chore(deps): bump the npm group across 1 directory with 39 updates

[dependabot]

Bumps the npm group with 39 updates in the / directory:

Package	From	To
@biomejs/biome	2.5.1	2.5.5
@types/node	26.0.1	26.1.1
@typescript-eslint/parser	8.62.1	8.65.0
eslint	10.6.0	10.7.0
tsx	4.22.4	4.23.1
turbo	2.10.1	2.10.5
typescript	6.0.3	7.0.2
mutation-testing-metrics	3.8.0	3.8.4
xstate	5.32.2	5.32.5
pure-rand	6.1.0	8.4.2
@electric-sql/pglite	0.5.3	0.5.4
@electric-sql/pglite-socket	0.2.6	0.2.7
@opentelemetry/exporter-metrics-otlp-http	0.219.0	0.220.0
@opentelemetry/exporter-trace-otlp-http	0.219.0	0.220.0
@opentelemetry/instrumentation-http	0.219.0	0.220.0
@opentelemetry/resources	2.8.0	2.9.0
@opentelemetry/sdk-metrics	2.8.0	2.9.0
@opentelemetry/sdk-node	0.219.0	0.220.0
@opentelemetry/sdk-trace-base	2.8.0	2.9.0
@opentelemetry/sdk-trace-node	2.8.0	2.9.0
@opentelemetry/semantic-conventions	1.41.1	1.43.0
fastify	5.9.0	5.10.0
@pact-foundation/pact	17.0.0	17.0.1
@fastify/websocket	11.2.0	11.3.0
ws	8.21.0	8.21.1
@storybook/addon-a11y	10.4.6	10.5.3
@storybook/addon-vitest	10.4.6	10.5.3
@storybook/react-vite	10.4.6	10.5.3
@tailwindcss/vite	4.3.2	4.3.3
@vitest/browser	4.1.9	4.1.10
@vitest/browser-playwright	4.1.9	4.1.10
msw	2.14.6	2.15.0
storybook	10.4.6	10.5.3
tailwindcss	4.3.2	4.3.3
vite	8.1.1	8.1.5
@vitest/coverage-v8	4.1.9	4.1.10
fast-check	4.8.0	4.9.0
undici	8.5.0	8.8.0
vitest	4.1.9	4.1.10

Updates @biomejs/biome from 2.5.1 to 2.5.5

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.5

2.5.5

Patch Changes

• #10972 ab8c21b Thanks @​ematipico! - Fixed useExhaustiveSwitchCases for unions of bigint literals. The rule now reports missing bigint cases and compares bigint literals by value, including binary, octal, hexadecimal, and separator-containing spellings. For example, this switch now reports the missing 2n case:

  declare const value: 1n | 2n;
  switch (value) {
    case 1n:
      break;
  }

• #10972 ab8c21b Thanks @​ematipico! - Fixed false positives in noBaseToString and useNullishCoalescing when member, stringification, or nullish inference cannot complete. These rules now suppress diagnostics instead of reporting from partial type information. For example, neither expression is reported when a recursive type cannot be fully resolved:

  type Recursive = Recursive;
  declare const value: Recursive;
  String(value);
  value || "fallback";

• #10977 0bf7486 Thanks @​ematipico! - Fixed #10922: the action useSortedAttributes no longer triggers for HTML instructions.

• #10957 cf263c4 Thanks @​dyc3! - Fixed noThenProperty failing to detect Object.fromEntries, Object.defineProperty, and Reflect.defineProperty calls with comments between their tokens.

• #10983 edc0ed7 Thanks @​ayaangazali! - Fixed #10980: useAriaPropsSupportedByRole no longer reports false positives when the attribute that determines an element's implicit ARIA role is written as a shorthand attribute, such as <a {href} aria-label="..."> in Astro and Svelte files.

  Shorthand attributes are now taken into account when computing the implicit role, so the anchor above correctly resolves to the link role instead of generic.

• #10889 89526e3 Thanks @​denbezrukov! - Fixed CSS formatter casing for syntax-owned names while preserving author-defined names, including scoped keyframes and container scroll-state queries.

  - A:HOVER { COLOR: INITIAL; }
  + A:hover { color: initial; }
  - @KEYFRAMES :GLOBAL KeepFrames { FROM { COLOR: RED; } }
  + @keyframes :GLOBAL KeepFrames { from { color: RED; } }
  - @CONTAINER scroll-state((SCROLLED: TOP) AND (STUCK)) { A:HOVER { COLOR: RED; } }
  + @container scroll-state((SCROLLED: TOP) AND (STUCK)) { A:hover { color: RED; } }

• #10964 794ccd0 Thanks @​denbezrukov! - Fixed CSS formatting for comments between declaration values and !important.

  -a { color: /* before */ /* after */ red !important; }
  +a { color: /* before */ red /* after */ !important; }

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.5

Patch Changes

• #10972 ab8c21b Thanks @​ematipico! - Fixed useExhaustiveSwitchCases for unions of bigint literals. The rule now reports missing bigint cases and compares bigint literals by value, including binary, octal, hexadecimal, and separator-containing spellings. For example, this switch now reports the missing 2n case:

  declare const value: 1n | 2n;
  switch (value) {
    case 1n:
      break;
  }

• #10972 ab8c21b Thanks @​ematipico! - Fixed false positives in noBaseToString and useNullishCoalescing when member, stringification, or nullish inference cannot complete. These rules now suppress diagnostics instead of reporting from partial type information. For example, neither expression is reported when a recursive type cannot be fully resolved:

  type Recursive = Recursive;
  declare const value: Recursive;
  String(value);
  value || "fallback";

• #10977 0bf7486 Thanks @​ematipico! - Fixed #10922: the action useSortedAttributes no longer triggers for HTML instructions.

• #10957 cf263c4 Thanks @​dyc3! - Fixed noThenProperty failing to detect Object.fromEntries, Object.defineProperty, and Reflect.defineProperty calls with comments between their tokens.

• #10983 edc0ed7 Thanks @​ayaangazali! - Fixed #10980: useAriaPropsSupportedByRole no longer reports false positives when the attribute that determines an element's implicit ARIA role is written as a shorthand attribute, such as <a {href} aria-label="..."> in Astro and Svelte files.

  Shorthand attributes are now taken into account when computing the implicit role, so the anchor above correctly resolves to the link role instead of generic.

• #10889 89526e3 Thanks @​denbezrukov! - Fixed CSS formatter casing for syntax-owned names while preserving author-defined names, including scoped keyframes and container scroll-state queries.

  - A:HOVER { COLOR: INITIAL; }
  + A:hover { color: initial; }
  - @KEYFRAMES :GLOBAL KeepFrames { FROM { COLOR: RED; } }
  + @keyframes :GLOBAL KeepFrames { from { color: RED; } }
  - @CONTAINER scroll-state((SCROLLED: TOP) AND (STUCK)) { A:HOVER { COLOR: RED; } }
  + @container scroll-state((SCROLLED: TOP) AND (STUCK)) { A:hover { color: RED; } }

• #10964 794ccd0 Thanks @​denbezrukov! - Fixed CSS formatting for comments between declaration values and !important.

  -a { color: /* before */ /* after */ red !important; }
  +a { color: /* before */ red /* after */ !important; }

... (truncated)

Commits

• 412a0e9 ci: release (#10948)
• b3b12b3 feat(lint): add noNegationInEqualityCheck rule (#10915)
• 9a66bc7 chore: add latitude to sponsors (#10947)
• bfc3f3d ci: release (#10887)
• 9e1999f chore: revert the revert
• 0b0fd8d chore: revert
• 0afa35a ci: release (#10817)
• 3447b2f feat(useDomQuerySelector): add ignore option (#10835)
• e649198 ci: release (#10747)
• 4a32b63 feat(lint): add ignorePrimitives option to useNullishCoalescing (#10798)
• Additional commits viewable in compare view

Updates @types/node from 26.0.1 to 26.1.1

Commits

• See full diff in compare view

Updates @typescript-eslint/parser from 8.62.1 to 8.65.0

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.65.0

8.65.0 (2026-07-20)

🚀 Features

• add warning when TS 7 is detected (#12529)
• eslint-plugin: [no-restricted-imports] deprecate extension rule (#12527, #19562, #11889)
• eslint-plugin: [no-shadow] specialized error on enum declaration and member shadowing (#12578)
• parser: add onUnsupportedTypeScriptVersion option to error on unsupported TypeScript versions (#12465)
• typescript-estree: throw for invalid import defer syntax (#12552)

🩹 Fixes

• eslint-plugin: [prefer-string-starts-ends-with] handle escaped $ ending regex literals (#12515)
• eslint-plugin: [unbound-method] report unbound methods accessed via member expression on union types (#12448)
• eslint-plugin: [no-unnecessary-parameter-property-assignment] don't flag computed assignments with a variable key (#12568)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Josh Goldberg ✨
• Kirk Waiblinger @​kirkwaiblinger
• Serhii Leniv @​Serhii-Leniv
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.64.0

8.64.0 (2026-07-13)

🚀 Features

• support parsing import defer (#12513)
• eslint-plugin: [no-loop-func] support using / await using declarations and deprecate the rule (#12500)
• typescript-estree: throw for invalid definite assignment in class properties (#12543)

🩹 Fixes

• eslint-plugin: [require-array-sort-compare] handle constrained arrays (#12512)

❤️ Thank You

• Evyatar Daud @​StyleShit
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

... (truncated)

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.65.0 (2026-07-20)

🚀 Features

• add warning when TS 7 is detected (#12529)
• parser: add onUnsupportedTypeScriptVersion option to error on unsupported TypeScript versions (#12465)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Josh Goldberg ✨
• Kirk Waiblinger @​kirkwaiblinger
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.64.0 (2026-07-13)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.63.0 (2026-07-06)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

• 63ba81b chore(release): publish 8.65.0
• eaf4576 feat: add warning when TS 7 is detected (#12529)
• d8f1044 feat(parser): add onUnsupportedTypeScriptVersion option to error on unsupport...
• 0d06406 chore: add attw validation to repo (#12437)
• c2386e4 chore(deps): update dependency prettier to v3.9.5 (#12486)
• 414d9ab chore(release): publish 8.64.0
• 290cf6c chore(release): publish 8.63.0
• See full diff in compare view

Updates eslint from 10.6.0 to 10.7.0

Release notes

Sourced from eslint's releases.

v10.7.0

Features

• cf2a9bf feat: add errorClassNames option to preserve-caught-error rule (#21032) (sethamus)
• f8b873a feat: max-nested-callbacks option for constructor callbacks (#21063) (fnx)
• 557fde8 feat: support computed Number.parseInt member access in radix rule (#21041) (Pixel)
• 0b4a73b feat: add suggestions to no-compare-neg-zero (#21034) (den$)
• 96cdd42 feat: report invalid signed numeric radix values in radix rule (#21030) (Pixel)

Bug Fixes

• 3e7bf15 fix: apply ignoreClassesWithImplements to class expressions (#21069) (Pixel)
• 0d7d70c fix: insert cause outside wrapping parens in preserve-caught-error (#21062) (Mahin Anowar)
• 75ec753 fix: handle static template literals in eqeqeq rule (#21058) (Pixel)
• b717a22 fix: prevent eqeqeq null option from reporting non-equality operators (#21057) (Pixel)
• e35b05f fix: avoid no-invalid-regexp false positive for shadowed RegExp (#21051) (Pixel)
• a3172b6 fix: avoid no-control-regex false positive for shadowed RegExp (#21050) (Pixel)
• d1f637e fix: parenthesize sequence expression operands in no-implicit-coercion (#21045) (spokodev)
• 8859baf fix: avoid prefer-numeric-literals false positive for shadowed globals (#21047) (한국)
• a9e5961 fix: use-isnan false positive on shadowed NaN/Number (#20958) (sethamus)
• 8a240a7 fix: avoid false positives in radix rule for spread arguments (#21044) (Pixel)

Documentation

• c30d808 docs: Update README (GitHub Actions Bot)
• 5139800 docs: document ESLint migration codemods in v9 and v10 guides (#20980) (Alex Bit)
• 04174cb docs: Update README (GitHub Actions Bot)
• 026e130 docs: update semver policy for bug fixes (#21048) (Milos Djermanovic)
• 9d42fef docs: Update README (GitHub Actions Bot)
• b230159 docs: Update README (GitHub Actions Bot)
• 0129972 docs: correct **/.js glob to **/*.js in config files guide (#21036) (EduardF1)

Chores

• 9489379 chore: update dependency @​eslint/eslintrc to ^3.3.6 (#21076) (renovate[bot])
• 81a4774 chore: updates for v9.39.5 release (Jenkins)
• 9835414 chore: enable $ExpectType annotations in all TypeScript files (#21071) (Francesco Trotta)
• 72adf6b chore: restrict markdownlint-cli2 updates in renovate (#21067) (lumir)
• 833ec10 chore: update dependency prettier to v3.9.4 (#21061) (renovate[bot])
• 7ea106d chore: update ecosystem plugins (#21059) (ESLint Bot)
• 8fb550e chore: add prettier update commit to .git-blame-ignore-revs (#21056) (lumir)
• e4e1166 chore: update dependency prettier to v3.9.1 (#21055) (renovate[bot])
• 0493f53 chore: update prettier to v3.9.0 (#21054) (Pixel)
• 1056a99 chore: update dependency prettier to v3.8.5 (#21049) (renovate[bot])
• 4d4155d ci: run ecosystem tests on pull requests (#21027) (sethamus)
• 993539f chore: update dependency @​eslint/json to ^2.0.1 (#21042) (renovate[bot])
• 53f8b69 test: add error locations to no-constant-binary-expression (#21039) (lumir)
• 5ab71d5 refactor: clean up radix rule internals (#21015) (Pixel)
• a80a9a4 chore: update ecosystem plugins (#21035) (ESLint Bot)
• 7c9a029 ci: add Node.js 26 to CI (#20847) (lumir)

Commits

• fabd99b 10.7.0
• 37c5e75 Build: changelog update for 10.7.0
• 9489379 chore: update dependency @​eslint/eslintrc to ^3.3.6 (#21076)
• 81a4774 chore: updates for v9.39.5 release
• 3e7bf15 fix: apply ignoreClassesWithImplements to class expressions (#21069)
• 9835414 chore: enable $ExpectType annotations in all TypeScript files (#21071)
• cf2a9bf feat: add errorClassNames option to preserve-caught-error rule (#21032)
• c30d808 docs: Update README
• f8b873a feat: max-nested-callbacks option for constructor callbacks (#21063)
• 72adf6b chore: restrict markdownlint-cli2 updates in renovate (#21067)
• Additional commits viewable in compare view

Updates tsx from 4.22.4 to 4.23.1

Release notes

Sourced from tsx's releases.

v4.23.1

4.23.1 (2026-07-13)

Bug Fixes

• support tsImport after global preload (8d4ffc2)
• watch: avoid clearing piped output (95d0672)
• watch: treat script and dependency paths literally (79fddde)

Performance Improvements

• index transform cache lazily (e818ad6)
• load esbuild lazily in CLI (d067938)
• map Node TypeScript formats directly (cdcc623)
• use sync module hooks on Node v22.22.3+ (f8992f1)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.23.0

4.23.0 (2026-07-03)

Bug Fixes

• avoid redundant filesystem probes during module resolution (257bbbb), closes privatenumber/tsx#809

Features

• add multi-scenario startup benchmark suite (c178197), closes privatenumber/tsx#809 #809 hi#signal privatenumber/tsx#145 #809

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.22.5

4.22.5 (2026-07-02)

Bug Fixes

• isolate hook state per async module.register() registration (a305f36)

---

This release is also available on:

• npm package (@​latest dist-tag)

Commits

• 79fddde fix(watch): treat script and dependency paths literally
• e818ad6 perf: index transform cache lazily
• cdcc623 perf: map Node TypeScript formats directly
• d067938 perf: load esbuild lazily in CLI
• 95d0672 fix(watch): avoid clearing piped output
• 6fd4607 docs: add per-page metadata
• f4176d8 docs: generate sitemap
• 8d4ffc2 fix: support tsImport after global preload
• f0e89b2 docs: document Node's public type-stripping API vs internal loader path
• f8992f1 perf: use sync module hooks on Node v22.22.3+
• Additional commits viewable in compare view

Updates turbo from 2.10.1 to 2.10.5

Release notes

Sourced from turbo's releases.

Turborepo v2.10.5

What's Changed

Changelog

• perf: Evaluate simple include globs without wax compilation by @​anthonyshew in vercel/turborepo#13285
• chore: Dogfood native Cargo support in this repository by @​anthonyshew in vercel/turborepo#13283
• release(turborepo): 2.10.4 by @​github-actions[bot] in vercel/turborepo#13286
• ci: Remove dead sccache configuration by @​anthonyshew in vercel/turborepo#13289
• feat: Serve the Remote Cache as an sccache backend for Cargo tasks by @​anthonyshew in vercel/turborepo#13288
• fix: Reject output path traversal by @​anthonyshew in vercel/turborepo#13290
• fix: Disable the sccache proxy when remote cache use is off by @​anthonyshew in vercel/turborepo#13291
• feat: Embed sccache so the Cargo compile cache needs no installation by @​anthonyshew in vercel/turborepo#13293
• release(turborepo): 2.10.5-canary.1 by @​github-actions[bot] in vercel/turborepo#13294
• fix: Pin a flag-aware turbo canary for the eve-agent deployment by @​anthonyshew in vercel/turborepo#13295
• fix: Make the sccache compile cache actually cache by @​anthonyshew in vercel/turborepo#13296
• release(turborepo): 2.10.5-canary.2 by @​github-actions[bot] in vercel/turborepo#13297
• fix: Stop ambient CARGO_INCREMENTAL from suppressing compile cache injection by @​anthonyshew in vercel/turborepo#13298
• fix: Never let compile cache storage failures fail the build by @​anthonyshew in vercel/turborepo#13299
• test: Add outputs path-traversal negative-case regression tests by @​dnukumamras in vercel/turborepo#13300
• release(turborepo): 2.10.5-canary.3 by @​github-actions[bot] in vercel/turborepo#13302
• ci: Authenticate to Remote Cache via OIDC token exchange by @​anthonyshew in vercel/turborepo#13303
• fix: Keep pnpm patches with version range keys during prune by @​anthonyshew in vercel/turborepo#13307
• test: Scrub ambient turbo configuration from integration test children by @​anthonyshew in vercel/turborepo#13306
• fix: Show toolchain tasks in the TUI and never run in silence by @​anthonyshew in vercel/turborepo#13308
• ci: Fix change detection on push events by @​anthonyshew in vercel/turborepo#13304
• refactor: Rename the Cargo toolchain id to rust by @​anthonyshew in vercel/turborepo#13311
• fix: Remove extraneous bun.lock entries during prune by @​anthonyshew in vercel/turborepo#13317
• feat: Require a user-declared name for the Cargo workspace package by @​anthonyshew in vercel/turborepo#13312
• feat: Parse and validate the task command field by @​anthonyshew in vercel/turborepo#13313
• chore: Harden turbo-vsc to invoke turbo without a shell by @​dnukumamras in vercel/turborepo#13319
• feat: Resolve and execute task command overrides by @​anthonyshew in vercel/turborepo#13315
• release(turborepo): 2.10.5-canary.4 by @​github-actions[bot] in vercel/turborepo#13325
• feat: Run the Rust workspace tests through nextest via command override by @​anthonyshew in vercel/turborepo#13316
• feat: Engage the Remote Cache and sccache compile cache for Rust CI by @​anthonyshew in vercel/turborepo#13292
• ci: Pin GitHub Actions to full commit SHAs by @​XananasX7 in vercel/turborepo#13143
• fix: Make npm prune rehoisting deterministic and complete by @​anthonyshew in vercel/turborepo#13323
• feat: Report incremental cache reuse in the run summary by @​anthonyshew in vercel/turborepo#13327
• chore: Remove planning docs by @​anthonyshew in vercel/turborepo#13329
• docs: Migrate docs site to @​vercel/geistdocs package by @​molebox in vercel/turborepo#13320
• ci: Update Remote Cache action by @​anthonyshew in vercel/turborepo#13330
• release(turborepo): 2.10.5-canary.5 by @​github-actions[bot] in vercel/turborepo#13331
• ci: Remove path-based workflow scheduling by @​anthonyshew in vercel/turborepo#13332
• fix: Resolve EADDRINUSE in kitchen-sink api dev script by @​ashusnapx in vercel/turborepo#13328
• ci: Disable telemetry messages in workflows by @​anthonyshew in vercel/turborepo#13334
• fix: Prevent Cargo run tasks from being cached by @​anthonyshew in vercel/turborepo#13335
• fix: Isolate Cargo cache by host platform by @​anthonyshew in vercel/turborepo#13337
• fix: Continue TUI text selection beyond viewport by @​anthonyshew in vercel/turborepo#13338
• ci: Dogfood Cargo target restoration by @​anthonyshew in vercel/turborepo#13336
• fix: Require current Cargo lockfiles for caching by @​anthonyshew in vercel/turborepo#13339

... (truncated)

Commits

• 78091b6 publish 2.10.5 to registry
• 82bcfb6 refactor: Add Toolchain output availability (#13360)
• 6ed2fb4 fix: Preserve Yarn package extension ranges when pruning (#13363)
• 38aa7d2 chore: Update agents app Eve dependency (#13364)
• ed17249 fix: Synchronize Cargo prune Docker lockfile (#13350)
• d533266 fix: Hash Cargo build environment inputs (#13348)
• ef122d9 ci: Shard Rust tests across runners (#13356)
• b3cd7a1 fix: Include patched Ghostty crate in Cargo workspace (#13357)
• f82e2c7 release(turborepo): 2.10.5-canary.6 (#13355)
• e76f0b4 fix: Isolate Command Overrides From Toolchain Cache I/O (#13354)
• Additional commits viewable in compare view

Updates typescript from 6.0.3 to 7.0.2

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

Updates mutation-testing-metrics from 3.8.0 to 3.8.4

Release notes

Sourced from mutation-testing-metrics's releases.

v3.8.4

3.8.4 (2026-07-06)

Performance Improvements

• multiple performance improvements to rendering and calculating scores (#4246) (083117c)

v3.8.3

3.8.3 (2026-06-05)

Note: Version bump only for package root

Changelog

Sourced from mutation-testing-metrics's changelog.

3.8.4 (2026-07-06)

Performance Improvements

• multiple performance improvements to rendering and calculating scores (#4246) (083117c)

Commits

• bac7aac v3.8.4
• 083117c perf: multiple performance improvements to rendering and calculating scores (...
• 7c71b1b chore(deps): update dependency prettier to v3.9.4 (#4244)
• See full diff in compare view

Updates xstate from 5.32.2 to 5.32.5

Release notes

Sourced from xstate's releases.

xstate@5.32.5

Patch Changes

• #5603 345e04c Thanks @​xianjianlf2! - Sending an event to a stopped actor no longer throws when the event contains unserializable data (e.g. circular references). Previously, the development-only warning that an event was sent to a stopped actor used JSON.stringify on the event, which could throw and mask the intended warning. The warning is now emitted safely regardless of the event's contents.

xstate@5.32.4

Patch Changes

• #5589 e913eeb Thanks @​spokodev! - Fixed a bug where targeting a history state that is a direct child of a parallel state would silently do nothing when that parallel state had not been visited yet and the history state had no default target. The machine now enters the parallel state's initial configuration, matching the behavior of history states inside compound states.

  const machine = createMachine({
    initial: 'off',
    states: {
      off: { on: { GO: 'on.hist' } },
      on: {
        type: 'parallel',
        states: {
          regA: { initial: 'a1', states: { a1: {}, a2: {} } },
          regB: { initial: 'b1', states: { b1: {}, b2: {} } },
          hist: { type: 'history', history: 'deep' }
        }
      }
    }
  });
  const actor = createActor(machine).start();
  actor.send({ type: 'GO' });
  actor.getSnapshot().value; // { on: { regA: 'a1', regB: 'b1' } }

xstate@5.32.3

Patch Changes

• #5575 830db8b Thanks @​JSap0914! - Fixed initialTransition (and transition) throwing "Actor with system ID '...' already exists" when the machine contains an invoke with a systemId.

  Root cause: createInertActorScope used createActor(logic) internally, which eagerly ran getInitialSnapshot during construction and registered any systemId-carrying child actors in the system. When the caller then ran getInitialSnapshot (or transition) via the returned scope, the same system was reused, causing the duplicate-registration error.

  Fix: After creating the internal actor, createInertActorScope now replaces the actor's system reference with a freshly-created system. Child actors spawned by the subsequent caller-driven getInitialSnapshot / transition invocation therefore register into a clean system with no pre-existing entries.

  const machine = createMachine({
    initial: 'idle',
    states: {
      idle: {
        invoke: {
          src: fromPromise(async () => 42),
          systemId: 'myActor' // previously caused: "Actor with system ID 'myActor' already exists"
        }
      }

... (truncated)

Commits

• c25dba0 Version Packages (#5604)
• b669e95 fix(xstate-vue): correct vitest include glob so tests are discovered (#5607)
• 345e04c fix(core): don't throw when warning about unserializable event sent to stoppe...
• 9297fa8 Version Packages (#5590)
• Description has been truncated

[github-actions]

🔒 This PR edits an invariant source

It changes a single-source-of-truth definition — a Zod contract, a formal spec, or a
falsifiable-claim / detection-matrix manifest. Each one derives the enforcement below it:
DB constraints, runtime validators, generated OpenAPI, property generators, bound assertions.
Weakening one quietly weakens every check downstream — the exact failure mode this guard exists
to catch.

Per ADR-0024 / AGENTS.md this is a deliberate change: it needs an ADR and a Code Owner
sign-off (you can't self-approve it), not a quiet edit to turn a red check green.

Files

packages/contracts/package.json