Skip to content

chore(deps): bump the root-minor-patch group across 1 directory with 34 updates - #80

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/root-minor-patch-55254aec40
Open

chore(deps): bump the root-minor-patch group across 1 directory with 34 updates#80
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/root-minor-patch-55254aec40

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the root-minor-patch group with 32 updates in the / directory:

Package From To
@ai-sdk/amazon-bedrock 3.0.101 3.0.125
@ai-sdk/google 2.0.74 2.0.94
@ai-sdk/openai 2.0.106 2.0.122
@anthropic-ai/sdk 0.82.0 0.122.0
@ast-grep/napi 0.42.2 0.45.2
@fastify/cors 11.2.0 11.3.0
@fastify/static 9.1.3 9.3.0
@fastify/websocket 11.2.0 11.3.0
@langfuse/client 5.5.3 5.11.0
@langfuse/otel 5.5.3 5.11.0
@lingxiao-office/sdk 1.0.1 1.0.7
@modelcontextprotocol/sdk 1.29.0 1.30.0
@opentelemetry/sdk-node 0.219.0 0.221.0
acorn 8.16.0 8.18.0
ai 5.0.198 5.0.249
fastify 5.8.5 5.12.1
mammoth 1.12.0 1.12.2
openai 6.37.0 6.49.0
pdfkit 0.18.0 0.20.1
playwright 1.60.0 1.62.1
proxy-agent 8.0.1 8.0.2
react 19.2.6 19.2.8
@types/react 19.2.14 19.2.18
react-virtuoso 4.18.7 4.18.12
sharp 0.34.5 0.35.4
string-width 8.2.1 8.2.2
undici 8.2.0 8.10.0
wrap-ansi 10.0.0 10.0.1
zod 4.4.3 4.5.2
@types/node 25.7.0 25.9.5
electron 42.4.1 42.10.1
tsx 4.22.4 4.23.12

Updates @ai-sdk/amazon-bedrock from 3.0.101 to 3.0.125

Release notes

Sourced from @​ai-sdk/amazon-bedrock's releases.

@​ai-sdk/google@​3.0.120

Patch Changes

  • daaa769: fix(google): support video response formats in Gemini Interactions

@​ai-sdk/openai@​3.0.106

Patch Changes

  • 85ba0b0: Preserve explicit prompt cache breakpoints on scalar Responses tool results.
Changelog

Sourced from @​ai-sdk/amazon-bedrock's changelog.

3.0.125

Patch Changes

  • Updated dependencies [78c7304]
    • @​ai-sdk/anthropic@​2.0.99

3.0.124

Patch Changes

  • 7a7a971: Forward the Anthropic option for disabling parallel tool use through Amazon Bedrock without sending conflicting tool choice fields.

3.0.123

Patch Changes

  • 1f9e026: Omit assistant messages that become empty after unsupported reasoning content is removed.
  • Updated dependencies [77d33c0]
    • @​ai-sdk/provider-utils@​3.0.35
    • @​ai-sdk/anthropic@​2.0.98

3.0.122

Patch Changes

  • 5f3c624: Send nested reasoning effort for CRIS-prefixed OpenAI GPT-5.x Converse requests while preserving the flat gpt-oss format.

3.0.121

Patch Changes

  • Updated dependencies [2fff9f1]
  • Updated dependencies [f364ea0]
    • @​ai-sdk/provider-utils@​3.0.34
    • @​ai-sdk/anthropic@​2.0.97

3.0.120

Patch Changes

  • Updated dependencies [9e8e087]
    • @​ai-sdk/provider-utils@​3.0.33
    • @​ai-sdk/anthropic@​2.0.96

3.0.119

Patch Changes

  • 1cc3b4a: fix(amazon-bedrock): surface modeled event-stream exceptions

... (truncated)

Commits

Updates @ai-sdk/anthropic from 2.0.81 to 2.0.99

Release notes

Sourced from @​ai-sdk/anthropic's releases.

@​ai-sdk/google@​2.0.95

Patch Changes

  • Updated dependencies [26165ee]
    • @​ai-sdk/provider-utils@​3.0.36

@​ai-sdk/xai@​2.0.92

Patch Changes

  • Updated dependencies [26165ee]
    • @​ai-sdk/provider-utils@​3.0.36
    • @​ai-sdk/openai-compatible@​1.0.53
Changelog

Sourced from @​ai-sdk/anthropic's changelog.

2.0.99

Patch Changes

  • 78c7304: fix(anthropic): order client tool calls after provider-executed tool results

2.0.98

Patch Changes

  • Updated dependencies [77d33c0]
    • @​ai-sdk/provider-utils@​3.0.35

2.0.97

Patch Changes

  • Updated dependencies [2fff9f1]
  • Updated dependencies [f364ea0]
    • @​ai-sdk/provider-utils@​3.0.34

2.0.96

Patch Changes

  • Updated dependencies [9e8e087]
    • @​ai-sdk/provider-utils@​3.0.33

2.0.95

Patch Changes

  • Updated dependencies [0e51b7b]
    • @​ai-sdk/provider-utils@​3.0.32

2.0.94

Patch Changes

  • e7afc18: Reject spliced Anthropic generations while allowing duplicate message start events for the active message.

2.0.93

Patch Changes

  • 950eec8: Preserve Anthropic prompt-cache matches by replaying complete code-execution transcripts in their original wire shape.

2.0.92

Patch Changes

... (truncated)

Commits

Updates @ai-sdk/google from 2.0.74 to 2.0.94

Changelog

Sourced from @​ai-sdk/google's changelog.

2.0.94

Patch Changes

  • c43ba7d: Surface prompt-level Google safety blocks without candidates as content-filter results with prompt feedback metadata.
  • 7a292cd: Omit unsupported frequency and presence penalties from Gemini 2.5 requests and return warnings instead.

2.0.93

Patch Changes

  • a3fe2a8: fix(google): convert enum values to the Gemini schema format

2.0.92

Patch Changes

  • Updated dependencies [77d33c0]
    • @​ai-sdk/provider-utils@​3.0.35

2.0.91

Patch Changes

  • b616db6: Preserve recursive tool input schemas without aborting Google model calls.
  • Updated dependencies [2fff9f1]
  • Updated dependencies [f364ea0]
    • @​ai-sdk/provider-utils@​3.0.34

2.0.90

Patch Changes

  • Updated dependencies [9e8e087]
    • @​ai-sdk/provider-utils@​3.0.33

2.0.89

Patch Changes

  • 1284605: Inline local JSON Schema references in Google tool and structured-output schemas.

2.0.88

Patch Changes

  • df0cbe9: feat(google): add gemini-3.7-flash model

2.0.87

... (truncated)

Commits

Updates @ai-sdk/openai from 2.0.106 to 2.0.122

Changelog

Sourced from @​ai-sdk/openai's changelog.

2.0.122

Patch Changes

  • f70d0a3: Normalize non-object replayed Chat Completions tool arguments to empty objects.

2.0.121

Patch Changes

  • 77d33c0: Split OpenAI and Azure OpenAI embedding requests by a conservative UTF-8 byte budget derived from their aggregate token limit, in addition to input count limits.
  • Updated dependencies [77d33c0]
    • @​ai-sdk/provider-utils@​3.0.35

2.0.120

Patch Changes

  • Updated dependencies [2fff9f1]
  • Updated dependencies [f364ea0]
    • @​ai-sdk/provider-utils@​3.0.34

2.0.119

Patch Changes

  • Updated dependencies [9e8e087]
    • @​ai-sdk/provider-utils@​3.0.33

2.0.118

Patch Changes

  • Updated dependencies [0e51b7b]
    • @​ai-sdk/provider-utils@​3.0.32

2.0.117

Patch Changes

  • Updated dependencies [7a6bdbc]
    • @​ai-sdk/provider-utils@​3.0.31

2.0.116

Patch Changes

  • 8591016: Add blocked domain filters to the OpenAI and Azure Responses API web search tools.

2.0.115

... (truncated)

Commits

Updates @anthropic-ai/sdk from 0.82.0 to 0.122.0

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk: v0.122.0

0.122.0 (2026-08-27)

Full Changelog: sdk-v0.121.0...sdk-v0.122.0

Features

  • api: beta files/skills namespaces use GA shapes; drop dated beta header pins (45d693a)

Bug Fixes

  • client: classify cross-realm DOMException abort/timeout errors correctly (1bd6395)
  • client: use configured logger for SSE parse errors (80eeaf7)
  • sessions: make event accumulator forward-compatible with new event types (#410) (2d084fd)
  • tools: let read return a view_range of a file over the size cap (#427) (56b3260)
  • uploads: default bare Blob filename on skills endpoints (#422) (e111649)
  • webhooks: require headers to be passed to unwrap() (3230804)

Chores

  • internal: codegen related update (c2f327a)

Documentation

  • api: clarify pagination on the organization rate-limit list endpoints (d6015b9)
  • document TypeScript 5.0 as the minimum supported version (788e721)

sdk: v0.121.0

0.121.0 (2026-08-26)

Full Changelog: sdk-v0.120.0...sdk-v0.121.0

Features

  • api: add updates thinking display mode (beta) (22274ea)
  • api: add missing anthropic-beta values (0779f02)
  • api: add support for Organization API endpoints (8b61e7a)
  • helpers: support Standard Schema for structured outputs and tools (7880078)

Bug Fixes

  • tools: keep the tool runner going on pause_turn (#288) (f040dc9)
  • types: don't reference NodeJS.ProcessEnv from published types (#367) (fd38dfd)

Chores

... (truncated)

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.122.0 (2026-08-27)

Full Changelog: sdk-v0.121.0...sdk-v0.122.0

Features

  • api: beta files/skills namespaces use GA shapes; drop dated beta header pins (45d693a)

    The beta Files and Skills namespaces (client.beta.files, client.beta.skills) no longer send the files-api-2025-04-14 / skills-2025-10-02 headers and return the same shapes as client.files / client.skills (with Beta-prefixed type names). Requests that still send those headers on raw HTTP keep receiving the beta shapes.

    Changes in the beta namespaces:

    • client.beta.skills.delete() now deletes a Skill together with all of its versions (previously refused while any version existed). It returns BetaDeletedSkill (was SkillDeleteResponse).
    • Beta Messages type BetaSkill (the {type, skill_id, version} entry in BetaContainer.skills) is renamed BetaContainerSkill; the request-side BetaSkillParams keeps its name. BetaSkill now names the Skill object returned by client.beta.skills.create() / retrieve() / list() (replacing SkillCreateResponse / SkillRetrieveResponse / SkillListResponse), and skill versions are BetaSkillVersion / BetaDeletedSkillVersion (replacing Version*Response).
    • client.beta.files.list() returns a BetaFileMetadataPageCursor (PageCursor<BetaFileMetadata> with data / next_page) and FileListParams paginates with page / ids (was BetaFileMetadataPage, a Page<BetaFileMetadata> with data, has_more, first_id, last_id and before_id / after_id); for await auto-pagination is unchanged. BetaSkill uses display_name (was display_title, also in SkillCreateParams) and latest_version_id (was latest_version), and BetaSkillVersion is addressed by its skver_… id (the Unix-timestamp version field is gone).

    Migration guides: Migrate from files-api-2025-04-14 · Migrate from skills-2025-10-02

Bug Fixes

  • client: classify cross-realm DOMException abort/timeout errors correctly (1bd6395)
  • client: use configured logger for SSE parse errors (80eeaf7)
  • sessions: make event accumulator forward-compatible with new event types (#410) (2d084fd)
  • tools: let read return a view_range of a file over the size cap (#427) (56b3260)
  • uploads: default bare Blob filename on skills endpoints (#422) (e111649)
  • webhooks: require headers to be passed to unwrap() (3230804)

Chores

  • internal: codegen related update (c2f327a)

Documentation

  • api: clarify pagination on the organization rate-limit list endpoints (d6015b9)
  • document TypeScript 5.0 as the minimum supported version (788e721)

0.121.0 (2026-08-26)

Full Changelog: sdk-v0.120.0...sdk-v0.121.0

Features

  • api: add updates thinking display mode (beta) (22274ea)
  • api: add missing anthropic-beta values (0779f02)
  • api: add support for Organization API endpoints (8b61e7a)
  • helpers: support Standard Schema for structured outputs and tools (7880078)

... (truncated)

Commits
  • 7f3898c chore: release main
  • 956ccb5 docs(api): clarify pagination on the organization rate-limit list endpoints
  • 2131d80 fix(tools): let read return a view_range of a file over the size cap (#427)
  • f830c8f fix(aws,bedrock): prefer env credentials over AWS_PROFILE (#436)
  • 4d50ddf test(ecosystem): expect cross-realm timeout errors to classify correctly
  • acdd669 fix(client): classify cross-realm DOMException abort/timeout errors correctly
  • 0a14622 test(tools): pin that read, edit and the memory tool preserve CRLF and CR lin...
  • 17035de docs: document TypeScript 5.0 as the minimum supported version
  • 2f95d8a fix(client): use configured logger for SSE parse errors
  • 33f5103 feat(api): beta files/skills namespaces use GA shapes; drop dated beta header...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​anthropic-ai/sdk since your current version.


Updates @ast-grep/napi from 0.42.2 to 0.45.2

Release notes

Sourced from @​ast-grep/napi's releases.

0.45.2

0.45.1

0.45.0

... (truncated)

Changelog

Sourced from @​ast-grep/napi's changelog.

0.45.2

23 August 2026

0.45.1

7 August 2026

0.45.0

23 July 2026

... (truncated)

Commits
  • c41e023 0.45.2
  • ca4c005 fix: change default test arch for macos
  • 354492b chore(deps): update astral-sh/setup-uv action to v10 (#2892)
  • 2da70f8 chore(deps): update rust crate terminal-light to v1.9.1 (#2905)
  • d018191 chore(deps): update dependency web-tree-sitter to v0.26.13 (#2903)
  • 038264c chore(deps): update rust crate tree-sitter to v0.26.13 (#2904)
  • 777b9ba chore(deps): update dependency dprint to v0.56.1 (#2901)
  • 91d249b chore(deps): update dependency @​napi-rs/cli to v3.8.6 (#2882)
  • e2f6308 fix: fix linting
  • e01da36 fix: address pyo3 deprecation
  • Additional commits viewable in compare view

Updates @fastify/cors from 11.2.0 to 11.3.0

Release notes

Sourced from @​fastify/cors's releases.

v11.3.0

What's Changed

New Contributors

Full Changelog: fastify/fastify-cors@v11.2.0...v11.3.0

Commits
  • 2c60caa Bumped v11.3.0
  • cf4986e chore: bump @​types/node in the dev-dependencies-typescript group (#411)
  • 816d054 test: remove remaining tap-style assertions from vary tests (#410)
  • 20507ea chore(package.json): fix delvedor's personal url (#409)
  • 6fe85c4 docs(readme): update request origin link (#408)
  • 57bdc65 chore: bump fastify-plugin from 5.1.0 to 6.0.0 in the dependencies group (#407)
  • a8ae57d chore: update depedabot setting
  • 4d34798 chore(.gitattributes): retain binary file eol style (#402)
  • 675ebef refactor(types): migrate from tsd to tstyche (#403)
  • ef25e0b ci: add lock-threads workflow (#401)
  • Additional commits viewable in compare view

Updates @fastify/static from 9.1.3 to 9.3.0

Release notes

Sourced from @​fastify/static's releases.

v9.3.0

What's Changed

New Contributors

Full Changelog: fastify/fastify-static@v9.2.0...v9.3.0

v9.2.0

What's Changed

…34 updates

Bumps the root-minor-patch group with 32 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@ai-sdk/amazon-bedrock](https://github.com/vercel/ai/tree/HEAD/packages/amazon-bedrock) | `3.0.101` | `3.0.125` |
| [@ai-sdk/google](https://github.com/vercel/ai/tree/HEAD/packages/google) | `2.0.74` | `2.0.94` |
| [@ai-sdk/openai](https://github.com/vercel/ai/tree/HEAD/packages/openai) | `2.0.106` | `2.0.122` |
| [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.82.0` | `0.122.0` |
| [@ast-grep/napi](https://github.com/ast-grep/ast-grep) | `0.42.2` | `0.45.2` |
| [@fastify/cors](https://github.com/fastify/fastify-cors) | `11.2.0` | `11.3.0` |
| [@fastify/static](https://github.com/fastify/fastify-static) | `9.1.3` | `9.3.0` |
| [@fastify/websocket](https://github.com/fastify/fastify-websocket) | `11.2.0` | `11.3.0` |
| [@langfuse/client](https://github.com/langfuse/langfuse-js/tree/HEAD/packages/client) | `5.5.3` | `5.11.0` |
| [@langfuse/otel](https://github.com/langfuse/langfuse-js/tree/HEAD/packages/otel) | `5.5.3` | `5.11.0` |
| [@lingxiao-office/sdk](https://github.com/hexian2001/lingxiao-backend/tree/HEAD/packages/sdk) | `1.0.1` | `1.0.7` |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.29.0` | `1.30.0` |
| [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.219.0` | `0.221.0` |
| [acorn](https://github.com/acornjs/acorn) | `8.16.0` | `8.18.0` |
| [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `5.0.198` | `5.0.249` |
| [fastify](https://github.com/fastify/fastify) | `5.8.5` | `5.12.1` |
| [mammoth](https://github.com/mwilliamson/mammoth.js) | `1.12.0` | `1.12.2` |
| [openai](https://github.com/openai/openai-node) | `6.37.0` | `6.49.0` |
| [pdfkit](https://github.com/foliojs/pdfkit) | `0.18.0` | `0.20.1` |
| [playwright](https://github.com/microsoft/playwright) | `1.60.0` | `1.62.1` |
| [proxy-agent](https://github.com/TooTallNate/proxy-agents/tree/HEAD/packages/proxy-agent) | `8.0.1` | `8.0.2` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.6` | `19.2.8` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.14` | `19.2.18` |
| [react-virtuoso](https://github.com/petyosi/react-virtuoso/tree/HEAD/packages/react-virtuoso) | `4.18.7` | `4.18.12` |
| [sharp](https://github.com/lovell/sharp) | `0.34.5` | `0.35.4` |
| [string-width](https://github.com/sindresorhus/string-width) | `8.2.1` | `8.2.2` |
| [undici](https://github.com/nodejs/undici) | `8.2.0` | `8.10.0` |
| [wrap-ansi](https://github.com/chalk/wrap-ansi) | `10.0.0` | `10.0.1` |
| [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.5.2` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.7.0` | `25.9.5` |
| [electron](https://github.com/electron/electron) | `42.4.1` | `42.10.1` |
| [tsx](https://github.com/privatenumber/tsx) | `4.22.4` | `4.23.12` |



Updates `@ai-sdk/amazon-bedrock` from 3.0.101 to 3.0.125
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/amazon-bedrock@3.0.125/packages/amazon-bedrock/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/amazon-bedrock@3.0.125/packages/amazon-bedrock)

Updates `@ai-sdk/anthropic` from 2.0.81 to 2.0.99
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/anthropic@2.0.99/packages/anthropic/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/anthropic@2.0.99/packages/anthropic)

Updates `@ai-sdk/google` from 2.0.74 to 2.0.94
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/google@2.0.94/packages/google/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/google@2.0.94/packages/google)

Updates `@ai-sdk/openai` from 2.0.106 to 2.0.122
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/openai@2.0.122/packages/openai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/openai@2.0.122/packages/openai)

Updates `@anthropic-ai/sdk` from 0.82.0 to 0.122.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.82.0...sdk-v0.122.0)

Updates `@ast-grep/napi` from 0.42.2 to 0.45.2
- [Release notes](https://github.com/ast-grep/ast-grep/releases)
- [Changelog](https://github.com/ast-grep/ast-grep/blob/main/CHANGELOG.md)
- [Commits](ast-grep/ast-grep@0.42.2...0.45.2)

Updates `@fastify/cors` from 11.2.0 to 11.3.0
- [Release notes](https://github.com/fastify/fastify-cors/releases)
- [Commits](fastify/fastify-cors@v11.2.0...v11.3.0)

Updates `@fastify/static` from 9.1.3 to 9.3.0
- [Release notes](https://github.com/fastify/fastify-static/releases)
- [Commits](fastify/fastify-static@v9.1.3...v9.3.0)

Updates `@fastify/websocket` from 11.2.0 to 11.3.0
- [Release notes](https://github.com/fastify/fastify-websocket/releases)
- [Commits](fastify/fastify-websocket@v11.2.0...v11.3.0)

Updates `@langfuse/client` from 5.5.3 to 5.11.0
- [Release notes](https://github.com/langfuse/langfuse-js/releases)
- [Changelog](https://github.com/langfuse/langfuse-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/langfuse/langfuse-js/commits/v5.11.0/packages/client)

Updates `@langfuse/otel` from 5.5.3 to 5.11.0
- [Release notes](https://github.com/langfuse/langfuse-js/releases)
- [Changelog](https://github.com/langfuse/langfuse-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/langfuse/langfuse-js/commits/v5.11.0/packages/otel)

Updates `@langfuse/tracing` from 5.5.3 to 5.11.0
- [Release notes](https://github.com/langfuse/langfuse-js/releases)
- [Changelog](https://github.com/langfuse/langfuse-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/langfuse/langfuse-js/commits/v5.11.0/packages/tracing)

Updates `@lingxiao-office/sdk` from 1.0.1 to 1.0.7
- [Changelog](https://github.com/hexian2001/lingxiao-backend/blob/main/docs/release-npm.md)
- [Commits](https://github.com/hexian2001/lingxiao-backend/commits/HEAD/packages/sdk)

Updates `@modelcontextprotocol/sdk` from 1.29.0 to 1.30.0
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@v1.29.0...1.30.0)

Updates `@opentelemetry/sdk-node` from 0.219.0 to 0.221.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.219.0...experimental/v0.221.0)

Updates `acorn` from 8.16.0 to 8.18.0
- [Commits](acornjs/acorn@8.16.0...8.18.0)

Updates `ai` from 5.0.198 to 5.0.249
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/ai@5.0.249/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@5.0.249/packages/ai)

Updates `fastify` from 5.8.5 to 5.12.1
- [Release notes](https://github.com/fastify/fastify/releases)
- [Commits](fastify/fastify@v5.8.5...v5.12.1)

Updates `mammoth` from 1.12.0 to 1.12.2
- [Release notes](https://github.com/mwilliamson/mammoth.js/releases)
- [Changelog](https://github.com/mwilliamson/mammoth.js/blob/master/NEWS)
- [Commits](mwilliamson/mammoth.js@1.12.0...1.12.2)

Updates `openai` from 6.37.0 to 6.49.0
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/main/CHANGELOG.md)
- [Commits](openai/openai-node@v6.37.0...v6.49.0)

Updates `pdfkit` from 0.18.0 to 0.20.1
- [Release notes](https://github.com/foliojs/pdfkit/releases)
- [Changelog](https://github.com/foliojs/pdfkit/blob/master/CHANGELOG.md)
- [Commits](foliojs/pdfkit@v0.18.0...v0.20.1)

Updates `playwright` from 1.60.0 to 1.62.1
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.60.0...v1.62.1)

Updates `proxy-agent` from 8.0.1 to 8.0.2
- [Release notes](https://github.com/TooTallNate/proxy-agents/releases)
- [Changelog](https://github.com/TooTallNate/proxy-agents/blob/main/packages/proxy-agent/CHANGELOG.md)
- [Commits](https://github.com/TooTallNate/proxy-agents/commits/proxy-agent@8.0.2/packages/proxy-agent)

Updates `react` from 19.2.6 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react)

Updates `@types/react` from 19.2.14 to 19.2.18
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-virtuoso` from 4.18.7 to 4.18.12
- [Release notes](https://github.com/petyosi/react-virtuoso/releases)
- [Changelog](https://github.com/petyosi/react-virtuoso/blob/main/packages/react-virtuoso/CHANGELOG.md)
- [Commits](https://github.com/petyosi/react-virtuoso/commits/react-virtuoso@4.18.12/packages/react-virtuoso)

Updates `sharp` from 0.34.5 to 0.35.4
- [Release notes](https://github.com/lovell/sharp/releases)
- [Commits](lovell/sharp@v0.34.5...v0.35.4)

Updates `string-width` from 8.2.1 to 8.2.2
- [Release notes](https://github.com/sindresorhus/string-width/releases)
- [Commits](sindresorhus/string-width@v8.2.1...v8.2.2)

Updates `undici` from 8.2.0 to 8.10.0
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v8.2.0...v8.10.0)

Updates `wrap-ansi` from 10.0.0 to 10.0.1
- [Release notes](https://github.com/chalk/wrap-ansi/releases)
- [Commits](chalk/wrap-ansi@v10.0.0...v10.0.1)

Updates `zod` from 4.4.3 to 4.5.2
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.4.3...v4.5.2)

Updates `@types/node` from 25.7.0 to 25.9.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/react` from 19.2.14 to 19.2.18
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `electron` from 42.4.1 to 42.10.1
- [Release notes](https://github.com/electron/electron/releases)
- [Commits](electron/electron@v42.4.1...v42.10.1)

Updates `tsx` from 4.22.4 to 4.23.12
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.22.4...v4.23.12)

---
updated-dependencies:
- dependency-name: "@ai-sdk/amazon-bedrock"
  dependency-version: 3.0.125
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: "@ai-sdk/anthropic"
  dependency-version: 2.0.99
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: "@ai-sdk/google"
  dependency-version: 2.0.94
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: "@ai-sdk/openai"
  dependency-version: 2.0.122
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.122.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@ast-grep/napi"
  dependency-version: 0.45.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@fastify/cors"
  dependency-version: 11.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@fastify/static"
  dependency-version: 9.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@fastify/websocket"
  dependency-version: 11.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@langfuse/client"
  dependency-version: 5.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@langfuse/otel"
  dependency-version: 5.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@langfuse/tracing"
  dependency-version: 5.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@lingxiao-office/sdk"
  dependency-version: 1.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@opentelemetry/sdk-node"
  dependency-version: 0.221.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: acorn
  dependency-version: 8.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: ai
  dependency-version: 5.0.249
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: fastify
  dependency-version: 5.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: mammoth
  dependency-version: 1.12.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: openai
  dependency-version: 6.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: pdfkit
  dependency-version: 0.20.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: playwright
  dependency-version: 1.62.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: proxy-agent
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: react
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: "@types/react"
  dependency-version: 19.2.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: react-virtuoso
  dependency-version: 4.18.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: sharp
  dependency-version: 0.35.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: string-width
  dependency-version: 8.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: undici
  dependency-version: 8.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: wrap-ansi
  dependency-version: 10.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: zod
  dependency-version: 4.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@types/node"
  dependency-version: 25.9.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@types/react"
  dependency-version: 19.2.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: electron
  dependency-version: 42.10.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: tsx
  dependency-version: 4.23.12
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@github-actions

github-actions Bot commented Sep 1, 2026

Copy link
Copy Markdown

GLM 审查信息

结论

未发现需要阻塞的明显问题,但由于包含多个 0.x 依赖的大跨度 minor 版本升级,存在较高的潜在回归风险。

发现

  • @anthropic-ai/sdk 升级跨度极大 (0.82.0 -> 0.122.0):在 0.x 语义化版本中,minor 升级通常意味着包含破坏性变更。0.122.0 版本重构了 beta files/skills 命名空间的返回结构,0.121.0 版本引入了 Standard Schema 支持。如果项目代码中直接使用了该 SDK 的 beta 接口或强类型约束,可能会引发编译错误或运行时异常。
  • sharp 升级 (0.34.5 -> 0.35.4)sharp 的 minor 版本升级通常伴随底层 libvips 的更新和预编译二进制文件的变更,可能会影响图像处理的结果或在特定环境下导致安装/构建失败。
  • @ast-grep/napi 升级 (0.42.2 -> 0.45.2):0.45.0 版本废弃了 sg 命令行工具,虽然此 PR 升级的是 napi 包,但需确认是否有依赖该命令行的外部调用或 AST 解析行为变更。

建议测试

  • 重点回归测试使用 @anthropic-ai/sdk 的功能,包括 AI 对话、工具调用以及涉及文件/Skills 的 API 交互,确保无类型报错和功能异常。
  • 验证所有涉及 sharp 的图像处理流程(如缩放、裁剪、格式转换),并在目标部署环境验证依赖安装和构建流程。
  • 测试基于 @ast-grep/napi 的代码分析、语法树解析功能是否正常。
  • 验证 pdfkit 生成的 PDF 文件排版和内容是否出现错乱。

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants