chore(deps): update routine updates

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
convex (source)	1.34.1 → 1.35.1
convex-test (source)	0.0.46 → 0.0.47
prettier (source)	3.8.1 → 3.8.2
react (source)	19.2.4 → 19.2.5
react-dom (source)	19.2.4 → 19.2.5
typescript-eslint (source)	8.58.0 → 8.58.1
vite (source)	8.0.3 → 8.0.8
vitest (source)	4.1.2 → 4.1.4

---

Release Notes

get-convex/convex-backend (convex)

v1.35.1

• Adds support for automatic preview deployments on Cloudflare Pages
• Removes a new API in useQuery that was accidentally included as part
  of the 1.35.0 release.

v1.35.0

• You can now create and select local deployments explicitly with the CLI:
  • npx convex deployment create local --select: initialize local development.
  • npx convex deployment select dev: switch to your cloud dev deployment.
  • npx convex deployment select local: switch back to your local deployment.
  • To run a single command on your local deployment, use --deployment local.
• npx convex deployment create now has a --expiration flag allowing you
  to create temporary dpeloyments.
• Components can now define HTTP routes in their own http.ts file.
  The routes exposed by a component are accessible through a URL prefix
  that isolates them from the other HTTP routes
  (e.g. app.use(component, { httpPrefix: "/foo" })).
• npx convex dev now supports a new --start flag that runs a command
  in parallel with the Convex dev server (e.g. npx convex dev --start 'vite').
  This new option can be used to simplify the dev command of most projects.
  This flag was previously called --run-sh, and used to not allow
  long-running commands; now, --run-sh is an alias of --start.
• Defaults non-interactive commands to target an anonymous deployment if one is
  not configured or specified by the deploy key. This enables coding agents to
  more easily develop without needing the CONVEX_AGENT_MODE env variable.
  By default, the CLI will avoid prompting in non-interactive terminals when
  possible.
• You can now develop against your anonymous local deployments even when logged
  in. You will be prompted to link the deployment to a project if the terminal
  is interactive.
• Enables npx convex deployment create when you don't yet have a project.
• You can now customize the list of AI agents npx convex ai-files installs
  skills for in the aiFiles.skills.agents field of convex.json
  (defaults to ["claude-code", "codex"]).
• Improved formatting of sizes in error messages.
• Changes the default codegen to use the component's ComponentApi type instead
  of static code generation for components in _generated/api.d.ts.
  To get the old behavior, set { "codegen": { "legacyComponentApi": true } }
  in convex.json.
• Fixed a bug where npx convex dev would not use the correct deployment
  after running npx convex deployment select.
• Improved the definition of the AnyDataModel type to support using
  default indexes (by_id, by_creation_time) in a typesafe way.

get-convex/convex-test (convex-test)

v0.0.47

Compare Source

• Fix: Isolate function stack tracking between parallel function calls
  to prevent corruption when calling different components in parallel.
  This may have presented previously as not being able to find modules
  that existed but were being resolved for the wrong component.

prettier/prettier (prettier)

v3.8.2

Compare Source

facebook/react (react)

v19.2.5: 19.2.5 (April 8th, 2026)

Compare Source

React Server Components

• Add more cycle protections (#​36236 by @​eps1lon and @​unstubbable)

typescript-eslint/typescript-eslint (typescript-eslint)

v8.58.1

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

vitejs/vite (vite)

v8.0.8

Compare Source

Features

• update rolldown to 1.0.0-rc.15 (#​22201) (6baf587)

Bug Fixes

• avoid dns.getDefaultResultOrder temporary (#​22202) (15f1c15)
• ssr: class property keys hoisting matching imports (#​22199) (e137601)

v8.0.7

Compare Source

Bug Fixes

• use sync dns.getDefaultResultOrder instead of dns.promises (#​22185) (5c05b04)

v8.0.6

Compare Source

Features

• update rolldown to 1.0.0-rc.13 (#​22097) (51d3e48)

Bug Fixes

• css: avoid mutating sass error multiple times (#​22115) (d5081c2)
• optimize-deps: hoist CJS interop assignment (#​22156) (17a8f9e)

Performance Improvements

• early return in getLocalhostAddressIfDiffersFromDNS when DNS order is verbatim (#​22151) (56ec256)

Miscellaneous Chores

• create-vite: remove unnecessary DOM.Iterable (#​22168) (bdc53ab)
• replace remaining prettier script (#​22179) (af71fb2)

v8.0.5

Compare Source

Bug Fixes

• apply server.fs check to env transport (#​22159) (f02d9fd)
• avoid path traversal with optimize deps sourcemap handler (#​22161) (79f002f)
• check server.fs after stripping query as well (#​22160) (a9a3df2)
• disallow referencing files outside the package from sourcemap (#​22158) (f05f501)

v8.0.4

Compare Source

Features

• allow esbuild 0.28 as peer deps (#​22155) (b0da973)
• hmr: truncate list of files on hmr update (#​21535) (d00e806)
• optimizer: log when dependency scanning or bundling takes over 1s (#​21797) (f61a1ab)

Bug Fixes

• hasBothRollupOptionsAndRolldownOptions should return false for proxy case (#​22043) (99897d2)
• add types for vite/modulepreload-polyfill (#​22126) (17330d2)
• deps: update all non-major dependencies (#​22073) (6daa10f)
• deps: update all non-major dependencies (#​22143) (22b0166)
• resolve: resolve tsconfig paths starting with # (#​22038) (3460fc5)
• ssr: use browser platform for webworker SSR builds (fix #​21969) (#​21963) (364c227)

Documentation

• add environment.fetchModule documentation (#​22035) (54229e7)

Miscellaneous Chores

• deps: update rolldown-related dependencies (#​21989) (0ded627)

Code Refactoring

• upgrade to typescript 6 (#​22110) (cc41398)

vitest-dev/vitest (vitest)

v4.1.4

Compare Source

   🚀 Features

• coverage:
  • Default to text reporter skipFull if agent detected  -  by @​hi-ogawa in #​10018 (53757)
• experimental:
  • Expose assertion as a public field  -  by @​sheremet-va in #​10095 (a120e)
  • Support aria snapshot  -  by @​hi-ogawa, Claude Opus 4.6 (1M context), @​AriPerkkio, Codex and @​sheremet-va in #​9668 (d4fbb)
• reporter:
  • Add filterMeta option to json reporter  -  by @​nami8824 and @​sheremet-va in #​10078 (b77de)

   🐞 Bug Fixes

• Use "black" foreground for labeled terminal message to ensure contrast  -  by @​hi-ogawa in #​10076 (203f0)
• Make expect(..., message) consistent as error message prefix  -  by @​hi-ogawa and Codex in #​10068 (a1b5f)
• Do not hoist imports whose names match class properties .  -  by @​SunsetFi in #​10093 and #​10094 (0fc4b)
• browser: Spread user server options into browser Vite server in project  -  by @​GoldStrikeArch in #​10049 (65c9d)

    View changes on GitHub

v4.1.3

Compare Source

   🚀 Experimental Features

• Add experimental.preParse flag  -  by @​sheremet-va in #​10070 (78273)
• Support browser.locators.exact option  -  by @​sheremet-va in #​10013 (48799)
• Add TestAttachment.bodyEncoding  -  by @​hi-ogawa in #​9969 (89ca0)
• Support custom snapshot matcher  -  by @​hi-ogawa, Claude Sonnet 4.6 and Codex in #​9973 (59b0e)

   🐞 Bug Fixes

• Advance fake timers with expect.poll interval  -  by @​hi-ogawa and Claude Sonnet 4.6 in #​10022 (3f5bf)
• Add @vitest/coverage-v8 and @vitest/coverage-istanbul as optional dependency  -  by @​alan-agius4 in #​10025 (146d4)
• Fix defineHelper for webkit async stack trace + update playwright 1.59.0  -  by @​hi-ogawa in #​10036 (5a5fa)
• Fix suite hook throwing errors for unused auto test-scoped fixture  -  by @​hi-ogawa and Claude Sonnet 4.6 in #​10035 (39865)
• expect:
  • Remove JestExtendError.context from verbose error reporting  -  by @​hi-ogawa in #​9983 (66751)
  • Don't leak "runner" types  -  by @​sheremet-va in #​10004 (ec204)
• snapshot:
  • Fix flagging obsolete snapshots for snapshot properties mismatch  -  by @​hi-ogawa and Claude Sonnet 4.6 in #​9986 (6b869)
  • Export custom snapshot matcher helper from vitest  -  by @​hi-ogawa and Codex in #​10042 (691d3)
• ui:
  • Don't leak vite types  -  by @​sheremet-va in #​10005 (fdff1)
• vm:
  • Fix external module resolve error with deps optimizer query  -  by @​hi-ogawa and Claude Sonnet 4.6 in #​10024 (9dbf4)

    View changes on GitHub

---

Configuration

📅 Schedule: (in timezone America/Los_Angeles)

• Branch creation
  • Between 12:00 AM and 04:59 AM, only on Monday (* 0-4 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[pkg-pr-new]

Open in StackBlitz

npm i https://pkg.pr.new/@convex-dev/workos-authkit@41

commit: ea28146