Skip to content

build(deps): bump the all group with 20 updates - #15

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/all-5b33b482f6
Open

build(deps): bump the all group with 20 updates#15
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/all-5b33b482f6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown

Bumps the all group with 20 updates:

Package From To
@browserbasehq/sdk 2.16.0 2.19.0
@browserbasehq/stagehand 3.7.1 4.0.2
@commitlint/cli 21.2.1 21.2.2
@commitlint/config-conventional 21.2.0 21.2.2
@dotenvx/dotenvx 2.21.0 2.22.0
@types/bun 1.3.14 1.4.0
@vitest/coverage-v8 4.1.10 4.1.11
devtools-protocol 0.0.1676105 0.0.1687809
fallow 3.14.0 3.20.0
lint-staged 17.3.0 17.4.1
oxfmt 0.62.0 0.65.0
oxlint 1.78.0 1.80.0
simple-git-hooks 2.13.1 2.14.0
vite 8.2.1 8.2.2
zod 4.4.3 4.5.4
alchemy 2.0.0-beta.72 2.0.0-beta.74
@cloudflare/vitest-pool-workers 0.20.3 0.22.0
@types/node 18.19.130 26.4.0
vitest 4.1.10 4.1.11
wrangler 4.120.0 4.120.1

Updates @browserbasehq/sdk from 2.16.0 to 2.19.0

Release notes

Sourced from @​browserbasehq/sdk's releases.

v2.19.0

2.19.0 (2026-08-25)

Features

  • sessions: support expiresIn for debug URLs (c49d5ff)

Bug Fixes

  • client: omit Content-Type on bodyless DELETE requests (#4) (2051799)

Chores

  • add CODEOWNERS — core-browser owns this repo (#3) (87176b8)
  • reconcile trunk fork from independently-added CODEOWNERS (6021c23)
  • reconcile trunk fork from the 2.18.1 release squash (9a85609)
  • reconcile trunk fork from the 2.18.1 release squash (c4e0ee9)

v2.18.1

2.18.1 (2026-08-17)

Chores

  • add CODEOWNERS — core-browser owns this repo (#201) (ba34ebf)

v2.18.0

2.18.0 (2026-08-14)

Features

  • initial stlc build (4ff2b49)
  • stlc workspace + generate workflow (360299b)

Bug Fixes

  • api: document session timeout bounds in create-session description (a21a546)

Chores

  • sync production releases back into staging (9dabbf3)

v2.17.0

2.17.0 (2026-08-10)

... (truncated)

Changelog

Sourced from @​browserbasehq/sdk's changelog.

2.19.0 (2026-08-25)

Features

  • sessions: support expiresIn for debug URLs (c49d5ff)

Bug Fixes

  • client: omit Content-Type on bodyless DELETE requests (#4) (2051799)

Chores

  • add CODEOWNERS — core-browser owns this repo (#3) (87176b8)
  • reconcile trunk fork from independently-added CODEOWNERS (6021c23)
  • reconcile trunk fork from the 2.18.1 release squash (9a85609)
  • reconcile trunk fork from the 2.18.1 release squash (c4e0ee9)

2.18.1 (2026-08-17)

Chores

  • add CODEOWNERS — core-browser owns this repo (#201) (ba34ebf)

2.18.0 (2026-08-14)

Features

  • initial stlc build (4ff2b49)
  • stlc workspace + generate workflow (360299b)

Bug Fixes

  • api: document session timeout bounds in create-session description (a21a546)

Chores

  • sync production releases back into staging (9dabbf3)

2.17.0 (2026-08-10)

Full Changelog: v2.16.0...v2.17.0

Features

... (truncated)

Commits
  • 51ee34e release: 2.19.0 (#215)
  • 9a85609 Merge pull request #5 from browserbase/reconcile/2.18.1-release-squash
  • c4e0ee9 chore: reconcile trunk fork from the 2.18.1 release squash
  • 3e40af9 release: 2.18.1 (#213)
  • c49d5ff feat(sessions): support expiresIn for debug URLs
  • 2051799 fix(client): omit Content-Type on bodyless DELETE requests (#4)
  • 6021c23 chore: reconcile trunk fork from independently-added CODEOWNERS
  • ba34ebf chore: add CODEOWNERS — core-browser owns this repo (#201)
  • 87176b8 chore: add CODEOWNERS — core-browser owns this repo (#3)
  • 7774ff4 ci: back-sync pushes as the stlc bot app, not GITHUB_TOKEN (#2)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​browserbasehq/sdk since your current version.


Updates @browserbasehq/stagehand from 3.7.1 to 4.0.2

Release notes

Sourced from @​browserbasehq/stagehand's releases.

@​browserbasehq/stagehand@​3.7.3

Patch Changes

Changelog

Sourced from @​browserbasehq/stagehand's changelog.

TypeScript SDK 4.0.2

Patch Changes

Python SDK 4.0.2

Patch Changes

Extension Runtime 1.0.1

Patch Changes

Go SDK 4.0.2

Patch Changes

TypeScript SDK 4.0.1

Patch Changes

  • #2666 00fc44c Thanks @​miguelg719! - Allow overriding the extension asset locations via STAGEHAND_EXTENSION_ARCHIVE_PATH and STAGEHAND_EXTENSION_DIRECTORY_PATH

  • #2691 7e09557 Thanks @​shrey150! - Track the Stagehand SDK version in Browserbase session metadata.

Python SDK 4.0.1

Patch Changes

Go SDK 4.0.1

Patch Changes

TypeScript SDK 4.0.0

Major Changes

  • Rebuilt Stagehand around its v4 browser protocol and TypeScript SDK. Stagehand is now a protocol-first monorepo with TypeScript, Python, and Go SDKs over a shared core.

... (truncated)

Commits

Updates @commitlint/cli from 21.2.1 to 21.2.2

Release notes

Sourced from @​commitlint/cli's releases.

v21.2.2

21.2.2 (2026-08-13)

Bug Fixes

Chore, docs, etc.

New Contributors

Full Changelog: conventional-changelog/commitlint@v21.2.1...v21.2.2

Changelog

Sourced from @​commitlint/cli's changelog.

21.2.2 (2026-08-13)

Note: Version bump only for package @​commitlint/cli

Commits

Updates @commitlint/config-conventional from 21.2.0 to 21.2.2

Release notes

Sourced from @​commitlint/config-conventional's releases.

v21.2.2

21.2.2 (2026-08-13)

Bug Fixes

Chore, docs, etc.

New Contributors

Full Changelog: conventional-changelog/commitlint@v21.2.1...v21.2.2

v21.2.1

21.2.0 (2026-06-30)

Features

  • resolve-extends: resolve pure-ESM presets (conventional-changelog v7/v9/v10) (#4859) (fdb566f)

Chore, doc, etc.

New Contributors

Full Changelog: conventional-changelog/commitlint@v21.2.0...v21.2.1

Changelog

Sourced from @​commitlint/config-conventional's changelog.

21.2.2 (2026-08-13)

Note: Version bump only for package @​commitlint/config-conventional

Commits

Updates @dotenvx/dotenvx from 2.21.0 to 2.22.0

Release notes

Sourced from @​dotenvx/dotenvx's releases.

v2.22.0

see CHANGELOG

Changelog

Sourced from @​dotenvx/dotenvx's changelog.

2.22.0 (2026-08-27)

Added

  • Install verified binaries directly from GitHub Releases (#956)

Changed

  • Fall back to ~/.local/bin when /usr/local/bin is not writable (#955)
Commits

Updates @types/bun from 1.3.14 to 1.4.0

Commits

Updates @vitest/coverage-v8 from 4.1.10 to 4.1.11

Release notes

Sourced from @​vitest/coverage-v8's releases.

v4.1.11

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates devtools-protocol from 0.0.1676105 to 0.0.1687809

Commits

Updates fallow from 3.14.0 to 3.20.0

Release notes

Sourced from fallow's releases.

v3.20.0: Yarn PnP resolution, monorepo tsconfig scope, review schema 8

Highlights

Yarn Plug'n'Play projects resolve like any other project. A PnP install has no populated node_modules, so every bare import used to miss and fall through to the much slower path, which on a large monorepo meant minutes of import resolution instead of seconds. fallow now detects .pnp.cjs at the analyzed root or one of its ancestors and resolves bare specifiers through the manifest, anchored to the directory that holds it, so a run started from another directory and an editor session resolve the same way. Manifests that are not inlined (pnpEnableInlining: false) are unsupported and stay on the old path. Thanks to @​PatrickShaw for the report and the implementation.

Project-reference monorepos resolve correctly and much faster. A tsconfig.json reached through references that declares neither include nor files now applies only to files under its own directory, matching the compiler's **/* default project scope. It previously claimed every file in the repository, so its paths aliases leaked into sibling packages and every referenced project was walked for every import. Alongside that, the per-run tsconfig and canonicalize caches no longer serialize every lookup behind a single lock or deep-copy the parsed document on each hit. Together these turn the resolution phase on a large project-reference monorepo from minutes into seconds. Thanks again to @​PatrickShaw.

The review brief carries author actions, test adjacency, and independent slices. Review-brief schema 7 moves to 8, all additive. A judgment returned through --walkthrough-file may set action to block, address, consider, or fyi, validated on reentry and echoed on the accepted judgment, so the author reading a note knows what is required and what is optional. Each direction unit reports whether a test imports it directly and whether that test moved with the change. The partition reports independent slices: connected components of the inter-unit graph, so a change that splits along a graph-proven seam says so. The dependency decision arm now fires, batching added entries and major bumps per manifest and weighting them by their in-repo importers.

Behavior changes worth reading before you upgrade

  • A strict run can now exit 1 where it exited 0. When a config contains any per-path overrides entry, the exit code is decided by per-file severity resolution. That path never consulted import-direction boundary violations, and it started from unpromoted base rules, so --fail-on-issues and --ci could pass an error-severity boundary-violation and every warn-severity finding. Both are fixed, so a pipeline with overrides that passed before can now fail without any config or code change. The findings themselves are unchanged; only the exit code is. To keep the previous outcome, set the rule to off rather than warn, or drop the strict flag for that job. Thanks to @​DeLuke84 for a precise repro.
  • The referenced-tsconfig scope fix can surface new findings. An import that only resolved through the old repository-wide leak is now an unresolved-import finding, which is error severity by default, and a file reachable only through such an import may be reported as unused. If a subdirectory config intentionally holds shared paths, give it an explicit include, or move those aliases to a config whose directory contains the importing files.
  • Function counts change for files with bodyless declarations. Overload signatures, abstract members, and declare function no longer count as functions, so file scores move on those files without any code change, and a file whose declarations are all bodyless leaves the file-score table. Metrics averaged over the function population shift accordingly.

Coverage and health

  • Coverage matching finds functions by their body location. Each coverage-map function entry now contributes up to three candidate positions, so a function whose only structural match was its body location scores against real coverage instead of a static estimate. Because an expression-bodied arrow's recorded body is the next arrow in a curried chain, a body-start candidate yields to a declaration at the same position, which keeps every arrow of a middleware chain, a higher-order component, or a curried class property matchable. Regression baselines are unaffected; re-save health baselines if you run with --coverage, because a newly matched function can cross the CRAP ceiling. Thanks to @​PrinceD96 for the report and the contribution.

Notes for integrators

  • The graph cache version moves twice in this release, so the first run after upgrading rebuilds import resolution instead of replaying results that predate the two resolution fixes.
  • docs/backwards-compatibility.md records the exit-code and tsconfig-scope changes under "Notable behavior changes within v3".

Full Changelog: fallow-rs/fallow@v3.19.0...v3.20.0

v3.19.0: one-pass agent install, MCP resources, similar-code discovery

Highlights

One command to wire your coding agents. npx fallow agent install detects Claude Code, Codex, and Cursor from the project, your home directory, and the session, then writes what each one reads: an AGENTS.md task map (plus an @AGENTS.md import in CLAUDE.md), the fallow skill, the MCP server registration, and the commit/push gate. Every write carries a marker, re-running is byte-stable, --dry-run shows the plan, and fallow agent status / fallow agent uninstall cover the same surfaces. Nothing is fabricated when no harness is detected, hand-written MCP entries are never replaced or removed without --force, and --force on an unparsable config file saves the old bytes next to it first. fallow setup-hooks is deprecated in favor of this command (it keeps working through the 3.x line with a warning).

MCP reference material as resources. fallow-mcp now serves fallow://tools, fallow://issue-types, fallow://explain plus the fallow://explain/{issue_type} template, fallow://task-matrix, and the config, plugin, and rule-pack JSON Schemas as read-only, cacheable resources. Payloads are plain documents (the schema resources are byte-identical to fallow config-schema and friends), the server version travels in each content item's _meta, and fallow schema gains a matching mcp_resources block. Fallow is also listed in the official MCP Registry.

Opt-in semantic similar-code discovery. fallow similar-code finds functions that may share intent despite different syntax, through a pinned and verified local model. It is advisory by design: explicit local setup, model provenance, a persistent vector cache, source-grounded candidate inspection, a fail-closed external verdict join, read-only MCP tools, and a Node API, with no participation in bare analysis, audit gates, SARIF, editor diagnostics, or auto-fix.

Detection and plugins

  • StyleX theme styling. defineVars, unstable_defineVarsNested, createTheme, and unstable_createThemeNested are modeled with the framework's real token shape and theme-application semantics, including same-file reads, partial overrides, empty reset themes, and namespace or default aliases.
  • size-limit is recognized. A new built-in plugin credits every declared @size-limit/* and size-limit-* package, treats size-limit as tooling, and keeps every config form it searches reachable, including a config inside a workspace package when the tool is hoisted to the monorepo root. Thanks to @​robinvdvleuten for the contribution in #2413.

Fixes

  • React Native and Expo platform families are no longer reported as duplicate exports. With the react-native or expo plugin active, dead-code folds each Metro family (UserMenu.tsx, UserMenu.ios.tsx, UserMenu.web.tsx, ...) into one representative before duplicate detection; a genuine duplicate in an unrelated file is still reported. Thanks to @​issacfriedman for the report in #2407.
  • fallow impact statusline names a newer Impact store. An older binary reading a store written by a newer fallow now prints data from newer fallow · upgrade this fallow instead of the generic data unavailable line.

Deprecated

  • fallow setup-hooks: use fallow agent install (every harness in one pass) or fallow hooks install --target agent (the gate alone). The command keeps working throughout fallow 3 with a one-line warning and is removed in the next major.

Full Changelog: fallow-rs/fallow@v3.18.0...v3.19.0

... (truncated)

Commits
  • 85d490c ci(release): initialize the pnpm store before caching on Windows
  • 5a2a685 chore: release v3.20.0
  • fe3fdd2 fix(health): match Istanbul coverage by body location and skip bodyless decla...
  • 446e3f0 docs(changelog): move the review schema 8 entries to Unreleased
  • 8d53657 fix(check): fail strict runs on findings the override path let through (#2447)
  • d877424 feat(graph): resolve Yarn Plug'n'Play projects through the PnP manifest (#2435)
  • b0585d4 fix(graph): scope a referenced tsconfig without include to its own directory ...
  • 8c3c5b7 perf(graph): cut tsconfig cache lock contention on large monorepos (#2437)
  • 6afdf4f chore(deps): bump astral-sh/setup-uv from 9.0.0 to 10.0.1 (#2430)
  • 9406571 chore(napi): sync transitive similar-code platform pins to v3.19.0
  • Additional commits viewable in compare view

Updates lint-staged from 17.3.0 to 17.4.1

Release notes

Sourced from lint-staged's releases.

v17.4.1

17.4.1

Patch Changes

  • #1840 efe5b63 - This is a version-bump-only release because the previous version 17.4.0 was not published to npmjs.com due to problems with GitHub Actions and Changesets.

17.4.0

Minor Changes

  • #1836 90ec282 - Added a new defineConfig helper for type-checking the lint-staged configuration:

    // lint-staged.config.ts
import { defineConfig } from 'lint-staged/config'
export default defineConfig({
'*.js': ['prettier --check', 'eslint'],
})

  • #1832 510a27c - Added a new flag --all to make lint-staged include all files tracked by Git, instead of only staged.

    By default lint-staged only runs tasks on files that include staged changes (hence the name). Use this flag to include all files tracked in Git version control (standard exclusions apply). Using this flag implies the --no-stash flag, disabling the automatic backup, and the --allow-empty flag so that lint-staged doesn't fail when there are no changes after running. This makes it easier to run npx lint-staged --all on a clean state, for example in CI.

Patch Changes

  • #1838 69bec99 - The behavior of the automatic backup stash has been improved when running lint-staged in multiple worktrees in parallel. You should still avoid running multiple instances of lint-staged in parallel in the same tree, because some of the Git operations are locking and might lead to data loss.

  • #1839 5e5bdd2 - Parsing of lint-staged CLI flags and Node.js API options has been rewritten to avoid inconsistent behavior between the two.

Changelog

Sourced from lint-staged's changelog.

17.4.1

Patch Changes

  • #1840 efe5b63 - This is a version-bump-only release because the previous version 17.4.0 was not published to npmjs.com due to problems with GitHub Actions and Changesets.

17.4.0

Minor Changes

  • #1836 90ec282 - Added a new defineConfig helper for type-checking the lint-staged configuration:

    // lint-staged.config.ts
import { defineConfig } from 'lint-staged/config'
export default defineConfig({
'*.js': ['prettier --check', 'eslint'],
})

  • #1832 510a27c - Added a new flag --all to make lint-staged include all files tracked by Git, instead of only staged.

    By default lint-staged only runs tasks on files that include staged changes (hence the name). Use this flag to include all files tracked in Git version control (standard exclusions apply). Using this flag implies the --no-stash flag, disabling the automatic backup, and the --allow-empty flag so that lint-staged doesn't fail when there are no changes after running. This makes it easier to run npx lint-staged --all on a clean state, for example in CI.

Patch Changes

  • #1838 69bec99 - The behavior of the automatic backup stash has been improved when running lint-staged in multiple worktrees in parallel. You should still avoid running multiple instances of lint-staged in parallel in the same tree, because some of the Git operations are locking and might lead to data loss.

  • #1839 5e5bdd2 - Parsing of lint-staged CLI flags and Node.js API options has been rewritten to avoid inconsistent behavior between the two.

Commits
  • d0c1517 Merge pull request #1841 from lint-staged/changeset-release/main
  • f061335 chore(changeset): release
  • d2721af Merge pull request #1840 from lint-staged/updates
  • efe5b63 ci: update Changesets action because it failed to publish
  • cd76ce3 build: update dependencies
  • ea195e1 Merge pull request #1837 from lint-staged/changeset-release/main
  • a6a0d61 chore(changeset): release
  • 0a09098 Merge pull request #1832 from lint-staged/add-all-flag
  • 7fd685b fix: further fix parsing options logic
  • 510a27c feat: add --all flag for including all files tracked by Git instead of just...
  • Additional commits viewable in compare view

Updates oxfmt from 0.62.0 to 0.65.0

Changelog

Sourced from oxfmt's changelog.

Changelog

All notable changes to this package will be documented in this file.

The format is based on Keep a Changelog.

[0.64.0] - 2026-08-18

🚀 Features

  • c07fe7c oxfmt: Support experimentalOperatorPosition (#25643) (leaysgur)

📚 Documentation

  • fed6681 oxfmt: Skip expanding overrides options (#25572) (leaysgur)
Commits
  • 97e99b8 release(apps): oxlint v1.80.0 && oxfmt v0.65.0 (#26045)
  • 0db127c release(apps): oxlint v1.79.0 && oxfmt v0.64.0 (#25866)
  • c07fe7c feat(oxfmt): support experimentalOperatorPosition (#25643)
  • fed6681 docs(oxfmt): skip expanding overrides options (#25572)
  • c42d639 release(apps): oxlint v1.78.0 && oxfmt v0.63.0 (#25473)
  • 00f490d refactor(oxfmt,formatter): split sortImports validation and use type enum (...
  • See full diff in compare view

Updates oxlint from 1.78.0 to 1.80.0

Release notes

Sourced from oxlint's releases.

oxlint v1.80.0 & oxfmt v0.65.0

Table of Contents

Oxlint v1.80.0

🚀 Features

  • 70c3e35 linter/typescript/no-confusing-non-null-assertion: Implement suggestion (#26012) (Mikhail Baev)

🐛 Bug Fixes

  • 17ae11c linter/oxc/double-comparisons: Handle grouped logical expressions (#26044) (camc314)
  • 8a353a7 linter/eslint/no-control-regex: Refine help message text (#25996) (Rahul Mishra)
  • 8a9bdbd estree: Include decorators in FormalParameterRest spans (#26021) (camc314)
  • 8d94cd1 linter/eslint/no-useless-rename: Preserve type modifiers (#26020) (Cameron)
  • 2cde1f6 rust: Address nightly deprecations (#25998) (Boshen)
  • 51d36d7 linter/vue: Resolve vue imports via shared import helpers (#25903) (Connor Shea)
  • 83a68d2 linter/react/no-react-children: Resolve react imports by symbol (#25901) (Connor Shea)
  • 124e196 linter: Resolve globals by reference, not by name (#25905) (Connor Shea)
  • a701bcc linter: Remove invalid React compiler doc links (#25900) (Boshen)

📚 Documentation

  • 9b7e153 linter: Set version to 1.79.0 for rules shipped in 1.79.0 (#25902) (connorshea)

Oxfmt v0.65.0

🐛 Bug Fixes

  • bf37dd5 formatter: Preserve class decorators before export when the statement is suppressed (#26034) (leaysgur)

oxlint v1.79.0 & oxfmt v0.64.0

Table of Contents

Oxlint v1.79.0

💥 BRE...

Description has been truncated

@dependabot
build(deps): bump the all group with 20 updates
747d10a 
Bumps the all group with 20 updates:

| Package | From | To |
| --- | --- | --- |
| [@browserbasehq/sdk](https://github.com/browserbase/sdk-node) | `2.16.0` | `2.19.0` |
| [@browserbasehq/stagehand](https://github.com/browserbase/stagehand/tree/HEAD/packages/sdk-ts) | `3.7.1` | `4.0.2` |
| [@commitlint/cli](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli) | `21.2.1` | `21.2.2` |
| [@commitlint/config-conventional](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/config-conventional) | `21.2.0` | `21.2.2` |
| [@dotenvx/dotenvx](https://github.com/dotenvx/dotenvx) | `2.21.0` | `2.22.0` |
| [@types/bun](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/bun) | `1.3.14` | `1.4.0` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.10` | `4.1.11` |
| [devtools-protocol](https://github.com/ChromeDevTools/devtools-protocol) | `0.0.1676105` | `0.0.1687809` |
| [fallow](https://github.com/fallow-rs/fallow) | `3.14.0` | `3.20.0` |
| [lint-staged](https://github.com/lint-staged/lint-staged) | `17.3.0` | `17.4.1` |
| [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt) | `0.62.0` | `0.65.0` |
| [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.78.0` | `1.80.0` |
| [simple-git-hooks](https://github.com/toplenboren/simple-git-hooks) | `2.13.1` | `2.14.0` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.2.1` | `8.2.2` |
| [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.5.4` |
| [alchemy](https://github.com/alchemy-run/alchemy/tree/HEAD/packages/alchemy) | `2.0.0-beta.72` | `2.0.0-beta.74` |
| [@cloudflare/vitest-pool-workers](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/vitest-pool-workers) | `0.20.3` | `0.22.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `18.19.130` | `26.4.0` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.10` | `4.1.11` |
| [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.120.0` | `4.120.1` |


Updates `@browserbasehq/sdk` from 2.16.0 to 2.19.0
- [Release notes](https://github.com/browserbase/sdk-node/releases)
- [Changelog](https://github.com/browserbase/sdk-node/blob/main/CHANGELOG.md)
- [Commits](browserbase/sdk-node@v2.16.0...v2.19.0)

Updates `@browserbasehq/stagehand` from 3.7.1 to 4.0.2
- [Release notes](https://github.com/browserbase/stagehand/releases)
- [Changelog](https://github.com/browserbase/stagehand/blob/main/CHANGELOG.md)
- [Commits](https://github.com/browserbase/stagehand/commits/@browserbasehq/stagehand@4.0.2/packages/sdk-ts)

Updates `@commitlint/cli` from 21.2.1 to 21.2.2
- [Release notes](https://github.com/conventional-changelog/commitlint/releases)
- [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/cli/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.2.2/@commitlint/cli)

Updates `@commitlint/config-conventional` from 21.2.0 to 21.2.2
- [Release notes](https://github.com/conventional-changelog/commitlint/releases)
- [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/config-conventional/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.2.2/@commitlint/config-conventional)

Updates `@dotenvx/dotenvx` from 2.21.0 to 2.22.0
- [Release notes](https://github.com/dotenvx/dotenvx/releases)
- [Changelog](https://github.com/dotenvx/dotenvx/blob/main/CHANGELOG.md)
- [Commits](dotenvx/dotenvx@v2.21.0...v2.22.0)

Updates `@types/bun` from 1.3.14 to 1.4.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/bun)

Updates `@vitest/coverage-v8` from 4.1.10 to 4.1.11
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/coverage-v8)

Updates `devtools-protocol` from 0.0.1676105 to 0.0.1687809
- [Commits](ChromeDevTools/devtools-protocol@v0.0.1676105...v0.0.1687809)

Updates `fallow` from 3.14.0 to 3.20.0
- [Release notes](https://github.com/fallow-rs/fallow/releases)
- [Changelog](https://github.com/fallow-rs/fallow/blob/main/release.toml)
- [Commits](fallow-rs/fallow@v3.14.0...v3.20.0)

Updates `lint-staged` from 17.3.0 to 17.4.1
- [Release notes](https://github.com/lint-staged/lint-staged/releases)
- [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md)
- [Commits](lint-staged/lint-staged@v17.3.0...v17.4.1)

Updates `oxfmt` from 0.62.0 to 0.65.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.65.0/npm/oxfmt)

Updates `oxlint` from 1.78.0 to 1.80.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.80.0/npm/oxlint)

Updates `simple-git-hooks` from 2.13.1 to 2.14.0
- [Release notes](https://github.com/toplenboren/simple-git-hooks/releases)
- [Changelog](https://github.com/toplenboren/simple-git-hooks/blob/master/CHANGELOG.md)
- [Commits](toplenboren/simple-git-hooks@2.13.1...2.14.0)

Updates `vite` from 8.2.1 to 8.2.2
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.2.2/packages/vite)

Updates `zod` from 4.4.3 to 4.5.4
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.4.3...v4.5.4)

Updates `alchemy` from 2.0.0-beta.72 to 2.0.0-beta.74
- [Release notes](https://github.com/alchemy-run/alchemy/releases)
- [Changelog](https://github.com/alchemy-run/alchemy/blob/main/CHANGELOG.md)
- [Commits](https://github.com/alchemy-run/alchemy/commits/v2.0.0-beta.74/packages/alchemy)

Updates `@cloudflare/vitest-pool-workers` from 0.20.3 to 0.22.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Changelog](https://github.com/cloudflare/workers-sdk/blob/@cloudflare/vitest-pool-workers@0.22.0/packages/vitest-pool-workers/CHANGELOG.md)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/@cloudflare/vitest-pool-workers@0.22.0/packages/vitest-pool-workers)

Updates `@types/node` from 18.19.130 to 26.4.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `vitest` from 4.1.10 to 4.1.11
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/vitest)

Updates `wrangler` from 4.120.0 to 4.120.1
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.120.1/packages/wrangler)

---
updated-dependencies:
- dependency-name: "@browserbasehq/sdk"
  dependency-version: 2.19.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@browserbasehq/stagehand"
  dependency-version: 4.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: "@commitlint/cli"
  dependency-version: 21.2.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: "@commitlint/config-conventional"
  dependency-version: 21.2.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: "@dotenvx/dotenvx"
  dependency-version: 2.22.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@types/bun"
  dependency-version: 1.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.1.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: devtools-protocol
  dependency-version: 0.0.1687809
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: fallow
  dependency-version: 3.20.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: lint-staged
  dependency-version: 17.4.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: oxfmt
  dependency-version: 0.65.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: oxlint
  dependency-version: 1.80.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: simple-git-hooks
  dependency-version: 2.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: vite
  dependency-version: 8.2.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: zod
  dependency-version: 4.5.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: alchemy
  dependency-version: 2.0.0-beta.74
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: "@cloudflare/vitest-pool-workers"
  dependency-version: 0.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@types/node"
  dependency-version: 26.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: vitest
  dependency-version: 4.1.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: wrangler
  dependency-version: 4.120.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants