Skip to content

chore(deps): bump the root-minor-patch group across 1 directory with 36 updates - #81

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/root-minor-patch-0eaf2e993a
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/root-minor-patch-0eaf2e993a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 15, 2026

Copy link
Copy Markdown
Contributor

Bumps the root-minor-patch group with 34 updates in the / directory:

Package From To
@ai-sdk/amazon-bedrock 3.0.101 3.0.131
@ai-sdk/google 2.0.74 2.0.97
@ai-sdk/openai 2.0.106 2.0.127
@anthropic-ai/sdk 0.82.0 0.125.0
@ast-grep/napi 0.42.2 0.45.3
@fastify/cors 11.2.0 11.3.0
@fastify/static 9.1.3 9.3.0
@fastify/websocket 11.2.0 11.3.0
@langfuse/client 5.5.3 5.11.1
@langfuse/otel 5.5.3 5.11.1
@lingxiao-office/sdk 1.0.1 1.0.7
@modelcontextprotocol/sdk 1.29.0 1.30.0
@opentelemetry/sdk-node 0.219.0 0.222.0
acorn 8.16.0 8.18.0
ai 5.0.198 5.0.257
fastify 5.8.5 5.12.4
jszip 3.10.1 3.10.2
mammoth 1.12.0 1.12.3
openai 6.37.0 6.49.0
pdfkit 0.18.0 0.20.2
playwright 1.60.0 1.63.0
proxy-agent 8.0.1 8.0.2
react 19.2.6 19.3.0
@types/react 19.2.14 19.3.0
react-virtuoso 4.18.7 4.18.13
sharp 0.34.5 0.35.4
string-width 8.2.1 8.2.2
undici 8.2.0 8.10.2
wrap-ansi 10.0.0 10.0.1
yaml 2.9.0 2.9.1
zod 4.4.3 4.6.2
@types/node 25.7.0 25.9.6
electron 42.4.1 42.11.3
tsx 4.22.4 4.23.13

Updates @ai-sdk/amazon-bedrock from 3.0.101 to 3.0.131

Changelog

Sourced from @​ai-sdk/amazon-bedrock's changelog.

3.0.131

Patch Changes

  • 24bda53: fix(amazon-bedrock): resolve endpoints for non-standard AWS partitions and endpoint overrides

3.0.130

Patch Changes

  • Updated dependencies [c2089a9]
  • Updated dependencies [ab3990f]
    • @​ai-sdk/provider@​2.0.4
    • @​ai-sdk/provider-utils@​3.0.37
    • @​ai-sdk/anthropic@​2.0.102

3.0.129

Patch Changes

  • 1a80de8: fix(amazon-bedrock): return text from non-streaming citation responses

3.0.128

Patch Changes

  • Updated dependencies [78a29c2]
    • @​ai-sdk/anthropic@​2.0.101

3.0.127

Patch Changes

  • 27787e5: Add a structured output mode option and default Claude Sonnet 4.6 and Claude Haiku 4.5 to the JSON tool fallback.

3.0.126

Patch Changes

  • 07ef4be: Omit assistant messages when only cache points remain after unsigned reasoning is filtered.
  • 0393692: Accept citation deltas in Amazon Bedrock streaming responses.
  • Updated dependencies [cd8f35c]
  • Updated dependencies [26165ee]
    • @​ai-sdk/anthropic@​2.0.100
    • @​ai-sdk/provider-utils@​3.0.36

3.0.125

Patch Changes

... (truncated)

Commits

Updates @ai-sdk/anthropic from 2.0.81 to 2.0.102

Changelog

Sourced from @​ai-sdk/anthropic's changelog.

2.0.102

Patch Changes

  • Updated dependencies [c2089a9]
  • Updated dependencies [ab3990f]
    • @​ai-sdk/provider@​2.0.4
    • @​ai-sdk/provider-utils@​3.0.37

2.0.101

Patch Changes

  • 78a29c2: feat(anthropic): add fable 5.1 support

2.0.100

Patch Changes

  • cd8f35c: Preserve tool calls when using JSON structured output.
  • Updated dependencies [26165ee]
    • @​ai-sdk/provider-utils@​3.0.36

2.0.99

Patch Changes

  • 78c7304: fix(anthropic): order client tool calls after provider-executed tool results

2.0.98

Patch Changes

  • Updated dependencies [77d33c0]
    • @​ai-sdk/provider-utils@​3.0.35

2.0.97

Patch Changes

  • Updated dependencies [2fff9f1]
  • Updated dependencies [f364ea0]
    • @​ai-sdk/provider-utils@​3.0.34

2.0.96

Patch Changes

  • Updated dependencies [9e8e087]
    • @​ai-sdk/provider-utils@​3.0.33

... (truncated)

Commits

Updates @ai-sdk/google from 2.0.74 to 2.0.97

Changelog

Sourced from @​ai-sdk/google's changelog.

2.0.97

Patch Changes

  • Updated dependencies [c2089a9]
  • Updated dependencies [ab3990f]
    • @​ai-sdk/provider@​2.0.4
    • @​ai-sdk/provider-utils@​3.0.37

2.0.96

Patch Changes

  • cfa33a0: feat(google): add gemini-3.8-flash model

2.0.95

Patch Changes

  • Updated dependencies [26165ee]
    • @​ai-sdk/provider-utils@​3.0.36

2.0.94

Patch Changes

  • c43ba7d: Surface prompt-level Google safety blocks without candidates as content-filter results with prompt feedback metadata.
  • 7a292cd: Omit unsupported frequency and presence penalties from Gemini 2.5 requests and return warnings instead.

2.0.93

Patch Changes

  • a3fe2a8: fix(google): convert enum values to the Gemini schema format

2.0.92

Patch Changes

  • Updated dependencies [77d33c0]
    • @​ai-sdk/provider-utils@​3.0.35

2.0.91

Patch Changes

  • b616db6: Preserve recursive tool input schemas without aborting Google model calls.
  • Updated dependencies [2fff9f1]
  • Updated dependencies [f364ea0]
    • @​ai-sdk/provider-utils@​3.0.34

... (truncated)

Commits

Updates @ai-sdk/openai from 2.0.106 to 2.0.127

Changelog

Sourced from @​ai-sdk/openai's changelog.

2.0.127

Patch Changes

  • fd889a3: fix(openai): return an AI SDK error for empty chat completion choices
  • Updated dependencies [c2089a9]
  • Updated dependencies [ab3990f]
    • @​ai-sdk/provider@​2.0.4
    • @​ai-sdk/provider-utils@​3.0.37

2.0.126

Patch Changes

  • 022f24b: Include explicit message item types in Azure AI Foundry Responses requests.
  • a15b75a: Add async function tool calling support for OpenAI Responses models.

2.0.125

Patch Changes

  • e0d0bd1: feat(openai): add GPT-6 reasoning configuration updates

2.0.124

Patch Changes

  • 7bebd57: feat(openai): add support for the gpt-6-astra

2.0.123

Patch Changes

  • Updated dependencies [26165ee]
    • @​ai-sdk/provider-utils@​3.0.36

2.0.122

Patch Changes

  • f70d0a3: Normalize non-object replayed Chat Completions tool arguments to empty objects.

2.0.121

Patch Changes

  • 77d33c0: Split OpenAI and Azure OpenAI embedding requests by a conservative UTF-8 byte budget derived from their aggregate token limit, in addition to input count limits.
  • Updated dependencies [77d33c0]
    • @​ai-sdk/provider-utils@​3.0.35

... (truncated)

Commits

Updates @anthropic-ai/sdk from 0.82.0 to 0.125.0

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk: v0.125.0

0.125.0 (2026-09-10)

Full Changelog: sdk-v0.124.0...sdk-v0.125.0

Features

  • api: add auto mode tool permissions for Managed Agents (7f5e2c6)
  • api: add content_too_large web_fetch tool error code (f06416e)
  • api: add the user-profiles-2026-09-04 beta value and external_user_details to user profiles (318d42d)
  • api: support mounting public GitHub repositories without an authorization_token in Managed Agents sessions (9e2d945)

Chores

  • client: clean up the unused idempotency request option (4ce2772)
  • docs: correct the environment scope field description (835c677)
  • internal: restore package version (b43a7f6)
  • internal: stop stamping the package version into generated files (80ace5e)
  • tests: restore empty test package marker files (4f27519)

sdk: v0.124.0

0.124.0 (2026-09-04)

Full Changelog: sdk-v0.123.0...sdk-v0.124.0

Features

  • api: add Claude Tag category and user breakdowns to usage reports (669ff22)
  • api: add named types for organization compliance settings state (54be8da)
  • api: add support for sending a workspace ID on more endpoints (a11e6f1)

Bug Fixes

  • repair custom-code merge in messages resources (#455) (7ac43b9)
  • tools: create agent-toolset files and directories owner-only (#485) (a9c2298)

Chores

  • internal: bundle the mock server spec and update breaking-change detection (8752d02)
  • internal: codegen related update (a63afbc)
  • tests: reword the skip reason on the path-level query param tests (999bee5)

Documentation

  • api: update a few doc strings (2ef3d59)

... (truncated)

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.125.0 (2026-09-10)

Full Changelog: sdk-v0.124.0...sdk-v0.125.0

Features

  • api: add auto mode tool permissions for Managed Agents (7f5e2c6)
  • api: add content_too_large web_fetch tool error code (f06416e)
  • api: add the user-profiles-2026-09-04 beta value and external_user_details to user profiles (318d42d)
  • api: support mounting public GitHub repositories without an authorization_token in Managed Agents sessions (9e2d945)

Chores

  • client: clean up the unused idempotency request option (4ce2772)
  • docs: correct the environment scope field description (835c677)
  • internal: restore package version (b43a7f6)
  • internal: stop stamping the package version into generated files (80ace5e)
  • tests: restore empty test package marker files (4f27519)

0.124.0 (2026-09-04)

Full Changelog: sdk-v0.123.0...sdk-v0.124.0

Features

  • api: add Claude Tag category and user breakdowns to usage reports (669ff22)
  • api: add named types for organization compliance settings state (54be8da)
  • api: add support for sending a workspace ID on more endpoints (a11e6f1)

Bug Fixes

  • repair custom-code merge in messages resources (#455) (7ac43b9)
  • tools: create agent-toolset files and directories owner-only (#485) (a9c2298)

Chores

  • internal: bundle the mock server spec and update breaking-change detection (8752d02)
  • internal: codegen related update (a63afbc)
  • tests: reword the skip reason on the path-level query param tests (999bee5)

Documentation

  • api: update a few doc strings (2ef3d59)

0.123.0 (2026-09-01)

... (truncated)

Commits
  • 135f71e Merge pull request #1184 from anthropics/release-please--branches--main--chan...
  • 415537b chore: release main
  • 7f5e2c6 feat(api): add auto mode tool permissions for Managed Agents
  • 9e2d945 feat(api): support mounting public GitHub repositories without an authorizati...
  • 96ecb87 environments: the worker runs on the work item's session token alone when one...
  • 318d42d feat(api): add the user-profiles-2026-09-04 beta value and external_user_deta...
  • 835c677 chore(docs): correct the environment scope field description
  • 4ce2772 chore(client): clean up the unused idempotency request option
  • f06416e feat(api): add content_too_large web_fetch tool error code
  • b43a7f6 chore(internal): restore package version
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​anthropic-ai/sdk since your current version.


Updates @ast-grep/napi from 0.42.2 to 0.45.3

Release notes

Sourced from @​ast-grep/napi's releases.

0.45.3

0.45.2

0.45.1

... (truncated)

Changelog

Sourced from @​ast-grep/napi's changelog.

0.45.3

0.45.2

23 August 2026

0.45.1

7 August 2026

... (truncated)

Commits
  • 979c143 0.45.3
  • d76ca48 chore(deps): update dependency dprint to v0.57.0 (#2916)
  • 8f94fd1 feat: add min-severity cli (#2917)
  • bb74529 chore: update tree-sitter 0.27
  • a95d846 fix: ast-grep-ignore must be at first be the frist alphabet to take effect
  • c6b32d7 fix: fix clippy
  • 9b4fa64 fix(outline): anchor fallback signatures to names (#2913)
  • 6cf4957 feat(outline): add Markdown heading support (#2912)
  • d045852 chore(deps): update dependency oxlint to v1.80.0 (#2908)
  • 40dab3c chore(deps): update dependency @​ast-grep/napi to v0.45.2 (#2906)
  • Additional commits viewable in compare view

Updates @fastify/cors from 11.2.0 to 11.3.0

Release notes

Sourced from @​fastify/cors's releases.

v11.3.0

What's Changed

New Contributors

Full Changelog: fastify/fastify-cors@v11.2.0...v11.3.0

Commits
  • 2c60caa Bumped v11.3.0
  • cf4986e chore: bump @​types/node in the dev-dependencies-typescript group (#411)
  • 816d054 test: remove remaining tap-style assertions from vary tests (#410)
  • 20507ea chore(package.json): fix delvedor's personal url (#409)
  • 6fe85c4 docs(readme): update request origin link (#408)
  • 57bdc65 chore: bump fastify-plugin from 5.1.0 to 6.0.0 in the dependencies group (#407)
  • a8ae57d chore: update depedabot setting
  • 4d34798 chore(.gitattributes): retain binary file eol style (#402)
  • 675ebef refactor(types): migrate from tsd to tstyche (#403)
  • ef25e0b ci: add lock-threads workflow (#401)
  • Additional commits viewable in compare view

Updates @fastify/static from 9.1.3 to 9.3.0

Release notes

Sourced from @​fastify/static's releases.

v9.3.0

What's Changed

New Contributors

Full Changelog: fastify/fastify-static@v9.2.0...v9.3.0

v9.2.0

What's Changed

New Contributors

Full Changelog: fastify/fastify-static@v9.1.3...v9.2.0

Commits

…36 updates

Bumps the root-minor-patch group with 34 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@ai-sdk/amazon-bedrock](https://github.com/vercel/ai/tree/HEAD/packages/amazon-bedrock) | `3.0.101` | `3.0.131` |
| [@ai-sdk/google](https://github.com/vercel/ai/tree/HEAD/packages/google) | `2.0.74` | `2.0.97` |
| [@ai-sdk/openai](https://github.com/vercel/ai/tree/HEAD/packages/openai) | `2.0.106` | `2.0.127` |
| [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.82.0` | `0.125.0` |
| [@ast-grep/napi](https://github.com/ast-grep/ast-grep) | `0.42.2` | `0.45.3` |
| [@fastify/cors](https://github.com/fastify/fastify-cors) | `11.2.0` | `11.3.0` |
| [@fastify/static](https://github.com/fastify/fastify-static) | `9.1.3` | `9.3.0` |
| [@fastify/websocket](https://github.com/fastify/fastify-websocket) | `11.2.0` | `11.3.0` |
| [@langfuse/client](https://github.com/langfuse/langfuse-js/tree/HEAD/packages/client) | `5.5.3` | `5.11.1` |
| [@langfuse/otel](https://github.com/langfuse/langfuse-js/tree/HEAD/packages/otel) | `5.5.3` | `5.11.1` |
| [@lingxiao-office/sdk](https://github.com/hexian2001/lingxiao-backend/tree/HEAD/packages/sdk) | `1.0.1` | `1.0.7` |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.29.0` | `1.30.0` |
| [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.219.0` | `0.222.0` |
| [acorn](https://github.com/acornjs/acorn) | `8.16.0` | `8.18.0` |
| [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `5.0.198` | `5.0.257` |
| [fastify](https://github.com/fastify/fastify) | `5.8.5` | `5.12.4` |
| [jszip](https://github.com/Stuk/jszip) | `3.10.1` | `3.10.2` |
| [mammoth](https://github.com/mwilliamson/mammoth.js) | `1.12.0` | `1.12.3` |
| [openai](https://github.com/openai/openai-node) | `6.37.0` | `6.49.0` |
| [pdfkit](https://github.com/foliojs/pdfkit) | `0.18.0` | `0.20.2` |
| [playwright](https://github.com/microsoft/playwright) | `1.60.0` | `1.63.0` |
| [proxy-agent](https://github.com/TooTallNate/proxy-agents/tree/HEAD/packages/proxy-agent) | `8.0.1` | `8.0.2` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.6` | `19.3.0` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.14` | `19.3.0` |
| [react-virtuoso](https://github.com/petyosi/react-virtuoso/tree/HEAD/packages/react-virtuoso) | `4.18.7` | `4.18.13` |
| [sharp](https://github.com/lovell/sharp) | `0.34.5` | `0.35.4` |
| [string-width](https://github.com/sindresorhus/string-width) | `8.2.1` | `8.2.2` |
| [undici](https://github.com/nodejs/undici) | `8.2.0` | `8.10.2` |
| [wrap-ansi](https://github.com/chalk/wrap-ansi) | `10.0.0` | `10.0.1` |
| [yaml](https://github.com/eemeli/yaml) | `2.9.0` | `2.9.1` |
| [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.6.2` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.7.0` | `25.9.6` |
| [electron](https://github.com/electron/electron) | `42.4.1` | `42.11.3` |
| [tsx](https://github.com/privatenumber/tsx) | `4.22.4` | `4.23.13` |



Updates `@ai-sdk/amazon-bedrock` from 3.0.101 to 3.0.131
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/amazon-bedrock@3.0.131/packages/amazon-bedrock/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/amazon-bedrock@3.0.131/packages/amazon-bedrock)

Updates `@ai-sdk/anthropic` from 2.0.81 to 2.0.102
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/anthropic@2.0.102/packages/anthropic/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/anthropic@2.0.102/packages/anthropic)

Updates `@ai-sdk/google` from 2.0.74 to 2.0.97
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/google@2.0.97/packages/google/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/google@2.0.97/packages/google)

Updates `@ai-sdk/openai` from 2.0.106 to 2.0.127
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/openai@2.0.127/packages/openai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/openai@2.0.127/packages/openai)

Updates `@anthropic-ai/sdk` from 0.82.0 to 0.125.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.82.0...sdk-v0.125.0)

Updates `@ast-grep/napi` from 0.42.2 to 0.45.3
- [Release notes](https://github.com/ast-grep/ast-grep/releases)
- [Changelog](https://github.com/ast-grep/ast-grep/blob/main/CHANGELOG.md)
- [Commits](ast-grep/ast-grep@0.42.2...0.45.3)

Updates `@fastify/cors` from 11.2.0 to 11.3.0
- [Release notes](https://github.com/fastify/fastify-cors/releases)
- [Commits](fastify/fastify-cors@v11.2.0...v11.3.0)

Updates `@fastify/static` from 9.1.3 to 9.3.0
- [Release notes](https://github.com/fastify/fastify-static/releases)
- [Commits](fastify/fastify-static@v9.1.3...v9.3.0)

Updates `@fastify/websocket` from 11.2.0 to 11.3.0
- [Release notes](https://github.com/fastify/fastify-websocket/releases)
- [Commits](fastify/fastify-websocket@v11.2.0...v11.3.0)

Updates `@langfuse/client` from 5.5.3 to 5.11.1
- [Release notes](https://github.com/langfuse/langfuse-js/releases)
- [Changelog](https://github.com/langfuse/langfuse-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/langfuse/langfuse-js/commits/v5.11.1/packages/client)

Updates `@langfuse/otel` from 5.5.3 to 5.11.1
- [Release notes](https://github.com/langfuse/langfuse-js/releases)
- [Changelog](https://github.com/langfuse/langfuse-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/langfuse/langfuse-js/commits/v5.11.1/packages/otel)

Updates `@langfuse/tracing` from 5.5.3 to 5.11.1
- [Release notes](https://github.com/langfuse/langfuse-js/releases)
- [Changelog](https://github.com/langfuse/langfuse-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/langfuse/langfuse-js/commits/v5.11.1/packages/tracing)

Updates `@lingxiao-office/sdk` from 1.0.1 to 1.0.7
- [Changelog](https://github.com/hexian2001/lingxiao-backend/blob/main/docs/release-npm.md)
- [Commits](https://github.com/hexian2001/lingxiao-backend/commits/HEAD/packages/sdk)

Updates `@modelcontextprotocol/sdk` from 1.29.0 to 1.30.0
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@v1.29.0...1.30.0)

Updates `@opentelemetry/sdk-node` from 0.219.0 to 0.222.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.219.0...experimental/v0.222.0)

Updates `acorn` from 8.16.0 to 8.18.0
- [Commits](acornjs/acorn@8.16.0...8.18.0)

Updates `ai` from 5.0.198 to 5.0.257
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/ai@5.0.257/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@5.0.257/packages/ai)

Updates `fastify` from 5.8.5 to 5.12.4
- [Release notes](https://github.com/fastify/fastify/releases)
- [Commits](fastify/fastify@v5.8.5...v5.12.4)

Updates `jszip` from 3.10.1 to 3.10.2
- [Changelog](https://github.com/Stuk/jszip/blob/main/CHANGES.md)
- [Commits](Stuk/jszip@v3.10.1...v3.10.2)

Updates `mammoth` from 1.12.0 to 1.12.3
- [Release notes](https://github.com/mwilliamson/mammoth.js/releases)
- [Changelog](https://github.com/mwilliamson/mammoth.js/blob/master/NEWS)
- [Commits](mwilliamson/mammoth.js@1.12.0...1.12.3)

Updates `openai` from 6.37.0 to 6.49.0
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/main/CHANGELOG.md)
- [Commits](openai/openai-node@v6.37.0...v6.49.0)

Updates `pdfkit` from 0.18.0 to 0.20.2
- [Release notes](https://github.com/foliojs/pdfkit/releases)
- [Changelog](https://github.com/foliojs/pdfkit/blob/master/CHANGELOG.md)
- [Commits](foliojs/pdfkit@v0.18.0...v0.20.2)

Updates `playwright` from 1.60.0 to 1.63.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.60.0...v1.63.0)

Updates `proxy-agent` from 8.0.1 to 8.0.2
- [Release notes](https://github.com/TooTallNate/proxy-agents/releases)
- [Changelog](https://github.com/TooTallNate/proxy-agents/blob/main/packages/proxy-agent/CHANGELOG.md)
- [Commits](https://github.com/TooTallNate/proxy-agents/commits/proxy-agent@8.0.2/packages/proxy-agent)

Updates `react` from 19.2.6 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react)

Updates `@types/react` from 19.2.14 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-virtuoso` from 4.18.7 to 4.18.13
- [Release notes](https://github.com/petyosi/react-virtuoso/releases)
- [Changelog](https://github.com/petyosi/react-virtuoso/blob/main/packages/react-virtuoso/CHANGELOG.md)
- [Commits](https://github.com/petyosi/react-virtuoso/commits/react-virtuoso@4.18.13/packages/react-virtuoso)

Updates `sharp` from 0.34.5 to 0.35.4
- [Release notes](https://github.com/lovell/sharp/releases)
- [Commits](lovell/sharp@v0.34.5...v0.35.4)

Updates `string-width` from 8.2.1 to 8.2.2
- [Release notes](https://github.com/sindresorhus/string-width/releases)
- [Commits](sindresorhus/string-width@v8.2.1...v8.2.2)

Updates `undici` from 8.2.0 to 8.10.2
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v8.2.0...v8.10.2)

Updates `wrap-ansi` from 10.0.0 to 10.0.1
- [Release notes](https://github.com/chalk/wrap-ansi/releases)
- [Commits](chalk/wrap-ansi@v10.0.0...v10.0.1)

Updates `yaml` from 2.9.0 to 2.9.1
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](eemeli/yaml@v2.9.0...v2.9.1)

Updates `zod` from 4.4.3 to 4.6.2
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.4.3...v4.6.2)

Updates `@types/node` from 25.7.0 to 25.9.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/react` from 19.2.14 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `electron` from 42.4.1 to 42.11.3
- [Release notes](https://github.com/electron/electron/releases)
- [Commits](electron/electron@v42.4.1...v42.11.3)

Updates `tsx` from 4.22.4 to 4.23.13
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.22.4...v4.23.13)

---
updated-dependencies:
- dependency-name: "@ai-sdk/amazon-bedrock"
  dependency-version: 3.0.131
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: "@ai-sdk/anthropic"
  dependency-version: 2.0.102
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: "@ai-sdk/google"
  dependency-version: 2.0.97
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: "@ai-sdk/openai"
  dependency-version: 2.0.127
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.125.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@ast-grep/napi"
  dependency-version: 0.45.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@fastify/cors"
  dependency-version: 11.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@fastify/static"
  dependency-version: 9.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@fastify/websocket"
  dependency-version: 11.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@langfuse/client"
  dependency-version: 5.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@langfuse/otel"
  dependency-version: 5.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@langfuse/tracing"
  dependency-version: 5.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@lingxiao-office/sdk"
  dependency-version: 1.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@opentelemetry/sdk-node"
  dependency-version: 0.222.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: acorn
  dependency-version: 8.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: ai
  dependency-version: 5.0.257
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: fastify
  dependency-version: 5.12.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: jszip
  dependency-version: 3.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: mammoth
  dependency-version: 1.12.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: openai
  dependency-version: 6.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: pdfkit
  dependency-version: 0.20.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: playwright
  dependency-version: 1.63.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: proxy-agent
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: react
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@types/react"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: react-virtuoso
  dependency-version: 4.18.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: sharp
  dependency-version: 0.35.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: string-width
  dependency-version: 8.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: undici
  dependency-version: 8.10.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: wrap-ansi
  dependency-version: 10.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: yaml
  dependency-version: 2.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: zod
  dependency-version: 4.6.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@types/node"
  dependency-version: 25.9.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@types/react"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: electron
  dependency-version: 42.11.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: tsx
  dependency-version: 4.23.13
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Sep 15, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@github-actions

Copy link
Copy Markdown

GLM 审查信息

结论

建议阻塞合并。本次 PR 包含多个处于 0.x 阶段的核心依赖的大跨度 minor 版本升级,这些升级在语义化版本规范下允许引入破坏性变更,而 PR 中未包含任何针对潜在 API 变更的代码适配,存在极高的编译失败或运行时回归风险。

发现

  1. @anthropic-ai/sdk 跨度过大且存在破坏性变更风险 (package.json 行 96)
    • 0.82.0 升级至 0.125.0。在 0.x 版本中,次版本号(minor)升级通常包含不向后兼容的 API 变更。跨越大几十个版本极有可能导致类型定义变更、方法签名修改或废弃,进而引发 TypeScript 编译错误或运行时调用异常。
  2. sharp 升级至 0.35.x 可能引入破坏性变更 (package.json 行 138)
    • sharp0.35.0 版本中通常会调整底层依赖或提升 Node.js 最低版本要求,并可能重构部分图片处理 API。需确认现有的图片处理逻辑是否仍然兼容。
  3. @ast-grep/napi 升级跨度较大 (package.json 行 102)
    • 0.42.2 升级至 0.45.3,作为 AST 解析核心库,0.x 的 minor 升级可能调整了节点遍历、匹配规则或 NAPI 接口,可能导致现有的代码分析/重写功能失效。
  4. pdfkit 升级至 0.20.x (package.json 行 120)
    • 0.18.0 升级至 0.20.2,同样处于 0.x 阶段,可能存在 PDF 生成接口或字体加载逻辑的变更。

建议测试

  1. 编译验证:在本地拉取该分支并执行完整的 TypeScript 类型检查(如 tsc --noEmit),重点排查 @anthropic-ai/sdksharp@ast-grep/napi 等库的类型报错。
  2. 核心功能回归测试
    • 验证 Anthropic 模型的调用、流式输出及工具调用是否正常。
    • 验证图片处理(如缩放、格式转换)功能是否正常。
    • 验证 PDF 生成功能是否排版正常且无报错。
    • 验证基于 ast-grep 的代码分析或修改规则是否仍然准确匹配预期节点。
  3. 如果上述测试发现问题,建议将相关依赖降级或拆分此 PR,针对有破坏性变更的依赖单独提 PR 并附带代码适配。

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants