⬆️📜 Update patch updates

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@tailwindcss/postcss (source)	4.1.17 -> 4.1.18			devDependencies	patch
@types/node (source)	24.10.1 -> 24.10.3			devDependencies	patch
astral-sh/ruff-pre-commit	v0.14.7 -> v0.14.9			repository	patch
astral-sh/uv-pre-commit	0.9.13 -> 0.9.17			repository	patch
eslint (source)	9.39.1 -> 9.39.2			devDependencies	patch
eslint-config-next (source)	16.0.7 -> 16.0.10			devDependencies	patch
munich-quantum-toolkit/workflows	v1.17.3 -> v1.17.4			action	patch
rbubley/mirrors-prettier	v3.7.3 -> v3.7.4			repository	patch
react (source)	19.2.1 -> 19.2.3			dependencies	patch
react-dom (source)	19.2.1 -> 19.2.3			dependencies	patch
tailwindcss (source)	4.1.17 -> 4.1.18			devDependencies	patch

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

---

Release Notes

tailwindlabs/tailwindcss (@​tailwindcss/postcss)

v4.1.18

Compare Source

Fixed

• Ensure validation of source(…) happens relative to the file it is in (#​19274)
• Include filename and line numbers in CSS parse errors (#​19282)
• Skip comments in Ruby files when checking for class names (#​19243)
• Skip over arbitrary property utilities with a top-level ! in the value (#​19243)
• Support environment API in @tailwindcss/vite (#​18970)
• Preserve case of theme keys from JS configs and plugins (#​19337)
• Write source maps correctly on the CLI when using --watch (#​19373)
• Handle special defaults (like ringColor.DEFAULT) in JS configs (#​19348)
• Improve backwards compatibility for content theme key from JS configs (#​19381)
• Upgrade: Handle future and experimental config keys (#​19344)
• Try to canonicalize any arbitrary utility to a bare value (#​19379)
• Validate candidates similarly to Oxide (#​19397)
• Canonicalization: combine text-* and leading-* classes (#​19396)
• Correctly handle duplicate CLI arguments (#​19416)
• Don’t emit color-mix fallback rules inside @keyframes (#​19419)
• CLI: Don't hang when output is /dev/stdout (#​19421)

astral-sh/ruff-pre-commit (astral-sh/ruff-pre-commit)

v0.14.9

Compare Source

See: https://github.com/astral-sh/ruff/releases/tag/0.14.9

v0.14.8

Compare Source

See: https://github.com/astral-sh/ruff/releases/tag/0.14.8

astral-sh/uv-pre-commit (astral-sh/uv-pre-commit)

v0.9.17

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.9.17

v0.9.16

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.9.16

v0.9.15

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.9.15

v0.9.14

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.9.14

eslint/eslint (eslint)

v9.39.2

Compare Source

vercel/next.js (eslint-config-next)

v16.0.10

Compare Source

v16.0.9

Compare Source

v16.0.8

Compare Source

munich-quantum-toolkit/workflows (munich-quantum-toolkit/workflows)

v1.17.4

Compare Source

📚 Refer to the GitHub Release Notes for previous changelogs.

rbubley/mirrors-prettier (rbubley/mirrors-prettier)

v3.7.4

Compare Source

facebook/react (react)

v19.2.3: 19.2.3 (December 11th, 2025)

Compare Source

React Server Components

• Add extra loop protection to React Server Functions (@​sebmarkbage #​35351)

v19.2.2: 19.2.2 (December 11th, 2025)

Compare Source

React Server Components

• Move react-server-dom-webpack/*.unbundled to private react-server-dom-unbundled (@​eps1lon #​35290)
• Patch Promise cycles and toString on Server Functions (@​sebmarkbage, @​unstubbable #​35289)

---

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.