fix(deps): update external-non-major

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@aws-sdk/client-s3 (source)	^3.975.0 → ^3.980.0
@aws-sdk/signature-v4-crt (source)	^3.972.0 → ^3.980.0
@biomejs/biome (source)	^2.3.12 → ^2.3.13
@commitlint/cli (source)	^20.3.1 → ^20.4.0
@commitlint/config-conventional (source)	^20.3.1 → ^20.4.0
@types/react (source)	^19.2.9 → ^19.2.10
autoprefixer	^10.4.23 → ^10.4.24
react (source)	^19.2.3 → ^19.2.4
react-dom (source)	^19.2.3 → ^19.2.4
tailwind-merge	^2.6.0 → ^2.6.1
turbo (source)	^2.7.6 → ^2.8.1

---

Release Notes

aws/aws-sdk-js-v3 (@​aws-sdk/client-s3)

v3.980.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-s3

v3.978.0

Compare Source

Features

• client-s3: Adds support for the UpdateObjectEncryption API to change the server-side encryption type of objects in general purpose buckets. (b56cea5)

aws/aws-sdk-js-v3 (@​aws-sdk/signature-v4-crt)

v3.980.0

Compare Source

Note: Version bump only for package @​aws-sdk/signature-v4-crt

biomejs/biome (@​biomejs/biome)

v2.3.13

Compare Source

Patch Changes

• #​8815 f924f23 Thanks @​dyc3! - Improved useVueValidVOn to be more closely aligned with the source rule. It will now properly allow modifiers for all possible keyboard events. It should have better performance when there are no violations of the rule as well.

  Now treated valid:

  <div @&#8203;keydown.arrow-down="handler"></div>
  <div @&#8203;keydown.a="handler"></div>
  <div @&#8203;keydown.b="handler"></div>
  <div @&#8203;keydown.27="foo"></div>

• #​8856 85f81f9 Thanks @​dyc3! - Fixed #​8710: Biome now parses Vue dynamic slot shorthand arguments that use template literals in [].

• #​8850 2a190e0 Thanks @​dyc3! - Fixed #​8708: Tailwind @utility directives now parse functional utility names like px-* when Tailwind directives are enabled.

• #​8863 79386e0 Thanks @​dyc3! - Fixed an issue with biome migrate eslint where it couldn't detect rules for CSS, GraphQL, and HTML.

• #​8771 6f56b6e Thanks @​lghuahua! - Fix the --reporter=summary output incorrectly merging and displaying wrong issue counts for different rules. Fixes #​8730

• #​8714 ac3a71f Thanks @​Netail! - Added new nursery rule use-consistent-enum-value-type. This rule disallows enums from having both number and string members.

conventional-changelog/commitlint (@​commitlint/cli)

v20.4.0

Compare Source

Features

• upgrade conventional commit packages #​4082 (#​4597) (3aaf0a6)

20.3.1 (2026-01-08)

Note: Version bump only for package @​commitlint/cli

conventional-changelog/commitlint (@​commitlint/config-conventional)

v20.4.0

Compare Source

Features

• upgrade conventional commit packages #​4082 (#​4597) (3aaf0a6)

20.3.1 (2026-01-08)

Note: Version bump only for package @​commitlint/config-conventional

postcss/autoprefixer (autoprefixer)

v10.4.24

Compare Source

• Made Autoprefixer a little faster (by @​Cherry).

facebook/react (react)

v19.2.4: 19.2.4 (January 26th, 2026)

Compare Source

React Server Components

• Add more DoS mitigations to Server Actions, and harden Server Components (#​35632 by @​gnoff, @​lubieowoce, @​sebmarkbage, @​unstubbable)

dcastil/tailwind-merge (tailwind-merge)

v2.6.1

Compare Source

Bug Fixes

• Fix arbitrary value using color-mix not being detected as color by @​dcastil in #​591
  • This fix was backported from v3.3.1 to make it available for v2 users.

Full Changelog: dcastil/tailwind-merge@v2.6.0...v2.6.1

Thanks to @​brandonmcconnell, @​manavm1990, @​langy, @​roboflow, @​syntaxfm, @​getsentry, @​codecov, a private sponsor, @​block, @​openclaw and more via @​thnxdev for sponsoring tailwind-merge! ❤️

vercel/turborepo (turbo)

v2.8.1: Turborepo v2.8.1

Compare Source

What's Changed

Docs

• docs: Release post for 2.8 by @​anthonyshew in #​11559
• docs: Update oxc.mdx to include cache false by @​bestickley in #​11571
• docs: Fix curl markdown Accept header syntax in 2.8 release blog by @​marko-hologram in #​11580
• docs: Fix worktree command in blog post by @​anthonyshew in #​11583
• docs: Rename command → subcommand by @​anthonyshew in #​11584
• feat: Add requestType tracking for header-negotiated markdown by @​molebox in #​11585

Changelog

• fix: Support trailing commas in microfrontends JSONC files by @​anthonyshew in #​11573
• perf: Replace third-party crates with Rust std lib equivalents by @​anthonyshew in #​11569
• perf: Reduce duplicate dependency versions by @​anthonyshew in #​11568
• chore: Remove legacy Go/goreleaser buildcontainer directory by @​anthonyshew in #​11576
• chore: Rename README.md to RULE.md in skills directory by @​anthonyshew in #​11582
• fix: Validate turbo version from lockfile for all package managers by @​anthonyshew in #​11587

New Contributors

• @​bestickley made their first contribution in #​11571
• @​marko-hologram made their first contribution in #​11580

Full Changelog: vercel/turborepo@v2.8.0...v2.8.1

v2.8.0: Turborepo v2.8.0

Compare Source

What's Changed

Docs

• fix(docs): Hide line numbers for terminal code blocks by @​anthonyshew in #​11560
• fix: Disable pointer events on closed chat panel by @​anthonyshew in #​11561

@​turbo/repository

• chore: Update to Rust 1.93.0 by @​ognevny in #​11548

Changelog

• chore: Update docs:dev script filter to point to the correct documentation site path by @​yujiseok in #​11551
• docs(skills): Standardize --dry flag usage by @​jeniabrook in #​11550
• fix: Normalize ANSI escape codes in insta snapshots by @​anthonyshew in #​11564
• chore: Remove unused dependencies by @​anthonyshew in #​11565

New Contributors

• @​yujiseok made their first contribution in #​11551

Full Changelog: vercel/turborepo@v2.7.6...v2.8.0

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[deepsource-io]

Here's the code health analysis summary for commits 8db47ca..1dc58ba. View details on DeepSource ↗.

Analysis Summary

Analyzer	Status	Summary	Link
JavaScript	✅ Success		View Check ↗

---

💡 If you’re a repository administrator, you can configure the quality gates from the settings.