Skip to content

chore(deps)(deps): Bump the production-dependencies group across 1 directory with 33 updates - #51

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/v2/production-dependencies-f434b8a29f
Closed

chore(deps)(deps): Bump the production-dependencies group across 1 directory with 33 updates#51
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/v2/production-dependencies-f434b8a29f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 16, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 33 updates in the /v2 directory:

Package From To
@ai-sdk/google 4.0.65 4.0.93
@ai-sdk/groq 4.0.38 4.0.59
@ai-sdk/mistral 4.0.40 4.0.62
@ai-sdk/provider 4.0.11 4.0.26
@ai-sdk/react 4.0.98 4.0.139
@convex-dev/auth 0.0.93 0.0.96
@convex-dev/rag 0.7.6 0.7.7
@convex-dev/rate-limiter 0.3.2 0.4.1
@libsql/client 0.17.4 0.18.0
@modelcontextprotocol/server 2.1.0 2.3.1
@openrouter/ai-sdk-provider 3.0.0 3.1.0
@radix-ui/react-alert-dialog 1.1.23 1.1.24
@radix-ui/react-checkbox 1.3.11 1.3.12
@radix-ui/react-dialog 1.1.23 1.2.0
@radix-ui/react-dropdown-menu 2.1.24 2.1.25
@radix-ui/react-label 2.1.15 2.1.16
@radix-ui/react-popover 1.1.23 1.2.0
@radix-ui/react-scroll-area 1.2.18 1.3.0
@radix-ui/react-slot 1.3.3 1.4.0
@radix-ui/react-switch 1.3.7 1.3.8
@radix-ui/react-tooltip 1.2.16 1.3.0
@remotion/player 4.0.474 4.0.534
@remotion/transitions 4.0.474 4.0.534
@serwist/next 9.5.12 9.5.13
ai 7.0.95 7.0.136
driver.js 1.8.0 1.9.0
google-auth-library 11.0.2 11.2.0
posthog-js 1.428.10 1.438.4
posthog-node 5.51.8 5.55.1
react 19.2.7 19.3.0
react-dom 19.2.7 19.3.0
react-hook-form 7.87.0 7.89.0
remotion 4.0.474 4.0.534

Updates @ai-sdk/google from 4.0.65 to 4.0.93

Changelog

Sourced from @​ai-sdk/google's changelog.

4.0.93

Patch Changes

  • 5cf13d2: feat: map the top level embedding dimensions to provider settings
  • Updated dependencies [4dbc902]
    • @​ai-sdk/provider@​4.0.26
    • @​ai-sdk/provider-utils@​5.0.58

4.0.92

Patch Changes

  • Updated dependencies [9184a35]
    • @​ai-sdk/provider@​4.0.25
    • @​ai-sdk/provider-utils@​5.0.57

4.0.91

Patch Changes

  • 32ff7ad: Preserve tool errors in OpenAI Chat Completions and Responses by wrapping their payloads in an error object. Send Google tool errors and denied executions under functionResponse.response.error.

4.0.90

Patch Changes

  • Updated dependencies [d3bcad9]
    • @​ai-sdk/provider@​4.0.24
    • @​ai-sdk/provider-utils@​5.0.56

4.0.89

Patch Changes

  • fc1e19e: fix: limit jsonl rows to 64mb during batch result downloads

  • 8c0e699: feat(google): preserve file search custom metadata in retrieved context grounding chunks

  • 753f2e1: feat(google): add the 'gemini-nano-banana-2.1' model ID

  • 268225c: feat(provider): add a portable max reasoning level with native provider mappings, compatibility coercions, and budget-based fallback support.

    Compatibility notes:

    • TypeScript source compatibility: Adding max widens LanguageModelV4CallOptions['reasoning'] and the derived ReasoningLevel type. Third-party providers and consumers with exhaustive switches or Record<ReasoningLevel, ...> mappings must handle max before upgrading. Ordinary calls using existing reasoning levels remain accepted.
    • Amazon Bedrock: Existing Nova 2 calls using portable reasoning: 'xhigh' now send maxReasoningEffort: 'high' instead of the unsupported 'max', and return a compatibility warning. Anthropic and OpenAI Bedrock effort mappings retain their existing xhigh behavior. Partial Bedrock reasoning configurations continue to preserve explicit values and derive missing fields; explicit effort/budget overrides and disabled thinking no longer emit warnings for portable mappings that are not sent.
    • Fireworks: Existing portable minimal and xhigh calls keep their request mappings to low and high, respectively, and now return compatibility warnings in generation and streaming results. Portable max maps to high with the same warning behavior.

    Release classification: This remains a patch changeset under the repository's explicit release policy, which uses patch releases for both fixes and features. The TypeScript source-compatibility caveat for exhaustive consumers is disclosed above. Maintainers can override this classification with a major label if they decide to align the provider-spec addition with a future AI SDK major release.

  • Updated dependencies [fc1e19e]

  • Updated dependencies [5094ebd]

... (truncated)

Commits

Updates @ai-sdk/groq from 4.0.38 to 4.0.59

Release notes

Sourced from @​ai-sdk/groq's releases.

@​ai-sdk/provider-utils@​4.0.59

Patch Changes

  • d5e7d82: fix(provider-utils): keep case-sensitive url paths and query values
Changelog

Sourced from @​ai-sdk/groq's changelog.

4.0.59

Patch Changes

  • Updated dependencies [4dbc902]
    • @​ai-sdk/provider@​4.0.26
    • @​ai-sdk/provider-utils@​5.0.58

4.0.58

Patch Changes

  • Updated dependencies [9184a35]
    • @​ai-sdk/provider@​4.0.25
    • @​ai-sdk/provider-utils@​5.0.57

4.0.57

Patch Changes

  • Updated dependencies [d3bcad9]
    • @​ai-sdk/provider@​4.0.24
    • @​ai-sdk/provider-utils@​5.0.56

4.0.56

Patch Changes

  • 268225c: feat(provider): add a portable max reasoning level with native provider mappings, compatibility coercions, and budget-based fallback support.

    Compatibility notes:

    • TypeScript source compatibility: Adding max widens LanguageModelV4CallOptions['reasoning'] and the derived ReasoningLevel type. Third-party providers and consumers with exhaustive switches or Record<ReasoningLevel, ...> mappings must handle max before upgrading. Ordinary calls using existing reasoning levels remain accepted.
    • Amazon Bedrock: Existing Nova 2 calls using portable reasoning: 'xhigh' now send maxReasoningEffort: 'high' instead of the unsupported 'max', and return a compatibility warning. Anthropic and OpenAI Bedrock effort mappings retain their existing xhigh behavior. Partial Bedrock reasoning configurations continue to preserve explicit values and derive missing fields; explicit effort/budget overrides and disabled thinking no longer emit warnings for portable mappings that are not sent.
    • Fireworks: Existing portable minimal and xhigh calls keep their request mappings to low and high, respectively, and now return compatibility warnings in generation and streaming results. Portable max maps to high with the same warning behavior.

    Release classification: This remains a patch changeset under the repository's explicit release policy, which uses patch releases for both fixes and features. The TypeScript source-compatibility caveat for exhaustive consumers is disclosed above. Maintainers can override this classification with a major label if they decide to align the provider-spec addition with a future AI SDK major release.

  • 0af2f7c: chore: upgrade to TypeScript 6

  • Updated dependencies [fc1e19e]

  • Updated dependencies [5094ebd]

  • Updated dependencies [268225c]

  • Updated dependencies [0af2f7c]

    • @​ai-sdk/provider-utils@​5.0.55
    • @​ai-sdk/provider@​4.0.23

4.0.55

Patch Changes

... (truncated)

Commits

Updates @ai-sdk/mistral from 4.0.40 to 4.0.62

Release notes

Sourced from @​ai-sdk/mistral's releases.

@​ai-sdk/provider-utils@​4.0.60

Patch Changes

  • Updated dependencies [739e9f6]
    • @​ai-sdk/provider@​3.0.19

@​ai-sdk/provider-utils@​4.0.59

Patch Changes

  • d5e7d82: fix(provider-utils): keep case-sensitive url paths and query values
Changelog

Sourced from @​ai-sdk/mistral's changelog.

4.0.62

Patch Changes

  • 5cf13d2: feat: map the top level embedding dimensions to provider settings
  • Updated dependencies [4dbc902]
    • @​ai-sdk/provider@​4.0.26
    • @​ai-sdk/provider-utils@​5.0.58

4.0.61

Patch Changes

  • Updated dependencies [9184a35]
    • @​ai-sdk/provider@​4.0.25
    • @​ai-sdk/provider-utils@​5.0.57

4.0.60

Patch Changes

  • 1c963f2: feat(mistral): add conversations api and web search tool

4.0.59

Patch Changes

  • 9ab4373: fix(mistral): enable reasoning effort for Mistral Large 4 models
  • Updated dependencies [d3bcad9]
    • @​ai-sdk/provider@​4.0.24
    • @​ai-sdk/provider-utils@​5.0.56

4.0.58

Patch Changes

  • 268225c: feat(provider): add a portable max reasoning level with native provider mappings, compatibility coercions, and budget-based fallback support.

    Compatibility notes:

    • TypeScript source compatibility: Adding max widens LanguageModelV4CallOptions['reasoning'] and the derived ReasoningLevel type. Third-party providers and consumers with exhaustive switches or Record<ReasoningLevel, ...> mappings must handle max before upgrading. Ordinary calls using existing reasoning levels remain accepted.
    • Amazon Bedrock: Existing Nova 2 calls using portable reasoning: 'xhigh' now send maxReasoningEffort: 'high' instead of the unsupported 'max', and return a compatibility warning. Anthropic and OpenAI Bedrock effort mappings retain their existing xhigh behavior. Partial Bedrock reasoning configurations continue to preserve explicit values and derive missing fields; explicit effort/budget overrides and disabled thinking no longer emit warnings for portable mappings that are not sent.
    • Fireworks: Existing portable minimal and xhigh calls keep their request mappings to low and high, respectively, and now return compatibility warnings in generation and streaming results. Portable max maps to high with the same warning behavior.

    Release classification: This remains a patch changeset under the repository's explicit release policy, which uses patch releases for both fixes and features. The TypeScript source-compatibility caveat for exhaustive consumers is disclosed above. Maintainers can override this classification with a major label if they decide to align the provider-spec addition with a future AI SDK major release.

  • 0af2f7c: chore: upgrade to TypeScript 6

  • Updated dependencies [fc1e19e]

  • Updated dependencies [5094ebd]

  • Updated dependencies [268225c]

... (truncated)

Commits

Updates @ai-sdk/provider from 4.0.11 to 4.0.26

Changelog

Sourced from @​ai-sdk/provider's changelog.

4.0.26

Patch Changes

  • 4dbc902: feat(ai): add a top level 'dimensions' setting for embeddding functions

4.0.25

Patch Changes

  • 9184a35: Add ordered text, file, and JSON parts to experimental decision state. Support image input in OpenAI Decisions and language model adapters. Gateway retains its existing string and JSON request format and rejects files, as does TypeSafe AI.

    Arrays passed directly as state now contain decision state parts. Wrap JSON arrays in an object or a json part.

    Normalize all public state forms into an array of parts before calling decision providers. Providers receive text and JSON objects as text and json parts.

    Serialize decision file bytes as base64 in OpenTelemetry state attributes. Model-call spans record normalized state parts, while outer spans retain public state inputs.

    Preserve native JSON state in TypeSafe AI when state contains one JSON part. Label shared state in language-model decision prompts.

4.0.24

Patch Changes

  • d3bcad9: feat(provider): report decision refusals as refusal answers

4.0.23

Patch Changes

  • 268225c: feat(provider): add a portable max reasoning level with native provider mappings, compatibility coercions, and budget-based fallback support.

    Compatibility notes:

    • TypeScript source compatibility: Adding max widens LanguageModelV4CallOptions['reasoning'] and the derived ReasoningLevel type. Third-party providers and consumers with exhaustive switches or Record<ReasoningLevel, ...> mappings must handle max before upgrading. Ordinary calls using existing reasoning levels remain accepted.
    • Amazon Bedrock: Existing Nova 2 calls using portable reasoning: 'xhigh' now send maxReasoningEffort: 'high' instead of the unsupported 'max', and return a compatibility warning. Anthropic and OpenAI Bedrock effort mappings retain their existing xhigh behavior. Partial Bedrock reasoning configurations continue to preserve explicit values and derive missing fields; explicit effort/budget overrides and disabled thinking no longer emit warnings for portable mappings that are not sent.
    • Fireworks: Existing portable minimal and xhigh calls keep their request mappings to low and high, respectively, and now return compatibility warnings in generation and streaming results. Portable max maps to high with the same warning behavior.

    Release classification: This remains a patch changeset under the repository's explicit release policy, which uses patch releases for both fixes and features. The TypeScript source-compatibility caveat for exhaustive consumers is disclosed above. Maintainers can override this classification with a major label if they decide to align the provider-spec addition with a future AI SDK major release.

4.0.22

Patch Changes

  • 2959d35: feat: rename evaluate to decide

4.0.21

Patch Changes

... (truncated)

Commits

Updates @ai-sdk/react from 4.0.98 to 4.0.139

Changelog

Sourced from @​ai-sdk/react's changelog.

4.0.139

Patch Changes

  • Updated dependencies [7b5497c]
  • Updated dependencies [b5b0416]
    • ai@7.0.136
    • @​ai-sdk/mcp@​2.0.73

4.0.138

Patch Changes

  • Updated dependencies [5ddbb70]
  • Updated dependencies [7c40a09]
  • Updated dependencies [4dbc902]
  • Updated dependencies [ff18b73]
  • Updated dependencies [9be846c]
    • ai@7.0.135
    • @​ai-sdk/provider@​4.0.26
    • @​ai-sdk/mcp@​2.0.72
    • @​ai-sdk/provider-utils@​5.0.58

4.0.137

Patch Changes

  • Updated dependencies [8281ec4]
  • Updated dependencies [46c2b05]
    • ai@7.0.134

4.0.136

Patch Changes

  • Updated dependencies [9184a35]
    • ai@7.0.133
    • @​ai-sdk/provider@​4.0.25
    • @​ai-sdk/provider-utils@​5.0.57
    • @​ai-sdk/mcp@​2.0.71

4.0.135

Patch Changes

  • Updated dependencies [3ebefff]
  • Updated dependencies [6315a3d]
  • Updated dependencies [ac50548]
  • Updated dependencies [d8e4b51]
    • ai@7.0.132

... (truncated)

Commits

Updates @convex-dev/auth from 0.0.93 to 0.0.96

Changelog

Sourced from @​convex-dev/auth's changelog.

0.0.96

  • fix: check ID tables for refresh tokens and verifiers (#665)
  • fix: remove and redact some values in DEBUG logs (#598)

0.0.95

  • fix: a failed OTP/magic-link sign-in no longer consumes the verification code it rejected
  • fix: signIn called with only a code now resolves with { tokens: null } for every failure instead of rejecting for some

0.0.94

Commits

Updates @convex-dev/rag from 0.7.6 to 0.7.7

Changelog

Sourced from @​convex-dev/rag's changelog.

0.7.7

  • Updates package metadata, and bumps convex peer dependency to 1.46
  • Updates convex-helpers peer dependency to account for fixes to the paginator and stream utilities.
Commits

Updates @convex-dev/rate-limiter from 0.3.2 to 0.4.1

Changelog

Sourced from @​convex-dev/rate-limiter's changelog.

0.4.1

  • Improve type generic for test entrypoint

0.4.0

  • Add a new async mode to the Rate Limiter component that improves throughput under highly concurrent workloads. Setting applyUpdates: "asynchronously" on a limit in the RateLimiter client will cause updates to be enqueued to be processed asynchronously, and checking the limit to use a stale snapshot, providing eventual consistency instead of full transactionality.
Commits

Updates @libsql/client from 0.17.4 to 0.18.0

Commits
  • 9496c78 0.18.0
  • f336495 fix(sqlite3): settle in-flight operations when the pool is torn down
  • 1174d51 fix(sqlite3): give a client a connection pool, like the hrana clients
  • 05e3344 fix(sqlite3): keep connection handle for in-memory databases across transactions
  • See full diff in compare view

Updates @modelcontextprotocol/server from 2.1.0 to 2.3.1

Release notes

Sourced from @​modelcontextprotocol/server's releases.

@​modelcontextprotocol/server-legacy@​2.3.1

Patch Changes

  • #2952 5a18673 Thanks @​claude! - requireBearerAuth in @modelcontextprotocol/server-legacy takes the optional expectedResource that @modelcontextprotocol/server 2.3.0 and @modelcontextprotocol/sdk 1.32.0 added: the resource the token must be issued for (its audience), usually the server's URL. When it is set, a token is accepted only if the verifier reports that value in AuthInfo.resource; the two are compared as strings, ignoring a fragment and one trailing slash. A token reported for another value, or for none, is answered 401 invalid_token with the usual WWW-Authenticate challenge. When it is not set, nothing changes. The package stays frozen otherwise; this option is added so that its requireBearerAuth matches the 1.x middleware it is a copy of.

  • Updated dependencies []:

    • @​modelcontextprotocol/core@​2.3.1

@​modelcontextprotocol/server@​2.3.1

Patch Changes

  • Updated dependencies []:
    • @​modelcontextprotocol/core@​2.3.1

@​modelcontextprotocol/server-legacy@​2.3.0

Patch Changes

  • #2908 633dd3e Thanks @​claude! - The license field of the package manifests is now Apache-2.0; the LICENSE file shipped in each package carries the full terms, including the MIT text for earlier contributions. No code change.

  • Updated dependencies [633dd3e]:

    • @​modelcontextprotocol/core@​2.3.0

@​modelcontextprotocol/server@​2.3.0

Minor Changes

  • #2929 40f8f4e Thanks @​claude! - requireBearerAuth and verifyBearerToken take a new optional expectedResource, which makes them accept only tokens issued for this resource (the token's audience). Set it to the value your authorization server puts into tokens meant for this server, usually the server's URL. When it is set, a token is accepted only if the verifier reports that value in AuthInfo.resource; the two are compared as strings, ignoring a fragment and one trailing slash. A token reported for another value, or for none, is answered 401 invalid_token with the usual WWW-Authenticate challenge. When it is not set, nothing changes. To use it, pass expectedResource and have verifyAccessToken fill AuthInfo.resource, for example from the aud claim. The option is declared on a new exported type, VerifyBearerTokenOptions, which extends BearerAuthOptions; BearerAuthOptions itself is unchanged. The Express requireBearerAuth passes the option through. With Express, @modelcontextprotocol/express has to be upgraded to this release as well: 2.0.1 does not pass the option on, so nothing is compared. Its options type does not have the option, so TypeScript reports an expectedResource written in a call to the 2.0.1 requireBearerAuth as an error.

  • #2926 6d8dbc6 Thanks @​claude! - McpServer now accepts a maxToolInputElements option that limits the number of elements in tool-call arguments: the largest combined number of array elements and object members a single tools/call arguments payload may contain. It is off by default, so behavior is unchanged unless you set it. When it is set and a call exceeds it, that call is answered with an isError: true tool result that names the limit, before the input schema runs, and the server keeps serving. Set it above the largest arguments your tools legitimately accept; maxRequestBodySize remains the primary limit on request size. The value must be a number of at least 1, or Infinity for no limit; any other value is rejected at construction. The options type is exported as McpServerOptions.

  • #2918 84804c2 Thanks @​claude! - A Server or McpServer now serves one connection at a time, and a Streamable HTTP server transport without sessions (sessionIdGenerator: undefined) serves one request. An app that uses one server object, or one stateless transport, for every HTTP request fails on the second request after this upgrade. Build the server and the transport per request instead.

    What keeps working without a change:

    • createMcpHandler(buildServer) and serveStdio(buildServer), where buildServer returns a new server on every call.
    • A handler that builds a new server and a new stateless transport for each request.
    • One server and one transport per session (a transport with a sessionIdGenerator).
    • Connecting a server again after close().
    • Client.

    What fails now, how it shows, and what to change:

    • One server object with a new stateless transport per request (const server = new McpServer(...) outside the handler, await server.connect(transport) inside it): the second HTTP request the process receives fails, and so does every later one. connect() rejects with an SdkError of code ALREADY_CONNECTED. If the handler closes the transport when the response ends, requests that arrive one after the other still work and a request that overlaps another one fails. Change: move new McpServer(...) and its registrations into the handler.
    • One stateless transport for every request (a transport built once with sessionIdGenerator: undefined): the second HTTP request fails. WebStandardStreamableHTTPServerTransport.handleRequest() rejects with Stateless transport cannot be reused across requests. Create a new transport per request., and NodeStreamableHTTPServerTransport.handleRequest() answers 500. Change: build the server and the transport inside the handler and connect them there.
    • createMcpHandler(() => server) with a server built once: a request that arrives after the previous response has been read to its end still works. A request that arrives while another one is being served is answered 500 with the JSON-RPC error -32603 (Internal server error); the reason is reported only through the onerror option. Change: pass a function that builds the server, as in createMcpHandler(buildServer).
    • One server object for every session: the initialize request of the second session fails with ALREADY_CONNECTED. Change: build a server per session.

    What the caller sees when connect() or handleRequest() rejects depends on the host. Express 5, Fastify and Hono answer 500. A plain node:http listener without its own error handling gets an unhandled rejection, which ends the process.

    The README examples of @modelcontextprotocol/express, @modelcontextprotocol/fastify, @modelcontextprotocol/hono and @modelcontextprotocol/node, and the handler examples in the JSDoc of WebStandardStreamableHTTPServerTransport and NodeStreamableHTTPServerTransport, now build a server and a transport per request.

  • #2907 e55f9ac Thanks @​claude! - allowedOrigins and validateOriginHeader accept lowercase entries of the form <scheme>://*, such as moz-extension://* or chrome-extension://*, which admit every origin of that scheme. This lets a server admit MCP clients that run as a browser extension when the extension ID cannot be listed, as on Firefox, where it differs on every install. http://* and https://* are not honoured, and the defaults are unchanged.

... (truncated)

Commits
  • fcef852 Version Packages (#2953)
  • e8b7f05 docs: one opening note in the server and client package READMEs (#2955)
  • 5a18673 feat(server-legacy): add expectedResource to requireBearerAuth (#2952)
  • 3ab61c6 docs: update the README banners (#2940)
  • 8aabbdc test(e2e): expect SdkHttpError after a second 401 from onUnauthorized (#2936)
  • 33fecfb test(e2e): cover tools/call without arguments (#2933)
  • 818f782 docs: state the principles in CLAUDE.md and shorten REVIEW.md (#2938)
  • a202a36 Version Packages (#2896)
  • 2d731fa fix(client): refresh again when an SSE retry failed for a reason other than 4...
  • b6e5c55 test(e2e): cover prompts/get without arguments for prompts with a schema (#2928)
  • Additional commits viewable in compare view

Updates @openrouter/ai-sdk-provider from 3.0.0 to 3.1.0

Release notes

Sourced from @​openrouter/ai-sdk-provider's releases.

3.1.0

What's Changed

New Contributors

Full Changelog: OpenRouterTeam/ai-sdk-provider@3.0.0...3.1.0

Changelog

Sourced from @​openrouter/ai-sdk-provider's changelog.

3.1.0

Minor Changes

  • #562 4020201 Thanks @​robert-j-y! - Add openrouter.evaluationModel() backed by the OpenRouter Decisions API (/api/alpha/decisions), so experimental_evaluate from ai@7.0.103+ runs boolean, choice, and score questions through OpenRouter. Probabilities are mapped onto the AI SDK answer shapes with the API's two-decimal rounding declared on the result, and per-answer confidence, score legends, and cost are exposed under providerMetadata.openrouter. Model settings accept user, provider, session_id, trace, and extraBody; call-level providerOptions.openrouter is validated and merged into the request body without being able to override model, state, or questions. A new decisionsBaseURL provider setting configures the Decisions endpoint for proxies whose baseURL does not end in /v1. The ai peer dependency range is unchanged; only evaluationModel() requires ai@7.0.103+.

Patch Changes

Commits

Updates @radix-ui/react-alert-dialog from 1.1.23 to 1.1.24

Changelog

Sourced from @​radix-ui/react-alert-dialog's changelog.

1.1.24

  • Updated dependencies: Description has been truncated

@dependabot
chore(deps)(deps): Bump the production-dependencies group across 1 di…
01e99b4 
…rectory with 33 updates

Bumps the production-dependencies group with 33 updates in the /v2 directory:

| Package | From | To |
| --- | --- | --- |
| [@ai-sdk/google](https://github.com/vercel/ai/tree/HEAD/packages/google) | `4.0.65` | `4.0.93` |
| [@ai-sdk/groq](https://github.com/vercel/ai/tree/HEAD/packages/groq) | `4.0.38` | `4.0.59` |
| [@ai-sdk/mistral](https://github.com/vercel/ai/tree/HEAD/packages/mistral) | `4.0.40` | `4.0.62` |
| [@ai-sdk/provider](https://github.com/vercel/ai/tree/HEAD/packages/provider) | `4.0.11` | `4.0.26` |
| [@ai-sdk/react](https://github.com/vercel/ai/tree/HEAD/packages/react) | `4.0.98` | `4.0.139` |
| [@convex-dev/auth](https://github.com/get-convex/convex-auth) | `0.0.93` | `0.0.96` |
| [@convex-dev/rag](https://github.com/get-convex/rag) | `0.7.6` | `0.7.7` |
| [@convex-dev/rate-limiter](https://github.com/get-convex/rate-limiter) | `0.3.2` | `0.4.1` |
| [@libsql/client](https://github.com/tursodatabase/libsql-client-ts/tree/HEAD/packages/libsql-client) | `0.17.4` | `0.18.0` |
| [@modelcontextprotocol/server](https://github.com/modelcontextprotocol/typescript-sdk) | `2.1.0` | `2.3.1` |
| [@openrouter/ai-sdk-provider](https://github.com/OpenRouterTeam/ai-sdk-provider) | `3.0.0` | `3.1.0` |
| [@radix-ui/react-alert-dialog](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/alert-dialog) | `1.1.23` | `1.1.24` |
| [@radix-ui/react-checkbox](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/checkbox) | `1.3.11` | `1.3.12` |
| [@radix-ui/react-dialog](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dialog) | `1.1.23` | `1.2.0` |
| [@radix-ui/react-dropdown-menu](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dropdown-menu) | `2.1.24` | `2.1.25` |
| [@radix-ui/react-label](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/label) | `2.1.15` | `2.1.16` |
| [@radix-ui/react-popover](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/popover) | `1.1.23` | `1.2.0` |
| [@radix-ui/react-scroll-area](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/scroll-area) | `1.2.18` | `1.3.0` |
| [@radix-ui/react-slot](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/slot) | `1.3.3` | `1.4.0` |
| [@radix-ui/react-switch](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/switch) | `1.3.7` | `1.3.8` |
| [@radix-ui/react-tooltip](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/tooltip) | `1.2.16` | `1.3.0` |
| [@remotion/player](https://github.com/remotion-dev/remotion) | `4.0.474` | `4.0.534` |
| [@remotion/transitions](https://github.com/remotion-dev/remotion) | `4.0.474` | `4.0.534` |
| [@serwist/next](https://github.com/serwist/serwist) | `9.5.12` | `9.5.13` |
| [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `7.0.95` | `7.0.136` |
| [driver.js](https://github.com/nilbuild/driver.js/tree/HEAD/packages/driver) | `1.8.0` | `1.9.0` |
| [google-auth-library](https://github.com/googleapis/google-cloud-node/tree/HEAD/core/packages/google-auth-library-nodejs) | `11.0.2` | `11.2.0` |
| [posthog-js](https://github.com/PostHog/posthog-js) | `1.428.10` | `1.438.4` |
| [posthog-node](https://github.com/PostHog/posthog-js/tree/HEAD/packages/node) | `5.51.8` | `5.55.1` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.3.0` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.3.0` |
| [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.87.0` | `7.89.0` |
| [remotion](https://github.com/remotion-dev/remotion) | `4.0.474` | `4.0.534` |



Updates `@ai-sdk/google` from 4.0.65 to 4.0.93
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/google/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/google@4.0.93/packages/google)

Updates `@ai-sdk/groq` from 4.0.38 to 4.0.59
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/groq/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/groq@4.0.59/packages/groq)

Updates `@ai-sdk/mistral` from 4.0.40 to 4.0.62
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/mistral/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/mistral@4.0.62/packages/mistral)

Updates `@ai-sdk/provider` from 4.0.11 to 4.0.26
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/provider/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/provider@4.0.26/packages/provider)

Updates `@ai-sdk/react` from 4.0.98 to 4.0.139
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/react@4.0.139/packages/react)

Updates `@convex-dev/auth` from 0.0.93 to 0.0.96
- [Changelog](https://github.com/convex/convex-auth/blob/main/CHANGELOG.md)
- [Commits](convex/convex-auth@v0.0.93...v0.0.96)

Updates `@convex-dev/rag` from 0.7.6 to 0.7.7
- [Changelog](https://github.com/convex/rag/blob/main/CHANGELOG.md)
- [Commits](convex/rag@v0.7.6...v0.7.7)

Updates `@convex-dev/rate-limiter` from 0.3.2 to 0.4.1
- [Changelog](https://github.com/convex/rate-limiter/blob/main/CHANGELOG.md)
- [Commits](convex/rate-limiter@v0.3.2...v0.4.1)

Updates `@libsql/client` from 0.17.4 to 0.18.0
- [Release notes](https://github.com/tursodatabase/libsql-client-ts/releases)
- [Changelog](https://github.com/tursodatabase/libsql-client-ts/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tursodatabase/libsql-client-ts/commits/v0.18.0/packages/libsql-client)

Updates `@modelcontextprotocol/server` from 2.1.0 to 2.3.1
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](https://github.com/modelcontextprotocol/typescript-sdk/compare/@modelcontextprotocol/server@2.1.0...@modelcontextprotocol/server@2.3.1)

Updates `@openrouter/ai-sdk-provider` from 3.0.0 to 3.1.0
- [Release notes](https://github.com/OpenRouterTeam/ai-sdk-provider/releases)
- [Changelog](https://github.com/OpenRouterTeam/ai-sdk-provider/blob/main/CHANGELOG.md)
- [Commits](OpenRouterTeam/ai-sdk-provider@3.0.0...3.1.0)

Updates `@radix-ui/react-alert-dialog` from 1.1.23 to 1.1.24
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/alert-dialog/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/alert-dialog)

Updates `@radix-ui/react-checkbox` from 1.3.11 to 1.3.12
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/checkbox/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/checkbox)

Updates `@radix-ui/react-dialog` from 1.1.23 to 1.2.0
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dialog/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dialog)

Updates `@radix-ui/react-dropdown-menu` from 2.1.24 to 2.1.25
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dropdown-menu/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dropdown-menu)

Updates `@radix-ui/react-label` from 2.1.15 to 2.1.16
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/label/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/label)

Updates `@radix-ui/react-popover` from 1.1.23 to 1.2.0
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/popover/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/popover)

Updates `@radix-ui/react-scroll-area` from 1.2.18 to 1.3.0
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/scroll-area/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/scroll-area)

Updates `@radix-ui/react-slot` from 1.3.3 to 1.4.0
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/slot/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/slot)

Updates `@radix-ui/react-switch` from 1.3.7 to 1.3.8
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/switch/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/switch)

Updates `@radix-ui/react-tooltip` from 1.2.16 to 1.3.0
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/tooltip/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/tooltip)

Updates `@remotion/player` from 4.0.474 to 4.0.534
- [Release notes](https://github.com/remotion-dev/remotion/releases)
- [Commits](remotion-dev/remotion@v4.0.474...v4.0.534)

Updates `@remotion/transitions` from 4.0.474 to 4.0.534
- [Release notes](https://github.com/remotion-dev/remotion/releases)
- [Commits](remotion-dev/remotion@v4.0.474...v4.0.534)

Updates `@serwist/next` from 9.5.12 to 9.5.13
- [Release notes](https://github.com/serwist/serwist/releases)
- [Commits](https://github.com/serwist/serwist/commits)

Updates `ai` from 7.0.95 to 7.0.136
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@7.0.136/packages/ai)

Updates `driver.js` from 1.8.0 to 1.9.0
- [Release notes](https://github.com/nilbuild/driver.js/releases)
- [Commits](https://github.com/nilbuild/driver.js/commits/1.9.0/packages/driver)

Updates `google-auth-library` from 11.0.2 to 11.2.0
- [Release notes](https://github.com/googleapis/google-cloud-node/releases)
- [Changelog](https://github.com/googleapis/google-cloud-node/blob/main/core/packages/google-auth-library-nodejs/CHANGELOG.md)
- [Commits](https://github.com/googleapis/google-cloud-node/commits/google-auth-library-v11.2.0/core/packages/google-auth-library-nodejs)

Updates `posthog-js` from 1.428.10 to 1.438.4
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/compare/posthog-js@1.428.10...posthog-js@1.438.4)

Updates `posthog-node` from 5.51.8 to 5.55.1
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/packages/node/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/commits/posthog-node@5.55.1/packages/node)

Updates `react` from 19.2.7 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react)

Updates `react-dom` from 19.2.7 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom)

Updates `react-hook-form` from 7.87.0 to 7.89.0
- [Release notes](https://github.com/react-hook-form/react-hook-form/releases)
- [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md)
- [Commits](react-hook-form/react-hook-form@v7.87.0...v7.89.0)

Updates `remotion` from 4.0.474 to 4.0.534
- [Release notes](https://github.com/remotion-dev/remotion/releases)
- [Commits](remotion-dev/remotion@v4.0.474...v4.0.534)

---
updated-dependencies:
- dependency-name: "@ai-sdk/google"
  dependency-version: 4.0.93
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@ai-sdk/groq"
  dependency-version: 4.0.59
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@ai-sdk/mistral"
  dependency-version: 4.0.62
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@ai-sdk/provider"
  dependency-version: 4.0.26
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@ai-sdk/react"
  dependency-version: 4.0.139
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@convex-dev/auth"
  dependency-version: 0.0.96
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@convex-dev/rag"
  dependency-version: 0.7.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@convex-dev/rate-limiter"
  dependency-version: 0.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@libsql/client"
  dependency-version: 0.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@modelcontextprotocol/server"
  dependency-version: 2.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@openrouter/ai-sdk-provider"
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@radix-ui/react-alert-dialog"
  dependency-version: 1.1.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@radix-ui/react-checkbox"
  dependency-version: 1.3.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@radix-ui/react-dialog"
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@radix-ui/react-dropdown-menu"
  dependency-version: 2.1.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@radix-ui/react-label"
  dependency-version: 2.1.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@radix-ui/react-popover"
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@radix-ui/react-scroll-area"
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@radix-ui/react-slot"
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@radix-ui/react-switch"
  dependency-version: 1.3.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@radix-ui/react-tooltip"
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@remotion/player"
  dependency-version: 4.0.534
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@remotion/transitions"
  dependency-version: 4.0.534
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@serwist/next"
  dependency-version: 9.5.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: ai
  dependency-version: 7.0.136
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: driver.js
  dependency-version: 1.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: google-auth-library
  dependency-version: 11.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: posthog-js
  dependency-version: 1.438.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: posthog-node
  dependency-version: 5.55.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: react
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: react-dom
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: react-hook-form
  dependency-version: 7.89.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: remotion
  dependency-version: 4.0.534
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Dependency updates opened by Dependabot label Oct 16, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 20, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 20, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/v2/production-dependencies-f434b8a29f branch October 20, 2026 09:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Dependency updates opened by Dependabot

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants