chore(deps): bump the fumadocs group across 1 directory with 3 updates

[dependabot]

Bumps the fumadocs group with 3 updates in the / directory: fumadocs-core, fumadocs-mdx and fumadocs-ui.

Updates fumadocs-core from 16.13.0 to 16.14.4

Release notes

Sourced from fumadocs-core's releases.

fumadocs@16.14.4

• @​fumadocs/base-ui@​16.14.4
• fumadocs-core@16.14.4
• fumadocs-ui@16.14.4

Introduce @fumari/image-size, replacing image-size in remarkImage

A fork of probe-image-size with no dependencies of its own.

import { probe, imageSize } from '@fumari/image-size';
await probe('./public/banner.png'); // { width: 1200, height: 630, type: 'png', mime: 'image/png' }
await probe('https://example.com/banner.png', { timeout: 5000 });
imageSize(bytes); // the same result, or null

remarkImage now uses it in both fumadocs-core and @fumadocs/satteri. Remote images are no longer downloaded in full just to be measured, and redirects are followed. Sizes are always in pixels, so an SVG sized in em or pt is converted instead of being skipped. Remote requests also time out after 30 seconds by default.

One behaviour difference worth knowing: the supported formats are avif/heic/heif, bmp, gif, ico, jpeg, png, psd, svg, tiff and webp. Sizes for jxl, tga, pnm, dds, icns, cur, ktx and jp2 can no longer be resolved and go through onError instead.

Sequential scanning stops after 512 KB, but that never loses an image: the one format that stores its dimensions past that point — TIFF with a trailing IFD — is resolved by following the header's pointer with a targeted read, using an HTTP Range request for remote files (and skipping through the body when the server ignores ranges).

fumadocs@16.14.3

• @​fumadocs/base-ui@​16.14.3
• fumadocs-core@16.14.3
• fumadocs-ui@16.14.3

Fix TOC overscroll

fumadocs@16.14.2

• @​fumadocs/base-ui@​16.14.2
• fumadocs-core@16.14.2
• fumadocs-ui@16.14.2

Fix crash in DynamicCodeBlock when options is undefined

DynamicCodeBlock read options.components unconditionally while building its Shiki config, even though options is optional on the public wrapper component. Passing an explicit options={undefined} (e.g. a value forwarded from another optional prop) crashed with Cannot read properties of undefined (reading 'components') instead of falling back to the default pre renderer.

options is now read with optional chaining, so an undefined options behaves the same as omitting the prop entirely.

fumadocs@16.14.1

• @​fumadocs/base-ui@​16.14.1
• fumadocs-core@16.14.1
• fumadocs-ui@16.14.1

Fix unusable tokenizer search option

The search engine rejects a language alongside a custom tokenizer, since the tokenizer carries its own. Both search entry points supplied one unconditionally — createDB/createDBSimple through a destructuring default that language: undefined could not suppress, and createI18nSearchAPI by hardcoding multilingual after the spread — so passing tokenizer always threw NO_LANGUAGE_WITH_CUSTOM_TOKENIZER at index-build time. On i18n sources there was no call that worked at all.

... (truncated)

Commits

• 29c344d Version Packages (#3470)
• 9a04022 chore: bump deps
• de917ac perf(core): improve image size fetcher
• 1f92a8d fix(preview): stale usage
• 4d3552f Version Packages (#3468)
• e8079a1 fix(mdx): fix injected vite config
• 6e07ca9 fix(ui)): toc overscroll
• 2b0f3f7 Version Packages (#3466)
• 2569851 fix(ui): guard against undefined options in DynamicCodeBlock (#3465)
• c2ce5cb Version Packages (#3463)
• Additional commits viewable in compare view

Updates fumadocs-mdx from 15.2.0 to 15.2.3

Release notes

Sourced from fumadocs-mdx's releases.

fumadocs-mdx@15.2.3

Fix Base UI's use-sync-external-store breaking Vite dev servers

The Vite config is now derived from your project's own dependencies at startup, instead of being generated ahead of time against ours.

Builds keep the alias that replaces the shim with React, which is now applied only there. Pre-bundling is a dev server feature, and on builds a bundler that leaves the shim's require('react') in place gives it a second React instance whose hook dispatcher is null, breaking every component with a Base UI store.

fumadocs-mdx@15.2.2

Support thenable Next.js config

Allow the promises to be awaited.

fumadocs-mdx@15.2.1

Support simpler fumadocsMdx vite plugin usage

Use the fumadocsMdx method instead for better syntax around macro usage.

Support browser helpers for Macro API

Use preload & lazy body renderer on non-rsc environment.

Commits

• 4d3552f Version Packages (#3468)
• e8079a1 fix(mdx): fix injected vite config
• 6e07ca9 fix(ui)): toc overscroll
• 2b0f3f7 Version Packages (#3466)
• 2569851 fix(ui): guard against undefined options in DynamicCodeBlock (#3465)
• c2ce5cb Version Packages (#3463)
• 19e269e chore: drop typescript 7
• eacc5e1 fix(graphql): no dropped optional arguments in playground
• 2452e01 fix(core): fix unusable tokenizer search option
• cc694a1 chore: bump deps
• Additional commits viewable in compare view

Updates fumadocs-ui from 16.13.0 to 16.14.4

Release notes

Sourced from fumadocs-ui's releases.

fumadocs@16.14.4

• @​fumadocs/base-ui@​16.14.4
• fumadocs-core@16.14.4
• fumadocs-ui@16.14.4

Introduce @fumari/image-size, replacing image-size in remarkImage

A fork of probe-image-size with no dependencies of its own.

import { probe, imageSize } from '@fumari/image-size';
await probe('./public/banner.png'); // { width: 1200, height: 630, type: 'png', mime: 'image/png' }
await probe('https://example.com/banner.png', { timeout: 5000 });
imageSize(bytes); // the same result, or null

remarkImage now uses it in both fumadocs-core and @fumadocs/satteri. Remote images are no longer downloaded in full just to be measured, and redirects are followed. Sizes are always in pixels, so an SVG sized in em or pt is converted instead of being skipped. Remote requests also time out after 30 seconds by default.

One behaviour difference worth knowing: the supported formats are avif/heic/heif, bmp, gif, ico, jpeg, png, psd, svg, tiff and webp. Sizes for jxl, tga, pnm, dds, icns, cur, ktx and jp2 can no longer be resolved and go through onError instead.

Sequential scanning stops after 512 KB, but that never loses an image: the one format that stores its dimensions past that point — TIFF with a trailing IFD — is resolved by following the header's pointer with a targeted read, using an HTTP Range request for remote files (and skipping through the body when the server ignores ranges).

fumadocs@16.14.3

• @​fumadocs/base-ui@​16.14.3
• fumadocs-core@16.14.3
• fumadocs-ui@16.14.3

Fix TOC overscroll

fumadocs@16.14.2

• @​fumadocs/base-ui@​16.14.2
• fumadocs-core@16.14.2
• fumadocs-ui@16.14.2

Fix crash in DynamicCodeBlock when options is undefined

DynamicCodeBlock read options.components unconditionally while building its Shiki config, even though options is optional on the public wrapper component. Passing an explicit options={undefined} (e.g. a value forwarded from another optional prop) crashed with Cannot read properties of undefined (reading 'components') instead of falling back to the default pre renderer.

options is now read with optional chaining, so an undefined options behaves the same as omitting the prop entirely.

fumadocs@16.14.1

• @​fumadocs/base-ui@​16.14.1
• fumadocs-core@16.14.1
• fumadocs-ui@16.14.1

Fix unusable tokenizer search option

The search engine rejects a language alongside a custom tokenizer, since the tokenizer carries its own. Both search entry points supplied one unconditionally — createDB/createDBSimple through a destructuring default that language: undefined could not suppress, and createI18nSearchAPI by hardcoding multilingual after the spread — so passing tokenizer always threw NO_LANGUAGE_WITH_CUSTOM_TOKENIZER at index-build time. On i18n sources there was no call that worked at all.

... (truncated)

Commits

• 29c344d Version Packages (#3470)
• 9a04022 chore: bump deps
• de917ac perf(core): improve image size fetcher
• 1f92a8d fix(preview): stale usage
• 4d3552f Version Packages (#3468)
• e8079a1 fix(mdx): fix injected vite config
• 6e07ca9 fix(ui)): toc overscroll
• 2b0f3f7 Version Packages (#3466)
• 2569851 fix(ui): guard against undefined options in DynamicCodeBlock (#3465)
• c2ce5cb Version Packages (#3463)
• Additional commits viewable in compare view

[cloudflare-workers-and-pages]

Deploying devdocs with    Cloudflare Pages

Latest commit:	5656f45
Status:	🚫  Build failed.

View logs

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	fumadocs-mdx@​15.2.3
	fumadocs-core@​16.14.4
	fumadocs-ui@​16.14.4

View full report

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
❌ Deployment failed View logs	devdocs	5656f45	Aug 18 2026, 07:20 AM

[dependabot]

Dependabot can't parse your pnpm-lock.yaml. Because of this, Dependabot cannot update this pull request.

[GildedRoach]

@dependabot recreate

[dependabot]

Dependabot can't parse your pnpm-lock.yaml. Because of this, Dependabot cannot update this pull request.

[GildedRoach]

@dependabot recreate

[dependabot]

Dependabot can't parse your pnpm-lock.yaml. Because of this, Dependabot cannot update this pull request.

[dependabot]

Dependabot can't parse your pnpm-lock.yaml. Because of this, Dependabot cannot update this pull request.

[GildedRoach]

@dependabot rebase

[GildedRoach]

@dependabot recreate

[GildedRoach]

@dependabot recreate