Repository navigation
chore(deps): update all non-major dependencies - #60
renovate[bot] wants to merge 1 commit into
Conversation
|
Note renovate[bot] opened this pull request, so PR Lens left it undrawn. Comment
|
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
|
Important Review skippedBot user detected. To trigger a single review, invoke the
|
commit: |
9adcca8 to
cec67cf
Compare
cec67cf to
993b8d5
Compare
993b8d5 to
e18f007
Compare
e18f007 to
aa4e535
Compare
aa4e535 to
5b7afcf
Compare
5b7afcf to
48d5ece
Compare
48d5ece to
6a7698e
Compare
6a7698e to
f00e357
Compare
f00e357 to
b025126
Compare
b025126 to
907a0c0
Compare
907a0c0 to
2408c60
Compare
2408c60 to
600730e
Compare
600730e to
91acf3b
Compare
91acf3b to
16dbbb2
Compare
16dbbb2 to
6f4ea42
Compare
Production bundleComparing Initial page load
All client assets
Largest module increases
|
6f4ea42 to
666bea5
Compare
Note
This PR body was truncated due to platform limits.
This PR contains the following updates:
^4.0.116→^4.0.1234.0.125(+1)^4.0.143→^4.0.1504.0.152(+1)^0.7.0→^0.8.1^1.2.16→^1.2.17^1.2.145→^1.2.147^1.2.90→^1.2.921.2.93^5.0.3→^5.0.44.0.0-beta.5→4.0.0-beta.7^1.9.1→^1.10.0^0.223.0→^0.300.0^3.10.1→^3.10.3v8.0.1→v8.0.2^7.0.143→^7.0.1507.0.152(+1)^0.7.0→^0.8.1^3.0.2→^3.0.424→24.22.1^0.7.1→^0.8.012.14.0→12.15.0^0.62.0→^0.63.2Release Notes
vercel/ai (@ai-sdk/gateway)
v4.0.123Compare Source
Patch Changes
8202f5b: feat(gateway): implement experimental streaming speech in the gateway providerGatewaySpeechModelimplementsExperimental_StreamingSpeechModelV4and streams speech over the AI Gateway speech WebSocket (/speech-model,ai-gateway-speech.v1subprotocol).@ai-sdk/provider-utilsadds the experimental speech-stream envelope (experimental_parseSpeechStreamClientFrame,experimental_serializeSpeechStreamPart,experimental_parseSpeechStreamPart) shared by clients and servers, plus theEXPERIMENTAL_SPEECH_STREAM_*frame type constants andExperimental_SpeechStream*frame types. Text-delta frames carry each text part'svoiceandproviderOptions; the start frame carriesoutputFormatas an audio format object. Addsgateway.experimental_speech, callable likespeech(modelId), with a server-sidegetToken()that mints a speech-bound short-lived client secret for browser use.Updated dependencies [
8202f5b]Updated dependencies [
85d84a1]v4.0.122Compare Source
Patch Changes
101ce42: chore(provider/gateway): update gateway model settings filese104368: Add Voxtral 3 offline transcription and speech model IDs. Support transcription context phrases and detected language, update timestamp validation for Voxtral 3, and expose speech expressiveness and pronunciation hints.eb1f056: fix(provider/gateway): updateparallelSearchfor Parallel's GA Search APIturbo,fast,basic, andadvancedmodes. Tool calls that use one of these modes no longer fail client-side input validation.one-shotandagenticare deprecated but still accepted.locationand top-levelmaxCharsTotaloptions, plusfetchPolicy.timeoutSecondsandfetchPolicy.disableCacheFallback.excerpts.maxCharsTotalis deprecated in favor ofmaxCharsTotal.search_id, results withurl, nullabletitleandpublish_date, andexcerpts: string[], plus optionalwarnings,usage, andsession_id. ThesearchId,excerpt,publishDate, andrelevanceScorefields were never populated and are removed; update code that reads them.validateUIMessagesnow accepts Parallel Search results.5893e99: chore(provider/gateway): update gateway model settings filesUpdated dependencies [
10026d1]v4.0.121Compare Source
Patch Changes
f1b550e: Defer construction of provider validation schemas until first use to reduce package import time.b089ce8]39a776b]v4.0.120Compare Source
Patch Changes
9bec2c3: chore(provider/gateway): update gateway model settings filesv4.0.119Compare Source
Patch Changes
9d13c4d: Add the MiniMax M3.1 Flash model ID to the MiniMax and AI Gateway providers.0c2a9de: AddmaxOutputTokensandreasoningto experimental decision calls and forward them to language-model-backed decisions. Language-model adapters keep reasoning disabled when omitted. Native decision providers warn when either setting is unsupported.0c2a9de]200c47f]v4.0.118Compare Source
Patch Changes
1c47fee: chore(provider/gateway): update gateway model settings filesv4.0.117Compare Source
Patch Changes
6b7fb8f: chore(provider/gateway): update gateway model settings files60cc252]vercel/ai (@ai-sdk/vue)
v4.0.150Compare Source
Patch Changes
8202f5b]8e18d59]v4.0.149Compare Source
Patch Changes
1727442]0a5d0e7]10026d1]v4.0.148Compare Source
Patch Changes
b089ce8]39a776b]v4.0.147Compare Source
Patch Changes
66e74dc]v4.0.146Compare Source
Patch Changes
0c2a9de]200c47f]3785b2e]ab8eb61]v4.0.145Compare Source
Patch Changes
v4.0.144Compare Source
Patch Changes
60cc252]0ed59e2]comarkdown/comark (@comark/nuxt)
v0.8.1: @comark/nuxt v0.8.1Compare Source
Released alongside comark 0.8.1. See the comark 0.8.1 release notes for details.
v0.8.0: @comark/nuxt v0.8.0Compare Source
Released alongside comark 0.8. See the comark 0.8 release notes for details.
nuxt/devtools (@nuxt/devtools-kit)
v4.0.0-beta.7Compare Source
🐞 Bug Fixes
View changes on GitHub
v4.0.0-beta.6Compare Source
🚀 Features
@vitejs/devtoolsv0.8 - by @antfu (c13d0)🐞 Bug Fixes
View changes on GitHub
open-telemetry/opentelemetry-js (@opentelemetry/api)
v1.10.0Compare Source
🚀 (Enhancement)
🐛 (Bug Fix)
📚 (Refine Doc)
🏠 (Internal)
actions/download-artifact
v8.0.2Compare Source
What's Changed
New Contributors
Full Changelog: actions/download-artifact@v8.0.1...v8.0.2
vercel/ai (ai)
v7.0.150Compare Source
Patch Changes
8e18d59: feat(ai): add experimental_streamSpeechStreams speech audio from a string, or an array, iterable, or stream of text deltas and/or text parts (each with an optional
voiceandproviderOptions) using speech models that implement the experimentalExperimental_StreamingSpeechModelV4extension. Returns a single-consumeraudioStream/fullStreamplususage,warnings,responses, andproviderMetadatapromises. Providererrorparts are non-fatal and reported throughonError(defaultconsole.error). A user abort or a cancel rejects the result promises immediately. Exports theExperimental_SpeechTextPart,Experimental_SpeechStreamPart,Experimental_SpeechStreamUsage, andExperimental_StreamSpeechResulttypes, adds an optionalcausetoNoSpeechGeneratedError, and addsExperimental_MockStreamingSpeechModelV4toai/test.Updated dependencies [
8202f5b]Updated dependencies [
85d84a1]v7.0.149Compare Source
Patch Changes
1727442: fix(ai): process only the first approval response per tool call, so repeated or conflicting responses in the final tool message no longer execute a tool twice or both execute and deny it0a5d0e7: FixtoolChoice: 'none'by forwarding it to the Hugging Face Responses API and rejecting tool calls before local execution ingenerateText,streamText, andWorkflowAgent. Streamed tool parts are withheld so client-side tools cannot act on them, andrepairToolCallandexperimental_refineToolInputare not invoked for rejected tool calls.10026d1: Add theinterruptedfinish reason for provider streams that end without a completion signal. Preserve partial output without introducing an error solely for interruption, and stop tool execution, agent continuation, and automatic UI follow-ups for interrupted responses, including late tool results and approvals. Provider detection and emission will be added separately.Compatibility notice: Adding
interruptedto the public finish-reason types can break type checking after upgrading, even though this is a patch release. Exhaustive switches (for example, using anassertNeverfallback) and mappings such asRecord<FinishReason, string>must handle the new value. Update any custom validation or application logic that assumes the existing set of finish reasons is exhaustive.When providers begin emitting
interrupted, a stream ending without a completion signal will preserve partial output and report this finish reason without emitting an error solely for the interruption. Applications that need to detect incomplete responses should checkfinishReason === 'interrupted'as well as their existing error handling.Updated dependencies [
101ce42]Updated dependencies [
e104368]Updated dependencies [
eb1f056]Updated dependencies [
10026d1]Updated dependencies [
5893e99]v7.0.148Compare Source
Patch Changes
b089ce8]39a776b]f1b550e]v7.0.147Compare Source
Patch Changes
66e74dc: fix(ai): preserve repaired tool names in streamed UI message parts9bec2c3]v7.0.146Compare Source
Patch Changes
0c2a9de: AddmaxOutputTokensandreasoningto experimental decision calls and forward them to language-model-backed decisions. Language-model adapters keep reasoning disabled when omitted. Native decision providers warn when either setting is unsupported.3785b2e: fix(ai): remove orphaned reasoning, including consecutive summary and reasoning-file parts, when pruning tool callsab8eb61: Fix optional tools adding an incorrectundefinedmember to tool call, result, error, denied output, and execution event types.9d13c4d]0c2a9de]200c47f]v7.0.145Compare Source
Patch Changes
1c47fee]v7.0.144Compare Source
Patch Changes
60cc252: feat(perplexity): add decisions api support0ed59e2: FixstreamTextreturn types for reusable options andReturnTypeby moving low-memory streaming toexperimental_streamTextLowMemory. Replace experimentalstreamText({ experimental_lowMemory: true, ...options })calls withexperimental_streamTextLowMemory(options).60cc252]6b7fb8f]guybedford/es-module-lexer (es-module-lexer)
v3.0.4Compare Source
What's Changed
/after a postfix non-null assertion as division by @guybedford in #263Full Changelog: guybedford/es-module-lexer@3.0.3...3.0.4
v3.0.3Compare Source
What's Changed
Full Changelog: guybedford/es-module-lexer@3.0.2...3.0.3
actions/node-versions (node)
v24.22.1: 24.22.1Compare Source
Node.js 24.22.1
v24.22.0: 24.22.0Compare Source
Node.js 24.22.0
v24.21.0: 24.21.0Compare Source
Node.js 24.21.0
v24.20.0: 24.20.0Compare Source
Node.js 24.20.0
v24.19.0: 24.19.0Compare Source
Node.js 24.19.0
v24.18.1: 24.18.1Compare Source
Node.js 24.18.1
v24.18.0: 24.18.0Compare Source
Node.js 24.18.0
v24.17.0: 24.17.0Compare Source
Node.js 24.17.0
v24.16.0: 24.16.0Compare Source
Node.js 24.16.0
v24.15.0: 24.15.0Compare Source
Node.js 24.15.0
v24.14.1: 24.14.1Compare Source
Node.js 24.14.1
v24.14.0: 24.14.0Compare Source
Node.js 24.14.0
v24.13.1: 24.13.1Compare Source
Node.js 24.13.1
v24.13.0: 24.13.0Compare Source
Node.js 24.13.0
v24.12.0: 24.12.0Compare Source
Node.js 24.12.0
v24.11.1: 24.11.1Compare Source
Node.js 24.11.1
v24.11.0: 24.11.0Compare Source
Node.js 24.11.0
v24.10.0: 24.10.0Compare Source
Node.js 24.10.0
v24.9.0: 24.9.0Compare Source
Node.js 24.9.0
v24.8.0: 24.8.0Compare Source
Node.js 24.8.0
v24.7.0: 24.7.0Compare Source
Node.js 24.7.0
v24.6.0: 24.6.0Compare Source
Node.js 24.6.0
v24.5.0: 24.5.0Compare Source
Node.js 24.5.0
v24.4.1: 24.4.1Compare Source
Node.js 24.4.1
v24.4.0: 24.4.0Compare Source
Node.js 24.4.0
v24.3.0: 24.3.0Compare Source
Node.js 24.3.0
v24.2.0: 24.2.0Compare Source
Node.js 24.2.0
v24.1.0: 24.1.0Compare Source
Node.js 24.1.0
v24.0.2: 24.0.2Compare Source
Node.js 24.0.2
v24.0.1: 24.0.1Compare Source
Node.js 24.0.1
benjamincanac/nuxt-agent-discovery (nuxt-agent-discovery)
v0.8.0Compare Source
Features
Bug Fixes
useRuntimeConfigfromnitropack/runtimeon the server (#55) (c1a5310)app.baseURL(#58) (0371b57)sitemap.mdandllms.txt(#57) (fc025c9)pnpm/pnpm (pnpm)
v12.15.0: pnpm 12.15Compare Source
This release lets
pnpm-workspace.yamldelegate settings to other files and config dependencies withinclude, addslockfile.integrityTarget: tarand tar-registry support, accepts zstd-compressed registry responses, and honorsSOURCE_DATE_EPOCHinpnpm deployandpnpm install. It also rejects registry metadata that names a different package than the one requested and speeds up workspace installs and macOS file linking.Minor Changes
pnpm-workspace.yamlcan now delegate settings to other YAML files and to config dependencies through a newincludefield. Each source may define only the settings the root manifest delegates to it. Every setting has one owner. Commands that change settings write each one to the file that owns it. A relative path in an included file is relative to that file. See Splitting Settings Across Files.A config dependency supplies its settings through the YAML file named in the
pnpm.configfield of itspackage.json. The newbootConfigsetting sets the release-age and trust policy pnpm uses to install config dependencies and the pnpm version frompackageManager.Added the
lockfile.integrityTargetsetting. WithintegrityTarget: tar,pnpm-lock.yamlpins the hash of every package's uncompressed tar, so the lockfile no longer changes when a registry recompresses its tarballs or serves them as tars. pnpm learns a version's tar hash from the store or by downloading it once.pnpm audit signaturesties the tar hash to the signed.tgzintegrity.pnpm can now install from a registry that serves uncompressed tars with zstd or gzip content coding.
pnpm-lock.yamlrecords the hash of each tar. Declare such a registry withserverType: pnprinregistriesto keep tarball URLs out of the lockfile. See Tar registries.pnpm now decodes the content coding of tarball downloads itself. It rejects a zstd response whose window is larger than 8 MiB.
Added the
maxTarballUnpackedSizesetting. It caps the bytes the files of one package may unpack to, 4 GiB by default.Registry revisions now always pin the hash of the uncompressed tar, the original included. pnpm records an original selected through the revision protocol, for example with a
+r0specifier, asrevision: 0in the lockfile and fetches it from the registry's digest route. pnpm checks a revision's tar whether the registry sends it as a tar, gzip, or zstd. Revision metadata must list revision 0 and mark the selected revision. pnpm rejects incomplete revision metadata withERR_PNPM_MALFORMED_METADATA.pnpm now accepts zstd-compressed responses. Registries that serve zstd send package metadata in fewer bytes than with gzip, most of all the full metadata that settings such as
minimumReleaseAgeandtrustPolicyread.pnpm deployandpnpm installnow use theSOURCE_DATE_EPOCHenvironment variable as an upper bound for timestamps innode_modules/.modules.yamlandnode_modules/.pnpm-workspace-state-v1.json. With an equivalently prepared deploy target and an epoch no later than the timestamps that would otherwise be recorded, deploying the same project twice produces identical files #17171.pnpm update --interactivenow highlights the row under the cursor in cyan while keeping the colors of its version changes.Patch Changes
Security
pnpm now fails with
ERR_PNPM_REGISTRY_NAME_MISMATCHif a registry returns metadata for a package other than the one requested. Before, pnpm installed the package under the name in the metadata, soallowBuildsrules for the requested package did not apply to it.minimumReleaseAgeExcludePruneandtrustPolicyExcludePrunenow keep exclusions for resolved configuration dependencies and their transitive dependencies #17142.Resolving dependencies
When
pnpm installresolves a dependency again, it now reuses a version that the install already resolved for the same package, as a fresh install does. Before, it kept the version the lockfile pinned and added a second copy of the package. A locked version still stays when nothing else in the install prefers another version. To pin a transitive dependency on purpose, useoverrides#17084.When another workspace project adds a different version of a package, a project's auto-installed peer on that package now moves to the version a fresh install picks. It used to stay on its locked version while any other project still accepted that version #17058.
A package that lists the same dependency in
dependenciesand as an optional peer now gets the peer bound when a project adds a provider for it later. The lockfile now records every peer a package declares, including one its own dependency supplies #17056.pnpm install --prodandpnpm deploy --prodno longer drop a dependency that a package declares both as an optional peer and as its own dependency, when the package resolved it as its own dependency and a dev dependency provides the same package under another alias.pnpm installwith an existing lockfile and a secondpnpm dedupenow keep optional peer bindings that point into a dependency cycle or back into the dependent package. Before, the second run dropped the optional peer binding from the lockfile snapshot key.pnpm installandpnpm dedupenow preserve own-dependency and peer-dependency bindings when reusing a lockfile whose peer suffixes were hashed bypeersSuffixMaxLength.Upgrading a direct dependency in one workspace project now refreshes matching transitive pins in sibling projects during the same
pnpm installpass.With
resolvePeersFromWorkspaceRoot: false, a workspace project no longer binds a peer to a version that only another project's dependencies provide. pnpm now auto-installs a version that satisfies the peer range for that project. Before, the project got a version outside the range, with no peer warning.pnpm install,pnpm add, andpnpm updatenow reuse the lockfile's resolution for dependencies that take part in a dependency cycle, such asmllyandpkg-types. They re-resolved those packages and everything that depends on them from the registry before pnpm/tasks#130.pnpm now measures a
pnpm.overridesentry written as aworkspace:path, such asworkspace:./packages/foo, from the directory holdingpnpm-workspace.yaml. It used to be measured from each package the override rewrote. The install then linked a directory that does not exist, or failed if workspace packages were injected #17010.pnpm installnow removes config dependencies that are no longer declared, including when the entireconfigDependenciessetting is removed. Frozen installs reject a lockfile that still records removed config dependencies.pnpm install --update-checksumsnow re-resolves every locked package and records the integrity the registry reports now.pnpm addandpnpm installnow acceptgist:<id>dependencies and GitHub Gist URLs, and install them from the gist's archive.pnpm pkg fixnormalizes agist:repository the waynpm pkg fixdoes,pnpm licenseslinks a gist package to its gist page, andpnpm sbomreports the repository of a package whoserepositoryfield is agist:shorthand.pnpm addnow reads the package name correctly from a tarball URL under a registry URL that has a path, such ashttps://example.com/npm/, and installs a registry tarball URL with a malformed percent escape as a plain tarball URL. Before, the registry path became part of the name, so a scoped package failed withERR_PNPM_INVALID_PACKAGE_NAME.With
minimumReleaseAgeset, pnpm now revalidates a package's cached full metadata with a single ETag request so an unchanged registry answers with304, even when the registry does not list a publish time for every version. Previously, pnpm downloaded that metadata again whenever the cached copy was older thanminimumReleaseAge. WithresolutionModeset tolowest-directortime-based, pnpm also reuses that metadata across every workspace project that depends on the package.When pnpm revalidates cached registry metadata, it now sends
If-Modified-Sincewhen the registry's modification time is a date without a time, and no longer crashes when the modification time is before 1970.Added protocol versioning between the pnpm client and pnpr server, verified applied resolution policies in resolution responses, and preserved structured error codes across the wire.
Performance
Sped up
pnpm installon macOS. On a 12-core Mac, installing 1352 packages from a warm store took 1.3 seconds, down from 2.2. pnpm now writes package files intonode_moduleswith 4 threads on macOS, whatever the number of CPU cores. Set thePNPM_MACOS_LINK_THREADSenvironment variable to use a different number of threads, or to0to write files with the threads pnpm uses for the rest of the install.pnpm installis faster and uses less memory in large workspaces withsharedWorkspaceLockfile: false. Each project's install no longer reads the manifests of every other workspace project again. Installs that wait for their workspace dependencies now count towardworkspaceConcurrency#16966.Sped up workspace project discovery, dependency resolution, lockfile up-to-date checks, and peer dependency checks in large workspaces #16839 pnpm/tasks#9. On a workspace with 6,833 projects, the lockfile up-to-date check uses about 1 second less CPU time. The peer dependency check at the end of an install now checks linked workspace projects against the manifests already in memory, without reading each
package.jsonagain.Sped up bin linking and build planning during
pnpm install. Package binary targets and shebang runtimes are now precalculated during tarball extraction and served inpnprregistry metadata alongside verifiedrequiresBuild, tarball size, and file-count metadata.Lowered peak memory when pnpm downloads many packuments, such as during lockfile verification with
trustPolicyon Linux. In one 1,800-entry workspace, a lockfile update now peaks at 1.8 to 2.0 GB. It peaked at 2.6 to 3.7 GB before #17020.pnpm installin a Cargo workspace skips crates that an earlier install already unpacked into the store. Before, a repeat install processed every crate in `Cargo.lockConfiguration
📅 Schedule: (UTC)
* 0-3 * * 1)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.