chore(deps): update shiki to ^3.17.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
shiki (source)	^3.11.0 -> ^3.17.0

---

Release Notes

shikijs/shiki (shiki)

v3.17.0

Compare Source

   🚀 Features

• cli: Support passing remote file url  -  by @​o-az in #​1139 (fb05a)
• core: Support embeddedLanguages alias for backwards compatibility  -  by @​Ipshita29 in #​1044 and #​1145 (3a367)
• monaco: Normalize theme tokenScopes and tighten monaco type import  -  by @​Simon-He95 in #​1140 (dc792)

   🐞 Bug Fixes

• monaco: Preserve Markdown font styles  -  by @​prempyla and @​antfu in #​1107 (e4dec)
• shiki: Rename createdBundledHighlighter to createBundledHighlighter  -  by @​tushar73-jet, Tushar and @​antfu in #​1135 (e6d21)
• transformers: Handle multi-token comments in rose-pine theme  -  by @​ish1416 and @​antfu in #​1118 (3e1bd)
• twoslash: Fix typo in twoslash-query-persisted, close #​1130, close #​981  -  by @​antfu in #​1130 and #​981 (55a17)
• types: Add 'plain' to PlainTextLanguage type  -  by @​kevinkucharczyk in #​1133 (156c5)

    View changes on GitHub

v3.16.0

Compare Source

   🚀 Features

• Update grammars  -  by @​antfu (02dab)

   🐞 Bug Fixes

• Enable decorations for structure: inline  -  by @​Aashish-Jha-11 and Aashish_Jha_1107 in #​1103 (8806b)
• Resolve vitest alias for wasm-inlined  -  by @​sahilsharda (2d7b3)
• transformers: Support comment-prefixed [code . highlight] markers in v3 notation matcher  -  by @​Hariksh in #​1102 (5068b)

    View changes on GitHub

v3.15.0

Compare Source

   🚀 Features

• lang-ansi: Fallback for missing theme ANSI colors  -  by @​Chanakyasinde and @​antfu in #​1095 (f36ea)
• transformers: Support meta.indent for indent guides  -  by @​L33Z22L11 in #​1087 (d8f89)

   🐞 Bug Fixes

• Allow singleton highlighter recovery after invalid language error  -  by @​Maxiemad in #​1091 (218c9)
• vitepress-twoslash: Prevent popper show/hide on dragging  -  by @​bluwy in #​1090 (29522)

    View changes on GitHub

v3.14.0

Compare Source

   🚀 Features

• Update grammars and themes  -  by @​antfu (26372)

   🐞 Bug Fixes

• colorized-brackets: Fix default color does not work with colorized-brackets  -  by @​oatmealproblem in #​1082 (f4d3f)

    View changes on GitHub

v3.13.0

Compare Source

   🚀 Features

• transformers: Render indent guides  -  by @​KazariEX and @​antfu in #​1060 (aecd1)

    View changes on GitHub

v3.12.3

Compare Source

   🐞 Bug Fixes

• @shikijs/twoslash version specifier  -  by @​9romise in #​1078 (a1cde)

    View changes on GitHub

v3.12.2

Compare Source

   🐞 Bug Fixes

• twoslash: Fix onTwoslashError return value handling  -  by @​Karibash in #​1070 (e86b0)

    View changes on GitHub

v3.12.1

Compare Source

No significant changes

    View changes on GitHub

v3.12.0

Compare Source

   🚀 Features

• vitepress-twoslash:
  • Improve UX for option customization  -  by @​9romise in #​1066 (e3cfd)
  • Twoslash inline type cache for markdown  -  by @​serkodev and @​antfu in #​1063 (dc7fb)

   🐞 Bug Fixes

• remove-notation-escape: Correct escape sequence  -  by @​sor4chi in #​1065 (22d0c)

    View changes on GitHub

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) in timezone America/New_York, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Preview	Comments	Updated (UTC)
react-shiki	Ready	Preview	Comment	Nov 27, 2025 9:14am

[changeset-bot]

🦋 Changeset detected

Latest commit: 38f5e25

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
react-shiki	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[claude]

Claude finished @renovate[bot]'s task —— View job

---

Shiki Dependency Update Review ✅

I've completed my analysis of the Shiki dependency update from ^3.11.0 to ^3.17.0.

✅ Review Summary: APPROVED

Todo List:

• Read repository guidelines (CLAUDE.md) - No repo-specific guidelines found
• Review changed files and release notes
• Check for potential breaking changes or API surface changes
• Verify changeset appropriateness
• Review source code for compatibility
• Check if tests need updates
• Verify documentation currency
• Provide final review feedback

---

📋 Review Findings

✅ Changeset Quality

• Appropriate changeset included: The changeset correctly categorizes this as a patch update
• Clear description: "Updated dependency shiki to ^3.17.0" is concise and accurate
• Follows semantic versioning: Dependency updates are properly treated as patch changes

✅ Compatibility Assessment

• No breaking changes detected: All Shiki APIs used by react-shiki remain stable
• Engine support maintained: All three engines (Oniguruma, JavaScript RegExp, JavaScript Raw) are still supported
• Bundle structure unchanged: Full, web, and core bundles continue to work as expected

✅ Notable Improvements in Shiki 3.17.0

• Enhanced compatibility: embeddedLanguages alias added for backwards compatibility
• Bug fixes: Fixed function naming (createdBundledHighlighter → createBundledHighlighter)
• Performance improvements: Transformer enhancements and comment handling fixes
• Language support: Better handling of 'plain' text and multi-token comments

🔍 Impact Analysis

1. No API surface changes: react-shiki's public API remains unchanged
2. No breaking changes: The codebase uses stable Shiki APIs that haven't changed
3. Test compatibility: Existing tests will continue to pass (uses getSingletonHighlighter, createJavaScriptRegexEngine which are stable)
4. Documentation currency: No updates needed as the API wrapper remains the same

✅ Code Quality Assessment

• Clean architecture maintained: The wrapper continues to properly abstract Shiki functionality
• Error handling intact: Fallback mechanisms for unsupported languages are preserved
• Performance considerations: The update includes performance improvements without affecting the wrapper

✅ Security & Best Practices

• No security concerns: This is a routine dependency update from a trusted maintainer
• Follows update practices: Using caret range (^3.17.0) for minor updates is appropriate
• Proper dependency management: Update is isolated to the main dependency

---

🚀 Recommendation: MERGE

This is a well-managed dependency update that brings bug fixes and improvements without introducing breaking changes. The changeset is appropriate, and no code or documentation updates are required.

The update can be safely merged as-is.

---