deps: bump the dependencies group across 1 directory with 17 updates by dependabot[bot] · Pull Request #71 · OpenRouterTeam/benchmark-harness

dependabot · 2026-09-02T18:27:36Z

Bumps the dependencies group with 17 updates in the / directory:

Package	From	To
@effect/platform	`0.95.0`	`0.97.1`
@google-cloud/storage	`7.19.0`	`8.0.1`
chrono-node	`2.9.0`	`2.10.1`
csv-parse	`5.6.0`	`7.0.2`
effect	`3.20.0`	`3.22.1`
hyparquet	`1.26.1`	`1.29.2`
hyparquet-writer	`0.16.1`	`0.16.9`
modal	`0.8.0`	`0.10.0`
smol-toml	`1.6.1`	`1.8.0`
yaml	`2.8.3`	`2.9.0`
zod	`4.4.3`	`4.5.4`
@effect/tsgo	`0.31.0`	`0.38.0`
@types/bun	`1.3.14`	`1.4.0`
@types/node	`24.10.0`	`26.4.0`
oxfmt	`0.62.0`	`0.65.0`
oxlint	`1.77.0`	`1.80.0`
ultracite	`7.10.1`	`7.10.7`

Updates @effect/platform from 0.95.0 to 0.97.1

Changelog

Sourced from @effect/platform's changelog.

0.97.1

Patch Changes

#6652 e5dfd78 Thanks @IMax153! - Add an extendEnv option to Command.env for spawning commands with a clean environment.

#6774 4b03605 Thanks @tim-smart! - Reject empty, . and .. keys in file-backed key-value stores.

#6311 8a405fd Thanks @tim-smart! - update multipasta

#6756 8ee801d Thanks @tim-smart! - Fix a security issue in HTML escaping for generated Scalar and Swagger API documentation.

#6765 5859b37 Thanks @tim-smart! - Reject invalid cookie names and cookie attribute separators in domains and paths.

Updated dependencies [7ccbd9c, ab2af6d, 3cc3c6e, 3d390f2, fcabf08, 735d81b]:

effect@3.22.1

0.97.0

Patch Changes

Updated dependencies [fffdee0]:

effect@3.22.0

0.96.3

Patch Changes

#6244 99d5575 Thanks @spokodev! - Fix HttpLayerRouter.addHttpApi so two registered APIs no longer share error encoders. Previously each call's middleware was added to a shared context map and applied to every route, so a 500 response from one API was sometimes encoded against the other API's error schema. The fix scopes each API's middleware to its own endpoints (matched by method + path) and wraps each route handler directly.

Updated dependencies [307d54a, d95868a, 95c7d2e, d24511f]:

effect@3.21.5

0.96.2

Patch Changes

#6273 7e00169 Thanks @tim-smart! - Remove the content-length header before sending FetchHttpClient requests.

Updated dependencies [8222963]:

effect@3.21.4

0.96.1

Patch Changes

#6147 518d0e3 Thanks @syhstanley! - Fix HttpLayerRouter.addHttpApi silently skipping API-level middleware.

#6191 c016642 Thanks @IGassmann! - Update msgpackr to 1.11.10 to fix silent decode failures in environments that block new Function() at runtime (e.g. Cloudflare Workers). The new version wraps the JIT new Function() call in a try/catch, falling back to the interpreted path when dynamic code evaluation is blocked.

... (truncated)

Commits

417e0fa Version Packages (v3) (#6466)
284b021 Fix KeyValueStore file backend docs (#6776)
4b03605 Harden file-backed key-value store keys on v3 (#6774)
5859b37 Harden v3 cookie attribute validation (#6765)
8ee801d Fix HTML escaping in API docs (#6756)
e5dfd78 Add extendEnv option to Command.env (#6652)
8a405fd update multipasta (#6311)
e670e0f Version Packages (#6323)
11e0169 Version Packages (#6282)
99d5575 fix(platform): scope HttpLayerRouter.addHttpApi error encoder to its own rout...
Additional commits viewable in compare view

Updates @google-cloud/storage from 7.19.0 to 8.0.1

Release notes

Sourced from @google-cloud/storage's releases.

common: v8.0.1

8.0.1 (2026-08-10)

Bug Fixes

Upgrade all node core library dependencies to their latest node 22 version (#9084) (af8074c)

cloud-profiler: v8.0.1

8.0.1 (2026-08-12)

Bug Fixes

Ensure node 22 dependencies are up to date so they get the latest patches for core and handwritten libraries (#9116) (fad57ff)

language: v8.0.1

8.0.1 (2026-08-12)

Bug Fixes

Upgrade generated package dependencies to Node 22 version for all core, handwritten and generated dependencies (#9129) (5f01912)

speech: v8.0.1

8.0.1 (2026-08-12)

Bug Fixes

Upgrade generated package dependencies to Node 22 version for all core, handwritten and generated dependencies (#9129) (5f01912)

storage: v8.0.1

8.0.1 (2026-08-18)

Bug Fixes

Upgrade storage dependencies to corresponding Node 22 versions for core, handwritten and generated libraries (#9135) (a3d9092)

storage: v8.0.0

8.0.0 (2026-08-13)

⚠ BREAKING CHANGES

Update storage to minimum Node version of 22. (#9079)

Features

... (truncated)

Changelog

Sourced from @google-cloud/storage's changelog.

8.0.1 (2026-08-18)

Bug Fixes

Upgrade storage dependencies to corresponding Node 22 versions for core, handwritten and generated libraries (#9135) (a3d9092)

8.0.0 (2026-08-13)

⚠ BREAKING CHANGES

Update storage to minimum Node version of 22. (#9079)

Features

Update storage to minimum Node version of 22. (#9079) (5830779), refs #8985

7.22.0 (2026-08-11)

Features

storage: Add deleteSourceObjects option to combine/compose method (#8444) (43abc45)

Bug Fixes

storage: Destroy local read stream on upload write failure to prevent resource leaks (#8752) (77dab53), refs #7325

storage: Pass signingEndpoint to URLSigner in file.getSignedUrl (#8982) (b001807)

storage: Resolve Node compatibility crashes, security vulnerability, and stream hangs (#8622) (512ba79)

storage: Set application/json Content-Type for impersonated ADC requests (#8419) (292c688)

7.21.0 (2026-06-03)

Features

storage: Enable CRC32C validation by default in transfer manager (#8350) (86086a6)

Bug Fixes

deps: Remove vulnerable dependency uuid (#8120) (3ec901e)

7.20.0 (2026-05-11)

Features

... (truncated)

Commits

4ed2c5f refactor(storage): improve retry error handling on resumable upload limit exc...
77dab53 fix(storage): destroy local read stream on upload write failure to prevent re...
81612c7 docs(storage): add comprehensive JSDoc documentation to GetSignedUrlConfig in...
b001807 fix(storage): pass signingEndpoint to URLSigner in file.getSignedUrl (#8982)
fdd299c build(handwritten/storage): remove owlbot configs from storage (#8917)
5b9a26e test: fix the storage google cloud build tests (#8880)
b0d0413 Remove the scripts and the configs (#8809)
8475aa4 chore: standardize node engines semver range to >=18 across all package manif...
7d84478 test: run the storage system tests in google cloud build (#8708)
292c688 fix(storage): set application/json Content-Type for impersonated ADC requests...
Additional commits viewable in compare view

Updates chrono-node from 2.9.0 to 2.10.1

Release notes

Sourced from chrono-node's releases.

v2.10.1

New: support Italian (it) relative times, timezone offsets, and improve Italian language parsing a0ac654

fix(en): support all 2-digit years in month name little endian parser (fixes #163) f15d1a8

fix(fr): support standard month name abbreviations and accented variants (issue #293) 41ee4e8

wanasit/chrono@v2.10.0...v2.10.1

v2.10.0

Minor version changes:

New/Fix: DST resolution (to base off UTC instead of system time) by @elinathan (#650, 5b13e0a)

New/Fix: NPM package now only include dist and src (668509f) reported by @JounQin on #647

wanasit/chrono@v2.9.2...v2.10.0

v2.9.2

fix: keep casual-time meridiem in de/fr/it/fi when merged with an explicit time by @greymoth-jp in wanasit/chrono#651

fix(uk): compile forwardDate "within" pattern with the unicode flag by @greymoth-jp in wanasit/chrono#652

fix(en): fix supporting for 'YYYY MMM' (Year MonthName) format

feat(zh): support past-tense relative time expressions (e.g. "1小时前")

Full Changelog: wanasit/chrono@v2.9.1...v2.9.2

v2.9.1

New: Vietnamese (vi) support (by @nhannht)

New: Finnish (fi) support (by @kallepahajoki)

Fix: Meridiem assignment for casual time parsing (by @VergilYotov)

Fix: (en) Recognize "of" between weekday and suffix (by @jbreissinger)

Fix (it): Improve Italian time parsing regex and add tests 0c71ed0

Fix (zh): Fix Chinese time parsing including CJK boundary and AM/PM implication 67f4c11

Fix historical timezone precision loss (LMT support) 5062a94

Fix year parsing for 3000+ (Issue #636) c830360

Fix meridiem merge for casual times and add -5d midnight regression 1cbfd1b

wanasit/chrono@v2.9.0...v2.9.1

Commits

82c0e5b 2.10.1
f15d1a8 fix(en): support all 2-digit years in month name little endian parser (fixes ...
eeef954 docs(it): list Italian as fully supported in README
a0ac654 feat(it): support relative times, timezone offsets, and improve Italian langu...
41ee4e8 fix(fr): support standard month name abbreviations and accented variants (iss...
c4c2685 2.10.0
5b13e0a Merge pull request #650 from elinathan/fix/dst-system-timezone-dependence
dc63e17 build(npm): remove redundant .npmignore
668509f build(npm): whitelist dist and src directories for publishing
1ec7e23 2.9.2
Additional commits viewable in compare view

Updates csv-parse from 5.6.0 to 7.0.2

Changelog

Sourced from csv-parse's changelog.

7.0.2 (2026-08-02)

Bug Fixes

csv-parse: prototype replacement reachable via columns (#497)

Performance Improvements

csv-parse: avoid unnecessary allocation in ResizeableBuffer.toString (#495)

7.0.1 (2026-07-02)

Bug Fixes

csv-parse: ship stream cjs export (#490)

7.0.0 (2026-06-14)

⚠ WARNING

This version was published by mistake, there is no breaking changes. Also, for some reason, the associated version's changelog included many commit messages from version 6.0.0.

Features

csv-parse: delimiter discover (fix #400)

csv-parse: delimiter_auto sample

csv-parse: desactivate delimiter splitting when empty array

csv-parse: dont modify prototype in sync (see #479)

csv-parse: export CsvError and normalize_options

csv-parse: remove comment about sync parse old usage

Bug Fixes

csv-parse: align trim with ECMAScript whitespace (fix #482) (#483)

6.2.1 (2026-03-20)

Bug Fixes

csv-parse: prototype pollution with objname option (fix #479)

6.2.0 (2026-03-17)

Features

csv-parse: alig info interfaces with js api

csv-parse: info bytes_records (fix #446)

csv-parse: remove non-existing ts function declaration

csv-parse: remove ts usage of all in error type

csv-parse: returned type generic for on_record (fix #461 #464 #466) (#468)

... (truncated)

Commits

288c9c6 chore(release): publish
2ad6c07 refactor(csv-parse): rename group_columns_by_name tests
eb4d148 fix(csv-parse): prototype replacement reachable via columns (#497)
1d4ed3b perf(csv-parse): avoid unnecessary allocation in ResizeableBuffer.toString (#...
6e0d5a3 chore(release): publish
abfe4de build: latest dependencies
a5ef896 docs(csv-parse): fix changelog message from previous version
230af8e fix(csv-parse): ship stream cjs export (#490)
3d71f0b chore(release): publish
2ba4897 build: use ts nodenext
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for csv-parse since your current version.

Updates effect from 3.20.0 to 3.22.1

Changelog

Sourced from effect's changelog.

3.22.1

Patch Changes

#6443 7ccbd9c Thanks @coyaSONG! - Clarify that Context.GenericTag requires a key.

#6673 ab2af6d Thanks @tim-smart! - Fix zero-capacity Mailbox rendezvous behavior for take and takeN.

#6761 3cc3c6e Thanks @tim-smart! - Use a linear matcher when decoding template literals containing only string spans.

#6507 3d390f2 Thanks @tim-smart! - Disable unhandled error logging for fibers spawned by Effect.timeout.

#6762 fcabf08 Thanks @tim-smart! - Redact errors from wrapped config parsers and avoid JSON key path collisions.

#6669 735d81b Thanks @tim-smart! - Fix Stream.asyncPush termination with bounded dropping and sliding buffers.

3.22.0

Minor Changes

#6286 fffdee0 Thanks @effect-bot! - Add Graph.successors and Graph.predecessors, deprecate Graph.neighborsDirected, and fix graph algorithm edge cases around reversal, undirected edge queries, shortest-path weight validation, topological sort initials, and strongly connected components.

3.21.5

Patch Changes

#6302 307d54a Thanks @fubhy! - Allow cron fields like 5/15 to expand from the starting value through the field maximum.

#6303 d95868a Thanks @fubhy! - Fix Schedule.cron when the test clock is adjusted to infinity.

#6285 95c7d2e Thanks @chatman-media! - Fix Cron.next skipping earlier matching days when the upcoming day-of-month does not exist in the current month. For an expression like 0 0 1,16,31 * *, advancing from a date past the 16th selected day 31; in a month without 31 days this overflowed into the following month and landed on a later matching day (e.g. the 16th), silently skipping the 1st. Cron.next now wraps to the first matching day of the next month in that case, matching the behaviour of Cron.prev and other cron implementations.

#6305 d24511f Thanks @fubhy! - Fix cron parsing and scheduling edge cases for whitespace, Sunday 7, strict numeric tokens, explicit full day ranges, and month-constrained day-of-month / weekday matching.

3.21.4

Patch Changes

#6267 8222963 Thanks @fubhy! - Fix Graph traversal and shortest-path algorithms to traverse undirected edges independently of their stored source/target orientation.

3.21.3

Patch Changes

#6250 e2126bc Thanks @milkyskies! - Fix $match generic type parameter inference inside arms (#6249)

#6257 f7e836e Thanks @gcanti! - Emit additionalProperties: false for records with string keys and Schema.Never values.

3.21.2

... (truncated)

Commits

417e0fa Version Packages (v3) (#6466)
fcabf08 Fix Config redaction errors on v3 (#6762)
3cc3c6e Use linear matcher for string template literals (#6761)
735d81b Fix Stream.asyncPush bounded termination (#6669)
ab2af6d Fix zero-capacity Mailbox rendezvous (#6673)
3d390f2 Suppress unhandled logs from timeout fibers (#6507)
7ccbd9c Clarify GenericTag key documentation (#6443)
e670e0f Version Packages (#6323)
fffdee0 Release queue: minor (#6286)
11e0169 Version Packages (#6282)
Additional commits viewable in compare view

Updates hyparquet from 1.26.1 to 1.29.2

Changelog

Sourced from hyparquet's changelog.

[1.29.2]

Add default exports to package.json for compatibility with CJS resolvers (#174)

[1.29.1]

Defer parquetScan column planning until a column is read

[1.29.0]

Add parquetScan for lazy physical column scans (#172)

[1.28.2]

Never match null values against range filters

[1.28.1]

Fix $nin filters when comparing Date values

[1.28.0]

Support $in filters on array values (#171)

[1.27.1]

Coalesce page index fetches into fewer byte range requests

[1.27.0]

Add usePageIndex option for page-level filter pushdown (#169)

Fix filtering on null and NaN row-group matches

Fix nested child column alignment by absolute row offsets

Compare date statistics by timestamp

Fix metadata decode of unsigned and decimal bounds

Fix node file slices (should be end-exclusive)

[1.26.2]

Custom jsonFromBytes parser option

Commits

a90371f Publish v1.29.2
bed29f6 Add default exports to the package.json (#174)
4196fb2 Publish v1.29.1
0620905 Defer parquet scan column planning (#173)
eb6eb73 Publish v1.29.0
43226ac Add lazy physical parquet scans (#172)
827dedb Publish v1.28.2
39772df Never match null values against range filters
f6f674a Publish v1.28.1
afd5702 Filter with Date values
Additional commits viewable in compare view

Updates hyparquet-writer from 0.16.1 to 0.16.9

Changelog

Sourced from hyparquet-writer's changelog.

[0.16.9]

Fix INT32 DECIMAL statistics encoding

Improve built-in Snappy compression window

[0.16.8]

Accept bigint for DECIMAL values and statistics

[0.16.7]

Fix ByteWriter buffer capacity checks

Update hyparquet to 1.29.2

[0.16.6]

Keep large dictionaries when dictionary encoding wins, decoupled from pageSize

Write bounding box statistics as explicitly typed doubles

[0.16.5]

Faster delta encoding

[0.16.4]

Support byte arrays in column statistics

[0.16.3]

Fix type resolution under typescript 7

[0.16.2]

Faster delta encoding for INT32 columns

Commits

f30ace7 Publish v0.16.9
e44065e Fix INT32 DECIMAL statistics encoding (#43)
7104e0b Improve built-in Snappy compression window (#42)
60d6d3b Publish v0.16.8
6d68e39 Accept a bigint for DECIMAL values and statistics (#39)
e281d79 Reuse variant scratch writers (#41)
98036cb Publish v0.16.7
8bf25b3 Fix ByteWriter capacity checks (#40)
ef95875 Publish v0.16.6
b16dd50 Keep large dictionaries that win, decoupled from pageSize (#36)
Additional commits viewable in compare view

Updates modal from 0.8.0 to 0.10.0

Commits

e98d535 Release v0.10.0 of JS / Go SDKs (#55749)
87bab0e Hide inherited GRPCError properties and other methods on exception types (#55...
05f435e [sdk] formally deprecate old public API (#55420)
a38e62b Add reference doc links in JS and Go changelogs (#55717)
f0ca081 [JS SDK] Logging API (#49177)
8b6b0e4 [sdk] update more callsites to use private APIs instead of deprecated public ...
f5a65f5 proto for passing function through functionget (#54449)
b2a7662 [sdk] Make _Object._is_hydrated a @property decorated field (#55385)
35c5b81 client: [typescript] Add snapshot on exit for v1/v2 sandboxes (#55178)
c87f989 client: [go] Add snapshot on exit for v1/v2 sandboxes (#55181)
Additional commits viewable in compare view

Updates smol-toml from 1.6.1 to 1.8.0

Release notes

Sourced from smol-toml's releases.

v1.8.0

What's Changed

feat: stringify temporal objects by @Gouvernathor and @cyyynthia

Full Changelog: squirrelchat/smol-toml@v1.7.2...v1.8.0

v1.7.2

What's Changed

refactor: improve performance of the parser by @cyyynthia

chore: revert sourcemap publishing by @cyyynthia

Full Changelog: squirrelchat/smol-toml@v1.7.1...v1.7.2

v1.7.1

This release includes flagging internal functions as @internal to strip them from the emitted type declarations.

⚠️ Includes a fix for GHSA-7w5x-hrqm-74c2

Full Changelog: squirrelchat/smol-toml@v1.7.0...v1.7.1

v1.7.0

This version slightly changes the behaviour of stringify: integers beyond the safe range are always emitted as float numbers.

String decode logic has been rewritten, it is a bit faster now and uses a single-pass approach instead of a dual-pass approach as it did previously. The code should be a bit smaller too, though I didn't actually measure that.

The package is now published with source-maps, declaration-maps, and a copy of the original TypeScript source files. This will improve your DX if you're like me and like Ctrl+Click'ing things a lot. ;)

What's Changed

improve performance of the string decode logic by @cyyynthia

fix(stringify): emit integer-valued numbers beyond the safe-integer range as floats by @spokodev in squirrelchat/smol-toml#56

publish source-maps, declaration-maps, and original source files by @cyyynthia

miscellaneous repository maintenance tasks by @cyyynthia

New Contributors

@spokodev made their first contribution in squirrelchat/smol-toml#56

Full Changelog: squirrelchat/smol-toml@v1.6.1...v1.7.0

Commits

6d0f477 chore: bump version
97e9713 docs: mention temporal api
7a3068d perf: ubench opt for instanceof Date
7e8c09a feat: stringify temporal
19239d0 chore: bump version
5f55c3a chore: revert sourcemap publishing
5c26f1b chore: update benchmarks
92832d2 refactor: better logic orchestration in structs
2fb9ab8 refactor: ctx object instead of pointer arg + tuple returns
e6017c4 ci: use staged publish
Additional commits viewable in compare view

Updates yaml from 2.8.3 to 2.9.0

Release notes

Sourced from yaml's releases.

v2.9.0

The changes here are really only patches, but I'm releasing this as a minor version to note a small change to the documentation of parseDocument() and parseAllDocuments(): I've removed the claim that they'll "never throw".

It remains the case that practically all non-malicious inputs will be handled without emitting an error, but there is a decent chance that code paths remain where e.g. a RangeError due to call stack exhaustion can be triggered by malicious inputs. Up to now, I've considered these as security vulnerabilities, and in fact it's the only category of error for which yaml CVEs have been issued so far.

Starting from this release, I'll be considering such errors as bugs, but not vulnerabilities. I do welcome people and/or LLMs looking for them, but please report them as normal issues rather than suspected security vulnerabilities. This also applies to previously undiscovered bugs in earlier releases.

fix: Avoid calling Array.prototype.push.apply() with large source array

fix(lexer): Avoid recursive calls that may exhaust the call stack

v2.8.4

Disable alias resolution with maxAliasCount:0 (#677)

Handle invalid unicode escapes (e1a1a77)

Apply minFractionDigits only to decimal strings (#676)

Commits

ddb21b0 2.9.0
167365b docs: Clarify that not all errors can be avoided
6eca2a7 fix: Avoid calling Array.prototype.push.apply() with large source array
0543cd5 fix(lexer): Avoid recursive calls that may exhaust the call stack
ccdf743 2.8.4
f625789 fix: Disable alias resolution with maxAliasCount:0 (#677)
e1a1a77 fix: Handle invalid unicode escapes
a163ea0 style: Satify Prettier
b2a5a6c fix: Apply minFractionDigits only to decimal strings (#676)
93c951b chore: Bump JSR version to v2.8.3 (#673)
Additional commits viewable in compare view

Updates zod from 4.4.3 to 4.5.4

Release notes

Sourced from zod's releases.

v4.5.4

Commits:

84e416fbf4740527bbc8f319634f4e1b065bb42c fix(v4): stop the cycle walk from firing a default factory (#6500)

e8e206fa33ac5fe7ce20a2beb12d57b1cb3df653 4.5.4

v4.5.3

Commits:

e6b6ab347675cd2bd54b1bdbed16f98c59be82a9 docs(blog): widen the z.compile example to a 20-property schema

87d6464418582bb96fc665a01f852ca6da324ad0 fix(docs): drop the OG description when the title wraps past two lines

99fce394a026823e602b9c30d8d5d9f5f1932ce7 bench(v4): z.compile() against zod-compiler (#6499)

e3a695b6bf3f0d591ea682816e3cdaea04b0f967 docs(v4): record the email regex and container output-shape findings under Open

7e24a24288183ce02554f1ded7775d0650a7b7e6 docs(blog): drop the reading time and put a GitHub link in the navbar

eab51ff3592b2d11d863f4ee4d5452f31a3de1b6 fix(v4): emit record numeric keys as strings in toJSONSchema (#6497)

v4.5.2

Commits:

a354314ac04fdd5484aa62dd5c3a4b553211a0e4 fix(docs): keep blog posts out of the docs collection (#6484)

d378c42aff6869f0929058a7923cd775880f5c4c ci: drop canary publishing from the release workflow (#6487)

212b941791e7faae078e17645eb612824fd8f79a fix(v4): let a prototype method getter answer a bare call so vi.spyOn works (#6488)

e7576f542a7bc7ef3cc5eeec237714fd0e6b6e98 docs(blog): let the page show through the navbar in dark mode (#6489)

fedb06fafe33a66ce0b5c236ad2557e0a5a170fe fix(docs): match the blog TOC hover bar to the 2px active indicator

6c932fcb2eea6eb671710ea058ca9fdc382ada89 chore: bump devcontainer image to Node 24 (#6470)

6635d9dd367a664109de83c021995821f48efa29 docs(blog): soften the "method memoization" attribution

019ae299cc75daa132bf1acf59086a520abf6b85 fix(docs): drop ISR on the docs route so the home page hydrates

652bb438aa4c626c1cd7948c6849c4691239fca7 chore(docs): drop the scroll log from the route-change scroller

571c8e8a3d73b4305f4abfdd6977773cc12f2bf5 fix(docs): render blog tabs with the stock fumadocs tab card

9a193aa24b4efa3b315b91d4c56c8bc385b8513f 4.5.2

v4.5.1

Commits:

2e862dbf89da2835e5206a8fd3d3be61afe3cf7f ci: gate the GitHub release and JSR publish on the version being live on npm

8e03380510db36fa6fda979fc78a375fdea8021c 4.5.1

v4.5.0

Zod 4.5 is now available.
npm install zod@latest
At a glance:

https://github.com/colinhacks/zod/blob/HEAD[https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEAD.https://github.com/colinhacks/zod/blob/HEADchttps://gi...
Description has been truncated

Bumps the dependencies group with 17 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@effect/platform](https://github.com/Effect-TS/effect/tree/HEAD/packages/platform) | `0.95.0` | `0.97.1` | | [@google-cloud/storage](https://github.com/googleapis/google-cloud-node/tree/HEAD/handwritten/storage) | `7.19.0` | `8.0.1` | | [chrono-node](https://github.com/wanasit/chrono) | `2.9.0` | `2.10.1` | | [csv-parse](https://github.com/adaltas/node-csv/tree/HEAD/packages/csv-parse) | `5.6.0` | `7.0.2` | | [effect](https://github.com/Effect-TS/effect/tree/HEAD/packages/effect) | `3.20.0` | `3.22.1` | | [hyparquet](https://github.com/hyparam/hyparquet) | `1.26.1` | `1.29.2` | | [hyparquet-writer](https://github.com/hyparam/hyparquet-writer) | `0.16.1` | `0.16.9` | | [modal](https://github.com/modal-labs/modal-client) | `0.8.0` | `0.10.0` | | [smol-toml](https://github.com/squirrelchat/smol-toml) | `1.6.1` | `1.8.0` | | [yaml](https://github.com/eemeli/yaml) | `2.8.3` | `2.9.0` | | [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.5.4` | | [@effect/tsgo](https://github.com/Effect-TS/tsgo/tree/HEAD/_packages/tsgo) | `0.31.0` | `0.38.0` | | [@types/bun](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/bun) | `1.3.14` | `1.4.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.10.0` | `26.4.0` | | [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt) | `0.62.0` | `0.65.0` | | [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.77.0` | `1.80.0` | | [ultracite](https://github.com/haydenbleasel/ultracite) | `7.10.1` | `7.10.7` | Updates `@effect/platform` from 0.95.0 to 0.97.1 - [Release notes](https://github.com/Effect-TS/effect/releases) - [Changelog](https://github.com/Effect-TS/effect/blob/@effect/platform@0.97.1/packages/platform/CHANGELOG.md) - [Commits](https://github.com/Effect-TS/effect/commits/@effect/platform@0.97.1/packages/platform) Updates `@google-cloud/storage` from 7.19.0 to 8.0.1 - [Release notes](https://github.com/googleapis/google-cloud-node/releases) - [Changelog](https://github.com/googleapis/google-cloud-node/blob/main/handwritten/storage/CHANGELOG.md) - [Commits](https://github.com/googleapis/google-cloud-node/commits/common-v8.0.1/handwritten/storage) Updates `chrono-node` from 2.9.0 to 2.10.1 - [Release notes](https://github.com/wanasit/chrono/releases) - [Commits](wanasit/chrono@v2.9.0...v2.10.1) Updates `csv-parse` from 5.6.0 to 7.0.2 - [Changelog](https://github.com/adaltas/node-csv/blob/master/packages/csv-parse/CHANGELOG.md) - [Commits](https://github.com/adaltas/node-csv/commits/csv-parse@7.0.2/packages/csv-parse) Updates `effect` from 3.20.0 to 3.22.1 - [Release notes](https://github.com/Effect-TS/effect/releases) - [Changelog](https://github.com/Effect-TS/effect/blob/effect@3.22.1/packages/effect/CHANGELOG.md) - [Commits](https://github.com/Effect-TS/effect/commits/effect@3.22.1/packages/effect) Updates `hyparquet` from 1.26.1 to 1.29.2 - [Changelog](https://github.com/hyparam/hyparquet/blob/master/CHANGELOG.md) - [Commits](hyparam/hyparquet@v1.26.1...v1.29.2) Updates `hyparquet-writer` from 0.16.1 to 0.16.9 - [Changelog](https://github.com/hyparam/hyparquet-writer/blob/master/CHANGELOG.md) - [Commits](hyparam/hyparquet-writer@v0.16.1...v0.16.9) Updates `modal` from 0.8.0 to 0.10.0 - [Changelog](https://github.com/modal-labs/modal-client/blob/main/CHANGELOG_DEV.md) - [Commits](modal-labs/modal-client@go/v0.8.0...go/v0.10.0) Updates `smol-toml` from 1.6.1 to 1.8.0 - [Release notes](https://github.com/squirrelchat/smol-toml/releases) - [Commits](squirrelchat/smol-toml@v1.6.1...v1.8.0) Updates `yaml` from 2.8.3 to 2.9.0 - [Release notes](https://github.com/eemeli/yaml/releases) - [Commits](eemeli/yaml@v2.8.3...v2.9.0) Updates `zod` from 4.4.3 to 4.5.4 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.4.3...v4.5.4) Updates `@effect/tsgo` from 0.31.0 to 0.38.0 - [Release notes](https://github.com/Effect-TS/tsgo/releases) - [Changelog](https://github.com/Effect-TS/tsgo/blob/main/_packages/tsgo/CHANGELOG.md) - [Commits](https://github.com/Effect-TS/tsgo/commits/@effect/tsgo@0.38.0/_packages/tsgo) Updates `@types/bun` from 1.3.14 to 1.4.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/bun) Updates `@types/node` from 24.10.0 to 26.4.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `oxfmt` from 0.62.0 to 0.65.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.65.0/npm/oxfmt) Updates `oxlint` from 1.77.0 to 1.80.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.80.0/npm/oxlint) Updates `ultracite` from 7.10.1 to 7.10.7 - [Release notes](https://github.com/haydenbleasel/ultracite/releases) - [Commits](https://github.com/haydenbleasel/ultracite/compare/ultracite@7.10.1...ultracite@7.10.7) --- updated-dependencies: - dependency-name: "@effect/platform" dependency-version: 0.97.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@google-cloud/storage" dependency-version: 8.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: chrono-node dependency-version: 2.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: csv-parse dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: effect dependency-version: 3.22.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: hyparquet dependency-version: 1.29.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: hyparquet-writer dependency-version: 0.16.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: modal dependency-version: 0.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: smol-toml dependency-version: 1.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: yaml dependency-version: 2.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: zod dependency-version: 4.5.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@effect/tsgo" dependency-version: 0.38.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@types/bun" dependency-version: 1.4.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@types/node" dependency-version: 26.4.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dependencies - dependency-name: oxfmt dependency-version: 0.65.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: oxlint dependency-version: 1.80.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: ultracite dependency-version: 7.10.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-09-02T18:27:37Z

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

dependabot Bot requested a review from a team as a code owner September 2, 2026 18:27

Navigation Menu

Uh oh!

deps: bump the dependencies group across 1 directory with 17 updates - #71

deps: bump the dependencies group across 1 directory with 17 updates#71
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/dependencies-7a3768ec0d

dependabot Bot commented on behalf of github Sep 2, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Sep 2, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

0.97.1

Patch Changes

0.97.0

Patch Changes

0.96.3

Patch Changes

0.96.2

Patch Changes

0.96.1

Patch Changes

common: v8.0.1

8.0.1 (2026-08-10)

Bug Fixes

cloud-profiler: v8.0.1

8.0.1 (2026-08-12)

Bug Fixes

language: v8.0.1

8.0.1 (2026-08-12)

Bug Fixes

speech: v8.0.1

8.0.1 (2026-08-12)

Bug Fixes

storage: v8.0.1

8.0.1 (2026-08-18)

Bug Fixes

storage: v8.0.0

8.0.0 (2026-08-13)

⚠ BREAKING CHANGES

Features

8.0.1 (2026-08-18)

Bug Fixes

8.0.0 (2026-08-13)

⚠ BREAKING CHANGES

Features

7.22.0 (2026-08-11)

Features

Bug Fixes

7.21.0 (2026-06-03)

Features

Bug Fixes

7.20.0 (2026-05-11)

Features

v2.10.1

v2.10.0

v2.9.2

v2.9.1

7.0.2 (2026-08-02)

Bug Fixes

Performance Improvements

7.0.1 (2026-07-02)

Bug Fixes

7.0.0 (2026-06-14)

⚠ WARNING

Features

Bug Fixes

6.2.1 (2026-03-20)

Bug Fixes

6.2.0 (2026-03-17)

Features

3.22.1

Patch Changes

3.22.0

Minor Changes

3.21.5

Patch Changes

3.21.4

Patch Changes

3.21.3

Patch Changes

3.21.2

[1.29.2]

[1.29.1]

[1.29.0]

[1.28.2]

[1.28.1]

[1.28.0]

dependabot Bot commented on behalf of github Sep 2, 2026 •

edited

Loading