fix(deps): update all dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@types/react (source)	^19.2.15 → ^19.2.16
concurrently	^10.0.0 → ^10.0.1
convex (source)	^1.39.1 → ^1.40.0
next (source)	16.2.6 → 16.2.7
react (source)	19.2.6 → 19.2.7
react-dom (source)	19.2.6 → 19.2.7
react-hook-form (source)	^7.76.1 → ^7.77.0
vitest (source)	^4.1.7 → ^4.1.8

---

Release Notes

open-cli-tools/concurrently (concurrently)

v10.0.1

Compare Source

• Ensure FlowController type is exported - #​594

Full Changelog: open-cli-tools/concurrently@v10.0.0...v10.0.1

get-convex/convex-backend (convex)

v1.40.0

• You can now create a local deployment in a specific Convex cloud project with
  npx convex deployment create team-slug:project-slug:local.
• You can now move a local deployment to another cloud project
  using npx convex deployment select team-slug:project-slug:local. This command warns
  when it moves the deployment to another project.
• The CLI now shows more clearly which deployment is targeted when running commands
  such as npx convex dev and npx convex deploy.
• Added a new <AuthRefreshing /> helper component, used to show indicators when
  function calls are paused because the authentication token is refreshing.
• Removed --local and --cloud flags from npx convex dev. The behavior of these flags
  was misleading when a deployment was already selected. Instead, use
  npx convex deployment select local to use a local deployment, and
  npx convex deployment select dev to use your personal cloud dev deployment.
• The CLI now provides guidance when TypeScript type checking is taking too long.
• Improved the CLI command documentation to include more details and examples.
• npx convex logs: --tail is now accepted as an alias for the --history flag.
• When creating a local deployment, the CLI now skips importing the default environment variables
  from the Convex cloud project if you don’t have permission to view the default environment
  variables instead of crashing.

vercel/next.js (next)

v16.2.7

Compare Source

facebook/react (react)

v19.2.7

Compare Source

facebook/react (react-dom)

v19.2.7

Compare Source

react-hook-form/react-hook-form (react-hook-form)

v7.77.0

Compare Source

Added

• resetDefaultValues API

Fixed

• Stale isDirty in subscribe payload after reset(..., { keepValues: true })
• Preserve values with shouldUnregister
• Inconsistent reset({}) behavior requiring double-call to take effect
• FieldArray errors overriding nested fields

Security

• Harden get() against prototype-path traversal (__proto__ / constructor / prototype)

Performance

• Bundle size reduction

vitest-dev/vitest (vitest)

v4.1.8

Compare Source

   🐞 Bug Fixes

• browser:
  • Disable client cdp API when allowWrite/allowExec: false [backport to v4]  -  by @​hi-ogawa and Codex in #​10450 (e4067)
  • Remove orphaned Playwright route when same module is mocked via multiple ids [backport to v4]  -  by @​toxik and @​Zelys-DFKH in #​10474 (675b4)

    View changes on GitHub

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Only on Sunday and Saturday (* * * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
blueprint	Ready	Preview, Comment	Jun 2, 2026 1:17am