chore(deps): bump the minor-and-patch group across 1 directory with 17 updates

[dependabot]

Bumps the minor-and-patch group with 17 updates in the / directory:

Package	From	To
@ai-sdk/provider-utils	5.0.28	5.0.30
@astryxdesign/cli	0.4.5	0.5.0
@biomejs/biome	2.5.9	2.5.10
@types/node	26.2.0	26.3.0
@ai-sdk/anthropic	4.0.40	4.0.42
@ai-sdk/code-mode	1.0.27	1.0.36
@ai-sdk/cohere	4.0.28	4.0.30
@ai-sdk/google	4.0.47	4.0.51
@ai-sdk/open-responses	2.0.29	2.0.31
@ai-sdk/openai	4.0.44	4.0.47
@ai-sdk/openai-compatible	3.0.32	3.0.37
ai	7.0.70	7.0.79
@earendil-works/pi-tui	0.84.2	0.84.3
lucide-react	1.33.0	1.34.0
mermaid	11.17.0	11.17.1
@types/react-dom	19.2.4	19.2.5
@jackwener/opencli	1.8.6	1.8.7

Updates @ai-sdk/provider-utils from 5.0.28 to 5.0.30

Changelog

Sourced from @​ai-sdk/provider-utils's changelog.

5.0.30

Patch Changes

• Updated dependencies [591d25b]
  • @​ai-sdk/provider@​4.0.8

5.0.29

Patch Changes

• b74971f: Preserve schema-valued additional properties when converting Zod 4 schemas.

Commits

• 3d3afac Version Packages (#19362)
• ed857f5 Version Packages (#19296)
• b74971f fix: Zod 4 record and catchall value schemas being erased during JSON Schema ...
• See full diff in compare view

Updates @astryxdesign/cli from 0.4.5 to 0.5.0

Release notes

Sourced from @​astryxdesign/cli's releases.

v0.5.0

Astryx 0.5.0 — all @astryxdesign/* packages ship at this version.

npx astryx upgrade --apply

@​astryxdesign/core

Breaking Changes

• Banner: the collapse axis moves onto one collapsible prop, and content can opt out of collapsing (#5255) Banner inferred its disclosure from its content: any children got a chevron in the header and were hidden until it was pressed. There was no way to show content without a toggle — the case a banner most often wants, a list of the three fields that failed validation — and defaultIsExpanded was the only knob, with no controlled mode.

  The whole axis is now one boolean | CollapsibleConfig prop, following the boolean-or-config convention SideNav.collapsible set, and backed by the shared useCollapsible hook rather than Banner's own state:

  <Banner status="error" title="3 fields need attention">…</Banner>  // unchanged: collapsible, starts closed
  <Banner collapsible={false}>…</Banner>                             // new: always visible, no toggle
  <Banner collapsible={{defaultIsOpen: true}}>…</Banner>             // replaces defaultIsExpanded
  <Banner collapsible={{isOpen, onOpenChange}}>…</Banner>            // new: controlled

  The default is unchanged — a banner that never mentioned defaultIsExpanded behaves exactly as it did. The breaking part is the prop itself: defaultIsExpanded is removed in favour of the config, which is a type error at every JSX call site that names it.

  Codemod: npx astryx upgrade --codemod banner-collapsible-content

  It rewrites defaultIsExpanded to collapsible={{defaultIsOpen: true}} and drops defaultIsExpanded={false}, which is now the default. Banners that never set the prop are left alone.

  One case the codemod and the compiler both miss: a spread. defaultIsExpanded inside a props object is out of the transform's scope. A props object in a typed position still fails to compile — but an inferred one that is spread, <Banner {...args} />, does not, because TypeScript does not excess-property-check a spread. The prop then falls through to the DOM and the banner quietly starts collapsed. Grep for defaultIsExpanded after running the codemod and migrate any spread sites by hand.

• Overlays share one dismissal stack, so a single Escape dismisses exactly one layer. Every overlay used to own its own Escape listener, which meant one press could close a popover and the Dialog hosting it, or a modal and the modal it was opened from. useLayerDismissal replaces that with a single stack: the stack owns one listener, routes each press to the top-most layer, and suppresses the browser's own close-watcher so nothing dismisses twice. A layer declares what it does with a press via escapeBehavior — close (default) or block, for a required Dialog that must swallow the press without closing so nothing behind it dismisses either. Fixes a Tooltip inside a Dialog closing the Dialog rather than the tip, and a HoverCard trigger swallowing Escape whenever it merely had focus. Dismissals the browser starts on its own — the Android back gesture, the platform close watcher — still close a Dialog, and follow the same top-most rule. An Escape that cancels an in-progress IME composition dismisses nothing: the stack claims that press so the browser raises no close request of its own, and a close request that arrives mid-composition anyway is declined, so a CJK user backing out of a half-formed character no longer loses the layer and everything typed into it. One behavior change worth knowing about if you listen for Escape yourself: the stack claims a press with preventDefault() but deliberately leaves propagation alone, so a keydown listener on window now sees an Escape that a focus-trapped layer used to stop — with defaultPrevented already true, which is how to tell the stack has acted on it. Top-most is resolved from React-tree nesting (which survives portals) rather than DOM containment alone. A layer's place in that order is keyed to the layer's identity rather than to each registration, so a prop change that re-registers it — a Dialog whose purpose flips while it is open — never promotes it above the layers opened over it. Controlled layers follow their control state: a controlled Tooltip or HoverCard stays on the stack and takes the press like any other layer, but answers it by calling onOpenChange(false) rather than hiding itself — whether it actually closes is the caller's update to make, exactly as it has always been for Dialog (#4881).

New Components

• Allow MultiSelector count labels to be customized (#4032)

• MultiSelector: rename the unreleased formatTriggerCount prop to formatValue and widen it to the whole trigger line. It now receives the selected items ({value, label}[], count available as .length) and formats the trigger for triggerDisplay="count" and "labels"; "badges" renders elements, so it is not used there. formatValue matches NumberInput and Slider, so the same idea has one name across the system. Defaults are unchanged when the prop is absent (#5377).

• Promote Stepper and Step from the canary-only Lab package to Core. The stable package now ships their existing horizontal/vertical layouts, separated and on-track indicators, semantic status, density, and non-linear navigation, plus Core documentation and rendered examples. The default aria-label is now localized. Advancing one step now animates the connector. Every connector the four layouts draw — the separated bars and the on-track segments alike — grows its accent fill out of the segment's leading edge instead of swapping a background color, so moving forward reads as progress travelling the track. That one gesture is the only thing that animates: going back, jumping forward by more than one step, and mounting mid-flow all apply at once, as does any change under prefers-reduced-motion. Retreats are deliberately instant — run in reverse the same transition ends on a shrinking stub of accent, and a remnant still on the track reads as unfinished where the identical curve growing forward reads as arrived — and multi-step jumps are instant because a jump is a navigation rather than a progression, so sweeping a front across the crossed segments only makes the user sit out a journey they asked to skip. Where one span is drawn by several segments (the on-track layouts split a span between two steps, three when a content slot sits between them) the segments take abutting slices of the span's time and run linearly, so the fill reads as one line growing at a constant speed rather than pieces lighting in turn.

  Five visual fixes land with the promotion. Horizontal steps now divide the track evenly instead of sizing to their own labels, so every progress segment is the same width regardless of how long a step is named. Number indicators shrink from 20px to 16px to match the check, ring, and custom-icon indicators, so a step swapping its number for a check as it completes no longer nudges the label beside it. A step description now occupies a 16px box rather than a 24px one — it previously inherited the page's line box instead of applying its own leading, which opened an 8px gap under the label. A step's content slot now starts flush with the label above it at every density: the slot renders outside the density-padded label area, so it was hanging one pad short of it. And a vertical on-track step carrying content keeps its connector unbroken — the content renders below the row that draws the line, so the track used to split open around any step with content (#5201).

New Features

• AspectRatio: emit ratio as a class-level declaration instead of a hard inline style, so the ratio can be overridden responsively: StyleX consumers pass an aspect-ratio rule via xstyle (including under @media/@container conditions), and plain-CSS/Tailwind consumers override aspect-ratio from their own unlayered rules, which beat the astryx-base cascade layer regardless of specificity. The mixed-gallery template's hero now switches 3:1 to 3:2 when the grid stacks with a one-line override on a single element, replacing the duplicated hero markup the fixed inline ratio previously forced (#3883, closes #2798)
• ChatMessageList: add an align prop for top-aligned message lists (#3933, closes #2572).
• DateTimeInput: new timeOptionInterval prop adds a dropdown of preset times to the time field, at a cadence of 5 | 10 | 15 | 30 | 60 minutes (60 gives the 12 AM - 11 PM list). The field becomes an APG combobox over a listbox: click or Alt+ArrowDown opens it, ArrowUp/ArrowDown move the active option, Enter picks, Escape closes, and typing moves the highlight to the closest option without filtering the list. min/max trim the options on the boundary date. Style the popup through the date-time-input-time-listbox and date-time-input-time-option theme targets. Opt-in and additive: with timeOptionInterval omitted the time field keeps exactly its current behavior and gains no combobox semantics, so existing getByRole('combobox') queries still resolve to the date input. With the list closed the arrow keys keep stepping by timeIncrement (#4837).
• Markdown: opt-in source ranges on parsed blocks

... (truncated)

Changelog

Sourced from @​astryxdesign/cli's changelog.

0.5.0

Breaking Changes

• Banner: the collapse axis moves onto one collapsible prop, and content can opt out of collapsing (#5255) Banner inferred its disclosure from its content: any children got a chevron in the header and were hidden until it was pressed. There was no way to show content without a toggle — the case a banner most often wants, a list of the three fields that failed validation — and defaultIsExpanded was the only knob, with no controlled mode.

  The whole axis is now one boolean | CollapsibleConfig prop, following the boolean-or-config convention SideNav.collapsible set, and backed by the shared useCollapsible hook rather than Banner's own state:

  <Banner status="error" title="3 fields need attention">…</Banner>  // unchanged: collapsible, starts closed
  <Banner collapsible={false}>…</Banner>                             // new: always visible, no toggle
  <Banner collapsible={{defaultIsOpen: true}}>…</Banner>             // replaces defaultIsExpanded
  <Banner collapsible={{isOpen, onOpenChange}}>…</Banner>            // new: controlled

  The default is unchanged — a banner that never mentioned defaultIsExpanded behaves exactly as it did. The breaking part is the prop itself: defaultIsExpanded is removed in favour of the config, which is a type error at every JSX call site that names it.

  Codemod: npx astryx upgrade --codemod banner-collapsible-content

  It rewrites defaultIsExpanded to collapsible={{defaultIsOpen: true}} and drops defaultIsExpanded={false}, which is now the default. Banners that never set the prop are left alone.

  One case the codemod and the compiler both miss: a spread. defaultIsExpanded inside a props object is out of the transform's scope. A props object in a typed position still fails to compile — but an inferred one that is spread, <Banner {...args} />, does not, because TypeScript does not excess-property-check a spread. The prop then falls through to the DOM and the banner quietly starts collapsed. Grep for defaultIsExpanded after running the codemod and migrate any spread sites by hand.

New Components

• Promote Stepper and Step from the canary-only Lab package to Core. The stable package now ships their existing horizontal/vertical layouts, separated and on-track indicators, semantic status, density, and non-linear navigation, plus Core documentation and rendered examples. The default aria-label is now localized. Advancing one step now animates the connector. Every connector the four layouts draw — the separated bars and the on-track segments alike — grows its accent fill out of the segment's leading edge instead of swapping a background color, so moving forward reads as progress travelling the track. That one gesture is the only thing that animates: going back, jumping forward by more than one step, and mounting mid-flow all apply at once, as does any change under prefers-reduced-motion. Retreats are deliberately instant — run in reverse the same transition ends on a shrinking stub of accent, and a remnant still on the track reads as unfinished where the identical curve growing forward reads as arrived — and multi-step jumps are instant because a jump is a navigation rather than a progression, so sweeping a front across the crossed segments only makes the user sit out a journey they asked to skip. Where one span is drawn by several segments (the on-track layouts split a span between two steps, three when a content slot sits between them) the segments take abutting slices of the span's time and run linearly, so the fill reads as one line growing at a constant speed rather than pieces lighting in turn.

  Five visual fixes land with the promotion. Horizontal steps now divide the track evenly instead of sizing to their own labels, so every progress segment is the same width regardless of how long a step is named. Number indicators shrink from 20px to 16px to match the check, ring, and custom-icon indicators, so a step swapping its number for a check as it completes no longer nudges the label beside it. A step description now occupies a 16px box rather than a 24px one — it previously inherited the page's line box instead of applying its own leading, which opened an 8px gap under the label. A step's content slot now starts flush with the label above it at every density: the slot renders outside the density-padded label area, so it was hanging one pad short of it. And a vertical on-track step carrying content keeps its connector unbroken — the content renders below the row that draws the line, so the track used to split open around any step with content (#5201).

New Features

• AspectRatio: emit ratio as a class-level declaration instead of a hard inline style, so the ratio can be overridden responsively: StyleX consumers pass an aspect-ratio rule via xstyle (including under @media/@container conditions), and plain-CSS/Tailwind consumers override aspect-ratio from their own unlayered rules, which beat the astryx-base cascade layer regardless of specificity. The mixed-gallery template's hero now switches 3:1 to 3:2 when the grid stacks with a one-line override on a single element, replacing the duplicated hero markup the fixed inline ratio previously forced (#3883, closes #2798)
• CLI: astryx theme targets lists every component theming target — the defineTheme key, the class it paints, and the props and states it accepts — for one component or the whole system, with --json for lint and audit scripts. astryx theme --help now points at component overrides instead of reading as a build-tool menu. The listing and theme build's override validation share one enumeration of the component docs, so neither can drift from the components (#5115).

Fixes

• neutral theme: darken the light-mode error red from #e33f4a to #c9303a so the filled Badge variant="error" label clears WCAG 2.1 AA. White on #e33f4a is 4.14:1 and the badge label is 12px/weight 500, so the 4.5:1 normal-text threshold applies rather than the 3:1 large-text allowance; #c9303a gives 5.29:1 while holding the hue (OKLCH H 21.9 -> 22.8, C 0.200 -> 0.189). StatusDot and the ProgressBar --color-error rebinding move with it — both are documented as tracking the badge fill so the dot and its badge read as one status language. Dark mode is untouched (dark text on #ff705d, 6.60:1). Adds scripts/check-badge-contrast.test.mjs, which resolves every theme's badge label/fill pair through light-dark(), var() indirection and alpha compositing, and holds all of them to 4.5:1 (#4446).

• Unified search and build now include components contributed by integrations, so a component registered through an integration is findable and buildable alongside the built-in set instead of silently missing from both (#5259).

• Table - Grouped page template: wrap the rows in TableBody The template rendered <TableRow> straight into <Table>, so the emitted DOM was <table><tr>. <table> cannot contain a row directly: the HTML parser inserts an implied <tbody> when it parses server-rendered markup and React does not when it renders on the client, so anyone who copied the template into an app as a server-rendered page inherited a hydration mismatch in their own app. Client-only the DOM is still invalid — nothing reparents the rows, so the table ends up with <tr> children and no <tbody> at all, and any CSS or query aimed at tbody silently misses.

  The rows now sit in <TableBody>, the same element the data-driven data={...} path renders, so styling, dividers, and column widths are unchanged (#5278).

Other Changes

• Public component theming vars are enumerable, and guarded against being documented but unsettable collectThemingVars joins collectThemingTargets as part of the one enumeration the theming surface is read from. Two guards ride on it: a documented public var no component reads compiles to a declaration that never applies, and a var the component writes inline outranks every cascade layer, so no theme can reach it. Both had shipped; neither is visible in the generated theme CSS the jsdom suites assert on (#5409).

... (truncated)

Commits

• ea888ef release: v0.5.0 (#5435)
• b6c0501 fix(cli): grouped-table template rendered rows outside a tbody (#5278)
• 32d41f6 cli: include integration-contributed components in unified search/build (#5259)
• 3c52d51 test(cli): guard public component theme vars against being documented but uns...
• dfdd778 feat(core)!: Banner content is visible by default; collapse moves to a `colla...
• 20bae6c docs: replace em dashes and curly quotes in CLI and component doc prose (#5354)
• 42468a9 docs(cli): document the integration manifest docs field in the README (#5331)
• 0b6762d feat(AspectRatio): responsive ratio — emit ratio as an overridable class-leve...
• 1abeec7 fix(theme-neutral): Badge error label meets AA (#4446)
• 789ef57 feat(cli): astryx theme targets — the themeable surface, enumerable in one ...
• Additional commits viewable in compare view

Updates @biomejs/biome from 2.5.9 to 2.5.10

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.10

2.5.10

Patch Changes

• #11403 8f7786f Thanks @​Princesseuh! - Fixed Astro rejecting JavaScript comments between attributes.

  <div /* block comment */ class="something"></div>
  <Component /* c */ client:load />

• #11403 8f7786f Thanks @​Princesseuh! - Fixed a bare < in Astro text being treated as the start of a tag, such as <p>5 < 6 and 7 > 6</p>. As in HTML, a < that cannot open a tag is text and needs no escaping.

• #11438 3133ffa Thanks @​Princesseuh! - Fixed #8294: an Astro expression holding only a comment is no longer reported as a parse error, which also stopped the whole file from being formatted.

  <div>{/* a note */}</div>
  <div class={/* a note */}>x</div>

• #11403 8f7786f Thanks @​Princesseuh! - Fixed #9165: an empty Astro expression such as <div>{}</div> no longer fails to parse. Astro renders {} as nothing.

• #11403 8f7786f Thanks @​Princesseuh! - Fixed Astro expressions containing a comment failing to parse.

  <div>{/* block comment */ x}</div>
  <div>{/* only a comment */}</div>

• #11403 8f7786f Thanks @​Princesseuh! - Added support for Astro's fragment shorthand.

  <>
    <p>a</p>
  </>

• #11403 8f7786f Thanks @​Princesseuh! - Fixed an Astro frontmatter block being cut short by a closing tag inside a string or comment.

  ---
  const a = "</script>";
  // </script> in a comment
  ---

• #11403 8f7786f Thanks @​Princesseuh! - Fixed --- being read as an Astro frontmatter fence when markup precedes it. Astro only recognizes frontmatter at the very start of a file, so a file opening with a comment now has no frontmatter, and its --- lines are content.

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.10

Patch Changes

• #11403 8f7786f Thanks @​Princesseuh! - Fixed Astro rejecting JavaScript comments between attributes.

  <div /* block comment */ class="something"></div>
  <Component /* c */ client:load />

• #11403 8f7786f Thanks @​Princesseuh! - Fixed a bare < in Astro text being treated as the start of a tag, such as <p>5 < 6 and 7 > 6</p>. As in HTML, a < that cannot open a tag is text and needs no escaping.

• #11438 3133ffa Thanks @​Princesseuh! - Fixed #8294: an Astro expression holding only a comment is no longer reported as a parse error, which also stopped the whole file from being formatted.

  <div>{/* a note */}</div>
  <div class={/* a note */}>x</div>

• #11403 8f7786f Thanks @​Princesseuh! - Fixed #9165: an empty Astro expression such as <div>{}</div> no longer fails to parse. Astro renders {} as nothing.

• #11403 8f7786f Thanks @​Princesseuh! - Fixed Astro expressions containing a comment failing to parse.

  <div>{/* block comment */ x}</div>
  <div>{/* only a comment */}</div>

• #11403 8f7786f Thanks @​Princesseuh! - Added support for Astro's fragment shorthand.

  <>
    <p>a</p>
  </>

• #11403 8f7786f Thanks @​Princesseuh! - Fixed an Astro frontmatter block being cut short by a closing tag inside a string or comment.

  ---
  const a = "</script>";
  // </script> in a comment
  ---

• #11403 8f7786f Thanks @​Princesseuh! - Fixed --- being read as an Astro frontmatter fence when markup precedes it. Astro only recognizes frontmatter at the very start of a file, so a file opening with a comment now has no frontmatter, and its --- lines are content.

  <!-- c -->

... (truncated)

Commits

• 05797b1 ci: release (#11450)
• 5f1ed34 chore: add CodSpeed and Cloudflare to sponsors (#11410)
• See full diff in compare view

Updates @types/node from 26.2.0 to 26.3.0

Commits

• See full diff in compare view

Updates @ai-sdk/anthropic from 4.0.40 to 4.0.42

Changelog

Sourced from @​ai-sdk/anthropic's changelog.

4.0.42

Patch Changes

• 591d25b: feat: add batch completion webhooks. experimental_startTextBatch accepts a webhookUrl, and the gateway provider registers it through the batch callbackUrl contract and exports typed async-job metadata. Direct Anthropic and OpenAI batch providers return an unsupported warning when the option is provided.
• Updated dependencies [591d25b]
  • @​ai-sdk/provider@​4.0.8
  • @​ai-sdk/provider-utils@​5.0.30

4.0.41

Patch Changes

• Updated dependencies [b74971f]
  • @​ai-sdk/provider-utils@​5.0.29

Commits

• 3d3afac Version Packages (#19362)
• 591d25b feat: batch completion webhooks via startTextBatch webhookUrl (#19305)
• ed857f5 Version Packages (#19296)
• See full diff in compare view

Updates @ai-sdk/code-mode from 1.0.27 to 1.0.36

Release notes

Sourced from @​ai-sdk/code-mode's releases.

@​ai-sdk/valibot@​1.0.35

Patch Changes

• Updated dependencies [77d33c0]
  • @​ai-sdk/provider-utils@​3.0.35

@​ai-sdk/harness-acp@​1.0.30

Patch Changes

• e0d7cfb: feat(harness): allow harness sessions to optionally authenticate from an isolated environment supplied through the auth option, and remove support for the formerly deprecated legacy auth options types
• Updated dependencies [e0d7cfb]
  • @​ai-sdk/harness@​1.0.92

@​ai-sdk/harness-grok-build@​1.0.29

Patch Changes

• e0d7cfb: feat(harness): allow harness sessions to optionally authenticate from an isolated environment supplied through the auth option, and remove support for the formerly deprecated legacy auth options types
• Updated dependencies [e0d7cfb]
  • @​ai-sdk/harness@​1.0.92
  • @​ai-sdk/harness-acp@​1.0.30

Changelog

Sourced from @​ai-sdk/code-mode's changelog.

1.0.36

Patch Changes

• Updated dependencies [b251584]
• Updated dependencies [591d25b]
• Updated dependencies [9de0baf]
  • ai@7.0.79

1.0.35

Patch Changes

• Updated dependencies [96970bb]
  • ai@7.0.78

1.0.34

Patch Changes

• ai@7.0.77

1.0.33

Patch Changes

• Updated dependencies [c6d57f3]
• Updated dependencies [677a707]
  • ai@7.0.76

1.0.32

Patch Changes

• Updated dependencies [8978ad8]
  • ai@7.0.75

1.0.31

Patch Changes

• ai@7.0.74

1.0.30

Patch Changes

• ai@7.0.73

1.0.29

... (truncated)

Commits

• 3d3afac Version Packages (#19362)
• 5b64c39 Version Packages (#19341)
• ed857f5 Version Packages (#19296)
• ab58156 Version Packages (#19266)
• 7c5162f Version Packages (#19262)
• c0fa76a Version Packages (#19235)
• eceb32a Version Packages (#19224)
• eac099e Version Packages (#19213)
• e2aa796 Version Packages (#19186)
• See full diff in compare view

Updates @ai-sdk/cohere from 4.0.28 to 4.0.30

Changelog

Sourced from @​ai-sdk/cohere's changelog.

4.0.30

Patch Changes

• Updated dependencies [591d25b]
  • @​ai-sdk/provider@​4.0.8
  • @​ai-sdk/provider-utils@​5.0.30

4.0.29

Patch Changes

• Updated dependencies [b74971f]
  • @​ai-sdk/provider-utils@​5.0.29

Commits

• 3d3afac Version Packages (#19362)
• ed857f5 Version Packages (#19296)
• See full diff in compare view

Updates @ai-sdk/google from 4.0.47 to 4.0.51

Changelog

Sourced from @​ai-sdk/google's changelog.

4.0.51

Patch Changes

• e7fc90e: feat(google): support the Gemini Batch API with experimental_startTextBatch
• Updated dependencies [591d25b]
  • @​ai-sdk/provider@​4.0.8
  • @​ai-sdk/provider-utils@​5.0.30

4.0.50

Patch Changes

• Updated dependencies [b74971f]
  • @​ai-sdk/provider-utils@​5.0.29

4.0.49

Patch Changes

• f607a12: chore(google): drop support for Imagen models and their integration following API shutdown

4.0.48

Patch Changes

• 6c5a1ed: Inline local JSON Schema references in Google tool and structured-output schemas.

Commits

• 3d3afac Version Packages (#19362)
• e7fc90e feat(google): support batch APIs (#18470)
• ed857f5 Version Packages (#19296)
• eceb32a Version Packages (#19224)
• f607a12 chore(google): drop support for Imagen models and their integration following...
• e2aa796 Version Packages (#19186)
• 6c5a1ed fix(google): resolve local JSON Schema references (#19141)
• See full diff in compare view

Updates @ai-sdk/open-responses from 2.0.29 to 2.0.31

Changelog

Sourced from @​ai-sdk/open-responses's changelog.

2.0.31

Patch Changes

• Updated dependencies [591d25b]
  • @​ai-sdk/provider@​4.0.8
  • @​ai-sdk/provider-utils@​5.0.30

2.0.30

Patch Changes

• Updated dependencies [b74971f]
  • @​ai-sdk/provider-utils@​5.0.29

Commits

• 3d3afac Version Packages (#19362)
• ed857f5 Version Packages (#19296)
• See full diff in compare view

Updates @ai-sdk/openai from 4.0.44 to 4.0.47

Release notes

Sourced from @​ai-sdk/openai's releases.

@​ai-sdk/xai@​4.0.47

Patch Changes

• Updated dependencies [3e125ba]
  • @​ai-sdk/provider-utils@​5.0.32

Changelog

Sourced from @​ai-sdk/openai's changelog.

4.0.47

Patch Changes

• 591d25b: feat: add batch completion webhooks. experimental_startTextBatch accepts a webhookUrl, and the gateway provider registers it through the batch callbackUrl contract and exports typed async-job metadata. Direct Anthropic and OpenAI batch providers return an unsupported warning when the option is provided.
• 2214258: Prevent negative text output token counts when providers report reasoning tokens. Perplexity reasoning tokens are now treated as separate from completion tokens.
• Updated dependencies [591d25b]
  • @​ai-sdk/provider@​4.0.8
  • @​ai-sdk/provider-utils@​5.0.30

4.0.46

Patch Changes

• Updated dependencies [b74971f]
  • @​ai-sdk/provider-utils@​5.0.29

4.0.45

Patch Changes

• 6be0f51: fix(openai): expand internal parallel tool call wrappers from the Responses API while preserving stateful continuation and streaming fallbacks

Commits

• 3d3afac Version Packages (#19362)
• 2214258 fix: prevent negative text output token counts when reasoning exceeds complet...
• 591d25b feat: batch completion webhooks via startTextBatch webhookUrl (#19305)
• ed857f5 Version Packages (#19296)
• e2aa796 Version Packages (#19186)
• 6be0f51 fix(openai): expand Responses API parallel tool call wrappers (#19098)
• See full diff in compare view

Updates @ai-sdk/openai-compatible from 3.0.32 to 3.0.37

Release notes

Sourced from @​ai-sdk/openai-compatible's releases.

@​ai-sdk/replicate@​3.0.33

Patch Changes

• Updated dependencies [3e125ba]
  • @​ai-sdk/provider-utils@​5.0.32

Changelog

Sourced from @​ai-sdk/openai-compatible's changelog.

3.0.37

Patch Changes

• Updated dependencies [591d25b]
  • @​ai-sdk/provider@​4.0.8
  • @​ai-sdk/provider-utils@​5.0.30

3.0.36

Patch Changes

• ece5bdb: fix: send reasoning_effort: "none" when top-level reasoning is disabled

3.0.35

Patch Changes

• 7dd9ec3: feat(openai-compatible): convert video file parts to video_url content parts
• Updated dependencies [b74971f]
  • @​ai-sdk/provider-utils@​5.0.29

3.0.34

Patch Changes

• 99989ba: feat(provider/openai-compatible): report image generation token usage

3.0.33

Patch Changes

• d68139c: fix(openai-compatible): report truncated chat streams as errors

Commits

• 3d3afac Version Packages (#19362)
• 5b64c39 Version Packages (#19341)
• ece5bdb fix: forward top-level reasoning: 'none' to OpenAI-compatible models (#19337)
• ed857f5 Version Packages (#19296)
• 7dd9ec3 feat: support video_url content parts in OpenAI-compatible chat messages (#19...
• eceb32a Version Packages (#19224)
• 99989ba feat(provider/openai-compatible): report image generation token usage (#17996)
• e2aa796 Version Packages (#19186)
• d68139c fix: report OpenAI-compatible chat streams without a finish reason as errors ...
• See full diff in compare view

Updates ai from 7.0.70 to 7.0.79

Changelog

Sourced from ai's changelog.

7.0.79

Patch Changes

• b251584: Preserve active text and reasoning parts when another merged UI message stream finishes a step, and align workflow stream normalization with the explicit part end chunks.
• 591d25b: feat: add batch completion webhooks. experimental_startTextBatch accepts a webhookUrl, and the gateway provider registers it through the batch callbackUrl contract and exports typed async-job metadata. Direct Anthropic and OpenAI batch providers return an unsupported warning when the option is provided.
• 9de0baf: Parse structured generateText output when providers omit finishReason but return text.
• Updated dependencies [591d25b]
  • @​ai-sdk/gateway@​4.0.64
  • @​ai-sdk/provider@​4.0.8
  • @​ai-sdk/provider-utils@​5.0.30

7.0.78

Patch Changes

• 96970bb: Continue approved generateText, streamText, and WorkflowAgent turns with a model-visible tool error when revalidated tool input is invalid.
• Updated dependencies [e12e068]
  • @​ai-sdk/gateway@​4.0.63

7.0.77

Patch Changes

• Updated dependencies [b74971f]
• Updated dependencies [a371615]
  • @​ai-sdk/provider-utils@​5.0.29
  • @​ai-sdk/gateway@​4.0.62

7.0.76

Patch Changes

• c6d57f3: fix(ai): prevent duplicate text and reasoning part ids
• 677a707: fix(ai): allow nullish metadata schemas for UI messages with branded IDs

7.0.75

Patch Changes

• 8978ad8: feat(ai): add experimental_startVideo and experimental_videoStatus — user-facing fire-and-forget wrappers over the video model doStart/doStatus spec methods, with the same sparse-options DX as generateVideo
• Updated dependencies [dedac59]
  • @​ai-sdk/gateway@​4.0.61

7.0.74

Patch Changes

• Updated dependencies [5941bd6]
• Updated dependencies [9a4337d]

... (truncated)

Commits

• 3d3afac Version Packages (#19362)
• 9de0baf fix: parse structured output when the provider omits the finish reason (#19234)
• b251584 fix: preserve active UI message parts across merged stream step boundaries (#...
• 591d25b feat: batch completion webhooks via startTextBatch webhookUrl (#19305)
• 5b64c39 Version Packages (#19341)
• 96970bb fix: invalid approved tool input terminates resumed tool-approval turns (#19280)
• ed857f5 Version Packages (#19296)
• a983d06 chore: update tsx to 4.23.12 (#19273)
• ab58156 Version Packages (#19266)
• c6d57f3 fix(ai): prevent duplicate text and reasoning part ids (#19269)
• Additional commits viewable in compare view

Updates @earendil-works/pi-tui from 0.84.2 to 0.84.3

Release notes

Sourced from @​earendil-works/pi-tui's releases.

v0.84.3

New Features

• PowerShell tool — Use optional native PowerShell command execution on Windows. See PowerShell Tool.
• Safer managed updates — Stage, verify, and atomically activate updates for installer-managed installations. See Install and Manage.
• Model and thinking controls — Select thinking levels with /thinking, search defaults, keep selections session-scoped, and persist them explicitly with Ctrl+S. See Models and Thinking.

Breaking Changes<...

Description has been truncated

[Astro-Han]

CI is red and this Dependabot group bump cannot merge as-is. Follow-up agents: please push the license-pin + NOTICE regen onto this branch (dependabot/npm_and_yarn/minor-and-patch-a6efe23b05), do not open a parallel PR.

What failed

test, package, and Build immutable tarball all fail the same ASF notice gate:

@ai-sdk/provider-utils@5.0.29: no LICENSE/COPYING/NOTICE file and no exact-version override

scripts/generate-third-party-notices.mjs keys overrides by exact name@version so a bump must re-check the tarball. The published @ai-sdk/provider-utils tarball still omits LICENSE; package.json still declares Apache-2.0. The pin is still @ai-sdk/provider-utils@5.0.28.

Required updates in the generator

Before regenerating NOTICE files, move these exact-version pins to match the new lockfile (only after confirming the tarball license/copyright is unchanged):

Pin	Current	This PR
APACHE_TEXT_OVERRIDE_KEYS	@ai-sdk/provider-utils@5.0.28	5.0.29
EMBEDDED_COMPONENT_LICENSES['@ai-sdk/code-mode']	1.0.27	1.0.35
MIT_COPYRIGHT_OVERRIDES	@earendil-works/pi-tui@0.84.2	add 0.84.3 if that tarball still has no LICENSE

Do not hand-edit NOTICE outputs. Regenerate via the existing scripts, then npm run check:release / CLI notice check must pass.

Also check in the same change

This group includes @astryxdesign/cli 0.4.5 → 0.5.0 (Banner: defaultIsExpanded removed). @astryxdesign/core is already 0.5.0. Grep defaultIsExpanded (including spreads) and migrate any hits to collapsible={{ defaultIsOpen: true }}. If there are none, leave UI code alone.

Out of scope for this PR

Do not change .github/dependabot.yml grouping here. Splitting ai / Astryx out of minor-and-patch is a later policy change.

Done when

• Notice pins match lockfile versions
• Generated THIRD_PARTY_NOTICES files are updated
• check:release is green
• No leftover defaultIsExpanded call sites

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.