Skip to content

deps: bump the minor-patch group across 1 directory with 17 updates - #190

Closed
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/minor-patch-2320c3b3a3
Closed

dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/minor-patch-2320c3b3a3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 26, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the minor-patch group with 17 updates in the / directory:

Package From To
@opentelemetry/api 1.9.1 1.10.0
@typescript-eslint/eslint-plugin 8.71.2 8.72.0
@typescript-eslint/parser 8.71.2 8.72.0
eslint 10.12.0 10.13.0
eslint-plugin-n 18.4.1 18.5.0
markdownlint-cli2 0.23.3 0.24.0
@anthropic-ai/claude-agent-sdk 0.3.301 0.3.309
@ai-sdk/anthropic 4.0.81 4.0.87
@ai-sdk/google 4.0.98 4.0.104
@fastify/static 10.1.6 10.1.7
ai 7.0.142 7.0.150
vite 8.3.4 8.3.5
typedoc-plugin-markdown 4.14.0 4.14.1
@opentelemetry/exporter-metrics-otlp-grpc 0.223.0 0.300.0
@opentelemetry/exporter-trace-otlp-grpc 0.223.0 0.300.0
@opentelemetry/sdk-node 0.223.0 0.300.0
sql.js 1.15.0 1.15.1

Updates @opentelemetry/api from 1.9.1 to 1.10.0

Release notes

Sourced from @​opentelemetry/api's releases.

api/v1.10.0

1.10.0

🚀 Features

  • feat(api): integrate the Logs API into @opentelemetry/api #4862 @​hectorhdzg
  • feat(api): add imperative context.attach() for setting context across callback boundaries that with() cannot wrap. #6845 @​pichlermarc
    • attach() returns a Token whose dispose() method restores the previous context. Use token.dispose() to detach.
    • attach is an optional method on the ContextManager interface; when the active context manager does not implement it, context.attach() logs a warning and returns a no-op token.
  • feat(api): add AnyValue type (of type unknown) and extend Attributes type values to use AnyValue #6780 @​trentm
    • This is part of supporting OTEP 4485.
    • This is a breaking change for SDK implementations, in that they may need to support more attribute types for any APIs that accept Attributes or AnyValue. Implementors should refer to the OTEP 4485 link above for "MUST / SHOULD" requirements for complex attributes handling. See also the attributes-handling utilities provided by @opentelemetry/core to help. For example, cleanSimpleAttributes() can be used to limit user-provided attributes to the set of value types supported in earlier @opentelemetry/api versions.
    • This change is typically not a breaking change for users of @opentelemetry/api. There is one possible breaking case: If a TypeScript user was using the Attributes type in their own code and using TypeScript Narrowing to reduce an attribute value to an expected type (example here). It is expected that this usage should be rare and, likely, limited to SDK implementations, if at all. (If this impacted your code, please let us know.)
    • Note for users of attributes: Simple attributes SHOULD be used whenever possible. Instrumentations SHOULD assume that backends do not index individual properties of complex attributes, that querying or aggregating on such properties is inefficient and complicated, and that reporting complex attributes carries higher performance overhead.

🐛 Bug Fixes

  • fix(api): cap tracestate list-members and total length in the deprecated TraceState.set() so it stays in step with TraceState from @opentelemetry/core #6964 @​Zuhef
  • fix: resolve the ESM build through the default export condition instead of import, so a resolver that activates neither import nor require still finds an entry point #7132 @​overbalance

📚 Documentation

  • docs(api): complete @since annotations for the public API #7023 @​nabeelamjadsheikh
    • Adds the three missing exported-type annotations and the member-level annotations for methods and properties introduced after their enclosing type.
    • Corrects Attributes, AttributeValue and TracerOptions from 1.3.0 to 1.1.0; all three were already importable in 1.1.0 via wildcard re-export.

🏠 Internal

  • build: migrate the package build from tsc to tsdown, emitting dual CJS/ESM output from a single dist/ directory #6293 @​overbalance
    • The public entry points are unchanged: @opentelemetry/api and @opentelemetry/api/experimental. This package already declared an exports map, so deep imports such as @opentelemetry/api/build/src/... were rejected before this change and continue to be.
    • The emitted files moved out of build/src (CJS), build/esm and build/esnext (ESM) into dist/, using .cjs/.mjs extensions with matching .d.cts/.d.mts declarations. The non-standard esnext condition has been dropped in favour of the standard import/require conditions.
  • perf(api): add getGlobal fast-path #6956 @​legendecas
  • chore: remove the redundant module field from package.json; bundlers resolve the ESM build through the exports map #7130 @​overbalance
Changelog

Sourced from @​opentelemetry/api's changelog.

1.10.0

🚀 (Enhancement)

🐛 (Bug Fix)

  • fix(core): added falsy check to make otel core work with browser where webpack config had process as false or null #3613 @​ravindra-dyte
  • fix(instrumentation-http): include query params in http.target #3646 @​kobi-co

📚 (Refine Doc)

🏠 (Internal)

Commits
  • 56e6b1b chore: Release API 1.4.1, SDK 1.10.0, Experimental 0.36.0 (#3654)
  • ecb5ebe fix: Minor typing issues for web sandbox (#3660)
  • 48ecf22 feat(sdk-trace-base): add dropped attributes and events count on span (#3576)
  • 95bf6fc fix(build): add example/http to ignore list in update-ts-configs (#3657)
  • 3a2ca58 feat: add unit to view instrument selection criteria (#3647)
  • ebc8575 chore(jeager-exporter): deprecate jaeger exporter (#3585)
  • 2f715bd feat: allow to add attributes from grpc metadata in the patched server (#3589)
  • cbbdfd3 fix(sdk-node): update instrumentations once MeterProvider is initialized (#3624)
  • 4a4484a chore: update http example (#3651)
  • 494efff fix(otlp-exporter-base): fix changelog for merged retry pr (#3650)
  • Additional commits viewable in compare view

Updates @typescript-eslint/eslint-plugin from 8.71.2 to 8.72.0

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.72.0

8.72.0 (2026-10-19)

🚀 Features

  • eslint-plugin: lazy load rules (#13010)
  • eslint-plugin: [await-thenable] add allowMixedPromiseArrays option (#12992)
  • typescript-estree: error on abstract keyword that precedes export (#13019)

🩹 Fixes

  • ast-spec: add JSXFragment to JSXAttribute['value'] (#13051)
  • eslint-plugin: [prefer-readonly-parameter-types] check where allowed type aliases are declared (#13016)
  • eslint-plugin: [no-deprecated] report deprecated properties in object literals (#12704)
  • eslint-plugin: use isTypeLiteralType instead of type.isLiteral() to include bigint literals on TS < 5.0 (#13053)
  • eslint-plugin: [require-array-sort-compare] check tuples (#13058)
  • eslint-plugin: [require-array-sort-compare] ignore extra this type argument on TS < 5.1 (#13055)
  • type-utils: discriminateAnyType crashes when calling getAwaitedType on awaited type in TS < 5.0 (#13054)
  • typescript-estree: include leading and trailing comments & whitespace in Program range (#12991)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.72.0 (2026-10-19)

🚀 Features

  • eslint-plugin: [await-thenable] add allowMixedPromiseArrays option (#12992)
  • eslint-plugin: lazy load rules (#13010)

🩹 Fixes

  • type-utils: discriminateAnyType crashes when calling getAwaitedType on awaited type in TS < 5.0 (#13054)
  • eslint-plugin: [require-array-sort-compare] ignore extra this type argument on TS < 5.1 (#13055)
  • eslint-plugin: [require-array-sort-compare] check tuples (#13058)
  • eslint-plugin: use isTypeLiteralType instead of type.isLiteral() to include bigint literals on TS < 5.0 (#13053)
  • eslint-plugin: [no-deprecated] report deprecated properties in object literals (#12704)
  • eslint-plugin: [prefer-readonly-parameter-types] check where allowed type aliases are declared (#13016)
  • typescript-estree: include leading and trailing comments & whitespace in Program range (#12991)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits
  • a4c2603 chore(release): publish 8.72.0
  • c6eb98c feat(eslint-plugin): [await-thenable] add allowMixedPromiseArrays option (#...
  • b382b74 fix(type-utils): discriminateAnyType crashes when calling getAwaitedType on a...
  • 79edd89 fix(eslint-plugin): [require-array-sort-compare] ignore extra this type argum...
  • e7d57dd fix(eslint-plugin): [require-array-sort-compare] check tuples (#13058)
  • 2d107ae fix(eslint-plugin): use isTypeLiteralType instead of type.isLiteral() to incl...
  • e4695b3 feat(eslint-plugin): lazy load rules (#13010)
  • a1a912b fix(eslint-plugin): [no-deprecated] report deprecated properties in object li...
  • 1edc975 fix(eslint-plugin): [prefer-readonly-parameter-types] check where allowed typ...
  • 61cb700 chore: fix all eslint-plugin-internal/no-multiple-lines-of-errors (#12893)
  • Additional commits viewable in compare view

Updates @typescript-eslint/parser from 8.71.2 to 8.72.0

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.72.0

8.72.0 (2026-10-19)

🚀 Features

  • eslint-plugin: lazy load rules (#13010)
  • eslint-plugin: [await-thenable] add allowMixedPromiseArrays option (#12992)
  • typescript-estree: error on abstract keyword that precedes export (#13019)

🩹 Fixes

  • ast-spec: add JSXFragment to JSXAttribute['value'] (#13051)
  • eslint-plugin: [prefer-readonly-parameter-types] check where allowed type aliases are declared (#13016)
  • eslint-plugin: [no-deprecated] report deprecated properties in object literals (#12704)
  • eslint-plugin: use isTypeLiteralType instead of type.isLiteral() to include bigint literals on TS < 5.0 (#13053)
  • eslint-plugin: [require-array-sort-compare] check tuples (#13058)
  • eslint-plugin: [require-array-sort-compare] ignore extra this type argument on TS < 5.1 (#13055)
  • type-utils: discriminateAnyType crashes when calling getAwaitedType on awaited type in TS < 5.0 (#13054)
  • typescript-estree: include leading and trailing comments & whitespace in Program range (#12991)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.72.0 (2026-10-19)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Updates eslint from 10.12.0 to 10.13.0

Release notes

Sourced from eslint's releases.

v10.13.0

Features

  • 48d5cc4 feat: report references inside IIFEs in no-use-before-define (#21238) (Irfan fandi)
  • a39d9fb feat: add globalThis to no-obj-calls (#21382) (synthex-byte)
  • 66ac583 feat: check yield* expressions in no-unsafe-optional-chaining (#21399) (xbinaryx)

Bug Fixes

  • 87bd2ce fix: avoid redeclared let when no-var and one-var fix together (#21389) (Daniel Pinto)

Documentation

  • 4783a68 docs: Update README (GitHub Actions Bot)
  • 43f0ac9 docs: clarify parameter description in getText (#21287) (lumir)

Chores

  • b59d889 chore: update github/codeql-action action to v4.38.3 (#21412) (renovate[bot])
  • 95e51a0 ci: re-enable @typescript-eslint/typescript-eslint in ecosystem tests (#21410) (Francesco Trotta)
  • 317fcb3 chore: update ecosystem plugins (#21409) (ESLint Bot)
  • b92decf perf: skip no-redeclare scan for single-declaration variables (#21365) (James Ross)
  • 47b7063 chore: update dependency @​eslint/json to ^2.1.1 (#21398) (renovate[bot])
  • e5aea41 chore: update ecosystem plugins (#21390) (ESLint Bot)
Commits

Updates eslint-plugin-n from 18.4.1 to 18.5.0

Release notes

Sourced from eslint-plugin-n's releases.

v18.5.0

18.5.0 (2026-10-18)

🌟 Features

  • node-builtins: ✨ support 20.20, 22.23, 24.22 and 26.12 (#578) (2fa0069)

🩹 Fixes

  • no-mixed-requires: classify modern Node built-ins (#580) (58c5d56)
  • no-unsupported-features/es-syntax: Promise.withResolvers is supported since Node.js 22.0.0 (#577) (4a6dee1)

📚 Documentation

  • explain module aliases for no-missing-require (#579) (fcf1256)
Changelog

Sourced from eslint-plugin-n's changelog.

18.5.0 (2026-10-18)

🌟 Features

  • node-builtins: ✨ support 20.20, 22.23, 24.22 and 26.12 (#578) (2fa0069)

🩹 Fixes

  • no-mixed-requires: classify modern Node built-ins (#580) (58c5d56)
  • no-unsupported-features/es-syntax: Promise.withResolvers is supported since Node.js 22.0.0 (#577) (4a6dee1)

📚 Documentation

  • explain module aliases for no-missing-require (#579) (fcf1256)
Commits
  • 5bbe603 chore(master): release 18.5.0 (#581)
  • 2fa0069 feat(node-builtins): ✨ support 20.20, 22.23, 24.22 and 26.12 (#578)
  • fcf1256 docs: explain module aliases for no-missing-require (#579)
  • 58c5d56 fix(no-mixed-requires): classify modern Node built-ins (#580)
  • 4a6dee1 fix(no-unsupported-features/es-syntax): Promise.withResolvers is supported si...
  • See full diff in compare view

Updates markdownlint-cli2 from 0.23.3 to 0.24.0

Changelog

Sourced from markdownlint-cli2's changelog.

0.24.0

  • Update dependencies (including markdownlint)
Commits
  • 341e2a3 Update to version 0.24.0.
  • 3e4452b Freshen list of external custom rules included with the markdownlint-cli2-rul...
  • e728d6f Update dependency: markdown-it to 15.0.3.
  • 0a869ec Bump eslint-plugin-jsdoc from 65.2.2 to 65.2.4
  • fec2034 Update indirect playwright dependencies.
  • 74ed8f6 Bump @​playwright/test from 1.63.0 to 1.64.0
  • 05659c7 Bump smol-toml from 1.9.0 to 1.9.1
  • 20a66eb Bump execa from 10.0.1 to 10.1.0
  • 692e9cc Bump eslint-plugin-jsdoc from 65.1.0 to 65.2.2
  • 4e634a2 Bump concurrently from 10.0.5 to 10.0.6
  • Additional commits viewable in compare view

Updates @anthropic-ai/claude-agent-sdk from 0.3.301 to 0.3.309

Release notes

Sourced from @​anthropic-ai/claude-agent-sdk's releases.

v0.3.309

What's changed

  • Fixed host-supplied managedSettings dropping disableAllHooks, disableSkillShellExecution and empty allowedHttpHookUrls / httpHookAllowedEnvVars lists
  • Changed extractFromBunfs() to extract the embedded CLI into its own per-user temp directory (claude-agent-sdk-<uid>, or claude-agent-sdk on Windows) instead of Claude Code's temp root
  • Changed extractFromBunfs() to reuse an already-extracted file only when its bytes match the embedded binary, replacing it otherwise
  • Updated to parity with Claude Code v2.1.309

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.309
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.309
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.309
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.309

v0.3.308

What's changed

  • Updated to parity with Claude Code v2.1.308

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.308
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.308
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.308
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.308

v0.3.307

What's changed

  • Added wakeup_source to the command_lifecycle started frame of a scheduled wakeup or task, and scheduled_for for a wakeup (capability lifecycle_wakeup_source_v1), so a host can tell which one fired
  • Added supportedDialogKinds to browser SDK query(), sent on initialize; a non-empty list requires onUserDialog
  • Updated to parity with Claude Code v2.1.307

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.307
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.307
</tr></table> 

... (truncated)

Changelog

Sourced from @​anthropic-ai/claude-agent-sdk's changelog.

0.3.309

  • Fixed host-supplied managedSettings dropping disableAllHooks, disableSkillShellExecution and empty allowedHttpHookUrls / httpHookAllowedEnvVars lists
  • Changed extractFromBunfs() to extract the embedded CLI into its own per-user temp directory (claude-agent-sdk-<uid>, or claude-agent-sdk on Windows) instead of Claude Code's temp root
  • Changed extractFromBunfs() to reuse an already-extracted file only when its bytes match the embedded binary, replacing it otherwise
  • Updated to parity with Claude Code v2.1.309

0.3.308

  • Updated to parity with Claude Code v2.1.308

0.3.307

  • Added wakeup_source to the command_lifecycle started frame of a scheduled wakeup or task, and scheduled_for for a wakeup (capability lifecycle_wakeup_source_v1), so a host can tell which one fired
  • Added supportedDialogKinds to browser SDK query(), sent on initialize; a non-empty list requires onUserDialog
  • Updated to parity with Claude Code v2.1.307

0.3.306

  • Updated to parity with Claude Code v2.1.306

0.3.305

  • Added recommendations and fix to the get_usage response's behavior windows
  • Fixed servers set with setMcpServers being replaced later in the session by a same-named server from the user's own settings
  • Fixed startup() with initializeTimeoutMs: null counting time spent in SessionStart or Setup hooks against its 60-second limit; null now works like leaving the option out
  • Changed the startup() and prewarm() timeout error for a start with no open SessionStart or Setup hook: it lists possible causes and no longer says to check authentication and network
  • Updated to parity with Claude Code v2.1.305

0.3.304

  • Added suspendSseStream(query) and resumeSseStream(query) to the browser SDK: close a query's event stream and reopen it later without ending the query
  • Added stable row ids to getContextUsage(), and, when the CLI answers on its own stdio, plugin ids, agent and skill file paths, and per-server MCP instruction token shares
  • Fixed startup() timing out while a SessionStart or Setup command hook was running when no initializeTimeoutMs is passed: up to 10 minutes of that time no longer counts toward the 60-second limit, and the timeout error now says what the process reported
  • Fixed startup() keeping every hook_progress message of a running SessionStart or Setup hook in memory until it resolved; it now keeps only the newest one for each hook
  • Updated to parity with Claude Code v2.1.304

0.3.303

  • Updated to parity with Claude Code v2.1.303

0.3.302

  • Fixed structured output results delivering a response's output as structured_output when the API refused that response; the result is now an error with no payload
  • Changed an omitted permissionMode to start in default mode on third-party providers, with telemetry off or on a fresh install; pass permissionMode: 'auto' to keep auto mode
  • Changed fork subagents (subagent_type: "fork") to be on by default in SDK sessions, as in the terminal; run_in_background is still offered, and CLAUDE_CODE_FORK_SUBAGENT=0 turns them off
  • Updated to parity with Claude Code v2.1.302
Commits

Updates @ai-sdk/anthropic from 4.0.81 to 4.0.87

Changelog

Sourced from @​ai-sdk/anthropic's changelog.

4.0.87

Patch Changes

  • Updated dependencies [8202f5b]
  • Updated dependencies [85d84a1]
    • @​ai-sdk/provider-utils@​5.0.67
    • @​ai-sdk/provider@​4.0.33

4.0.86

Patch Changes

  • 43ad966: Report interrupted when a stream ends cleanly without its provider completion signal, preserving partial output without emitting an error solely for the interruption.

    This applies to OpenAI (Chat, Responses, and Completions), Anthropic, Google (Generate Content and Interactions), Alibaba, Amazon Bedrock Converse, Cohere, DeepSeek, Groq, Hugging Face Responses, Mistral Chat, Moonshot AI, Open Responses, Perplexity, and xAI Responses. It also covers cutoffs in later Anthropic messages and Google automatic continuations.

    Compatibility notice: These streams previously fell back to other or omitted the finish part. Applications must now handle interrupted in finish-reason switches, mappings, and custom validation. Check finishReason === 'interrupted' to detect incomplete responses; interruption alone does not trigger error handling.

    Explicit unknown completion reasons still map to other. Actual provider, parsing, and transport errors retain their error paths; affected error paths that previously left the finish reason as other now report error. OpenAI-compatible remains unchanged.

  • aac6026: fix(anthropic): preserve empty-stream rejection for interrupted responses

  • Updated dependencies [10026d1]

    • @​ai-sdk/provider@​4.0.32
    • @​ai-sdk/provider-utils@​5.0.66

4.0.85

Patch Changes

  • 39a776b: Add a shared encodePathSegment helper and use it to encode provider-returned identifiers in credentialed follow-up request paths.
  • d39b41d: Defer construction of provider validation schemas until first use to reduce package import time.
  • bc1a2e9: Defer construction of Anthropic provider option schemas until they are first used to reduce package import time.
  • Updated dependencies [b089ce8]
  • Updated dependencies [39a776b]
    • @​ai-sdk/provider-utils@​5.0.65

4.0.84

Patch Changes

  • 9d13c4d: Add the MiniMax M3.1 Flash model ID to the MiniMax and AI Gateway providers.
  • Updated dependencies [0c2a9de]
  • Updated dependencies [200c47f]
    • @​ai-sdk/provider@​4.0.31
    • @​ai-sdk/provider-utils@​5.0.64

4.0.83

Patch Changes

... (truncated)

Commits

Updates @ai-sdk/google from 4.0.98 to 4.0.104

Changelog

Sourced from @​ai-sdk/google's changelog.

4.0.104

Patch Changes

  • Updated dependencies [8202f5b]
  • Updated dependencies [85d84a1]
    • @​ai-sdk/provider-utils@​5.0.67
    • @​ai-sdk/provider@​4.0.33

4.0.103

Patch Changes

  • 43ad966: Report interrupted when a stream ends cleanly without its provider completion signal, preserving partial output without emitting an error solely for the interruption.

    This applies to OpenAI (Chat, Responses, and Completions), Anthropic, Google (Generate Content and Interactions), Alibaba, Amazon Bedrock Converse, Cohere, DeepSeek, Groq, Hugging Face Responses, Mistral Chat, Moonshot AI, Open Responses, Perplexity, and xAI Responses. It also covers cutoffs in later Anthropic messages and Google automatic continuations.

    Compatibility notice: These streams previously fell back to other or omitted the finish part. Applications must now handle interrupted in finish-reason switches, mappings, and custom validation. Check finishReason === 'interrupted' to detect incomplete responses; interruption alone does not trigger error handling.

    Explicit unknown completion reasons still map to other. Actual provider, parsing, and transport errors retain their error paths; affected error paths that previously left the finish reason as other now report error. OpenAI-compatible remains unchanged.

  • Updated dependencies [10026d1]

    • @​ai-sdk/provider@​4.0.32
    • @​ai-sdk/provider-utils@​5.0.66

4.0.102

Patch Changes

  • 39a776b: Add a shared encodePathSegment helper and use it to encode provider-returned identifiers in credentialed follow-up request paths.
  • 754407e: Defer construction of provider validation schemas until first use to reduce package import time.
  • Updated dependencies [b089ce8]
  • Updated dependencies [39a776b]
    • @​ai-sdk/provider-utils@​5.0.65

4.0.101

Patch Changes

  • Updated dependencies [0c2a9de]
  • Updated dependencies [200c47f]
    • @​ai-sdk/provider@​4.0.31
    • @​ai-sdk/provider-utils@​5.0.64

4.0.100

Patch Changes

  • d08bb66: Preserve grounding metadata from each automatically continued Google response in groundingMetadataPerRequest. Previously, a later response without grounding could leave earlier Search queries absent from the final provider metadata even though their sources were returned. The new array preserves request order and includes null for requests without grounding.
  • Updated dependencies [60cc252]

... (truncated)

Commits

Updates @fastify/static from 10.1.6 to 10.1.7

Release notes

Sourced from @​fastify/static's releases.

v10.1.7

What's Changed

Full Changelog: fastify/fastify-static@v10.1.6...v10.1.7

Commits

Updates ai from 7.0.142 to 7.0.150

Changelog

Sourced from ai's changelog.

7.0.150

Patch Changes

  • 8e18d59: feat(ai): add experimental_streamSpeech

    Streams speech audio from a string, or an array, iterable, or stream of text deltas and/or text parts (each with an optional voice and providerOptions) using speech models that implement the experimental Experimental_StreamingSpeechModelV4 extension. Returns a single-consumer audioStream / fullStream plus usage, warnings, responses, and providerMetadata promises. Provider error parts are non-fatal and reported through onError (default console.error). A ...

    Description has been truncated

@dependabot dependabot Bot added the dependencies Dependency updates (Dependabot) label Oct 26, 2026
@dependabot dependabot Bot changed the title deps: bump the minor-patch group with 17 updates deps: bump the minor-patch group across 1 directory with 17 updates Oct 26, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/minor-patch-2320c3b3a3 branch from e2691a5 to f4e7717 Compare October 26, 2026 12:53

DeDuva commented Oct 26, 2026 •

Copy link
Copy Markdown
Owner

Validation failed — not merging. minor-patch group, 17 updates, head e2691a59.

Stage: sdk-exports-validation (run 40291247691, job 121466635113) and test both failed at dependency install, before building or running anything.

Error:

npm error code ERESOLVE
npm error While resolving: @opentelemetry/context-async-hooks@2.12.0
npm error Found: @opentelemetry/api@1.10.0
npm error   dev @opentelemetry/api@"^1.10.0" from the root project
npm error Could not resolve dependency:
npm error peer @opentelemetry/api@">=1.0.0 <1.10.0" from @opentelemetry/context-async-hooks@2.12.0

Likely cause — an internally inconsistent group, not a bad individual version. This group raises @opentelemetry/api to 1.10.0 while leaving @opentelemetry/context-async-hooks at 2.12.0, whose peer range is explicitly capped below 1.10.0 (>=1.0.0 <1.10.0). The two members contradict each other, so no install of this PR's manifest can succeed. It is not lockfile drift and not a stale base — the manifest itself is unsatisfiable.

Also note: this PR has gone to CONFLICTING against dev since two dependency PRs merged in this run, so it needs rebuilding regardless of the above.

Recommended next action (nothing was changed here): the OpenTelemetry packages need to move as one unit — either hold @opentelemetry/api at 1.9.x until context-async-hooks ships a release whose peer range admits 1.10, or raise the whole @opentelemetry/* set together in a single group.

@dependabot recreate

Bumps the minor-patch group with 17 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@opentelemetry/api](https://github.com/open-telemetry/opentelemetry-js) | `1.9.1` | `1.10.0` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.71.2` | `8.72.0` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.71.2` | `8.72.0` |
| [eslint](https://github.com/eslint/eslint) | `10.12.0` | `10.13.0` |
| [eslint-plugin-n](https://github.com/eslint-community/eslint-plugin-n) | `18.4.1` | `18.5.0` |
| [markdownlint-cli2](https://github.com/DavidAnson/markdownlint-cli2) | `0.23.3` | `0.24.0` |
| [@anthropic-ai/claude-agent-sdk](https://github.com/anthropics/claude-agent-sdk-typescript) | `0.3.301` | `0.3.309` |
| [@ai-sdk/anthropic](https://github.com/vercel/ai/tree/HEAD/packages/anthropic) | `4.0.81` | `4.0.87` |
| [@ai-sdk/google](https://github.com/vercel/ai/tree/HEAD/packages/google) | `4.0.98` | `4.0.104` |
| [@fastify/static](https://github.com/fastify/fastify-static) | `10.1.6` | `10.1.7` |
| [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `7.0.142` | `7.0.150` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.4` | `8.3.5` |
| [typedoc-plugin-markdown](https://github.com/typedoc2md/typedoc-plugin-markdown/tree/HEAD/packages/typedoc-plugin-markdown) | `4.14.0` | `4.14.1` |
| [@opentelemetry/exporter-metrics-otlp-grpc](https://github.com/open-telemetry/opentelemetry-js) | `0.223.0` | `0.300.0` |
| [@opentelemetry/exporter-trace-otlp-grpc](https://github.com/open-telemetry/opentelemetry-js) | `0.223.0` | `0.300.0` |
| [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.223.0` | `0.300.0` |
| [sql.js](https://github.com/sql-js/sql.js) | `1.15.0` | `1.15.1` |



Updates `@opentelemetry/api` from 1.9.1 to 1.10.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v1.9.1...v1.10.0)

Updates `@typescript-eslint/eslint-plugin` from 8.71.2 to 8.72.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.71.2 to 8.72.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.0/packages/parser)

Updates `eslint` from 10.12.0 to 10.13.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.12.0...v10.13.0)

Updates `eslint-plugin-n` from 18.4.1 to 18.5.0
- [Release notes](https://github.com/eslint-community/eslint-plugin-n/releases)
- [Changelog](https://github.com/eslint-community/eslint-plugin-n/blob/master/CHANGELOG.md)
- [Commits](eslint-community/eslint-plugin-n@v18.4.1...v18.5.0)

Updates `markdownlint-cli2` from 0.23.3 to 0.24.0
- [Changelog](https://github.com/DavidAnson/markdownlint-cli2/blob/main/CHANGELOG.md)
- [Commits](DavidAnson/markdownlint-cli2@v0.23.3...v0.24.0)

Updates `@anthropic-ai/claude-agent-sdk` from 0.3.301 to 0.3.309
- [Release notes](https://github.com/anthropics/claude-agent-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/claude-agent-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/claude-agent-sdk-typescript@v0.3.301...v0.3.309)

Updates `@ai-sdk/anthropic` from 4.0.81 to 4.0.87
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/anthropic/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/anthropic@4.0.87/packages/anthropic)

Updates `@ai-sdk/google` from 4.0.98 to 4.0.104
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/google/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/google@4.0.104/packages/google)

Updates `@fastify/static` from 10.1.6 to 10.1.7
- [Release notes](https://github.com/fastify/fastify-static/releases)
- [Commits](fastify/fastify-static@v10.1.6...v10.1.7)

Updates `ai` from 7.0.142 to 7.0.150
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@7.0.150/packages/ai)

Updates `vite` from 8.3.4 to 8.3.5
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.3.5/packages/vite)

Updates `typedoc-plugin-markdown` from 4.14.0 to 4.14.1
- [Release notes](https://github.com/typedoc2md/typedoc-plugin-markdown/releases)
- [Changelog](https://github.com/typedoc2md/typedoc-plugin-markdown/blob/main/packages/typedoc-plugin-markdown/CHANGELOG.md)
- [Commits](https://github.com/typedoc2md/typedoc-plugin-markdown/commits/typedoc-plugin-markdown@4.14.1/packages/typedoc-plugin-markdown)

Updates `@opentelemetry/exporter-metrics-otlp-grpc` from 0.223.0 to 0.300.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.223.0...experimental/v0.300.0)

Updates `@opentelemetry/exporter-trace-otlp-grpc` from 0.223.0 to 0.300.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.223.0...experimental/v0.300.0)

Updates `@opentelemetry/sdk-node` from 0.223.0 to 0.300.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.223.0...experimental/v0.300.0)

Updates `sql.js` from 1.15.0 to 1.15.1
- [Release notes](https://github.com/sql-js/sql.js/releases)
- [Commits](sql-js/sql.js@v1.15.0...v1.15.1)

---
updated-dependencies:
- dependency-name: "@ai-sdk/anthropic"
  dependency-version: 4.0.87
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: "@ai-sdk/google"
  dependency-version: 4.0.104
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: "@anthropic-ai/claude-agent-sdk"
  dependency-version: 0.3.309
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: "@fastify/static"
  dependency-version: 10.1.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: "@opentelemetry/api"
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: "@opentelemetry/exporter-metrics-otlp-grpc"
  dependency-version: 0.300.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: "@opentelemetry/exporter-trace-otlp-grpc"
  dependency-version: 0.300.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: "@opentelemetry/sdk-node"
  dependency-version: 0.300.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.72.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.72.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: ai
  dependency-version: 7.0.150
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: eslint
  dependency-version: 10.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: eslint-plugin-n
  dependency-version: 18.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: markdownlint-cli2
  dependency-version: 0.24.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: sql.js
  dependency-version: 1.15.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: typedoc-plugin-markdown
  dependency-version: 4.14.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: vite
  dependency-version: 8.3.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/minor-patch-2320c3b3a3 branch from f4e7717 to ffe2a2e Compare October 26, 2026 12:59
@dependabot @github

dependabot Bot commented on behalf of github Nov 2, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 2, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/minor-patch-2320c3b3a3 branch November 2, 2026 08:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates (Dependabot)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant