fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@typescript/native-preview (source)	7.0.0-dev.20260405.1 → 7.0.0-dev.20260412.1
oxfmt (source)	^0.43.0 → ^0.44.0
oxlint (source)	^1.58.0 → ^1.59.0
oxlint-tsgolint	^0.19.0 → ^0.20.0
react (source)	^19.2.4 → ^19.2.5
react-dom (source)	^19.2.4 → ^19.2.5
tinyglobby (source)	^0.2.15 → ^0.2.16
vitest (source)	^4.1.2 → ^4.1.4

---

Release Notes

microsoft/typescript-go (@​typescript/native-preview)

v7.0.0-dev.20260412.1

Compare Source

v7.0.0-dev.20260411.1

Compare Source

v7.0.0-dev.20260410.1

Compare Source

v7.0.0-dev.20260409.1

Compare Source

v7.0.0-dev.20260408.1

Compare Source

v7.0.0-dev.20260407.1

Compare Source

v7.0.0-dev.20260406.1

Compare Source

oxc-project/oxc (oxfmt)

v0.44.0

Compare Source

🐛 Bug Fixes

• dd2df87 npm: Export package.json for oxlint and oxfmt (#​20784) (kazuya kawaguchi)
• 4216380 oxfmt: Support .editorconfig tab_width fallback (#​20988) (leaysgur)

oxc-project/oxc (oxlint)

v1.59.0

Compare Source

🐛 Bug Fixes

• dd2df87 npm: Export package.json for oxlint and oxfmt (#​20784) (kazuya kawaguchi)

oxc-project/tsgolint (oxlint-tsgolint)

v0.20.0

Compare Source

What's Changed

• chore(deps): update crate-ci/typos action to v1.45.0 by @​renovate[bot] in #​863
• fix(no-unnecessary-type-arguments): handle Partial aliases in default-type checks by @​camc314 in #​862
• feat: enrich await-thenable diagnostics by @​camc314 in #​865
• feat: enrich no-unsafe-enum-comparison diagnostics by @​camc314 in #​867
• chore(deps): update github-actions by @​renovate[bot] in #​870
• chore(deps): update extractions/setup-crate action to v2 by @​renovate[bot] in #​871
• chore(deps): update dependency dprint to v0.53.2 by @​renovate[bot] in #​869
• fix(prefer-optional-chain): ignore non-access OR comparison by @​camc314 in #​872
• chore: update typescript-go submodule by @​camc314 in #​873

Full Changelog: oxc-project/tsgolint@v0.19.0...v0.20.0

facebook/react (react)

v19.2.5: 19.2.5 (April 8th, 2026)

Compare Source

React Server Components

• Add more cycle protections (#​36236 by @​eps1lon and @​unstubbable)

SuperchupuDev/tinyglobby (tinyglobby)

v0.2.16

Compare Source

Fixed

• Upgraded picomatch to 4.0.4, mitigating any potential exposure to
  CVE-2026-33671
  and CVE-2026-33672

Changed

• Overhauled and optimized most internals by Torathion
• Ignore patterns are no longer compiled twice by webpro

vitest-dev/vitest (vitest)

v4.1.4

Compare Source

   🚀 Features

• coverage:
  • Default to text reporter skipFull if agent detected  -  by @​hi-ogawa in #​10018 (53757)
• experimental:
  • Expose assertion as a public field  -  by @​sheremet-va in #​10095 (a120e)
  • Support aria snapshot  -  by @​hi-ogawa, Claude Opus 4.6 (1M context), @​AriPerkkio, Codex and @​sheremet-va in #​9668 (d4fbb)
• reporter:
  • Add filterMeta option to json reporter  -  by @​nami8824 and @​sheremet-va in #​10078 (b77de)

   🐞 Bug Fixes

• Use "black" foreground for labeled terminal message to ensure contrast  -  by @​hi-ogawa in #​10076 (203f0)
• Make expect(..., message) consistent as error message prefix  -  by @​hi-ogawa and Codex in #​10068 (a1b5f)
• Do not hoist imports whose names match class properties .  -  by @​SunsetFi in #​10093 and #​10094 (0fc4b)
• browser: Spread user server options into browser Vite server in project  -  by @​GoldStrikeArch in #​10049 (65c9d)

    View changes on GitHub

v4.1.3

Compare Source

   🚀 Experimental Features

• Add experimental.preParse flag  -  by @​sheremet-va in #​10070 (78273)
• Support browser.locators.exact option  -  by @​sheremet-va in #​10013 (48799)
• Add TestAttachment.bodyEncoding  -  by @​hi-ogawa in #​9969 (89ca0)
• Support custom snapshot matcher  -  by @​hi-ogawa, Claude Sonnet 4.6 and Codex in #​9973 (59b0e)

   🐞 Bug Fixes

• Advance fake timers with expect.poll interval  -  by @​hi-ogawa and Claude Sonnet 4.6 in #​10022 (3f5bf)
• Add @vitest/coverage-v8 and @vitest/coverage-istanbul as optional dependency  -  by @​alan-agius4 in #​10025 (146d4)
• Fix defineHelper for webkit async stack trace + update playwright 1.59.0  -  by @​hi-ogawa in #​10036 (5a5fa)
• Fix suite hook throwing errors for unused auto test-scoped fixture  -  by @​hi-ogawa and Claude Sonnet 4.6 in #​10035 (39865)
• expect:
  • Remove JestExtendError.context from verbose error reporting  -  by @​hi-ogawa in #​9983 (66751)
  • Don't leak "runner" types  -  by @​sheremet-va in #​10004 (ec204)
• snapshot:
  • Fix flagging obsolete snapshots for snapshot properties mismatch  -  by @​hi-ogawa and Claude Sonnet 4.6 in #​9986 (6b869)
  • Export custom snapshot matcher helper from vitest  -  by @​hi-ogawa and Codex in #​10042 (691d3)
• ui:
  • Don't leak vite types  -  by @​sheremet-va in #​10005 (fdff1)
• vm:
  • Fix external module resolve error with deps optimizer query  -  by @​hi-ogawa and Claude Sonnet 4.6 in #​10024 (9dbf4)

    View changes on GitHub

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.