build(deps): bump the production-dependencies group across 1 directory with 26 updates by dependabot[bot] · Pull Request #7316 · facebook/astryx

dependabot · 2026-10-10T20:16:43Z

Bumps the production-dependencies group with 26 updates in the / directory:

Package	From	To
@testing-library/user-event	`14.6.1`	`14.6.7`
react	`19.2.7`	`19.3.0`
react-dom	`19.2.7`	`19.3.0`
@modelcontextprotocol/sdk	`1.30.0`	`1.32.1`
lucide-react	`1.23.0`	`1.53.0`
monaco-editor	`0.55.1`	`0.57.0`
next	`16.3.6`	`16.4.0`
recharts	`3.9.2`	`3.10.1`
zod	`4.4.3`	`4.6.5`
autoprefixer	`10.5.2`	`10.6.1`
@stylexjs/stylex	`0.19.0`	`0.19.1`
@stylexjs/babel-plugin	`0.19.0`	`0.19.1`
@stylexjs/postcss-plugin	`0.19.0`	`0.19.1`
vite	`8.1.3`	`8.3.3`
unplugin	`3.3.0`	`3.4.0`
vega	`6.2.0`	`6.4.0`
browserslist	`4.28.4`	`4.29.3`
lightningcss	`1.32.0`	`1.33.0`
ignore	`7.0.5`	`7.0.12`
jscodeshift	`17.3.0`	`17.4.0`
postcss	`8.5.25`	`8.5.29`
postcss-selector-parser	`7.1.5`	`7.1.6`
recast	`0.23.21`	`0.24.0`
@testing-library/react	`16.3.2`	`16.3.3`
esbuild	`0.28.1`	`0.28.2`
prettier	`3.9.4`	`3.9.9`

Updates @testing-library/user-event from 14.6.1 to 14.6.7

Release notes

Sourced from @testing-library/user-event's releases.

v14.6.7

14.6.7 (2026-09-02)

Bug Fixes

normalize DataTransfer format aliases (#1326) (1e0020b)

feature: Add iframe support for user.keyboard typing (#1275) (1e0020b)

v14.6.6

14.6.6 (2026-08-22)

Bug Fixes

default pointer event pointerType to empty string instead of the string "undefined" (#1325) (71a5475)

v14.6.5

14.6.5 (2026-08-18)

Bug Fixes

tab retargeting if focus moved during keydown (#1296) (43efda7)

v14.6.4

14.6.4 (2026-08-11)

Bug Fixes

keyboard event repeat property (#1312) (d7e80e3)

v14.6.3

14.6.3 (2026-08-03)

Bug Fixes

release: manually release a patch version (#1321) (1d18b1f), closes #1317

v14.6.2

14.6.2 (2026-08-03)

Commits

1e0020b fix: normalize DataTransfer format aliases (#1326)
d4b0593 feature: Add iframe support for user.keyboard typing (#1275)
71a5475 fix: default pointer event pointerType to empty string instead of the string ...
43efda7 fix: tab retargeting if focus moved during keydown (#1296)
d7e80e3 fix: keyboard event repeat property (#1312)
43d8e6c ci: remove broken npm backfill step (#1322)
1d18b1f fix(release): manually release a patch version (#1321)
232f3e6 docs: add migration note and clean up README badges (#1320)
83e2b22 ci: remove deprecated CodeSandbox CI (#1318)
e8da819 ci: publish to npm via OIDC trusted publishing (#1317)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @testing-library/user-event since your current version.

Updates react from 19.2.7 to 19.3.0

Release notes

Sourced from react's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)

Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

Enable Trusted Types API integration (@rickhanlonii #35816)

Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)

Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@hoxyq, @eps1lon: #37104, #37203, #37491)

All Changes

React

Fast Refresh Fixes

Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@sophiebits #36965)

Fix Fast Refresh so edits to a memo() comparison function take effect (@sophiebits #36964)

Fix Fast Refresh crash when an edit changes the kind of a component's type (@sophiebits #36963)

Unify hot reload type resolution for Fast Refresh (@sophiebits #36962)

Fix Fast Refresh to remount correctly when an edit changes the component kind (@sophiebits #36950)

Double invoke effects in StrictMode after Fast Refresh (@eps1lon #35962)

Performance Track Fixes

Prevent crash when accessing $$typeof in Performance Tracks (@eps1lon #35679)

Handle non-string function names in Performance Tracks (@eps1lon #35659)

Use minus (-) instead of en dash for removed props in Performance Tracks (@eps1lon #35649)

Handle arrays with bigints in deep objects in Performance Tracks (@eps1lon #35648)

Don't enumerate typed array props in Performance Tracks in DEV (@UditDewan #36913)

Bail out of diffing wide objects and arrays in Performance Tracks (@eps1lon #34742)

Clear potentially large performance measures in DEV (@hoxyq #34803)

Fix missing else branch for renders with no props change in Performance Tracks (@hoxyq #34837)

Activity Fixes

Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@sophiebits #36947)

Hide portal contents when an Activity is hidden (@acdlite #35091)

Prevent metadata hoisting in hidden <Activity> trees (@ronnakamoto #34983)

Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@acdlite #35074)

Don't unhide a node if a direct parent Offscreen is still hidden (@sebmarkbage #34821)

Don't show internal <Offscreen> component in error messages (@rickhanlonii #35763)

Warn in DEV when a component appears to have been unblocked by a conditional use() (@hoxyq, @eps1lon: #37104, #37203, #37491)

Render transitions independently instead of entangling them into a single render (@acdlite #37290)

... (truncated)

Changelog

Sourced from react's changelog.

19.3.0 (September 9, 2026)

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)

Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

Enable Trusted Types API integration (@rickhanlonii #35816)

Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)

Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@hoxyq, @eps1lon: #37104, #37203, #37491)

All Changes

React

Fast Refresh Fixes

Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@sophiebits #36965)

Fix Fast Refresh so edits to a memo() comparison function take effect (@sophiebits #36964)

Fix Fast Refresh crash when an edit changes the kind of a component's type (@sophiebits #36963)

Unify hot reload type resolution for Fast Refresh (@sophiebits #36962)

Fix Fast Refresh to remount correctly when an edit changes the component kind (@sophiebits #36950)

Double invoke effects in StrictMode after Fast Refresh (@eps1lon #35962)

Performance Track Fixes

Prevent crash when accessing $$typeof in Performance Tracks (@eps1lon #35679)

Handle non-string function names in Performance Tracks (@eps1lon #35659)

Use minus (-) instead of en dash for removed props in Performance Tracks (@eps1lon #35649)

Handle arrays with bigints in deep objects in Performance Tracks (@eps1lon #35648)

Don't enumerate typed array props in Performance Tracks in DEV (@UditDewan #36913)

Bail out of diffing wide objects and arrays in Performance Tracks (@eps1lon #34742)

Clear potentially large performance measures in DEV (@hoxyq #34803)

Fix missing else branch for renders with no props change in Performance Tracks (@hoxyq #34837)

Activity Fixes

Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@sophiebits #36947)

Hide portal contents when an Activity is hidden (@acdlite #35091)

Prevent metadata hoisting in hidden <Activity> trees (@ronnakamoto #34983)

Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@acdlite #35074)

Don't unhide a node if a direct parent Offscreen is still hidden (@sebmarkbage #34821)

Don't show internal <Offscreen> component in error messages (@rickhanlonii #35763)

Warn in DEV when a component appears to have been unblocked by a conditional use() (@hoxyq, @eps1lon: #37104, #37203, #37491)

Render transitions independently instead of entangling them into a single render (@acdlite #37290)

Fix hang when updating a dehydrated boundary inside a hidden tree (@gaearon #37135)

Don't reacquire Host Singletons during dev effect validation (@gnoff #37113)

Only remove properties from Host Singletons on release (@gnoff #37112)

... (truncated)

Commits

2dc7da7 [test] Bump Jest to 30.4 (#37382)
4f93894 docs: remove stale parentType param from validateChildKeys JSDoc (#36928)
dbc3750 Update required references to GitHub repo (#36752)
900ae09 [flow] Bump flow to v0.317.0 (#36701)
fbb1370 [flow] Bump flow to v0.307.1 (#36199)
56922cf [react-native-renderer] Delete Paper (legacy) renderer (#36285)
74568e8 [Flight] Transport AggregateErrors.errors (#36156)
e66ef64 [tests] remove withoutStack from assertConsole helpers (#35498)
db71391 [Fiber] Instrument the lazy initializer thenable in all cases (#35521)
3e1abcc [tests] Require exact error messages in assertConsole helpers (#35497)
Additional commits viewable in compare view

Updates react-dom from 19.2.7 to 19.3.0

Release notes

Sourced from react-dom's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)

Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

Enable Trusted Types API integration (@rickhanlonii #35816)

Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)

Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@hoxyq, @eps1lon: #37104, #37203, #37491)

All Changes

React

Fast Refresh Fixes

Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@sophiebits #36965)

Fix Fast Refresh so edits to a memo() comparison function take effect (@sophiebits #36964)

Fix Fast Refresh crash when an edit changes the kind of a component's type (@sophiebits #36963)

Unify hot reload type resolution for Fast Refresh (@sophiebits #36962)

Fix Fast Refresh to remount correctly when an edit changes the component kind (@sophiebits #36950)

Double invoke effects in StrictMode after Fast Refresh (@eps1lon #35962)

Performance Track Fixes

Prevent crash when accessing $$typeof in Performance Tracks (@eps1lon #35679)

Handle non-string function names in Performance Tracks (@eps1lon #35659)

Use minus (-) instead of en dash for removed props in Performance Tracks (@eps1lon #35649)

Handle arrays with bigints in deep objects in Performance Tracks (@eps1lon #35648)

Don't enumerate typed array props in Performance Tracks in DEV (@UditDewan #36913)

Bail out of diffing wide objects and arrays in Performance Tracks (@eps1lon #34742)

Clear potentially large performance measures in DEV (@hoxyq #34803)

Fix missing else branch for renders with no props change in Performance Tracks (@hoxyq #34837)

Activity Fixes

Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@sophiebits #36947)

Hide portal contents when an Activity is hidden (@acdlite #35091)

Prevent metadata hoisting in hidden <Activity> trees (@ronnakamoto #34983)

Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@acdlite #35074)

Don't unhide a node if a direct parent Offscreen is still hidden (@sebmarkbage #34821)

Don't show internal <Offscreen> component in error messages (@rickhanlonii #35763)

Warn in DEV when a component appears to have been unblocked by a conditional use() (@hoxyq, @eps1lon: #37104, #37203, #37491)

Render transitions independently instead of entangling them into a single render (@acdlite #37290)

... (truncated)

Changelog

Sourced from react-dom's changelog.

19.3.0 (September 9, 2026)

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031Description has been truncated

vercel · 2026-10-10T20:16:46Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
astryx	Error		Oct 15, 2026 11:20am UTC

astracat-bot · 2026-10-10T20:17:09Z

AI review status for this pull request.

Review status	Updated
🟡 Reviewed (for maintainers only)	Oct 15, 2026, 11:41 AM UTC

astracat-bot

Thanks for the grouped dependency refresh — most of it stays inside the ranges Astryx already supports, and I did not find any component API change in it. A few issues in the resolved graph need fixing before this can land:

Two StyleX versions now coexist, and that already breaks a build. The catalog moves StyleX to 0.19.1, but the lockfile still resolves 0.19.0 for the core package and for the StyleX unplugin chain. Those copies have incompatible internal type tags, so the CLI strict typecheck in the Storybook build job is failing with duplicate-type errors. Please converge on a single StyleX/babel-plugin/shared version in the lockfile (or hold the StyleX bump here) and show that typecheck passing.
Published packages narrow their dependency ranges without saying so in release terms. The build, CLI, and all seven theme packages raise runtime floors (for example the themes' lucide-react floor), and the catalog raise also moves the vite peer the build package publishes. Under this repo's release rules, narrowing a previously supported range has to be classified and described for consumers, or not narrowed. Easiest path for most of these: keep the previous floor, since the existing caret ranges already allow the new versions the lockfile resolves — or add the changesets that classify each narrowed range.
The CLI's recast pin no longer matches its mirror. The CLI moves its exact recast pin to 0.24.0, while the workspace override still forces the shadcn-side transform it is meant to mirror onto the old version. Keeping those aligned is the stated purpose of that override, so please either hold recast in this PR or move both together with evidence the generated output is unchanged.

One already-failing check is not from this PR: the lint job's package-version gate is failing on a main-branch version declaration, and this diff touches no version field. Once the three items above are addressed and the remaining checks complete green, the private-app updates (React 19.3, Next, Monaco, and friends) look unobjectionable in range terms.

[Automated review]

github-actions · 2026-10-10T20:50:31Z

PR Analysis Report

Preview availability: Storybook and Sandbox are not both ready on the exact-head Vercel preview. CI concluded failure.

No new or modified components detected.

Bundle Size Summary

No component packages changed.

Accessibility Audit

Status: No accessibility violations detected.

Visual Regression

52 of 474 shot(s) changed.

A change here is a question, not a failure: check whether the after is the
picture you intended. Record that review on the PR. Baseline maintenance is an
explicit dispatch of CI; this report never rewrites the baseline or adds a release gate.

component	story	theme	mode	pixels
Selector	Indicator Space Bottom Sheet Narrow End RTL	neutral	light	754,077
Selector	Indicator Space Bottom Sheet Wide Start	neutral	light	740,188
Chat	Full AI Chat	probe	light	238,081
Chat	Full AI Chat	probe	dark	237,048
Markdown	Default	probe	light	159,625
Markdown	Default	probe	dark	158,986
Collapsible	Dividers	probe	dark	66,445
Collapsible	Dividers	probe	light	66,445
Chat	Default	neutral	dark	33,205
Chat	Default	neutral	light	32,876
Chat	Empty State	probe	light	23,531
Chat	Empty State	probe	dark	22,622
ChatAutoScroll	Scroll Behavior Comparison	neutral	dark	15,378
ChatAutoScroll	Scroll Behavior Comparison	neutral	light	14,107
Chat	With Attachments	probe	light	13,406
Chat	With Attachments	probe	dark	11,232
ProgressBar	With Target Mark	probe	dark	7,895
ProgressBar	With Target Mark	probe	light	7,895
TableRowExpansion	Detail Panel	neutral	dark	5,150
TableRowExpansion	Detail Panel	neutral	light	4,068

and 32 more.

_{Generated by PR Enrichment workflow | View full report}

astracat-bot

Thanks for the grouped dependency refresh — most of it stays inside the ranges Astryx already supports, and there is no component API change in it. A few issues in the resolved graph need fixing before this can land:

Two StyleX versions now coexist, and builds already fail because of it. The catalog moves StyleX to 0.19.1, but the lockfile still resolves 0.19.0 for core-linked packages and for the StyleX unplugin chain. Those copies have incompatible internal type tags, so the Storybook and docsite typechecks are failing. Please converge on a single StyleX/babel-plugin/shared version (or hold the StyleX bump here) and show those checks passing.
Published packages narrow their dependency ranges without release classification. The build, CLI, and all seven theme packages raise runtime floors (for example the themes' lucide-react floor), and the catalog raise also moves the vite peer the build package publishes. The lint changeset-coverage check is failing for exactly those nine packages. Easiest path for most: keep the previous floor, since the existing caret ranges already allow the new resolved versions — or add the changesets that classify each narrowed range for consumers.
The CLI's recast pin no longer matches its mirror. The CLI moves its exact recast pin to 0.24.0 while the workspace override still forces the shadcn-side transform it mirrors onto 0.23.21. Please either hold recast in this PR or move both together with evidence the generated output is unchanged.

Once those are addressed and the remaining checks finish green, the private-app updates (React 19.3, Next, Monaco, and friends) look unobjectionable in range terms.

[Automated review]

astracat-bot

Thanks for the grouped dependency refresh — most of it stays inside the ranges Astryx already supports, and there is no component API change in it. A few issues in the resolved graph need fixing before this can land:

Two StyleX versions now coexist in the lockfile. The catalog moves StyleX to 0.19.1, but other ranges and the StyleX unplugin chain still resolve 0.19.0, and those copies carry incompatible internal types — the same signature that failed typechecks on earlier revisions of this bump. Please converge on a single StyleX/Babel-plugin/shared version (or hold the StyleX bump here) and show the affected typechecks passing on the single-copy graph.
Published packages narrow their ranges without release classification. The build, CLI, and all seven theme packages raise dependency floors, and the catalog raise also moves the vite peer the build package publishes. The changeset-coverage lint is failing for exactly those nine packages. Easiest path for most: keep the previous floor, since the existing caret ranges already allow the new resolved versions — or add the changesets that classify each narrowed range for consumers.
The CLI's recast pin no longer matches its mirror. The CLI moves its exact recast pin to 0.24.0 while the workspace override still forces the shadcn-side transform it mirrors onto 0.23.21. Please either hold recast in this PR or move both together with evidence the generated output is unchanged.

Once those are addressed and the remaining checks finish green, the private-app updates (React 19.3, Next, Monaco, and friends) look unobjectionable in range terms.

[Automated review]

astracat-bot

Thanks for the dependency refresh; the private-app updates look fine, but this revision needs changes because the locked graph breaks builds and edits published ranges without release classification.

StyleX: the catalog moves StyleX to 0.19.1 while the core-linked packages and the @stylexjs/unplugin chain stay on 0.19.0, which fails the CLI strict typecheck and the docsite build with StyleXStyles mismatches, so please converge on one version (for example, also take @stylexjs/unplugin 0.19.1 and regenerate the StyleX capability registry) or hold the StyleX bump.
recast: the CLI's exact recast pin moves to 0.24.0 while the shadcn@4.19.0>recast override stays at 0.23.21, which fails pins every load-bearing transform dependency, so please keep 0.23.21 here or move the pin, the override and the test together with evidence that the output is unchanged.
Published ranges: the build, CLI and seven theme packages raise dependency floors without a Changeset (the changeset-coverage lint fails for exactly these), and the vite catalog raise narrows the build package's published vite peer to ^8.3.2, so please keep the previous floors, which already admit the new versions, or add Changesets that classify each change.

[Automated review]

astracat-bot · 2026-10-11T19:22:04Z

-  '@stylexjs/babel-plugin': ^0.19.0
-  '@stylexjs/postcss-plugin': ^0.19.0
+  vite: ^8.3.2
+  '@stylexjs/stylex': ^0.19.1


This moves only the catalog: consumers to StyleX 0.19.1. The lockfile still resolves 0.19.0 for packages/core's ^0.19.0 peer, for the >=0.10.0 peers of lab, charts and richtext, and through @stylexjs/unplugin 0.19.0, which depends on babel-plugin 0.19.0 exactly. The two copies carry unrelated StyleXClassNameTag types, so pnpm -F @astryxdesign/cli typecheck:strict fails with 163 StyleXStyles errors and the docsite build fails. Please converge on one version (take @stylexjs/unplugin 0.19.1, re-resolve, and regenerate internal/stylex-capabilities) or keep StyleX at 0.19.0 in this group.

astracat-bot · 2026-10-11T19:22:04Z

-  '@stylexjs/stylex': ^0.19.0
-  '@stylexjs/babel-plugin': ^0.19.0
-  '@stylexjs/postcss-plugin': ^0.19.0
+  vite: ^8.3.2


packages/build declares "vite": "catalog:" as an optional peer, so this raise changes the published @astryxdesign/build peer from ^8.1.3 to ^8.3.2 (confirmed with pnpm pack). That narrows a published range, which AST-017 FR12 says must either keep previously supported versions in range or be classified as breaking with a Changeset. The workspace can still lock vite 8.3.2 under ^8.1.3, so keeping the old floor is the simplest fix.

astracat-bot · 2026-10-11T19:22:04Z

-    "zod": "^4.4.3"
+    "postcss": "^8.5.28",
+    "postcss-selector-parser": "^7.1.6",
+    "recast": "0.24.0",


The shadcn@4.19.0>recast override in pnpm-workspace.yaml stays at 0.23.21, and its comment says it exists to keep shadcn's printer aligned with this exact pin. With 0.24.0 here, pins every load-bearing transform dependency (packages/cli/authoring/shadcn/source-variants.test.mjs) fails. Please keep 0.23.21 in this PR, or move this pin, the override and the test together with evidence that the receipt output is unchanged.

astracat-bot · 2026-10-11T19:22:04Z

  "dependencies": {
-    "autoprefixer": "^10.5.2",
-    "browserslist": "^4.28.4",
+    "autoprefixer": "^10.6.1",


This raises a published runtime floor, as do the edits in @astryxdesign/cli and the seven theme packages, without a Changeset. The changeset-coverage lint fails for exactly these nine packages, and AST-017 FR7 requires a generated dependency-range edit to be classified and named. The previous caret floors already admit every newly locked version, so keeping them avoids a consumer-facing change; otherwise, add Changesets that classify each package's update.

astracat-bot · 2026-10-11T19:22:04Z

-  prettier: ^3.9.3
-  esbuild: ^0.28.1
+  prettier: ^3.9.9
+  esbuild: ^0.28.2


Non-blocking: the esbuild: '>=0.28.1' override sets the specifier for the root and packages/build, so the lockfile stays on esbuild 0.28.1 and this catalog bump has no effect. Raise the override floor too if 0.28.2 is intended, or drop this edit.

astracat-bot

Thanks for the dependency refresh; the private-app updates look fine, but this revision needs changes because the locked graph breaks required checks and edits published ranges without release classification.

StyleX: the catalog moves to 0.19.1 while packages/core, lab, charts, richtext and the @stylexjs/unplugin chain stay on 0.19.0, which fails the CLI strict typecheck and the docsite build, so please take @stylexjs/unplugin 0.19.1 and re-resolve onto one version (regenerating internal/stylex-capabilities) or hold StyleX at 0.19.0.
recast: the CLI pins 0.24.0 while the shadcn@4.19.0>recast override stays at 0.23.21, which fails pins every load-bearing transform dependency, so please keep 0.23.21 or move the pin, the override and the test together with evidence that the output is unchanged.
Published ranges: build, cli and the seven themes raise dependency floors without a Changeset, the vite catalog raise narrows @astryxdesign/build's vite peer to ^8.3.3, and the themes' new lucide-react floor ships a redrawn calendar icon, so please keep the previous floors, which already admit the locked versions, or add Changesets that classify each change.

[Automated review]

astracat-bot · 2026-10-13T18:39:26Z

-  '@stylexjs/babel-plugin': ^0.19.0
-  '@stylexjs/postcss-plugin': ^0.19.0
+  vite: ^8.3.3
+  '@stylexjs/stylex': ^0.19.1


This moves only the catalog: consumers to StyleX 0.19.1. The lockfile still resolves 0.19.0 for packages/core's ^0.19.0 peer, the >=0.10.0 peers of lab, charts and richtext, packages/build's babel-plugin peer, and @stylexjs/unplugin 0.19.0 (which pins babel-plugin 0.19.0), so two unrelated StyleXClassNameTag types coexist and the CLI typecheck:strict (163 errors) and the docsite build fail. Please take @stylexjs/unplugin 0.19.1, re-resolve onto one version and regenerate internal/stylex-capabilities, or keep StyleX at 0.19.0 in this group.

astracat-bot · 2026-10-13T18:39:26Z

-  '@stylexjs/stylex': ^0.19.0
-  '@stylexjs/babel-plugin': ^0.19.0
-  '@stylexjs/postcss-plugin': ^0.19.0
+  vite: ^8.3.3


packages/build declares "vite": "catalog:" as an optional peer, so this raise changes the published @astryxdesign/build peer from ^8.1.3 to ^8.3.3 in the packed manifest. Narrowing a published range must keep previously supported versions in range or be classified as breaking with a Changeset and migration (AST-017 FR12). The lockfile can still hold vite 8.3.3 under ^8.1.3, so keeping the old floor is the simplest fix.

astracat-bot · 2026-10-13T18:39:26Z

-    "zod": "^4.4.3"
+    "postcss": "^8.5.29",
+    "postcss-selector-parser": "^7.1.6",
+    "recast": "0.24.0",


The 'shadcn@4.19.0>recast': 0.23.21 override in pnpm-workspace.yaml stays, and its comment says it keeps shadcn's printer aligned with this exact pin. With 0.24.0 here, pins every load-bearing transform dependency (packages/cli/authoring/shadcn/source-variants.test.mjs) fails. Please keep 0.23.21 in this PR, or move this pin, the override and the test together with evidence that receipt output is unchanged.

astracat-bot · 2026-10-13T18:39:26Z

  "dependencies": {
-    "autoprefixer": "^10.5.2",
-    "browserslist": "^4.28.4",
+    "autoprefixer": "^10.6.1",


This raises a published runtime floor, as do the edits in @astryxdesign/cli and the seven theme packages, and no Changeset names them; the changeset-coverage check fails for exactly these nine packages (AST-017 FR7). The previous caret floors already admit every newly locked version, so keeping them avoids a consumer-facing change; otherwise add Changesets that classify each package's update.

astracat-bot · 2026-10-13T18:39:26Z

  },
  "dependencies": {
-    "lucide-react": "^1.18.0"
+    "lucide-react": "^1.52.0"


With this floor every theme guarantees lucide-react 1.52.0, which redraws Calendar (outline and header line one unit higher, binding rings one unit shorter). It is the only one of the 29 lucide icons the themes use whose geometry changed, and the visual report shows it on DateInput, DateRangeInput and DateTimeInput. If the new floor stays, the theme Changesets should name the old and new calendar glyph (AST-017 FR3); keeping ^1.18.0 keeps that change out of this PR.

astracat-bot · 2026-10-13T18:39:26Z

-  prettier: ^3.9.3
-  esbuild: ^0.28.1
+  prettier: ^3.9.9
+  esbuild: ^0.28.2


Non-blocking: the esbuild: '>=0.28.1' override sets the specifier for the root and packages/build, so the lockfile stays on esbuild 0.28.1 and this catalog bump has no effect. Raise the override floor too if 0.28.2 is intended, or drop this edit.

dependabot · 2026-10-15T09:42:16Z

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

…y with 26 updates Bumps the production-dependencies group with 26 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@testing-library/user-event](https://github.com/testing-library/user-event) | `14.6.1` | `14.6.7` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.3.0` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.3.0` | | [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.30.0` | `1.32.1` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.23.0` | `1.53.0` | | [monaco-editor](https://github.com/microsoft/monaco-editor) | `0.55.1` | `0.57.0` | | [next](https://github.com/vercel/next.js) | `16.3.6` | `16.4.0` | | [recharts](https://github.com/recharts/recharts) | `3.9.2` | `3.10.1` | | [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.6.5` | | [autoprefixer](https://github.com/postcss/autoprefixer) | `10.5.2` | `10.6.1` | | [@stylexjs/stylex](https://github.com/facebook/stylex) | `0.19.0` | `0.19.1` | | [@stylexjs/babel-plugin](https://github.com/facebook/stylex) | `0.19.0` | `0.19.1` | | [@stylexjs/postcss-plugin](https://github.com/facebook/stylex) | `0.19.0` | `0.19.1` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.1.3` | `8.3.3` | | [unplugin](https://github.com/unjs/unplugin) | `3.3.0` | `3.4.0` | | [vega](https://github.com/vega/vega) | `6.2.0` | `6.4.0` | | [browserslist](https://github.com/browserslist/browserslist) | `4.28.4` | `4.29.3` | | [lightningcss](https://github.com/parcel-bundler/lightningcss) | `1.32.0` | `1.33.0` | | [ignore](https://github.com/kaelzhang/node-ignore) | `7.0.5` | `7.0.12` | | [jscodeshift](https://github.com/facebook/jscodeshift) | `17.3.0` | `17.4.0` | | [postcss](https://github.com/postcss/postcss) | `8.5.25` | `8.5.29` | | [postcss-selector-parser](https://github.com/postcss/postcss-selector-parser) | `7.1.5` | `7.1.6` | | [recast](https://github.com/benjamn/recast) | `0.23.21` | `0.24.0` | | [@testing-library/react](https://github.com/testing-library/react-testing-library) | `16.3.2` | `16.3.3` | | [esbuild](https://github.com/evanw/esbuild) | `0.28.1` | `0.28.2` | | [prettier](https://github.com/prettier/prettier) | `3.9.4` | `3.9.9` | Updates `@testing-library/user-event` from 14.6.1 to 14.6.7 - [Release notes](https://github.com/testing-library/user-event/releases) - [Changelog](https://github.com/testing-library/user-event/blob/main/CHANGELOG.md) - [Commits](testing-library/user-event@v14.6.1...v14.6.7) Updates `react` from 19.2.7 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react) Updates `react-dom` from 19.2.7 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom) Updates `@modelcontextprotocol/sdk` from 1.30.0 to 1.32.1 - [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases) - [Commits](modelcontextprotocol/typescript-sdk@1.30.0...1.32.1) Updates `lucide-react` from 1.23.0 to 1.53.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.53.0/packages/lucide-react) Updates `monaco-editor` from 0.55.1 to 0.57.0 - [Release notes](https://github.com/microsoft/monaco-editor/releases) - [Changelog](https://github.com/microsoft/monaco-editor/blob/main/CHANGELOG.md) - [Commits](microsoft/monaco-editor@v0.55.1...v0.57.0) Updates `next` from 16.3.6 to 16.4.0 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.3.6...v16.4.0) Updates `recharts` from 3.9.2 to 3.10.1 - [Release notes](https://github.com/recharts/recharts/releases) - [Changelog](https://github.com/recharts/recharts/blob/main/CHANGELOG.md) - [Commits](recharts/recharts@v3.9.2...v3.10.1) Updates `zod` from 4.4.3 to 4.6.5 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.4.3...v4.6.5) Updates `autoprefixer` from 10.5.2 to 10.6.1 - [Release notes](https://github.com/postcss/autoprefixer/releases) - [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md) - [Commits](postcss/autoprefixer@10.5.2...10.6.1) Updates `@stylexjs/stylex` from 0.19.0 to 0.19.1 - [Release notes](https://github.com/facebook/stylex/releases) - [Changelog](https://github.com/facebook/stylex/blob/main/CHANGELOG.md) - [Commits](facebook/stylex@0.19.0...0.19.1) Updates `@stylexjs/babel-plugin` from 0.19.0 to 0.19.1 - [Release notes](https://github.com/facebook/stylex/releases) - [Changelog](https://github.com/facebook/stylex/blob/main/CHANGELOG.md) - [Commits](facebook/stylex@0.19.0...0.19.1) Updates `@stylexjs/postcss-plugin` from 0.19.0 to 0.19.1 - [Release notes](https://github.com/facebook/stylex/releases) - [Changelog](https://github.com/facebook/stylex/blob/main/CHANGELOG.md) - [Commits](facebook/stylex@0.19.0...0.19.1) Updates `vite` from 8.1.3 to 8.3.3 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.3.3/packages/vite) Updates `unplugin` from 3.3.0 to 3.4.0 - [Release notes](https://github.com/unjs/unplugin/releases) - [Changelog](https://github.com/unjs/unplugin/blob/main/CHANGELOG.md) - [Commits](unjs/unplugin@v3.3.0...v3.4.0) Updates `vega` from 6.2.0 to 6.4.0 - [Release notes](https://github.com/vega/vega/releases) - [Commits](vega/vega@v6.2.0...v6.4.0) Updates `browserslist` from 4.28.4 to 4.29.3 - [Release notes](https://github.com/browserslist/browserslist/releases) - [Changelog](https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md) - [Commits](browserslist/browserslist@4.28.4...4.29.3) Updates `lightningcss` from 1.32.0 to 1.33.0 - [Release notes](https://github.com/parcel-bundler/lightningcss/releases) - [Commits](parcel-bundler/lightningcss@v1.32.0...v1.33.0) Updates `ignore` from 7.0.5 to 7.0.12 - [Release notes](https://github.com/kaelzhang/node-ignore/releases) - [Commits](kaelzhang/node-ignore@7.0.5...7.0.12) Updates `jscodeshift` from 17.3.0 to 17.4.0 - [Release notes](https://github.com/facebook/jscodeshift/releases) - [Changelog](https://github.com/facebook/jscodeshift/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/jscodeshift/commits) Updates `postcss` from 8.5.25 to 8.5.29 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.25...8.5.29) Updates `postcss-selector-parser` from 7.1.5 to 7.1.6 - [Release notes](https://github.com/postcss/postcss-selector-parser/releases) - [Changelog](https://github.com/postcss/postcss-selector-parser/blob/main/CHANGELOG.md) - [Commits](postcss/postcss-selector-parser@7.1.5...7.1.6) Updates `recast` from 0.23.21 to 0.24.0 - [Release notes](https://github.com/benjamn/recast/releases) - [Commits](benjamn/recast@v0.23.21...v0.24.0) Updates `@testing-library/react` from 16.3.2 to 16.3.3 - [Release notes](https://github.com/testing-library/react-testing-library/releases) - [Changelog](https://github.com/testing-library/react-testing-library/blob/main/CHANGELOG.md) - [Commits](testing-library/react-testing-library@v16.3.2...v16.3.3) Updates `esbuild` from 0.28.1 to 0.28.2 - [Release notes](https://github.com/evanw/esbuild/releases) - [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md) - [Commits](evanw/esbuild@v0.28.1...v0.28.2) Updates `prettier` from 3.9.4 to 3.9.9 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.9.4...3.9.9) --- updated-dependencies: - dependency-name: "@modelcontextprotocol/sdk" dependency-version: 1.32.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@stylexjs/babel-plugin" dependency-version: 0.19.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@stylexjs/postcss-plugin" dependency-version: 0.19.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@stylexjs/stylex" dependency-version: 0.19.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@testing-library/react" dependency-version: 16.3.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@testing-library/user-event" dependency-version: 14.6.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: autoprefixer dependency-version: 10.6.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: browserslist dependency-version: 4.29.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: esbuild dependency-version: 0.28.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: ignore dependency-version: 7.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: jscodeshift dependency-version: 17.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: lightningcss dependency-version: 1.33.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: lucide-react dependency-version: 1.51.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: monaco-editor dependency-version: 0.57.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: next dependency-version: 16.3.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: postcss dependency-version: 8.5.28 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: postcss-selector-parser dependency-version: 7.1.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: prettier dependency-version: 3.9.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: react dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: react-dom dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: recast dependency-version: 0.24.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: recharts dependency-version: 3.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: unplugin dependency-version: 3.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: vega dependency-version: 6.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: vite dependency-version: 8.3.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: zod dependency-version: 4.6.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

astracat-bot

Thanks for the dependency refresh; the private-app updates look fine, but this revision needs changes because the locked graph breaks required checks and edits published ranges without release classification.

StyleX: the catalog moves to 0.19.1 while packages/core, lab, charts, richtext and the @stylexjs/unplugin chain stay on 0.19.0, which breaks the CLI strict typecheck, the Storybook typecheck and the docsite build, so please take @stylexjs/unplugin 0.19.1 and re-resolve onto one version (regenerating internal/stylex-capabilities) or keep StyleX at 0.19.0 in this group.
recast: the CLI pins 0.24.0 while the shadcn@4.19.0>recast override stays at 0.23.21, which fails pins every load-bearing transform dependency, so please keep 0.23.21 or move the pin, the override and the test together with evidence that receipt output is unchanged.
Published ranges: build, cli and the seven themes raise dependency floors without a Changeset, and the vite catalog raise moves @astryxdesign/build's published vite peer from ^8.1.3 to ^8.3.3, so please keep the previous floors, which already admit the locked versions, or add Changesets that classify each change (the themes' new lucide-react floor also ships a redrawn calendar icon).

[Automated review]

astracat-bot · 2026-10-15T11:42:00Z

-  '@stylexjs/babel-plugin': ^0.19.0
-  '@stylexjs/postcss-plugin': ^0.19.0
+  vite: ^8.3.3
+  '@stylexjs/stylex': ^0.19.1


This moves only the catalog: consumers to StyleX 0.19.1. packages/core's ^0.19.0 peer, the >=0.10.0 peers of lab, charts and richtext, packages/build's babel-plugin peer and @stylexjs/unplugin 0.19.0 (which declares babel-plugin 0.19.0 exactly) stay on 0.19.0, so two unrelated StyleXClassNameTag types coexist and the CLI typecheck:strict (163 errors), the Storybook typecheck (154) and the docsite build fail. Please take @stylexjs/unplugin 0.19.1, re-resolve onto one version and regenerate internal/stylex-capabilities, or keep StyleX at 0.19.0 in this group.

astracat-bot · 2026-10-15T11:42:00Z

-  '@stylexjs/stylex': ^0.19.0
-  '@stylexjs/babel-plugin': ^0.19.0
-  '@stylexjs/postcss-plugin': ^0.19.0
+  vite: ^8.3.3


packages/build declares "vite": "catalog:" as an optional peer, so this raise changes the published @astryxdesign/build peer from ^8.1.3 (what 0.7.0 declares) to ^8.3.3 in the packed manifest. Raising a published range must keep previously supported versions in range or be classified as breaking with a migration (AST-017 FR12), and a breaking change cannot ship while main declares a patch. The lockfile can hold vite 8.3.3 under ^8.1.3, so keeping the old floor is the simplest fix.

astracat-bot · 2026-10-15T11:42:00Z

-    "zod": "^4.4.3"
+    "postcss": "^8.5.29",
+    "postcss-selector-parser": "^7.1.6",
+    "recast": "0.24.0",


The 'shadcn@4.19.0>recast': 0.23.21 override in pnpm-workspace.yaml stays, and its comment keeps shadcn's printer aligned with this exact pin. With 0.24.0 here, pins every load-bearing transform dependency (packages/cli/authoring/shadcn/source-variants.test.mjs) fails. Please keep 0.23.21 in this PR, or move this pin, the override and the test together with evidence that receipt output is unchanged.

astracat-bot · 2026-10-15T11:42:00Z

  "dependencies": {
-    "autoprefixer": "^10.5.2",
-    "browserslist": "^4.28.4",
+    "autoprefixer": "^10.6.1",


This raises a published runtime floor, as do the edits in @astryxdesign/cli and the seven theme packages, and no Changeset names them; the Changeset coverage check fails for exactly these nine packages (AST-017 FR7). The previous caret floors already admit every newly locked version, so keeping them avoids a consumer-facing change; otherwise add Changesets that classify each package's update.

astracat-bot · 2026-10-15T11:42:00Z

  },
  "dependencies": {
-    "lucide-react": "^1.18.0"
+    "lucide-react": "^1.53.0"


With this floor every theme guarantees lucide-react 1.53.0, which redraws Calendar (binding rings one unit shorter, outline and header line one unit higher). It is the only one of the 29 lucide icons the themes use whose geometry changed, and the visual report shows it on DateInput, DateRangeInput and DateTimeInput. If the new floor stays, the theme Changesets should name the old and new calendar glyph (AST-017 FR3); keeping ^1.18.0 keeps that change out of this PR.

astracat-bot · 2026-10-15T11:42:00Z

-  prettier: ^3.9.3
-  esbuild: ^0.28.1
+  prettier: ^3.9.9
+  esbuild: ^0.28.2


Non-blocking: the esbuild: '>=0.28.1' override sets the specifier for the root and packages/build, so the lockfile stays on esbuild 0.28.1 and this catalog bump has no effect. Raise the override floor too if 0.28.2 is intended, or drop this edit.

dependabot Bot requested review from cixzhang, imdreamrunner and josephfarina as code owners October 10, 2026 20:16

dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 10, 2026

meta-cla Bot added the CLA Signed This label is managed by the Meta Open Source bot. label Oct 10, 2026

vercel Bot had a problem deploying to Preview October 10, 2026 20:23 Failure

astracat-bot Bot suggested changes Oct 10, 2026

View reviewed changes

dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-a88ca3cb4a branch from 440c94e to d913987 Compare October 10, 2026 21:19

vercel Bot had a problem deploying to Preview October 10, 2026 21:25 Failure

astracat-bot Bot suggested changes Oct 10, 2026

View reviewed changes

dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-a88ca3cb4a branch from d913987 to 70f6c89 Compare October 10, 2026 22:02

vercel Bot had a problem deploying to Preview October 10, 2026 22:07 Failure

astracat-bot Bot suggested changes Oct 10, 2026

View reviewed changes

dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-a88ca3cb4a branch from 70f6c89 to 617b31c Compare October 11, 2026 18:32

vercel Bot had a problem deploying to Preview October 11, 2026 18:38 Failure

astracat-bot Bot suggested changes Oct 11, 2026

View reviewed changes

dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-a88ca3cb4a branch from 617b31c to 1fcda78 Compare October 13, 2026 04:42

vercel Bot had a problem deploying to Preview October 13, 2026 04:51 Failure

astracat-bot Bot suggested changes Oct 13, 2026

View reviewed changes

dependabot Bot changed the title ~~chore(deps): bump the production-dependencies group across 1 directory with 26 updates~~ build(deps): bump the production-dependencies group across 1 directory with 26 updates Oct 14, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-a88ca3cb4a branch from 1fcda78 to 09d5fc6 Compare October 14, 2026 15:35

vercel Bot had a problem deploying to Preview October 14, 2026 15:43 Failure

dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-a88ca3cb4a branch from 09d5fc6 to 90521a9 Compare October 15, 2026 11:12

vercel Bot had a problem deploying to Preview October 15, 2026 11:20 Failure

astracat-bot Bot suggested changes Oct 15, 2026

View reviewed changes

Conversation

dependabot Bot commented on behalf of github Oct 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v14.6.7

14.6.7 (2026-09-02)

Bug Fixes

v14.6.6

14.6.6 (2026-08-22)

Bug Fixes

v14.6.5

14.6.5 (2026-08-18)

Bug Fixes

v14.6.4

14.6.4 (2026-08-11)

Bug Fixes

v14.6.3

14.6.3 (2026-08-03)

Bug Fixes

v14.6.2

14.6.2 (2026-08-03)

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

Notable changes

All Changes

React

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

Notable changes

All Changes

React

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

Notable changes

All Changes

React

19.3.0 (September 9, 2026)

New React Features

Uh oh!

vercel Bot commented Oct 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

astracat-bot Bot commented Oct 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

astracat-bot Bot left a comment

Choose a reason for hiding this comment

Uh oh!

github-actions Bot commented Oct 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

PR Analysis Report

Bundle Size Summary

Accessibility Audit

Visual Regression

Uh oh!

astracat-bot Bot left a comment

Choose a reason for hiding this comment

Uh oh!

astracat-bot Bot left a comment

Choose a reason for hiding this comment

Uh oh!

astracat-bot Bot left a comment

Choose a reason for hiding this comment

Uh oh!

astracat-bot Bot Oct 11, 2026

Choose a reason for hiding this comment

Uh oh!

astracat-bot Bot Oct 11, 2026

Choose a reason for hiding this comment

Uh oh!

astracat-bot Bot Oct 11, 2026

Choose a reason for hiding this comment

Uh oh!

astracat-bot Bot Oct 11, 2026

Choose a reason for hiding this comment

Uh oh!

astracat-bot Bot Oct 11, 2026

Choose a reason for hiding this comment

dependabot Bot commented on behalf of github Oct 10, 2026 •

edited

Loading

vercel Bot commented Oct 10, 2026 •

edited

Loading

astracat-bot Bot commented Oct 10, 2026 •

edited

Loading

github-actions Bot commented Oct 10, 2026 •

edited

Loading