Skip to content

chore(deps): bump the npm-production group across 1 directory with 13 updates - #70

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-production-5aa268b82a
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-production-5aa268b82a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 21, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-production group with 13 updates in the / directory:

Package From To
@deck.gl/core 9.3.10 9.4.0
@deck.gl/layers 9.3.10 9.4.0
@deck.gl/mapbox 9.3.10 9.4.0
@tanstack/react-query 5.102.8 5.103.1
@tanstack/react-router 1.170.32 1.170.38
@tanstack/react-start 1.168.49 1.168.56
asn-blocklist 1.20260823.0 1.20260913.0
hono 4.13.5 4.13.8
react 19.2.8 19.3.0
react-dom 19.2.8 19.3.0
react-map-gl 8.1.2 8.1.3
tailwind-merge 3.6.0 3.7.0
zod 4.4.3 4.6.5

Updates @deck.gl/core from 9.3.10 to 9.4.0

Release notes

Sourced from @​deck.gl/core's releases.

v9.4.0

deck.gl v9.4 brings together a collection of completed improvements focused on performance, stability, and usability. Highlights include:

  • All layers go WebGPU: entire official layers catalog has been ported to WebGPU and achieves render parity with the WebGL version.
  • Natural controllers interaction: globe now supports pitch and bearing; trackpad gestures; and elastic navigation bounds makes complex 2D and 3D scenes easier to explore.
  • Responsive multi-view and multi-canvas layouts: make responsive dashboards and multi-view visualizations with ease.
  • Layers, extensions and widgets improvements: Sophisticated antialiasing, pattern fills, dashed-line styling, and tile loading features add stunning visuals.

Visit what's new for a detailed lists of new features.

v9.4.0-beta.4

  • chore: fix cjs build (#10651)
  • fix(layers): ScatterplotLayer antialiasing on webgpu (#10642)
  • fix(layers): sdf text outline in webgpu (#10640)
  • fix: export MapLibre integration and update peer ranges (#10645)

v9.4.0-beta.3

  • feat(extensions): procedural fill patterns (#10632)
  • fix(extensions): reduce pattern origin in fp64 to stop drift at high zoom (#10633)
  • feat(extensions): fillPatternSizeUnits (#10634)
  • fix(extensions): follow up FillStyleExtension flipY fix (#10629)
  • fix(fill-style): textureGrad for better mip selection (#10628)
  • feat(extensions): add dashUnits (#10583)
  • feat(extensions): add dashMode and whole-path justification (#10582)
  • fix(fill-style): correct pattern orientation by flipping texture y-axis (#10550)
  • feat: FillStyleExtension.getFillPatternBackgroundColor (#10618)
  • chore(deps): bump a5-js from 0.7.2 to 0.10.0 (#10620)
  • feat(extensions): prefilter dash coverage (#10581)
  • fix(extensions): align billboard, 3D, justified, and offset dashes (#10580)
  • fix(extensions): make PathStyle options optional (#10616)
  • CARTO: Remove dead code (moved to api-client) (#10617)
  • fix(core): rotate GlobeView like a ball through poles (#10598)
  • feat(core): support pointer-anchored zoom in GlobeView (#10385)
  • fix(core): compare viewport projection state in equals (#10611)
  • fix(extensions): omit dash uniforms for offset-only path styles (#10607)
  • fix(core): make attribute buffer cleanup idempotent (#10609)
  • feat(core): configure zoom anchors across controllers (#10595)

v9.4.0-beta.2

Intentionally skipped; no npm distribution was published.

v9.4.0-beta.1

  • feat(widgets): custom tooltip system for widget buttons (#10435)
  • feat(widgets): Replace custom SVG icons with Google Material Symbols (#10513)
  • fix(layers): type column geometry attributes (#10508)
  • fix(mapbox): ignore useDevicePixels in interleaved mode (#10510)
  • feat(aggregation-layers): port GridLayer to WebGPU (#10482)
  • feat(geo-layers): port TripsLayer to WebGPU (#10484)
  • feat(layers): port TextLayer glyph rendering to WebGPU (#10473)
  • fix(react): stabilize WebGPU device switching (#10506)

... (truncated)

Changelog

Sourced from @​deck.gl/core's changelog.

Change Log

All notable changes to deck.gl will be documented in this file.

For a human readable version, visit https://deck.gl/docs/upgrade-guide

deck.gl v9.4

deck.gl v9.4 Prereleases

deck.gl [v9.4.0-beta.4] - Sep 3 2026

  • chore: fix cjs build (#10651)
  • fix(layers): ScatterplotLayer antialiasing on webgpu (#10642)
  • fix(layers): sdf text outline in webgpu (#10640)
  • fix: export MapLibre integration and update peer ranges (#10645)

deck.gl [v9.4.0-beta.3] - Sep 2 2026

  • feat(extensions): procedural fill patterns (#10632)
  • fix(extensions): reduce pattern origin in fp64 to stop drift at high zoom (#10633)
  • feat(extensions): fillPatternSizeUnits (#10634)
  • fix(extensions): follow up FillStyleExtension flipY fix (#10629)
  • fix(fill-style): textureGrad for better mip selection (#10628)
  • feat(extensions): add dashUnits (#10583)
  • feat(extensions): add dashMode and whole-path justification (#10582)
  • fix(fill-style): correct pattern orientation by flipping texture y-axis (#10550)
  • feat: FillStyleExtension.getFillPatternBackgroundColor (#10618)
  • chore(deps): bump a5-js from 0.7.2 to 0.10.0 (#10620)
  • feat(extensions): prefilter dash coverage (#10581)
  • fix(extensions): align billboard, 3D, justified, and offset dashes (#10580)
  • fix(extensions): make PathStyle options optional (#10616)
  • CARTO: Remove dead code (moved to api-client) (#10617)
  • fix(core): rotate GlobeView like a ball through poles (#10598)
  • feat(core): support pointer-anchored zoom in GlobeView (#10385)
  • fix(core): compare viewport projection state in equals (#10611)
  • fix(extensions): omit dash uniforms for offset-only path styles (#10607)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​deck.gl/core since your current version.


Updates @deck.gl/layers from 9.3.10 to 9.4.0

Release notes

Sourced from @​deck.gl/layers's releases.

v9.4.0

deck.gl v9.4 brings together a collection of completed improvements focused on performance, stability, and usability. Highlights include:

  • All layers go WebGPU: entire official layers catalog has been ported to WebGPU and achieves render parity with the WebGL version.
  • Natural controllers interaction: globe now supports pitch and bearing; trackpad gestures; and elastic navigation bounds makes complex 2D and 3D scenes easier to explore.
  • Responsive multi-view and multi-canvas layouts: make responsive dashboards and multi-view visualizations with ease.
  • Layers, extensions and widgets improvements: Sophisticated antialiasing, pattern fills, dashed-line styling, and tile loading features add stunning visuals.

Visit what's new for a detailed lists of new features.

v9.4.0-beta.4

  • chore: fix cjs build (#10651)
  • fix(layers): ScatterplotLayer antialiasing on webgpu (#10642)
  • fix(layers): sdf text outline in webgpu (#10640)
  • fix: export MapLibre integration and update peer ranges (#10645)

v9.4.0-beta.3

  • feat(extensions): procedural fill patterns (#10632)
  • fix(extensions): reduce pattern origin in fp64 to stop drift at high zoom (#10633)
  • feat(extensions): fillPatternSizeUnits (#10634)
  • fix(extensions): follow up FillStyleExtension flipY fix (#10629)
  • fix(fill-style): textureGrad for better mip selection (#10628)
  • feat(extensions): add dashUnits (#10583)
  • feat(extensions): add dashMode and whole-path justification (#10582)
  • fix(fill-style): correct pattern orientation by flipping texture y-axis (#10550)
  • feat: FillStyleExtension.getFillPatternBackgroundColor (#10618)
  • chore(deps): bump a5-js from 0.7.2 to 0.10.0 (#10620)
  • feat(extensions): prefilter dash coverage (#10581)
  • fix(extensions): align billboard, 3D, justified, and offset dashes (#10580)
  • fix(extensions): make PathStyle options optional (#10616)
  • CARTO: Remove dead code (moved to api-client) (#10617)
  • fix(core): rotate GlobeView like a ball through poles (#10598)
  • feat(core): support pointer-anchored zoom in GlobeView (#10385)
  • fix(core): compare viewport projection state in equals (#10611)
  • fix(extensions): omit dash uniforms for offset-only path styles (#10607)
  • fix(core): make attribute buffer cleanup idempotent (#10609)
  • feat(core): configure zoom anchors across controllers (#10595)

v9.4.0-beta.2

Intentionally skipped; no npm distribution was published.

v9.4.0-beta.1

  • feat(widgets): custom tooltip system for widget buttons (#10435)
  • feat(widgets): Replace custom SVG icons with Google Material Symbols (#10513)
  • fix(layers): type column geometry attributes (#10508)
  • fix(mapbox): ignore useDevicePixels in interleaved mode (#10510)
  • feat(aggregation-layers): port GridLayer to WebGPU (#10482)
  • feat(geo-layers): port TripsLayer to WebGPU (#10484)
  • feat(layers): port TextLayer glyph rendering to WebGPU (#10473)
  • fix(react): stabilize WebGPU device switching (#10506)

... (truncated)

Changelog

Sourced from @​deck.gl/layers's changelog.

Change Log

All notable changes to deck.gl will be documented in this file.

For a human readable version, visit https://deck.gl/docs/upgrade-guide

deck.gl v9.4

deck.gl v9.4 Prereleases

deck.gl [v9.4.0-beta.4] - Sep 3 2026

  • chore: fix cjs build (#10651)
  • fix(layers): ScatterplotLayer antialiasing on webgpu (#10642)
  • fix(layers): sdf text outline in webgpu (#10640)
  • fix: export MapLibre integration and update peer ranges (#10645)

deck.gl [v9.4.0-beta.3] - Sep 2 2026

  • feat(extensions): procedural fill patterns (#10632)
  • fix(extensions): reduce pattern origin in fp64 to stop drift at high zoom (#10633)
  • feat(extensions): fillPatternSizeUnits (#10634)
  • fix(extensions): follow up FillStyleExtension flipY fix (#10629)
  • fix(fill-style): textureGrad for better mip selection (#10628)
  • feat(extensions): add dashUnits (#10583)
  • feat(extensions): add dashMode and whole-path justification (#10582)
  • fix(fill-style): correct pattern orientation by flipping texture y-axis (#10550)
  • feat: FillStyleExtension.getFillPatternBackgroundColor (#10618)
  • chore(deps): bump a5-js from 0.7.2 to 0.10.0 (#10620)
  • feat(extensions): prefilter dash coverage (#10581)
  • fix(extensions): align billboard, 3D, justified, and offset dashes (#10580)
  • fix(extensions): make PathStyle options optional (#10616)
  • CARTO: Remove dead code (moved to api-client) (#10617)
  • fix(core): rotate GlobeView like a ball through poles (#10598)
  • feat(core): support pointer-anchored zoom in GlobeView (#10385)
  • fix(core): compare viewport projection state in equals (#10611)
  • fix(extensions): omit dash uniforms for offset-only path styles (#10607)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​deck.gl/layers since your current version.


Updates @deck.gl/mapbox from 9.3.10 to 9.4.0

Release notes

Sourced from @​deck.gl/mapbox's releases.

v9.4.0

deck.gl v9.4 brings together a collection of completed improvements focused on performance, stability, and usability. Highlights include:

  • All layers go WebGPU: entire official layers catalog has been ported to WebGPU and achieves render parity with the WebGL version.
  • Natural controllers interaction: globe now supports pitch and bearing; trackpad gestures; and elastic navigation bounds makes complex 2D and 3D scenes easier to explore.
  • Responsive multi-view and multi-canvas layouts: make responsive dashboards and multi-view visualizations with ease.
  • Layers, extensions and widgets improvements: Sophisticated antialiasing, pattern fills, dashed-line styling, and tile loading features add stunning visuals.

Visit what's new for a detailed lists of new features.

v9.4.0-beta.4

  • chore: fix cjs build (#10651)
  • fix(layers): ScatterplotLayer antialiasing on webgpu (#10642)
  • fix(layers): sdf text outline in webgpu (#10640)
  • fix: export MapLibre integration and update peer ranges (#10645)

v9.4.0-beta.3

  • feat(extensions): procedural fill patterns (#10632)
  • fix(extensions): reduce pattern origin in fp64 to stop drift at high zoom (#10633)
  • feat(extensions): fillPatternSizeUnits (#10634)
  • fix(extensions): follow up FillStyleExtension flipY fix (#10629)
  • fix(fill-style): textureGrad for better mip selection (#10628)
  • feat(extensions): add dashUnits (#10583)
  • feat(extensions): add dashMode and whole-path justification (#10582)
  • fix(fill-style): correct pattern orientation by flipping texture y-axis (#10550)
  • feat: FillStyleExtension.getFillPatternBackgroundColor (#10618)
  • chore(deps): bump a5-js from 0.7.2 to 0.10.0 (#10620)
  • feat(extensions): prefilter dash coverage (#10581)
  • fix(extensions): align billboard, 3D, justified, and offset dashes (#10580)
  • fix(extensions): make PathStyle options optional (#10616)
  • CARTO: Remove dead code (moved to api-client) (#10617)
  • fix(core): rotate GlobeView like a ball through poles (#10598)
  • feat(core): support pointer-anchored zoom in GlobeView (#10385)
  • fix(core): compare viewport projection state in equals (#10611)
  • fix(extensions): omit dash uniforms for offset-only path styles (#10607)
  • fix(core): make attribute buffer cleanup idempotent (#10609)
  • feat(core): configure zoom anchors across controllers (#10595)

v9.4.0-beta.2

Intentionally skipped; no npm distribution was published.

v9.4.0-beta.1

  • feat(widgets): custom tooltip system for widget buttons (#10435)
  • feat(widgets): Replace custom SVG icons with Google Material Symbols (#10513)
  • fix(layers): type column geometry attributes (#10508)
  • fix(mapbox): ignore useDevicePixels in interleaved mode (#10510)
  • feat(aggregation-layers): port GridLayer to WebGPU (#10482)
  • feat(geo-layers): port TripsLayer to WebGPU (#10484)
  • feat(layers): port TextLayer glyph rendering to WebGPU (#10473)
  • fix(react): stabilize WebGPU device switching (#10506)

... (truncated)

Changelog

Sourced from @​deck.gl/mapbox's changelog.

Change Log

All notable changes to deck.gl will be documented in this file.

For a human readable version, visit https://deck.gl/docs/upgrade-guide

deck.gl v9.4

deck.gl v9.4 Prereleases

deck.gl [v9.4.0-beta.4] - Sep 3 2026

  • chore: fix cjs build (#10651)
  • fix(layers): ScatterplotLayer antialiasing on webgpu (#10642)
  • fix(layers): sdf text outline in webgpu (#10640)
  • fix: export MapLibre integration and update peer ranges (#10645)

deck.gl [v9.4.0-beta.3] - Sep 2 2026

  • feat(extensions): procedural fill patterns (#10632)
  • fix(extensions): reduce pattern origin in fp64 to stop drift at high zoom (#10633)
  • feat(extensions): fillPatternSizeUnits (#10634)
  • fix(extensions): follow up FillStyleExtension flipY fix (#10629)
  • fix(fill-style): textureGrad for better mip selection (#10628)
  • feat(extensions): add dashUnits (#10583)
  • feat(extensions): add dashMode and whole-path justification (#10582)
  • fix(fill-style): correct pattern orientation by flipping texture y-axis (#10550)
  • feat: FillStyleExtension.getFillPatternBackgroundColor (#10618)
  • chore(deps): bump a5-js from 0.7.2 to 0.10.0 (#10620)
  • feat(extensions): prefilter dash coverage (#10581)
  • fix(extensions): align billboard, 3D, justified, and offset dashes (#10580)
  • fix(extensions): make PathStyle options optional (#10616)
  • CARTO: Remove dead code (moved to api-client) (#10617)
  • fix(core): rotate GlobeView like a ball through poles (#10598)
  • feat(core): support pointer-anchored zoom in GlobeView (#10385)
  • fix(core): compare viewport projection state in equals (#10611)
  • fix(extensions): omit dash uniforms for offset-only path styles (#10607)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​deck.gl/mapbox since your current version.


Updates @tanstack/react-query from 5.102.8 to 5.103.1

Release notes

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-devtools@​5.103.1

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.103.1
    • @​tanstack/react-query@​5.103.1

@​tanstack/react-query-next-experimental@​5.103.1

Patch Changes

  • Updated dependencies []:
    • @​tanstack/react-query@​5.103.1

@​tanstack/react-query-persist-client@​5.103.1

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.103.1
    • @​tanstack/react-query@​5.103.1

@​tanstack/react-query@​5.103.1

Patch Changes

@​tanstack/react-query-devtools@​5.103.0

Patch Changes

  • #11501 9567367 - Declare dependencies used by the published devtools source and type declarations so they resolve with strict package managers. Keep runtime dependencies bundled in the compiled devtools.

    Declare the React types used by React Query Devtools as a peer dependency, compatible with React 18 and 19.

  • Updated dependencies [9567367]:

    • @​tanstack/query-devtools@​5.103.0
    • @​tanstack/react-query@​5.103.0

@​tanstack/react-query-next-experimental@​5.103.0

Patch Changes

  • Updated dependencies []:
    • @​tanstack/react-query@​5.103.0

@​tanstack/react-query-persist-client@​5.103.0

Patch Changes

  • Updated dependencies [4c7cdbb]:
    • @​tanstack/query-persist-client-core@​5.103.0
    • @​tanstack/react-query@​5.103.0

... (truncated)

Changelog

Sourced from @​tanstack/react-query's changelog.

5.103.1

Patch Changes

5.103.0

Patch Changes

Commits
  • c08f576 ci: Version Packages (#11511)
  • 19ccf27 ci: Version Packages (#11339)
  • 2da46cd chore(*): use eslint description syntax for grandfathered 'no-restricted-synt...
  • 58ad3e2 fix: isolate TypeScript test output (#11503)
  • d63afc7 Simplifed query methods/internal tests new lint (#11347)
  • 23fbdc3 test({react,preact,solid,angular}-query): remove 'fromGenericOptionsQueryFn' ...
  • 50680b9 test({react,preact,solid,svelte}-query,angular-query-experimental): rename 'm...
  • 0b326b6 test({react,preact}-query/useMutation): add tests for 'MutationFunctionContex...
  • a1119e5 ref(hydration): remove outdated dehydratedAt fallback (#11436)
  • 1a51bb8 docs(*): clarify 'Promise.all' only waits for all mutateAsync calls when they...
  • Additional commits viewable in compare view

Updates @tanstack/react-router from 1.170.32 to 1.170.38

Release notes

Sourced from @​tanstack/react-router's releases.

@​tanstack/react-router@​1.170.38

Patch Changes

@​tanstack/react-router@​1.170.37

Patch Changes

  • #8418 e561fa1 - deepEqual now takes its flags as positional arguments — deepEqual(a, b, partial?, explicitUndefined?) — instead of an options object. The router's hot callers (Link option stabilization and active-state checks, matchRoute) no longer allocate an options object per comparison, and the comparator reads two booleans instead of a polymorphic object. explicitUndefined replaces ignoreUndefined: false. deepEqual is an internal helper; it stays exported for compatibility of two-argument calls.

  • #8419 a1c8d1a - resolvePath (internal helper) now takes positional arguments — resolvePath(base, to, trailingSlash?, cache?) — so buildLocation and matchRoute no longer allocate an options object per path resolution.

  • #8204 cbbfbe3 - Stream large deferred SSR hydration payloads through a backpressure-aware router transport, fail known setup errors before response creation, and close cancelled or expired transforms safely.

    Start now cancels discarded middleware and HEAD response bodies, including plain streams and derived branches.

    Server-function raw streams share one ordered response. Arbitrary or sequential consumption can require potentially unbounded buffering of unread data on the client. Cancelling one raw stream discards it locally, while aborting the whole call cancels the response and server work. Consume streams concurrently, cancel unused streams promptly, or use separate calls when independent backpressure is required. A raw stream that exceeds its unread-byte limit now fails alone; sibling streams and the JSON result keep flowing.

    The JSON wire shape of a RawStream server-function argument changed. Clients and servers must run matching versions for requests that pass a RawStream.

    The frame-protocol constants (FRAME_TYPE_*, MAX_FRAME_PAYLOAD_SIZE, MAX_FRAMED_STREAMS) moved from the @tanstack/start-client-core root to the @tanstack/start-client-core/client-rpc subpath.

    Router requests whose Accept header allows neither text/html nor */* now receive 406 Not Acceptable instead of 500.

    Framework adapters share the body <Scripts> composition (getSsrBodyScriptParts, composeSsrBodyScripts) and the eager HTML response wrapper (renderSsrHtmlResponse) from @tanstack/router-core.

    Solid SSR now emits one document type and renders late lazy errors through route boundaries. A Solid <Await> without a fallback no longer holds the streamed shell; it renders inside the nearest <Suspense> boundary like React and Vue, and now renders falsy resolved values.

    Static server functions decode cached RawStream values with the client deserializer plugins.

    SSR Query integrations now keep request cleanup and stream ownership aligned with the router lifecycle.

  • #8420 8e164d2 - useLinkProps no longer calls through an internal wrapper. The host element Link renders on is an @internal overload parameter that is stripped from the published declarations, so the public useLinkProps(options, forwardedRef?) signature is unchanged.

  • Updated dependencies [bc80866, e561fa1, cbbfbe3, a1c8d1a, cbbfbe3, a0b2ad9, 1ca361b]:

    • @​tanstack/router-core@​1.171.31

@​tanstack/react-router@​1.170.36

Patch Changes

  • #8390 b747fb8 - Keep the Link location cache out of server bundles: buildLocation only creates, reads and writes it when isServer is false. Render React Links on the server without the extra prop copies and the forwarded-ref hook. Link SSR rendering is 20-40% faster in the Link benchmarks and the React Start SSR request loop about 7% faster.

    React activeProps and inactiveProps now follow one precedence rule on every link, including links whose destination is blocked for using a disallowed scheme: state props override element props, ref and event handlers, while href, disabled and target stay controlled by the router. Previously a blocked link ignored a ref or handler from its inactive props.

    React Link and useLinkProps split router options from element props with one key set on the client and the server. Element props pass through as given: external links forward them verbatim, falsy values included, and useLinkProps now returns children for router-controlled links as it already did for external ones.

  • #8324 6387d58 - Reuse hydration snapshot getters to avoid unnecessary store-instance effect updates when Links and other hydration-aware components rerender.

  • #8318 9b2adaf - Allow active and inactive Link props to override base element props in React and Solid while preserving class/style merging. Keep React's href, target, and disabled values controlled by routing options. Preserve Vue object and nested-array class bindings, including reactive updates and server rendering, without mutating cached bindings during VNode normalization.

... (truncated)

Changelog

Sourced from @​tanstack/react-router's changelog.

1.170.38

Patch Changes

1.170.37

Patch Changes

  • #8418 e561fa1 - deepEqual now takes its flags as positional arguments — deepEqual(a, b, partial?, explicitUndefined?) — instead of an options object. The router's hot callers (Link option stabilization and active-state checks, matchRoute) no longer allocate an options object per comparison, and the comparator reads two booleans instead of a polymorphic object. explicitUndefined replaces ignoreUndefined: false. deepEqual is an internal helper; it stays exported for compatibility of two-argument calls.

  • #8419 a1c8d1a - resolvePath (internal helper) now takes positional arguments — resolvePath(base, to, trailingSlash?, cache?) — so buildLocation and matchRoute no longer allocate an options object per path resolution.

  • #8204 cbbfbe3 - Stream large deferred SSR hydration payloads through a backpressure-aware router transport, fail known setup errors before response creation, and close cancelled or expired transforms safely.

    Start now cancels discarded middleware and HEAD response bodies, including plain streams and derived branches.

    Server-function raw streams share one ordered response. Arbitrary or sequential consumption can require potentially unbounded buffering of unread data on the client. Cancelling one raw stream discards it locally, while aborting the whole call cancels the response and server work. Consume streams concurrently, cancel unused streams promptly, or use separate calls when independent backpressure is required. A raw stream that exceeds its unread-byte limit now fails alone; sibling streams and the JSON result keep flowing.

    The JSON wire shape of a RawStream server-function argument changed. Clients and servers must run matching versions for requests that pass a RawStream.

    The frame-protocol constants (FRAME_TYPE_*, MAX_FRAME_PAYLOAD_SIZE, MAX_FRAMED_STREAMS) moved from the @tanstack/start-client-core root to the @tanstack/start-client-core/client-rpc subpath.

    Router requests whose Accept header allows neither text/html nor */* now receive 406 Not Acceptable instead of 500.

    Framework adapters share the body <Scripts> composition (getSsrBodyScriptParts, composeSsrBodyScripts) and the eager HTML response wrapper (renderSsrHtmlResponse) from @tanstack/router-core.

    Solid SSR now emits one document type and renders late lazy errors through route boundaries. A Solid <Await> without a fallback no longer holds the streamed shell; it renders inside the nearest <Suspense> boundary like React and Vue, and now renders falsy resolved values.

    Static server functions decode cached RawStream values with the client deserializer plugins.

    SSR Query integrations now keep request cleanup and stream ownership aligned with the router lifecycle.

  • #8420 8e164d2 - useLinkProps no longer calls through an internal wrapper. The host element Link renders on is an @internal overload parameter that is stripped from the published declarations, so the public useLinkProps(options, forwardedRef?) signature is unchanged.

  • Updated dependencies [bc80866, e561fa1, cbbfbe3, a1c8d1a, cbbfbe3, a0b2ad9, 1ca361b]:

    • @​tanstack/router-core@​1.171.31

1.170.36

Patch Changes

  • #8390 b747fb8 - Keep the Link location cache out of server bundles: buildLocation only creates, reads and writes it when isServer is false. Render React Links on the server without the extra prop copies and the forwarded-ref hook. Link SSR rendering is 20-40% faster in the Link benchmarks and the React Start SSR request loop about 7% faster.

    React activeProps and inactiveProps now follow one precedence rule on every link, including links whose destination is blocked for using a disallowed scheme: state props override element props, ref and event handlers, while href, disabled and target stay controlled by the router. Previously a blocked link ignored a ref or handler from its inactive props.

    React Link and useLinkProps split router options from element props with one key set on the client and the server. Element props pass through as given: external links forward them verbatim, falsy values included, and useLinkProps now returns children for router-controlled links as it already did for external ones.

... (truncated)

Commits

Updates @tanstack/react-start from 1.168.49 to 1.168.56

Release notes

Sourced from

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 21, 2026
@dependabot
dependabot Bot requested a review from RavelloH as a code owner September 21, 2026 01:10
@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Sep 21, 2026

Copy link
Copy Markdown
Contributor

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Updated (UTC)
✅ Deployment successful!
View logs
insightflare-demo 3dc60fd Sep 21 2026, 02:10 AM

… updates

Bumps the npm-production group with 13 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@deck.gl/core](https://github.com/visgl/deck.gl) | `9.3.10` | `9.4.0` |
| [@deck.gl/layers](https://github.com/visgl/deck.gl) | `9.3.10` | `9.4.0` |
| [@deck.gl/mapbox](https://github.com/visgl/deck.gl) | `9.3.10` | `9.4.0` |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.102.8` | `5.103.1` |
| [@tanstack/react-router](https://github.com/TanStack/router/tree/HEAD/packages/react-router) | `1.170.32` | `1.170.38` |
| [@tanstack/react-start](https://github.com/TanStack/router/tree/HEAD/packages/react-start) | `1.168.49` | `1.168.56` |
| [asn-blocklist](https://github.com/InsightFlare/asn-blocklist) | `1.20260823.0` | `1.20260913.0` |
| [hono](https://github.com/honojs/hono) | `4.13.5` | `4.13.8` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.0` |
| [react-map-gl](https://github.com/visgl/react-map-gl) | `8.1.2` | `8.1.3` |
| [tailwind-merge](https://github.com/dcastil/tailwind-merge/tree/HEAD/packages/tailwind-merge) | `3.6.0` | `3.7.0` |
| [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.6.5` |



Updates `@deck.gl/core` from 9.3.10 to 9.4.0
- [Release notes](https://github.com/visgl/deck.gl/releases)
- [Changelog](https://github.com/visgl/deck.gl/blob/master/CHANGELOG.md)
- [Commits](visgl/deck.gl@v9.3.10...v9.4.0)

Updates `@deck.gl/layers` from 9.3.10 to 9.4.0
- [Release notes](https://github.com/visgl/deck.gl/releases)
- [Changelog](https://github.com/visgl/deck.gl/blob/master/CHANGELOG.md)
- [Commits](visgl/deck.gl@v9.3.10...v9.4.0)

Updates `@deck.gl/mapbox` from 9.3.10 to 9.4.0
- [Release notes](https://github.com/visgl/deck.gl/releases)
- [Changelog](https://github.com/visgl/deck.gl/blob/master/CHANGELOG.md)
- [Commits](visgl/deck.gl@v9.3.10...v9.4.0)

Updates `@tanstack/react-query` from 5.102.8 to 5.103.1
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.103.1/packages/react-query)

Updates `@tanstack/react-router` from 1.170.32 to 1.170.38
- [Release notes](https://github.com/TanStack/router/releases)
- [Changelog](https://github.com/TanStack/router/blob/main/packages/react-router/CHANGELOG.md)
- [Commits](https://github.com/TanStack/router/commits/@tanstack/react-router@1.170.38/packages/react-router)

Updates `@tanstack/react-start` from 1.168.49 to 1.168.56
- [Release notes](https://github.com/TanStack/router/releases)
- [Changelog](https://github.com/TanStack/router/blob/main/packages/react-start/CHANGELOG.md)
- [Commits](https://github.com/TanStack/router/commits/@tanstack/react-start@1.168.56/packages/react-start)

Updates `asn-blocklist` from 1.20260823.0 to 1.20260913.0
- [Commits](InsightFlare/asn-blocklist@v1.20260823.0...v1.20260913.0)

Updates `hono` from 4.13.5 to 4.13.8
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.13.5...v4.13.8)

Updates `react` from 19.2.8 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react)

Updates `react-dom` from 19.2.8 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom)

Updates `react-map-gl` from 8.1.2 to 8.1.3
- [Release notes](https://github.com/visgl/react-map-gl/releases)
- [Changelog](https://github.com/visgl/react-map-gl/blob/v8.1.3/CHANGELOG.md)
- [Commits](visgl/react-map-gl@v8.1.2...v8.1.3)

Updates `tailwind-merge` from 3.6.0 to 3.7.0
- [Release notes](https://github.com/dcastil/tailwind-merge/releases)
- [Commits](https://github.com/dcastil/tailwind-merge/commits/tailwind-merge@3.7.0/packages/tailwind-merge)

Updates `zod` from 4.4.3 to 4.6.5
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.4.3...v4.6.5)

---
updated-dependencies:
- dependency-name: "@deck.gl/core"
  dependency-version: 9.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: "@deck.gl/layers"
  dependency-version: 9.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: "@deck.gl/mapbox"
  dependency-version: 9.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.103.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: "@tanstack/react-router"
  dependency-version: 1.170.38
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
- dependency-name: "@tanstack/react-start"
  dependency-version: 1.168.56
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
- dependency-name: asn-blocklist
  dependency-version: 1.20260913.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: hono
  dependency-version: 4.13.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
- dependency-name: react
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: react-dom
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: react-map-gl
  dependency-version: 8.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
- dependency-name: tailwind-merge
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: zod
  dependency-version: 4.6.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-production-5aa268b82a branch from 792bd87 to 3dc60fd Compare September 21, 2026 02:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants