Skip to content

chore(deps): Bump the production-dependencies group across 1 directory with 15 updates - #124

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-87af04613a
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-87af04613a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 17, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 15 updates in the / directory:

Package From To
@anthropic-ai/sdk 0.115.0 0.125.0
@hookform/resolvers 5.4.2 5.9.1
@sparkjsdev/spark 2.1.0 2.2.0
@xyflow/react 12.11.2 12.11.6
isomorphic-git 1.40.0 1.42.2
next 15.5.21 15.5.25
next-intl 4.13.4 4.14.4
react 19.2.8 19.3.0
react-dom 19.2.8 19.3.0
react-hook-form 7.83.0 7.88.0
tailwind-merge 3.6.0 3.7.0
three 0.185.1 0.186.0
@types/three 0.185.1 0.186.0
zod 4.4.3 4.6.5
zustand 5.0.14 5.0.15

Updates @anthropic-ai/sdk from 0.115.0 to 0.125.0

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk: v0.125.0

0.125.0 (2026-09-10)

Full Changelog: sdk-v0.124.0...sdk-v0.125.0

Features

  • api: add auto mode tool permissions for Managed Agents (7f5e2c6)
  • api: add content_too_large web_fetch tool error code (f06416e)
  • api: add the user-profiles-2026-09-04 beta value and external_user_details to user profiles (318d42d)
  • api: support mounting public GitHub repositories without an authorization_token in Managed Agents sessions (9e2d945)

Chores

  • client: clean up the unused idempotency request option (4ce2772)
  • docs: correct the environment scope field description (835c677)
  • internal: restore package version (b43a7f6)
  • internal: stop stamping the package version into generated files (80ace5e)
  • tests: restore empty test package marker files (4f27519)

sdk: v0.124.0

0.124.0 (2026-09-04)

Full Changelog: sdk-v0.123.0...sdk-v0.124.0

Features

  • api: add Claude Tag category and user breakdowns to usage reports (669ff22)
  • api: add named types for organization compliance settings state (54be8da)
  • api: add support for sending a workspace ID on more endpoints (a11e6f1)

Bug Fixes

  • repair custom-code merge in messages resources (#455) (7ac43b9)
  • tools: create agent-toolset files and directories owner-only (#485) (a9c2298)

Chores

  • internal: bundle the mock server spec and update breaking-change detection (8752d02)
  • internal: codegen related update (a63afbc)
  • tests: reword the skip reason on the path-level query param tests (999bee5)

Documentation

  • api: update a few doc strings (2ef3d59)

... (truncated)

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.125.0 (2026-09-10)

Full Changelog: sdk-v0.124.0...sdk-v0.125.0

Features

  • api: add auto mode tool permissions for Managed Agents (7f5e2c6)
  • api: add content_too_large web_fetch tool error code (f06416e)
  • api: add the user-profiles-2026-09-04 beta value and external_user_details to user profiles (318d42d)
  • api: support mounting public GitHub repositories without an authorization_token in Managed Agents sessions (9e2d945)

Chores

  • client: clean up the unused idempotency request option (4ce2772)
  • docs: correct the environment scope field description (835c677)
  • internal: restore package version (b43a7f6)
  • internal: stop stamping the package version into generated files (80ace5e)
  • tests: restore empty test package marker files (4f27519)

0.124.0 (2026-09-04)

Full Changelog: sdk-v0.123.0...sdk-v0.124.0

Features

  • api: add Claude Tag category and user breakdowns to usage reports (669ff22)
  • api: add named types for organization compliance settings state (54be8da)
  • api: add support for sending a workspace ID on more endpoints (a11e6f1)

Bug Fixes

  • repair custom-code merge in messages resources (#455) (7ac43b9)
  • tools: create agent-toolset files and directories owner-only (#485) (a9c2298)

Chores

  • internal: bundle the mock server spec and update breaking-change detection (8752d02)
  • internal: codegen related update (a63afbc)
  • tests: reword the skip reason on the path-level query param tests (999bee5)

Documentation

  • api: update a few doc strings (2ef3d59)

0.123.0 (2026-09-01)

... (truncated)

Commits
  • 135f71e Merge pull request #1184 from anthropics/release-please--branches--main--chan...
  • 415537b chore: release main
  • 7f5e2c6 feat(api): add auto mode tool permissions for Managed Agents
  • 9e2d945 feat(api): support mounting public GitHub repositories without an authorizati...
  • 96ecb87 environments: the worker runs on the work item's session token alone when one...
  • 318d42d feat(api): add the user-profiles-2026-09-04 beta value and external_user_deta...
  • 835c677 chore(docs): correct the environment scope field description
  • 4ce2772 chore(client): clean up the unused idempotency request option
  • f06416e feat(api): add content_too_large web_fetch tool error code
  • b43a7f6 chore(internal): restore package version
  • Additional commits viewable in compare view

Updates @hookform/resolvers from 5.4.2 to 5.9.1

Release notes

Sourced from @​hookform/resolvers's releases.

v5.9.1

5.9.1 (2026-08-17)

Bug Fixes

  • isNameInFieldArray fails to recognise bracket-notation array paths causing nested errors overwriting (#876) (f18ddfb)

v5.9.0

5.9.0 (2026-08-15)

Features

v5.8.0

5.8.0 (2026-08-13)

Features

v5.7.1

5.7.1 (2026-08-02)

Bug Fixes

  • ata-validator peer dependency version (#871) (827f20b)

v5.7.0

5.7.0 (2026-08-02)

Features

v5.6.0

5.6.0 (2026-08-01)

Features

  • improve all resovlers drops validation errors for special root field names (b011a5f)

v5.5.8

5.5.8 (2026-08-01)

... (truncated)

Commits
  • f18ddfb fix: isNameInFieldArray fails to recognise bracket-notation array paths causi...
  • c8159ae feat: update joi to v18 (#873)
  • a5100ab feat: support Vest 6
  • 28ec539 fix(vest)!: support Vest 6 (#874)
  • 827f20b fix: ata-validator peer dependency version (#871)
  • 4cfba18 feat: support vine v4 (#867)
  • 58d2e2d remove dead image
  • b011a5f feat: improve all resovlers drops validation errors for special root field names
  • 5483a03 improve all resolvers (#870)
  • 2f28787 fix: Zod resolver drops validation errors for special root field names (#869)
  • Additional commits viewable in compare view

Updates @sparkjsdev/spark from 2.1.0 to 2.2.0

Commits

Updates @xyflow/react from 12.11.2 to 12.11.6

Release notes

Sourced from @​xyflow/react's releases.

@​xyflow/react@​12.11.6

Patch Changes

  • #5994 2350158 - Reset all properties in provider store when unmounting flow

  • #5997 0117cc9 - Prevent attribution warning when pane is not rendered either

  • Updated dependencies [0117cc9]:

    • @​xyflow/system@​0.0.82

@​xyflow/react@​12.11.5

Patch Changes

  • Updated dependencies [22e0be2]:
    • @​xyflow/system@​0.0.81

@​xyflow/react@​12.11.4

Patch Changes

  • #5974 8c42922 - Minimap still works after ReactFlow remounts

  • #5962 cbf40b9 - Show log if user hides attribution in development

  • #5976 3319ef4 - Fix the MiniMap zooming out to include the origin when every node is hidden.

  • #5955 965ca70 - Fix MiniMap calling useCallback conditionally for onNodeClick.

@​xyflow/react@​12.11.3

Patch Changes

  • #5902 393d951 - Allow middle-mouse viewport panning to start from a selection rectangle.

  • #5889 ff126a0 - Fix extent: 'parent' not immediately resolving when parent has width or initialWidth.

  • #5943 d1def59 - Invoke an error if handle can not be found

  • #5947 2ba040f - Use correct nodeExtent for internal setNodes.

  • #5918 c5d7442 - Fix selection box appearing when dragging the pane via touch. Prefer touch panning over drag selection when selectionOnDrag is combined with mouse-button-specific panOnDrag settings.

  • #5922 392da00 - Allow Control to activate pane panning with a primary-button drag.

... (truncated)

Changelog

Sourced from @​xyflow/react's changelog.

12.11.6

Patch Changes

  • #5994 2350158 - Reset all properties in provider store when unmounting flow

  • #5997 0117cc9 - Prevent attribution warning when pane is not rendered either

  • Updated dependencies [0117cc9]:

    • @​xyflow/system@​0.0.82

12.11.5

Patch Changes

  • Updated dependencies [22e0be2]:
    • @​xyflow/system@​0.0.81

12.11.4

Patch Changes

  • #5974 8c42922 - Minimap still works after ReactFlow remounts

  • #5962 cbf40b9 - Show log if user hides attribution in development

  • #5976 3319ef4 - Fix the MiniMap zooming out to include the origin when every node is hidden.

  • #5955 965ca70 - Fix MiniMap calling useCallback conditionally for onNodeClick.

12.11.3

Patch Changes

  • #5902 393d951 - Allow middle-mouse viewport panning to start from a selection rectangle.

  • #5889 ff126a0 - Fix extent: 'parent' not immediately resolving when parent has width or initialWidth.

... (truncated)

Commits
  • 9fd41fd chore(packages): bump
  • 19f9c2a fix(react/store): reset defaultEdgeOptions
  • 2acefb5 fix(react/store): reset functions #5991
  • 8f0a5d6 chore(packages): bump
  • 286816c chore(packages): bump
  • 3319ef4 fix(react): keep minimap bounds at the viewport when all nodes are hidden
  • b7186f3 fix(react): minimap still works after reactflow remounts #5971
  • d8edc77 Merge pull request #5955 from Jian-Zhang08/fix/minimap-onnodeclick-conditiona...
  • 59b1a60 Simplify node click handling in MiniMap component
  • 25869f2 chore(system): add attr warning handler
  • Additional commits viewable in compare view

Updates isomorphic-git from 1.40.0 to 1.42.2

Release notes

Sourced from isomorphic-git's releases.

v1.42.2

1.42.2 (2026-09-11)

Bug Fixes

v1.42.1

1.42.1 (2026-09-11)

Bug Fixes

  • restore PushRejectedError when pushing against advanced remote (#2429) (14764ae), closes #2421

v1.42.0

1.42.0 (2026-09-10)

Features

Bug Fixes

v1.41.9

1.41.9 (2026-08-23)

Bug Fixes

  • match filepaths on path component boundaries (#2416) (89d641a)

v1.41.8

1.41.8 (2026-08-21)

Bug Fixes

  • throw when TREE is given a ref that cannot be resolved (#2407) (fe987eb)

v1.41.7

1.41.7 (2026-08-19)

Bug Fixes

... (truncated)

Commits

Updates next from 15.5.21 to 15.5.25

Release notes

Sourced from next's releases.

v15.5.25

Follow-up release to v15.5.24 re-enabling AVIF Image Optimization when newer versions of sharp are installed (#97954).

v15.5.24

This release contains security fixes for the following advisories:

Critical:

v15.5.23

What's Changed

Full Changelog: vercel/next.js@v15.5.22...v15.5.23

v15.5.22

What's Changed

Full Changelog: vercel/next.js@v15.5.21...v15.5.22

Commits
  • 013ee1d v15.5.25
  • d64c0d1 [15.5.x] Re-enable AVIF image optimization with a runtime libheif version gua...
  • 7f6b400 [test] Fix 15.5.x deploy tests (#97977)
  • 1a80896 [15.5.x][ci] Run flake detection and new deploy tests when merged and on back...
  • 6d9b5d8 [15.5.x] ci: remove pull_request_stats workflow (#97976)
  • b6c45b4 v15.5.24
  • b0f3460 [15.5.x] Fix ISR misses with backslashes in segments when deployed on Windows
  • 409772e [15.5.x] [next/image]: disable avif image optimization
  • 9c44b88 [15.x] support sharp 0.34 and 0.35
  • 144fa5d [15.5.x] Remove generated error codes (#97783)
  • Additional commits viewable in compare view

Updates next-intl from 4.13.4 to 4.14.4

Release notes

Sourced from next-intl's releases.

v4.14.4

4.14.4 (2026-09-11)

Bug Fixes

v4.14.3

4.14.3 (2026-09-10)

Bug Fixes

v4.14.2

4.14.2 (2026-09-01)

Bug Fixes

v4.14.1

4.14.1 (2026-08-28)

Bug Fixes

v4.14.0

4.14.0 (2026-08-27)

Features

⚠️ If you're using useExtracted and the po format, this requires an update to your messages.

Please see amannn/next-intl#2393 for details and an upgrade prompt.

v4.13.7

4.13.7 (2026-08-17)

Bug Fixes

v4.13.6

4.13.6 (2026-08-10)

... (truncated)

Changelog

Sourced from next-intl's changelog.

4.14.4 (2026-09-11)

Bug Fixes

4.14.3 (2026-09-10)

Bug Fixes

4.14.2 (2026-09-01)

Bug Fixes

4.14.1 (2026-08-28)

Bug Fixes

4.14.0 (2026-08-27)

Features

4.13.7 (2026-08-17)

Bug Fixes

4.13.6 (2026-08-10)

Bug Fixes

4.13.5 (2026-08-04)

Bug Fixes

Commits
  • 8267c8f v4.14.4
  • f04681d fix: Improve base path detection for setting a cookie (#2410)
  • e9b1637 v4.14.3
  • a97b35e fix: Keep $ patterns in route param values literally (#2406)
  • ddb378d docs: Lint messages with @eloqnt/cli in example-app-router (#2403)
  • a388bd5 docs: Add a "Lint your messages" section to the README (#2404)
  • 3259beb v4.14.2
  • 4d18120 fix: Allow @eloqnt/* patches to resolve by moving to ^0.1.0 ranges (#2398)
  • 58b9222 v4.14.1
  • 67fca94 fix: Unbreak experimental.messages without a messages.sourceLocale (#2395)
  • Additional commits viewable in compare view

Updates react from 19.2.8 to 19.3.0

Release notes

Sourced from react's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

New React DOM Features

  • browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
    • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

All Changes

React

…y with 15 updates

Bumps the production-dependencies group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.115.0` | `0.125.0` |
| [@hookform/resolvers](https://github.com/react-hook-form/resolvers) | `5.4.2` | `5.9.1` |
| [@sparkjsdev/spark](https://github.com/sparkjs-dev/spark) | `2.1.0` | `2.2.0` |
| [@xyflow/react](https://github.com/xyflow/xyflow/tree/HEAD/packages/react) | `12.11.2` | `12.11.6` |
| [isomorphic-git](https://github.com/isomorphic-git/isomorphic-git) | `1.40.0` | `1.42.2` |
| [next](https://github.com/vercel/next.js) | `15.5.21` | `15.5.25` |
| [next-intl](https://github.com/amannn/next-intl) | `4.13.4` | `4.14.4` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.0` |
| [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.83.0` | `7.88.0` |
| [tailwind-merge](https://github.com/dcastil/tailwind-merge/tree/HEAD/packages/tailwind-merge) | `3.6.0` | `3.7.0` |
| [three](https://github.com/mrdoob/three.js) | `0.185.1` | `0.186.0` |
| [@types/three](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/three) | `0.185.1` | `0.186.0` |
| [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.6.5` |
| [zustand](https://github.com/pmndrs/zustand) | `5.0.14` | `5.0.15` |



Updates `@anthropic-ai/sdk` from 0.115.0 to 0.125.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.115.0...sdk-v0.125.0)

Updates `@hookform/resolvers` from 5.4.2 to 5.9.1
- [Release notes](https://github.com/react-hook-form/resolvers/releases)
- [Commits](react-hook-form/resolvers@v5.4.2...v5.9.1)

Updates `@sparkjsdev/spark` from 2.1.0 to 2.2.0
- [Commits](https://github.com/sparkjs-dev/spark/commits)

Updates `@xyflow/react` from 12.11.2 to 12.11.6
- [Release notes](https://github.com/xyflow/xyflow/releases)
- [Changelog](https://github.com/xyflow/xyflow/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/xyflow/xyflow/commits/@xyflow/react@12.11.6/packages/react)

Updates `isomorphic-git` from 1.40.0 to 1.42.2
- [Release notes](https://github.com/isomorphic-git/isomorphic-git/releases)
- [Commits](isomorphic-git/isomorphic-git@v1.40.0...v1.42.2)

Updates `next` from 15.5.21 to 15.5.25
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v15.5.21...v15.5.25)

Updates `next-intl` from 4.13.4 to 4.14.4
- [Release notes](https://github.com/amannn/next-intl/releases)
- [Changelog](https://github.com/amannn/next-intl/blob/main/CHANGELOG.md)
- [Commits](amannn/next-intl@v4.13.4...v4.14.4)

Updates `react` from 19.2.8 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react)

Updates `react-dom` from 19.2.8 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom)

Updates `react-hook-form` from 7.83.0 to 7.88.0
- [Release notes](https://github.com/react-hook-form/react-hook-form/releases)
- [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md)
- [Commits](react-hook-form/react-hook-form@v7.83.0...v7.88.0)

Updates `tailwind-merge` from 3.6.0 to 3.7.0
- [Release notes](https://github.com/dcastil/tailwind-merge/releases)
- [Commits](https://github.com/dcastil/tailwind-merge/commits/tailwind-merge@3.7.0/packages/tailwind-merge)

Updates `three` from 0.185.1 to 0.186.0
- [Release notes](https://github.com/mrdoob/three.js/releases)
- [Commits](https://github.com/mrdoob/three.js/commits)

Updates `@types/three` from 0.185.1 to 0.186.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/three)

Updates `zod` from 4.4.3 to 4.6.5
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.4.3...v4.6.5)

Updates `zustand` from 5.0.14 to 5.0.15
- [Release notes](https://github.com/pmndrs/zustand/releases)
- [Commits](pmndrs/zustand@v5.0.14...v5.0.15)

---
updated-dependencies:
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.125.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@hookform/resolvers"
  dependency-version: 5.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@sparkjsdev/spark"
  dependency-version: 2.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@xyflow/react"
  dependency-version: 12.11.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: isomorphic-git
  dependency-version: 1.42.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: next
  dependency-version: 15.5.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: next-intl
  dependency-version: 4.14.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: react
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: react-dom
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: react-hook-form
  dependency-version: 7.88.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: tailwind-merge
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: three
  dependency-version: 0.186.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@types/three"
  dependency-version: 0.186.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: zod
  dependency-version: 4.6.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: zustand
  dependency-version: 5.0.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 17, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 19, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 19, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/production-dependencies-87af04613a branch September 19, 2026 16:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants