Skip to content

deps(deps-dev): bump the npm-minor-patch group with 6 updates#533

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-patch-6aa868a4cc
Jul 17, 2026
Merged

deps(deps-dev): bump the npm-minor-patch group with 6 updates#533
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-patch-6aa868a4cc

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 17, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-minor-patch group with 6 updates:

Package From To
@changesets/cli 2.31.0 2.31.1
vite 8.1.4 8.1.5
ai 7.0.29 7.0.30
browser-use 0.7.3 0.8.0
@anthropic-ai/sdk 0.111.0 0.112.1
@cloudflare/workers-types 5.20260716.1 5.20260717.1

Updates @changesets/cli from 2.31.0 to 2.31.1

Release notes

Sourced from @​changesets/cli's releases.

@​changesets/cli@​2.31.1

Patch Changes

  • #2159 15cf592 Thanks @​ingvaldlorentzen! - Fixed already-published version detection with npm 12, which always wraps successful npm info --json output in an array. The unwrapped output made changeset publish treat every package as unpublished and fail attempting to republish existing versions.
Commits
  • a897bb8 Use a different publish tag for maintenance/v2 branch (#2162)
  • e8650b9 Version Packages (#2161)
  • 15cf592 Fixed handling of the npm 12 info output (#2159)
  • 9f2cb2a Configure Changesets for maintenance/v2 line (#2076)
  • 97247cb Change allowed publish pattern to maintenance/v* given rulesets behavior (#...
  • 13286a8 Build(deps): Bump the github-actions group across 1 directory with 3 updates ...
  • 8f6acd6 Update dependabot group to exclude major (#2067)
  • c70c675 Setup backport workflow and sync next setup (#2057)
  • 9672019 Remove SECURITY.md to defer to .github (#2055)
  • 18e1661 Use internal bot for versioning (#2039)
  • Additional commits viewable in compare view

Updates vite from 8.1.4 to 8.1.5

Release notes

Sourced from vite's releases.

v8.1.5

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.1.5 (2026-07-16)

Bug Fixes

  • bundled-dev: avoid duplicated buildEnd (#22931) (8100320)
  • client: overlay error message format align rolldown (#22869) (5a72b87)
  • deps: update all non-major dependencies (#22921) (fef682d)
  • deps: update rolldown-related dependencies (#22922) (3c345e4)
  • module-runner: don't crash stack-trace source mapping when globalThis.Buffer is absent (#22945) (f8b38e3)
  • optimizer: respect importer module format for dynamic import interop with CJS deps (#22951) (6c08c39)
  • ssr: scope switch-case declarations to the switch, not the function (#22893) (b59a73f)

Documentation

  • build: fix incorrect @default for build.cssMinify (#22948) (c88c236)
  • build: fix incorrect @default for build.lib.formats (#22911) (369ed60)

Tests

  • avoid scanner scanning all files under __tests__ (#22912) (c961cae)
Commits
  • 5e7fe12 release: v8.1.5
  • 6c08c39 fix(optimizer): respect importer module format for dynamic import interop wit...
  • 5a72b87 fix(client): overlay error message format align rolldown (#22869)
  • f8b38e3 fix(module-runner): don't crash stack-trace source mapping when globalThis.Bu...
  • 8100320 fix(bundled-dev): avoid duplicated buildEnd (#22931)
  • c88c236 docs(build): fix incorrect @default for build.cssMinify (#22948)
  • b59a73f fix(ssr): scope switch-case declarations to the switch, not the function (#22...
  • fef682d fix(deps): update all non-major dependencies (#22921)
  • 3c345e4 fix(deps): update rolldown-related dependencies (#22922)
  • 369ed60 docs(build): fix incorrect @default for build.lib.formats (#22911)
  • Additional commits viewable in compare view

Updates ai from 7.0.29 to 7.0.30

Release notes

Sourced from ai's releases.

ai@7.0.30

Patch Changes

  • Updated dependencies [341616a]
  • Updated dependencies [70fc45c]
    • @​ai-sdk/gateway@​4.0.22
Changelog

Sourced from ai's changelog.

7.0.30

Patch Changes

  • Updated dependencies [341616a]
  • Updated dependencies [70fc45c]
    • @​ai-sdk/gateway@​4.0.22
Commits

Updates browser-use from 0.7.3 to 0.8.0

Release notes

Sourced from browser-use's releases.

0.8.0

Full Changelog: webllm/browser-use@v0.7.3...v0.8.0

Commits
  • 14400c8 chore(release): bump version to 0.8.0
  • 0f7d80d fix(deps): patch esbuild dev-server file read
  • 835b646 fix(deps): patch js-yaml merge-key DoS
  • 146d5ed fix(deps): patch Vite Windows path advisories
  • e2ab3fe fix(deps): patch tmp path traversal advisory
  • c7bafd3 fix(ci): use bulk advisory audit endpoint
  • 912d9c0 fix(http): cap response byte budgets
  • fc06611 fix(state): validate private file limits
  • 2dea9b6 fix(mcp): cap configurable resource limits
  • 397dc7f fix(files): avoid temporary path chmod races
  • Additional commits viewable in compare view

Updates @anthropic-ai/sdk from 0.111.0 to 0.112.1

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk: v0.112.1

0.112.1 (2026-07-16)

Full Changelog: sdk-v0.112.0...sdk-v0.112.1

sdk: v0.112.0

0.112.0 (2026-07-16)

Full Changelog: sdk-v0.111.0...sdk-v0.112.0

Features

  • api: add support for MCP Tunnels (597ac41)
Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.112.1 (2026-07-16)

Full Changelog: sdk-v0.112.0...sdk-v0.112.1

0.112.0 (2026-07-16)

Full Changelog: sdk-v0.111.0...sdk-v0.112.0

Features

  • api: add support for MCP Tunnels (597ac41)
Commits

Updates @cloudflare/workers-types from 5.20260716.1 to 5.20260717.1

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm-minor-patch group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [@changesets/cli](https://github.com/changesets/changesets) | `2.31.0` | `2.31.1` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.1.4` | `8.1.5` |
| [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `7.0.29` | `7.0.30` |
| [browser-use](https://github.com/webllm/browser-use) | `0.7.3` | `0.8.0` |
| [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.111.0` | `0.112.1` |
| [@cloudflare/workers-types](https://github.com/cloudflare/workerd) | `5.20260716.1` | `5.20260717.1` |


Updates `@changesets/cli` from 2.31.0 to 2.31.1
- [Release notes](https://github.com/changesets/changesets/releases)
- [Commits](https://github.com/changesets/changesets/compare/@changesets/cli@2.31.0...@changesets/cli@2.31.1)

Updates `vite` from 8.1.4 to 8.1.5
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.1.5/packages/vite)

Updates `ai` from 7.0.29 to 7.0.30
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@7.0.30/packages/ai)

Updates `browser-use` from 0.7.3 to 0.8.0
- [Release notes](https://github.com/webllm/browser-use/releases)
- [Commits](webllm/browser-use@v0.7.3...v0.8.0)

Updates `@anthropic-ai/sdk` from 0.111.0 to 0.112.1
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.111.0...sdk-v0.112.1)

Updates `@cloudflare/workers-types` from 5.20260716.1 to 5.20260717.1
- [Release notes](https://github.com/cloudflare/workerd/releases)
- [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md)
- [Commits](https://github.com/cloudflare/workerd/commits)

---
updated-dependencies:
- dependency-name: "@changesets/cli"
  dependency-version: 2.31.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: vite
  dependency-version: 8.1.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: ai
  dependency-version: 7.0.30
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: browser-use
  dependency-version: 0.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.112.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@cloudflare/workers-types"
  dependency-version: 5.20260717.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jul 17, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, npm. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@github-actions
github-actions Bot enabled auto-merge (squash) July 17, 2026 01:59
@github-actions
github-actions Bot merged commit 7075166 into main Jul 17, 2026
10 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/npm-minor-patch-6aa868a4cc branch July 17, 2026 02:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants