chore(deps): bump the root-minor-patch group across 1 directory with 24 updates by dependabot[bot] · Pull Request #57 · hexian2001/lingxiao-coding

dependabot · 2026-06-28T13:43:06Z

Bumps the root-minor-patch group with 22 updates in the / directory:

Package	From	To
@ai-sdk/amazon-bedrock	`3.0.101`	`3.0.105`
@ai-sdk/google	`2.0.74`	`2.0.78`
@ai-sdk/openai	`2.0.106`	`2.0.110`
@anthropic-ai/sdk	`0.82.0`	`0.109.1`
@ast-grep/napi	`0.42.2`	`0.44.0`
@langfuse/client	`5.5.3`	`5.9.1`
@langfuse/otel	`5.5.3`	`5.9.1`
@slidev/cli	`52.15.2`	`52.16.0`
acorn	`8.16.0`	`8.17.0`
ai	`5.0.198`	`5.0.209`
fastify	`5.8.5`	`5.9.0`
openai	`6.37.0`	`6.45.0`
pdfkit	`0.18.0`	`0.19.1`
playwright	`1.60.0`	`1.61.1`
proxy-agent	`8.0.1`	`8.0.2`
react	`19.2.6`	`19.2.7`
@types/react	`19.2.14`	`19.2.17`
react-virtuoso	`4.18.7`	`4.18.10`
sharp	`0.34.5`	`0.35.3`
undici	`8.2.0`	`8.5.0`
@types/node	`25.7.0`	`25.9.4`
electron	`42.4.1`	`42.5.2`

Updates @ai-sdk/amazon-bedrock from 3.0.101 to 3.0.105

Changelog

Sourced from @ai-sdk/amazon-bedrock's changelog.

3.0.105

Patch Changes

f236836: feat (provider/anthropic): add claude-sonnet-5 model id

Updated dependencies [f236836]

@ai-sdk/anthropic@2.0.85

3.0.104

Patch Changes

Updated dependencies [b85c4fb]

@ai-sdk/provider-utils@3.0.28

@ai-sdk/anthropic@2.0.84

3.0.103

Patch Changes

Updated dependencies [9169261]

@ai-sdk/provider-utils@3.0.27

@ai-sdk/anthropic@2.0.83

3.0.102

Patch Changes

Updated dependencies [9f67efe]

Updated dependencies [eea9166]

@ai-sdk/provider-utils@3.0.26

@ai-sdk/anthropic@2.0.82

Commits

f2c1594 Version Packages (#16515)
f236836 feat (provider/anthropic): add claude-sonnet-5 model id (#16519)
146f991 Version Packages (#16452)
d5f3aab Version Packages (#16158)
08442eb Version Packages (#16027)
See full diff in compare view

Updates @ai-sdk/anthropic from 2.0.81 to 2.0.85

Changelog

Sourced from @ai-sdk/anthropic's changelog.

2.0.85

Patch Changes

f236836: feat (provider/anthropic): add claude-sonnet-5 model id

2.0.84

Patch Changes

Updated dependencies [b85c4fb]

@ai-sdk/provider-utils@3.0.28

2.0.83

Patch Changes

Updated dependencies [9169261]

@ai-sdk/provider-utils@3.0.27

2.0.82

Patch Changes

Updated dependencies [9f67efe]

Updated dependencies [eea9166]

@ai-sdk/provider-utils@3.0.26

Commits

f2c1594 Version Packages (#16515)
f236836 feat (provider/anthropic): add claude-sonnet-5 model id (#16519)
146f991 Version Packages (#16452)
d5f3aab Version Packages (#16158)
08442eb Version Packages (#16027)
See full diff in compare view

Updates @ai-sdk/google from 2.0.74 to 2.0.78

Changelog

Sourced from @ai-sdk/google's changelog.

2.0.78

Patch Changes

8260f89: fix(provider/google): include usageMetadata in providerMetadata for non-streaming generate

2.0.77

Patch Changes

Updated dependencies [b85c4fb]

@ai-sdk/provider-utils@3.0.28

2.0.76

Patch Changes

Updated dependencies [9169261]

@ai-sdk/provider-utils@3.0.27

2.0.75

Patch Changes

9f67efe: fix: only send provider credentials to same-origin response-supplied URLs

Several provider clients followed a URL taken from the provider's API response (a polling/status URL or a final media URL such as polling_url, urls.get, result_url, result.sample, or video.uri) and reused the authenticated headers — or appended ?key=<API_KEY> — on that request. Because the host of the response-supplied URL was never validated, the long-lived API key was sent to whatever host the response named (a CDN in the benign case, or an attacker-chosen host if the provider response was tampered with), allowing credential exfiltration.

A new isSameOrigin helper is added to @ai-sdk/provider-utils, and the affected fetches in @ai-sdk/black-forest-labs, @ai-sdk/fireworks, @ai-sdk/replicate, @ai-sdk/gladia, @ai-sdk/fal, and @ai-sdk/google now attach credentials only when the followed URL is same-origin with the provider's configured API origin. Requests to a foreign origin are made without the credential.

Updated dependencies [9f67efe]

Updated dependencies [eea9166]

@ai-sdk/provider-utils@3.0.26

Commits

952021a Version Packages (#16529)
8260f89 fix(provider/google): include usageMetadata in providerMetadata for non-strea...
146f991 Version Packages (#16452)
d5f3aab Version Packages (#16158)
08442eb Version Packages (#16027)
See full diff in compare view

Updates @ai-sdk/openai from 2.0.106 to 2.0.110

Changelog

Sourced from @ai-sdk/openai's changelog.

2.0.110

Patch Changes

Updated dependencies [b85c4fb]

@ai-sdk/provider-utils@3.0.28

2.0.109

Patch Changes

f8e6a5c: feat(openai): add orchestration token usage details to Responses API usage

2.0.108

Patch Changes

Updated dependencies [9169261]

@ai-sdk/provider-utils@3.0.27

2.0.107

Patch Changes

Updated dependencies [9f67efe]

Updated dependencies [eea9166]

@ai-sdk/provider-utils@3.0.26

Commits

146f991 Version Packages (#16452)
94e191f Version Packages (#16303)
f8e6a5c Backport: feat(openai): add orchestration token usage details to Responses AP...
d5f3aab Version Packages (#16158)
08442eb Version Packages (#16027)
See full diff in compare view

Updates @anthropic-ai/sdk from 0.82.0 to 0.109.1

Release notes

Sourced from @anthropic-ai/sdk's releases.

sdk: v0.109.1

0.109.1 (2026-07-01)

Full Changelog: sdk-v0.109.0...sdk-v0.109.1

Chores

api: remove some nonfunctional types from the SDKs (cc4dd4e)

sdk: v0.109.0

0.109.0 (2026-06-30)

Full Changelog: sdk-v0.108.0...sdk-v0.109.0

Features

api: add support for Managed Agents event delta streaming, agent overrides, reverse pagination, vault credential injection scoping, and agent and deployment webhook events (7f3211b)

sdk: v0.108.0

0.108.0 (2026-06-30)

Full Changelog: sdk-v0.107.0...sdk-v0.108.0

Features

api: add support for claude-sonnet-5 (4588db0)

Bug Fixes

agent-toolset: allow absolute paths that resolve inside workdir (#112) (e951fb2)

Chores

format README.md (#176) (98dcff7)

sdk: v0.107.0

0.107.0 (2026-06-29)

Full Changelog: sdk-v0.106.0...sdk-v0.107.0

Features

api: add support for 20260318 web fetch and support tools (d7057ea)

Bug Fixes

agent-toolset: bound canonicalize symlink hops; resolve glob matches before confinement check (#142) (277be80)

... (truncated)

Changelog

Sourced from @anthropic-ai/sdk's changelog.

0.109.1 (2026-07-01)

Full Changelog: sdk-v0.109.0...sdk-v0.109.1

Chores

api: remove some nonfunctional types from the SDKs (cc4dd4e)

0.109.0 (2026-06-30)

Full Changelog: sdk-v0.108.0...sdk-v0.109.0

Features

api: add support for Managed Agents event delta streaming, agent overrides, reverse pagination, vault credential injection scoping, and agent and deployment webhook events (7f3211b)

0.108.0 (2026-06-30)

Full Changelog: sdk-v0.107.0...sdk-v0.108.0

Features

api: add support for claude-sonnet-5 (4588db0)

Bug Fixes

agent-toolset: allow absolute paths that resolve inside workdir (#112) (e951fb2)

Chores

format README.md (#176) (98dcff7)

0.107.0 (2026-06-29)

Full Changelog: sdk-v0.106.0...sdk-v0.107.0

Features

api: add support for 20260318 web fetch and support tools (d7057ea)

Bug Fixes

agent-toolset: bound canonicalize symlink hops; resolve glob matches before confinement check (#142) (277be80)

types: restore BatchCreateParams.Request.params dropped by codegen merge (#165) (c6b68d2)

Chores

... (truncated)

Commits

96d1a99 chore: release main (#1106)
cb829c7 chore: release main
fd0341d feat(api): add support for Managed Agents event delta streaming, agent overri...
90f767a codegen metadata
ed986cd chore: release main
d3ffad4 chore: format README.md (#176)
6b46ad3 feat(api): add support for claude-sonnet-5
8200ffa feat(vertex): bump google-auth-library to ^10.2.0 (SDK-91) (#30)
fa06d36 feat(bedrock): pass client logger to AWS credential provider chain (SDK-90) (...
0fff7fa fix(agent-toolset): allow absolute paths that resolve inside workdir (#112)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @anthropic-ai/sdk since your current version.

Updates @ast-grep/napi from 0.42.2 to 0.44.0

Release notes

Sourced from @ast-grep/napi's releases.

0.44.0

chore: move outline docs and benchmarks out of repo [#2763](https://github.com/ast-grep/ast-grep/issues/2763)

chore(deps): update dependency smol-toml to v1.7.0 [#2762](https://github.com/ast-grep/ast-grep/issues/2762)

Add JavaScript outline rules and stream JSON files [#2761](https://github.com/ast-grep/ast-grep/issues/2761)

fix: reject root multi-metavariable patterns [#2727](https://github.com/ast-grep/ast-grep/issues/2727)

fix: don't leak metavar bindings across siblings in nthChild ofRule [#2677](https://github.com/ast-grep/ast-grep/issues/2677)

fix: extract python from-import modules in outline [#2758](https://github.com/ast-grep/ast-grep/issues/2758)

fix: match go outline types by declaration [#2759](https://github.com/ast-grep/ast-grep/issues/2759)

fix: skip empty files in outline [#2757](https://github.com/ast-grep/ast-grep/issues/2757)

feat: mark duplicate outline names [#2756](https://github.com/ast-grep/ast-grep/issues/2756)

refactor: inline outline member kind lookup [#2755](https://github.com/ast-grep/ast-grep/issues/2755)

refactor: make outline extract return iterator [#2754](https://github.com/ast-grep/ast-grep/issues/2754)

refactor: stream outline extraction items [#2753](https://github.com/ast-grep/ast-grep/issues/2753)

perf: use single traversal for outline extraction [#2751](https://github.com/ast-grep/ast-grep/issues/2751)

perf: cache transform replace regexes [#2750](https://github.com/ast-grep/ast-grep/issues/2750)

fix: don't leak metavar bindings from a negated not rule [#2676](https://github.com/ast-grep/ast-grep/issues/2676)

refactor: fold outline extract options into extractors [#2749](https://github.com/ast-grep/ast-grep/issues/2749)

refactor: split outline extract options and style [#2748](https://github.com/ast-grep/ast-grep/issues/2748)

refactor: map outline cli to core options [#2747](https://github.com/ast-grep/ast-grep/issues/2747)

feat: apply outline extractor options [#2746](https://github.com/ast-grep/ast-grep/issues/2746)

feat: add outline extractor options [#2745](https://github.com/ast-grep/ast-grep/issues/2745)

fix: simplify some code [#2744](https://github.com/ast-grep/ast-grep/issues/2744)

fix: trailing ast-grep-ignore on a multi-line statement suppresses it [#2678](https://github.com/ast-grep/ast-grep/issues/2678)

chore(deps): update actions/checkout action to v7 [#2731](https://github.com/ast-grep/ast-grep/issues/2731)

fix: cover async rust outline rules [#2743](https://github.com/ast-grep/ast-grep/issues/2743)

feat: add bundled outline rules for more languages [#2739](https://github.com/ast-grep/ast-grep/issues/2739)

feat: add outline CLI command [#2738](https://github.com/ast-grep/ast-grep/issues/2738)

perf: use cursor-backed outline traversal [#2737](https://github.com/ast-grep/ast-grep/issues/2737)

feat: run outline extractors [#2729](https://github.com/ast-grep/ast-grep/issues/2729)

chore(deps): update oxlint monorepo to v1.70.0 [#2726](https://github.com/ast-grep/ast-grep/issues/2726)

refactor: split fixer variable validation [#2724](https://github.com/ast-grep/ast-grep/issues/2724)

refactor: validate rule core directly [#2723](https://github.com/ast-grep/ast-grep/issues/2723)

test: move matcher tests to rule core [#2722](https://github.com/ast-grep/ast-grep/issues/2722)

refactor: wrap rewriter config errors [#2721](https://github.com/ast-grep/ast-grep/issues/2721)

test: validate global rule fix vars via rule config [#2719](https://github.com/ast-grep/ast-grep/issues/2719)

fix: check undefined meta var in fix [#2718](https://github.com/ast-grep/ast-grep/issues/2718)

Breaking change: fix: remove fix from SerializableCore [#2717](https://github.com/ast-grep/ast-grep/issues/2717)

fix: preserve unused suppression fixer [#2716](https://github.com/ast-grep/ast-grep/issues/2716)

Breaking change: refactor: move optional fixer to RuleConfig [#2715](https://github.com/ast-grep/ast-grep/issues/2715)

fix: add fixer var check [#2714](https://github.com/ast-grep/ast-grep/issues/2714)

Refactor rule config [#2713](https://github.com/ast-grep/ast-grep/issues/2713)

Breaking change: refactor: mvoe rewriters into SerializableRuleCore [#2711](https://github.com/ast-grep/ast-grep/issues/2711)

refactor: move rewriter out [#2712](https://github.com/ast-grep/ast-grep/issues/2712)

feat: add outline rule schema [#2710](https://github.com/ast-grep/ast-grep/issues/2710)

docs: remove outline target alias fields [#2709](https://github.com/ast-grep/ast-grep/issues/2709)

chore(deps): update rust crate smallvec to v1.15.2 [#2701](https://github.com/ast-grep/ast-grep/issues/2701)

fix(deps): update rust-wasm-bindgen monorepo [#2704](https://github.com/ast-grep/ast-grep/issues/2704)

fix: remove unused trait/methods [#2708](https://github.com/ast-grep/ast-grep/issues/2708)

feat: add outline entry model [#2703](https://github.com/ast-grep/ast-grep/issues/2703)

refactor: remove legacy outline placeholders [#2702](https://github.com/ast-grep/ast-grep/issues/2702)

... (truncated)

Changelog

Sourced from @ast-grep/napi's changelog.

0.44.0

chore: move outline docs and benchmarks out of repo [#2763](https://github.com/ast-grep/ast-grep/issues/2763)

chore(deps): update dependency smol-toml to v1.7.0 [#2762](https://github.com/ast-grep/ast-grep/issues/2762)

Add JavaScript outline rules and stream JSON files [#2761](https://github.com/ast-grep/ast-grep/issues/2761)

fix: reject root multi-metavariable patterns [#2727](https://github.com/ast-grep/ast-grep/issues/2727)

fix: don't leak metavar bindings across siblings in nthChild ofRule [#2677](https://github.com/ast-grep/ast-grep/issues/2677)

fix: extract python from-import modules in outline [#2758](https://github.com/ast-grep/ast-grep/issues/2758)

fix: match go outline types by declaration [#2759](https://github.com/ast-grep/ast-grep/issues/2759)

fix: skip empty files in outline [#2757](https://github.com/ast-grep/ast-grep/issues/2757)

feat: mark duplicate outline names [#2756](https://github.com/ast-grep/ast-grep/issues/2756)

refactor: inline outline member kind lookup [#2755](https://github.com/ast-grep/ast-grep/issues/2755)

refactor: make outline extract return iterator [#2754](https://github.com/ast-grep/ast-grep/issues/2754)

refactor: stream outline extraction items [#2753](https://github.com/ast-grep/ast-grep/issues/2753)

perf: use single traversal for outline extraction [#2751](https://github.com/ast-grep/ast-grep/issues/2751)

perf: cache transform replace regexes [#2750](https://github.com/ast-grep/ast-grep/issues/2750)

fix: don't leak metavar bindings from a negated not rule [#2676](https://github.com/ast-grep/ast-grep/issues/2676)

refactor: fold outline extract options into extractors [#2749](https://github.com/ast-grep/ast-grep/issues/2749)

refactor: split outline extract options and style [#2748](https://github.com/ast-grep/ast-grep/issues/2748)

refactor: map outline cli to core options [#2747](https://github.com/ast-grep/ast-grep/issues/2747)

feat: apply outline extractor options [#2746](https://github.com/ast-grep/ast-grep/issues/2746)

feat: add outline extractor options [#2745](https://github.com/ast-grep/ast-grep/issues/2745)

fix: simplify some code [#2744](https://github.com/ast-grep/ast-grep/issues/2744)

fix: trailing ast-grep-ignore on a multi-line statement suppresses it [#2678](https://github.com/ast-grep/ast-grep/issues/2678)

chore(deps): update actions/checkout action to v7 [#2731](https://github.com/ast-grep/ast-grep/issues/2731)

fix: cover async rust outline rules [#2743](https://github.com/ast-grep/ast-grep/issues/2743)

feat: add bundled outline rules for more languages [#2739](https://github.com/ast-grep/ast-grep/issues/2739)

feat: add outline CLI command [#2738](https://github.com/ast-grep/ast-grep/issues/2738)

perf: use cursor-backed outline traversal [#2737](https://github.com/ast-grep/ast-grep/issues/2737)

feat: run outline extractors [#2729](https://github.com/ast-grep/ast-grep/issues/2729)

chore(deps): update oxlint monorepo to v1.70.0 [#2726](https://github.com/ast-grep/ast-grep/issues/2726)

refactor: split fixer variable validation [#2724](https://github.com/ast-grep/ast-grep/issues/2724)

refactor: validate rule core directly [#2723](https://github.com/ast-grep/ast-grep/issues/2723)

test: move matcher tests to rule core [#2722](https://github.com/ast-grep/ast-grep/issues/2722)

refactor: wrap rewriter config errors [#2721](https://github.com/ast-grep/ast-grep/issues/2721)

test: validate global rule fix vars via rule config [#2719](https://github.com/ast-grep/ast-grep/issues/2719)

fix: check undefined meta var in fix [#2718](https://github.com/ast-grep/ast-grep/issues/2718)

Breaking change: fix: remove fix from SerializableCore [#2717](https://github.com/ast-grep/ast-grep/issues/2717)

fix: preserve unused suppression fixer [#2716](https://github.com/ast-grep/ast-grep/issues/2716)

Breaking change: refactor: move optional fixer to RuleConfig [#2715](https://github.com/ast-grep/ast-grep/issues/2715)

fix: add fixer var check [#2714](https://github.com/ast-grep/ast-grep/issues/2714)

Refactor rule config [#2713](https://github.com/ast-grep/ast-grep/issues/2713)

Breaking change: refactor: mvoe rewriters into SerializableRuleCore [#2711](https://github.com/ast-grep/ast-grep/issues/2711)

refactor: move rewriter out [#2712](https://github.com/ast-grep/ast-grep/issues/2712)

feat: add outline rule schema [#2710](https://github.com/ast-grep/ast-grep/issues/2710)

docs: remove outline target alias fields [#2709](https://github.com/ast-grep/ast-grep/issues/2709)

chore(deps): update rust crate smallvec to v1.15.2 [#2701](https://github.com/ast-grep/ast-grep/issues/2701)

fix(deps): update rust-wasm-bindgen monorepo [#2704](https://github.com/ast-grep/ast-grep/issues/2704)

fix: remove unused trait/methods [#2708](https://github.com/ast-grep/ast-grep/issues/2708)

feat: add outline entry model [#2703](https://github.com/ast-grep/ast-grep/issues/2703)

... (truncated)

Commits

e34ce66 0.44.0
e27fc74 chore: move outline docs and benchmarks out of repo (#2763)
8a0be7e chore(deps): update dependency smol-toml to v1.7.0 (#2762)
6213351 Add JavaScript outline rules and stream JSON files (#2761)
01f05a1 fix: update edge case fallback behavior
b8f220c fix: improve root multi meta var error
a8b7061 fix: reject root multi-metavariable patterns (#2727)
58efe19 fix: don't leak metavar bindings across siblings in nthChild ofRule (#2677)
d5ee2c2 fix: extract python from-import modules in outline (#2758)
af979e6 fix: match go outline types by declaration (#2759)
Additional commits viewable in compare view

Updates @langfuse/client from 5.5.3 to 5.9.1

Release notes

Sourced from @langfuse/client's releases.

v5.9.1

What's Changed

fix: route CJS consumers to CJS declarations by @hassiebp in langfuse/langfuse-js#852

Full Changelog: langfuse/langfuse-js@v5.9.0...v5.9.1

v5.9.0

Full Changelog: langfuse/langfuse-js@v5.8.0...v5.9.0

v5.8.0

What's Changed

ci(deps): bump the github-actions group with 2 updates by @dependabot[bot] in langfuse/langfuse-js#850

feat(vercel-ai-sdk): add AI SDK v7 integration by @hassiebp in langfuse/langfuse-js#794

Full Changelog: langfuse/langfuse-js@v5.7.0...v5.8.0

v5.7.0

What's Changed

chore(deps-dev): bump @opentelemetry/core from 2.0.1 to 2.8.0 by @dependabot[bot] in langfuse/langfuse-js#844

feat(otel): add media upload toggle by @hassiebp in langfuse/langfuse-js#849

Full Changelog: langfuse/langfuse-js@v5.6.0...v5.7.0

v5.6.0

What's Changed

feat(api): update API spec from langfuse/langfuse 8cdf8a4 by @langfuse-bot in langfuse/langfuse-js#847

feat(datasets): multimodal dataset support (LFE-10288) by @wochinge in langfuse/langfuse-js#840

Full Changelog: langfuse/langfuse-js@v5.5.3...v5.6.0

Commits

ff6038a chore: release v5.9.1
d1b8183 fix: route CJS consumers to CJS declarations (#852)
fd0d45b chore: release v5.9.0
bb96928 chore: release v5.8.0
9f839b5 chore: release v5.7.0
3f42799 chore: release v5.6.0
c67225d feat(datasets): multimodal dataset support (LFE-10288) (#840)
See full diff in compare view

Updates @langfuse/otel from 5.5.3 to 5.9.1

Release notes

Sourced from @langfuse/otel's releases.

v5.9.1

What's Changed

fix: route CJS consumers to CJS declarations by @hassiebp in langfuse/langfuse-js#852

Full Changelog: langfuse/langfuse-js@v5.9.0...v5.9.1

v5.9.0

Full Changelog: langfuse/langfuse-js@v5.8.0...v5.9.0

v5.8.0

What's Changed

ci(deps): bump the github-actions group with 2 updates by @dependabot[bot] in langfuse/langfuse-js#850

feat(vercel-ai-sdk): add AI SDK v7 integration by @hassiebp in langfuse/langfuse-js#794

Full Changelog: langfuse/langfuse-js@v5.7.0...v5.8.0

v5.7.0

What's Changed

chore(deps-dev): bump @opentelemetry/core from 2.0.1 to 2.8.0 by @dependabot[bot] in langfuse/langfuse-js#844

feat(otel): add media upload toggle by @hassiebp in langfuse/langfuse-js#849

Full Changelog: langfuse/langfuse-js@v5.6.0...v5.7.0

v5.6.0

What's Changed

feat(api): update API spec from langfuse/langfuse 8cdf8a4 by @langfuse-bot in langfuse/langfuse-js#847

feat(datasets): multimodal dataset support (LFE-10288) by @wochinge in langfuse/langfuse-js#840

Full Changelog: langfuse/langfuse-js@v5.5.3...v5.6.0

Commits

ff6038a chore: release v5.9.1
d1b8183 fix: route CJS consumers to CJS declarations (#852)
fd0d45b chore: release v5.9.0
bb96928 chore: release v5.8.0
7368af4 feat(vercel-ai-sdk): add AI SDK v7 integration (#794)
9f839b5 chore: release v5.7.0
0365254 feat(otel): add media upload toggle (#849)
3f42799 chore: release v5.6.0
c67225d feat(datasets): multimodal dataset support (LFE-10288) (#840)
See full diff in compare view

Updates @langfuse/tracing from 5.5.3 to 5.9.1

Release notes

Sourced from @langfuse/tracing's releases.

v5.9.1

What's Changed

fix: route CJS consumers to CJS declarations by @hassiebp in langfuse/langfuse-js#852

Full Changelog: langfuse/langfuse-js@v5.9.0...v5.9.1

v5.9.0

Full Changelog: langfuse/langfuse-js@v5.8.0...v5.9.0

v5.8.0

What's Changed

ci(deps): bump the github-actions group with 2 updates by @dependabot[bot] in langfuse/langfuse-js#850

feat(vercel-ai-sdk): add AI SDK v7 integration by @hassiebp in langfuse/langfuse-js#794

Full Changelog: langfuse/langfuse-js@v5.7.0...v5.8.0

v5.7.0

What's Changed

chore(deps-dev): bump @opentelemetry/core from 2.0.1 to 2.8.0 by @dependabot[bot] in langfuse/langfuse-js#844

feat(otel): add media upload toggle by @hassiebp in langfuse/langfuse-js#849

Full Changelog: langfuse/langfuse-js@v5.6.0...v5.7.0

v5.6.0

What's Changed

feat(api): update API spec from langfuse/langfuse 8cdf8a4 by @langfuse-bot in langfuse/langfuse-js#847

feat(datasets): multimodal dataset support (LFE-10288) by @wochinge in langfuse/langfuse-js#840

Full Changelog: langfuse/langfuse-js@v5.5.3...v5.6.0

Commits

ff6038a chore: release v5.9.1
d1b8183 fix: route CJS consumers to CJS declarations (#852)
fd0d45b chore: release v5.9.0
bb96928 chore: release v5.8.0
9f839b5 chore: release v5.7.0
3f42799 chore: release v5.6.0
See full diff in compare view

Updates @slidev/cli from 52.15.2 to 52.16.0

Release notes

Sourced from @slidev/cli's releases.

v52.16.0

   🚀 Features

Load preparser also from theme - by @jgosmann in slidevjs/slidev#2558 (6baeb)

Bump to pnpm 11, migrate shiki-magic-move to @shikijs/magic-move, update deps - by @antfu in slidevjs/slidev#2615 (9317d)

vscode: Add overview preview mode - by @kermanx in slidevjs/slidev#2601 (5dc7a)

   🐞 Bug Fixes

Resolve snippets in magic move blocks - by @cyphercodes in slidevjs/slidev#2590 (6d1a8)

Editing presenter notes on frontmatter-only slides - by @quinnypig in slidevjs/slidev#2591 (39f52)

Proxy virtual import globs through fs modules - by @kermanx in slidevjs/slidev#2610 (aff98)

Use BASE_URL in getSlidePath for monorepo sub-directory deployments - by @NgoQuocViet2001 in slidevjs/slidev#2562 (a0c38)

cli:

Handle browser open failures gracefully - by @kermanx in slidevjs/slidev#2600 (6dec3)

client:

Ignore nested katex tables for line highlights - by @cyphercodes, cyphercodes and @kermanx in slidevjs/slidev#2579 (c035c)

Hide goto dialog suggestions when dialog is closed - by @SkorbezhArtem in slidevjs/slidev#2597 (46bce)

    View changes on GitHub

Commits

a1609ff chore: release v52.16.0
c1849d8 chore: update gitignore
9317d96 feat: bump to pnpm 11, migrate shiki-magic-move to @shikijs/magic-move, updat...
6baeb85 feat: load preparser also from theme (#2558)
a0c3857 fix: use BASE_URL in getSlidePath for monorepo sub-directory deployments (#2562)
27b9cf6 docs: add CI environment setup guide for OG image with CJK fonts (#2606)
aff984c fix: proxy virtual import globs through fs modules (#2610)
9a10a59 chore: migrate unhead to v3, typescript to v6 (#2602)
39f523b fix: editing presenter notes on frontmatter-only slides (#2591)
6d1a84a fix: resolve snippets in magic move blocks (#2590)
Additional commits ...
Description has been truncated

dependabot · 2026-06-28T13:43:07Z

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

github-actions · 2026-06-28T13:44:25Z

GLM 审查信息

PR: chore(deps): bump the root-minor-patch group across 1 directory with 24 updates #57
模型: glm-5.2
审查文件: 1/2
裁剪说明: 文件数已裁剪：1/2；未纳入 patch：package-lock.json

结论

由于本次 PR 包含多个 0.x 版本依赖的 minor 升级（在语义化版本中等同于主版本升级），且变更日志中明确记录了破坏性更新，存在较高的潜在回归风险。建议在合并前进行充分的编译与核心功能验证。

发现

@ast-grep/napi (0.42.2 -> 0.44.0) 包含破坏性变更：
根据其 changelog，该版本包含了多个标记为 "Breaking change" 的重构（如 remove fix from SerializableCore, move optional fixer to RuleConfig, mvoe rewriters into SerializableRuleCore）。如果项目代码中深度使用了 ast-grep 的 napi（例如自定义规则、fixer、rewriters），极有可能遇到 TypeScript 编译错误或运行时行为改变。
@anthropic-ai/sdk (0.82.0 -> 0.109.1) 跨度较大且移除了类型：
作为 0.x 依赖，此次 minor 升级跨度极大。changelog 中提到 remove some nonfunctional types from the SDKs，这可能导致项目代码在 TypeScript 编译时报错（如果引用了被移除的类型）。
sharp (0.34.5 -> 0.35.3) 和 pdfkit (0.18.0 -> 0.19.1) 的 0.x minor 升级：
这两个包在 0.x 阶段的 minor 升级通常伴随着 API 变更或底层依赖/Node.js 版本支持的变化。特别是 sharp，历史上经常在 minor 版本中调整预编译二进制文件的打包方式或废弃旧 API。
@langfuse/tracing 未同步升级：
package.json 中 @langfuse/client 和 @langfuse/otel 升级到了 5.9.1，但 @langfuse/tracing 仍停留在 5.5.3。虽然这些包可能向后兼容，但在同一个 monorepo 中版本不一致可能会引发潜在的依赖冲突或难以调试的运行时问题。

建议测试

类型检查：运行完整的 TypeScript 编译 (tsc --noEmit) 以捕获由 @anthropic-ai/sdk 或 @ast-grep/napi 引入的类型破坏。
AST 与代码修改功能：运行涉及 ast-grep 的代码生成、AST 解析、代码修复（fixer）的测试，验证行为是否正常。
文件生成功能：运行涉及图像处理 (sharp) 和 PDF 生成 (pdfkit) 的功能测试，确保文件输出正常且无运行时崩溃。
可观测性功能：验证 Langfuse 追踪和日志上报功能是否正常工作，关注版本不一致是否导致上下文丢失。

…24 updates Bumps the root-minor-patch group with 22 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@ai-sdk/amazon-bedrock](https://github.com/vercel/ai/tree/HEAD/packages/amazon-bedrock) | `3.0.101` | `3.0.105` | | [@ai-sdk/google](https://github.com/vercel/ai/tree/HEAD/packages/google) | `2.0.74` | `2.0.78` | | [@ai-sdk/openai](https://github.com/vercel/ai/tree/HEAD/packages/openai) | `2.0.106` | `2.0.110` | | [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.82.0` | `0.109.1` | | [@ast-grep/napi](https://github.com/ast-grep/ast-grep) | `0.42.2` | `0.44.0` | | [@langfuse/client](https://github.com/langfuse/langfuse-js/tree/HEAD/packages/client) | `5.5.3` | `5.9.1` | | [@langfuse/otel](https://github.com/langfuse/langfuse-js/tree/HEAD/packages/otel) | `5.5.3` | `5.9.1` | | [@slidev/cli](https://github.com/slidevjs/slidev) | `52.15.2` | `52.16.0` | | [acorn](https://github.com/acornjs/acorn) | `8.16.0` | `8.17.0` | | [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `5.0.198` | `5.0.209` | | [fastify](https://github.com/fastify/fastify) | `5.8.5` | `5.9.0` | | [openai](https://github.com/openai/openai-node) | `6.37.0` | `6.45.0` | | [pdfkit](https://github.com/foliojs/pdfkit) | `0.18.0` | `0.19.1` | | [playwright](https://github.com/microsoft/playwright) | `1.60.0` | `1.61.1` | | [proxy-agent](https://github.com/TooTallNate/proxy-agents/tree/HEAD/packages/proxy-agent) | `8.0.1` | `8.0.2` | | [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.6` | `19.2.7` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.14` | `19.2.17` | | [react-virtuoso](https://github.com/petyosi/react-virtuoso/tree/HEAD/packages/react-virtuoso) | `4.18.7` | `4.18.10` | | [sharp](https://github.com/lovell/sharp) | `0.34.5` | `0.35.3` | | [undici](https://github.com/nodejs/undici) | `8.2.0` | `8.5.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.7.0` | `25.9.4` | | [electron](https://github.com/electron/electron) | `42.4.1` | `42.5.2` | Updates `@ai-sdk/amazon-bedrock` from 3.0.101 to 3.0.105 - [Release notes](https://github.com/vercel/ai/releases) - [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/amazon-bedrock@3.0.105/packages/amazon-bedrock/CHANGELOG.md) - [Commits](https://github.com/vercel/ai/commits/@ai-sdk/amazon-bedrock@3.0.105/packages/amazon-bedrock) Updates `@ai-sdk/anthropic` from 2.0.81 to 2.0.85 - [Release notes](https://github.com/vercel/ai/releases) - [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/anthropic@2.0.85/packages/anthropic/CHANGELOG.md) - [Commits](https://github.com/vercel/ai/commits/@ai-sdk/anthropic@2.0.85/packages/anthropic) Updates `@ai-sdk/google` from 2.0.74 to 2.0.78 - [Release notes](https://github.com/vercel/ai/releases) - [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/google@2.0.78/packages/google/CHANGELOG.md) - [Commits](https://github.com/vercel/ai/commits/@ai-sdk/google@2.0.78/packages/google) Updates `@ai-sdk/openai` from 2.0.106 to 2.0.110 - [Release notes](https://github.com/vercel/ai/releases) - [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/openai@2.0.110/packages/openai/CHANGELOG.md) - [Commits](https://github.com/vercel/ai/commits/@ai-sdk/openai@2.0.110/packages/openai) Updates `@anthropic-ai/sdk` from 0.82.0 to 0.109.1 - [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases) - [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md) - [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.82.0...sdk-v0.109.1) Updates `@ast-grep/napi` from 0.42.2 to 0.44.0 - [Release notes](https://github.com/ast-grep/ast-grep/releases) - [Changelog](https://github.com/ast-grep/ast-grep/blob/main/CHANGELOG.md) - [Commits](ast-grep/ast-grep@0.42.2...0.44.0) Updates `@langfuse/client` from 5.5.3 to 5.9.1 - [Release notes](https://github.com/langfuse/langfuse-js/releases) - [Changelog](https://github.com/langfuse/langfuse-js/blob/main/CHANGELOG.md) - [Commits](https://github.com/langfuse/langfuse-js/commits/v5.9.1/packages/client) Updates `@langfuse/otel` from 5.5.3 to 5.9.1 - [Release notes](https://github.com/langfuse/langfuse-js/releases) - [Changelog](https://github.com/langfuse/langfuse-js/blob/main/CHANGELOG.md) - [Commits](https://github.com/langfuse/langfuse-js/commits/v5.9.1/packages/otel) Updates `@langfuse/tracing` from 5.5.3 to 5.9.1 - [Release notes](https://github.com/langfuse/langfuse-js/releases) - [Changelog](https://github.com/langfuse/langfuse-js/blob/main/CHANGELOG.md) - [Commits](https://github.com/langfuse/langfuse-js/commits/v5.9.1/packages/tracing) Updates `@slidev/cli` from 52.15.2 to 52.16.0 - [Release notes](https://github.com/slidevjs/slidev/releases) - [Commits](slidevjs/slidev@v52.15.2...v52.16.0) Updates `acorn` from 8.16.0 to 8.17.0 - [Commits](acornjs/acorn@8.16.0...8.17.0) Updates `ai` from 5.0.198 to 5.0.209 - [Release notes](https://github.com/vercel/ai/releases) - [Changelog](https://github.com/vercel/ai/blob/ai@5.0.209/packages/ai/CHANGELOG.md) - [Commits](https://github.com/vercel/ai/commits/ai@5.0.209/packages/ai) Updates `fastify` from 5.8.5 to 5.9.0 - [Release notes](https://github.com/fastify/fastify/releases) - [Commits](fastify/fastify@v5.8.5...v5.9.0) Updates `openai` from 6.37.0 to 6.45.0 - [Release notes](https://github.com/openai/openai-node/releases) - [Changelog](https://github.com/openai/openai-node/blob/main/CHANGELOG.md) - [Commits](openai/openai-node@v6.37.0...v6.45.0) Updates `pdfkit` from 0.18.0 to 0.19.1 - [Release notes](https://github.com/foliojs/pdfkit/releases) - [Changelog](https://github.com/foliojs/pdfkit/blob/master/CHANGELOG.md) - [Commits](foliojs/pdfkit@v0.18.0...v0.19.1) Updates `playwright` from 1.60.0 to 1.61.1 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.60.0...v1.61.1) Updates `proxy-agent` from 8.0.1 to 8.0.2 - [Release notes](https://github.com/TooTallNate/proxy-agents/releases) - [Changelog](https://github.com/TooTallNate/proxy-agents/blob/main/packages/proxy-agent/CHANGELOG.md) - [Commits](https://github.com/TooTallNate/proxy-agents/commits/proxy-agent@8.0.2/packages/proxy-agent) Updates `react` from 19.2.6 to 19.2.7 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react) Updates `@types/react` from 19.2.14 to 19.2.17 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `react-virtuoso` from 4.18.7 to 4.18.10 - [Release notes](https://github.com/petyosi/react-virtuoso/releases) - [Changelog](https://github.com/petyosi/react-virtuoso/blob/main/packages/react-virtuoso/CHANGELOG.md) - [Commits](https://github.com/petyosi/react-virtuoso/commits/react-virtuoso@4.18.10/packages/react-virtuoso) Updates `sharp` from 0.34.5 to 0.35.3 - [Release notes](https://github.com/lovell/sharp/releases) - [Commits](lovell/sharp@v0.34.5...v0.35.3) Updates `undici` from 8.2.0 to 8.5.0 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v8.2.0...v8.5.0) Updates `@types/node` from 25.7.0 to 25.9.4 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@types/react` from 19.2.14 to 19.2.17 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `electron` from 42.4.1 to 42.5.2 - [Release notes](https://github.com/electron/electron/releases) - [Commits](electron/electron@v42.4.1...v42.5.2) --- updated-dependencies: - dependency-name: "@ai-sdk/amazon-bedrock" dependency-version: 3.0.103 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: root-minor-patch - dependency-name: "@ai-sdk/anthropic" dependency-version: 2.0.83 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: root-minor-patch - dependency-name: "@ai-sdk/google" dependency-version: 2.0.76 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: root-minor-patch - dependency-name: "@ai-sdk/openai" dependency-version: 2.0.109 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: root-minor-patch - dependency-name: "@anthropic-ai/sdk" dependency-version: 0.106.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: root-minor-patch - dependency-name: "@ast-grep/napi" dependency-version: 0.44.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: root-minor-patch - dependency-name: "@langfuse/client" dependency-version: 5.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: root-minor-patch - dependency-name: "@langfuse/otel" dependency-version: 5.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: root-minor-patch - dependency-name: "@langfuse/tracing" dependency-version: 5.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: root-minor-patch - dependency-name: "@slidev/cli" dependency-version: 52.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: root-minor-patch - dependency-name: "@types/node" dependency-version: 25.9.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: root-minor-patch - dependency-name: "@types/react" dependency-version: 19.2.17 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: root-minor-patch - dependency-name: "@types/react" dependency-version: 19.2.17 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: root-minor-patch - dependency-name: acorn dependency-version: 8.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: root-minor-patch - dependency-name: ai dependency-version: 5.0.206 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: root-minor-patch - dependency-name: electron dependency-version: 42.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: root-minor-patch - dependency-name: fastify dependency-version: 5.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: root-minor-patch - dependency-name: openai dependency-version: 6.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: root-minor-patch - dependency-name: pdfkit dependency-version: 0.19.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: root-minor-patch - dependency-name: playwright dependency-version: 1.61.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: root-minor-patch - dependency-name: proxy-agent dependency-version: 8.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: root-minor-patch - dependency-name: react dependency-version: 19.2.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: root-minor-patch - dependency-name: react-virtuoso dependency-version: 4.18.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: root-minor-patch - dependency-name: sharp dependency-version: 0.35.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: root-minor-patch - dependency-name: undici dependency-version: 8.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: root-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-07-03T05:39:06Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot force-pushed the dependabot/npm_and_yarn/root-minor-patch-4654dbc145 branch 3 times, most recently from fb07074 to a89fd9a Compare July 2, 2026 02:22

dependabot Bot force-pushed the dependabot/npm_and_yarn/root-minor-patch-4654dbc145 branch from a89fd9a to 681adeb Compare July 2, 2026 09:34

dependabot Bot closed this Jul 3, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/root-minor-patch-4654dbc145 branch July 3, 2026 05:39

Navigation Menu

chore(deps): bump the root-minor-patch group across 1 directory with 24 updates - #57

chore(deps): bump the root-minor-patch group across 1 directory with 24 updates#57
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/root-minor-patch-4654dbc145

dependabot Bot commented on behalf of github Jun 28, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jun 28, 2026

Uh oh!

github-actions Bot commented Jun 28, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jul 3, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jun 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

3.0.105

Patch Changes

3.0.104

Patch Changes

3.0.103

Patch Changes

3.0.102

Patch Changes

2.0.85

Patch Changes

2.0.84

Patch Changes

2.0.83

Patch Changes

2.0.82

Patch Changes

2.0.78

Patch Changes

2.0.77

Patch Changes

2.0.76

Patch Changes

2.0.75

Patch Changes

2.0.110

Patch Changes

2.0.109

Patch Changes

2.0.108

Patch Changes

2.0.107

Patch Changes

sdk: v0.109.1

0.109.1 (2026-07-01)

Chores

sdk: v0.109.0

0.109.0 (2026-06-30)

Features

sdk: v0.108.0

0.108.0 (2026-06-30)

Features

Bug Fixes

Chores

sdk: v0.107.0

0.107.0 (2026-06-29)

Features

Bug Fixes

0.109.1 (2026-07-01)

Chores

0.109.0 (2026-06-30)

Features

0.108.0 (2026-06-30)

Features

Bug Fixes

Chores

0.107.0 (2026-06-29)

Features

Bug Fixes

Chores

0.44.0

0.44.0

v5.9.1

What's Changed

v5.9.0

v5.8.0

What's Changed

v5.7.0

What's Changed

v5.6.0

What's Changed

v5.9.1

What's Changed

v5.9.0

v5.8.0

What's Changed

v5.7.0

What's Changed

dependabot Bot commented on behalf of github Jun 28, 2026 •

edited

Loading

github-actions Bot commented Jun 28, 2026 •

edited

Loading