Skip to content

Bump the minor-and-patch group across 1 directory with 5 updates - #23

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-0b66a9b7f5
Closed

Bump the minor-and-patch group across 1 directory with 5 updates#23
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-0b66a9b7f5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 21, 2026

Copy link
Copy Markdown

Bumps the minor-and-patch group with 5 updates in the / directory:

Package From To
@anthropic-ai/sdk 0.32.1 0.105.0
@google/generative-ai 0.21.0 0.24.1
dexie 4.4.3 4.4.4
dompurify 3.4.10 3.4.11
@types/dompurify 3.0.5 3.2.0

Updates @anthropic-ai/sdk from 0.32.1 to 0.105.0

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk: v0.105.0

0.105.0 (2026-06-18)

Full Changelog: sdk-v0.104.2...sdk-v0.105.0

Features

  • api: add support for new code_execution_20260120 tool (8dc2b54)
  • stream: lazily parse partial tool json input (#99) (e55ceee)

Chores

  • internal/deps: bump swc to 1.15.40 (#97) (a1d4d75)
  • internal: use are the types wrong directly (#94) (3d362af)
  • tests: stop using deprecated models (#98) (65ae1af)

sdk: v0.104.2

0.104.2 (2026-06-15)

Full Changelog: sdk-v0.104.1...sdk-v0.104.2

Chores

  • api: remove retired models from API and SDKs (a942876)

sdk: v0.104.1

0.104.1 (2026-06-09)

Full Changelog: sdk-v0.104.0...sdk-v0.104.1

Bug Fixes

  • api: add frontier_llm refusal category (465e686)

sdk: v0.104.0

0.104.0 (2026-06-09)

Full Changelog: sdk-v0.103.0...sdk-v0.104.0

Features

  • api: add support for Managed Agents deployments and environment variable credentials (d01e38b)

sdk: v0.103.0

0.103.0 (2026-06-09)

Full Changelog: sdk-v0.102.0...sdk-v0.103.0

Features

... (truncated)

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.105.0 (2026-06-18)

Full Changelog: sdk-v0.104.2...sdk-v0.105.0

Features

  • api: add support for new code_execution_20260120 tool (8dc2b54)
  • stream: lazily parse partial tool json input (#99) (e55ceee)

Chores

  • internal/deps: bump swc to 1.15.40 (#97) (a1d4d75)
  • internal: use are the types wrong directly (#94) (3d362af)
  • tests: stop using deprecated models (#98) (65ae1af)

0.104.2 (2026-06-15)

Full Changelog: sdk-v0.104.1...sdk-v0.104.2

Chores

  • api: remove retired models from API and SDKs (a942876)

0.104.1 (2026-06-09)

Full Changelog: sdk-v0.104.0...sdk-v0.104.1

Bug Fixes

  • api: add frontier_llm refusal category (465e686)

0.104.0 (2026-06-09)

Full Changelog: sdk-v0.103.0...sdk-v0.104.0

Features

  • api: add support for Managed Agents deployments and environment variable credentials (d01e38b)

0.103.0 (2026-06-09)

Full Changelog: sdk-v0.102.0...sdk-v0.103.0

Features

  • api: add support for claude-mythos-5 and claude-fable-5, with support for server-side fallbacks on refusal (cc337f7)
  • client: adds client-side fallbacks middleware for API providers that do not support server-side fallbacks (cc337f7)
  • middleware: add ctx.logger (#55) (edd1454)

... (truncated)

Commits
  • ab700dc chore: release main
  • a322517 feat(api): add support for new code_execution_20260120 tool
  • 65a0106 feat(stream): lazily parse partial tool json input (#99)
  • 384ab51 chore(tests): stop using deprecated models (#98)
  • a49a191 chore(internal/deps): bump swc to 1.15.40 (#97)
  • 7ac63f3 chore(internal): use are the types wrong directly (#94)
  • fbee0d1 chore: release main
  • e984ba4 chore(api): remove retired models from API and SDKs
  • 9a0442d chore: release main
  • 1ccd401 fix(api): add frontier_llm refusal category
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​anthropic-ai/sdk since your current version.


Updates @google/generative-ai from 0.21.0 to 0.24.1

Changelog

Sourced from @​google/generative-ai's changelog.

0.24.1

Patch Changes

  • 2a82804: Update package description to include deprecation notice.

0.24.0

Minor Changes

  • 13466b3: added support for buffers in uploadFile
  • 64e5af7: BREAKING CHANGE: Enforce format safety when using string schemas

0.23.0

Minor Changes

  • da7ed0e: Introduce a new error type to represent AbortError from SDK

Patch Changes

  • 16737d3: Fixes issue #218 by ensuring system instructions are formatted always, not just when TTL is specified
  • 9e95663: fix: Exclude content with empty parts from chat history
  • be83756: Added custom header support to the Server package, matching functionality on the client package
  • 33c3c24: add HARM_CATEGORY_CIVIC_INTEGRITY

0.22.0

Minor Changes

  • b546cba: Breaking change: Fix typo of groundingChunks
  • 85621eb: Breaking change: Fix typo of 'groundingSupport' -> 'groundingSupports'
  • 3004d3b: The schema types are now more specific, using a discriminated union based on the 'type' field to more accurately define which fields are allowed.

Patch Changes

  • 864afb7: Swapped the package manager to npm, in order to take advantage of npm audit fix
  • 070bcdc: Fix undefined candidate index.
  • 6a99ed8: Make sure chat api do not send empty text request after encounter any server error that returns empty response. This fixes issue #124 and issue #286.
  • 25d3a92: update FinishReason enum
  • d87cf1d: Fix flaky integration test with tools
Commits
  • 82a547a Version Packages (#467)
  • 2a82804 chore: Add changeset for README update (#464)
  • fefb607 Add Support Plan for the repository and deprecation timeline. (#462)
  • 4e36e77 Update README.md
  • d0c7898 Bump koa from 2.15.4 to 2.16.1 (#459)
  • f4c3093 docs: Update README note pointer to the new TS SDK (#447)
  • 607bc82 Update README.md to fix #300. (#368)
  • 6e822cd fix: Add missing fs import for file handling (#424)
  • 0baf001 chore: Update user-input.yml GitHub workflow to trigger on PR comments (#444)
  • 58f208d fix: After an API error, all subsequent calls fail with the same error (#420)
  • Additional commits viewable in compare view

Updates dexie from 4.4.3 to 4.4.4

Release notes

Sourced from dexie's releases.

Dexie v4.4.4

This is a maintenance release that resolves a bug in useLiveQuery caching and includes a TypeScript typing enhancement.

Related Package Releases

Package Version
dexie 4.4.4
dexie-cloud-addon 4.4.13 (no change)
dexie-react-hooks 4.4.0 (no change)
y-dexie 4.4.0 (no change)

Bug Fixes

dexie@4.4.4

  • fix: useLiveQuery fails to detect updates when mutating queried objects in-place and calling put() — In default/cloned cache mode (cache: 'cloned'), mutating queried objects in-place and subsequently calling put() on them would pollute the cache directly, preventing subsequent live-queries from detecting the change because the "before" and "after" states in the cache became identical. Live-queries now deeply clone results on read to completely isolate query results from in-place consumer mutations. (#2310). Reported in #2309 by @​laukaichung. Fixed by @​liz709 and @​dfahlander .

Other Changes

dexie@4.4.4

  • fix: typescript typings - add missing table4 parameter to transaction method — Added the missing table4 parameter to the typescript type definition of Dexie.transaction(), aligning it with other table parameters. Contributed by @​renbaoshuo (#2311)
Commits
  • f151e96 chore: bump version to 4.4.4
  • 0cc46ac perf(live-query): avoid redundant double deepClone on initial query cache pop...
  • fb5d3b7 test(live-query): revert prettier formatting and keep only targeted test fixes
  • 8c8c24d test(live-query): parameterize issue 2309 test and fix pre-existing syntax/pr...
  • bb4c265 test(live-query): change actualResults to let to avoid TypeError in tests
  • a6edadb fix(live-query): clone results on cache read when cache: 'cloned' is used (is...
  • 9485361 Add missing table4 parameter typing to transaction method
  • See full diff in compare view

Updates dompurify from 3.4.10 to 3.4.11

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.11

  • Fixed an issue with a leaky config for hooks via setConfig, thanks @​trace37labs
  • Bumped vulnerable development dependencies to arrive at plain 0 with npm audit
  • Updated the osv-scanner suppression list as no vulnerable dependencies are left for now
  • Updated up the linting tool-chain and removed now-redundant lint directives
  • Updated the documentation is several spots, README, wiki, etc.
  • Bumped several dependencies where possible
Commits

Updates @types/dompurify from 3.0.5 to 3.2.0

Commits

Updates @types/dompurify from 3.0.5 to 3.2.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-and-patch group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.32.1` | `0.105.0` |
| [@google/generative-ai](https://github.com/google/generative-ai-js) | `0.21.0` | `0.24.1` |
| [dexie](https://github.com/dexie/Dexie.js) | `4.4.3` | `4.4.4` |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.10` | `3.4.11` |
| [@types/dompurify](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/dompurify) | `3.0.5` | `3.2.0` |



Updates `@anthropic-ai/sdk` from 0.32.1 to 0.105.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.32.1...sdk-v0.105.0)

Updates `@google/generative-ai` from 0.21.0 to 0.24.1
- [Release notes](https://github.com/google/generative-ai-js/releases)
- [Changelog](https://github.com/google-gemini/deprecated-generative-ai-js/blob/main/CHANGELOG.md)
- [Commits](google-gemini/deprecated-generative-ai-js@v0.21.0...v0.24.1)

Updates `dexie` from 4.4.3 to 4.4.4
- [Release notes](https://github.com/dexie/Dexie.js/releases)
- [Commits](dexie/Dexie.js@v4.4.3...v4.4.4)

Updates `dompurify` from 3.4.10 to 3.4.11
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.10...3.4.11)

Updates `@types/dompurify` from 3.0.5 to 3.2.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/dompurify)

Updates `@types/dompurify` from 3.0.5 to 3.2.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/dompurify)

---
updated-dependencies:
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.105.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@google/generative-ai"
  dependency-version: 0.24.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: dexie
  dependency-version: 4.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: dompurify
  dependency-version: 3.4.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@types/dompurify"
  dependency-version: 3.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/dompurify"
  dependency-version: 3.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jun 21, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from bb1nfosec as a code owner June 21, 2026 17:33
@dependabot @github

dependabot Bot commented on behalf of github Jul 19, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 19, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/minor-and-patch-0b66a9b7f5 branch July 19, 2026 17:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants