#155 chore(deps): bump the minor-and-patch group with 15 updates

[Anonymous]

Originally created by: dependabot[bot]

Bumps the minor-and-patch group with 15 updates:

Package	From	To
@shikijs/core	4.3.1	4.4.1
@shikijs/engine-javascript	4.3.1	4.4.1
@shikijs/langs	4.3.1	4.4.1
@shikijs/themes	4.3.1	4.4.1
@shikijs/types	4.3.1	4.4.1
@tanstack/react-form	1.33.2	1.33.3
@tanstack/react-virtual	3.14.8	3.14.9
dompurify	3.4.12	3.4.13
marked	18.0.7	18.0.9
motion	12.42.2	12.43.0
posthog-js	1.407.2	1.409.3
shadcn	4.14.1	4.16.0
@types/react	19.2.17	19.2.18
@types/react-dom	19.2.3	19.2.4
globals	17.7.0	17.8.0

Updates @shikijs/core from 4.3.1 to 4.4.1

Release notes

Sourced from @​shikijs/core's releases.

v4.4.1

   🚀 Features

• Update deps  -  by @​antfu (e07fd)

    View changes on GitHub

v4.4.0

   🚀 Features

• Update grammars and themes  -  by @​antfu (dec2a)

   🐞 Bug Fixes

• core: Guess yaml from frontmatter segments  -  by @​antfubot in shikijs/shiki#1299](https://github.com/href="https://redirect.github.com/shikijs/shiki/issues/1299">shikijs/shiki/issues/1299) (1b8b6)

    View changes on GitHub

Commits

• 407dca0 chore: release v4.4.1
• a64bab1 chore: release v4.4.0
• 1b8b6e4 fix(core): guess yaml from frontmatter segments (#1299](https://github.com/href="https://github.com/shikijs/shiki/tree/HEAD/packages/core/issues/1299">/issues/1299))
• See full diff in compare view

Updates @shikijs/engine-javascript from 4.3.1 to 4.4.1

Release notes

Sourced from @​shikijs/engine-javascript's releases.

v4.4.1

   🚀 Features

• Update deps  -  by @​antfu (e07fd)

    View changes on GitHub

v4.4.0

   🚀 Features

• Update grammars and themes  -  by @​antfu (dec2a)

   🐞 Bug Fixes

• core: Guess yaml from frontmatter segments  -  by @​antfubot in shikijs/shiki#1299](https://github.com/href="https://redirect.github.com/shikijs/shiki/issues/1299">shikijs/shiki/issues/1299) (1b8b6)

    View changes on GitHub

Commits

• 407dca0 chore: release v4.4.1
• a64bab1 chore: release v4.4.0
• See full diff in compare view

Updates @shikijs/langs from 4.3.1 to 4.4.1

Release notes

Sourced from @​shikijs/langs's releases.

v4.4.1

   🚀 Features

• Update deps  -  by @​antfu (e07fd)

    View changes on GitHub

v4.4.0

   🚀 Features

• Update grammars and themes  -  by @​antfu (dec2a)

   🐞 Bug Fixes

• core: Guess yaml from frontmatter segments  -  by @​antfubot in shikijs/shiki#1299](https://github.com/href="https://redirect.github.com/shikijs/shiki/issues/1299">shikijs/shiki/issues/1299) (1b8b6)

    View changes on GitHub

Commits

• 407dca0 chore: release v4.4.1
• a64bab1 chore: release v4.4.0
• dec2a32 feat: update grammars and themes
• See full diff in compare view

Updates @shikijs/themes from 4.3.1 to 4.4.1

Release notes

Sourced from @​shikijs/themes's releases.

v4.4.1

   🚀 Features

• Update deps  -  by @​antfu (e07fd)

    View changes on GitHub

v4.4.0

   🚀 Features

• Update grammars and themes  -  by @​antfu (dec2a)

   🐞 Bug Fixes

• core: Guess yaml from frontmatter segments  -  by @​antfubot in shikijs/shiki#1299](https://github.com/href="https://redirect.github.com/shikijs/shiki/issues/1299">shikijs/shiki/issues/1299) (1b8b6)

    View changes on GitHub

Commits

• 407dca0 chore: release v4.4.1
• a64bab1 chore: release v4.4.0
• See full diff in compare view

Updates @shikijs/types from 4.3.1 to 4.4.1

Release notes

Sourced from @​shikijs/types's releases.

v4.4.1

   🚀 Features

• Update deps  -  by @​antfu (e07fd)

    View changes on GitHub

v4.4.0

   🚀 Features

• Update grammars and themes  -  by @​antfu (dec2a)

   🐞 Bug Fixes

• core: Guess yaml from frontmatter segments  -  by @​antfubot in shikijs/shiki#1299](https://github.com/href="https://redirect.github.com/shikijs/shiki/issues/1299">shikijs/shiki/issues/1299) (1b8b6)

    View changes on GitHub

Commits

• 407dca0 chore: release v4.4.1
• a64bab1 chore: release v4.4.0
• See full diff in compare view

Updates @tanstack/react-form from 1.33.2 to 1.33.3

Release notes

Sourced from @​tanstack/react-form's releases.

@​tanstack/react-form-nextjs@​1.33.3

Patch Changes

• Updated dependencies []:
  • @​tanstack/react-form@​1.33.3

@​tanstack/react-form-remix@​1.33.3

Patch Changes

• Updated dependencies []:
  • @​tanstack/react-form@​1.33.3

@​tanstack/react-form-start@​1.33.3

Patch Changes

• Updated dependencies []:
  • @​tanstack/react-form@​1.33.3

@​tanstack/react-form@​1.33.3

Patch Changes

• Updated dependencies []:
  • @​tanstack/form-core@​1.33.3

Changelog

Sourced from @​tanstack/react-form's changelog.

1.33.3

Patch Changes

• Updated dependencies []:
  • @​tanstack/form-core@​1.33.3

Commits

• 028fcdd ci: Version Packages (#2262](https://github.com/href="https://github.com/TanStack/form/tree/HEAD/packages/react-form/issues/2262">/issues/2262))
• See full diff in compare view

Updates @tanstack/react-virtual from 3.14.8 to 3.14.9

Release notes

Sourced from @​tanstack/react-virtual's releases.

@​tanstack/react-virtual@​3.14.9

Patch Changes

• Updated dependencies [a5417b4]:
  • @​tanstack/virtual-core@​3.17.7

Changelog

Sourced from @​tanstack/react-virtual's changelog.

3.14.9

Patch Changes

• Updated dependencies [a5417b4]:
  • @​tanstack/virtual-core@​3.17.7

Commits

• b4a76ca fix(marko-virtual): consolidate Marko e2e into one in-package app, fix test (...
• deca524 ci: Version Packages (#1240](https://github.com/href="https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual/issues/1240">/issues/1240))
• See full diff in compare view

Updates dompurify from 3.4.12 to 3.4.13

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.13

• Fixed an issue with hook removal during IN_PLACE sanitization, thanks @​koyokr
• Fixed an issue with hooks potentially bypassing the clone guard, thanks @​AkshayjainG
• Fixed an issue with DOM clobbering via ownerDocument during IN_PLACE, thanks @​AkshayjainG
• Bumped several dependencies where possible

Commits

• 3067f77 release: 3.4.13 (#1562](https://github.com/href="https://redirect.github.com/cure53/DOMPurify/issues/1562">/issues/1562))
• See full diff in compare view

Updates marked from 18.0.7 to 18.0.9

Release notes

Sourced from marked's releases.

v18.0.9

18.0.9 (2026-08-04)

Bug Fixes

• an unmatched strong run before emphasis stays literal (#4008](https://github.com/href="https://redirect.github.com/markedjs/marked/issues/4008">/issues/4008)) (e8544e6)
• Fix spurious deeper nesting in a blockquote continuation (#4030](https://github.com/href="https://redirect.github.com/markedjs/marked/issues/4030">/issues/4030)) (452f1ed)
• pedantic foo: and "word" emphasis parsing (#3999](https://github.com/href="https://redirect.github.com/markedjs/marked/issues/3999">/issues/3999)) (823093f)

v18.0.8

18.0.8 (2026-08-04)

Bug Fixes

• fall back to default checkbox renderer when extension returns false (#4023](https://github.com/href="https://redirect.github.com/markedjs/marked/issues/4023">/issues/4023)) (e1b6139)

Commits

• 8e858a4 chore(release): 18.0.9 [skip ci]
• 641e5df docs: explain partial extensions in use (#4033](https://github.com/href="https://redirect.github.com/markedjs/marked/issues/4033">/issues/4033))
• 452f1ed fix: Fix spurious deeper nesting in a blockquote continuation (#4030](https://github.com/href="https://redirect.github.com/markedjs/marked/issues/4030">/issues/4030))
• e8544e6 fix: an unmatched strong run before emphasis stays literal (#4008](https://github.com/href="https://redirect.github.com/markedjs/marked/issues/4008">/issues/4008))
• 823093f fix: pedantic foo: and "word" emphasis parsing (#3999](https://github.com/href="https://redirect.github.com/markedjs/marked/issues/3999">/issues/3999))
• 12a84a8 chore(release): 18.0.8 [skip ci]
• 3a1a706 chore(deps-dev): bump undici from 6.24.0 to 6.27.0 (#4042](https://github.com/href="https://redirect.github.com/markedjs/marked/issues/4042">/issues/4042))
• 58ed4af chore(deps-dev): bump eslint from 10.7.0 to 10.8.0 (#4032](https://github.com/href="https://redirect.github.com/markedjs/marked/issues/4032">/issues/4032))
• 01539fb chore(deps-dev): bump @​semantic-release/git from 10.0.1 to 11.0.1 (#4031](https://github.com/href="https://redirect.github.com/markedjs/marked/issues/4031">/issues/4031))
• e1b6139 fix: fall back to default checkbox renderer when extension returns false (#4023](https://github.com/href="https://redirect.github.com/markedjs/marked/issues/4023">/issues/4023))
• Additional commits viewable in compare view

Updates motion from 12.42.2 to 12.43.0

Changelog

Sourced from motion's changelog.

[12.43.0] 2026-07-27

Added

• Hardware acceleration for backgroundColor in supported browsers.
• Hardware acceleration for SVG elements.

Fixed

• AnimatePresence: Exiting children no longer interleave with entering children, which could reorder and remount children present in both renders.
• motion: Throw error when passing a custom motion component an incorrect ref type.

Commits

• a4ef40a v12.43.0
• 14f2d28 adding svg acceleration
• 1f5a27b Fixing merge
• 79f0353 Updating changelog
• 57f179b Updating changelog
• 695cb39 Merge pull request #3755](https://github.com/href="https://redirect.github.com/motiondivision/motion/issues/3755">/issues/3755) from motiondivision/fix-issue-2777
• 33a1820 Drop the production fallback for non-DOM refs
• ebe35f2 Throw an actionable invariant for non-DOM custom component refs
• a6ed094 Merge pull request #3754](https://github.com/href="https://redirect.github.com/motiondivision/motion/issues/3754">/issues/3754) from motiondivision/fix-3745-popchild-ref-warning
• 9f251f3 Merge pull request #3763](https://github.com/href="https://redirect.github.com/motiondivision/motion/issues/3763">/issues/3763) from motiondivision/advisor/003-color-waapi
• Additional commits viewable in compare view

Updates posthog-js from 1.407.2 to 1.409.3

Release notes

Sourced from posthog-js's releases.

posthog-js@1.409.3

1.409.3

Patch Changes

• #4312](https://github.com/href="https://redirect.github.com/PostHog/posthog-js/pull/4312">/issues/4312) 4729871 Thanks @​darkopia! - Fix hosted (external) surveys with URL prefill: the auto-submitted response now includes caller-provided event properties (extra URL query params), and a later manual submit no longer clears the prefilled answer from the partial-response merge. (2026-07-31)

posthog-js@1.409.2

1.409.2

Patch Changes

• #4340](https://github.com/href="https://redirect.github.com/PostHog/posthog-js/pull/4340">/issues/4340) 4b8867c Thanks @​marandaneto! - Avoid redacting session replay network bodies when timestamps or UUID fragments resemble social security or credit card numbers. (2026-07-31)
• Updated dependencies [4b8867c]:
  • @​posthog/browser-common@​0.3.1

posthog-js@1.409.1

1.409.1

Patch Changes

• #4301](https://github.com/href="https://redirect.github.com/PostHog/posthog-js/pull/4301">/issues/4301) 4b36c44 Thanks @​dustinbyrne! - Add the browser-v1 client adapter for shared extensions, including analytics, request, persistence, replayed remote-config outcomes, and synchronous best-effort cleanup. (2026-07-31)
• Updated dependencies [6b48a59]:
  • @​posthog/browser-common@​0.3.0

posthog-js@1.409.0

1.409.0

Minor Changes

• #4308](https://github.com/href="https://redirect.github.com/PostHog/posthog-js/pull/4308">/issues/4308) 6e7f3ae Thanks @​ablaszkiewicz! - Emit the release id that posthog-cli injects into your bundle as $release_id on $exception events, so PostHog can attach exceptions to a release without joining through symbol sets. Adds getInjectedReleaseId() to @posthog/core. The property is only attached when an injected release id can be read. (2026-07-30)

Patch Changes

• Updated dependencies [6e7f3ae]:
  • @​posthog/core@​1.46.0

posthog-js@1.408.3

1.408.3

Patch Changes

• #4327](https://github.com/href="https://redirect.github.com/PostHog/posthog-js/pull/4327">/issues/4327) 232b06a Thanks @​github-actions! - Refresh campaign parameters after SPA URL changes. (2026-07-30)

• #4328](https://github.com/href="https://redirect.github.com/PostHog/posthog-js/pull/4328">/issues/4328) 95a3d02 Thanks @​marandaneto! - Fix identify() creating a person profile when the supplied ID already matches an anonymously persisted distinct ID.

... (truncated)

Commits

• a51566c chore: update versions and lockfile [version bump]
• 4729871 fix(surveys): keep hosted-survey prefill metadata and prevent thumbs loss (#4](https://github.com/href="https://redirect.github.com/PostHog/posthog-js/issues/4">/issues/4)...
• 46ea0a3 chore: update versions and lockfile [version bump]
• 4b8867c fix(replay): avoid false-positive network body redaction (#4340](https://github.com/href="https://redirect.github.com/PostHog/posthog-js/issues/4340">/issues/4340))
• 3b90833 chore: update versions and lockfile [version bump]
• 4b36c44 feat(browser): add shared extension client adapter (#4301](https://github.com/href="https://redirect.github.com/PostHog/posthog-js/issues/4301">/issues/4301))
• 6b48a59 feat(browser-common): stream remote config outcomes (#4300](https://github.com/href="https://redirect.github.com/PostHog/posthog-js/issues/4300">/issues/4300))
• 2aae788 chore: update versions and lockfile [version bump]
• 1eb04c1 fix(ai): name langchain spans from the bare runName string (#4336](https://github.com/href="https://redirect.github.com/PostHog/posthog-js/issues/4336">/issues/4336))
• 9a453b9 fix(ai): map openai-agents groupId to $ai_session_id (#4335](https://github.com/href="https://redirect.github.com/PostHog/posthog-js/issues/4335">/issues/4335))
• Additional commits viewable in compare view

Updates shadcn from 4.14.1 to 4.16.0

Release notes

Sourced from shadcn's releases.

shadcn@4.16.0

Minor Changes

• #11307](https://github.com/href="https://redirect.github.com/shadcn-ui/ui/pull/11307">/issues/11307) 431da7169cae753643e67e56e168b93ec31dfe90 Thanks @​shadcn! - make addRegistryItems accept explicit registry configuration instead of loading components.json

• #11304](https://github.com/href="https://redirect.github.com/shadcn-ui/ui/pull/11304">/issues/11304) bf906bb8aeebc64d374afb54497b822d587ac6d7 Thanks @​shadcn! - add getRegistriesConfig and registries in package.json support

shadcn@4.15.0

Minor Changes

• #11276](https://github.com/href="https://redirect.github.com/shadcn-ui/ui/pull/11276">/issues/11276) 7d90dfc0a5ec70cdc3bd08b741a42440041907ac Thanks @​cmpadden! - Add a public addRegistryItems API for installing registry items programmatically without invoking the CLI.

Changelog

Sourced from shadcn's changelog.

4.16.0

Minor Changes

• #11307](https://github.com/href="https://redirect.github.com/shadcn-ui/ui/pull/11307">/issues/11307) 431da7169cae753643e67e56e168b93ec31dfe90 Thanks @​shadcn! - make addRegistryItems accept explicit registry configuration instead of loading components.json

• #11304](https://github.com/href="https://redirect.github.com/shadcn-ui/ui/pull/11304">/issues/11304) bf906bb8aeebc64d374afb54497b822d587ac6d7 Thanks @​shadcn! - add getRegistriesConfig and registries in package.json support

4.15.0

Minor Changes

• #11276](https://github.com/href="https://redirect.github.com/shadcn-ui/ui/pull/11276">/issues/11276) 7d90dfc0a5ec70cdc3bd08b741a42440041907ac Thanks @​cmpadden! - Add a public addRegistryItems API for installing registry items programmatically without invoking the CLI.

Commits

• 2a2deaa chore(release): version packages (#11306](https://github.com/href="https://github.com/shadcn-ui/ui/tree/HEAD/packages/shadcn/issues/11306">/issues/11306))
• 431da71 feat(registry): accept config in addRegistryItems (#11307](https://github.com/href="https://github.com/shadcn-ui/ui/tree/HEAD/packages/shadcn/issues/11307">/issues/11307))
• bf906bb feat(registry): load registries from package.json (#11304](https://github.com/href="https://github.com/shadcn-ui/ui/tree/HEAD/packages/shadcn/issues/11304">/issues/11304))
• 234633c chore(release): version packages (#11286](https://github.com/href="https://github.com/shadcn-ui/ui/tree/HEAD/packages/shadcn/issues/11286">/issues/11286))
• a767577 fix(registry): harden programmatic install API (#11285](https://github.com/href="https://github.com/shadcn-ui/ui/tree/HEAD/packages/shadcn/issues/11285">/issues/11285))
• 7d90dfc feat(registry): add programmatic install API (#11276](https://github.com/href="https://github.com/shadcn-ui/ui/tree/HEAD/packages/shadcn/issues/11276">/issues/11276))
• See full diff in compare view

Updates @types/react from 19.2.17 to 19.2.18

Commits

• See full diff in compare view

Updates @types/react-dom from 19.2.3 to 19.2.4

Commits

• See full diff in compare view

Updates globals from 17.7.0 to 17.8.0

Release notes

Sourced from globals's releases.

v17.8.0

• Update globals (2026-07-01) (#347](https://github.com/href="https://redirect.github.com/sindresorhus/globals/issues/347">/issues/347)) 7394811

---

https://github.com/sindresorhus/globals/compare/v17.7.0...v17.8.0

Commits

• 36c7659 17.8.0
• 7394811 Update globals (2026-07-01) (#347](https://github.com/href="https://redirect.github.com/sindresorhus/globals/issues/347">/issues/347))
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name=""> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name=""> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name=""> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name="">` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name="">` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name=""> <ignore condition="">` will remove the ignore condition of the specified dependency and ignore conditions </ignore></dependency></dependency></dependency></dependency></dependency></dependency>

[Anonymous]

Originally posted by: cloudflare-workers-and-pages[bot]

Deploying gitdesktop with    Cloudflare Pages

Latest commit:	1f4ae95
Status:	✅  Deploy successful!
Preview URL:	https://8daa51e8.gitdesktop.pages.dev
Branch Preview URL:	https://dependabot-npm-and-yarn-mino-ql9i.gitdesktop.pages.dev

View logs