[dependabot]

Bumps the production-compatible group with 37 updates in the / directory:

Package	From	To
@aws-sdk/client-lambda	3.1087.0	3.1149.0
@google/genai	2.10.0	2.28.0
@hugeicons/core-free-icons	4.2.2	4.3.5
@hugeicons/react	1.1.9	1.1.10
@huggingface/transformers	4.3.0	4.3.1
@lexical/react	0.42.0	0.52.0
@lexical/utils	0.42.0	0.52.0
@radix-ui/react-accordion	1.2.16	1.2.21
@radix-ui/react-checkbox	1.3.7	1.3.12
@radix-ui/react-context-menu	2.3.3	2.3.8
@radix-ui/react-dialog	1.1.19	1.2.0
@radix-ui/react-dropdown-menu	2.1.20	2.1.25
@radix-ui/react-primitive	2.1.7	2.1.11
@radix-ui/react-select	2.3.3	2.3.8
@radix-ui/react-separator	1.1.11	1.1.16
@radix-ui/react-slot	1.3.0	1.4.0
@radix-ui/react-tooltip	1.2.12	1.3.0
@react-three/fiber	9.6.1	9.8.1
@supabase/supabase-js	2.108.2	2.117.3
@trigger.dev/build	4.6.4	4.7.3
@trigger.dev/sdk	4.6.4	4.7.3
input-otp	1.4.2	1.5.0
lexical	0.42.0	0.52.0
mediabunny	1.50.7	1.61.3
mp4box	2.3.0	2.4.1
onnxruntime-common	1.27.0	1.30.0
onnxruntime-web	1.27.0	1.30.0
radix-ui	1.6.2	1.7.0
react	19.2.7	19.3.0
react-day-picker	10.0.1	10.0.2
react-dom	19.2.7	19.3.0
react-hook-form	7.81.0	7.89.0
react-window	2.2.7	2.3.3
sonner	2.0.7	2.0.8
tailwind-merge	3.6.0	3.7.0
three	0.185.0	0.186.1
zustand	5.0.14	5.0.15

Updates @aws-sdk/client-lambda from 3.1087.0 to 3.1149.0

Release notes

Sourced from @​aws-sdk/client-lambda's releases.

v3.1149.0

3.1149.0(2026-10-09)

Chores

• codegen: sync for endpoint cache fix and pre-schema error fallback (#8341) (5773a751)

New Features

• client-quicksight: Adds granular custom permissions for the Gong action connector (GongAction, CreateAndUpdateGongAction, ShareGongAction, UseGongAction) and for create, update, and share operations on 45 data source connectors, such as Amazon S3 and Snowflake, through the Custom Permissions APIs. (c5d26e39)
• client-deadline: The new ListMemberships API enables users to discover their memberships across Deadline Cloud resources, enabling scoped users of Deadline resources to discover and interact with the resources they have been provided scoped access to. (0d7406c7)
• client-marketplace-metering: AWS Marketplace Metering Service adds AgreementId to ResolveCustomer API response. (9653f5cc)
• client-mediatailor: Add caching settings to http functions (7ac7530b)
• client-securityagent: Adds a test scope field to specify whether a pentest targets a web application or a generative AI application. (1cc5ba6a)

Bug Fixes

• lib-transfer-manager:
  • retry UploadPart on worker-thread upload path (#8345) (0e357d90)
  • avoid full-body copy for SharedArrayBuffer uploads (#8338) (5473caf9)

---

For list of updated packages, view updated-packages.md in assets-3.1149.0.zip

v3.1148.0

3.1148.0(2026-10-08)

Documentation Changes

• client-sesv2: SESV2 DEED - Documentation Update (3d227df4)

New Features

• client-pi: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (1d99c7c8)
• client-marketplace-agreement: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (404943ce)
• client-emr-serverless: This release adds support for system profile logs for lakeformation enabled Spark connect sessions . (f9ed2f83)
• client-cost-explorer: Adds a product attribute dimension to GetCostAndUsage, GetCostAndUsageWithResources, and GetDimensionValues, letting customers group, filter, and discover Cost Explorer costs by structured attributes such as Amazon Bedrock model, provider, inference type, and feature. (7e0afd11)
• client-guardduty: Added support for GuardDuty RDS Data Activity Monitoring (aa200020)
• client-gamelift: Amazon GameLift Servers container fleets now support CPU bursting for game server container groups. The TotalVcpuLimit property of a game server container group definition is now optional. When you omit it, the group has no CPU cap and its containers can burst into unused CPU on the instance. (18121840)
• client-datazone: Adds support for multi-file notebook import. StartNotebookImport now accepts an s3Files source location with an ordered list of Amazon S3 objects, creating one notebook cell per file, plus a type field to create either a DATA or SQL notebook. (37214f3f)
• client-devops-agent: Adds release management associations with private network access to AWS DevOps Agent, and a releaseManagementAssociationId field on GitHub and GitLab associations. This helps release management agents (Release-readiness review and Release Testing) access customer resources that are behind a VPC. (55b389d1)
• client-security-ir: Adds support for retrieving finding-lifecycle metrics for an AWS Security Incident Response membership. (f4f6dfe5)
• client-cloudformation: CloudFormation introduces force rollback, a new opt-in capability that lets your stacks complete a rollback even when an individual resource cannot be reverted. Set ForceRollback on ContinueUpdateRollback and CloudFormation records each resource that fails as skipped, completing the rollback. (07e146a5)
• client-opensearch: This release adds a new EncryptionMode option (DISK or NATIVE) to EncryptionAtRestOptions for the CreateDomain and UpdateDomainConfig operations, enabling selection of engine-native index-level encryption on supported Amazon OpenSearch Service domains. (393fb011)
• client-lambda: AWS Lambda now supports OAuth 2.0 (OAUTHBEARER), IAM, and IAM with OAUTHBEARER authentication for self-managed Apache Kafka event source mappings, including optional OAuth scope, audience, logical cluster, and identity pool parameters. OAuth 2.0 is also available for Confluent Schema Registry. (c7696bfa)
• client-securityhub: Release findings export APIs - StartExportJobV2, GetExportJobV2, ListExportJobsV2, and CancelExportJobV2. This supports exporting findings from AWS Security Hub to Amazon S3 bucket. (f53e8a2a)
• client-medialive: AWS Elemental MediaLive Workflow Monitor now supports AWS Elemental Inference feeds as a target resource type for CloudWatch alarm templates. (e335e5dc)
• client-eks: Configurations support for EKS ACK Capabilities, including EnableCrossNamespace and DisableServices configuration. (82f87e7c)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-lambda's changelog.

3.1149.0 (2026-10-09)

Note: Version bump only for package @​aws-sdk/client-lambda

3.1148.0 (2026-10-08)

Features

• client-lambda: AWS Lambda now supports OAuth 2.0 (OAUTHBEARER), IAM, and IAM with OAUTHBEARER authentication for self-managed Apache Kafka event source mappings, including optional OAuth scope, audience, logical cluster, and identity pool parameters. OAuth 2.0 is also available for Confluent Schema Registry. (c7696bf)

3.1147.0 (2026-10-06)

Note: Version bump only for package @​aws-sdk/client-lambda

3.1146.0 (2026-10-02)

Note: Version bump only for package @​aws-sdk/client-lambda

3.1145.0 (2026-10-01)

Note: Version bump only for package @​aws-sdk/client-lambda

3.1144.0 (2026-09-30)

Note: Version bump only for package @​aws-sdk/client-lambda

... (truncated)

Commits

• a960c14 Publish v3.1149.0
• 5773a75 chore(codegen): sync for endpoint cache fix and pre-schema error fallback (#8...
• 1bc0425 Publish v3.1148.0
• c7696bf feat(client-lambda): AWS Lambda now supports OAuth 2.0 (OAUTHBEARER), IAM, an...
• 663046d Publish v3.1147.0
• 054298b Publish v3.1146.0
• 0199117 Publish v3.1145.0
• ce26281 Publish v3.1144.0
• 81afad0 Publish v3.1143.0
• c935fdd Publish v3.1142.0
• Additional commits viewable in compare view

Updates @google/genai from 2.10.0 to 2.28.0

Release notes

Sourced from @​google/genai's releases.

v2.28.0

2.28.0 (2026-10-07)

Features

• Support "allowlist": "disabled" in environment network config. (18bc392)
• update discovery doc (4e996fe)

v2.27.0

2.27.0 (2026-10-02)

Features

• add lyria-3.5, gemini-omni-1.1-flash, and gemini-omni-flash-preview to Interactions Model enum (4ce63d1)
• support continuation_token in Interactions (a888ad7)

v2.26.0

2.26.0 (2026-10-01)

Features

• support continuation_token in GenerateContent (ac628c5)

v2.25.0

2.25.0 (2026-09-30)

Features

• add gcs_metrics_uri for exporting tuning job metrics. (bc085fb)
• Add Gemini 3.8 Flash TTS and Gemini 3.8 Flash Lite TTS models to SDKs (b12dad0)
• genai-sdk: Add environments dedicated module and from_environment support (4d7e80b)
• include labels for LiveClientSetup (d4bcdad)
• support labels for Gemini API GenerateContent (71c3997)

Bug Fixes

• use CreateAgentInteraction for Trigger.interaction and TriggerCreateParams.interaction (c4341e1)

v2.24.0

2.24.0 (2026-09-22)

Features

• add sample_audio to Voice in GAOS SDK (d001d18)

... (truncated)

Changelog

Sourced from @​google/genai's changelog.

2.28.0 (2026-10-07)

Features

• Support "allowlist": "disabled" in environment network config. (18bc392)
• update discovery doc (4e996fe)

2.27.0 (2026-10-02)

Features

• add lyria-3.5, gemini-omni-1.1-flash, and gemini-omni-flash-preview to Interactions Model enum (4ce63d1)
• support continuation_token in Interactions (a888ad7)

2.26.0 (2026-10-01)

Features

• support continuation_token in GenerateContent (ac628c5)

2.25.0 (2026-09-30)

Features

• add gcs_metrics_uri for exporting tuning job metrics. (bc085fb)
• Add Gemini 3.8 Flash TTS and Gemini 3.8 Flash Lite TTS models to SDKs (b12dad0)
• genai-sdk: Add environments dedicated module and from_environment support (4d7e80b)
• include labels for LiveClientSetup (d4bcdad)
• support labels for Gemini API GenerateContent (71c3997)

Bug Fixes

• use CreateAgentInteraction for Trigger.interaction and TriggerCreateParams.interaction (c4341e1)

2.24.0 (2026-09-22)

Features

• add sample_audio to Voice in GAOS SDK (d001d18)
• add Voices API resource to GAOS SDK (f97113f)
• expose SpeechMetadata, VoiceConfig.voice, and SpeechAnnotation in public GenAI SDKs (19b7858)
• support field.value_field syntax for map add_union_value annotations. (51d701a)
• update discovery doc (42f9716)
• wire voice into sdk (08b568e)

... (truncated)

Commits

• 9e929ee chore(main): release 2.28.0 (#2008)
• d23bd6f chore: Add gemini-nano-banana-2.1 and gemini-3.1-flash-lite-image to supporte...
• 8bed2ba docs: update generated SDK docstring examples to use gemini-flash-latest
• 18bc392 feat: Support "allowlist": "disabled" in environment network config.
• 4e996fe feat: update discovery doc
• ca5690c test(openapi): speakeasy generator version.
• f6b85db test: run live module integration tests against both backends
• 7e5b9b6 chore(main): release 2.27.0 (#1995)
• a888ad7 feat: support continuation_token in Interactions
• 4ce63d1 feat: add lyria-3.5, gemini-omni-1.1-flash, and `gemini-omni-flash-previe...
• Additional commits viewable in compare view

Updates @hugeicons/core-free-icons from 4.2.2 to 4.3.5

Commits

• See full diff in compare view

Updates @hugeicons/react from 1.1.9 to 1.1.10

Commits

• See full diff in compare view

Updates @huggingface/transformers from 4.3.0 to 4.3.1

Release notes

Sourced from @​huggingface/transformers's releases.

4.3.1

What's new?

This release adds support for EmbeddingGemma 2. EmbeddingGemma 2 is an open multimodal embedding model built by Google DeepMind which maps text (incl. code), images, video, and audio inputs—and combinations thereof—into a single, unified 768-dimensional vector space. The model has 740M total parameters, combining a 270M parameter text model with modular vision (170M) and audio (300M) encoders.

Text search

The feature-extraction pipeline returns normalized embeddings, so the dot product of two embeddings is their cosine similarity:

import { pipeline, matmul } from "@huggingface/transformers";
const extractor = await pipeline("feature-extraction", "onnx-community/embeddinggemma-2-ONNX", {
device: "webgpu", // or "wasm" (browser) / "cpu" (Node.js)
dtype: "q4", // see "Choosing a dtype" below
});
const query = "task: search result | query: Which planet is known as the Red Planet?";
const documents = [
"title: none | text: Venus is often called Earth's twin because of its similar size and proximity.",
"title: none | text: Mars, known for its reddish appearance, is often referred to as the Red Planet.",
"title: none | text: Jupiter, the largest planet in our solar system, has a prominent red spot.",
"title: none | text: Saturn, famous for its rings, is sometimes mistaken for the Red Planet.",
];
const embeddings = await extractor([query, ...documents], { pooling: "mean", normalize: true });
const query_embedding = embeddings.slice([0, 1]);
const document_embeddings = embeddings.slice([1, null]);
const scores = (await matmul(query_embedding, document_embeddings.transpose(1, 0))).tolist()[0];
const ranking = scores.map((score, i) => ({ score, document: documents[i] })).sort((a, b) => b.score - a.score);
console.log(ranking);
// [
//   { score: 0.854, document: "title: none | text: Mars, known for its reddish appearance, ..." },
//   { score: 0.783, document: "title: none | text: Saturn, famous for its rings, ..." },
//   { score: 0.752, document: "title: none | text: Jupiter, the largest planet in our solar system, ..." },
//   { score: 0.684, document: "title: none | text: Venus is often called Earth's twin, ..." },
// ]

Images, audio and video

For other modalities, use the processor and the model directly. Every input maps into the same embedding space, so any embedding can be compared with any other: here, text queries against an image, an audio clip and a video.

import { AutoModel, AutoProcessor, load_image, load_audio, load_video, cat, matmul } from "@huggingface/transformers";
const model_id = "onnx-community/embeddinggemma-2-ONNX";
const processor = await AutoProcessor.from_pretrained(model_id);
</tr></table>

... (truncated)

Commits

• 511bb61 [version] Update to 4.3.1
• e822439 new model (#1788)
• 40d3304 Bump doc-builder workflow pin (#1787)
• 836b9cb Scope GITHUB_TOKEN permissions per job (#1777)
• c5f2b97 Bump the actions group across 1 directory with 6 updates (#1703)
• See full diff in compare view

Updates @lexical/react from 0.42.0 to 0.52.0

Release notes

Sourced from @​lexical/react's releases.

v0.52.0 is an ad-hoc release targeting a few fixes to mobile text input, but carries a number of other updates accumulated in the past week as we move towards Lexical 1.0. We did a pass to modernize the documentation focusing on the latest features. @lexical/mdast now uses one configurable MdastExtension for import and export, headless editors can be built entirely from extensions, and selection notifications have a consistent timing contract. There are also fixes for deletion, horizontal caret scrolling, drag-and-drop and mobile input.

Breaking Changes

• lexical — SELECTION_CHANGE_COMMAND consistently runs before DOM reconciliation, inside the pending writable update. This includes automatic NodeSelection and TableSelection notifications that previously ran after reconciliation. $getSelection() returns the pending selection; $getPreviousSelection() returns the last committed selection. Eligible programmatic changes now notify without waiting for a native selectionchange event. Listener edits join the same commit, and handlers that change the selection must converge. A listener that throws can now abort the whole pending update, including the edit that triggered the notification, and listeners inherit that update's tags, so content edits made during a COLLABORATION_TAG or HISTORIC_TAG update are not synced to Yjs peers. Move DOM-dependent work such as element lookup, focus checks and floating UI positioning into $onUpdate(() => editor.read('latest', () => { /* ... */ })), reading selection and nodes inside that callback. Use registerUpdateListener for UI that must respond to every commit, including content-only changes (#9219, selection timing guide)
• lexical / @lexical/html — Default HTML export now honors DOMRenderExtension $createDOM overrides. This affects nodes that inherit LexicalNode.exportDOM or call super.exportDOM(editor), including text and paragraphs. If an override was intended only for the live editor, review the HTML it now exports. Custom exportDOM implementations that create their own elements can still bypass this hook; $updateDOM and $decorateDOM remain reconciliation-only, and $exportDOM handles export-specific changes (#9231)
• lexical — LexicalNode.getCommonAncestor is removed. Use $getCommonAncestor(a, b)?.commonAncestor ?? null. This is not quite a direct substitution: the removed method first replaced non-element arguments with their parents, while the function compares the supplied nodes and can return a text node when both arguments are that node. Pass the parents of non-element nodes if you need the old behavior, and use type guards instead of the old unchecked generic type argument (#9238)

Deprecations

• @lexical/mdast — MdastImportExtension and MdastExportExtension are deprecated aliases of MdastExtension. Move configuration to MdastExtension and replace MdastImportExtensionOutput / MdastExportExtensionOutput with MdastExtensionOutput. The package is experimental, and these aliases are intended to remain for only one release (#9198)

New APIs & Features

• @lexical/mdast — Unified Markdown configuration and inherited export rules. MdastExtension owns both import and export, and feature extensions include it automatically. Export rules accept a node class or type string and apply to subclasses, with more specific rules taking precedence. A TextNode rule can therefore handle tabs and custom text subclasses without separate registrations (#9198)
• @lexical/mdast — Import/export middleware through context.next(). Delegate conversion of the same node to the remaining handlers, then return or modify their output. Export chains try remaining same-type rules before ancestor rules. Use context.next() to delegate: null retains its existing meaning of default export or omitted import, while [] omits content in either direction. Formatted text from middleware participates in text merging; custom structure or metadata is preserved as-is (#9198)
• @lexical/headless — HeadlessExtension works with buildEditorFromExtensions for server-side processing and tests. It marks the editor as headless and prevents attaching a DOM root. Unlike createHeadlessEditor, it keeps listener registration methods available, so extensions that register root listeners can still be used (#9249)

Notable Fixes

Selection & editing

• Backspace over all text in the first block preserves the empty block and its type (#9236); select-all deletion restores an editable paragraph when the root still contains slots such as footnotes (#9240); line deletion correctly resolves endpoints inside text-bearing inline decorators (#9247)
• Dropping dragged text on the edge of its own selection no longer deletes it (#9241); persistent selection highlights retain coverage across mixed font sizes and partially overlapping rectangles (#9196)
• Lexical-controlled caret moves reveal the caret horizontally in code blocks and other scrolling containers, including table wrappers. Horizontal scrolling respects scroll-padding, with updated playground styling to keep the caret clear of the code gutter (#9215)
• Focus commands triggered during DOM selection synchronization no longer produce spurious read-only warnings; dispatching commands from an explicit read context still warns (#9230)

Mobile input & recovery

• iOS tracks explicit Shift key events so Shift+Enter can insert a line break without treating automatic capitalization as Shift. Ordinary Enter continues to insert paragraphs; when capitalization has already highlighted Shift, it must be toggled off and on to request a line break (#9242)
• The input-suppression workaround after handled Backspace or select-all is limited to macOS Chromium, preventing legitimate text input from being discarded on other platforms (#9251)
• setEditorState with a childless root warns and recovers to an empty paragraph in production. Development builds still report the invalid state through onError (#9183)

Performance & signals

• Writable nodes are cached during pending updates, reducing repeated node-map lookups (#9169)
• @lexical/extension raises its @preact/signals-core dependency to ^1.14.4, fixing stale computed values after a batch changes a signal and restores its original value (#9248)

Playground & docs

• Getting-started guides now use module-level root extensions, with five live editors, examples drawn directly from runnable source, and Open in StackBlitz buttons. Custom-feature examples demonstrate $config schemas, NodeState, and HTML import/export through extensions (#9237)
• The introduction, Concepts and Serialization guides have been rewritten around current APIs, with Mermaid diagrams, an interactive update lifecycle explanation and a dedicated comparison with ProseMirror. Older setup and serialization APIs remain documented in Legacy sections (#9249)
• Numerous API names, snippets and lifecycle descriptions have been corrected throughout the docs, most of them by @​potatowagon. API reference links now point to the right GitHub source paths and resolve external types (#9204, #9220)
• Playground Find & Replace calculates offsets correctly across decorators and slots (#9186)

What's Changed

• v0.51.0 by @​etrepum in facebook/lexical#9178
• [lexical] Refactor: Cache writable nodes during pending updates by @​etrepum in facebook/lexical#9169
• [lexical-website] Documentation Update: fix $insertList argument in the commands guide by @​potatowagon in facebook/lexical#9188
• [lexical-website] Documentation Update: seed the editor state with setEditorState, not registerRichText by @​potatowagon in facebook/lexical#9189

... (truncated)

Changelog

Sourced from @​lexical/react's changelog.

v0.52.0 (2026-09-27)

• lexical Bug Fix Track explicit Shift state for iOS line breaks (#9242) Bob Ippolito
• lexicallexical-headlesslexical-website Documentation Update Rewrite the introduction and modernize the Concepts, Serialization docs and examples (#9249) Bob Ippolito
• lexical-extension Chore Update signals-core to 1.14.4 (#9248) Bob Ippolito
• lexical-playground Chore Harden nested editor selection ownership test (#9243) Bob Ippolito
• lexical Bug Fix Limit handled selection input suppression to macOS Chrome (#9251) Bob Ippolito
• lexical Bug Fix resolve line deletion endpoints inside inline decorators (#9247) Maxim Gagiev
• lexical-website Documentation Update Document ErrorBoundary configuration for PlainTextExtension (#9182) dvd233
• lexical Bug Fix Handle select-all deletion with root slots (#9240) Bob Ippolito
• lexical Breaking change Remove LexicalNode.getCommonAncestor (#9238) mayrang
• lexical-clipboard Bug Fix Keep dragged text when it is dropped on the edge of its own selection (#9241) Alexandre Kohler
• lexical-selectionlexical-utils Bug Fix Preserve selection coverage across mixed typography (#9196) Minwook Shin
• lexical Bug Fix Preserve first block after backward range deletion (#9236) Abdul Azhar Jamesh
• lexicallexical-code-corelexical-playground Bug Fix reveal the caret in code blocks and other containers that scroll sideways (#9215) om singhal
• benchmarks Chore Migrate benchmarks to vitest 5 and add type checking in CI (#9235) Bob Ippolito
• lexicallexical-tablelexical-playgroundlexical-website Breaking Change Standardize selection notification timing (#9219) Bob Ippolito
• lexical-compiler Bug Fix Normalize temporary paths in watcher tests (#9195) Minwook Shin
• lexical-website Documentation Update document the full update-listener payload and the cascade guard (#9227) Sherry
• lexicallexical-html Breaking Change honor createDOM overrides in default DOM export (#9231) Bob Ippolito
• lexical Bug Fix Avoid read-only warnings for commit-time focus commands (#9230) Bob Ippolito
• lexical-website Bug Fix resolve external API links and shorten submodule labels (#9220) Bob Ippolito
• lexical-website Documentation Update point the selection guide at NodeCaret (#9229) Sherry
• lexical-website Documentation Update setEditorState warns and recovers in production, it does not always throw (#9228) Sherry
• lexical-website Documentation Update correct five stale facts in the maintainers guide (#9226) Sherry
• lexical-website Documentation Update fix the collaboration snippets and two stale playground references (#9225) Sherry
• lexical-website Documentation Update correct DOMExportOutput, DOMConversion priority, and the HeadingNode examples (#9223) Sherry
• lexical-website Documentation Update fix seven incorrect API references in the DOM import guide (#9222) Sherry
• lexical-website Documentation Update fix two extension names that do not exist (#9210) Sherry
• lexical-website Documentation Update add HMRExtension and KeyboardShortcutsExtension to the included list (#9213) Sherry
• lexical-website Documentation Update call the system Lexical Extensions, not Lexical Builder (#9212) Sherry
• lexical-website Documentation Update fix the broken snippets in the extensions migration guide (#9211) Sherry
• lexical-website Documentation Update re-sync the TabIndentationExtension snippet with its source (#9209) Sherry
• lexical-website Documentation Update correct four claims in the extension lifecycle guide (#9208) Sherry
• lexical-website Documentation Update fix the test path in the traversals maintenance comment (#9207) Sherry
• lexical-website Documentation Update correct the shadow-DOM support table and two API references (#9206) Sherry
• lexical-website Documentation Update show initialEditorState, not a function passed to createEditor (#9205) Sherry
• lexical-website Documentation Update fix two nodes.mdx snippets that do not compile (#9200) Sherry
• lexical-mdast Feature Unify MdastExtension and inherit export rules (#9198) Bob Ippolito
• lexical-code-corelexical-code-prismlexical-code-shiki Refactor move the duplicated updateCodeGutter into lexicalcode-core (#9164) om singhal
• lexical-website Documentation Update fix syntax errors, outdated APIs, and broken links in Node Transforms guide (#9197) Jaideep krishna A
• lexical-website Bug Fix Include packages in API docs GitHub source links (#9204) Bob Ippolito
• lexical-website Documentation Update node-replacement config uses nodes, not nodes (#9203) Sherry
• lexical-website Documentation Update clone is synthesized for config nodes, and fix a setSomeData typo (#9202) Sherry
• lexical-website Documentation Update useReactDecorators, and the three missing TextNode formats (#9201) Sherry
• lexical-website Documentation Update the deserialization hook is importJSON, not importFromJSON (#9199) Sherry
• lexical-playground Bug Fix Fix Find Replace offsets across decorators and slots (#9186) Monier Ayman
• lexical Bug Fix recover from an empty editor state instead of throwing (#9183) Sherry
• lexical-website Documentation Update fix insertList argument in the commands guide (#9188) Sherry
• lexical-website Documentation Update seed the editor state with setEditorState, not registerRichText (#9189) Sherry

... (truncated)

Commits

• b2af316 v0.52.0
• 86e1acf [lexical][lexical-table][lexical-playground][lexical-website] Breaking Change...
• c9aea68 v0.51.0 (#9178)
• 90f4e5f [lexical] Fix: Flow declarations cannot express an extension with dependencie...
• 4973ca1 build(deps-dev): bump the vitest group across 1 directory with 2 updates (#9157)
• a02c61b [lexical][*] Feature: node JSON serialization schemas, with compact export (#...
• f73868b [lexical-react] Chore: Deprecate LexicalComposer in favor of LexicalExtension...
• ca0afc4 build(deps-dev): bump the dev-dependencies group across 1 directory with 26 u...
• 737b3af [*] Breaking change: Publish ESM only to npm and keep the CommonJS build for ...
• 45f8aa4 [*] Bug Fix: Remove the remaining module-scope side effects that defeat tree-...
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​lexical/react since your current version.

Updates @lexical/utils from 0.42.0 to 0.52.0

Release notes

Sourced from @​lexical/utils's releases.

v0.52.0 is an ad-hoc release targeting a few fixes to mobile text input, but carries a number of other updates accumulated in the past week as we move towards Lexical 1.0. We did a pass to modernize the documentation focusing on the latest features. @lexical/mdast now uses one configurable MdastExtension for import and export, headless editors can be built entirely from extensions, and selection notifications have a consistent timing contract. There are also fixes for deletion, horizontal caret scrolling, drag-and-drop and mobile input.

Breaking Changes

• lexical — SELECTION_CHANGE_COMMAND consistently runs before DOM reconciliation, inside the pending writable update. This includes automatic NodeSelection and TableSelection notifications that previously ran after reconciliation. $getSelection() returns the pending selection; $getPreviousSelection() returns the last committed selection. Eligible programmatic changes now notify without waiting for a native selectionchange event. Listener edits join the same commit, and handlers that change the selection must converge. A listener that throws can now abort the whole pending update, including the edit that triggered the notification, and listeners inherit that update's tags, so content edits made during a COLLABORATION_TAG or HISTORIC_TAG update are not synced to Yjs peers. Move DOM-dependent work such as element lookup, focus checks and floating UI positioning into $onUpdate(() => editor.read('latest', () => { /* ... */ })), reading selection and nodes inside that callback. Use registerUpdateListener for UI that must respond to every commit, including content-only changes (#9219, selection timing guide)
• lexical / @lexical/html — Default HTML export now honors DOMRenderExtension $createDOM overrides. This affects nodes that inherit LexicalNode.exportDOM or call super.exportDOM(editor), including text and paragraphs. If an override was intended only for the live editor, review the HTML it now exports. Custom exportDOM implementations that create their own elements can still bypass this hook; $updateDOM and $decorateDOM remain reconciliation-only, and $exportDOM handles export-specific changes (#9231)
• lexical — LexicalNode.getCommonAncestor is removed. Use $getCommonAncestor(a, b)?.commonAncestor ?? null. This is not quite a direct substitution: the removed method first replaced non-element arguments with their parents, while the function compares the supplied nodes and can return a text node when both arguments are that node. Pass the parents of non-element nodes if you need the old behavior, and use type guards instead of the old unchecked generic type argument (#9238)

Deprecations

• @lexical/mdast — MdastImportExtension and MdastExportExtension are deprecated aliases of MdastExtension. Move configuration to MdastExtension and replace MdastImportExtensionOutput / MdastExportExtensionOutput with MdastExtensionOutput. The package is experimental, and these aliases are intended to remain for only one release (#9198)

New APIs & Features

• @lexical/mdast — Unified Markdown configuration and inherited export rules. MdastExtension owns both import and export, and feature extensions include it automatically. Export rules accept a node class or type string and apply to subclasses, with more specific rules taking precedence. A TextNode rule can therefore handle tabs and custom text subclasses without separate registrations (#9198)
• @lexical/mdast — Import/export middleware through context.next(). Delegate conversion of the same node to the remaining handlers, then return or modify their output. Export chains try remaining same-type rules before ancestor rules. Use context.next() to delegate: null retains its existing meaning of default export or omitted import, while [] omits content in either direction. Formatted text from middleware participates in text merging; custom structure or metadata is preserved as-is (#9198)
• @lexical/headless — HeadlessExtension works with buildEditorFromExtensions for server-side processing and tests. It marks the editor as headless and prevents attaching a DOM root. Unlike createHeadlessEditor, it keeps listener registration methods available, so extensions that register root listeners can still be used (#9249)

Notable Fixes

Selection & editing

• Backspace over all text in the first block preserves the empty block and its type (#9236); select-all deletion restores an editable paragraph when the root still contains slots such as footnotes (#9240); line deletion correctly resolves endpoints inside text-bearing inline decorators (#9247)
• Dropping dragged text on the edge of its own selection no longer deletes it (#9241); persistent selection highlights retain coverage across mixed font sizes and partially overlapping rectangles (#9196)
• Lexical-controlled caret moves reveal the caret horizontally in code blocks and other scrolling containers, including table wrappers. Horizontal scrolling respects scroll-padding, with updated playground styling to keep the caret clear of the code gutter (#9215)
• Focus commands triggered during DOM selection synchronization no longer produce spurious read-only warnings; dispatching commands from an explicit read context still warns (#9230)

Mobile input & recovery

• iOS tracks explicit Shift key events so Shift+Enter can insert a line break without treating automatic capitalization as Shift. Ordinary Enter continues to insert paragraphs; when capitalization has already highlighted Shift, it must be toggled off and on to request a line break (#9242)
• The input-suppression workaround after handled Backspace or select-all is limited to macOS Chromium, preventing legitimate text input from being discarded on other platforms (#9251)
• setEditorState with a childless root warns and recovers to an empty paragraph in production. Development builds still report the invalid state through onError (#9183)

Performance & signals

• Writable nodes are cached during pending updates, reducing repeated node-map lookups (#9169)<...

  Description has been truncated

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.