[dependabot]

Bumps the docs-toolchain group with 4 updates in the /docs directory: @holocron.so/vite, react, react-dom and vite.

Updates @holocron.so/vite from 0.29.0 to 0.38.0

Release notes

Sourced from @​holocron.so/vite's releases.

@​holocron.so/vite@0.38.0

1. New prerenderOrigin option for rendering: static pages. Absolute URLs in a prerendered page (og:url, the OG image label) come from the single host in the Worker routes. When routes list several hosts, like the apex and www, the build used the local preview origin and shipped og:url as http://localhost:…. Pass the public origin instead:

   holocron({ prerenderOrigin: 'https://example.com' })

   rendering: static is now documented in the page frontmatter reference and the Cloudflare guide.

@​holocron.so/vite@0.37.2

1. Smaller pages, faster renders. The sidebar no longer renders the hidden heading lists of every other page; only the current page and pages matching a search show their headings. On holocron.so this removes about 225 KB of HTML per page (about 37%). The sidebar search index is now built on the first search query, not on every server render, hydration and client navigation. Before, that was about 30% of server CPU per page on a large docs site.

2. Ask AI no longer sits above the API playground. Pages whose right aside holds RequestExample or ResponseExample (OpenAPI endpoint pages, MCP tool pages, or authored pages using them) show the floating Ask AI pill instead, so the request and response examples keep the full aside. Overview pages in OpenAPI and MCP tabs still show the Ask AI widget at the top of the right aside.

3. Cleaner footer on API reference pages. OpenAPI and MCP tabs no longer show the footer logo, socials and link columns. The bottom row with the theme select and prev/next links stays.

4. Generated OpenAPI, MCP and changelog pages are valid MDX for any spec text. Text like {"lease":"studio:42"}, <id> or a stray ``` in a description or example can no longer break a page.

   • Endpoint, MCP tool and MCP resource descriptions are now escaped Markdown inside the page, not a JSON prop. They show up in the page's .md export.
   • Code fences in request and response examples are longer than any backtick run inside them.
   • Raw HTML blocks in spec Markdown stay separate paragraphs instead of joining the text around them.
   • OpenAPI x-holocron.content (and x-mint.content) is now page content placed before the endpoint, not a child of it.

5. <Markdown> never returns a 500. When its text is not valid MDX (for example {"lease":"studio:42"}), it logs a warning and shows the raw text.

6. vite build no longer hangs after prerender when wrangler.jsonc has remote bindings (for example ai). Holocron now uses spiceflow 1.26.0-rsc.22.

@​holocron.so/vite@0.37.1

1. React 19.3 and Vite 8.3. Holocron now runs on spiceflow 1.26.0-rsc.21, which needs React 19.3 and Vite 8.2 or newer. Update your docs project:

   pnpm add react@^19.3.0 react-dom@^19.3.0 vite@^8.3.4

   Error pages no longer leak secrets like API keys or tokens in stack traces. An open tab that navigates after a new deploy reloads to the new assets instead of crashing with client reference not found.

2. Faster page renders. The cached MDX tree is no longer deep-copied with structuredClone on every request; all requests share one tree. On a long page (a 63k character README) the copy was about 14% of server CPU per request.

3. No more dummy-non-existing-folder/ when running vitest. Dev and test servers keep the Holocron cache in Vite's cache folder (node_modules/.vite/holocron). Builds still cache in dist/.

@​holocron.so/vite@0.37.0

1. OpenAPI pages read much more of the spec. Big fidelity pass, with Mintlify conventions:

   • oneOf / anyOf schemas render. A union request or response body shows one expandable panel per option (named by its title, else Option N). A property or array item that is a union of objects gets a "Show options" panel, and its type shows the option titles (Point | Text, (Point | Text)[]). Before, a union request body rendered an empty section. This also applies to MCP field lists.
   • Server variables are filled with their defaults, so {scheme}://{host}:{port} gives a working cURL URL.
   • Optional auth: security: [{}, ...] shows an "optional" badge. cURL sends the first non-empty requirement, with apiKey in its real header, query param or cookie, and -u for basic auth. Schemes sent together are each marked required.
   • More schema keys: examples, const, exclusiveMinimum / exclusiveMaximum (shown as > 0), readOnly / writeOnly, minItems / maxItems.

... (truncated)

Changelog

Sourced from @​holocron.so/vite's changelog.

0.38.0

1. New prerenderOrigin option for rendering: static pages. Absolute URLs in a prerendered page (og:url, the OG image label) come from the single host in the Worker routes. When routes list several hosts, like the apex and www, the build used the local preview origin and shipped og:url as http://localhost:…. Pass the public origin instead:

   holocron({ prerenderOrigin: 'https://example.com' })

   rendering: static is now documented in the page frontmatter reference and the Cloudflare guide.

0.37.2

1. Smaller pages, faster renders. The sidebar no longer renders the hidden heading lists of every other page; only the current page and pages matching a search show their headings. On holocron.so this removes about 225 KB of HTML per page (about 37%). The sidebar search index is now built on the first search query, not on every server render, hydration and client navigation. Before, that was about 30% of server CPU per page on a large docs site.

2. Ask AI no longer sits above the API playground. Pages whose right aside holds RequestExample or ResponseExample (OpenAPI endpoint pages, MCP tool pages, or authored pages using them) show the floating Ask AI pill instead, so the request and response examples keep the full aside. Overview pages in OpenAPI and MCP tabs still show the Ask AI widget at the top of the right aside.

3. Cleaner footer on API reference pages. OpenAPI and MCP tabs no longer show the footer logo, socials and link columns. The bottom row with the theme select and prev/next links stays.

4. Generated OpenAPI, MCP and changelog pages are valid MDX for any spec text. Text like {"lease":"studio:42"}, <id> or a stray ``` in a description or example can no longer break a page.

   • Endpoint, MCP tool and MCP resource descriptions are now escaped Markdown inside the page, not a JSON prop. They show up in the page's .md export.
   • Code fences in request and response examples are longer than any backtick run inside them.
   • Raw HTML blocks in spec Markdown stay separate paragraphs instead of joining the text around them.
   • OpenAPI x-holocron.content (and x-mint.content) is now page content placed before the endpoint, not a child of it.

5. <Markdown> never returns a 500. When its text is not valid MDX (for example {"lease":"studio:42"}), it logs a warning and shows the raw text.

6. vite build no longer hangs after prerender when wrangler.jsonc has remote bindings (for example ai). Holocron now uses spiceflow 1.26.0-rsc.22.

0.37.1

1. React 19.3 and Vite 8.3. Holocron now runs on spiceflow 1.26.0-rsc.21, which needs React 19.3 and Vite 8.2 or newer. Update your docs project:

   pnpm add react@^19.3.0 react-dom@^19.3.0 vite@^8.3.4

   Error pages no longer leak secrets like API keys or tokens in stack traces. An open tab that navigates after a new deploy reloads to the new assets instead of crashing with client reference not found.

2. Faster page renders. The cached MDX tree is no longer deep-copied with structuredClone on every request; all requests share one tree. On a long page (a 63k character README) the copy was about 14% of server CPU per request.

3. No more dummy-non-existing-folder/ when running vitest. Dev and test servers keep the Holocron cache in Vite's cache folder (node_modules/.vite/holocron). Builds still cache in dist/.

0.37.0

1. OpenAPI pages read much more of the spec. Big fidelity pass, with Mintlify conventions:

   • oneOf / anyOf schemas render. A union request or response body shows one expandable panel per option (named by its title, else Option N). A property or array item that is a union of objects gets a "Show options" panel, and its type shows the option titles (Point | Text, (Point | Text)[]). Before, a union request body rendered an empty section. This also applies to MCP field lists.
   • Server variables are filled with their defaults, so {scheme}://{host}:{port} gives a working cURL URL.
   • Optional auth: security: [{}, ...] shows an "optional" badge. cURL sends the first non-empty requirement, with apiKey in its real header, query param or cookie, and -u for basic auth. Schemes sent together are each marked required.

... (truncated)

Commits

• 7b9feaf release: @​holocron.so/vite@0.38.0
• fca7db6 feat(vite): add prerenderOrigin option for rendering: static pages
• 49e28c8 release: @​holocron.so/vite@0.37.2, @​holocron.so/cli@0.22.7
• 9629ce2 fix(vite): float Ask AI pill on pages whose aside holds the API playground
• e5cb74e fix(vite): generated pages are valid MDX for any spec text
• fbdda7f fix(vite): never 500 a page on unparseable <Markdown> text
• be89e4e perf(vite): do not render collapsed page TOCs in the sidebar
• 1642705 feat(vite): hide footer links on API and MCP reference pages
• b39912a perf(vite): build sidebar search index on first query
• ea9eadb deps: spiceflow 1.26.0-rsc.22, zod 4.6.7
• Additional commits viewable in compare view

Updates react from 19.2.8 to 19.3.1

Release notes

Sourced from react's releases.

19.3.1 (October 14th, 2026)

React Server Components

• Improve transport protocol (#37845 by @​unstubbable and @​eps1lon)

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

• <ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@​sebmarkbage, @​jackpope, @​gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)
• Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@​jackpope, @​sebmarkbage, @​eps1lon, @​Dhakshin2007, @​chirokas, @​teamleaderleo, @​fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

• browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
  • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

• Enable Trusted Types API integration (@​rickhanlonii #35816)
• Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@​acdlite #37290)
• Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@​hoxyq, @​eps1lon: #37104, #37203, #37491)

All Changes

React

• Fast Refresh Fixes
  • Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@​sophiebits #36965)
  • Fix Fast Refresh so edits to a memo() comparison function take effect (@​sophiebits #36964)
  • Fix Fast Refresh crash when an edit changes the kind of a component's type (@​sophiebits #36963)
  • Unify hot reload type resolution for Fast Refresh (@​sophiebits #36962)
  • Fix Fast Refresh to remount correctly when an edit changes the component kind (@​sophiebits #36950)
  • Double invoke effects in StrictMode after Fast Refresh (@​eps1lon #35962)
• Performance Track Fixes
  • Prevent crash when accessing $$typeof in Performance Tracks (@​eps1lon #35679)
  • Handle non-string function names in Performance Tracks (@​eps1lon #35659)
  • Use minus (-) instead of en dash for removed props in Performance Tracks (@​eps1lon #35649)
  • Handle arrays with bigints in deep objects in Performance Tracks (@​eps1lon #35648)
  • Don't enumerate typed array props in Performance Tracks in DEV (@​UditDewan #36913)
  • Bail out of diffing wide objects and arrays in Performance Tracks (@​eps1lon #34742)
  • Clear potentially large performance measures in DEV (@​hoxyq #34803)
  • Fix missing else branch for renders with no props change in Performance Tracks (@​hoxyq #34837)
• Activity Fixes
  • Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@​sophiebits #36947)
  • Hide portal contents when an Activity is hidden (@​acdlite #35091)
  • Prevent metadata hoisting in hidden <Activity> trees (@​ronnakamoto #34983)

... (truncated)

Changelog

Sourced from react's changelog.

19.3.0 (September 9, 2026)

New React Features

• <ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@​sebmarkbage, @​jackpope, @​gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)
• Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@​jackpope, @​sebmarkbage, @​eps1lon, @​Dhakshin2007, @​chirokas, @​teamleaderleo, @​fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

• browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
  • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

• Enable Trusted Types API integration (@​rickhanlonii #35816)
• Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@​acdlite #37290)
• Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@​hoxyq, @​eps1lon: #37104, #37203, #37491)

All Changes

React

• Fast Refresh Fixes
  • Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@​sophiebits #36965)
  • Fix Fast Refresh so edits to a memo() comparison function take effect (@​sophiebits #36964)
  • Fix Fast Refresh crash when an edit changes the kind of a component's type (@​sophiebits #36963)
  • Unify hot reload type resolution for Fast Refresh (@​sophiebits #36962)
  • Fix Fast Refresh to remount correctly when an edit changes the component kind (@​sophiebits #36950)
  • Double invoke effects in StrictMode after Fast Refresh (@​eps1lon #35962)
• Performance Track Fixes
  • Prevent crash when accessing $$typeof in Performance Tracks (@​eps1lon #35679)
  • Handle non-string function names in Performance Tracks (@​eps1lon #35659)
  • Use minus (-) instead of en dash for removed props in Performance Tracks (@​eps1lon #35649)
  • Handle arrays with bigints in deep objects in Performance Tracks (@​eps1lon #35648)
  • Don't enumerate typed array props in Performance Tracks in DEV (@​UditDewan #36913)
  • Bail out of diffing wide objects and arrays in Performance Tracks (@​eps1lon #34742)
  • Clear potentially large performance measures in DEV (@​hoxyq #34803)
  • Fix missing else branch for renders with no props change in Performance Tracks (@​hoxyq #34837)
• Activity Fixes
  • Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@​sophiebits #36947)
  • Hide portal contents when an Activity is hidden (@​acdlite #35091)
  • Prevent metadata hoisting in hidden <Activity> trees (@​ronnakamoto #34983)
  • Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@​acdlite #35074)
  • Don't unhide a node if a direct parent Offscreen is still hidden (@​sebmarkbage #34821)
  • Don't show internal <Offscreen> component in error messages (@​rickhanlonii #35763)
• Warn in DEV when a component appears to have been unblocked by a conditional use() (@​hoxyq, @​eps1lon: #37104, #37203, #37491)
• Render transitions independently instead of entangling them into a single render (@​acdlite #37290)
• Fix hang when updating a dehydrated boundary inside a hidden tree (@​gaearon #37135)
• Don't reacquire Host Singletons during dev effect validation (@​gnoff #37113)
• Only remove properties from Host Singletons on release (@​gnoff #37112)

... (truncated)

Commits

• 61aa00d [19.3.x][Flight] Improve transport protocol (#37845)
• 2dc7da7 [test] Bump Jest to 30.4 (#37382)
• 4f93894 docs: remove stale parentType param from validateChildKeys JSDoc (#36928)
• dbc3750 Update required references to GitHub repo (#36752)
• 900ae09 [flow] Bump flow to v0.317.0 (#36701)
• fbb1370 [flow] Bump flow to v0.307.1 (#36199)
• 56922cf [react-native-renderer] Delete Paper (legacy) renderer (#36285)
• 74568e8 [Flight] Transport AggregateErrors.errors (#36156)
• e66ef64 [tests] remove withoutStack from assertConsole helpers (#35498)
• db71391 [Fiber] Instrument the lazy initializer thenable in all cases (#35521)
• Additional commits viewable in compare view

Updates react-dom from 19.2.8 to 19.3.1

Release notes

Sourced from react-dom's releases.

19.3.1 (October 14th, 2026)

React Server Components

• Improve transport protocol (#37845 by @​unstubbable and @​eps1lon)

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

• <ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@​sebmarkbage, @​jackpope, @​gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)
• Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@​jackpope, @​sebmarkbage, @​eps1lon, @​Dhakshin2007, @​chirokas, @​teamleaderleo, @​fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

• browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
  • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

• Enable Trusted Types API integration (@​rickhanlonii #35816)
• Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@​acdlite #37290)
• Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@​hoxyq, @​eps1lon: #37104, #37203, #37491)

All Changes

React

• Fast Refresh Fixes
  • Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@​sophiebits #36965)
  • Fix Fast Refresh so edits to a memo() comparison function take effect (@​sophiebits #36964)
  • Fix Fast Refresh crash when an edit changes the kind of a component's type (@​sophiebits #36963)
  • Unify hot reload type resolution for Fast Refresh (@​sophiebits #36962)
  • Fix Fast Refresh to remount correctly when an edit changes the component kind (@​sophiebits

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
brainkit-docs	Ready	Preview	Oct 9, 2026 10:14pm UTC