Skip to content

chore(deps): bump the root-minor-patch group across 1 directory with 27 updates - #67

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/root-minor-patch-0816a53b69
Closed

chore(deps): bump the root-minor-patch group across 1 directory with 27 updates#67
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/root-minor-patch-0816a53b69

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 3, 2026

Copy link
Copy Markdown
Contributor

Bumps the root-minor-patch group with 25 updates in the / directory:

Package From To
@ai-sdk/amazon-bedrock 3.0.101 3.0.105
@ai-sdk/google 2.0.74 2.0.78
@ai-sdk/openai 2.0.106 2.0.110
@anthropic-ai/sdk 0.82.0 0.110.0
@ast-grep/napi 0.42.2 0.44.0
@langfuse/client 5.5.3 5.9.1
@langfuse/otel 5.5.3 5.9.1
@lingxiao-office/sdk 1.0.1 1.0.7
@opentelemetry/sdk-node 0.219.0 0.220.0
@slidev/cli 52.15.2 52.16.0
acorn 8.16.0 8.17.0
ai 5.0.198 5.0.210
fastify 5.8.5 5.9.0
openai 6.37.0 6.45.0
pdfkit 0.18.0 0.19.1
playwright 1.60.0 1.61.1
proxy-agent 8.0.1 8.0.2
react 19.2.6 19.2.7
@types/react 19.2.14 19.2.17
react-virtuoso 4.18.7 4.18.10
sharp 0.34.5 0.35.3
undici 8.2.0 8.6.0
@types/node 25.7.0 25.9.4
electron 42.4.1 42.5.2
tsx 4.22.4 4.22.5

Updates @ai-sdk/amazon-bedrock from 3.0.101 to 3.0.105

Changelog

Sourced from @​ai-sdk/amazon-bedrock's changelog.

3.0.105

Patch Changes

  • f236836: feat (provider/anthropic): add claude-sonnet-5 model id
  • Updated dependencies [f236836]
    • @​ai-sdk/anthropic@​2.0.85

3.0.104

Patch Changes

  • Updated dependencies [b85c4fb]
    • @​ai-sdk/provider-utils@​3.0.28
    • @​ai-sdk/anthropic@​2.0.84

3.0.103

Patch Changes

  • Updated dependencies [9169261]
    • @​ai-sdk/provider-utils@​3.0.27
    • @​ai-sdk/anthropic@​2.0.83

3.0.102

Patch Changes

  • Updated dependencies [9f67efe]
  • Updated dependencies [eea9166]
    • @​ai-sdk/provider-utils@​3.0.26
    • @​ai-sdk/anthropic@​2.0.82
Commits

Updates @ai-sdk/anthropic from 2.0.81 to 2.0.85

Changelog

Sourced from @​ai-sdk/anthropic's changelog.

2.0.85

Patch Changes

  • f236836: feat (provider/anthropic): add claude-sonnet-5 model id

2.0.84

Patch Changes

  • Updated dependencies [b85c4fb]
    • @​ai-sdk/provider-utils@​3.0.28

2.0.83

Patch Changes

  • Updated dependencies [9169261]
    • @​ai-sdk/provider-utils@​3.0.27

2.0.82

Patch Changes

  • Updated dependencies [9f67efe]
  • Updated dependencies [eea9166]
    • @​ai-sdk/provider-utils@​3.0.26
Commits

Updates @ai-sdk/google from 2.0.74 to 2.0.78

Changelog

Sourced from @​ai-sdk/google's changelog.

2.0.78

Patch Changes

  • 8260f89: fix(provider/google): include usageMetadata in providerMetadata for non-streaming generate

2.0.77

Patch Changes

  • Updated dependencies [b85c4fb]
    • @​ai-sdk/provider-utils@​3.0.28

2.0.76

Patch Changes

  • Updated dependencies [9169261]
    • @​ai-sdk/provider-utils@​3.0.27

2.0.75

Patch Changes

  • 9f67efe: fix: only send provider credentials to same-origin response-supplied URLs

    Several provider clients followed a URL taken from the provider's API response (a polling/status URL or a final media URL such as polling_url, urls.get, result_url, result.sample, or video.uri) and reused the authenticated headers — or appended ?key=<API_KEY> — on that request. Because the host of the response-supplied URL was never validated, the long-lived API key was sent to whatever host the response named (a CDN in the benign case, or an attacker-chosen host if the provider response was tampered with), allowing credential exfiltration.

    A new isSameOrigin helper is added to @ai-sdk/provider-utils, and the affected fetches in @ai-sdk/black-forest-labs, @ai-sdk/fireworks, @ai-sdk/replicate, @ai-sdk/gladia, @ai-sdk/fal, and @ai-sdk/google now attach credentials only when the followed URL is same-origin with the provider's configured API origin. Requests to a foreign origin are made without the credential.

  • Updated dependencies [9f67efe]

  • Updated dependencies [eea9166]

    • @​ai-sdk/provider-utils@​3.0.26
Commits

Updates @ai-sdk/openai from 2.0.106 to 2.0.110

Changelog

Sourced from @​ai-sdk/openai's changelog.

2.0.110

Patch Changes

  • Updated dependencies [b85c4fb]
    • @​ai-sdk/provider-utils@​3.0.28

2.0.109

Patch Changes

  • f8e6a5c: feat(openai): add orchestration token usage details to Responses API usage

2.0.108

Patch Changes

  • Updated dependencies [9169261]
    • @​ai-sdk/provider-utils@​3.0.27

2.0.107

Patch Changes

  • Updated dependencies [9f67efe]
  • Updated dependencies [eea9166]
    • @​ai-sdk/provider-utils@​3.0.26
Commits

Updates @anthropic-ai/sdk from 0.82.0 to 0.110.0

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk: v0.110.0

0.110.0 (2026-07-02)

Full Changelog: sdk-v0.109.1...sdk-v0.110.0

Features

  • api: add agent-memory-2026-07-22 beta header (a470e10)

sdk: v0.109.1

0.109.1 (2026-07-01)

Full Changelog: sdk-v0.109.0...sdk-v0.109.1

Chores

  • api: remove some nonfunctional types from the SDKs (cc4dd4e)

sdk: v0.109.0

0.109.0 (2026-06-30)

Full Changelog: sdk-v0.108.0...sdk-v0.109.0

Features

  • api: add support for Managed Agents event delta streaming, agent overrides, reverse pagination, vault credential injection scoping, and agent and deployment webhook events (7f3211b)

sdk: v0.108.0

0.108.0 (2026-06-30)

Full Changelog: sdk-v0.107.0...sdk-v0.108.0

Features

  • api: add support for claude-sonnet-5 (4588db0)

Bug Fixes

  • agent-toolset: allow absolute paths that resolve inside workdir (#112) (e951fb2)

Chores

sdk: v0.107.0

0.107.0 (2026-06-29)

Full Changelog: sdk-v0.106.0...sdk-v0.107.0

... (truncated)

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.110.0 (2026-07-02)

Full Changelog: sdk-v0.109.1...sdk-v0.110.0

Features

  • api: add agent-memory-2026-07-22 beta header (a470e10)

0.109.1 (2026-07-01)

Full Changelog: sdk-v0.109.0...sdk-v0.109.1

Chores

  • api: remove some nonfunctional types from the SDKs (cc4dd4e)

0.109.0 (2026-06-30)

Full Changelog: sdk-v0.108.0...sdk-v0.109.0

Features

  • api: add support for Managed Agents event delta streaming, agent overrides, reverse pagination, vault credential injection scoping, and agent and deployment webhook events (7f3211b)

0.108.0 (2026-06-30)

Full Changelog: sdk-v0.107.0...sdk-v0.108.0

Features

  • api: add support for claude-sonnet-5 (4588db0)

Bug Fixes

  • agent-toolset: allow absolute paths that resolve inside workdir (#112) (e951fb2)

Chores

0.107.0 (2026-06-29)

Full Changelog: sdk-v0.106.0...sdk-v0.107.0

Features

  • api: add support for 20260318 web fetch and support tools (d7057ea)

... (truncated)

Commits
  • 4f2eb80 chore: release main (#1107)
  • 96d1a99 chore: release main (#1106)
  • cb829c7 chore: release main
  • fd0341d feat(api): add support for Managed Agents event delta streaming, agent overri...
  • 90f767a codegen metadata
  • ed986cd chore: release main
  • d3ffad4 chore: format README.md (#176)
  • 6b46ad3 feat(api): add support for claude-sonnet-5
  • 8200ffa feat(vertex): bump google-auth-library to ^10.2.0 (SDK-91) (#30)
  • fa06d36 feat(bedrock): pass client logger to AWS credential provider chain (SDK-90) (...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​anthropic-ai/sdk since your current version.


Updates @ast-grep/napi from 0.42.2 to 0.44.0

Release notes

Sourced from @​ast-grep/napi's releases.

0.44.0

... (truncated)

Changelog

Sourced from @​ast-grep/napi's changelog.

0.44.0

... (truncated)

Commits
  • e34ce66 0.44.0
  • e27fc74 chore: move outline docs and benchmarks out of repo (#2763)
  • 8a0be7e chore(deps): update dependency smol-toml to v1.7.0 (#2762)
  • 6213351 Add JavaScript outline rules and stream JSON files (#2761)
  • 01f05a1 fix: update edge case fallback behavior
  • b8f220c fix: improve root multi meta var error
  • a8b7061 fix: reject root multi-metavariable patterns (#2727)
  • 58efe19 fix: don't leak metavar bindings across siblings in nthChild ofRule (#2677)
  • d5ee2c2 fix: extract python from-import modules in outline (#2758)
  • af979e6 fix: match go outline types by declaration (#2759)
  • Additional commits viewable in compare view

Updates @langfuse/client from 5.5.3 to 5.9.1

Release notes

Sourced from @​langfuse/client's releases.

v5.9.1

What's Changed

Full Changelog: langfuse/langfuse-js@v5.9.0...v5.9.1

v5.9.0

Full Changelog: langfuse/langfuse-js@v5.8.0...v5.9.0

v5.8.0

What's Changed

Full Changelog: langfuse/langfuse-js@v5.7.0...v5.8.0

v5.7.0

What's Changed

Full Changelog: langfuse/langfuse-js@v5.6.0...v5.7.0

v5.6.0

What's Changed

Full Changelog: langfuse/langfuse-js@v5.5.3...v5.6.0

Commits

Updates @langfuse/otel from 5.5.3 to 5.9.1

Release notes

Sourced from @​langfuse/otel's releases.

v5.9.1

What's Changed

Full Changelog: langfuse/langfuse-js@v5.9.0...v5.9.1

v5.9.0

Full Changelog: langfuse/langfuse-js@v5.8.0...v5.9.0

v5.8.0

What's Changed

Full Changelog: langfuse/langfuse-js@v5.7.0...v5.8.0

v5.7.0

What's Changed

Full Changelog: langfuse/langfuse-js@v5.6.0...v5.7.0

v5.6.0

What's Changed

Full Changelog: langfuse/langfuse-js@v5.5.3...v5.6.0

Commits

Updates @langfuse/tracing from 5.5.3 to 5.9.1

Release notes

Sourced from @​langfuse/tracing's releases.

v5.9.1

What's Changed

Full Changelog: langfuse/langfuse-js@v5.9.0...v5.9.1

v5.9.0

Full Changelog: langfuse/langfuse-js@v5.8.0...v5.9.0

v5.8.0

What's Changed

Full Changelog: langfuse/langfuse-js@v5.7.0...v5.8.0

v5.7.0

What's Changed

Full Changelog: langfuse/langfuse-js@v5.6.0...v5.7.0

v5.6.0

What's Changed

Full Changelog: langfuse/langfuse-js@v5.5.3...v5.6.0

Commits

Updates @lingxiao-office/sdk from 1.0.1 to 1.0.7

Commits

Updates @opentelemetry/sdk-node from 0.219.0 to 0.220.0

Release notes

Sourced from @​opentelemetry/sdk-node's releases.

experimental/v0.220.0

0.220.0

💥 Breaking Changes

  • refactor(sdk-logs)!: refactor BatchLogRecordProcessor constructor signature #6817 @​trentm
    • (user-facing): BatchLogRecordProcessor now takes a single options object with all possible properties, instead of two separate arguments. For example, before new BatchLogRecordProcessor(exporter, { maxQueueSize: 1000 }), after new BatchLogRecordProcessor({ exporter, maxQueueSize: 1000 }).
    • interface BufferConfig -> interface BatchLogRecordProcessorOptions, and now includes the exporter property
    • interface BatchLogRecordProcessorBrowserConfig -> interface BatchLogRecordProcessorBrowserOptions
    • (user-facing): SimpleLogRecordProcessor now takes a single options object with all possible properties. For example, before new SimpleLogRecordProcessor(exporter), after new SimpleLogRecordProcessor({ exporter }). #6836
  • refactor(configuration)!: change config file parsing to not add default values, nor merge *_list fields #6765 @​trentm
  • docs(shim-opencensus): Notice: The @opentracing/shim-opencensus package will be removed in SDK 3.x, planned for approximately September 2026.
    • The OpenCensus and OpenTracing compatibility requirements in the OpenTelemetry specification have been deprecated.
  • chore(sdk-node)!: Drop support for deprecated OpenCensusMetricProducer from declarative config

🚀 Features

  • feat(configuration): bump config schema to v1.1.0; rename without_scope_infoscope_info_enabled and without_target_info/developmenttarget_info_enabled/development on the Prometheus pull exporter (semantics inverted), rename with_resource_constant_labelsresource_constant_labels. Validate file_format per the configuration versioning spec: accept any minor version of major 1 (e.g. 1.0, 1.1), warn when the minor version is newer than supported, and reject other major versions. #6781 @​MikeGoldsmith
  • feat(sdk-node): wire up id_generator from declarative config #6782 @​MikeGoldsmith
  • feat(sdk-node): wire up tracer_provider.sampler from declarative config (always_on, always_off, trace_id_ratio_based, parent_based); unrecognized variants warn and fall back to ParentBased(AlwaysOn) #6506 @​MikeGoldsmith
  • feat(propagator-env-carrier): empty name normalization #6827 @​pellared
  • feat(propagator-env-carrier): make EnvironmentGetter read the current process.env #6853 @​pellared

🐛 Bug Fixes

  • fix(sdk-logs): stop Logger.emit() doing work (record construction, metrics, processor onEmit) after the LoggerProvider has shut down #6826 @​anneheartrecord
  • fix(sdk-node): pass all config properties (endpoint, headers, timeout, TLS, compression, temporality preference, default histogram aggregation) to OTLP metric exporters in declarative config #6814 @​MikeGoldsmith
  • fix(sdk-logs): default BatchLogRecordProcessor scheduleDelayMillis is 1000 #6796 @​trentm
  • fix(configuration): percent-decode keys and values in resource.attributes_list per spec #6787 @​MikeGoldsmith
  • fix(configuration): default log_level to info in env-based config initialization for consistency with file-based config #6788 @​MikeGoldsmith
  • fix(sdk-node): fail-fast on LoggerProvider creation with startNodeSDK() and declarative config #6785

…27 updates

Bumps the root-minor-patch group with 25 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@ai-sdk/amazon-bedrock](https://github.com/vercel/ai/tree/HEAD/packages/amazon-bedrock) | `3.0.101` | `3.0.105` |
| [@ai-sdk/google](https://github.com/vercel/ai/tree/HEAD/packages/google) | `2.0.74` | `2.0.78` |
| [@ai-sdk/openai](https://github.com/vercel/ai/tree/HEAD/packages/openai) | `2.0.106` | `2.0.110` |
| [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.82.0` | `0.110.0` |
| [@ast-grep/napi](https://github.com/ast-grep/ast-grep) | `0.42.2` | `0.44.0` |
| [@langfuse/client](https://github.com/langfuse/langfuse-js/tree/HEAD/packages/client) | `5.5.3` | `5.9.1` |
| [@langfuse/otel](https://github.com/langfuse/langfuse-js/tree/HEAD/packages/otel) | `5.5.3` | `5.9.1` |
| [@lingxiao-office/sdk](https://github.com/hexian2001/lingxiao-backend/tree/HEAD/packages/sdk) | `1.0.1` | `1.0.7` |
| [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.219.0` | `0.220.0` |
| [@slidev/cli](https://github.com/slidevjs/slidev) | `52.15.2` | `52.16.0` |
| [acorn](https://github.com/acornjs/acorn) | `8.16.0` | `8.17.0` |
| [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `5.0.198` | `5.0.210` |
| [fastify](https://github.com/fastify/fastify) | `5.8.5` | `5.9.0` |
| [openai](https://github.com/openai/openai-node) | `6.37.0` | `6.45.0` |
| [pdfkit](https://github.com/foliojs/pdfkit) | `0.18.0` | `0.19.1` |
| [playwright](https://github.com/microsoft/playwright) | `1.60.0` | `1.61.1` |
| [proxy-agent](https://github.com/TooTallNate/proxy-agents/tree/HEAD/packages/proxy-agent) | `8.0.1` | `8.0.2` |
| [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.6` | `19.2.7` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.14` | `19.2.17` |
| [react-virtuoso](https://github.com/petyosi/react-virtuoso/tree/HEAD/packages/react-virtuoso) | `4.18.7` | `4.18.10` |
| [sharp](https://github.com/lovell/sharp) | `0.34.5` | `0.35.3` |
| [undici](https://github.com/nodejs/undici) | `8.2.0` | `8.6.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.7.0` | `25.9.4` |
| [electron](https://github.com/electron/electron) | `42.4.1` | `42.5.2` |
| [tsx](https://github.com/privatenumber/tsx) | `4.22.4` | `4.22.5` |



Updates `@ai-sdk/amazon-bedrock` from 3.0.101 to 3.0.105
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/amazon-bedrock@3.0.105/packages/amazon-bedrock/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/amazon-bedrock@3.0.105/packages/amazon-bedrock)

Updates `@ai-sdk/anthropic` from 2.0.81 to 2.0.85
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/anthropic@2.0.85/packages/anthropic/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/anthropic@2.0.85/packages/anthropic)

Updates `@ai-sdk/google` from 2.0.74 to 2.0.78
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/google@2.0.78/packages/google/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/google@2.0.78/packages/google)

Updates `@ai-sdk/openai` from 2.0.106 to 2.0.110
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/openai@2.0.110/packages/openai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/openai@2.0.110/packages/openai)

Updates `@anthropic-ai/sdk` from 0.82.0 to 0.110.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.82.0...sdk-v0.110.0)

Updates `@ast-grep/napi` from 0.42.2 to 0.44.0
- [Release notes](https://github.com/ast-grep/ast-grep/releases)
- [Changelog](https://github.com/ast-grep/ast-grep/blob/main/CHANGELOG.md)
- [Commits](ast-grep/ast-grep@0.42.2...0.44.0)

Updates `@langfuse/client` from 5.5.3 to 5.9.1
- [Release notes](https://github.com/langfuse/langfuse-js/releases)
- [Changelog](https://github.com/langfuse/langfuse-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/langfuse/langfuse-js/commits/v5.9.1/packages/client)

Updates `@langfuse/otel` from 5.5.3 to 5.9.1
- [Release notes](https://github.com/langfuse/langfuse-js/releases)
- [Changelog](https://github.com/langfuse/langfuse-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/langfuse/langfuse-js/commits/v5.9.1/packages/otel)

Updates `@langfuse/tracing` from 5.5.3 to 5.9.1
- [Release notes](https://github.com/langfuse/langfuse-js/releases)
- [Changelog](https://github.com/langfuse/langfuse-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/langfuse/langfuse-js/commits/v5.9.1/packages/tracing)

Updates `@lingxiao-office/sdk` from 1.0.1 to 1.0.7
- [Changelog](https://github.com/hexian2001/lingxiao-backend/blob/main/docs/release-npm.md)
- [Commits](https://github.com/hexian2001/lingxiao-backend/commits/HEAD/packages/sdk)

Updates `@opentelemetry/sdk-node` from 0.219.0 to 0.220.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.219.0...experimental/v0.220.0)

Updates `@slidev/cli` from 52.15.2 to 52.16.0
- [Release notes](https://github.com/slidevjs/slidev/releases)
- [Commits](slidevjs/slidev@v52.15.2...v52.16.0)

Updates `acorn` from 8.16.0 to 8.17.0
- [Commits](acornjs/acorn@8.16.0...8.17.0)

Updates `ai` from 5.0.198 to 5.0.210
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/ai@5.0.210/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@5.0.210/packages/ai)

Updates `fastify` from 5.8.5 to 5.9.0
- [Release notes](https://github.com/fastify/fastify/releases)
- [Commits](fastify/fastify@v5.8.5...v5.9.0)

Updates `openai` from 6.37.0 to 6.45.0
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/main/CHANGELOG.md)
- [Commits](openai/openai-node@v6.37.0...v6.45.0)

Updates `pdfkit` from 0.18.0 to 0.19.1
- [Release notes](https://github.com/foliojs/pdfkit/releases)
- [Changelog](https://github.com/foliojs/pdfkit/blob/master/CHANGELOG.md)
- [Commits](foliojs/pdfkit@v0.18.0...v0.19.1)

Updates `playwright` from 1.60.0 to 1.61.1
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.60.0...v1.61.1)

Updates `proxy-agent` from 8.0.1 to 8.0.2
- [Release notes](https://github.com/TooTallNate/proxy-agents/releases)
- [Changelog](https://github.com/TooTallNate/proxy-agents/blob/main/packages/proxy-agent/CHANGELOG.md)
- [Commits](https://github.com/TooTallNate/proxy-agents/commits/proxy-agent@8.0.2/packages/proxy-agent)

Updates `react` from 19.2.6 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react)

Updates `@types/react` from 19.2.14 to 19.2.17
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-virtuoso` from 4.18.7 to 4.18.10
- [Release notes](https://github.com/petyosi/react-virtuoso/releases)
- [Changelog](https://github.com/petyosi/react-virtuoso/blob/main/packages/react-virtuoso/CHANGELOG.md)
- [Commits](https://github.com/petyosi/react-virtuoso/commits/react-virtuoso@4.18.10/packages/react-virtuoso)

Updates `sharp` from 0.34.5 to 0.35.3
- [Release notes](https://github.com/lovell/sharp/releases)
- [Commits](lovell/sharp@v0.34.5...v0.35.3)

Updates `undici` from 8.2.0 to 8.6.0
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v8.2.0...v8.6.0)

Updates `@types/node` from 25.7.0 to 25.9.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/react` from 19.2.14 to 19.2.17
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `electron` from 42.4.1 to 42.5.2
- [Release notes](https://github.com/electron/electron/releases)
- [Commits](electron/electron@v42.4.1...v42.5.2)

Updates `tsx` from 4.22.4 to 4.22.5
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.22.4...v4.22.5)

---
updated-dependencies:
- dependency-name: "@ai-sdk/amazon-bedrock"
  dependency-version: 3.0.105
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: "@ai-sdk/anthropic"
  dependency-version: 2.0.85
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: "@ai-sdk/google"
  dependency-version: 2.0.78
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: "@ai-sdk/openai"
  dependency-version: 2.0.110
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.110.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@ast-grep/napi"
  dependency-version: 0.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@langfuse/client"
  dependency-version: 5.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@langfuse/otel"
  dependency-version: 5.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@langfuse/tracing"
  dependency-version: 5.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@lingxiao-office/sdk"
  dependency-version: 1.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: "@opentelemetry/sdk-node"
  dependency-version: 0.220.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@slidev/cli"
  dependency-version: 52.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: acorn
  dependency-version: 8.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: ai
  dependency-version: 5.0.210
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: fastify
  dependency-version: 5.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: openai
  dependency-version: 6.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: pdfkit
  dependency-version: 0.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: playwright
  dependency-version: 1.61.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: proxy-agent
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: react
  dependency-version: 19.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: "@types/react"
  dependency-version: 19.2.17
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: react-virtuoso
  dependency-version: 4.18.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: sharp
  dependency-version: 0.35.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: undici
  dependency-version: 8.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@types/node"
  dependency-version: 25.9.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@types/react"
  dependency-version: 19.2.17
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: electron
  dependency-version: 42.5.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: tsx
  dependency-version: 4.22.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jul 3, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@github-actions

github-actions Bot commented Jul 3, 2026

Copy link
Copy Markdown

GLM 审查信息

结论

此 PR 包含多个具有破坏性更改的依赖更新,但仅修改了 package.json 版本号,未见任何代码适配。存在较高的编译失败和运行时回归风险,建议阻塞合并直至验证通过或补充适配代码。

发现

  1. @anthropic-ai/sdk 0.82.0 → 0.110.0 跨越 28 个版本,含破坏性类型移除

    • package.json 第 96 行
    • 0.109.1 明确移除了"some nonfunctional types from the SDKs"。如果项目代码中直接导入了被移除的类型(如某些 beta 类型或接口),将导致 TypeScript 编译失败。
    • 0.108.0 起 SDK 内部新增 claude-sonnet-5 支持,若项目有硬编码模型 ID 校验逻辑,需确认兼容。
  2. @ast-grep/napi 0.42.2 → 0.44.0 包含多个标记为 Breaking Change 的重构

    • package.json 第 102 行
    • 破坏性变更包括:fix: remove fix from SerializableCore(#2717)、refactor: move optional fixer to RuleConfig(#2715)、refactor: move rewriters into SerializableRuleCore(#2711)。如果项目使用了 ast-grep 的 fix/rewriter API 或直接操作 SerializableCore/RuleConfig 类型,接口签名已变,会导致运行时错误或编译失败。
  3. @opentelemetry/sdk-node 0.219.0 → 0.220.0 构造函数签名变更

    • package.json 第 116 行
    • BatchLogRecordProcessorSimpleLogRecordProcessor 的构造函数从位置参数改为单一 options 对象。例如 new BatchLogRecordProcessor(exporter, {...}) 需改为 new BatchLogRecordProcessor({ exporter, ... })。如果项目手动实例化了这些 processor,将直接报错。
  4. sharp 0.34.5 → 0.35.3 minor 版本升级,原生模块风险

    • package.json 第 139 行
    • sharp 的 minor 版本经常涉及 libvips 版本变更和 prebuilt binary 兼容性问题。在 Electron(本项目同时升级了 electron 42.4.1 → 42.5.2)环境下,sharp 的原生 ABI 需与 Electron 的 Node ABI 匹配,否则 require('sharp') 时会崩溃。
  5. @ai-sdk/google 2.0.74 → 2.0.78 含安全修复,行为变更

    • 2.0.75 修复了凭证泄露问题:现在只向同源 URL 发送 API key。如果项目依赖跨域 URL 携带凭证的行为(例如通过 Google API 响应中的 polling/media URL 下载资源),升级后这些请求将不再携带认证信息,可能导致下载失败。

建议测试

  1. TypeScript 编译检查:运行完整的 tsc --noEmit,重点关注 @anthropic-ai/sdk@ast-grep/napi 相关文件的类型错误。
  2. ast-grep 功能测试:如果项目使用 ast-grep 做代码搜索/重写(fix/rewriter),需端到端验证规则匹配和修复行为不变。
  3. OpenTelemetry 日志初始化测试:验证 BatchLogRecordProcessor / SimpleLogRecordProcessor 的实例化路径是否正常工作。
  4. sharp + Electron 集成测试:在 Electron 环境中加载 sharp 并执行一次图片处理,确认原生模块加载无异常。
  5. Google AI SDK 媒体下载测试:如果项目使用 @ai-sdk/google 处理图片/视频生成等返回媒体 URL 的场景,验证资源下载仍可成功。
  6. CI 全量通过:确认 lint、build、test 全部通过后再合并。

@dependabot @github

dependabot Bot commented on behalf of github Jul 8, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 8, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/root-minor-patch-0816a53b69 branch July 8, 2026 15:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants