chore(deps): bump the minor-and-patch group across 1 directory with 4 updates

[dependabot]

Bumps the minor-and-patch group with 4 updates in the / directory: maplibre-gl, next, @types/react-dom and tsx.

Updates maplibre-gl from 6.5.0 to 6.7.0

Release notes

Sourced from maplibre-gl's releases.

v6.7.0

✨ Features and improvements

• Support the style specification's font-faces property, with map.setFontFaces and map.getFontFaces and improve complex script languages such as Devanagari, Khmer, Burmese and Hebrew (#8237) (by @​HarelM)
• Wrap Thai, Khmer, Burmese, Lao, Tibetan, Javanese and Balinese labels at word boundaries instead of running them on in one line, which applies to every style whether or not it declares font-faces (#8237) (by @​HarelM)
• Throw GPUInitializationError from the Map constructor when the WebGL2 context cannot be created, instead of firing an error event no listener can catch and returning a partially constructed map (#8066) (by @​johncarmack1984)
• Allow adding an image source without a url. The source starts empty and makes no network request; call updateImage({image}) or updateImage({url}) later to show an image (#8167) (by @​mondsichtung)
• Skip symbol re-placement when its inputs are unchanged, so repaints from animated style images or custom layers cost a single frame (#8208) (by @​lucaswoj)
• Add Style#triggerSymbolPlacement, which re-places symbols when something the map cannot see for itself has moved them (#8208) (by @​lucaswoj)
• Make {validate: false} skip the style snapshot the style setters only build as error context, so adding layers one at a time no longer serializes the whole style on every call (#8259) (by @​lazerg)

🐞 Bug fixes

• Disable the navigation control's zoom-out button when viewport constraints prevent zooming out further (#5316) (by @​miakh)
• Keep a vector tile's etag when the tile is reloaded after a style change, so the next expiry refresh can still skip unchanged tiles (#3309) (by @​johncarmack1984)
• Fix project() and queryTerrainElevation disagreeing with the rendered terrain surface when the elevation lookup sampled a different DEM zoom than the drawn mesh (#8212) (by @​johncarmack1984)
• Draw numbers (e.g. “21” in “반포대로21길”) and short uppercase codes (e.g. “A1”) upright in vertical line labels instead of rotating them along the line (#5404) (by @​NEKOYASAN)
• Fix the camera jumping at the end of a pan or zoom gesture on terrain by sampling the center elevation from the rendered terrain surface (#7989, #3982) (by @​johncarmack1984)
• Ensure style state defaults are serialized (#8263) (by @​hiddewie)

v6.6.0

✨ Features and improvements

• Add support for symbol-height-offset and symbol-height-anchor layout properties, which raise icons and text above the map. symbol-height-anchor selects whether the offset is measured from the terrain surface (ground, the default) or from the zero elevation datum (absolute) (#7827) (by @​HarelM)
• Pick terrain coordinates with a CPU raycast against the DEM instead of a coords framebuffer readback: full DEM resolution, no GPU stall on pointer events, and about 4MB less GPU memory (#7640) (by @​johncarmack1984)

🐞 Bug fixes

• Fix labels briefly appearing too large when zooming out several levels at once (e.g. a scroll-wheel or pinch fling) with a zoom-dependent text-size/icon-size (#8175) (by @​mondsichtung)
• Fix globe tile selection measuring distances from the ground point below the camera instead of the camera itself, refining some views past the requested zoom and leaving others coarser (#8187) (by @​Alchez)
• Fix the style's center, zoom, bearing, pitch and roll being ignored when the map was created with a minZoom or minPitch option, since applying those limits marked the transform as modified (#5932)
• Upload the color-relief DEM texture once per tile instead of on every frame (#8209)

Changelog

Sourced from maplibre-gl's changelog.

6.7.0

✨ Features and improvements

• Support the style specification's font-faces property, with map.setFontFaces and map.getFontFaces and improve complex script languages such as Devanagari, Khmer, Burmese and Hebrew (#8237) (by @​HarelM)
• Wrap Thai, Khmer, Burmese, Lao, Tibetan, Javanese and Balinese labels at word boundaries instead of running them on in one line, which applies to every style whether or not it declares font-faces (#8237) (by @​HarelM)
• Throw GPUInitializationError from the Map constructor when the WebGL2 context cannot be created, instead of firing an error event no listener can catch and returning a partially constructed map (#8066) (by @​johncarmack1984)
• Allow adding an image source without a url. The source starts empty and makes no network request; call updateImage({image}) or updateImage({url}) later to show an image (#8167) (by @​mondsichtung)
• Skip symbol re-placement when its inputs are unchanged, so repaints from animated style images or custom layers cost a single frame (#8208) (by @​lucaswoj)
• Add Style#triggerSymbolPlacement, which re-places symbols when something the map cannot see for itself has moved them (#8208) (by @​lucaswoj)
• Make {validate: false} skip the style snapshot the style setters only build as error context, so adding layers one at a time no longer serializes the whole style on every call (#8259) (by @​lazerg)

🐞 Bug fixes

• Disable the navigation control's zoom-out button when viewport constraints prevent zooming out further (#5316) (by @​miakh)
• Keep a vector tile's etag when the tile is reloaded after a style change, so the next expiry refresh can still skip unchanged tiles (#3309) (by @​johncarmack1984)
• Fix project() and queryTerrainElevation disagreeing with the rendered terrain surface when the elevation lookup sampled a different DEM zoom than the drawn mesh (#8212) (by @​johncarmack1984)
• Draw numbers (e.g. “21” in “반포대로21길”) and short uppercase codes (e.g. “A1”) upright in vertical line labels instead of rotating them along the line (#5404) (by @​NEKOYASAN)
• Fix the camera jumping at the end of a pan or zoom gesture on terrain by sampling the center elevation from the rendered terrain surface (#7989, #3982) (by @​johncarmack1984)
• Ensure style state defaults are serialized (#8263) (by @​hiddewie)

6.6.0

✨ Features and improvements

• Add support for symbol-height-offset and symbol-height-anchor layout properties, which raise icons and text above the map. symbol-height-anchor selects whether the offset is measured from the terrain surface (ground, the default) or from the zero elevation datum (absolute) (#7827) (by @​HarelM)
• Pick terrain coordinates with a CPU raycast against the DEM instead of a coords framebuffer readback: full DEM resolution, no GPU stall on pointer events, and about 4MB less GPU memory (#7640) (by @​johncarmack1984)

🐞 Bug fixes

• Fix labels briefly appearing too large when zooming out several levels at once (e.g. a scroll-wheel or pinch fling) with a zoom-dependent text-size/icon-size (#8175) (by @​mondsichtung)
• Fix globe tile selection measuring distances from the ground point below the camera instead of the camera itself, refining some views past the requested zoom and leaving others coarser (#8187) (by @​Alchez)
• Fix the style's center, zoom, bearing, pitch and roll being ignored when the map was created with a minZoom or minPitch option, since applying those limits marked the transform as modified (#5932)
• Upload the color-relief DEM texture once per tile instead of on every frame (#8209)

Commits

• e1736fd Bump js version to 6.7.0 (#8291)
• 2da4991 feat: support font-faces style property (#8237)
• a71cfb0 chore(deps-dev): bump cssnano from 8.0.10 to 9.0.0 (#8289)
• f9a40a5 Fix navigation control at the effective minimum zoom (#8261)
• 1e9194f fix: keep a vector tile's etag across reloads (#8276)
• 69562dd chore(deps-dev): bump @​types/node from 26.3.0 to 26.4.0 (#8271)
• afd30b4 chore(deps-dev): bump sharp from 0.35.3 to 0.35.4 (#8269)
• aff418d chore(deps-dev): bump @​unicode/unicode-17.0.0 from 1.6.17 to 2.0.2 (#8284)
• 4013312 chore(deps-dev): bump pretty-bytes from 7.1.1 to 7.1.2 (#8283)
• 87bd3ba chore(deps-dev): bump st from 4.0.4 to 4.0.10 (#8281)
• Additional commits viewable in compare view

Updates next from 16.3.2 to 16.3.4

Release notes

Sourced from next's releases.

v16.3.4

Follow-up release to v16.3.3 re-enabling AVIF Image Optimization (#97949).

The following bug fixes have been backported. It does not include all pending features/changes on canary.

• testmode: Fix infinite recursion in testmode passthrough fetch (#97691)
• Fix build error when aliasing typescript to @​typescript/typescript6 (#97997)
• Fix unset crossOrigin in Turbopack manifests (#97930)

Credits

Huge thanks to @​eps1lon, @​mischnic, and @​timneutkens for helping!

v16.3.3

This release contains security fixes for the following advisories:

Critical:

• Unauthenticated Remote Code Execution on windows-hosted servers
• Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used

Commits

• 299180d v16.3.4
• 12e173d [16.3.x] Re-enable AVIF image optimization and require sharp 0.35.4 (#97949)
• 5d9022e [backport] Fix unset crossOrigin in Turbopack manifests (#97930)
• d8f4560 [16.3.x] Fix build error when aliasing typescript to @​typescript/typescript6 ...
• 656aebf [16.3] testmode: Fix infinite recursion in testmode passthrough fetch (#97691)
• f37c1d6 [16.3.x] ci: remove pull_request_stats workflow (#97975)
• a9a1cb7 v16.3.3
• 968b9fc [16.3.x] Fix ISR misses with backslashes in segments when deployed on Windows
• 3a15b4a [16.3.x] [next/image]: disable avif image optimization
• 7378b51 Backport/docs fixes 16.3 (#97649)
• Additional commits viewable in compare view

Updates @types/react-dom from 19.2.4 to 19.2.7

Commits

• See full diff in compare view

Updates tsx from 4.23.12 to 4.23.13

Release notes

Sourced from tsx's releases.

v4.23.13

4.23.13 (2026-08-30)

Bug Fixes

• cache: bound shared transform cache memory (#835) (28e1f12)

---

This release is also available on:

• npm package (@​latest dist-tag)

Commits

• 28e1f12 fix(cache): bound shared transform cache memory (#835)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions