Skip to content

chore(deps): bump the root-minor-patch group across 1 directory with 31 updates - #74

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/root-minor-patch-b77966bbca
Open

chore(deps): bump the root-minor-patch group across 1 directory with 31 updates#74
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/root-minor-patch-b77966bbca

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 28, 2026

Copy link
Copy Markdown
Contributor

Bumps the root-minor-patch group with 29 updates in the / directory:

Package From To
@ai-sdk/amazon-bedrock 3.0.101 3.0.111
@ai-sdk/google 2.0.74 2.0.85
@ai-sdk/openai 2.0.106 2.0.115
@anthropic-ai/sdk 0.82.0 0.115.0
@ast-grep/napi 0.42.2 0.45.0
@fastify/cors 11.2.0 11.3.0
@fastify/static 9.1.3 9.3.0
@fastify/websocket 11.2.0 11.3.0
@langfuse/client 5.5.3 5.9.1
@langfuse/otel 5.5.3 5.9.1
@lingxiao-office/sdk 1.0.1 1.0.7
@modelcontextprotocol/sdk 1.29.0 1.30.0
@opentelemetry/sdk-node 0.219.0 0.221.0
acorn 8.16.0 8.18.0
ai 5.0.198 5.0.221
fastify 5.8.5 5.10.0
openai 6.37.0 6.49.0
pdfkit 0.18.0 0.19.1
playwright 1.60.0 1.62.0
proxy-agent 8.0.1 8.0.2
react 19.2.6 19.2.8
@types/react 19.2.14 19.2.17
react-virtuoso 4.18.7 4.18.11
sharp 0.34.5 0.35.3
string-width 8.2.1 8.2.2
undici 8.2.0 8.9.0
@types/node 25.7.0 25.9.5
electron 42.4.1 42.7.1
tsx 4.22.4 4.23.1

Updates @ai-sdk/amazon-bedrock from 3.0.101 to 3.0.111

Changelog

Sourced from @​ai-sdk/amazon-bedrock's changelog.

3.0.111

Patch Changes

  • Updated dependencies [0ab9755]
  • Updated dependencies [0ab9755]
  • Updated dependencies [0ab9755]
    • @​ai-sdk/anthropic@​2.0.91

3.0.110

Patch Changes

  • Updated dependencies [db28434]
    • @​ai-sdk/anthropic@​2.0.90

3.0.109

Patch Changes

  • 1b0e540: Use native structured output on supported Bedrock Anthropic models when thinking is enabled instead of forcing a JSON tool call.
  • a5065c5: Pass through s3:// image URLs to Amazon Bedrock Converse as S3 image sources instead of downloading them.
  • 503e809: fix(provider/amazon-bedrock): omit unsigned reasoning from conversation history
  • de443c2: Sanitize invalid characters in replayed tool call names before sending conversation history to Amazon Bedrock.
  • Updated dependencies [1b0e540]
  • Updated dependencies [5bb3ae4]
    • @​ai-sdk/anthropic@​2.0.89

3.0.108

Patch Changes

  • Updated dependencies [30c69e6]
    • @​ai-sdk/anthropic@​2.0.88

3.0.107

Patch Changes

  • Updated dependencies [2fd6076]
  • Updated dependencies [5082ee8]
    • @​ai-sdk/provider-utils@​3.0.30
    • @​ai-sdk/anthropic@​2.0.87

3.0.106

Patch Changes

  • Updated dependencies [c6e1d1a]
    • @​ai-sdk/provider-utils@​3.0.29

... (truncated)

Commits
  • 64bf351 Version Packages (#17909)
  • 96f8997 Version Packages (#17824)
  • db28434 [v5.0] fix: incorrect capability defaults for unrecognized Claude model IDs (...
  • de65b8d Version Packages (#17754)
  • de443c2 [v5.0] fix: prevent invalid hallucinated tool names from crashing Bedrock con...
  • 1b0e540 [v5.0] fix: Bedrock Claude structured outputs fail with thinking on supported...
  • 503e809 [v5.0] fix: prevent Amazon Bedrock tool continuations from replaying unsigned...
  • a5065c5 [v5.0] fix: Amazon Bedrock S3 image URLs are rejected instead of passed throu...
  • cbf22fc Version Packages (#17572)
  • 5dcc0e0 Version Packages (#17463)
  • Additional commits viewable in compare view

Updates @ai-sdk/anthropic from 2.0.81 to 2.0.91

Changelog

Sourced from @​ai-sdk/anthropic's changelog.

2.0.91

Patch Changes

  • 0ab9755: feat (provider/anthropic): support fallbacks 'default' mode, which routes safety classifier refusals to Anthropic's recommended fallback model (adds the server-side-fallback-2026-07-01 beta automatically)
  • 0ab9755: feat (provider/anthropic): support mid-conversation tool changes via the toolChanges system message provider option, emitting tool_addition/tool_removal content blocks and the mid-conversation-tool-changes-2026-07-01 beta
  • 0ab9755: feat (provider/anthropic): add claude-opus-5 model id with frontier-tier capabilities (128k output tokens, structured output, adaptive thinking, xhigh effort, sampling parameter rejection, thinking-disabled only at effort high or below)

2.0.90

Patch Changes

  • db28434: fix (provider/anthropic): use current-generation capability defaults for unrecognized Claude model IDs while retaining conservative defaults for legacy Claude and non-Claude models.

2.0.89

Patch Changes

  • 1b0e540: Use native structured output on supported Bedrock Anthropic models when thinking is enabled instead of forcing a JSON tool call.
  • 5bb3ae4: Warn when an unknown model uses the default 4096 max output token limit.

2.0.88

Patch Changes

  • 30c69e6: fix(provider/anthropic): warn when parallel tool use is requested with JSON tool structured output

2.0.87

Patch Changes

  • 5082ee8: fix(provider/anthropic): preserve web search citations when replaying assistant messages
  • Updated dependencies [2fd6076]
    • @​ai-sdk/provider-utils@​3.0.30

2.0.86

Patch Changes

  • Updated dependencies [c6e1d1a]
    • @​ai-sdk/provider-utils@​3.0.29

2.0.85

Patch Changes

  • f236836: feat (provider/anthropic): add claude-sonnet-5 model id

2.0.84

... (truncated)

Commits

Updates @ai-sdk/google from 2.0.74 to 2.0.85

Changelog

Sourced from @​ai-sdk/google's changelog.

2.0.85

Patch Changes

  • 5e9957e: feat(provider/google): default unknown Gemini model IDs to the newest supported capabilities

2.0.84

Patch Changes

  • b05bffb: feat(google): add gemini-3.6-flash and gemini-3.5-flash-lite models

2.0.83

Patch Changes

  • e5f1c62: fix(provider/google): associate multiple code execution results with their tool call

2.0.82

Patch Changes

  • Updated dependencies [2fd6076]
    • @​ai-sdk/provider-utils@​3.0.30

2.0.81

Patch Changes

  • c6552b9: fix(provider/google): forward Vertex-only imageConfig options (personGeneration, prominentPeople, imageOutputOptions)

2.0.80

Patch Changes

  • Updated dependencies [c6e1d1a]
    • @​ai-sdk/provider-utils@​3.0.29

2.0.79

Patch Changes

  • af229e7: Expand standalone Google threshold provider options into safety settings.

2.0.78

Patch Changes

  • 8260f89: fix(provider/google): include usageMetadata in providerMetadata for non-streaming generate

... (truncated)

Commits
  • 96f8997 Version Packages (#17824)
  • 5e9957e [v5.0] feat: use forward-compatible capability defaults for unknown Google Ge...
  • 93c5061 Version Packages (#17607)
  • b05bffb backport (v5): feat(google): add gemini-3.6-flash and `gemini-3.5-flash-lit...
  • d762809 Version Packages (#17481)
  • e5f1c62 [v5.0] fix: handle multiple Gemini code execution results for one executable ...
  • 5dcc0e0 Version Packages (#17463)
  • 60080e9 Version Packages (#17322)
  • c6552b9 Backport: Backport: fix(provider/google): forward Vertex-only imageConfig opt...
  • 54a73aa Version Packages (#17208)
  • Additional commits viewable in compare view

Updates @ai-sdk/openai from 2.0.106 to 2.0.115

Changelog

Sourced from @​ai-sdk/openai's changelog.

2.0.115

Patch Changes

  • 11a02d9: Apply reasoning, service tier, and image defaults to recognizable future OpenAI model family versions.

2.0.114

Patch Changes

  • Updated dependencies [2fd6076]
    • @​ai-sdk/provider-utils@​3.0.30

2.0.113

Patch Changes

  • 21eef03: Send null content for tool-call-only assistant messages.

2.0.112

Patch Changes

  • Updated dependencies [c6e1d1a]
    • @​ai-sdk/provider-utils@​3.0.29

2.0.111

Patch Changes

  • b4f8362: feat(provider/openai): add GPT-5.6 reasoning and prompt cache controls
  • 8549807: feat(provider/openai,provider/gateway): add gpt-5.6 model ids

2.0.110

Patch Changes

  • Updated dependencies [b85c4fb]
    • @​ai-sdk/provider-utils@​3.0.28

2.0.109

Patch Changes

  • f8e6a5c: feat(openai): add orchestration token usage details to Responses API usage

2.0.108

Patch Changes

... (truncated)

Commits

Updates @anthropic-ai/sdk from 0.82.0 to 0.115.0

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk: v0.115.0

0.115.0 (2026-07-24)

Full Changelog: sdk-v0.114.0...sdk-v0.115.0

Features

  • api: add claude-opus-5 model (cdd3606)
  • api: add tool addition/removal blocks and tool_change events (cdd3606)
  • api: expand client-side fallback credit token types and add server-side fallbacks default option (cdd3606)

Bug Fixes

  • client: release abort listeners when requests settle (#1129) (b85e902)

sdk: v0.114.0

0.114.0 (2026-07-23)

Full Changelog: sdk-v0.113.0...sdk-v0.114.0

Features

  • api: add new stop reason 'model_context_window_exceeded' (1ec71c1)

sdk: v0.113.0

0.113.0 (2026-07-22)

Full Changelog: sdk-v0.112.5...sdk-v0.113.0

Features

  • api: add support for Managed Agents model effort, initial session events, and threads delta streaming (83fef1e)

sdk: v0.112.5

0.112.5 (2026-07-21)

Full Changelog: sdk-v0.112.4...sdk-v0.112.5

Chores

  • api: add support for new refusal category (479efe8)
  • internal: codegen related update (830fb74)

sdk: v0.112.4

0.112.4 (2026-07-20)

Full Changelog: sdk-v0.112.3...sdk-v0.112.4

Bug Fixes

... (truncated)

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.115.0 (2026-07-24)

Full Changelog: sdk-v0.114.0...sdk-v0.115.0

Features

  • api: add claude-opus-5 model (cdd3606)
  • api: add tool addition/removal blocks and tool_change events (cdd3606)
  • api: expand client-side fallback credit token types and add server-side fallbacks default option (cdd3606)

Bug Fixes

  • client: release abort listeners when requests settle (#1129) (b85e902)

0.114.0 (2026-07-23)

Full Changelog: sdk-v0.113.0...sdk-v0.114.0

Features

  • api: add new stop reason 'model_context_window_exceeded' (1ec71c1)

0.113.0 (2026-07-22)

Full Changelog: sdk-v0.112.5...sdk-v0.113.0

Features

  • api: add support for Managed Agents model effort, initial session events, and threads delta streaming (83fef1e)

0.112.5 (2026-07-21)

Full Changelog: sdk-v0.112.4...sdk-v0.112.5

Chores

  • api: add support for new refusal category (479efe8)
  • internal: codegen related update (830fb74)

0.112.4 (2026-07-20)

Full Changelog: sdk-v0.112.3...sdk-v0.112.4

Bug Fixes

  • aws: preserve AWS options and auth mode across withOptions() (#214) (3f7665c)

Chores

... (truncated)

Commits
  • 3b45cd3 chore: release main
  • f298e9a feat(api): add claude-opus-5 model
  • ce8e54b fix(client): release abort listeners when requests settle (#1129)
  • 2d314b4 chore: release main
  • 3d051df feat(api): add new stop reason 'model_context_window_exceeded'
  • 4414d47 chore: release main
  • 1ec5566 feat(api): add support for Managed Agents model effort, initial session event...
  • c58a55b chore: release main
  • 2fb7da5 chore(api): add support for new refusal category
  • d6ffc3c chore(internal): codegen related update
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​anthropic-ai/sdk since your current version.


Updates @ast-grep/napi from 0.42.2 to 0.45.0

Release notes

Sourced from @​ast-grep/napi's releases.

0.45.0

0.44.1

... (truncated)

Changelog

Sourced from @​ast-grep/napi's changelog.

0.45.0

0.44.1

4 July 2026

... (truncated)

Commits

Updates @fastify/cors from 11.2.0 to 11.3.0

Release notes

Sourced from @​fastify/cors's releases.

v11.3.0

What's Changed

New Contributors

Full Changelog: fastify/fastify-cors@v11.2.0...v11.3.0

Commits
  • 2c60caa Bumped v11.3.0
  • cf4986e chore: bump @​types/node in the dev-dependencies-typescript group (#411)
  • 816d054 test: remove remaining tap-style assertions from vary tests (#410)
  • 20507ea chore(package.json): fix delvedor's personal url (#409)
  • 6fe85c4 docs(readme): update request origin link (#408)
  • 57bdc65 chore: bump fastify-plugin from 5.1.0 to 6.0.0 in the dependencies group (#407)
  • a8ae57d chore: update depedabot setting
  • 4d34798 chore(.gitattributes): retain binary file eol style (#402)
  • 675ebef refactor(types): migrate from tsd to tstyche (#403)
  • ef25e0b ci: add lock-threads workflow (#401)
  • Additional commits viewable in compare view

Updates @fastify/static from 9.1.3 to 9.3.0

Release notes

Sourced from @​fastify/static's releases.

v9.3.0

What's Changed

New Contributors

Full Changelog: fastify/fastify-static@v9.2.0...v9.3.0

v9.2.0

What's Changed

New Contributors

Full Changelog: fastify/fastify-static@v9.1.3...v9.2.0

Commits
  • ad05a27 Bumped v9.3.0
  • 58811db chore: update fastify-plugin dependency to version 6.0.0 (#594)
  • a343813 Bumped v9.2.0
  • b94c725 docs: clarify precompressed allowedPath behavior (#593)
  • 684a4ea docs: fix broken links (#591)
  • 26e7042 chore: bump @​types/node in the dev-dependencies-typescript group (#592)
  • 070912a chore: bump @​fastify/compress from 8.3.1 to 9.0.0 (#590)
  • 2f792ea chore: update depedabot setting
  • 5b6043c fix: propagate return value from fastify.errorHandler (#582)
  • 040307a refactor(types): migrate from tsd to tstyche (#579)
  • Additional commits viewable in compare view

Updates @fastify/websocket from 11.2.0 to 11.3.0

Release notes

Sourced from @​fastify/websocket's releases.

v11.3.0

What's Changed

…31 updates

Bumps the root-minor-patch group with 29 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@ai-sdk/amazon-bedrock](https://github.com/vercel/ai/tree/HEAD/packages/amazon-bedrock) | `3.0.101` | `3.0.111` |
| [@ai-sdk/google](https://github.com/vercel/ai/tree/HEAD/packages/google) | `2.0.74` | `2.0.85` |
| [@ai-sdk/openai](https://github.com/vercel/ai/tree/HEAD/packages/openai) | `2.0.106` | `2.0.115` |
| [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.82.0` | `0.115.0` |
| [@ast-grep/napi](https://github.com/ast-grep/ast-grep) | `0.42.2` | `0.45.0` |
| [@fastify/cors](https://github.com/fastify/fastify-cors) | `11.2.0` | `11.3.0` |
| [@fastify/static](https://github.com/fastify/fastify-static) | `9.1.3` | `9.3.0` |
| [@fastify/websocket](https://github.com/fastify/fastify-websocket) | `11.2.0` | `11.3.0` |
| [@langfuse/client](https://github.com/langfuse/langfuse-js/tree/HEAD/packages/client) | `5.5.3` | `5.9.1` |
| [@langfuse/otel](https://github.com/langfuse/langfuse-js/tree/HEAD/packages/otel) | `5.5.3` | `5.9.1` |
| [@lingxiao-office/sdk](https://github.com/hexian2001/lingxiao-backend/tree/HEAD/packages/sdk) | `1.0.1` | `1.0.7` |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.29.0` | `1.30.0` |
| [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.219.0` | `0.221.0` |
| [acorn](https://github.com/acornjs/acorn) | `8.16.0` | `8.18.0` |
| [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `5.0.198` | `5.0.221` |
| [fastify](https://github.com/fastify/fastify) | `5.8.5` | `5.10.0` |
| [openai](https://github.com/openai/openai-node) | `6.37.0` | `6.49.0` |
| [pdfkit](https://github.com/foliojs/pdfkit) | `0.18.0` | `0.19.1` |
| [playwright](https://github.com/microsoft/playwright) | `1.60.0` | `1.62.0` |
| [proxy-agent](https://github.com/TooTallNate/proxy-agents/tree/HEAD/packages/proxy-agent) | `8.0.1` | `8.0.2` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.6` | `19.2.8` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.14` | `19.2.17` |
| [react-virtuoso](https://github.com/petyosi/react-virtuoso/tree/HEAD/packages/react-virtuoso) | `4.18.7` | `4.18.11` |
| [sharp](https://github.com/lovell/sharp) | `0.34.5` | `0.35.3` |
| [string-width](https://github.com/sindresorhus/string-width) | `8.2.1` | `8.2.2` |
| [undici](https://github.com/nodejs/undici) | `8.2.0` | `8.9.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.7.0` | `25.9.5` |
| [electron](https://github.com/electron/electron) | `42.4.1` | `42.7.1` |
| [tsx](https://github.com/privatenumber/tsx) | `4.22.4` | `4.23.1` |



Updates `@ai-sdk/amazon-bedrock` from 3.0.101 to 3.0.111
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/amazon-bedrock@3.0.111/packages/amazon-bedrock/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/amazon-bedrock@3.0.111/packages/amazon-bedrock)

Updates `@ai-sdk/anthropic` from 2.0.81 to 2.0.91
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/anthropic@2.0.91/packages/anthropic/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/anthropic@2.0.91/packages/anthropic)

Updates `@ai-sdk/google` from 2.0.74 to 2.0.85
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/google@2.0.85/packages/google/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/google@2.0.85/packages/google)

Updates `@ai-sdk/openai` from 2.0.106 to 2.0.115
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/openai@2.0.115/packages/openai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/openai@2.0.115/packages/openai)

Updates `@anthropic-ai/sdk` from 0.82.0 to 0.115.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.82.0...sdk-v0.115.0)

Updates `@ast-grep/napi` from 0.42.2 to 0.45.0
- [Release notes](https://github.com/ast-grep/ast-grep/releases)
- [Changelog](https://github.com/ast-grep/ast-grep/blob/main/CHANGELOG.md)
- [Commits](ast-grep/ast-grep@0.42.2...0.45.0)

Updates `@fastify/cors` from 11.2.0 to 11.3.0
- [Release notes](https://github.com/fastify/fastify-cors/releases)
- [Commits](fastify/fastify-cors@v11.2.0...v11.3.0)

Updates `@fastify/static` from 9.1.3 to 9.3.0
- [Release notes](https://github.com/fastify/fastify-static/releases)
- [Commits](fastify/fastify-static@v9.1.3...v9.3.0)

Updates `@fastify/websocket` from 11.2.0 to 11.3.0
- [Release notes](https://github.com/fastify/fastify-websocket/releases)
- [Commits](fastify/fastify-websocket@v11.2.0...v11.3.0)

Updates `@langfuse/client` from 5.5.3 to 5.9.1
- [Release notes](https://github.com/langfuse/langfuse-js/releases)
- [Changelog](https://github.com/langfuse/langfuse-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/langfuse/langfuse-js/commits/v5.9.1/packages/client)

Updates `@langfuse/otel` from 5.5.3 to 5.9.1
- [Release notes](https://github.com/langfuse/langfuse-js/releases)
- [Changelog](https://github.com/langfuse/langfuse-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/langfuse/langfuse-js/commits/v5.9.1/packages/otel)

Updates `@langfuse/tracing` from 5.5.3 to 5.9.1
- [Release notes](https://github.com/langfuse/langfuse-js/releases)
- [Changelog](https://github.com/langfuse/langfuse-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/langfuse/langfuse-js/commits/v5.9.1/packages/tracing)

Updates `@lingxiao-office/sdk` from 1.0.1 to 1.0.7
- [Changelog](https://github.com/hexian2001/lingxiao-backend/blob/main/docs/release-npm.md)
- [Commits](https://github.com/hexian2001/lingxiao-backend/commits/HEAD/packages/sdk)

Updates `@modelcontextprotocol/sdk` from 1.29.0 to 1.30.0
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@v1.29.0...1.30.0)

Updates `@opentelemetry/sdk-node` from 0.219.0 to 0.221.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.219.0...experimental/v0.221.0)

Updates `acorn` from 8.16.0 to 8.18.0
- [Commits](acornjs/acorn@8.16.0...8.18.0)

Updates `ai` from 5.0.198 to 5.0.221
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/ai@5.0.221/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@5.0.221/packages/ai)

Updates `fastify` from 5.8.5 to 5.10.0
- [Release notes](https://github.com/fastify/fastify/releases)
- [Commits](fastify/fastify@v5.8.5...v5.10.0)

Updates `openai` from 6.37.0 to 6.49.0
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/main/CHANGELOG.md)
- [Commits](openai/openai-node@v6.37.0...v6.49.0)

Updates `pdfkit` from 0.18.0 to 0.19.1
- [Release notes](https://github.com/foliojs/pdfkit/releases)
- [Changelog](https://github.com/foliojs/pdfkit/blob/master/CHANGELOG.md)
- [Commits](foliojs/pdfkit@v0.18.0...v0.19.1)

Updates `playwright` from 1.60.0 to 1.62.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.60.0...v1.62.0)

Updates `proxy-agent` from 8.0.1 to 8.0.2
- [Release notes](https://github.com/TooTallNate/proxy-agents/releases)
- [Changelog](https://github.com/TooTallNate/proxy-agents/blob/main/packages/proxy-agent/CHANGELOG.md)
- [Commits](https://github.com/TooTallNate/proxy-agents/commits/proxy-agent@8.0.2/packages/proxy-agent)

Updates `react` from 19.2.6 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react)

Updates `@types/react` from 19.2.14 to 19.2.17
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-virtuoso` from 4.18.7 to 4.18.11
- [Release notes](https://github.com/petyosi/react-virtuoso/releases)
- [Changelog](https://github.com/petyosi/react-virtuoso/blob/main/packages/react-virtuoso/CHANGELOG.md)
- [Commits](https://github.com/petyosi/react-virtuoso/commits/HEAD/packages/react-virtuoso)

Updates `sharp` from 0.34.5 to 0.35.3
- [Release notes](https://github.com/lovell/sharp/releases)
- [Commits](lovell/sharp@v0.34.5...v0.35.3)

Updates `string-width` from 8.2.1 to 8.2.2
- [Release notes](https://github.com/sindresorhus/string-width/releases)
- [Commits](sindresorhus/string-width@v8.2.1...v8.2.2)

Updates `undici` from 8.2.0 to 8.9.0
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v8.2.0...v8.9.0)

Updates `@types/node` from 25.7.0 to 25.9.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/react` from 19.2.14 to 19.2.17
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `electron` from 42.4.1 to 42.7.1
- [Release notes](https://github.com/electron/electron/releases)
- [Commits](electron/electron@v42.4.1...v42.7.1)

Updates `tsx` from 4.22.4 to 4.23.1
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.22.4...v4.23.1)

---
updated-dependencies:
- dependency-name: "@ai-sdk/amazon-bedrock"
  dependency-version: 3.0.111
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: "@ai-sdk/anthropic"
  dependency-version: 2.0.91
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: "@ai-sdk/google"
  dependency-version: 2.0.85
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: "@ai-sdk/openai"
  dependency-version: 2.0.115
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.115.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@ast-grep/napi"
  dependency-version: 0.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@fastify/cors"
  dependency-version: 11.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@fastify/static"
  dependency-version: 9.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@fastify/websocket"
  dependency-version: 11.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@langfuse/client"
  dependency-version: 5.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@langfuse/otel"
  dependency-version: 5.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@langfuse/tracing"
  dependency-version: 5.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@lingxiao-office/sdk"
  dependency-version: 1.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@opentelemetry/sdk-node"
  dependency-version: 0.221.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: acorn
  dependency-version: 8.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: ai
  dependency-version: 5.0.221
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: fastify
  dependency-version: 5.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: openai
  dependency-version: 6.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: pdfkit
  dependency-version: 0.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: playwright
  dependency-version: 1.62.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: proxy-agent
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: react
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: "@types/react"
  dependency-version: 19.2.17
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: react-virtuoso
  dependency-version: 4.18.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: sharp
  dependency-version: 0.35.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: string-width
  dependency-version: 8.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: undici
  dependency-version: 8.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@types/node"
  dependency-version: 25.9.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: "@types/react"
  dependency-version: 19.2.17
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: root-minor-patch
- dependency-name: electron
  dependency-version: 42.7.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
- dependency-name: tsx
  dependency-version: 4.23.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: root-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jul 28, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@github-actions

Copy link
Copy Markdown

GLM 审查信息

结论

此 PR 为 Dependabot 批量依赖升级,包含多个 0.x 语义化版本的 minor bump,存在较高回归风险。建议在合并前针对关键包进行充分验证,尤其是 @anthropic-ai/sdk(跨 33 个 minor 版本)和 sharp(minor bump 涉及原生模块)。

发现

  1. @anthropic-ai/sdk 0.82.0 → 0.115.0 — 高风险

    • 这是 0.x 包,minor 版本允许包含 breaking change。此次跨越 33 个 minor 版本,changelog 中可见多项 API 变更:
      • 新增 stop reason model_context_window_exceeded(0.114.0)— 如果代码中对 stop reason 做了穷举分支(switch/else),可能遗漏此新值导致未处理路径。
      • 新增 tool_addition / tool_removal content block 类型和 tool_change 事件(0.115.0)— 如果代码对 content block 类型做穷举处理,可能需要适配。
      • 新增 refusal category(0.112.5)— 如果代码处理 refusal 分类,可能需要更新。
    • 建议:搜索代码中所有 stop_reasoncontent_blockrefusal 相关的类型判断/分支逻辑,确认是否需要适配。
  2. sharp 0.34.5 → 0.35.3 — 中风险

    • sharp 是原生模块(依赖 libvips),minor bump 可能涉及预编译二进制兼容性变更。0.35 版本可能要求更高的 Node.js 版本或不同的原生依赖。
    • 建议:确认 CI 环境和目标运行环境的 Node.js 版本满足 sharp 0.35 的要求;验证图片处理功能(缩放、格式转换等)正常工作。
  3. @ast-grep/napi 0.42.2 → 0.45.0 — 中风险

    • changelog 中 fix: stop using ignore files outside rule_dirs(#2803)改变了 ignore 文件的行为,如果项目依赖 .gitignore 或其他 ignore 文件来控制 ast-grep 扫描范围,可能导致扫描结果变化(文件增多或减少)。
    • feat: deprecate the sg command(#2843)— 如果项目通过 CLI 调用 sg 命令,需确认是否仍可用。
    • 建议:验证代码搜索/分析功能的结果与升级前一致。
  4. pdfkit 0.18.0 → 0.19.1 — 中风险

    • 0.x 包 minor bump,PDF 生成可能有 API 或字体渲染行为变化。
    • 建议:验证 PDF 生成功能(特别是中文字体、表格、图片嵌入)输出正确。
  5. @opentelemetry/sdk-node 0.219.0 → 0.221.0 — 低风险

    • 0.x 包,但跨度较小。OpenTelemetry SDK 升级可能影响 trace/span 导出行为。
    • 建议:确认 tracing 数据正常上报。

建议测试

  • Anthropic SDK 集成:针对 Claude 模型调用,测试流式响应、工具调用、stop reason 处理、refusal 场景,确认无未处理的枚举值。
  • 图片处理:运行 sharp 相关的图片缩放/裁剪/格式转换测试,覆盖 PNG、JPEG、WebP 等格式。
  • 代码搜索/AST 分析:使用 ast-grep 执行项目中的代码搜索规则,对比升级前后结果集是否一致。
  • PDF 生成:生成包含中文文本、图片、多页的 PDF,验证输出正确。
  • 端到端冒烟:启动服务,执行核心 AI 对话流程(包括工具调用和流式输出),确认无运行时错误。

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants