Skip to content

chore(deps): bump the node-dependencies group with 33 updates - #128

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/node-dependencies-291ffb8081
Closed

chore(deps): bump the node-dependencies group with 33 updates#128
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/node-dependencies-291ffb8081

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 31, 2026

Copy link
Copy Markdown
Contributor

Bumps the node-dependencies group with 33 updates:

Package From To
@biomejs/biome 2.3.10 2.5.6
@nx/js 22.5.2 23.1.0
@semantic-release/changelog 6.0.3 7.0.0
@semantic-release/git 10.0.1 11.0.1
@types/node 22.19.3 26.1.2
fast-check 4.5.2 4.9.0
nx 22.5.2 23.1.0
semantic-release 25.0.2 25.0.8
tsx 4.21.0 4.23.1
typedoc 0.28.15 0.28.20
typescript 5.9.3 7.0.2
@ai-sdk/mcp 1.0.1 2.0.18
@inquirer/prompts 8.1.0 8.5.2
@modelcontextprotocol/sdk 1.27.0 1.30.0
ai 6.0.3 7.0.40
commander 14.0.2 15.0.0
cosmiconfig 9.0.0 9.0.2
zod 4.2.1 4.4.3
@ai-sdk/anthropic 3.0.1 4.0.23
@asteasolutions/zod-to-openapi 8.4.1 9.1.0
@google/model-viewer 4.1.0 4.3.1
@scalar/fastify-api-reference 1.44.26 1.63.0
dotenv 17.3.1 17.4.2
three 0.172.0 0.185.1
@playwright/test 1.58.2 1.62.0
@actions/core 2.0.1 3.0.1
@ai-sdk/google 3.0.30 4.0.26
@linear/sdk 68.1.0 88.3.0
@playwright/mcp 0.0.68 0.0.78
ai-sdk-ollama 3.0.0 4.1.0
glob 13.0.0 13.0.6
@astrojs/starlight 0.41.4 0.41.5
astro 7.1.3 7.1.4

Updates @biomejs/biome from 2.3.10 to 2.5.6

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.6

2.5.6

Patch Changes

  • #11035 0e4b03b Thanks @​ematipico! - Fixed a performance regression in noMisusedPromises that caused type inference to run repeatedly while linting a file.

  • #11043 22ec076 Thanks @​denbezrukov! - Fixed CSS formatting for multiline function arguments preceded by comments:

     .example {
       value: outer(
         1,
         /* comment */
         nested(
    -      first,
    -      second
    -    )
    +        first,
    +        second
    +      )
       );
     }
  • #11007 c9acb25 Thanks @​BTF-Kabir-2020! - Fixed #9195: useHookAtTopLevel no longer reports hooks in named forwardRef components that receive a ref parameter.

  • #10152 50a9bd8 Thanks @​Zelys-DFKH! - Fixed #10131: Biome now correctly parses curried arrow functions in ternary consequents when the inner arrow's parameters use a destructuring pattern, e.g. cond ? (x) => ({ a, b }) => body : alt.

  • #11105 8ffe2b9 Thanks @​dadavidtseng! - Fixed #11092: The noUselessTernary quick fix now preserves operator spacing when simplifying or inverting boolean ternary expressions.

  • #10533 5809875 Thanks @​Mokto! - Fixed #10515: biome check --write was not idempotent on Svelte files — multi-line template literals in <script> blocks and block comments in <style> blocks gained an extra indent level on every run.

  • #11040 0abb620 Thanks @​Mokto! - Fixed an issue where the HTML formatter would duplicate a comment placed directly before a Svelte {@const ...} or {@debug ...} block. The duplication compounded on every subsequent --write, causing the file to grow exponentially.

  • #10858 6d18204 Thanks @​ruidosujeira! - Fixed #10839: Svelte {#each} array destructuring no longer includes spaces inside square brackets, and multiline bind function expressions now indent their getter, setter, and function body correctly.

  • #11009 2c36626 Thanks @​ematipico! - Improved the accuracy of type-aware lint rules by resolving more inferred types. For example, noFloatingPromises now detects floating Promises returned by aliased callbacks and arrays of Promises created by async mapping callbacks.

    The following statements are now reported:

    type AsyncCallback = () => Promise<void>;
    declare const callback: AsyncCallback;
    callback();
    [1, 2, 3].map(async (value) => value);

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.6

Patch Changes

  • #11035 0e4b03b Thanks @​ematipico! - Fixed a performance regression in noMisusedPromises that caused type inference to run repeatedly while linting a file.

  • #11043 22ec076 Thanks @​denbezrukov! - Fixed CSS formatting for multiline function arguments preceded by comments:

     .example {
       value: outer(
         1,
         /* comment */
         nested(
    -      first,
    -      second
    -    )
    +        first,
    +        second
    +      )
       );
     }
  • #11007 c9acb25 Thanks @​BTF-Kabir-2020! - Fixed #9195: useHookAtTopLevel no longer reports hooks in named forwardRef components that receive a ref parameter.

  • #10152 50a9bd8 Thanks @​Zelys-DFKH! - Fixed #10131: Biome now correctly parses curried arrow functions in ternary consequents when the inner arrow's parameters use a destructuring pattern, e.g. cond ? (x) => ({ a, b }) => body : alt.

  • #11105 8ffe2b9 Thanks @​dadavidtseng! - Fixed #11092: The noUselessTernary quick fix now preserves operator spacing when simplifying or inverting boolean ternary expressions.

  • #10533 5809875 Thanks @​Mokto! - Fixed #10515: biome check --write was not idempotent on Svelte files — multi-line template literals in <script> blocks and block comments in <style> blocks gained an extra indent level on every run.

  • #11040 0abb620 Thanks @​Mokto! - Fixed an issue where the HTML formatter would duplicate a comment placed directly before a Svelte {@const ...} or {@debug ...} block. The duplication compounded on every subsequent --write, causing the file to grow exponentially.

  • #10858 6d18204 Thanks @​ruidosujeira! - Fixed #10839: Svelte {#each} array destructuring no longer includes spaces inside square brackets, and multiline bind function expressions now indent their getter, setter, and function body correctly.

  • #11009 2c36626 Thanks @​ematipico! - Improved the accuracy of type-aware lint rules by resolving more inferred types. For example, noFloatingPromises now detects floating Promises returned by aliased callbacks and arrays of Promises created by async mapping callbacks.

    The following statements are now reported:

    type AsyncCallback = () => Promise<void>;
    declare const callback: AsyncCallback;
    callback();
    [1, 2, 3].map(async (value) => value);

  • #10973 9cb044c Thanks @​ematipico! - Fixed false positives in noMisleadingReturnType when generic-constraint, normalization, substitution, or structural return-type comparison cannot complete. The rule now suppresses diagnostics rather than suggesting a return type derived from partial information. For example, this unresolved return type is no longer reported:

... (truncated)

Commits

Updates @nx/js from 22.5.2 to 23.1.0

Release notes

Sourced from @​nx/js's releases.

23.1.0 (2026-07-13)

🚀 Features

  • ⚠️ angular: support angular v22 (#35851, #35910)
  • core: show a performance report at the end of every run (#36077)
  • core: support filtered targetDefaults via the nested-array shape (#36049)
  • core: re-add isCacheableTask helper (#36177)
  • core: add mouse support to the terminal UI (#35868)
  • core: scaffold create-nx-workspace into the current directory (#36134)
  • expo: support Expo SDK 56 (#35904, #35714)
  • ⚠️ linter: drop eslint v8 support (#36006)
  • linter: add migration to drop typescript-eslint v8-removed rules from flat configs (#36123)
  • misc: add next 14 to 15 and react 18 to 19 upgrade paths (#36031)
  • nx-cloud: add utm tracking to clickable cloud prompt links (#36028)
  • nx-dev: show product hunt launch banner in docs (#36112)
  • nx-dev: show product hunt launch banner in docs" (#36129, #36112)
  • release: add option to force changelog generation for programmatic usage (#36242)
  • repo: enable the tsgo compiler workspace-wide (#35926, #35047, #35167)
  • rspack: support @​rspack/core@​2 and @​rsbuild/core@​2 (multi-version compliance) (#35682, #35764, #13420, #781)
  • storybook: update Storybook to support Angular 22 (#36293)
  • testing: add migration to verify typecheck after the 23.1 migration (#36106)
  • vite: add configurable ts paths build/test targets and stabilize build coordination (#34890)

🩹 Fixes

  • angular: resolve esbuild option paths relative to the workspace root (#36017, #35936)
  • angular: bump prescribed angular version to 22.0.4 (#36130)
  • angular: make nx migrate to Angular 22 leave a buildable workspace (#36183)
  • angular-rspack: surface compilation failures as build errors and release resources on teardown (#36018)
  • bundling: restore preprocessor extensions in postcss normalizeOp… (#36057, #35854)
  • bundling: prevent TS6059 when an app imports a workspace lib from source (#36217, #35017)
  • core: avoid tsconfig path false positives for sibling project roots (#35796, #35795, #35786)
  • core: do not write minimumReleaseAgeExclude during nx migrate (#36045)
  • core: do not crash nx migrate on non-semver dependency specifiers (#36051)
  • core: format AI-edited files after agentic migrations (#36064)
  • core: prefer module.registerHooks to avoid DEP0205 deprecation warning (#36081)
  • core: prevent nx migrate crash when include=optional filters out the target package (#36087)
  • core: make nx migrate honor preapproved packages and emit a valid temp workspace (#36086)
  • core: skip daemon project-graph recompute on no-op file rewrites (#36082)
  • core: prevent the TUI from auto-selecting a completed task when a batch finishes (#35833)
  • core: deregister pseudo-terminal exit handlers when tasks finish (#36115)
  • core: prevent path traversal / zip-slip in self-hosted remote cache (#36116)
  • core: respect explicit --nxCloud=skip for AI agents in create-nx-workspace (#36131)
  • core: warn when the self-hosted remote cache disables TLS verification (NXC-4593) (#36132, #36116)
  • core: throw actionable error when pnpm .modules.yaml is missing (#35666, #35635)
  • core: support ${configDir} in tsconfig path alias resolution (#36037, #35804)
  • core: prevent non-npm devEngines pin from breaking npm registry lookups (#36020, #35815)
  • core: clarify nx sync remediation messaging and surface spinner output in non-tty (#35747)
  • core: exclude direct-dependency overrides from generated package.json (#36040, #35675)

... (truncated)

Commits
  • a88e494 chore(repo): migrate to nx 23.1.0-rc.2 (#36269)
  • ba1d651 fix(js): bump @​swc/cli to 0.8.1 to patch critical decompress advisory (#36294)
  • 03483ea fix(js): pin rootDir on composite tsconfigs for ts6 (ts-jest strips composite...
  • 60ac6f3 fix(js): pin tsconfig root dir even when it matches the config directory (#36...
  • c74bbcb fix(js): wait for process tree exit when stopping node executor tasks (#36230)
  • c425d95 fix(js): keep tsconfigs compiling and config files loading under TypeScript 6...
  • 1082577 fix(js): preserve esModuleInterop default when migrating to TypeScript 6 (#36...
  • 80cabcd fix(js): prevent Windows TS6059 rootDir errors in tsc builds (#36184)
  • 6486e86 fix(devkit): restore prettier v2 support in formatFiles (#36193)
  • 94bf233 fix(js): restore the pre-TypeScript 6 default of loading all @​types (#36163)
  • Additional commits viewable in compare view

Updates @semantic-release/changelog from 6.0.3 to 7.0.0

Release notes

Sourced from @​semantic-release/changelog's releases.

v7.0.0

7.0.0 (2026-07-21)

Features

BREAKING CHANGES

  • @semantic-release/changelog is now a native ES Module. It has named exports for each plugin hook (verifyConditions, prepare)
  • the minimum required version of semantic-release to use @semantic-release/changelog is now v20.1.0

Other Notable Changes

  • Replaced xo with prettier with default configuration; following newly established convention
  • Replaced nyc with c8 for code coverage
  • Replaced lodash with lodash-es for proper esm support

Related Issue

v7.0.0-beta.1

7.0.0-beta.1 (2026-04-23)

Features

BREAKING CHANGES

  • @semantic-release/changelog is now a native ES Module. It has named exports for each plugin hook (verifyConditions, prepare)
  • the minimum required version of semantic-release to use @semantic-release/changelog is now v20.1.0

Other Notable Changes

... (truncated)

Commits
  • b1044e1 chore(ci): update Node.js version requirements and test matrix configurations
  • 0563e5d chore(deps): update to the latest semantic-release version (#417)
  • e154214 feat: ES Module (#414)
  • 15e48e4 chore(deps): update dependency sinon to v18.0.1 (#400)
  • 1c48000 test: remove codecov (#399)
  • 3be34e3 ci(action): update actions/setup-node action to v4.0.3 (#395)
  • 854ffb6 ci(action): update actions/checkout action to v4.1.7 (#393)
  • e7c79f8 chore(deps): update dependency nyc to v17 (#392)
  • 171adfb ci(action): update actions/checkout action to v4.1.6 (#390)
  • 13e3bf7 chore(deps): update dependency sinon to v18 (#389)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​semantic-release/changelog since your current version.


Updates @semantic-release/git from 10.0.1 to 11.0.1

Release notes

Sourced from @​semantic-release/git's releases.

v11.0.1

11.0.1 (2026-07-24)

Bug Fixes

  • deps: update dependency execa to v10 (#564) (b39d5c6)

v11.0.0

11.0.0 (2026-07-21)

Features

BREAKING CHANGES

  • @semantic-release/git is now a native ES Module. It has named exports for each plugin hook (verifyConditions, prepare)
  • the minimum required version of semantic-release to use @semantic-release/git is now v20.1.0

Other Notable Changes

  • @semantic-release/error ^3^4 (ESM-only)
  • aggregate-error ^3^5 (ESM-only, uses native AggregateError)
  • execa ^5^9 (ESM-only, named export)
  • p-reduce ^2^3 (ESM-only)
  • Removed CJS-only devDeps: clear-module, file-url, fs-extra, get-stream, nyc
  • Added c8 for coverage; bumped ava, sinon, tempy, semantic-release, prettier
  • Engine: ^22.22.2 || >= 24.15;
  • Scripts: nycc8, added pretest, removed test:ci

Related Issue

v11.0.0-beta.2

11.0.0-beta.2 (2026-07-20)

Bug Fixes

  • update Node.js engine version requirements in package.json and package-lock.json (ddf699e)

... (truncated)

Commits
  • b39d5c6 fix(deps): update dependency execa to v10 (#564)
  • 9dd61f1 chore(deps): lock file maintenance (#470)
  • c5c6f06 chore(deps): update dependency lodash-es to v4.18.1 [security] (#545)
  • b67458c ci(action): update actions/setup-node action to v6.5.0 (#557)
  • d4990ff ci(action): update actions/checkout action to v6.1.0 (#556)
  • 16d191f chore(deps): update dependency tempy to v3.2.0 (#448)
  • 8efa7b7 chore(deps): update dependency sinon to v21.1.2 (#554)
  • e53dc53 chore(deps): update dependency prettier to v3.9.5 (#552)
  • 4c2f87f chore(deps): update dependency ls-engines to v0.10.1 (#551)
  • 7685d83 chore(deps): update dependency ava to v6.4.1 (#548)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​semantic-release/git since your current version.


Updates @types/node from 22.19.3 to 26.1.2

Commits

Updates fast-check from 4.5.2 to 4.9.0

Release notes

Sourced from fast-check's releases.

Shrinkable entityGraph and few performance chips

[Code][Diff]

Features

  • (PR#7008) Towards shrinkable entityGraph thanks to chainUntil

Fixes

  • (PR#7010) Bug: Fix latent state-sharing bug in entityGraph
  • (PR#7063) Bug: Equiprobable alternatives in stringMatching
  • (PR#6973) CI: Drop caches on push for build package flow
  • (PR#6971) CI: Only mark fast-check's releases as latest
  • (PR#6974) CI: Drop pull_request_target flows
  • (PR#6975) CI: Drop discussion creation on release publish
  • (PR#6976) CI: Drop caches from publication steps
  • (PR#6977) CI: Revert "Drop caches from publication steps"
  • (PR#6978) CI: Make zizmor audit a required status check
  • (PR#6991) CI: Remove Claude Code workflow
  • (PR#6994) CI: Replace pnpm dlx with pnpm exec for pkg-pr-new
  • (PR#6995) CI: Inline zizmor ignores in workflow
  • (PR#6996) CI: Move to devEngines.packageManager
  • (PR#7005) CI: Update PULL_REQUEST_TEMPLATE.md
  • (PR#7011) CI: Drop OTP prompt from npm publish
  • (PR#7013) CI: Switch release jobs to npm stage publish
  • (PR#7027) CI: Run benchmarks against main
  • (PR#7037) CI: Use comparison mode for bench
  • (PR#7069) CI: Run pnpm dedupe to deduplicate lockfile
  • (PR#6959) CI: Announce releases on Bluesky
  • (PR#7105) CI: Switch to actions/attest for attestations
  • (PR#7117) CI: Use pnpm version in changelog script
  • (PR#7120) CI: Allow unclean tree in changelog generation
  • (PR#7125) CI: Stage publish using pnpm in publish jobs
  • (PR#7065) Clean: Delete skills directory
  • (PR#6983) Doc: Tweak PR Template to hint AI agents into revealing themselves
  • (PR#7092) Doc: Add back skills directory
  • (PR#7095) Doc: Add release notes for fast-check 4.8.0
  • (PR#7104) Doc: Add makeeno as doc contributor
  • (PR#7103) Doc: Fix info box in docs
  • (PR#7108) Doc: Add jneidel as doc contributor
  • (PR#7035) Performance: Faster fc.integer on generate
  • (PR#7046) Performance: Faster fc.record on generate
  • (PR#7047) Performance: Faster fc.dictionary on generate
  • (PR#7048) Performance: Faster fc.webPath/fc.webUrl on generate
  • (PR#7050) Performance: Faster fc.stringMatching for \W \D \S .
  • (PR#7054) Performance: Faster fc.stringMatching on generate
  • (PR#7049) Performance: Drop nested tuple on generate for fc.record
  • (PR#7045) Performance: Faster fc.entityGraph on generate
  • (PR#7071) Performance: Early exit on empty tuple in fc.entityGraph

... (truncated)

Changelog

Sourced from fast-check's changelog.

4.9.0

Shrinkable entityGraph and few performance chips [Code][Diff]

Features

  • (PR#7008) Towards shrinkable entityGraph thanks to chainUntil

Fixes

  • (PR#7010) Bug: Fix latent state-sharing bug in entityGraph
  • (PR#7063) Bug: Equiprobable alternatives in stringMatching
  • (PR#6973) CI: Drop caches on push for build package flow
  • (PR#6971) CI: Only mark fast-check's releases as latest
  • (PR#6974) CI: Drop pull_request_target flows
  • (PR#6975) CI: Drop discussion creation on release publish
  • (PR#6976) CI: Drop caches from publication steps
  • (PR#6977) CI: Revert "Drop caches from publication steps"
  • (PR#6978) CI: Make zizmor audit a required status check
  • (PR#6991) CI: Remove Claude Code workflow
  • (PR#6994) CI: Replace pnpm dlx with pnpm exec for pkg-pr-new
  • (PR#6995) CI: Inline zizmor ignores in workflow
  • (PR#6996) CI: Move to devEngines.packageManager
  • (PR#7005) CI: Update PULL_REQUEST_TEMPLATE.md
  • (PR#7011) CI: Drop OTP prompt from npm publish
  • (PR#7013) CI: Switch release jobs to npm stage publish
  • (PR#7027) CI: Run benchmarks against main
  • (PR#7037) CI: Use comparison mode for bench
  • (PR#7069) CI: Run pnpm dedupe to deduplicate lockfile
  • (PR#6959) CI: Announce releases on Bluesky
  • (PR#7105) CI: Switch to actions/attest for attestations
  • (PR#7117) CI: Use pnpm version in changelog script
  • (PR#7120) CI: Allow unclean tree in changelog generation
  • (PR#7125) CI: Stage publish using pnpm in publish jobs
  • (PR#7065) Clean: Delete skills directory
  • (PR#6983) Doc: Tweak PR Template to hint AI agents into revealing themselves
  • (PR#7092) Doc: Add back skills directory
  • (PR#7095) Doc: Add release notes for fast-check 4.8.0
  • (PR#7104) Doc: Add makeeno as doc contributor
  • (PR#7103) Doc: Fix info box in docs
  • (PR#7108) Doc: Add jneidel as doc contributor
  • (PR#7035) Performance: Faster fc.integer on generate
  • (PR#7046) Performance: Faster fc.record on generate
  • (PR#7047) Performance: Faster fc.dictionary on generate
  • (PR#7048) Performance: Faster fc.webPath/fc.webUrl on generate
  • (PR#7050) Performance: Faster fc.stringMatching for \W \D \S .
  • (PR#7054) Performance: Faster fc.stringMatching on generate
  • (PR#7049) Performance: Drop nested tuple on generate for fc.record
  • (PR#7045) Performance: Faster fc.entityGraph on generate

... (truncated)

Commits
  • 0d3c254 🔖 Update CHANGELOG.md for fast-check@4.9.0, @​fast-check/packaged@​0.7.1 (#7124)
  • bd85efe ⬆️ Update dependency @​types/node to ^24.13.3 (#7118)
  • a0596ab ⬆️ Update dependency vitest to ^4.1.10 (#7119)
  • 3c085da ⬆️ Update dependency prettier to v3.9.4 (#7114)
  • 6538ff0 👥 Add jneidel as doc contributor (#7108)
  • 8096ab0 👥 Add makeeno as doc contributor (#7104)
  • 13fd4a6 ✏️ Typo in type EntityGraphContraints (#7088)
  • 36e70d2 ⬆️ Update dependency @​microsoft/api-extractor to ^7.58.9 (#7080)
  • 451ede0 ⬆️ Update dependency vitest to ^4.1.8 (#7074)
  • 949564d ⚡️ Early exit on empty tuple in fc.entityGraph (#7071)
  • Additional commits viewable in compare view

Updates nx from 22.5.2 to 23.1.0

Release notes

Sourced from nx's releases.

23.1.0 (2026-07-13)

🚀 Features

  • ⚠️ angular: support angular v22 (#35851, #35910)
  • core: show a performance report at the end of every run (#36077)
  • core: support filtered targetDefaults via the nested-array shape (#36049)
  • core: re-add isCacheableTask helper (#36177)
  • core: add mouse support to the terminal UI (#35868)
  • core: scaffold create-nx-workspace into the current directory (#36134)
  • expo: support Expo SDK 56 (#35904, #35714)
  • ⚠️ linter: drop eslint v8 support (#36006)
  • linter: add migration to drop typescript-eslint v8-removed rules from flat configs (#36123)
  • misc: add next 14 to 15 and react 18 to 19 upgrade paths (#36031)
  • nx-cloud: add utm tracking to clickable cloud prompt links (#36028)
  • nx-dev: show product hunt launch banner in docs (#36112)
  • nx-dev: show product hunt launch banner in docs" (#36129, #36112)
  • release: add option to force changelog generation for programmatic usage (#36242)
  • repo: enable the tsgo compiler workspace-wide (#35926, #35047, #35167)
  • rspack: support @​rspack/core@​2 and @​rsbuild/core@​2 (multi-version compliance) (#35682, #35764, #13420, #781)
  • storybook: update Storybook to support Angular 22 (#36293)
  • testing: add migration to verify typecheck after the 23.1 migration (#36106)
  • vite: add configurable ts paths build/test targets and stabilize build coordination (#34890)

🩹 Fixes

  • angular: resolve esbuild option paths relative to the workspace root (#36017, #35936)
  • angular: bump prescribed angular version to 22.0.4 (#36130)
  • angular: make nx migrate to Angular 22 leave a buildable workspace (#36183)
  • angular-rspack: surface compilation failures as build errors and release resources on teardown (#36018)
  • bundling: restore preprocessor extensions in postcss normalizeOp… (#36057, #35854)
  • bundling: prevent TS6059 when an app imports a workspace lib from source (#36217, #35017)
  • core: avoid tsconfig path false positives for sibling project roots (#35796, #35795, #35786)
  • core: do not write minimumReleaseAgeExclude during nx migrate (#36045)
  • core: do not crash nx migrate on non-semver dependency specifiers (#36051)
  • core: format AI-edited files after agentic migrations (#36064)
  • core: prefer module.registerHooks to avoid DEP0205 deprecation warning (#36081)
  • core: prevent nx migrate crash when include=optional filters out the target package (#36087)
  • core: make nx migrate honor preapproved packages and emit a valid temp workspace (#36086)
  • core: skip daemon project-graph recompute on no-op file rewrites (#36082)
  • core: prevent the TUI from auto-selecting a completed task when a batch finishes (#35833)
  • core: deregister pseudo-terminal exit handlers when tasks finish (#36115)
  • core: prevent path traversal / zip-slip in self-hosted remote cache (#36116)
  • core: respect explicit --nxCloud=skip for AI agents in create-nx-workspace (#36131)
  • core: warn when the self-hosted remote cache disables TLS verification (NXC-4593) (#36132, #36116)
  • core: throw actionable error when pnpm .modules.yaml is missing (#35666, #35635)
  • core: support ${configDir} in tsconfig path alias resolution (#36037, #35804)
  • core: prevent non-npm devEngines pin from breaking npm registry lookups (#36020, #35815)
  • core: clarify nx sync remediation messaging and surface spinner output in non-tty (#35747)
  • core: exclude direct-dependency overrides from generated package.json (#36040Description has been truncated

Bumps the node-dependencies group with 33 updates:

| Package | From | To |
| --- | --- | --- |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.3.10` | `2.5.6` |
| [@nx/js](https://github.com/nrwl/nx/tree/HEAD/packages/js) | `22.5.2` | `23.1.0` |
| [@semantic-release/changelog](https://github.com/semantic-release/changelog) | `6.0.3` | `7.0.0` |
| [@semantic-release/git](https://github.com/semantic-release/git) | `10.0.1` | `11.0.1` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.19.3` | `26.1.2` |
| [fast-check](https://github.com/dubzzz/fast-check/tree/HEAD/packages/fast-check) | `4.5.2` | `4.9.0` |
| [nx](https://github.com/nrwl/nx/tree/HEAD/packages/nx) | `22.5.2` | `23.1.0` |
| [semantic-release](https://github.com/semantic-release/semantic-release) | `25.0.2` | `25.0.8` |
| [tsx](https://github.com/privatenumber/tsx) | `4.21.0` | `4.23.1` |
| [typedoc](https://github.com/TypeStrong/TypeDoc) | `0.28.15` | `0.28.20` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `7.0.2` |
| [@ai-sdk/mcp](https://github.com/vercel/ai/tree/HEAD/packages/mcp) | `1.0.1` | `2.0.18` |
| [@inquirer/prompts](https://github.com/SBoudrias/Inquirer.js) | `8.1.0` | `8.5.2` |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.27.0` | `1.30.0` |
| [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `6.0.3` | `7.0.40` |
| [commander](https://github.com/tj/commander.js) | `14.0.2` | `15.0.0` |
| [cosmiconfig](https://github.com/cosmiconfig/cosmiconfig) | `9.0.0` | `9.0.2` |
| [zod](https://github.com/colinhacks/zod) | `4.2.1` | `4.4.3` |
| [@ai-sdk/anthropic](https://github.com/vercel/ai/tree/HEAD/packages/anthropic) | `3.0.1` | `4.0.23` |
| [@asteasolutions/zod-to-openapi](https://github.com/asteasolutions/zod-to-openapi) | `8.4.1` | `9.1.0` |
| [@google/model-viewer](https://github.com/google/model-viewer) | `4.1.0` | `4.3.1` |
| [@scalar/fastify-api-reference](https://github.com/scalar/scalar/tree/HEAD/integrations/fastify) | `1.44.26` | `1.63.0` |
| [dotenv](https://github.com/motdotla/dotenv) | `17.3.1` | `17.4.2` |
| [three](https://github.com/mrdoob/three.js) | `0.172.0` | `0.185.1` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.58.2` | `1.62.0` |
| [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) | `2.0.1` | `3.0.1` |
| [@ai-sdk/google](https://github.com/vercel/ai/tree/HEAD/packages/google) | `3.0.30` | `4.0.26` |
| [@linear/sdk](https://github.com/linear/linear) | `68.1.0` | `88.3.0` |
| [@playwright/mcp](https://github.com/microsoft/playwright-mcp) | `0.0.68` | `0.0.78` |
| [ai-sdk-ollama](https://github.com/jagreehal/ai-sdk-ollama/tree/HEAD/packages/ai-sdk-ollama) | `3.0.0` | `4.1.0` |
| [glob](https://github.com/isaacs/node-glob) | `13.0.0` | `13.0.6` |
| [@astrojs/starlight](https://github.com/withastro/starlight/tree/HEAD/packages/starlight) | `0.41.4` | `0.41.5` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.1.3` | `7.1.4` |


Updates `@biomejs/biome` from 2.3.10 to 2.5.6
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.6/packages/@biomejs/biome)

Updates `@nx/js` from 22.5.2 to 23.1.0
- [Release notes](https://github.com/nrwl/nx/releases)
- [Commits](https://github.com/nrwl/nx/commits/23.1.0/packages/js)

Updates `@semantic-release/changelog` from 6.0.3 to 7.0.0
- [Release notes](https://github.com/semantic-release/changelog/releases)
- [Commits](semantic-release/changelog@v6.0.3...v7.0.0)

Updates `@semantic-release/git` from 10.0.1 to 11.0.1
- [Release notes](https://github.com/semantic-release/git/releases)
- [Commits](semantic-release/git@v10.0.1...v11.0.1)

Updates `@types/node` from 22.19.3 to 26.1.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `fast-check` from 4.5.2 to 4.9.0
- [Release notes](https://github.com/dubzzz/fast-check/releases)
- [Changelog](https://github.com/dubzzz/fast-check/blob/main/packages/fast-check/CHANGELOG.md)
- [Commits](https://github.com/dubzzz/fast-check/commits/v4.9.0/packages/fast-check)

Updates `nx` from 22.5.2 to 23.1.0
- [Release notes](https://github.com/nrwl/nx/releases)
- [Commits](https://github.com/nrwl/nx/commits/23.1.0/packages/nx)

Updates `semantic-release` from 25.0.2 to 25.0.8
- [Release notes](https://github.com/semantic-release/semantic-release/releases)
- [Commits](semantic-release/semantic-release@v25.0.2...v25.0.8)

Updates `tsx` from 4.21.0 to 4.23.1
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.21.0...v4.23.1)

Updates `typedoc` from 0.28.15 to 0.28.20
- [Release notes](https://github.com/TypeStrong/TypeDoc/releases)
- [Changelog](https://github.com/TypeStrong/typedoc/blob/master/CHANGELOG.md)
- [Commits](TypeStrong/typedoc@v0.28.15...v0.28.20)

Updates `typescript` from 5.9.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](https://github.com/microsoft/TypeScript/commits)

Updates `@ai-sdk/mcp` from 1.0.1 to 2.0.18
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/mcp/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/mcp@2.0.18/packages/mcp)

Updates `@inquirer/prompts` from 8.1.0 to 8.5.2
- [Release notes](https://github.com/SBoudrias/Inquirer.js/releases)
- [Commits](https://github.com/SBoudrias/Inquirer.js/compare/@inquirer/prompts@8.1.0...@inquirer/prompts@8.5.2)

Updates `@modelcontextprotocol/sdk` from 1.27.0 to 1.30.0
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@v1.27.0...1.30.0)

Updates `ai` from 6.0.3 to 7.0.40
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@7.0.40/packages/ai)

Updates `commander` from 14.0.2 to 15.0.0
- [Release notes](https://github.com/tj/commander.js/releases)
- [Changelog](https://github.com/tj/commander.js/blob/master/CHANGELOG.md)
- [Commits](tj/commander.js@v14.0.2...v15.0.0)

Updates `cosmiconfig` from 9.0.0 to 9.0.2
- [Release notes](https://github.com/cosmiconfig/cosmiconfig/releases)
- [Changelog](https://github.com/cosmiconfig/cosmiconfig/blob/main/CHANGELOG.md)
- [Commits](https://github.com/cosmiconfig/cosmiconfig/commits)

Updates `zod` from 4.2.1 to 4.4.3
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.2.1...v4.4.3)

Updates `@ai-sdk/anthropic` from 3.0.1 to 4.0.23
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/anthropic/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/anthropic@4.0.23/packages/anthropic)

Updates `@asteasolutions/zod-to-openapi` from 8.4.1 to 9.1.0
- [Release notes](https://github.com/asteasolutions/zod-to-openapi/releases)
- [Commits](asteasolutions/zod-to-openapi@v8.4.1...v9.1.0)

Updates `@google/model-viewer` from 4.1.0 to 4.3.1
- [Release notes](https://github.com/google/model-viewer/releases)
- [Commits](google/model-viewer@v4.1.0...v4.3.1)

Updates `@scalar/fastify-api-reference` from 1.44.26 to 1.63.0
- [Release notes](https://github.com/scalar/scalar/releases)
- [Changelog](https://github.com/scalar/scalar/blob/main/integrations/fastify/CHANGELOG.md)
- [Commits](https://github.com/scalar/scalar/commits/HEAD/integrations/fastify)

Updates `dotenv` from 17.3.1 to 17.4.2
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v17.3.1...v17.4.2)

Updates `three` from 0.172.0 to 0.185.1
- [Release notes](https://github.com/mrdoob/three.js/releases)
- [Commits](https://github.com/mrdoob/three.js/commits)

Updates `@playwright/test` from 1.58.2 to 1.62.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.58.2...v1.62.0)

Updates `@actions/core` from 2.0.1 to 3.0.1
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

Updates `@ai-sdk/google` from 3.0.30 to 4.0.26
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/google/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/google@4.0.26/packages/google)

Updates `@linear/sdk` from 68.1.0 to 88.3.0
- [Release notes](https://github.com/linear/linear/releases)
- [Commits](https://github.com/linear/linear/compare/@linear/sdk@68.1.0...@linear/sdk@88.3.0)

Updates `@playwright/mcp` from 0.0.68 to 0.0.78
- [Release notes](https://github.com/microsoft/playwright-mcp/releases)
- [Commits](microsoft/playwright-mcp@v0.0.68...v0.0.78)

Updates `ai-sdk-ollama` from 3.0.0 to 4.1.0
- [Release notes](https://github.com/jagreehal/ai-sdk-ollama/releases)
- [Changelog](https://github.com/jagreehal/ai-sdk-ollama/blob/main/packages/ai-sdk-ollama/CHANGELOG.md)
- [Commits](https://github.com/jagreehal/ai-sdk-ollama/commits/ai-sdk-ollama@4.1.0/packages/ai-sdk-ollama)

Updates `glob` from 13.0.0 to 13.0.6
- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)
- [Commits](isaacs/node-glob@v13.0.0...v13.0.6)

Updates `@astrojs/starlight` from 0.41.4 to 0.41.5
- [Release notes](https://github.com/withastro/starlight/releases)
- [Changelog](https://github.com/withastro/starlight/blob/main/packages/starlight/CHANGELOG.md)
- [Commits](https://github.com/withastro/starlight/commits/@astrojs/starlight@0.41.5/packages/starlight)

Updates `astro` from 7.1.3 to 7.1.4
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.1.4/packages/astro)

---
updated-dependencies:
- dependency-name: "@biomejs/biome"
  dependency-version: 2.5.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: node-dependencies
- dependency-name: "@nx/js"
  dependency-version: 23.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: node-dependencies
- dependency-name: "@semantic-release/changelog"
  dependency-version: 7.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: node-dependencies
- dependency-name: "@semantic-release/git"
  dependency-version: 11.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: node-dependencies
- dependency-name: "@types/node"
  dependency-version: 26.1.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: node-dependencies
- dependency-name: fast-check
  dependency-version: 4.9.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: node-dependencies
- dependency-name: nx
  dependency-version: 23.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: node-dependencies
- dependency-name: semantic-release
  dependency-version: 25.0.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: node-dependencies
- dependency-name: tsx
  dependency-version: 4.23.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: node-dependencies
- dependency-name: typedoc
  dependency-version: 0.28.20
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: node-dependencies
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: node-dependencies
- dependency-name: "@ai-sdk/mcp"
  dependency-version: 2.0.18
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: node-dependencies
- dependency-name: "@inquirer/prompts"
  dependency-version: 8.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: node-dependencies
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: node-dependencies
- dependency-name: ai
  dependency-version: 7.0.40
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: node-dependencies
- dependency-name: commander
  dependency-version: 15.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: node-dependencies
- dependency-name: cosmiconfig
  dependency-version: 9.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: node-dependencies
- dependency-name: zod
  dependency-version: 4.4.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: node-dependencies
- dependency-name: "@ai-sdk/anthropic"
  dependency-version: 4.0.23
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: node-dependencies
- dependency-name: "@asteasolutions/zod-to-openapi"
  dependency-version: 9.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: node-dependencies
- dependency-name: "@google/model-viewer"
  dependency-version: 4.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: node-dependencies
- dependency-name: "@scalar/fastify-api-reference"
  dependency-version: 1.63.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: node-dependencies
- dependency-name: dotenv
  dependency-version: 17.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: node-dependencies
- dependency-name: three
  dependency-version: 0.185.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: node-dependencies
- dependency-name: "@playwright/test"
  dependency-version: 1.62.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: node-dependencies
- dependency-name: "@actions/core"
  dependency-version: 3.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: node-dependencies
- dependency-name: "@ai-sdk/google"
  dependency-version: 4.0.26
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: node-dependencies
- dependency-name: "@linear/sdk"
  dependency-version: 88.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: node-dependencies
- dependency-name: "@playwright/mcp"
  dependency-version: 0.0.78
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: node-dependencies
- dependency-name: ai-sdk-ollama
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: node-dependencies
- dependency-name: glob
  dependency-version: 13.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: node-dependencies
- dependency-name: "@astrojs/starlight"
  dependency-version: 0.41.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: node-dependencies
- dependency-name: astro
  dependency-version: 7.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: node-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 31, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 7, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 7, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/node-dependencies-291ffb8081 branch August 7, 2026 11:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants