Bump the npm-dependencies group with 5 updates

[dependabot]

Bumps the npm-dependencies group with 5 updates:

Package	From	To
openai	7.13.0	7.17.0
@types/node	22.20.2	26.6.1
typescript	6.0.3	7.0.2
zod	4.6.0	4.6.5
prettier	3.9.6	3.9.7

Updates openai from 7.13.0 to 7.17.0

Release notes

Sourced from openai's releases.

v7.17.0

7.17.0 (2026-09-16)

Features

• api: add compaction progress events (#2749) (425502d)

Bug Fixes

• ci: retry transient Deno download failures (#2752) (e39037b)
• preserve chat runner abort reasons (#2607) (eda4d0c)
• realtime: preserve native WebSocket error causes (#2715) (58fa72a)
• responses: reject function-based API keys in WebSocket constructors (#2586) (eea7618)
• runners: reject unfinished turns in streaming runTools (#2716) (937ed67)
• streaming: emit terminal SSE events missing a trailing blank line (#2726) (94d6418)
• zod: omit impossible optional branch in strict schemas (#2751) (2b4c2c7)

Chores

• update lint tooling and tailor anti-slop for the SDK (#2753) (21a03c2)

Documentation

• examples: preserve split UTF-8 in raw stream consumer (#2714) (f44152a)

v7.16.0

7.16.0 (2026-09-15)

Features

• websocket: add per-iterator incoming event limits (#2748) (76e4456)

Bug Fixes

• api: handle malformed WebSocket events and improve buffering (#2739) (b7abc26)
• bound fallback abort subscriptions with weak lifetimes (#2745) (a93347a)
• deps-dev: bump @​cloudflare/workers-types from 5.20260830.1 to 5.20260906.1 in /ecosystem-tests/cloudflare-worker (#2731) (6cd6579)
• deps-dev: bump @​types/node from 26.2.0 to 26.4.1 (#2737) (a95c0bf)
• deps-dev: bump oxfmt from 0.62.0 to 0.66.0 (#2738) (0fe46cd)
• deps-dev: bump oxlint from 1.80.0 to 1.81.0 (#2730) (b4986b1)
• deps-dev: bump puppeteer from 25.9.0 to 25.10.0 in /ecosystem-tests/browser-direct-import (#2728) (4f3fdec)
• deps-dev: bump puppeteer from 25.9.0 to 25.10.0 in /ecosystem-tests/ts-browser-webpack (#2736) (a70286b)
• deps-dev: bump webpack from 5.110.2 to 5.110.3 in /ecosystem-tests/ts-browser-webpack (#2734) (b08c0bd)
• deps-dev: bump wrangler from 4.127.1 to 4.129.0 in /ecosystem-tests/cloudflare-worker (#2729) (e4a9bdd)

... (truncated)

Changelog

Sourced from openai's changelog.

7.17.0 (2026-09-16)

Features

• api: add compaction progress events (#2749) (425502d)

Bug Fixes

• ci: retry transient Deno download failures (#2752) (e39037b)
• preserve chat runner abort reasons (#2607) (eda4d0c)
• realtime: preserve native WebSocket error causes (#2715) (58fa72a)
• responses: reject function-based API keys in WebSocket constructors (#2586) (eea7618)
• runners: reject unfinished turns in streaming runTools (#2716) (937ed67)
• streaming: emit terminal SSE events missing a trailing blank line (#2726) (94d6418)
• zod: omit impossible optional branch in strict schemas (#2751) (2b4c2c7)

Chores

• update lint tooling and tailor anti-slop for the SDK (#2753) (21a03c2)

Documentation

• examples: preserve split UTF-8 in raw stream consumer (#2714) (f44152a)

7.16.0 (2026-09-15)

Features

• websocket: add per-iterator incoming event limits (#2748) (76e4456)

Bug Fixes

• api: handle malformed WebSocket events and improve buffering (#2739) (b7abc26)
• bound fallback abort subscriptions with weak lifetimes (#2745) (a93347a)
• deps-dev: bump @​cloudflare/workers-types from 5.20260830.1 to 5.20260906.1 in /ecosystem-tests/cloudflare-worker (#2731) (6cd6579)
• deps-dev: bump @​types/node from 26.2.0 to 26.4.1 (#2737) (a95c0bf)
• deps-dev: bump oxfmt from 0.62.0 to 0.66.0 (#2738) (0fe46cd)
• deps-dev: bump oxlint from 1.80.0 to 1.81.0 (#2730) (b4986b1)
• deps-dev: bump puppeteer from 25.9.0 to 25.10.0 in /ecosystem-tests/browser-direct-import (#2728) (4f3fdec)
• deps-dev: bump puppeteer from 25.9.0 to 25.10.0 in /ecosystem-tests/ts-browser-webpack (#2736) (a70286b)
• deps-dev: bump webpack from 5.110.2 to 5.110.3 in /ecosystem-tests/ts-browser-webpack (#2734) (b08c0bd)
• deps-dev: bump wrangler from 4.127.1 to 4.129.0 in /ecosystem-tests/cloudflare-worker (#2729) (e4a9bdd)
• deps: bump undici from 7.29.0 to 7.29.1 in /ecosystem-tests/node-ts-cjs (#2732) (b499843)
• deps: bump undici from 8.9.0 to 8.10.2 (#2733) (d3c6c4f)

... (truncated)

Commits

• 0118f6c release: 7.17.0 (#2750)
• 21a03c2 chore: update lint tooling and tailor anti-slop for the SDK (#2753)
• aba2c3f test(ci): verify Windows contributor builds (#2754)
• 1cbea9c test(ci): cover release gate and document CI policy (#2589)
• 937ed67 fix(runners): reject unfinished turns in streaming runTools (#2716)
• 58fa72a fix(realtime): preserve native WebSocket error causes (#2715)
• e39037b fix(ci): retry transient Deno download failures (#2752)
• f44152a docs(examples): preserve split UTF-8 in raw stream consumer (#2714)
• 94d6418 fix(streaming): emit terminal SSE events missing a trailing blank line (#2726)
• c1ad759 Close converted stream sources after read or serialization errors (#2717)
• Additional commits viewable in compare view

Updates @types/node from 22.20.2 to 26.6.1

Commits

• See full diff in compare view

Updates typescript from 6.0.3 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 7.0.2

https://devblogs.microsoft.com/typescript/announcing-typescript-7-0/

This tag was originally released at: https://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2

Commits

• 1e4744d Merge branch 'main' into ts7-release
• a5a219cmicrosoft/typescript-go#4558
• ecfe30d Update status localization
• 5de25b5 Hide executable name in TypeScript status
• d7ce74a Show bundled TypeScript version for packaged servers
• 29be66a Correct TS 7 release version to 7.0.2
• ed2bd1b Merge branch 'main' into ts7-release
• 8873075 Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...
• 9427131 Set up stable / nightly extension split, other prep (microsoft/typescript-go#...
• d4eaca5microsoft/typescript-go#4549
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

Updates zod from 4.6.0 to 4.6.5

Release notes

Sourced from zod's releases.

v4.6.5

Commits:

• d2b135cfb7a3582b9eb515756b9166bcb9521f4a docs: add the 4.6.x patch highlights to the 4.6 post
• f1448f7cee00df9fe1e9ad84a000aa1828cc8bc1 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections
• de65a5cb39ed22a507fac935788f718fa88d104f docs: lead the properties section with the check and add a Zod Mini tab (#6598)
• 56222cd1532c07bcb91b67df529cab4c0a215330 feat(instanceof): key the .properties() shape off the instance type (#6600)
• ca0229a404818290e6cdcfefcd7eb2d04bcbb543 Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)"
• cc4cd4ee9c52fcaa10964e48cc144541e41a5ed9 Revert "Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)""
• 0f3f5ee3ca56c7574bf849e54f79e9a6e02562ee 4.6.5
• 59bbc03e10c636b9eb3c393dfeb552819774ec21 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump

v4.6.4

A patch on top of 4.6.3.

• d6bc1e30 feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)
• ad32d751 perf: z.url() rejects an invalid URL with URL.canParse() instead of a throwing constructor, about 50x faster; fewer allocations on the validation path (#6588)
• 2bb08717 chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump
• f6e1701a chore(deps): bump next to 15.5.25 and vite to 7.3.6 (#6153)

v4.6.3

A patch on top of 4.6.2.

• 413cce9a fix(v4): make z.properties() a check again (#6594) — removes the standalone z.properties() schema from 4.6.0; z.instanceof().properties() and .check(...z.properties()) are unchanged
• 75d63ee1 docs: show only the .properties() method form in the 4.6 post
• 46da9572 docs: match the error-message examples to what the parsers emit

v4.6.2

A patch on top of 4.6.1.

• 9446b5cc fix: preserve undefined prefault outputs and object keys (#6587) — closes #6585
• 0c483c58 docs: the Zod 4.6 announcement post (#6546)
• a00c3f34 docs: use Trigger.dev's brand-kit lockups for the platinum card

v4.6.1

A patch on top of 4.6.0.

• b12aa523 fix: preserve unique tags with defaulted discriminators (#6582) — closes #6577
• dd9c36fa fix(v4): defer recursive object index inference (#6580)
• 3b154992 feat(lang): add Tajik (tg) locale (#6581) by @​ismoil77
• 2efa8b80 ci: give the npm wait a real budget and drop the back-publish path (#6583)

Commits

• 59bbc03 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump
• 0f3f5ee 4.6.5
• cc4cd4e Revert "Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, ref...
• ca0229a Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed w...
• 56222cd feat(instanceof): key the .properties() shape off the instance type (#6600)
• de65a5c docs: lead the properties section with the check and add a Zod Mini tab (#6598)
• f1448f7 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections
• d2b135c docs: add the 4.6.x patch highlights to the 4.6 post
• 2bb0871 chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump
• 743aedb 4.6.4
• Additional commits viewable in compare view

Updates prettier from 3.9.6 to 3.9.7

Release notes

Sourced from prettier's releases.

3.9.7

• Support Angular 22.2
• Fix regressions in v3.9

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.7

diff

Markdown: Prevent indentation drift in list-item code blocks (#19647, #19990 by @​Austin1serb, @​giaBaoJS)

<!-- Input -->
- [x] short first line.
  second paragraph at six spaces that wraps
  onto another line here.

<!-- Prettier 3.9.6 -->

 
short first line.
second paragraph at six spaces that wraps
    onto another line here.



<!-- Prettier 3.9.7 -->

 
short first line.
second paragraph at six spaces that wraps
onto another line here.

JavaScript: Fix embedded template literal idempotency (#19725 by @​fisker)

// Input
const foo = html`
            <div>${getText({
            value,
            })}</div>
`;
// Prettier 3.9.6 (first format)
const foo = html&lt;div&gt; ${getText({ value, })} &lt;/div&gt;;
// Prettier 3.9.6 (second format)
const foo = html`
<div>
</tr></table>

... (truncated)

Commits

• 0449af3 Release 3.9.7
• 43cd5b0 Allow verify markdown test with mdx parser
• ab8c911 Fix test on Node.js v26 (#19927)
• 4a5adf9 Fix tests
• 3404375 Update @typescript-eslint/typescript-estree to v8.70.0
• c60f106 Angular: Support @boundary / @error error boundaries (#20015)
• 297117a Fix HTML block indentation drift in markdown list items (#19987)
• 0df4e49 Fix indentation drift for indented code blocks in list items (#19990)
• 9ef216d Fix Markdown task list indentation drift (#19647)
• 2158d48 Strip blockquote markers from a setext heading's continuation lines (#19878)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[devin-ai-integration]

Superseded by #25 (same bumps, minus TypeScript 7 / @types/node 26 which are incompatible with typescript-eslint / the Node 22 runtime — now ignored in dependabot.yml). Closing.

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml