chore(deps): bump the npm-dependencies group across 1 directory with 4 updates

[dependabot]

Bumps the npm-dependencies group with 4 updates in the / directory: @keystar/ui, @keystatic/core, @keystatic/next and wrangler.

Updates @keystar/ui from 0.9.3 to 0.9.6

Changelog

Sourced from @​keystar/ui's changelog.

0.9.6

Patch Changes

• #1608 28c823f Thanks @​emmatown! - Fix combobox scrolling with non-overlay scrollbars

0.9.5

Patch Changes

• #1607 4688f77 Thanks @​emmatown! - Fix ComboboxMulti not clearing search when clicking on an item

• #1604 41aa38f Thanks @​emmatown! - Reduce size of package.json

0.9.4

Patch Changes

• #1599 16373ad Thanks @​emmatown! - Fix combobox inputs losing focus when typing

Commits

• f002804 Version Packages (#1609)
• 28c823f Fix combobox scrolling with non-overlay scrollbars (#1608)
• bdbce90 Version Packages (#1605)
• 4688f77 Fix ComboboxMulti not clearing search when clicking on an item (#1607)
• 6f9917d Version Packages (#1600)
• 16373ad Fix combobox inputs losing focus when typing (#1599)
• ae0800b Use vitest (#1591)
• See full diff in compare view

Updates @keystatic/core from 0.6.5 to 0.6.8

Changelog

Sourced from @​keystatic/core's changelog.

0.6.8

Patch Changes

• #1610 e16a55a Thanks @​emmatown! - @keystar/ui is now depended with a ~ instead of an exact version
• Updated dependencies [28c823f]:
  • @​keystar/ui@​0.9.6

0.6.7

Patch Changes

• #1604 41aa38f Thanks @​emmatown! - Reduce size of package.json

• Updated dependencies [4688f77, 41aa38f]:

  • @​keystar/ui@​0.9.5

0.6.6

Patch Changes

• #1601 4dca0ca Thanks @​emmatown! - Support GitHub rulesets to automatically create a branch when pull requests are required

• #1602 3c34f58 Thanks @​emmatown! - Update to minimatch@10

• #1603 b4371f5 Thanks @​emmatown! - Update to match-sorter@8

• Updated dependencies [16373ad]:

  • @​keystar/ui@​0.9.4

Commits

• f002804 Version Packages (#1609)
• e16a55a Update changesets and depend on @​keystar/ui in @​keystatic/core with a ~ (#1610)
• bdbce90 Version Packages (#1605)
• 6f9917d Version Packages (#1600)
• b4371f5 Update to match-sorter@8 (#1603)
• 3c34f58 Update to minimatch@10 (#1602)
• 4dca0ca Support GitHub rulesets to automatically create a branch when pull requests a...
• ae0800b Use vitest (#1591)
• See full diff in compare view

Updates @keystatic/next from 5.0.4 to 5.0.5

Changelog

Sourced from @​keystatic/next's changelog.

5.0.5

Patch Changes

• #1604 41aa38f Thanks @​emmatown! - Reduce size of package.json

Commits

• bdbce90 Version Packages (#1605)
• f667d34 Update local next version (#1478)
• 5bd385c Update local next version of projects in the repo (#1474)
• 70e4028 Version Packages (#1413)
• 531673d Version Packages (#1390)
• e848667 Update deps in repo and support React 19 (#1404)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​keystatic/next since your current version.

Updates wrangler from 4.123.0 to 4.124.0

Release notes

Sourced from wrangler's releases.

wrangler@4.124.0

Minor Changes

• #15026 6529f0c Thanks @​petebacondarwin! - Allow containers to be attached to a Durable Object from its exports entry

  A container can now be linked to its Durable Object from the export side, using a new container field that names an entry in the containers array. As a result containers[].class_name is now optional — a container that is referenced this way only needs a name:

  {
    "name": "my-worker",
    "main": "worker.js",
    "compatibility_date": "2026-07-01",
    "containers": [
      { "name": "my-container", "image": "./Dockerfile", "max_instances": 1 }
    ],
    "exports": {
      "MyContainerDO": {
        "type": "durable-object",
        "storage": "sqlite",
        "container": "my-container"
      }
    }
  }

  The existing containers[].class_name direction keeps working and either direction may be used, but the two must agree: a container that names its Durable Object cannot also be claimed by a different one.

  container is only valid on live durable-object exports (created and expecting-transfer) and requires storage: "sqlite". Wrangler now also reports an error when:

  • a container reference names a container that does not exist
  • two Durable Object exports claim the same container
  • a container and a Durable Object export disagree about which one they are linked to
  • a container ends up linked to no Durable Object at all
  • two containers share a name
  • a container's class_name names a Durable Object whose storage is legacy-kv
  • two containers are attached to the same Durable Object

  That last case was previously accepted but could never work: workerd attaches a single container per Durable Object namespace, and in local development every container for a class builds into the same image tag, so one silently overwrote the other. If you have two containers on one class_name, give each its own Durable Object class.

Patch Changes

• #15211 bc5726b Thanks @​nithin42! - Honor access.dev when running Workers with @cloudflare/vitest-pool-workers, so ctx.access.getIdentity() returns the configured identity just as it does with wrangler dev.

• #14999 ba54f0d Thanks @​mittalpk! - Fix .env loading on Windows leaking stale, differently-cased duplicate keys

  On Windows, wrangler loads .env values through a case-insensitive Proxy wrapper so lookups like env.PATH and env.Path resolve to the same value, and this object is assigned directly to process.env. When a key was set again under a different casing (e.g. a value in .env.local overriding one from .env with different casing), the previous casing was never removed from the underlying object. env.PATH/env.Path still returned the correct, latest value, but anything that enumerates process.env — Object.keys, for...in, JSON.stringify, object spread, or a spawned subprocess inheriting the environment — would see both the stale and current key.

  Duplicate entries no longer appear, so environment variables passed to subprocesses and any code that lists the environment now see only the latest value for each variable.

• #15044 b7422b0 Thanks @​stareezy-1! - Normalize structural CRLF line endings before sending D1 commands to the remote query API

... (truncated)

Commits

• 8ee43f6 Version Packages (#15175)
• f431166 Prevent date-enabled Node.js compatibility from adding conflicting globals to...
• 1552bce [wrangler] Quieten warnings and stray output in tests (#15209)
• bc5726b Pass access.dev through to Miniflare via `unstable_getMiniflareWorkerOptions(...
• e967c39 [wrangler] Skip container deploy e2e tests on non-Linux CI (#15233)
• 265256a WC-5744 [previews] fix: wrangler preview base-config flag inheritance (#15153)
• 75cf407 [wrangler] Enable new config for cf dev (#15082)
• 8fb2b87 [wrangler] Use FedRAMP container registries (#15196)
• ba54f0d [wrangler] Fix case-insensitive-env leaking stale duplicate keys on override ...
• 7cee278 [wrangler] Let CLOUDFLARE_ACCOUNT_ID override the cached account id in pages ...
• Additional commits viewable in compare view