Skip to content

chore(deps): bump the minor-and-patch group with 15 updates - #137

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-ba9a71114e
Closed

chore(deps): bump the minor-and-patch group with 15 updates#137
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-ba9a71114e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 2, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 15 updates:

Package From To
@ai-sdk/anthropic 4.0.42 4.0.45
@ai-sdk/google 4.0.51 4.0.57
@ai-sdk/openai 4.0.47 4.0.51
@ai-sdk/openai-compatible 3.0.37 3.0.40
@ai-sdk/react 4.0.82 4.0.87
@better-auth/passkey 1.7.1 1.7.2
ai 7.0.79 7.0.84
better-auth 1.7.1 1.7.2
lucide-react 1.34.0 1.37.0
zod 4.4.3 4.5.4
@testing-library/react 16.3.2 16.3.3
@types/node 26.3.0 26.4.0
lint-staged 17.3.0 17.4.1
simple-git-hooks 2.13.1 2.14.0
tsx 4.23.12 4.23.13

Updates @ai-sdk/anthropic from 4.0.42 to 4.0.45

Changelog

Sourced from @​ai-sdk/anthropic's changelog.

4.0.45

Patch Changes

  • Updated dependencies [90192f1]
    • @​ai-sdk/provider-utils@​5.0.33

4.0.44

Patch Changes

  • Updated dependencies [3e125ba]
    • @​ai-sdk/provider-utils@​5.0.32

4.0.43

Patch Changes

  • 7de3612: Encode provider-returned identifiers before using them in credentialed follow-up request paths.
  • a9782e1: fix: align batch result parsing, request counts, and lifecycle behavior across providers
  • 35841f5: feat: normalize mid-stream provider error events across supported providers into public StreamProviderError instances and preserve provider-owned type, code, status, retry, and raw payload metadata
  • Updated dependencies [a9782e1]
  • Updated dependencies [35841f5]
  • Updated dependencies [d2f3353]
    • @​ai-sdk/provider-utils@​5.0.31
Commits
  • 0a0f271 Version Packages (#19857)
  • c93fa8d Version Packages (#19748)
  • a01c481 Version Packages (#19478)
  • 35841f5 feat: normalize mid-stream provider error events into public typed errors wit...
  • a9782e1 fix(batch): align result parsing, request counts, and behavior across provide...
  • 7de3612 fix: provider-returned IDs escaping credentialed follow-up URL path segments ...
  • See full diff in compare view

Updates @ai-sdk/google from 4.0.51 to 4.0.57

Changelog

Sourced from @​ai-sdk/google's changelog.

4.0.57

Patch Changes

  • 949ef93: fix(google): recognize Google Files URLs when using a baseUrl
  • Updated dependencies [90192f1]
    • @​ai-sdk/provider-utils@​5.0.33

4.0.56

Patch Changes

  • 3ad9da9: Preserve complete Google Generative Language usage metadata in raw usage results.
  • e9bc618: Omit unsupported frequency and presence penalties from Gemini 2.5 requests and return warnings instead.

4.0.55

Patch Changes

  • 56d492f: Surface prompt-level Google safety blocks without candidates as content-filter results with prompt feedback metadata.

4.0.54

Patch Changes

  • 1f7835c: feat (provider/google, provider/google-vertex): Gemini 3.5 Transcribe support — unary transcription (gemini-3.5-transcribe) via generateContent with language detection, speaker diarization, word timestamps, and custom vocabulary, plus streaming transcription (gemini-3.5-transcribe-live) over the Live API WebSocket with mode: 'VERBATIM' | 'SMART' transcription formatting

4.0.53

Patch Changes

  • Updated dependencies [3e125ba]
    • @​ai-sdk/provider-utils@​5.0.32

4.0.52

Patch Changes

  • 7de3612: Encode provider-returned identifiers before using them in credentialed follow-up request paths.
  • a9782e1: fix: align batch result parsing, request counts, and lifecycle behavior across providers
  • 92e08e6: Preserve recursive tool input schemas without aborting Google model calls.
  • 35841f5: feat: normalize mid-stream provider error events across supported providers into public StreamProviderError instances and preserve provider-owned type, code, status, retry, and raw payload metadata
  • 0246209: Fix Google file uploads failing to type-check with TypeScript 5.9 DOM types.
  • Updated dependencies [a9782e1]
  • Updated dependencies [35841f5]
  • Updated dependencies [d2f3353]
    • @​ai-sdk/provider-utils@​5.0.31
Commits
  • 0a0f271 Version Packages (#19857)
  • 949ef93 fix(google): recognize Google Files URLs when using a baseUrl (#19868)
  • 3de1476 Version Packages (#19842)
  • e9bc618 fix: Gemini 2.5 requests fail when frequency or presence penalties are config...
  • 3ad9da9 fix: preserve complete Google Generative Language raw usage metadata (#19827)
  • 2fc3389 Version Packages (#19816)
  • 56d492f fix: surface Google prompt-level safety blocks without candidates as content-...
  • 0379422 Version Packages (#19778)
  • 1f7835c feat: support Gemini 3.5 Transcribe on Google and Google Vertex providers (#1...
  • c93fa8d Version Packages (#19748)
  • Additional commits viewable in compare view

Updates @ai-sdk/openai from 4.0.47 to 4.0.51

Changelog

Sourced from @​ai-sdk/openai's changelog.

4.0.51

Patch Changes

  • Updated dependencies [90192f1]
    • @​ai-sdk/provider-utils@​5.0.33

4.0.50

Patch Changes

  • e6a2992: Fix Responses history serialization for regular functions named tool_search.

4.0.49

Patch Changes

  • 2523403: Normalize non-object replayed Chat Completions tool arguments to empty objects.
  • Updated dependencies [3e125ba]
    • @​ai-sdk/provider-utils@​5.0.32

4.0.48

Patch Changes

  • a9782e1: fix: align batch result parsing, request counts, and lifecycle behavior across providers
  • eee6200: Signal schema-invalid known Responses stream events and preserve the error finish reason.
  • 35841f5: feat: normalize mid-stream provider error events across supported providers into public StreamProviderError instances and preserve provider-owned type, code, status, retry, and raw payload metadata
  • d2f3353: Split OpenAI and Azure OpenAI embedding requests by a conservative UTF-8 byte budget derived from their aggregate token limit, in addition to input count limits.
  • Updated dependencies [a9782e1]
  • Updated dependencies [35841f5]
  • Updated dependencies [d2f3353]
    • @​ai-sdk/provider-utils@​5.0.31
Commits
  • 0a0f271 Version Packages (#19857)
  • 0379422 Version Packages (#19778)
  • e6a2992 fix: replay regular functions named tool_search correctly in OpenAI Responses...
  • c93fa8d Version Packages (#19748)
  • 2523403 fix: prevent strict Chat Completions backends from rejecting malformed persis...
  • a01c481 Version Packages (#19478)
  • 35841f5 feat: normalize mid-stream provider error events into public typed errors wit...
  • d2f3353 fix: split large embedding batches that exceed provider aggregate token limit...
  • a9782e1 fix(batch): align result parsing, request counts, and behavior across provide...
  • eee6200 fix: OpenAI Responses streams silently dropping schema-invalid known events a...
  • See full diff in compare view

Updates @ai-sdk/openai-compatible from 3.0.37 to 3.0.40

Changelog

Sourced from @​ai-sdk/openai-compatible's changelog.

3.0.40

Patch Changes

  • Updated dependencies [90192f1]
    • @​ai-sdk/provider-utils@​5.0.33

3.0.39

Patch Changes

  • Updated dependencies [3e125ba]
    • @​ai-sdk/provider-utils@​5.0.32

3.0.38

Patch Changes

  • Updated dependencies [a9782e1]
  • Updated dependencies [35841f5]
  • Updated dependencies [d2f3353]
    • @​ai-sdk/provider-utils@​5.0.31
Commits

Updates @ai-sdk/react from 4.0.82 to 4.0.87

Changelog

Sourced from @​ai-sdk/react's changelog.

4.0.87

Patch Changes

  • Updated dependencies [6669d69]
  • Updated dependencies [a6463ca]
  • Updated dependencies [e604532]
  • Updated dependencies [90192f1]
    • ai@7.0.84
    • @​ai-sdk/provider-utils@​5.0.33
    • @​ai-sdk/mcp@​2.0.40

4.0.86

Patch Changes

  • Updated dependencies [8dd86a9]
  • Updated dependencies [fda13b3]
  • Updated dependencies [957146c]
  • Updated dependencies [ce6849a]
    • ai@7.0.83

4.0.85

Patch Changes

  • Updated dependencies [3e125ba]
    • ai@7.0.82
    • @​ai-sdk/provider-utils@​5.0.32
    • @​ai-sdk/mcp@​2.0.39

4.0.84

Patch Changes

  • ai@7.0.81

4.0.83

Patch Changes

  • Updated dependencies [a9782e1]
  • Updated dependencies [bf591f0]
  • Updated dependencies [35841f5]
  • Updated dependencies [fe69342]
  • Updated dependencies [d2f3353]
  • Updated dependencies [eed7950]
    • @​ai-sdk/provider-utils@​5.0.31
    • @​ai-sdk/mcp@​2.0.38
    • ai@7.0.80
Commits

Updates @better-auth/passkey from 1.7.1 to 1.7.2

Release notes

Sourced from @​better-auth/passkey's releases.

v1.7.2

better-auth

Bug Fixes

  • Fixed permanent user bans to clear expiration dates from previous temporary bans. (#10823)
  • Fixed client types with more plugins being assignable to types declaring fewer plugins. (#10907)
  • Added warnings for invalid signed session data in the cookie cache. (#10934)
  • Fixed disabled MyISAM indexes from satisfying migration index checks. (#10877)
  • Fixed programmatic migrations on Cloudflare D1 while preserving existing-index validation. (#10875)
  • Allowed ~ in relative callback URLs validated by trusted-origin checks. (#10041)
  • Improved validation of relative callback and redirect URLs with paths, queries, and fragments. (#10979)
  • Allowed same-origin form submissions with Referrer-Policy: no-referrer while continuing to reject untrusted origins. (#10959)
  • Improved getTestInstance performance with a faster default password hasher. (#10879)
  • Standardized built-in placeholder emails to the namespaced {identifier}@{namespace}.placeholder.invalid format. (#10982)

For detailed changes, see CHANGELOG

@better-auth/core

Bug Fixes

  • Fixed async context loss in Cloudflare Workers bundles with multiple runtime conditions. (#10855)
  • Fixed auth request logs to respect the configured logger, log level, and disabled setting. (#10939)
  • Improved validation of relative callback and redirect URLs with paths, queries, and fragments. (#10979)
  • Standardized built-in placeholder emails to the namespaced {identifier}@{namespace}.placeholder.invalid format. (#10982)
  • Added synchronous and optional access to the current auth endpoint context. (#10938)

For detailed changes, see CHANGELOG

@better-auth/oauth-provider

Bug Fixes

  • Fixed Client ID Metadata Document registration when clients share at least one supported grant with the server. (#11010)
  • Improved validation of relative callback and redirect URLs with paths, queries, and fragments. (#10979)
  • Fixed relative redirect URLs containing fragments. (#10983)

For detailed changes, see CHANGELOG

@better-auth/drizzle-adapter

Bug Fixes

  • Fixed one-to-one Drizzle relations when usePlural is enabled. (#10941)
  • Added validation for missing Drizzle schema fields in compound where clauses. (#10859)

For detailed changes, see CHANGELOG

@better-auth/kysely-adapter

... (truncated)

Changelog

Sourced from @​better-auth/passkey's changelog.

1.7.2

Commits

Updates ai from 7.0.79 to 7.0.84

Changelog

Sourced from ai's changelog.

7.0.84

Patch Changes

  • 6669d69: Expose parsed structured output in streamText end callbacks.
  • a6463ca: fix(ai): allow tool approval secrets in ToolLoopAgent settings and prepareCall
  • e604532: fix(ai): handle stateful and empty-match regular expressions in smoothStream
  • Updated dependencies [805bbfc]
  • Updated dependencies [90192f1]
    • @​ai-sdk/gateway@​4.0.68
    • @​ai-sdk/provider-utils@​5.0.33

7.0.83

Patch Changes

  • 8dd86a9: Validate persisted typed tool calls against current input and output schemas. Schema-incompatible empty or error inputs and terminal history from unavailable tools remain loadable as dynamic tool parts instead of exposing unvalidated values under current static tool types.
  • fda13b3: Allow chats to continue automatically after tool approval denials reach the output-denied state.
  • 957146c: add operation-level outcomes to UI message stream end callbacks
  • ce6849a: fix(ai): handle stitchable stream cancellation before an inner stream is registered

7.0.82

Patch Changes

  • 3e125ba: Allow manual tool approval statuses to include a reason and preserve it across core, model, and UI approval requests. OPA requires-approval decisions now surface their reason to human approvers. UI request chunks serialize the optional reason, while UI messages retain it as approval.requestReason separately from an approver's response reason.
  • Updated dependencies [0e7994c]
  • Updated dependencies [3e125ba]
    • @​ai-sdk/gateway@​4.0.67
    • @​ai-sdk/provider-utils@​5.0.32

7.0.81

Patch Changes

  • Updated dependencies [81bebaf]
    • @​ai-sdk/gateway@​4.0.66

7.0.80

Patch Changes

  • 35841f5: feat: normalize mid-stream provider error events across supported providers into public StreamProviderError instances and preserve provider-owned type, code, status, retry, and raw payload metadata

... (truncated)

Commits
  • 0a0f271 Version Packages (#19857)
  • e604532 fix: prevent smoothStream custom RegExp chunking from merging chunks or loopi...
  • 6669d69 fix: include parsed structured output in streamText end callbacks (#17717)
  • a6463ca fix: ToolLoopAgent types reject supported tool approval secrets (#19883)
  • 9a68261 feat(open-responses): support experimental extension codecs (#18900)
  • 0379422 Version Packages (#19778)
  • 8dd86a9 fix: reject stale persisted tool inputs without blocking unparsed or unavaila...
  • fda13b3 fix: continue chats automatically after denied tool approvals (#19771)
  • ce6849a fix(ai): handle stitchable stream cancellation before an inner stream is regi...
  • 957146c fix: UI message stream end callbacks cannot distinguish failed responses from...
  • Additional commits viewable in compare view

Updates better-auth from 1.7.1 to 1.7.2

Release notes

Sourced from better-auth's releases.

v1.7.2

better-auth

Bug Fixes

  • Fixed permanent user bans to clear expiration dates from previous temporary bans. (#10823)
  • Fixed client types with more plugins being assignable to types declaring fewer plugins. (#10907)
  • Added warnings for invalid signed session data in the cookie cache. (#10934)
  • Fixed disabled MyISAM indexes from satisfying migration index checks. (#10877)
  • Fixed programmatic migrations on Cloudflare D1 while preserving existing-index validation. (#10875)
  • Allowed ~ in relative callback URLs validated by trusted-origin checks. (#10041)
  • Improved validation of relative callback and redirect URLs with paths, queries, and fragments. (#10979)
  • Allowed same-origin form submissions with Referrer-Policy: no-referrer while continuing to reject untrusted origins. (#10959)
  • Improved getTestInstance performance with a faster default password hasher. (#10879)
  • Standardized built-in placeholder emails to the namespaced {identifier}@{namespace}.placeholder.invalid format. (#10982)

For detailed changes, see CHANGELOG

@better-auth/core

Bug Fixes

  • Fixed async context loss in Cloudflare Workers bundles with multiple runtime conditions. (#10855)
  • Fixed auth request logs to respect the configured logger, log level, and disabled setting. (#10939)
  • Improved validation of relative callback and redirect URLs with paths, queries, and fragments. (#10979)
  • Standardized built-in placeholder emails to the namespaced {identifier}@{namespace}.placeholder.invalid format. (#10982)
  • Added synchronous and optional access to the current auth endpoint context. (#10938)

For detailed changes, see CHANGELOG

@better-auth/oauth-provider

Bug Fixes

  • Fixed Client ID Metadata Document registration when clients share at least one supported grant with the server. (#11010)
  • Improved validation of relative callback and redirect URLs with paths, queries, and fragments. (#10979)
  • Fixed relative redirect URLs containing fragments. (#10983)

For detailed changes, see CHANGELOG

@better-auth/drizzle-adapter

Bug Fixes

  • Fixed one-to-one Drizzle relations when usePlural is enabled. (#10941)
  • Added validation for missing Drizzle schema fields in compound where clauses. (#10859)

For detailed changes, see CHANGELOG

@better-auth/kysely-adapter

... (truncated)

Changelog

Sourced from better-auth's changelog.

1.7.2

Patch Changes

  • #10875 d5d889b Thanks @​bytaesu! - Fix programmatic migrations failing on Cloudflare D1 while preserving existing-index validation across supported databases.

  • #10982 b4ad5a1 Thanks @​bytaesu! - Built-in placeholder emails now consistently use the namespaced {identifier}@{namespace}.placeholder.invalid format.

  • #10934 c7a5c1a Thanks @​bytaesu! - Cookie-cache reads now warn when signed session data is invalid instead of silently appearing as a signed-out session.

  • #10879 78f0c39 Thanks @​starslingdev! - Test suites using getTestInstance now run faster because the shared fixture avoids production password-hashing costs by default. Custom emailAndPassword.password implementations continue to take precedence.

  • #10823 ce8a3ab Thanks @​sosyz! - Ensure permanently banning a user clears any expiration from a previous temporary ban.

  • #10907 a021eaf Thanks @​heliohm! - A client created with more plugins is again assignable to a client type declaring fewer plugins, as in 1.6.

  • #10959 c8dcfa5 Thanks @​bytaesu! - Allow same-origin form submissions from pages using Referrer-Policy: no-referrer while continuing to reject untrusted request origins.

  • #10979 fced1a5 Thanks @​bytaesu! - Allow relative callback and redirect URLs to use standard path, query, and fragment syntax while preserving open-redirect protections.

  • #10041 f6891a2 Thanks @​GautamBytes! - Allow ~ in relative callback URLs validated by trusted origin checks.

  • #10877 649818a Thanks @​bytaesu! - Prevent disabled MyISAM indexes from satisfying migration index checks.

  • Updated dependencies [557e19b, 64da15b, d5d889b, b4ad5a1, ea77118, 5aea9f7, fced1a5, e1d4011]:

    • @​better-auth/core@​1.7.2
    • @​better-auth/kysely-adapter@​1.7.2
    • @​better-auth/drizzle-adapter@​1.7.2
    • @​better-auth/memory-adapter@​1.7.2
    • @​better-auth/mongo-adapter@​1.7.2
    • @​better-auth/prisma-adapter@​1.7.2
    • @​better-auth/telemetry@​1.7.2
Commits
  • ba12fcd chore: release v1.7.2 (#10870)
  • 79904f0 fix(origin-check): support fragments in relative redirect URLs (#10983)
  • c8dcfa5 fix(origin-check): validate null origins using fetch metadata (#10959)
  • e1d4011 fix(logger): respect configured logger in auth request context (#10939)
  • 557e19b refactor(context): clarify auth endpoint context access (#10938)
  • b4ad5a1 refactor: centralize placeholder email generation (#10982)
  • fced1a5 fix(origin-check): improve relative callback URL validation (#10979)
  • f6891a2 fix(origin-check): allow tilde in relative callback URLs (#10041)
  • ce8a3ab fix(admin): ban without a duration should clear the previous expiration (#10823)
  • a021eaf fix(client): a client with more plugins fits a narrower client type again (#1...
  • Additional commits viewable in compare view

Updates lucide-react from 1.34.0 to 1.37.0

Release notes

Sourced from lucide-react's releases.

Version 1.37.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.35.0...1.37.0

Version 1.36.0

What's Changed

... (truncated)

Commits

Updates zod from 4.4.3 to 4.5.4

Release notes

Sourced from zod's releases.

v4.5.4

Commits:

  • 84e416fbf4740527bbc8f319634f4e1b065bb42c fix(v4): stop the cycle walk from firing a default factory (#6500)
  • e8e206fa33ac5fe7ce20a2beb12d57b1cb3df653 4.5.4

v4.5.3

Commits:

  • e6b6ab347675cd2bd54b1bdbed16f98c59be82a9 docs(blog): widen the z.compile example to a 20-property schema
  • 87d6464418582bb96fc665a01f852ca6da324ad0 fix(docs): drop the OG description when the title wraps past two lines
  • 99fce394a026823e602b9c30d8d5d9f5f1932ce7 bench(v4): z.compile() against zod-compiler (#6499)
  • e3a695b6bf3f0d591ea682816e3cdaea04b0f967 docs(v4): record the email regex and container output-shape findings under Open
  • 7e24a24288183ce02554f1ded7775d0650a7b7e6 docs(blog): drop the reading time and put a GitHub link in the navbar
  • eab51ff3592b2d11d863f4ee4d5452f31a3de1b6 fix(v4): emit record numeric keys as strings in toJSONSchema (#6497)

v4.5.2

Commits:

  • a354314ac04fdd5484aa62dd5c3a4b553211a0e4 fix(docs): keep blog posts out of the docs collection (#6484)
  • d378c42aff6869f0929058a7923cd775880f5c4c ci: drop canary publishing from the release workflow (#6487)
  • 212b941791e7faae078e17645eb612824fd8f79a fix(v4): let a prototype method getter answer a bare call so vi.spyOn works (#6488)
  • e7576f542a7bc7ef3cc5eeec237714fd0e6b6e98 docs(blog): let the page show through the navbar in dark mode (#6489)
  • fedb06fafe33a66ce0b5c236ad2557e0a5a170fe fix(docs): match the blog TOC hover bar to the 2px active indicator
  • 6c932fcb2eea6eb671710ea058ca9fdc382ada89 chore: bump devcontainer image to Node 24 (#6470)
  • 6635d9dd367a664109de83c021995821f48efa29 docs(blog): soften the "method memoization" attribution
  • 019ae299cc75daa132bf1acf59086a520abf6b85 fix(docs): drop ISR on the docs route so the home page hydrates
  • 652bb438aa4c626c1cd7948c6849c4691239fca7 chore(docs): drop the scroll log from the route-change scroller
  • 571c8e8a3d73b4305f4abfdd6977773cc12f2bf5 fix(docs): render blog tabs with the stock fumadocs tab card
  • 9a193aa24b4efa3b315b91d4c56c8bc385b8513f 4.5.2

v4.5.1

Commits:

  • 2e862dbf89da2835e5206a8fd3d3be61afe3cf7f ci: gate the GitHub release and JSR publish on the version being live on npm
  • 8e03380510db36fa6fda979fc78a375fdea8021c 4.5.1

v4.5.0

Zod 4.5 is now available.

npm install zod@latest

At a glance:

@dependabot
chore(deps): bump the minor-and-patch group with 15 updates
702a1c7 
Bumps the minor-and-patch group with 15 updates:

| Package | From | To |
| --- | --- | --- |
| [@ai-sdk/anthropic](https://github.com/vercel/ai/tree/HEAD/packages/anthropic) | `4.0.42` | `4.0.45` |
| [@ai-sdk/google](https://github.com/vercel/ai/tree/HEAD/packages/google) | `4.0.51` | `4.0.57` |
| [@ai-sdk/openai](https://github.com/vercel/ai/tree/HEAD/packages/openai) | `4.0.47` | `4.0.51` |
| [@ai-sdk/openai-compatible](https://github.com/vercel/ai/tree/HEAD/packages/openai-compatible) | `3.0.37` | `3.0.40` |
| [@ai-sdk/react](https://github.com/vercel/ai/tree/HEAD/packages/react) | `4.0.82` | `4.0.87` |
| [@better-auth/passkey](https://github.com/better-auth/better-auth/tree/HEAD/packages/passkey) | `1.7.1` | `1.7.2` |
| [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `7.0.79` | `7.0.84` |
| [better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth) | `1.7.1` | `1.7.2` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.34.0` | `1.37.0` |
| [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.5.4` |
| [@testing-library/react](https://github.com/testing-library/react-testing-library) | `16.3.2` | `16.3.3` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.3.0` | `26.4.0` |
| [lint-staged](https://github.com/lint-staged/lint-staged) | `17.3.0` | `17.4.1` |
| [simple-git-hooks](https://github.com/toplenboren/simple-git-hooks) | `2.13.1` | `2.14.0` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.12` | `4.23.13` |


Updates `@ai-sdk/anthropic` from 4.0.42 to 4.0.45
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/anthropic/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/anthropic@4.0.45/packages/anthropic)

Updates `@ai-sdk/google` from 4.0.51 to 4.0.57
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/google/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/google@4.0.57/packages/google)

Updates `@ai-sdk/openai` from 4.0.47 to 4.0.51
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/openai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/openai@4.0.51/packages/openai)

Updates `@ai-sdk/openai-compatible` from 3.0.37 to 3.0.40
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/openai-compatible/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/openai-compatible@3.0.40/packages/openai-compatible)

Updates `@ai-sdk/react` from 4.0.82 to 4.0.87
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/react@4.0.87/packages/react)

Updates `@better-auth/passkey` from 1.7.1 to 1.7.2
- [Release notes](https://github.com/better-auth/better-auth/releases)
- [Changelog](https://github.com/better-auth/better-auth/blob/main/packages/passkey/CHANGELOG.md)
- [Commits](https://github.com/better-auth/better-auth/commits/v1.7.2/packages/passkey)

Updates `ai` from 7.0.79 to 7.0.84
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@7.0.84/packages/ai)

Updates `better-auth` from 1.7.1 to 1.7.2
- [Release notes](https://github.com/better-auth/better-auth/releases)
- [Changelog](https://github.com/better-auth/better-auth/blob/main/packages/better-auth/CHANGELOG.md)
- [Commits](https://github.com/better-auth/better-auth/commits/v1.7.2/packages/better-auth)

Updates `lucide-react` from 1.34.0 to 1.37.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.37.0/packages/lucide-react)

Updates `zod` from 4.4.3 to 4.5.4
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.4.3...v4.5.4)

Updates `@testing-library/react` from 16.3.2 to 16.3.3
- [Release notes](https://github.com/testing-library/react-testing-library/releases)
- [Changelog](https://github.com/testing-library/react-testing-library/blob/main/CHANGELOG.md)
- [Commits](testing-library/react-testing-library@v16.3.2...v16.3.3)

Updates `@types/node` from 26.3.0 to 26.4.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `lint-staged` from 17.3.0 to 17.4.1
- [Release notes](https://github.com/lint-staged/lint-staged/releases)
- [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md)
- [Commits](lint-staged/lint-staged@v17.3.0...v17.4.1)

Updates `simple-git-hooks` from 2.13.1 to 2.14.0
- [Release notes](https://github.com/toplenboren/simple-git-hooks/releases)
- [Changelog](https://github.com/toplenboren/simple-git-hooks/blob/master/CHANGELOG.md)
- [Commits](toplenboren/simple-git-hooks@2.13.1...2.14.0)

Updates `tsx` from 4.23.12 to 4.23.13
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.12...v4.23.13)

---
updated-dependencies:
- dependency-name: "@ai-sdk/anthropic"
  dependency-version: 4.0.45
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@ai-sdk/google"
  dependency-version: 4.0.57
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@ai-sdk/openai"
  dependency-version: 4.0.51
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@ai-sdk/openai-compatible"
  dependency-version: 3.0.40
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@ai-sdk/react"
  dependency-version: 4.0.87
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@better-auth/passkey"
  dependency-version: 1.7.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: ai
  dependency-version: 7.0.84
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: better-auth
  dependency-version: 1.7.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: lucide-react
  dependency-version: 1.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: zod
  dependency-version: 4.5.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@testing-library/react"
  dependency-version: 16.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@types/node"
  dependency-version: 26.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: lint-staged
  dependency-version: 17.4.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: simple-git-hooks
  dependency-version: 2.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: tsx
  dependency-version: 4.23.13
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Sep 2, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot @github

dependabot Bot commented on behalf of github Sep 5, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 5, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/minor-and-patch-ba9a71114e branch September 5, 2026 09:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants