@tanstack/create 0.62.3 → 0.63.1

package/dist/frameworks/solid/toolchains/biome/package.json

@@ -5,6 +5,6 @@
     "check": "biome check"
   },
   "devDependencies": {
-    "@biomejs/biome": "2.2.4"
+    "@biomejs/biome": "2.4.5"
   }
 }

package/dist/frameworks/solid/toolchains/eslint/package.json

@@ -5,7 +5,7 @@
     "check": "prettier --write . && eslint --fix"
   },
   "devDependencies": {
-    "@tanstack/eslint-config": "^0.3.2",
-    "prettier": "^3.5.3"
+    "@tanstack/eslint-config": "latest",
+    "prettier": "^3.8.1"
   }
 }

package/dist/npm-resolver.js

@@ -0,0 +1,56 @@
+/**
+ * Resolves npm package versions at generation time.
+ *
+ * When a template specifies "latest" for a package, we fetch the actual
+ * current version from the npm registry and pin it exactly, so generated
+ * projects don't silently drift over time.
+ */
+const cache = new Map();
+export async function resolveNpmVersion(pkg) {
+    if (cache.has(pkg)) {
+        return cache.get(pkg);
+    }
+    try {
+        const res = await fetch(`https://registry.npmjs.org/${pkg}/latest`, {
+            headers: { Accept: 'application/vnd.npm.install-v1+json' },
+        });
+        if (!res.ok)
+            return null;
+        const data = (await res.json());
+        const version = data.version ?? null;
+        if (version)
+            cache.set(pkg, version);
+        return version;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Walk a deps object and resolve any "latest" values to pinned versions.
+ * Non-"latest" values are left untouched.
+ */
+export async function resolveLatestVersions(deps) {
+    const entries = Object.entries(deps);
+    const resolved = await Promise.all(entries.map(async ([name, version]) => {
+        if (version !== 'latest')
+            return [name, version];
+        const pinned = await resolveNpmVersion(name);
+        return [name, pinned ?? 'latest'];
+    }));
+    return Object.fromEntries(resolved);
+}
+/**
+ * Resolve all "latest" version specifiers in a package.json object's
+ * dependencies and devDependencies in-place, returning a new object.
+ */
+export async function resolvePackageJSONLatest(packageJSON) {
+    const result = { ...packageJSON };
+    if (result.dependencies) {
+        result.dependencies = await resolveLatestVersions(result.dependencies);
+    }
+    if (result.devDependencies) {
+        result.devDependencies = await resolveLatestVersions(result.devDependencies);
+    }
+    return result;
+}

package/dist/package-json.js

@@ -100,7 +100,7 @@ export function createPackageJSON(options) {
             delete packageJSON.dependencies?.['@tanstack/react-router-ssr-query'];
             packageJSON.devDependencies = {
                 ...(packageJSON.devDependencies ?? {}),
-                '@tanstack/router-plugin': packageJSON.devDependencies?.['@tanstack/router-plugin'] ?? '^1.132.0',
+                '@tanstack/router-plugin': packageJSON.devDependencies?.['@tanstack/router-plugin'] ?? 'latest',
             };
         }
         if (options.framework.id === 'solid') {
@@ -109,7 +109,7 @@ export function createPackageJSON(options) {
             delete packageJSON.scripts?.start;
             packageJSON.devDependencies = {
                 ...(packageJSON.devDependencies ?? {}),
-                '@tanstack/router-plugin': packageJSON.devDependencies?.['@tanstack/router-plugin'] ?? '^1.133.20',
+                '@tanstack/router-plugin': packageJSON.devDependencies?.['@tanstack/router-plugin'] ?? 'latest',
             };
         }
     }

package/dist/types/npm-resolver.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Resolves npm package versions at generation time.
+ *
+ * When a template specifies "latest" for a package, we fetch the actual
+ * current version from the npm registry and pin it exactly, so generated
+ * projects don't silently drift over time.
+ */
+export declare function resolveNpmVersion(pkg: string): Promise<string | null>;
+/**
+ * Walk a deps object and resolve any "latest" values to pinned versions.
+ * Non-"latest" values are left untouched.
+ */
+export declare function resolveLatestVersions(deps: Record<string, string>): Promise<Record<string, string>>;
+/**
+ * Resolve all "latest" version specifiers in a package.json object's
+ * dependencies and devDependencies in-place, returning a new object.
+ */
+export declare function resolvePackageJSONLatest(packageJSON: Record<string, any>): Promise<Record<string, any>>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tanstack/create",
-  "version": "0.62.3",
+  "version": "0.63.1",
   "description": "TanStack Application Builder Engine",
   "type": "module",
   "main": "./dist/index.js",

package/src/create-app.ts

@@ -9,6 +9,7 @@ import {
   translateExecuteCommand,
 } from './package-manager.js'
 import { createPackageJSON } from './package-json.js'
+import { resolvePackageJSONLatest } from './npm-resolver.js'
 import { createTemplateFile } from './template-file.js'
 import { installShadcnComponents } from './integrations/shadcn.js'
 import { setupGit } from './integrations/git.js'
@@ -130,9 +131,10 @@ async function writeFiles(environment: Environment, options: Options) {
     type: 'file',
     message: 'Writing package.json...',
   })
+  const packageJSON = await resolvePackageJSONLatest(createPackageJSON(options))
   await environment.writeFile(
     resolve(options.targetDir, './package.json'),
-    JSON.stringify(createPackageJSON(options), null, 2),
+    JSON.stringify(packageJSON, null, 2),
   )
   environment.finishStep('write-package-json', 'Package.json written')
 

package/src/frameworks/react/add-ons/ai/package.json

@@ -8,8 +8,8 @@
     "@tanstack/ai-openai": "latest",
     "@tanstack/ai-react": "latest",
     "highlight.js": "^11.11.1",
-    "streamdown": "^1.6.5",
-    "lucide-react": "^0.544.0",
-    "zod": "^4.3.5"
+    "lucide-react": "^0.577.0",
+    "streamdown": "^2.3.0",
+    "zod": "^4.3.6"
   }
 }

package/src/frameworks/react/add-ons/apollo-client/package.json

@@ -1,7 +1,7 @@
 {
   "dependencies": {
-    "@apollo/client": "^4.0.0",
-    "@apollo/client-integration-tanstack-start": "^0.14.2-rc.0",
+    "@apollo/client": "^4.1.6",
+    "@apollo/client-integration-tanstack-start": "^0.14.4-rc.0",
     "graphql": "^16.10.0",
     "rxjs": "^7.8.2"
   }

package/src/frameworks/react/add-ons/better-auth/package.json

@@ -1,5 +1,5 @@
 {
   "dependencies": {
-    "better-auth": "^1.4.12"
+    "better-auth": "^1.5.3"
   }
 }

package/src/frameworks/react/add-ons/clerk/package.json

@@ -1,5 +1,5 @@
 {
   "dependencies": {
-    "@clerk/clerk-react": "^5.49.0"
+    "@clerk/clerk-react": "^5.61.3"
   }
 }

package/src/frameworks/react/add-ons/convex/package.json

@@ -1,7 +1,7 @@
 {
   "dependencies": {
     "@convex-dev/react-query": "0.1.0",
-    "convex": "^1.27.3",
-    "lucide-react": "^0.561.0"
+    "convex": "^1.32.0",
+    "lucide-react": "^0.577.0"
   }
 }

package/src/frameworks/react/add-ons/db/package.json

@@ -1,7 +1,7 @@
 {
   "dependencies": {
-    "@tanstack/query-db-collection": "^1.0.8",
-    "@tanstack/react-db": "^0.1.1",
-    "zod": "^4.0.14"
+    "@tanstack/query-db-collection": "latest",
+    "@tanstack/react-db": "latest",
+    "zod": "^4.3.6"
   }
 }

package/src/frameworks/react/add-ons/drizzle/package.json.ejs

@@ -1,14 +1,14 @@
 {
   "dependencies": {
-    "drizzle-orm": "^0.45.0",
-    "drizzle-kit": "^0.31.8"<% if (addOnOption.drizzle.database === 'postgresql') { %>,
+    "drizzle-orm": "^0.45.1",
+    "drizzle-kit": "^0.31.9"<% if (addOnOption.drizzle.database === 'postgresql') { %>,
     "pg": "^8.16.3"<% } %><% if (addOnOption.drizzle.database === 'mysql') { %>,
     "mysql2": "^3.15.3"<% } %><% if (addOnOption.drizzle.database === 'sqlite') { %>,
-    "better-sqlite3": "^12.5.0"<% } %>
+    "better-sqlite3": "^12.6.2"<% } %>
   },
   "devDependencies": {
-    "dotenv": "^16.0.0",
-    "tsx": "^4.0.0"<% if (addOnOption.drizzle.database === 'postgresql') { %>,
+    "dotenv": "^17.3.1",
+    "tsx": "^4.21.0"<% if (addOnOption.drizzle.database === 'postgresql') { %>,
     "@types/pg": "^8.15.6"<% } %><% if (addOnOption.drizzle.database === 'sqlite') { %>,
     "@types/better-sqlite3": "^7.6.0"<% } %>
   },

package/src/frameworks/react/add-ons/form/package.json

@@ -1,6 +1,6 @@
 {
   "dependencies": {
-    "@tanstack/react-form": "^1.0.0",
-    "zod": "^4.1.11"
+    "@tanstack/react-form": "latest",
+    "zod": "^4.3.6"
   }
 }

package/src/frameworks/react/add-ons/mcp/package.json

@@ -1,6 +1,6 @@
 {
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.17.0",
-    "zod": "4.2.1"
+    "@modelcontextprotocol/sdk": "^1.27.1",
+    "zod": "^4.3.6"
   }
 }

package/src/frameworks/react/add-ons/neon/README.md

@@ -1,6 +1,6 @@
 ## Setting up Neon
 
-When running the `dev` command, the `@neondatabase/vite-plugin-postgres` will identify there is not a database setup. It will then create and seed a claimable database.
+When running the `dev` command, `vite-plugin-neon-new` will identify there is not a database setup. It will then create and seed a claimable database.
 
 It is the same process as [Neon Launchpad](https://neon.new).
 

package/src/frameworks/react/add-ons/neon/assets/neon-vite-plugin.ts

@@ -1,6 +1,6 @@
-import { postgresPlugin } from '@neondatabase/vite-plugin-postgres'
+import { postgres } from 'vite-plugin-neon-new'
 
-export default postgresPlugin({
+export default postgres({
   seed: {
     type: 'sql-script',
     path: 'db/init.sql',

package/src/frameworks/react/add-ons/neon/package.json

@@ -1,6 +1,6 @@
 {
   "dependencies": {
-    "@neondatabase/serverless": "^1.0.0",
-    "@neondatabase/vite-plugin-postgres": "^0.5.0"
+    "@neondatabase/serverless": "^1.0.2",
+    "vite-plugin-neon-new": "^0.8.0"
   }
 }

package/src/frameworks/react/add-ons/oRPC/package.json

@@ -1,11 +1,11 @@
 {
   "dependencies": {
-    "@orpc/client": "^1.13.0",
-    "@orpc/json-schema": "^1.13.0",
-    "@orpc/openapi": "^1.13.0",
-    "@orpc/server": "^1.13.0",
-    "@orpc/tanstack-query": "^1.13.0",
-    "@orpc/zod": "^1.13.0",
-    "zod": "^4.2.1"
+    "@orpc/client": "^1.13.6",
+    "@orpc/json-schema": "^1.13.6",
+    "@orpc/openapi": "^1.13.6",
+    "@orpc/server": "^1.13.6",
+    "@orpc/tanstack-query": "^1.13.6",
+    "@orpc/zod": "^1.13.6",
+    "zod": "^4.3.6"
   }
 }

package/src/frameworks/react/add-ons/paraglide/package.json

@@ -1,5 +1,5 @@
 {
   "devDependencies": {
-    "@inlang/paraglide-js": "^2.8.0"
+    "@inlang/paraglide-js": "^2.13.1"
   }
 }

package/src/frameworks/react/add-ons/posthog/package.json

@@ -1,6 +1,6 @@
 {
   "dependencies": {
-    "posthog-js": "^1.335.4",
-    "@posthog/react": "^1.7.0"
+    "@posthog/react": "^1.7.0",
+    "posthog-js": "^1.358.1"
   }
 }

package/src/frameworks/react/add-ons/prisma/package.json.ejs

@@ -1,14 +1,14 @@
 {
   "dependencies": {
-    "prisma": "^7.2.0",
-    "@prisma/client": "^7.2.0"<% if (addOnOption.prisma.database === 'postgres') { %>,
-    "@prisma/adapter-pg": "^7.2.0"<% } %><% if (addOnOption.prisma.database === 'mysql') { %>,
-    "@prisma/adapter-mariadb": "^7.2.0"<% } %><% if (addOnOption.prisma.database === 'sqlite') { %>,
-    "@prisma/adapter-better-sqlite3": "^7.2.0"<% } %>
+    "prisma": "^7.4.2",
+    "@prisma/client": "^7.4.2"<% if (addOnOption.prisma.database === 'postgres') { %>,
+    "@prisma/adapter-pg": "^7.4.2"<% } %><% if (addOnOption.prisma.database === 'mysql') { %>,
+    "@prisma/adapter-mariadb": "^7.4.2"<% } %><% if (addOnOption.prisma.database === 'sqlite') { %>,
+    "@prisma/adapter-better-sqlite3": "^7.4.2"<% } %>
   },
   "devDependencies": {
-    "dotenv-cli": "^10.0.0",
-    "tsx": "^4.20.6"
+    "dotenv-cli": "^11.0.0",
+    "tsx": "^4.21.0"
   },
   "scripts": {<% if (addOnOption.prisma.database === 'postgres') { %>
     "post-cta-init": "<%- getPackageManagerExecuteScript('create-db@latest', ['--user-agent', 'tanstack/tsrouter']) %>",<% } %>

package/src/frameworks/react/add-ons/sentry/package.json

@@ -5,7 +5,7 @@
     "start": "node --import ./.output/server/instrument.server.mjs .output/server/index.mjs"
   },
   "dependencies": {
-    "@sentry/tanstackstart-react": "^10.34.0",
+    "@sentry/tanstackstart-react": "^10.42.0",
     "dotenv-cli": "^11.0.0"
   }
 }

package/src/frameworks/react/add-ons/shadcn/package.json

@@ -2,7 +2,7 @@
   "dependencies": {
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
-    "lucide-react": "^0.561.0",
+    "lucide-react": "^0.577.0",
     "tailwind-merge": "^3.0.2",
     "tw-animate-css": "^1.3.6"
   }

package/src/frameworks/react/add-ons/store/package.json

@@ -1,9 +1,9 @@
 {
   "dependencies": {
-    "@tanstack/store": "^0.9.1",
-    "@tanstack/react-store": "^0.9.1"
+    "@tanstack/react-store": "latest",
+    "@tanstack/store": "latest"
   },
   "devDependencies": {
-    "@tanstack/devtools-event-client": "^0.4.0"
+    "@tanstack/devtools-event-client": "latest"
   }
 }

package/src/frameworks/react/add-ons/storybook/package.json

@@ -4,7 +4,7 @@
     "build-storybook": "storybook build"
   },
   "dependencies": {
-    "@storybook/react-vite": "^10.1.10",
-    "storybook": "^10.1.10"
+    "@storybook/react-vite": "^10.2.15",
+    "storybook": "^10.2.15"
   }
 }

package/src/frameworks/react/add-ons/strapi/package.json

@@ -1,8 +1,8 @@
 {
   "dependencies": {
-    "@strapi/client": "^1.6.0",
+    "@strapi/client": "^1.6.1",
     "react-markdown": "^9.0.1",
     "remark-gfm": "^4.0.0",
-    "use-debounce": "^10.0.0"
+    "use-debounce": "^10.1.0"
   }
 }

package/src/frameworks/react/add-ons/t3env/package.json

@@ -1,6 +1,6 @@
 {
   "dependencies": {
-    "zod": "^4.1.11",
-    "@t3-oss/env-core": "^0.13.8"
+    "@t3-oss/env-core": "^0.13.10",
+    "zod": "^4.3.6"
   }
 }

package/src/frameworks/react/add-ons/tRPC/package.json

@@ -1,9 +1,9 @@
 {
   "dependencies": {
-    "@trpc/client": "^11.4.3",
-    "@trpc/server": "^11.4.3",
-    "@trpc/tanstack-react-query": "^11.4.3",
+    "@trpc/client": "^11.11.0",
+    "@trpc/server": "^11.11.0",
+    "@trpc/tanstack-react-query": "^11.11.0",
     "superjson": "^2.2.2",
-    "zod": "^4.1.11"
+    "zod": "^4.3.6"
   }
 }

package/src/frameworks/react/add-ons/table/package.json

@@ -1,7 +1,7 @@
 {
   "dependencies": {
-    "@faker-js/faker": "^10.0.0",
-    "@tanstack/match-sorter-utils": "^8.19.4",
-    "@tanstack/react-table": "^8.21.2"
+    "@faker-js/faker": "^10.3.0",
+    "@tanstack/match-sorter-utils": "latest",
+    "@tanstack/react-table": "latest"
   }
 }

package/src/frameworks/react/add-ons/tanstack-query/package.json

@@ -1,6 +1,6 @@
 {
   "dependencies": {
-    "@tanstack/react-query": "^5.66.5",
-    "@tanstack/react-query-devtools": "^5.84.2"
+    "@tanstack/react-query": "latest",
+    "@tanstack/react-query-devtools": "latest"
   }
 }

package/src/frameworks/react/add-ons/workos/package.json

@@ -1,6 +1,6 @@
 {
   "dependencies": {
-    "@workos-inc/authkit-react": "^0.13.0",
-    "zod": "^4.1.11"
+    "@workos-inc/authkit-react": "^0.16.0",
+    "zod": "^4.3.6"
   }
 }

package/src/frameworks/react/examples/events/package.json

@@ -7,14 +7,14 @@
     "@tanstack/ai-ollama": "latest",
     "@tanstack/ai-openai": "latest",
     "@tanstack/ai-react": "latest",
-    "@tanstack/store": "^0.7.0",
+    "@tanstack/store": "latest",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "marked": "^15.0.8",
-    "streamdown": "^1.6.5",
+    "streamdown": "^2.3.0",
     "tailwind-merge": "^3.0.2",
     "tailwindcss-animate": "^1.0.7",
-    "zod": "^4.3.5"
+    "zod": "^4.3.6"
   },
   "devDependencies": {
     "@content-collections/core": "^0.13.1",

package/src/frameworks/react/examples/resume/package.json

@@ -15,10 +15,10 @@
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "marked": "^15.0.8",
-    "streamdown": "^1.6.5",
+    "streamdown": "^2.3.0",
     "tailwind-merge": "^3.0.2",
     "tailwindcss-animate": "^1.0.7",
-    "zod": "^4.3.5"
+    "zod": "^4.3.6"
   },
   "devDependencies": {
     "@content-collections/core": "^0.13.1",

package/src/frameworks/react/hosts/cloudflare/package.json.ejs

@@ -3,9 +3,9 @@
     "deploy": "<%= packageManager %> run build && wrangler deploy"
   },
   "dependencies": {
-    "@cloudflare/vite-plugin": "^1.13.8"
+    "@cloudflare/vite-plugin": "^1.26.0"
   },
   "devDependencies": {
-    "wrangler": "^4.40.3"
+    "wrangler": "^4.70.0"
   }
 }

package/src/frameworks/react/hosts/netlify/package.json

@@ -1,5 +1,5 @@
 {
   "devDependencies": {
-    "@netlify/vite-plugin-tanstack-start": "^1.2.3"
+    "@netlify/vite-plugin-tanstack-start": "^1.2.15"
   }
 }

package/src/frameworks/react/project/base/package.json

@@ -12,26 +12,26 @@
     "test": "vitest run"
   },
   "dependencies": {
-    "@tanstack/react-devtools": "^0.7.0",
-    "@tanstack/react-router": "^1.132.0",
-    "@tanstack/react-router-devtools": "^1.132.0",
-    "@tanstack/react-router-ssr-query": "^1.131.7",
-    "@tanstack/react-start": "^1.132.0",
-    "lucide-react": "^0.561.0",
+    "@tanstack/react-devtools": "latest",
+    "@tanstack/react-router": "latest",
+    "@tanstack/react-router-devtools": "latest",
+    "@tanstack/react-router-ssr-query": "latest",
+    "@tanstack/react-start": "latest",
+    "lucide-react": "^0.577.0",
     "react": "^19.2.0",
     "react-dom": "^19.2.0"
   },
   "devDependencies": {
     "@tailwindcss/typography": "^0.5.16",
-    "@tanstack/devtools-vite": "^0.3.11",
-    "@testing-library/dom": "^10.4.0",
-    "@testing-library/react": "^16.2.0",
+    "@tanstack/devtools-vite": "latest",
+    "@testing-library/dom": "^10.4.1",
+    "@testing-library/react": "^16.3.0",
     "@types/react": "^19.2.0",
     "@types/react-dom": "^19.2.0",
-    "@vitejs/plugin-react": "^5.0.4",
-    "jsdom": "^27.0.0",
-    "typescript": "^5.7.2",
-    "vite": "^7.1.7",
+    "@vitejs/plugin-react": "^5.1.4",
+    "jsdom": "^28.1.0",
+    "typescript": "^5.9.2",
+    "vite": "^7.3.1",
     "vite-tsconfig-paths": "^5.1.4",
     "vitest": "^3.0.5"
   },

package/src/frameworks/react/toolchains/biome/package.json

@@ -5,6 +5,6 @@
     "check": "biome check"
   },
   "devDependencies": {
-    "@biomejs/biome": "2.2.4"
+    "@biomejs/biome": "2.4.5"
   }
 }

package/src/frameworks/react/toolchains/eslint/package.json

@@ -5,7 +5,7 @@
     "check": "prettier --write . && eslint --fix"
   },
   "devDependencies": {
-    "@tanstack/eslint-config": "^0.3.0",
-    "prettier": "^3.5.3"
+    "@tanstack/eslint-config": "latest",
+    "prettier": "^3.8.1"
   }
 }

package/src/frameworks/solid/add-ons/better-auth/package.json

@@ -1,5 +1,5 @@
 {
   "dependencies": {
-    "better-auth": "^1.4.12"
+    "better-auth": "^1.5.3"
   }
 }

package/src/frameworks/solid/add-ons/convex/package.json

@@ -1,7 +1,7 @@
 {
   "dependencies": {
+    "convex": "^1.32.0",
     "convex-solidjs": "^0.0.3",
-    "convex": "^1.27.3",
-    "lucide-solid": "^0.544.0"
+    "lucide-solid": "^0.577.0"
   }
-}
+}

package/src/frameworks/solid/add-ons/form/package.json

@@ -1,5 +1,5 @@
 {
   "dependencies": {
-    "@tanstack/solid-form": "^1.0.0"
+    "@tanstack/solid-form": "latest"
   }
 }

package/src/frameworks/solid/add-ons/sentry/package.json

@@ -1,5 +1,5 @@
 {
   "dependencies": {
-    "@sentry/solid": "^10.17.0"
+    "@sentry/solid": "^10.42.0"
   }
 }

package/src/frameworks/solid/add-ons/store/package.json

@@ -1,6 +1,6 @@
 {
   "dependencies": {
-    "@tanstack/store": "^0.7.0",
-    "@tanstack/solid-store": "^0.7.0"
+    "@tanstack/solid-store": "latest",
+    "@tanstack/store": "latest"
   }
 }

package/src/frameworks/solid/add-ons/strapi/package.json

@@ -1,5 +1,5 @@
 {
   "dependencies": {
-    "@strapi/client": "^1.5.0"
+    "@strapi/client": "^1.6.1"
   }
-}
+}