Skip to content

chore(deps): bump the root-minor-patch group across 1 directory with 33 updates - #79

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/root-minor-patch-aca148c8da
Open

chore(deps): bump the root-minor-patch group across 1 directory with 33 updates#79
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/root-minor-patch-aca148c8da

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 25, 2026

Copy link
Copy Markdown
Contributor

Bumps the root-minor-patch group with 31 updates in the / directory:

Package From To
@ai-sdk/amazon-bedrock 3.0.101 3.0.119
@ai-sdk/google 2.0.74 2.0.89
@ai-sdk/openai 2.0.106 2.0.118
@anthropic-ai/sdk 0.82.0 0.120.0
@ast-grep/napi 0.42.2 0.45.1
@fastify/cors 11.2.0 11.3.0
@fastify/static 9.1.3 9.3.0
@fastify/websocket 11.2.0 11.3.0
@langfuse/client 5.5.3 5.10.1
@langfuse/otel 5.5.3 5.10.1
@lingxiao-office/sdk 1.0.1 1.0.7
@modelcontextprotocol/sdk 1.29.0 1.30.0
@opentelemetry/sdk-node 0.219.0 0.221.0
acorn 8.16.0 8.18.0
ai 5.0.198 5.0.244
fastify 5.8.5 5.12.1
mammoth 1.12.0 1.12.1
openai 6.37.0 6.49.0
pdfkit 0.18.0 0.19.1
playwright 1.60.0 1.62.1
proxy-agent 8.0.1 8.0.2
react 19.2.6 19.2.8
@types/react 19.2.14 19.2.18
react-virtuoso 4.18.7 4.18.12
sharp 0.34.5 0.35.3
string-width 8.2.1 8.2.2
undici 8.2.0 8.10.0
wrap-ansi 10.0.0 10.0.1
@types/node 25.7.0 25.9.5
electron 42.4.1 42.9.3
tsx 4.22.4 4.23.12

Updates @ai-sdk/amazon-bedrock from 3.0.101 to 3.0.119

Release notes

Sourced from @​ai-sdk/amazon-bedrock's releases.

@​ai-sdk/google@​3.0.113

Patch Changes

  • Updated dependencies [5642849]
    • @​ai-sdk/provider-utils@​4.0.48
Changelog

Sourced from @​ai-sdk/amazon-bedrock's changelog.

3.0.119

Patch Changes

  • 1cc3b4a: fix(amazon-bedrock): surface modeled event-stream exceptions

3.0.118

Patch Changes

  • 44081a8: fix (provider/amazon-bedrock): support reasoningContent.redactedContent from the Converse API and replay it on subsequent turns

3.0.117

Patch Changes

  • 834f16b: Reject Amazon Bedrock event streams that end with an incomplete buffered frame instead of completing normally with partial output.
  • e108d16: Surface Amazon Bedrock event stream frame decoding and processing failures instead of silently completing the stream.

3.0.116

Patch Changes

  • 0ecface: fix(bedrock): wrap invalid tool input in object

3.0.115

Patch Changes

  • Updated dependencies [0e51b7b]
    • @​ai-sdk/provider-utils@​3.0.32
    • @​ai-sdk/anthropic@​2.0.95

3.0.114

Patch Changes

  • Updated dependencies [e7afc18]
    • @​ai-sdk/anthropic@​2.0.94

3.0.113

Patch Changes

  • Updated dependencies [950eec8]
    • @​ai-sdk/anthropic@​2.0.93

3.0.112

Patch Changes

... (truncated)

Commits
  • c65b0ef Version Packages (#19199)
  • 1cc3b4a [v5.0] fix: surface Amazon Bedrock ConverseStream modeled exception frames (#...
  • 37f2370 Version Packages (#19146)
  • 44081a8 [v5.0] fix(amazon-bedrock): support reasoningContent.redactedContent from t...
  • 08c9c8f Version Packages (#19116)
  • e108d16 [v5.0] fix: surface Amazon Bedrock event-stream decoding failures (#19117)
  • 834f16b [v5.0] fix: Amazon Bedrock streams complete normally when the final event-str...
  • 72d31d5 Version Packages (#19020)
  • 0ecface Backport: fix(bedrock): wrap invalid tool input in object (#19023)
  • 17547e2 Version Packages (#18706)
  • Additional commits viewable in compare view

Updates @ai-sdk/anthropic from 2.0.81 to 2.0.95

Release notes

Sourced from @​ai-sdk/anthropic's releases.

@​ai-sdk/fireworks@​2.0.82

Patch Changes

  • Updated dependencies [5642849]
    • @​ai-sdk/provider-utils@​4.0.48
    • @​ai-sdk/openai-compatible@​2.0.72
Changelog

Sourced from @​ai-sdk/anthropic's changelog.

2.0.95

Patch Changes

  • Updated dependencies [0e51b7b]
    • @​ai-sdk/provider-utils@​3.0.32

2.0.94

Patch Changes

  • e7afc18: Reject spliced Anthropic generations while allowing duplicate message start events for the active message.

2.0.93

Patch Changes

  • 950eec8: Preserve Anthropic prompt-cache matches by replaying complete code-execution transcripts in their original wire shape.

2.0.92

Patch Changes

  • Updated dependencies [7a6bdbc]
    • @​ai-sdk/provider-utils@​3.0.31

2.0.91

Patch Changes

  • 0ab9755: feat (provider/anthropic): support fallbacks 'default' mode, which routes safety classifier refusals to Anthropic's recommended fallback model (adds the server-side-fallback-2026-07-01 beta automatically)
  • 0ab9755: feat (provider/anthropic): support mid-conversation tool changes via the toolChanges system message provider option, emitting tool_addition/tool_removal content blocks and the mid-conversation-tool-changes-2026-07-01 beta
  • 0ab9755: feat (provider/anthropic): add claude-opus-5 model id with frontier-tier capabilities (128k output tokens, structured output, adaptive thinking, xhigh effort, sampling parameter rejection, thinking-disabled only at effort high or below)

2.0.90

Patch Changes

  • db28434: fix (provider/anthropic): use current-generation capability defaults for unrecognized Claude model IDs while retaining conservative defaults for legacy Claude and non-Claude models.

2.0.89

Patch Changes

  • 1b0e540: Use native structured output on supported Bedrock Anthropic models when thinking is enabled instead of forcing a JSON tool call.
  • 5bb3ae4: Warn when an unknown model uses the default 4096 max output token limit.

2.0.88

Patch Changes

... (truncated)

Commits

Updates @ai-sdk/google from 2.0.74 to 2.0.89

Changelog

Sourced from @​ai-sdk/google's changelog.

2.0.89

Patch Changes

  • 1284605: Inline local JSON Schema references in Google tool and structured-output schemas.

2.0.88

Patch Changes

  • df0cbe9: feat(google): add gemini-3.7-flash model

2.0.87

Patch Changes

  • 1f51a4b: Preserve Google API error details in APICallError.data.
  • Updated dependencies [0e51b7b]
    • @​ai-sdk/provider-utils@​3.0.32

2.0.86

Patch Changes

  • Updated dependencies [7a6bdbc]
    • @​ai-sdk/provider-utils@​3.0.31

2.0.85

Patch Changes

  • 5e9957e: feat(provider/google): default unknown Gemini model IDs to the newest supported capabilities

2.0.84

Patch Changes

  • b05bffb: feat(google): add gemini-3.6-flash and gemini-3.5-flash-lite models

2.0.83

Patch Changes

  • e5f1c62: fix(provider/google): associate multiple code execution results with their tool call

2.0.82

Patch Changes

  • Updated dependencies [2fd6076]

... (truncated)

Commits

Updates @ai-sdk/openai from 2.0.106 to 2.0.118

Changelog

Sourced from @​ai-sdk/openai's changelog.

2.0.118

Patch Changes

  • Updated dependencies [0e51b7b]
    • @​ai-sdk/provider-utils@​3.0.32

2.0.117

Patch Changes

  • Updated dependencies [7a6bdbc]
    • @​ai-sdk/provider-utils@​3.0.31

2.0.116

Patch Changes

  • 8591016: Add blocked domain filters to the OpenAI and Azure Responses API web search tools.

2.0.115

Patch Changes

  • 11a02d9: Apply reasoning, service tier, and image defaults to recognizable future OpenAI model family versions.

2.0.114

Patch Changes

  • Updated dependencies [2fd6076]
    • @​ai-sdk/provider-utils@​3.0.30

2.0.113

Patch Changes

  • 21eef03: Send null content for tool-call-only assistant messages.

2.0.112

Patch Changes

  • Updated dependencies [c6e1d1a]
    • @​ai-sdk/provider-utils@​3.0.29

2.0.111

Patch Changes

... (truncated)

Commits

Updates @anthropic-ai/sdk from 0.82.0 to 0.120.0

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk: v0.120.0

0.120.0 (2026-08-19)

Full Changelog: sdk-v0.119.0...sdk-v0.120.0

Features

  • api: managed agents web search config and self hosted sandbox memory (ba8ec50)

Chores

  • internal: use a single pnpm workspace lockfile (#359) (3c32145)

sdk: v0.119.0

0.119.0 (2026-08-19)

Full Changelog: sdk-v0.118.0...sdk-v0.119.0

Features

  • api: Files and Skills APIs are now GA; add computer use and browser use toolsets (ab41aa3)

sdk: v0.118.0

0.118.0 (2026-08-18)

Full Changelog: sdk-v0.117.1...sdk-v0.118.0

Features

  • api: additions to files and memory stores (fdc0379)
  • api: updates to skill, files, and user profiles (671e6b1)
  • client: add helpers for accessing the workspace ID in response headers (28aa5af)

Bug Fixes

  • api: remove unsupported mid_conv_system content block (ae6ca94)
  • session-runner: retry tool-result sends for at least the lease TTL (#339) (7dc6325)

Chores

  • internal: bump zod to 4.4.3 (#334) (faa5b7b)
  • internal: remove leftover prism references (a163b96)
  • stop shipping the v0.50 migration guide and migrate CLI (53992d7)

Documentation

... (truncated)

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.120.0 (2026-08-19)

Full Changelog: sdk-v0.119.0...sdk-v0.120.0

Features

  • api: managed agents web search config and self hosted sandbox memory (ba8ec50)

Chores

  • internal: use a single pnpm workspace lockfile (#359) (3c32145)

0.119.0 (2026-08-19)

Full Changelog: sdk-v0.118.0...sdk-v0.119.0

Features

  • api: Files and Skills APIs are now GA; add computer use and browser use toolsets (ab41aa3)

0.118.0 (2026-08-18)

Full Changelog: sdk-v0.117.1...sdk-v0.118.0

Features

  • api: additions to files and memory stores (fdc0379)
  • api: updates to skill, files, and user profiles (671e6b1)
  • client: add helpers for accessing the workspace ID in response headers (28aa5af)

Bug Fixes

  • api: remove unsupported mid_conv_system content block (ae6ca94)
  • session-runner: retry tool-result sends for at least the lease TTL (#339) (7dc6325)

Chores

  • internal: bump zod to 4.4.3 (#334) (faa5b7b)
  • internal: remove leftover prism references (a163b96)
  • stop shipping the v0.50 migration guide and migrate CLI (53992d7)

Documentation

  • tools: warn that blocking tool bodies stall the worker heartbeat (#299) (908fdb5)

0.117.1 (2026-08-13)

... (truncated)

Commits
  • bfa9197 chore: release main
  • bc167f3 feat(api): managed agents web search config and self hosted sandbox memory
  • 83fd898 chore(internal): use a single pnpm workspace lockfile (#359)
  • 7fe6dd5 remove internal ticket references from changelog- #360
  • c67e4e2 chore: release main
  • 50fc0db feat(api): Files and Skills APIs are now GA; add computer use and browser use...
  • 18ea26d chore: release main
  • 6ed9ddd feat(api): updates to skill, files, and user profiles
  • 91921f5 fix(session-runner): retry tool-result sends for at least the lease TTL (#339)
  • 142adcc docs(tools): warn that blocking tool bodies stall the worker heartbeat (#299)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​anthropic-ai/sdk since your current version.


Updates @ast-grep/napi from 0.42.2 to 0.45.1

Release notes

Sourced from @​ast-grep/napi's releases.

0.45.1

0.45.0

0.44.1

... (truncated)

Changelog

Sourced from @​ast-grep/napi's changelog.

0.45.1

7 August 2026

0.45.0

23 July 2026

... (truncated)

Commits
  • dc3d655 0.45.1
  • 2ac18ca chore: bump deps
  • fa147e1 fix: match root metavariables against comments (#2868)
  • 20d880a feat(outline): add C# multiline member signatures (#2861)
  • 96c6792 chore(deps): update rust crate ignore to v0.4.32 (#2864)
  • cffbe33 chore(deps): update dependency oxlint to v1.77.0 (#2865)
  • ff97c38 chore(deps): update dependency typescript to v7 (#2833)
  • eaf94ff chore(deps): update astral-sh/setup-uv action to v9 (#2839)
  • d5c9d01 chore(deps): update dependency smol-toml to v1.7.1 (#2848)
  • c1f1af9 chore(deps): update dependency @​napi-rs/cli to v3.8.2 (#2854)
  • Additional commits viewable in compare view

Updates @fastify/cors from 11.2.0 to 11.3.0

Release notes

Sourced from @​fastify/cors's releases.

v11.3.0

What's Changed

New Contributors

Full Changelog: fastify/fastify-cors@v11.2.0...v11.3.0

Commits
  • 2c60caa Bumped v11.3.0
  • cf4986e chore: bump @​types/node in the dev-dependencies-typescript group (#411)
  • 816d054 test: remove remaining tap-style assertions from vary tests (#410)
  • 20507ea chore(package.json): fix delvedor's personal url (#409)
  • 6fe85c4 docs(readme): update request origin link (#408)
  • 57bdc65 chore: bump fastify-plugin from 5.1.0 to 6.0.0 in the dependencies group (#407)
  • a8ae57d chore: update depedabot setting
  • 4d34798 chore(.gitattributes): retain binary file eol style (#402)
  • 675ebef refactor(types): migrate from tsd to tstyche (#403)
  • ef25e0b ci: add lock-threads workflow (#401)
  • Additional commits viewable in compare view

Updates @fastify/static from 9.1.3 to 9.3.0

Release notes

Sourced from @​fastify/static's releases.

v9.3.0

What's Changed

New Contributors

Full Changelog: fastify/fastify-static@v9.2.0...v9.3.0

v9.2.0

What's Changed

New Contributors

Full Changelog: fastify/fastify-static@v9.1.3...v9.2.0

Commits
  • ad05a27 Bumped v9.3.0
  • 58811db chore: update fastify-plugin dependency to version 6.0.0 (#594)
  • a343813 Bumped v9.2.0
  • b94c725 docs: clarify precompressed allowedPath behavior (#593)
  • 684a4ea docs: fix broken links (#591)
  • 26e7042 chore: bump @​types/node in the dev-dependencies-typescript group (#592)

…33 updates

Bumps the root-minor-patch group with 31 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@ai-sdk/amazon-bedrock](https://github.com/vercel/ai/tree/HEAD/packages/amazon-bedrock) | `3.0.101` | `3.0.119` |
| [@ai-sdk/google](https://github.com/vercel/ai/tree/HEAD/packages/google) | `2.0.74` | `2.0.89` |
| [@ai-sdk/openai](https://github.com/vercel/ai/tree/HEAD/packages/openai) | `2.0.106` | `2.0.118` |
| [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.82.0` | `0.120.0` |
| [@ast-grep/napi](https://github.com/ast-grep/ast-grep) | `0.42.2` | `0.45.1` |
| [@fastify/cors](https://github.com/fastify/fastify-cors) | `11.2.0` | `11.3.0` |
| [@fastify/static](https://github.com/fastify/fastify-static) | `9.1.3` | `9.3.0` |
| [@fastify/websocket](https://github.com/fastify/fastify-websocket) | `11.2.0` | `11.3.0` |
| [@langfuse/client](https://github.com/langfuse/langfuse-js/tree/HEAD/packages/client) | `5.5.3` | `5.10.1` |
| [@langfuse/otel](https://github.com/langfuse/langfuse-js/tree/HEAD/packages/otel) | `5.5.3` | `5.10.1` |
| [@lingxiao-office/sdk](https://github.com/hexian2001/lingxiao-backend/tree/HEAD/packages/sdk) | `1.0.1` | `1.0.7` |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.29.0` | `1.30.0` |
| [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.219.0` | `0.221.0` |
| [acorn](https://github.com/acornjs/acorn) | `8.16.0` | `8.18.0` |
| [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `5.0.198` | `5.0.244` |
| [fastify](https://github.com/fastify/fastify) | `5.8.5` | `5.12.1` |
| [mammoth](https://github.com/mwilliamson/mammoth.js) | `1.12.0` | `1.12.1` |
| [openai](https://github.com/openai/openai-node) | `6.37.0` | `6.49.0` |
| [pdfkit](https://github.com/foliojs/pdfkit) | `0.18.0` | `0.19.1` |
| [playwright](https://github.com/microsoft/playwright) | `1.60.0` | `1.62.1` |
| [proxy-agent](https://github.com/TooTallNate/proxy-agents/tree/HEAD/packages/proxy-agent) | `8.0.1` | `8.0.2` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.6` | `19.2.8` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.14` | `19.2.18` |
| [react-virtuoso](https://github.com/petyosi/react-virtuoso/tree/HEAD/packages/react-virtuoso) | `4.18.7` | `4.18.12` |
| [sharp](https://github.com/lovell/sharp) | `0.34.5` | `0.35.3` |
| [string-width](https://github.com/sindresorhus/string-width) | `8.2.1` | `8.2.2` |
| [undici](https://github.com/nodejs/undici) | `8.2.0` | `8.10.0` |
| [wrap-ansi](https://github.com/chalk/wrap-ansi) | `10.0.0` | `10.0.1` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.7.0` | `25.9.5` |
| [electron](https://github.com/electron/electron) | `42.4.1` | `42.9.3` |
| [tsx](https://github.com/privatenumber/tsx) | `4.22.4` | `4.23.12` |



Updates `@ai-sdk/amazon-bedrock` from 3.0.101 to 3.0.119
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/amazon-bedrock@3.0.119/packages/amazon-bedrock/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/amazon-bedrock@3.0.119/packages/amazon-bedrock)

Updates `@ai-sdk/anthropic` from 2.0.81 to 2.0.95
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/anthropic@2.0.95/packages/anthropic/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/anthropic@2.0.95/packages/anthropic)

Updates `@ai-sdk/google` from 2.0.74 to 2.0.89
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/google@2.0.89/packages/google/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/google@2.0.89/packages/google)

Updates `@ai-sdk/openai` from 2.0.106 to 2.0.118
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/openai@2.0.118/packages/openai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/openai@2.0.118/packages/openai)

Updates `@anthropic-ai/sdk` from 0.82.0 to 0.120.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.82.0...sdk-v0.120.0)

Updates `@ast-grep/napi` from 0.42.2 to 0.45.1
- [Release notes](https://github.com/ast-grep/ast-grep/releases)
- [Changelog](https://github.com/ast-grep/ast-grep/blob/main/CHANGELOG.md)
- [Commits](ast-grep/ast-grep@0.42.2...0.45.1)

Updates `@fastify/cors` from 11.2.0 to 11.3.0
- [Release notes](https://github.com/fastify/fastify-cors/releases)
- [Commits](fastify/fastify-cors@v11.2.0...v11.3.0)

Updates `@fastify/static` from 9.1.3 to 9.3.0
- [Release notes](https://github.com/fastify/fastify-static/releases)
- [Commits](fastify/fastify-static@v9.1.3...v9.3.0)

Updates `@fastify/websocket` from 11.2.0 to 11.3.0
- [Release notes](https://github.com/fastify/fastify-websocket/releases)
- [Commits](fastify/fastify-websocket@v11.2.0...v11.3.0)

Updates `@langfuse/client` from 5.5.3 to 5.10.1
- [Release notes](https://github.com/langfuse/langfuse-js/releases)
- [Changelog](https://github.com/langfuse/langfuse-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/langfuse/langfuse-js/commits/v5.10.1/packages/client)

Updates `@langfuse/otel` from 5.5.3 to 5.10.1
- [Release notes](https://github.com/langfuse/langfuse-js/releases)
- [Changelog](https://github.com/langfuse/langfuse-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/langfuse/langfuse-js/commits/v5.10.1/packages/otel)

Updates `@langfuse/tracing` from 5.5.3 to 5.10.1
- [Release notes](https://github.com/langfuse/langfuse-js/releases)
- [Changelog](https://github.com/langfuse/langfuse-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/langfuse/langfuse-js/commits/v5.10.1/packages/tracing)

Updates `@lingxiao-office/sdk` from 1.0.1 to 1.0.7
- [Changelog](https://github.com/hexian2001/lingxiao-backend/blob/main/docs/release-npm.md)
- [Commits](https://github.com/hexian2001/lingxiao-backend/commits/HEAD/packages/sdk)

Updates `@modelcontextprotocol/sdk` from 1.29.0 to 1.30.0
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@v1.29.0...1.30.0)

Updates `@opentelemetry/sdk-node` from 0.219.0 to 0.221.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.219.0...experimental/v0.221.0)

Updates `acorn` from 8.16.0 to 8.18.0
- [Commits](acornjs/acorn@8.16.0...8.18.0)

Updates `ai` from 5.0.198 to 5.0.244
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/ai@5.0.244/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@5.0.244/packages/ai)

Updates `fastify` from 5.8.5 to 5.12.1
- [Release notes](https://github.com/fastify/fastify/releases)
- [Commits](fastify/fastify@v5.8.5...v5.12.1)

Updates `mammoth` from 1.12.0 to 1.12.1
- [Release notes](https://github.com/mwilliamson/mammoth.js/releases)
- [Changelog](https://github.com/mwilliamson/mammoth.js/blob/master/NEWS)
- [Commits](mwilliamson/mammoth.js@1.12.0...1.12.1)

Updates `openai` from 6.37.0 to 6.49.0
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/main/CHANGELOG.md)
- [Commits](openai/openai-node@v6.37.0...v6.49.0)

Updates `pdfkit` from 0.18.0 to 0.19.1
- [Release notes](https://github.com/foliojs/pdfkit/releases)
- [Changelog](https://github.com/foliojs/pdfkit/blob/master/CHANGELOG.md)
- [Commits](foliojs/pdfkit@v0.18.0...v0.19.1)

Updates `playwright` from 1.60.0 to 1.62.1
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.60.0...v1.62.1)

Updates `proxy-agent` from 8.0.1 to 8.0.2
- [Release notes](https://github.com/TooTallNate/proxy-agents/releases)
- [Changelog](https://github.com/TooTallNate/proxy-agents/blob/main/packages/proxy-agent/CHANGELOG.md)
- [Commits](https://github.com/TooTallNate/proxy-agents/commits/proxy-agent@8.0.2/packages/proxy-agent)

Updates `react` from 19.2.6 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react)

Updates `@types/react` from 19.2.14 to 19.2.18
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-virtuoso` from 4.18.7 to 4.18.12
- [Release notes](https://github.com/petyosi/react-virtuoso/releases)
- [Changelog](https://github.com/petyosi/react-virtuoso/blob/main/packages/react-virtuoso/CHANGELOG.md)
- [Commits](https://github.com/petyosi/react-virtuoso/commits/react-virtuoso@4.18.12/packages/react-virtuoso)

Updates `sharp` from 0.34.5 to 0.35.3
- [Release notes](https://github.com/lovell/sharp/releases)
- [Commits](lovell/sharp@v0.34.5...v0.35.3)

Updates `string-width` from 8.2.1 to 8.2.2
- [Release notes](https://github.com/sindresorhus/string-width/releases)
- [Commits](sindresorhus/string-width@v8.2.1...v8.2.2)

Updates `undici` from 8.2.0 to 8.10.0
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v8.2.0...v8.10.0)

Updates `wrap-ansi` from 10.0.0 to 10.0.1
- [Release notes](https://github.com/chalk/wrap-ansi/releases)
- [Commits](chalk/wrap-ansi@v10.0.0...v10.0.1)

Updates `@types/node` from 25.7.0 to 25.9.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/react` from 19.2.14 to 19.2.18
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `electron` from 42.4.1 to 42.9.3
- [Release notes](https://github.com/electron/electron/releases)
- [Commits](electron/electron@v42.4.1...v42.9.3)

Updates `tsx` from 4.22.4 to 4.23.12
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.22.4...v4.23.12)

---
updated-dependencies:
- dependency-name: "@ai-sdk/amazon-bedrock"
  dependency-version: 3.0.119
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: "@ai-sdk/anthropic"
  dependency-version: 2.0.95
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: "@ai-sdk/google"
  dependency-version: 2.0.89
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: "@ai-sdk/openai"
  dependency-version: 2.0.118
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.120.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@ast-grep/napi"
  dependency-version: 0.45.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@fastify/cors"
  dependency-version: 11.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@fastify/static"
  dependency-version: 9.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@fastify/websocket"
  dependency-version: 11.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@langfuse/client"
  dependency-version: 5.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@langfuse/otel"
  dependency-version: 5.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@langfuse/tracing"
  dependency-version: 5.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@lingxiao-office/sdk"
  dependency-version: 1.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@opentelemetry/sdk-node"
  dependency-version: 0.221.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: acorn
  dependency-version: 8.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: ai
  dependency-version: 5.0.244
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: fastify
  dependency-version: 5.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: mammoth
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: openai
  dependency-version: 6.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: pdfkit
  dependency-version: 0.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: playwright
  dependency-version: 1.62.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: proxy-agent
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: react
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: "@types/react"
  dependency-version: 19.2.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: react-virtuoso
  dependency-version: 4.18.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: sharp
  dependency-version: 0.35.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: string-width
  dependency-version: 8.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: undici
  dependency-version: 8.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: wrap-ansi
  dependency-version: 10.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: "@types/node"
  dependency-version: 25.9.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@types/react"
  dependency-version: 19.2.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: electron
  dependency-version: 42.9.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: tsx
  dependency-version: 4.23.12
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Aug 25, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@github-actions

Copy link
Copy Markdown

GLM 审查信息

结论

建议阻塞合并。此 PR 跨度大、涉及多个高风险 native 模块和 AI SDK,且仅修改 package.json 未包含任何源代码适配,存在较高回归风险。

发现

  1. @anthropic-ai/sdk 从 0.82.0 升级到 0.120.0(跨 38 个版本)package.json 第 96 行

    • 0.118.0 移除了 mid_conv_system content blockfix(api): remove unsupported mid_conv_system content block),这是破坏性变更。如果项目代码中使用了该 content block 类型,将导致编译错误或运行时异常。
    • 0.119.0 将 Files 和 Skills APIs 变为 GA,并新增 computer use / browser use toolsets,API 表面变化较大。
    • 需要全局搜索代码中是否有 mid_conv_system 或相关类型的引用。
  2. sharp 从 0.34.5 升级到 0.35.3(minor 跨版本)package.json 第 138 行

    • sharp 的 minor 版本升级通常伴随 libvips native 依赖和 API 行为变更。项目同时使用了 skia-canvas,native 模块叠加升级风险高。
    • 需确认图像处理流程(缩放、转换格式等)是否正常工作。
  3. @ast-grep/napi 从 0.42.2 升级到 0.45.1package.json 第 102 行

    • 0.45.0 包含行为变更:fix: stop using ignore files outside rule_dirsfix: use is_extra instead of comment heuristic,可能改变代码搜索/匹配结果,导致之前能匹配到的规则现在匹配不到或出现误报。
    • 0.45.0 还废弃了 sg 命令(feat: deprecate the sg command),如果项目通过 CLI 调用 sg,需确认是否受影响。
  4. electron 从 42.4.1 升级到 42.9.3 + 多个 native 模块同步升级package.json

    • Electron minor 跨度较大,内置 Node.js 版本可能变化,导致 sharp@ast-grep/napiskia-canvas 等 native 模块 ABI 不兼容,出现启动崩溃或 module not found 错误。
    • 需要在 Electron 环境中验证 electron-rebuild 后 native 模块能否正常加载。
  5. undici 从 8.2.0 升级到 8.10.0(跨 8 个 minor)package.json

    • undici 是底层 HTTP 客户端,影响所有网络请求。跨度较大可能包含请求/响应处理的行为变更,特别是 streaming、redirect、proxy 等场景。
  6. 此 PR 仅修改 package.json 版本范围,无源代码适配

    • 对于上述有 breaking changes 风险的依赖,没有任何代码修改来适配新 API,意味着如果存在不兼容,将在运行时暴露。

建议测试

  • 全局搜索 mid_conv_system 关键字,确认 @anthropic-ai/sdk 升级不会破坏现有 Anthropic 调用链路。
  • Electron 启动冒烟测试:在目标平台启动应用,验证 sharp@ast-grep/napiskia-canvas 等 native 模块加载无崩溃。
  • 代码分析功能回归:使用 @ast-grep/napi 的核心规则跑一遍已有测试用例,确认匹配结果未因 ignore files 和 comment heuristic 变更而发生偏移。
  • 图像处理端到端测试:覆盖 sharp 的主要使用路径(缩放、格式转换、元信息读取)。
  • AI 调用链路测试:覆盖 OpenAI / Anthropic / Google / Bedrock 各 provider 的流式和非流式调用,确认 @ai-sdk/*ai 包升级未引入回归。
  • 网络请求测试:在代理/重定向/streaming 场景下验证 undici 升级后的行为一致性。

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants