolLabel; and server-rendering support: the saved sidebar and theme preferences are restored just after hydration, before paint, with the interface's contents hidden until then so the first visible frame is already correct.

  • #1394 5186585 Thanks @​Aditya-thesys! - Update the README for OpenUI Lang 1.0: working snippets and links to the new docs pages.

  • Updated dependencies [5186585, 86da07f]:

    • @​openuidev/react-lang@​1.0.1
    • @​openuidev/react-headless@​0.18.1

@​openuidev/react-ui@​0.18.0

Minor Changes

  • #1348 9e76b1d Thanks @​Aditya-thesys! - Add custom actions: defineAction({ name, description, params }) plus createLibrary({ actions }). Programs use them like the built-in steps, alone or in Action([...]), for example Button("Copy", @CopyToClipboard(order.id)), with positional arguments in params key order. On click the step reaches the host onAction as { type: name, params } (schema defaults applied), in order with the other steps, and the event is typed from the library so params narrows by type. Args are validated like library function args, and a step with invalid args is a no-op. Only a real call produces a custom step: a plan read from data (an object literal, $state, an @Each item) loses its custom steps, and a legacy action object whose type names a custom action is ignored. library.toJSONSchema() lists actions under actions, the prompt lists them with the built-in action steps, and toSpec() includes them. The React Renderer and the server autofix parser pick them up automatically, and the react-ui Button validates its form before a custom action.

    Types: the exported ActionStep union adds { type: "custom_action"; name; params }, so a switch over ActionStep types needs a case for it.

    In react-ui, AgentInterface takes onAction, which receives the actions the chat does not handle itself, such as custom actions.

    The built-in steps (@Run, @ToAssistant, @OpenUrl, @Set, @Reset) are now defined like custom actions and live in the same call registry, so their prompt lines are generated too (for example @OpenUrl(url: string)). ACTION_NAMES is removed.

    A defined action has a .ref for slots that take only some actions, for example share: z.union([copy.ref, steps.OpenUrl.ref]).optional(): the prompt signature prints share?: @CopyToClipboard | @OpenUrl, and the JSON gets a CopyToClipboard $defs entry { type: "CopyToClipboard", params }.

  • #1348 9e76b1d Thanks @​Aditya-thesys! - OpenUI Lang 1.0.

    • Upgrade @openuidev/lang-core and @openuidev/react-lang together, and together with the server that generates the system prompt. A 1.0 prompt teaches bare action steps (@ToAssistant("Hi") without Action([...])), which a 0.x client does not run.
    • react-ui 0.18 requires react-lang 1.0 (peer >=1.0.0 <2.0.0); upgrade them together.
    • browser-bundle 0.2 bundles react-lang 1.0 and react-ui 0.18.
    • server 0.3 uses lang-core 1.0 for autofix (parser and system prompt); stay on server 0.2 with a 0.x client. Autofix ignores warnings and accepts a ternary entry, so a program that renders does not start a fix round.
    • vue-lang, svelte-lang and angular-lang stay on 0.4 (OpenUI Lang 0.x). Keep @openuidev/lang-core ^0.4 for the prompts they render.
    • A program whose root statement is written last shows nothing while it streams, until the root line arrives. Write root first, as the system prompt asks.
    • A cut-off output that never reached its root statement, or any statement calling the root component, now renders blank instead of a partial tree.

Patch Changes

  • #1348 9e76b1d Thanks @​Aditya-thesys! - Action steps are plans. Every step call now evaluates to a one-step plan ({ steps: [step] }), so a single step needs no wrapper: Button("Ask", @ToAssistant("Tell me more")). Several steps still need Action([...]), for example Button("Save", Action([@Set($saved, true), @ToAssistant("Saved")])); a plain list of steps stays a plain array. An invalid step evaluates to an empty plan (a no-op) instead of null, and Action([...]) flattens nested plans. Legacy { type, params } action configs are unchanged.

    New action() helper (lang-core, re-exported by react-lang), like reactive(): it returns the action prop schema, already tagged ActionExpression, so libraries write action: action().optional() instead of calling tagSchemaId(..., "ActionExpression") themselves. react-ui's action props use it.

    Prompt change: for libraries with action props (ActionExpression), the system prompt teaches one step bare and several steps in Action([...]). The react-ui prompt examples, including the chat library examples, use step calls instead of legacy objects.

  • #1348 9e76b1d Thanks @​Aditya-thesys! - Stored messages and Cloud responses whose second content line starts mid-line, after a cut-off first attempt, read the second attempt, as before.

  • #1348 9e76b1d Thanks @​Aditya-thesys! - parseMessage reads a content line that starts mid-line as a new content section, so a regenerated response wins over the cut-off one, also while streaming. react-lang and react-ui drop their own copies of this step, and a Cloud response keeps the second attempt's scripts.

  • #1348 9e76b1d Thanks @​Aditya-thesys! - OpenUI 1.0 review fixes:

    • lang-core: the built-in functions prompt no longer uses react-ui's Col in its @Each example, and names Query only when tool calls are on.
    • lang-core: JSONSchemaDef adds type and anyOf, so the CLI's spec for a library that uses action() passes to generateSystemPrompt without a cast.
    • react-ui: the chat prompt's button rules name @ToAssistant and @OpenUrl.

... (truncated)

Changelog

Sourced from @​openuidev/react-ui's changelog.

0.18.1

Patch Changes

  • #1327 86da07f Thanks @​shubham-thesys! - Refresh the AgentInterface shell: a collapsed sidebar rail with a History menu and a draggable, remembered width; a pill composer and a shared ~72ch reading column; a centred welcome screen with starter tabs and a card starter variant; AgentInterface.ThreadHeader gains start / center / end slots, the chat title and a Rename/Delete menu; a Rename option in the thread menu; a shared menu style for Select, ModelSwitcher and dropdowns; a mascot loader in place of the dot-matrix loader; an exported WelcomeMascot (blinks, follows the cursor, squishes on click); an AgentInterface.SidebarFooter slot with AgentInterface.ThemeModeToggle, backed by the new useThemeModePreference hook; a redesigned tool call timeline with animated tool glyphs, plain-language labels (toolLabel, ToolLabelsProvider) and a live "Working" row; defaultLabel is deprecated in favour of toolLabel; and server-rendering support: the saved sidebar and theme preferences are restored just after hydration, before paint, with the interface's contents hidden until then so the first visible frame is already correct.

  • #1394 5186585 Thanks @​Aditya-thesys! - Update the README for OpenUI Lang 1.0: working snippets and links to the new docs pages.

  • Updated dependencies [5186585, 86da07f]:

    • @​openuidev/react-lang@​1.0.1
    • @​openuidev/react-headless@​0.18.1

0.18.0

Minor Changes

  • #1348 9e76b1d Thanks @​Aditya-thesys! - Add custom actions: defineAction({ name, description, params }) plus createLibrary({ actions }). Programs use them like the built-in steps, alone or in Action([...]), for example Button("Copy", @CopyToClipboard(order.id)), with positional arguments in params key order. On click the step reaches the host onAction as { type: name, params } (schema defaults applied), in order with the other steps, and the event is typed from the library so params narrows by type. Args are validated like library function args, and a step with invalid args is a no-op. Only a real call produces a custom step: a plan read from data (an object literal, $state, an @Each item) loses its custom steps, and a legacy action object whose type names a custom action is ignored. library.toJSONSchema() lists actions under actions, the prompt lists them with the built-in action steps, and toSpec() includes them. The React Renderer and the server autofix parser pick them up automatically, and the react-ui Button validates its form before a custom action.

    Types: the exported ActionStep union adds { type: "custom_action"; name; params }, so a switch over ActionStep types needs a case for it.

    In react-ui, AgentInterface takes onAction, which receives the actions the chat does not handle itself, such as custom actions.

    The built-in steps (@Run, @ToAssistant, @OpenUrl, @Set, @Reset) are now defined like custom actions and live in the same call registry, so their prompt lines are generated too (for example @OpenUrl(url: string)). ACTION_NAMES is removed.

    A defined action has a .ref for slots that take only some actions, for example share: z.union([copy.ref, steps.OpenUrl.ref]).optional(): the prompt signature prints share?: @CopyToClipboard | @OpenUrl, and the JSON gets a CopyToClipboard $defs entry { type: "CopyToClipboard", params }.

  • #1348 9e76b1d Thanks @​Aditya-thesys! - OpenUI Lang 1.0.

    • Upgrade @openuidev/lang-core and @openuidev/react-lang together, and together with the server that generates the system prompt. A 1.0 prompt teaches bare action steps (@ToAssistant("Hi") without Action([...])), which a 0.x client does not run.
    • react-ui 0.18 requires react-lang 1.0 (peer >=1.0.0 <2.0.0); upgrade them together.
    • browser-bundle 0.2 bundles react-lang 1.0 and react-ui 0.18.
    • server 0.3 uses lang-core 1.0 for autofix (parser and system prompt); stay on server 0.2 with a 0.x client. Autofix ignores warnings and accepts a ternary entry, so a program that renders does not start a fix round.
    • vue-lang, svelte-lang and angular-lang stay on 0.4 (OpenUI Lang 0.x). Keep @openuidev/lang-core ^0.4 for the prompts they render.
    • A program whose root statement is written last shows nothing while it streams, until the root line arrives. Write root first, as the system prompt asks.
    • A cut-off output that never reached its root statement, or any statement calling the root component, now renders blank instead of a partial tree.

Patch Changes

  • #1348 9e76b1d Thanks @​Aditya-thesys! - Action steps are plans. Every step call now evaluates to a one-step plan ({ steps: [step] }), so a single step needs no wrapper: Button("Ask", @ToAssistant("Tell me more")). Several steps still need Action([...]), for example Button("Save", Action([@Set($saved, true), @ToAssistant("Saved")])); a plain list of steps stays a plain array. An invalid step evaluates to an empty plan (a no-op) instead of null, and Action([...]) flattens nested plans. Legacy { type, params } action configs are unchanged.

    New action() helper (lang-core, re-exported by react-lang), like reactive(): it returns the action prop schema, already tagged ActionExpression, so libraries write action: action().optional() instead of calling tagSchemaId(..., "ActionExpression") themselves. react-ui's action props use it.

    Prompt change: for libraries with action props (ActionExpression), the system prompt teaches one step bare and several steps in Action([...]). The react-ui prompt examples, including the chat library examples, use step calls instead of legacy objects.

  • #1348 9e76b1d Thanks @​Aditya-thesys! - Stored messages and Cloud responses whose second content line starts mid-line, after a cut-off first attempt, read the second attempt, as before.

  • #1348 9e76b1d Thanks @​Aditya-thesys! - parseMessage reads a content line that starts mid-line as a new content section, so a regenerated response wins over the cut-off one, also while streaming. react-lang and react-ui drop their own copies of this step, and a Cloud response keeps the second attempt's scripts.

  • #1348 9e76b1d Thanks @​Aditya-thesys! - OpenUI 1.0 review fixes:

    • lang-core: the built-in functions prompt no longer uses react-ui's Col in its @Each example, and names Query only when tool calls are on.

... (truncated)

Commits
  • eb20708 chore: version packages (#1395)
  • 5186585 lang-core, react-lang, react-ui, browser-bundle: README for 1.0 (#1394)
  • 86da07f AgentInterface: collapsed rail, pill composer, ChatHeader and welcome refresh...
  • f7109dd chore: version packages (#1389)
  • 9e76b1d OpenUI 1.0 (#1348)
  • 99888a5 chore: version packages (#1344)
  • 497681e fix: widen react-lang peer windows to <0.5.0 (#1343)
  • f57ebe9 chore: version packages (#1257)
  • d51a09c perf(react-ui): search only the labels that widen a scrolling chart's categor...
  • dd4f450 fix(react-ui): refactor step curve, scrolling x-axis labels, donut and radar ...
  • Additional commits viewable in compare view

Updates next from 16.4.0 to 16.4.2

Release notes

Sourced from next's releases.

v16.4.2

What's Changed

Full Changelog: vercel/next.js@v16.4.1...v16.4.2

v16.4.1

This release contains security fixes for the following advisories:

Critical:

High:

Commits
  • 2864b17 v16.4.2
  • a42cb59 Revert "[lts-active] Keep requests through middleware in a single OpenTelemet...
  • f0760ec [lts-active] Backport additional documentation fixes since v16.4.0 (#100262)
  • 845007a [lts-active] Fix Turbopack lazy dynamic-import chunk-list collisions (#100211)
  • 6a79d8a [lts-active] Backport docs fixes since v16.4.0 (#100246)
  • a75a782 [lts-active] Keep requests through middleware in a single OpenTelemetry trace...
  • 8ad8524 [lts-active] Turbopack: Ignore realpath errors during module resolution, matc...
  • 29d030e [lts-active] [turbopack] Fix two GC paths that leave half-torn-down dependenc...
  • 3e50b82 [lts-active] fix(next-code-frame): snap visible window to char boundaries (#1...
  • 9458fb9 [lts-active] Turbopack: backport Pages Router dev module graph chaining (#988...
  • Additional commits viewable in compare view

Updates react from 19.2.3 to 19.3.1

Release notes

Sourced from react's releases.

19.3.1 (October 14th, 2026)

React Server Components

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

New React DOM Features

  • browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
    • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

All Changes

React

  • Fast Refresh Fixes
  • Performance Track Fixes
    • Prevent crash when accessing $$typeof in Performance Tracks (@​eps1lon #35679)
    • Handle non-string function names in Performance Tracks (@​eps1lon #35659)
    • Use minus (-) instead of en dash for removed props in Performance Tracks (@​eps1lon #35649)
    • Handle arrays with bigints in deep objects in Performance Tracks (@​eps1lon #35648)
    • Don't enumerate typed array props in Performance Tracks in DEV (@​UditDewan #36913)
    • Bail out of diffing wide objects and arrays in Performance Tracks (@​eps1lon #34742)
    • Clear potentially large performance measures in DEV (@​hoxyq #34803)
    • Fix missing else branch for renders with no props change in Performance Tracks (@​hoxyq #34837)
  • Activity Fixes

... (truncated)

Changelog

Sourced from react's changelog.

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

  • browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
    • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

All Changes

React

... (truncated)

Commits

@dependabot
chore(deps): bump the dependencies group across 1 directory with 11 u…
38b0271 
…pdates

Bumps the dependencies group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@openuidev/react-ui](https://github.com/thesysdev/openui/tree/HEAD/packages/react-ui) | `0.16.3` | `0.18.1` |
| [next](https://github.com/vercel/next.js) | `16.4.0` | `16.4.2` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.3` | `19.3.1` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.3` | `19.3.1` |
| [zod](https://github.com/colinhacks/zod) | `4.6.5` | `4.6.7` |
| [@openuidev/cli](https://github.com/thesysdev/openui/tree/HEAD/packages/openui-cli) | `0.5.0` | `0.6.0` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.63.0` | `1.64.1` |
| [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.3.0` | `16.4.2` |
| [jsdom](https://github.com/jsdom/jsdom) | `30.1.2` | `30.1.3` |
| [prettier](https://github.com/prettier/prettier) | `3.9.9` | `3.9.10` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.3` | `5.0.5` |



Updates `@openuidev/react-ui` from 0.16.3 to 0.18.1
- [Release notes](https://github.com/thesysdev/openui/releases)
- [Changelog](https://github.com/thesysdev/openui/blob/main/packages/react-ui/CHANGELOG.md)
- [Commits](https://github.com/thesysdev/openui/commits/@openuidev/react-ui@0.18.1/packages/react-ui)

Updates `next` from 16.4.0 to 16.4.2
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.4.0...v16.4.2)

Updates `react` from 19.2.3 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react)

Updates `react-dom` from 19.2.3 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom)

Updates `zod` from 4.6.5 to 4.6.7
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.6.5...v4.6.7)

Updates `@openuidev/cli` from 0.5.0 to 0.6.0
- [Release notes](https://github.com/thesysdev/openui/releases)
- [Changelog](https://github.com/thesysdev/openui/blob/main/packages/openui-cli/CHANGELOG.md)
- [Commits](https://github.com/thesysdev/openui/commits/@openuidev/cli@0.6.0/packages/openui-cli)

Updates `@playwright/test` from 1.63.0 to 1.64.1
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.63.0...v1.64.1)

Updates `eslint-config-next` from 16.3.0 to 16.4.2
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](https://github.com/vercel/next.js/commits/v16.4.2/packages/eslint-config-next)

Updates `jsdom` from 30.1.2 to 30.1.3
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Commits](jsdom/jsdom@v30.1.2...v30.1.3)

Updates `prettier` from 3.9.9 to 3.9.10
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.9...3.9.10)

Updates `vitest` from 5.0.3 to 5.0.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/vitest)

---
updated-dependencies:
- dependency-name: "@openuidev/react-ui"
  dependency-version: 0.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: next
  dependency-version: 16.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: react
  dependency-version: 19.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: react-dom
  dependency-version: 19.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: zod
  dependency-version: 4.6.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@openuidev/cli"
  dependency-version: 0.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@playwright/test"
  dependency-version: 1.64.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: eslint-config-next
  dependency-version: 16.4.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: jsdom
  dependency-version: 30.1.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: prettier
  dependency-version: 3.9.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: vitest
  dependency-version: 5.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 21, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants