chore(deps): update all non-major dependencies#251
Merged
Conversation
Contributor
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
commit: |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^1.0.39→^1.0.41^1.6.9→^1.6.10^0.6.0→^0.7.0^1.2.105→^1.2.106^1.2.80→^1.2.81^3.5.33→^3.5.34^6.0.175→^6.0.177^1.6.9→^1.6.10^5.10.0→^5.11.0^2.15.0→^2.17.010.33.3→10.33.410.33.3→10.33.4^2.5.113→^2.5.117^2.9.9→^2.9.12^8.0.10→^8.0.11^3.5.33→^3.5.34Release Notes
vercel/ai (@ai-sdk/mcp)
v1.0.41Compare Source
Patch Changes
f591416: feat(ai): add toolMetadata for tool specific metdataf591416]v1.0.40Compare Source
Patch Changes
221a984: Addresource_linkcontent type toCallToolResultSchemaandPromptMessageSchemaper MCP spec. Fixes hard rejection when MCP servers returnresource_linkcontent parts with zod ≥ 4.4.x.0084974: feat(mcp): deprecate name and use clientName for MCPClientbetter-auth/better-auth (@better-auth/api-key)
v1.6.10Compare Source
Patch Changes
#9393
62c4050Thanks @IcanDivideBy0! -api.verifyApiKeynow validate the key configId is matching the one in the bodyUpdated dependencies [
1e0f26d,8c1e917,b2d655c,09f1327,906b7b3,e9c978e,e71aad3,80a655d,15ff28a,88a7c67,9a7b51d,1b25902,cf59136,a597ee0,fc02ced,9f1ef1f,36ef808,c1336c5,3a9a2c3,fde0432,2220a6d]:changesets/changesets (@changesets/changelog-github)
v0.7.0Compare Source
Minor Changes
94578cfThanks @Kauhsa! - AddeddisableThanksoptionvuejs/core (@vue/compiler-sfc)
v3.5.34Compare Source
Bug Fixes
<image>elements (#14756) (090b2e3)better-auth/better-auth (better-auth)
v1.6.10Compare Source
Patch Changes
#8339
1e0f26dThanks @ping-maxwell! - fix(captcha): breaks email-otp flow#9484
8c1e917Thanks @ping-maxwell! - fix: warn for cookie-plugin being last in array#9437
b2d655cThanks @cyphercodes! - Allow organization invitation role input types to accept dynamic access control roles.#9497
09f1327Thanks @bytaesu! - Endpoints that set cookies before redirecting (such as social sign-incallbacks and magic-link verification) no longer emit each
Set-Cookieentry twice on the response.
#9387
906b7b3Thanks @bytaesu! - The bearer plugin now produces a single entry per cookie name when mergingits session token into the request
Cookieheader. Previously the mergedheader could carry two entries for the same name if the request already
had a stale session cookie, which would surface to downstream code that
picks the first occurrence.
#9475
e9c978eThanks @jaydeep-pipaliya! - fix(username): respect callbackURL on/sign-in/usernameThe endpoint accepted a
callbackURLbody field but ignored it, soauthClient.signIn.username({ ..., callbackURL })silently did nothingwhile
authClient.signIn.emailredirected as expected. The handler nowsets a
Locationheader whencallbackURLis provided and returns{ redirect, url }alongsidetoken/user, matching the email flow.#9440
e71aad3Thanks @cyphercodes! - Clear organization active hook state after sign-out souseActiveMemberRoledoes not retain a previous user's role in SPA sign-out/sign-in flows.#9402
80a655dThanks @onmax! - Revalidate the client session after admin impersonation starts or stops.#9503
15ff28aThanks @bytaesu! -internalAdapter.deleteAccountparameter renamed fromaccountIdtoidto reflect that it queries by primary key, not theaccountIdcolumn. No runtime behavior change.#9268
88a7c67Thanks @ping-maxwell! - fix: openAPI schema for POST /sign-in/social mis-declares required fields#8839
9a7b51dThanks @dipan-ck! - Apply email enumeration protection whenemailAndPassword.autoSignInis false. Duplicate sign-ups now return a synthetic user (token: null) and triggeronExistingUserSignUp, and new sign-ups skip auto sign-in (token: null)—even withoutrequireEmailVerification, aligning with the docs.#9065
1b25902Thanks @ping-maxwell! - non-ASCII error_description in generic-oauth callback routes causes TypeError on redirect#9349
cf59136Thanks @ping-maxwell! - fix(organization): re-export field types to prevent TS2742 with additionalFields#9453
a597ee0Thanks @mausic! - The organization plugin'scancelPendingInvitationsOnReInviteoption now actually cancels the prior pending invitation when re-inviting the same email. Previously the option had no effect — re-inviting always failed withUSER_IS_ALREADY_INVITED_TO_THIS_ORGANIZATION#9456
fc02cedThanks @cyphercodes! - Reject OAuth callbacks when provider user info omits the account id to avoid linking accounts under the literalundefinedid.#9461
9f1ef1fThanks @cyphercodes! - ExposeauthClient.siwe.getNonce()as a compatibility alias for the SIWE nonce endpoint.#9369
36ef808Thanks @ping-maxwell! - fix: incorrect email casing across one-tap, email-otp & email-verification#9239
c1336c5Thanks @GautamBytes! - Fixorganization.setActiveTeamso it only accepts teams from the current active organization.#7764
3a9a2c3Thanks @programming-with-ia! - chore: expose refreshUserSessions on internal adapter#9521
fde0432Thanks @ping-maxwell! - fix: improve link accessibility issuesUpdated dependencies [
2220a6d]:nuxt-content/docus (docus)
v5.11.0Compare Source
Features
app/app.cssto avoid duplicate tailwind (#1364) (98f68d5)ContentTOCdefault variant tocircuit(#1360) (7d90d20)Bug Fixes
app.baseURLis set (#1361) (f7e42eb)mcp.routein page header dropdown (#1362) (5c36cd4)v5.10.1Compare Source
Bug Fixes
HugoRCD/evlog (evlog)
v2.17.0Compare Source
What's Changed
Features 🚀
Bug Fixes 🐞
Documentation 📚
Performance Improvements ⚡️
Full Changelog: https://github.com/HugoRCD/evlog/compare/evlog@2.16.0...evlog@2.17.0
v2.16.0Compare Source
What's Changed
Features 🚀
Bug Fixes 🐞
ai.toolCallslinear step count by @HugoRCD in #322New Contributors
Full Changelog: https://github.com/HugoRCD/evlog/compare/evlog@2.15.0...evlog@2.16.0
pnpm/pnpm (pnpm)
v10.33.4: pnpm 10.33.4Compare Source
Patch Changes
Pin the integrity of git-hosted tarballs (codeload.github.com, gitlab.com, bitbucket.org) in the lockfile so that subsequent installs detect a tampered or substituted tarball and refuse to install it. Previously the lockfile only stored the tarball URL for git dependencies, so a compromised git host or a man-in-the-middle could serve arbitrary code on later installs without lockfile changes.
A new
gitHosted: truefield is recorded on git-hosted tarball resolutions in the lockfile, letting every reader/writer route them by a single typed check instead of pattern-matching the tarball URL in each call site. Lockfiles written by older pnpm versions are enriched on load (URL fallback) so the field can be relied on uniformly across the codebase.Fix a regression where
pnpm --recursive --filter '!<pkg>' run/exec/test/addwould include the workspace root in the matched projects. The workspace root is now correctly excluded by default when only negative--filterarguments are provided, matching the documented behavior. To include the root, pass--include-workspace-root#11341.Platinum Sponsors
Gold Sponsors
vercel/turborepo (turbo)
v2.9.12: Turborepo v2.9.12Compare Source
What's Changed
Changelog
Full Changelog: vercel/turborepo@v2.9.11...v2.9.12
v2.9.11: Turborepo v2.9.11Compare Source
What's Changed
Changelog
turbo pathin VS Code extension by @anthonyshew in #12753turbo.jsoncin VS Code extension by @anthonyshew in #12760$TURBO_EXTENDS$in LSP diagnostics by @anthonyshew in #12770Full Changelog: vercel/turborepo@v2.9.10...v2.9.11
v2.9.10: Turborepo v2.9.10Compare Source
What's Changed
Changelog
turbo query affectedby @anthonyshew in #12722create-turboexample telemetry by @anthonyshew in #12725.jsextension imports to.tsfiles in boundaries by @maschwenk in #12644Full Changelog: vercel/turborepo@v2.9.9...v2.9.10
vitejs/vite (vite)
v8.0.11Compare Source
Features
Bug Fixes
Documentation
Miscellaneous Chores
Code Refactoring
Tests
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.