Skip to content

deps: bump the minor-patch group across 1 directory with 21 updates - #199

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/minor-patch-bc6235b8cb
Open

deps: bump the minor-patch group across 1 directory with 21 updates#199
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/minor-patch-bc6235b8cb

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-patch group with 21 updates in the / directory:

Package From To
@opentelemetry/api 1.9.1 1.10.0
@typescript-eslint/eslint-plugin 8.71.2 8.72.1
@typescript-eslint/parser 8.71.2 8.72.1
eslint 10.12.0 10.13.0
eslint-plugin-n 18.4.1 18.5.0
markdownlint-cli2 0.23.3 0.24.0
@types/node 26.6.5 26.6.6
@anthropic-ai/claude-agent-sdk 0.3.301 0.3.314
@modelcontextprotocol/sdk 1.32.1 1.32.2
@ai-sdk/anthropic 4.0.81 4.0.92
@ai-sdk/google 4.0.98 4.0.108
@fastify/static 10.1.6 10.1.8
ai 7.0.142 7.0.157
react-router-dom 7.18.4 7.18.5
vite 8.3.4 8.3.5
typedoc-plugin-markdown 4.14.0 4.14.1
@opentelemetry/exporter-metrics-otlp-grpc 0.223.0 0.300.0
@opentelemetry/exporter-trace-otlp-grpc 0.223.0 0.300.0
@opentelemetry/sdk-node 0.223.0 0.300.0
@opentelemetry/semantic-conventions 1.43.0 1.44.0
sql.js 1.15.0 1.15.2

Updates @opentelemetry/api from 1.9.1 to 1.10.0

Release notes

Sourced from @​opentelemetry/api's releases.

api/v1.10.0

1.10.0

🚀 Features

  • feat(api): integrate the Logs API into @opentelemetry/api #4862 @​hectorhdzg
  • feat(api): add imperative context.attach() for setting context across callback boundaries that with() cannot wrap. #6845 @​pichlermarc
    • attach() returns a Token whose dispose() method restores the previous context. Use token.dispose() to detach.
    • attach is an optional method on the ContextManager interface; when the active context manager does not implement it, context.attach() logs a warning and returns a no-op token.
  • feat(api): add AnyValue type (of type unknown) and extend Attributes type values to use AnyValue #6780 @​trentm
    • This is part of supporting OTEP 4485.
    • This is a breaking change for SDK implementations, in that they may need to support more attribute types for any APIs that accept Attributes or AnyValue. Implementors should refer to the OTEP 4485 link above for "MUST / SHOULD" requirements for complex attributes handling. See also the attributes-handling utilities provided by @opentelemetry/core to help. For example, cleanSimpleAttributes() can be used to limit user-provided attributes to the set of value types supported in earlier @opentelemetry/api versions.
    • This change is typically not a breaking change for users of @opentelemetry/api. There is one possible breaking case: If a TypeScript user was using the Attributes type in their own code and using TypeScript Narrowing to reduce an attribute value to an expected type (example here). It is expected that this usage should be rare and, likely, limited to SDK implementations, if at all. (If this impacted your code, please let us know.)
    • Note for users of attributes: Simple attributes SHOULD be used whenever possible. Instrumentations SHOULD assume that backends do not index individual properties of complex attributes, that querying or aggregating on such properties is inefficient and complicated, and that reporting complex attributes carries higher performance overhead.

🐛 Bug Fixes

  • fix(api): cap tracestate list-members and total length in the deprecated TraceState.set() so it stays in step with TraceState from @opentelemetry/core #6964 @​Zuhef
  • fix: resolve the ESM build through the default export condition instead of import, so a resolver that activates neither import nor require still finds an entry point #7132 @​overbalance

📚 Documentation

  • docs(api): complete @since annotations for the public API #7023 @​nabeelamjadsheikh
    • Adds the three missing exported-type annotations and the member-level annotations for methods and properties introduced after their enclosing type.
    • Corrects Attributes, AttributeValue and TracerOptions from 1.3.0 to 1.1.0; all three were already importable in 1.1.0 via wildcard re-export.

🏠 Internal

  • build: migrate the package build from tsc to tsdown, emitting dual CJS/ESM output from a single dist/ directory #6293 @​overbalance
    • The public entry points are unchanged: @opentelemetry/api and @opentelemetry/api/experimental. This package already declared an exports map, so deep imports such as @opentelemetry/api/build/src/... were rejected before this change and continue to be.
    • The emitted files moved out of build/src (CJS), build/esm and build/esnext (ESM) into dist/, using .cjs/.mjs extensions with matching .d.cts/.d.mts declarations. The non-standard esnext condition has been dropped in favour of the standard import/require conditions.
  • perf(api): add getGlobal fast-path #6956 @​legendecas
  • chore: remove the redundant module field from package.json; bundlers resolve the ESM build through the exports map #7130 @​overbalance
Changelog

Sourced from @​opentelemetry/api's changelog.

1.10.0

🚀 (Enhancement)

🐛 (Bug Fix)

  • fix(core): added falsy check to make otel core work with browser where webpack config had process as false or null #3613 @​ravindra-dyte
  • fix(instrumentation-http): include query params in http.target #3646 @​kobi-co

📚 (Refine Doc)

🏠 (Internal)

Commits
  • 56e6b1b chore: Release API 1.4.1, SDK 1.10.0, Experimental 0.36.0 (#3654)
  • ecb5ebe fix: Minor typing issues for web sandbox (#3660)
  • 48ecf22 feat(sdk-trace-base): add dropped attributes and events count on span (#3576)
  • 95bf6fc fix(build): add example/http to ignore list in update-ts-configs (#3657)
  • 3a2ca58 feat: add unit to view instrument selection criteria (#3647)
  • ebc8575 chore(jeager-exporter): deprecate jaeger exporter (#3585)
  • 2f715bd feat: allow to add attributes from grpc metadata in the patched server (#3589)
  • cbbdfd3 fix(sdk-node): update instrumentations once MeterProvider is initialized (#3624)
  • 4a4484a chore: update http example (#3651)
  • 494efff fix(otlp-exporter-base): fix changelog for merged retry pr (#3650)
  • Additional commits viewable in compare view

Updates @typescript-eslint/eslint-plugin from 8.71.2 to 8.72.1

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.72.1

8.72.1 (2026-10-26)

🩹 Fixes

  • eslint-plugin: [no-unnecessary-condition] false positives on unresolved conditional types (#13062)
  • eslint-plugin: [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (#13039)
  • typescript-estree: use one Program per tsconfig for the project service in single-run mode (#12988)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.72.0

8.72.0 (2026-10-19)

🚀 Features

  • eslint-plugin: lazy load rules (#13010)
  • eslint-plugin: [await-thenable] add allowMixedPromiseArrays option (#12992)
  • typescript-estree: error on abstract keyword that precedes export (#13019)

🩹 Fixes

  • ast-spec: add JSXFragment to JSXAttribute['value'] (#13051)
  • eslint-plugin: [prefer-readonly-parameter-types] check where allowed type aliases are declared (#13016)
  • eslint-plugin: [no-deprecated] report deprecated properties in object literals (#12704)
  • eslint-plugin: use isTypeLiteralType instead of type.isLiteral() to include bigint literals on TS < 5.0 (#13053)
  • eslint-plugin: [require-array-sort-compare] check tuples (#13058)
  • eslint-plugin: [require-array-sort-compare] ignore extra this type argument on TS < 5.1 (#13055)
  • type-utils: discriminateAnyType crashes when calling getAwaitedType on awaited type in TS < 5.0 (#13054)
  • typescript-estree: include leading and trailing comments & whitespace in Program range (#12991)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.72.1 (2026-10-26)

🩹 Fixes

  • eslint-plugin: [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (#13039)
  • eslint-plugin: [no-unnecessary-condition] false positives on unresolved conditional types (#13062)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.72.0 (2026-10-19)

🚀 Features

  • eslint-plugin: [await-thenable] add allowMixedPromiseArrays option (#12992)
  • eslint-plugin: lazy load rules (#13010)

🩹 Fixes

  • type-utils: discriminateAnyType crashes when calling getAwaitedType on awaited type in TS < 5.0 (#13054)
  • eslint-plugin: [require-array-sort-compare] ignore extra this type argument on TS < 5.1 (#13055)
  • eslint-plugin: [require-array-sort-compare] check tuples (#13058)
  • eslint-plugin: use isTypeLiteralType instead of type.isLiteral() to include bigint literals on TS < 5.0 (#13053)
  • eslint-plugin: [no-deprecated] report deprecated properties in object literals (#12704)
  • eslint-plugin: [prefer-readonly-parameter-types] check where allowed type aliases are declared (#13016)
  • typescript-estree: include leading and trailing comments & whitespace in Program range (#12991)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits
  • 4ad6b75 chore(release): publish 8.72.1
  • 7757694 chore: cleanup typecheck & build and fix race condition (#13071)
  • 1166ba2 chore(type-utils): detect methods in isTypeReadonly without reading the inter...
  • 2f0343a fix(eslint-plugin): [no-unnecessary-type-assertion] bound recursive type trav...
  • c49d287 chore: [ci] test on oldest supported TS version (#13024)
  • 594fe28 fix(eslint-plugin): [no-unnecessary-condition] false positives on unresolved ...
  • a4c2603 chore(release): publish 8.72.0
  • c6eb98c feat(eslint-plugin): [await-thenable] add allowMixedPromiseArrays option (#...
  • b382b74 fix(type-utils): discriminateAnyType crashes when calling getAwaitedType on a...
  • 79edd89 fix(eslint-plugin): [require-array-sort-compare] ignore extra this type argum...
  • Additional commits viewable in compare view

Updates @typescript-eslint/parser from 8.71.2 to 8.72.1

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.72.1

8.72.1 (2026-10-26)

🩹 Fixes

  • eslint-plugin: [no-unnecessary-condition] false positives on unresolved conditional types (#13062)
  • eslint-plugin: [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (#13039)
  • typescript-estree: use one Program per tsconfig for the project service in single-run mode (#12988)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.72.0

8.72.0 (2026-10-19)

🚀 Features

  • eslint-plugin: lazy load rules (#13010)
  • eslint-plugin: [await-thenable] add allowMixedPromiseArrays option (#12992)
  • typescript-estree: error on abstract keyword that precedes export (#13019)

🩹 Fixes

  • ast-spec: add JSXFragment to JSXAttribute['value'] (#13051)
  • eslint-plugin: [prefer-readonly-parameter-types] check where allowed type aliases are declared (#13016)
  • eslint-plugin: [no-deprecated] report deprecated properties in object literals (#12704)
  • eslint-plugin: use isTypeLiteralType instead of type.isLiteral() to include bigint literals on TS < 5.0 (#13053)
  • eslint-plugin: [require-array-sort-compare] check tuples (#13058)
  • eslint-plugin: [require-array-sort-compare] ignore extra this type argument on TS < 5.1 (#13055)
  • type-utils: discriminateAnyType crashes when calling getAwaitedType on awaited type in TS < 5.0 (#13054)
  • typescript-estree: include leading and trailing comments & whitespace in Program range (#12991)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.72.1 (2026-10-26)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.72.0 (2026-10-19)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Updates eslint from 10.12.0 to 10.13.0

Release notes

Sourced from eslint's releases.

v10.13.0

Features

  • 48d5cc4 feat: report references inside IIFEs in no-use-before-define (#21238) (Irfan fandi)
  • a39d9fb feat: add globalThis to no-obj-calls (#21382) (synthex-byte)
  • 66ac583 feat: check yield* expressions in no-unsafe-optional-chaining (#21399) (xbinaryx)

Bug Fixes

  • 87bd2ce fix: avoid redeclared let when no-var and one-var fix together (#21389) (Daniel Pinto)

Documentation

  • 4783a68 docs: Update README (GitHub Actions Bot)
  • 43f0ac9 docs: clarify parameter description in getText (#21287) (lumir)

Chores

  • b59d889 chore: update github/codeql-action action to v4.38.3 (#21412) (renovate[bot])
  • 95e51a0 ci: re-enable @typescript-eslint/typescript-eslint in ecosystem tests (#21410) (Francesco Trotta)
  • 317fcb3 chore: update ecosystem plugins (#21409) (ESLint Bot)
  • b92decf perf: skip no-redeclare scan for single-declaration variables (#21365) (James Ross)
  • 47b7063 chore: update dependency @​eslint/json to ^2.1.1 (#21398) (renovate[bot])
  • e5aea41 chore: update ecosystem plugins (#21390) (ESLint Bot)
Commits

Updates eslint-plugin-n from 18.4.1 to 18.5.0

Release notes

Sourced from eslint-plugin-n's releases.

v18.5.0

18.5.0 (2026-10-18)

🌟 Features

  • node-builtins: ✨ support 20.20, 22.23, 24.22 and 26.12 (#578) (2fa0069)

🩹 Fixes

  • no-mixed-requires: classify modern Node built-ins (#580) (58c5d56)
  • no-unsupported-features/es-syntax: Promise.withResolvers is supported since Node.js 22.0.0 (#577) (4a6dee1)

📚 Documentation

  • explain module aliases for no-missing-require (#579) (fcf1256)
Changelog

Sourced from eslint-plugin-n's changelog.

18.5.0 (2026-10-18)

🌟 Features

  • node-builtins: ✨ support 20.20, 22.23, 24.22 and 26.12 (#578) (2fa0069)

🩹 Fixes

  • no-mixed-requires: classify modern Node built-ins (#580) (58c5d56)
  • no-unsupported-features/es-syntax: Promise.withResolvers is supported since Node.js 22.0.0 (#577) (4a6dee1)

📚 Documentation

  • explain module aliases for no-missing-require (#579) (fcf1256)
Commits
  • 5bbe603 chore(master): release 18.5.0 (#581)
  • 2fa0069 feat(node-builtins): ✨ support 20.20, 22.23, 24.22 and 26.12 (#578)
  • fcf1256 docs: explain module aliases for no-missing-require (#579)
  • 58c5d56 fix(no-mixed-requires): classify modern Node built-ins (#580)
  • 4a6dee1 fix(no-unsupported-features/es-syntax): Promise.withResolvers is supported si...
  • See full diff in compare view

Updates markdownlint-cli2 from 0.23.3 to 0.24.0

Changelog

Sourced from markdownlint-cli2's changelog.

0.24.0

  • Update dependencies (including markdownlint)
Commits
  • 341e2a3 Update to version 0.24.0.
  • 3e4452b Freshen list of external custom rules included with the markdownlint-cli2-rul...
  • e728d6f Update dependency: markdown-it to 15.0.3.
  • 0a869ec Bump eslint-plugin-jsdoc from 65.2.2 to 65.2.4
  • fec2034 Update indirect playwright dependencies.
  • 74ed8f6 Bump @​playwright/test from 1.63.0 to 1.64.0
  • 05659c7 Bump smol-toml from 1.9.0 to 1.9.1
  • 20a66eb Bump execa from 10.0.1 to 10.1.0
  • 692e9cc Bump eslint-plugin-jsdoc from 65.1.0 to 65.2.2
  • 4e634a2 Bump concurrently from 10.0.5 to 10.0.6
  • Additional commits viewable in compare view

Updates @types/node from 26.6.5 to 26.6.6

Commits

Updates @anthropic-ai/claude-agent-sdk from 0.3.301 to 0.3.314

Release notes

Sourced from @​anthropic-ai/claude-agent-sdk's releases.

v0.3.314

What's changed

  • Added sandbox_required_unavailable to startup_failure_reason, for the result Claude Code writes when a required sandbox cannot run
  • Added permissions.blockWritesOutsideWorkingDirectories to the Settings type
  • Added prewarm() (alpha) to the @anthropic-ai/claude-agent-sdk/core entry point
  • Fixed a settings file left out of settingSources still supplying some settings, such as auto mode rules and saved permission consents
  • Updated to parity with Claude Code v2.1.314

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.314
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.314
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.314
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.314

v0.3.312

What's changed

  • Added autoMode, skipAutoPermissionPrompt, useAutoModeDuringPlan and permissions.disableAutoMode to the Settings type
  • Added unanswered (skipped, replied_in_chat or dismissed) to AskUserQuestion answers' per-question annotations; send it only when system/init lists the ask_user_question_unanswered_v1 capability
  • Fixed resolveSettings() returning mistyped managed auto-mode settings, such as permissions.disableAutoMode: true, as written instead of reading them as the CLI does; a user or project settings file whose auto-mode keys hold an invalid value is now skipped, as in the CLI
  • Updated to parity with Claude Code v2.1.312

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.312
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.312
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.312
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.312

v0.3.311

What's changed

  • Added cacheCreationEphemeral5mInputTokens and cacheCreationEphemeral1hInputTokens to ModelUsage, splitting cacheCreationInputTokens by cache lifetime
  • Changed background start-up work to wait until the first model request is sent, for about 10 seconds at most, when the first message arrives during start-up
  • Changed the minimum supported Node.js version from 18.0.0 to 18.14.0
  • Updated to parity with Claude Code v2.1.311

Update

... (truncated)

Changelog

Sourced from @​anthropic-ai/claude-agent-sdk's changelog.

0.3.314

  • Added sandbox_required_unavailable to startup_failure_reason, for the result Claude Code writes when a required sandbox cannot run
  • Added permissions.blockWritesOutsideWorkingDirectories to the Settings type
  • Added prewarm() (alpha) to the @anthropic-ai/claude-agent-sdk/core entry point
  • Fixed a settings file left out of settingSources still supplying some settings, such as auto mode rules and saved permission consents
  • Updated to parity with Claude Code v2.1.314

0.3.313

  • Updated to parity with Claude Code v2.1.313

0.3.312

  • Added autoMode, skipAutoPermissionPrompt, useAutoModeDuringPlan and permissions.disableAutoMode to the Settings type
  • Added unanswered (skipped, replied_in_chat or dismissed) to AskUserQuestion answers' per-question annotations; send it only when system/init lists the ask_user_question_unanswered_v1 capability
  • Fixed resolveSettings() returning mistyped managed auto-mode settings, such as permissions.disableAutoMode: true, as written instead of reading them as the CLI does; a user or project settings file whose auto-mode keys hold an invalid value is now skipped, as in the CLI
  • Updated to parity with Claude Code v2.1.312

0.3.311

  • Added cacheCreationEphemeral5mInputTokens and cacheCreationEphemeral1hInputTokens to ModelUsage, splitting cacheCreationInputTokens by cache lifetime
  • Changed background start-up work to wait until the first model request is sent, for about 10 seconds at most, when the first message arrives during start-up
  • Changed the minimum supported Node.js version from 18.0.0 to 18.14.0
  • Updated to parity with Claude Code v2.1.311

0.3.310

  • Updated to parity with Claude Code v2.1.310

0.3.309

  • Fixed host-supplied managedSettings dropping disableAllHooks, disableSkillShellExecution and empty allowedHttpHookUrls / httpHookAllowedEnvVars lists
  • Changed extractFromBunfs() to extract the embedded CLI into its own per-user temp directory (claude-agent-sdk-<uid>, or claude-agent-sdk on Windows) instead of Claude Code's temp root
  • Changed extractFromBunfs() to reuse an already-extracted file only when its bytes match the embedded binary, replacing it otherwise
  • Updated to parity with Claude Code v2.1.309

0.3.308

  • Updated to parity with Claude Code v2.1.308

0.3.307

  • Added wakeup_source to the command_lifecycle started frame of a scheduled wakeup or task, and scheduled_for for a wakeup (capability lifecycle_wakeup_source_v1), so a host can tell which one fired
  • Added supportedDialogKinds to browser SDK query(), sent on initialize; a non-empty list requires onUserDialog
  • Updated to parity with Claude Code v2.1.307

0.3.306

  • Updated to parity with Claude Code v2.1.306

... (truncated)

Commits

Updates @modelcontextprotocol/sdk from 1.32.1 to 1.32.2

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

1.32.2

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@1.32.1...1.32.2

Commits
  • 3b73021 chore: bump version to 1.32.2 (#3089)
  • fa56d81 [v1.x] fix: allow registering after connect() when the capability was declare...
  • 6919e95 fix: add explicit | undefined to Transport optional properties (v1.x backport...
  • See full diff in compare view

Updates @ai-sdk/anthropic from 4.0.81 to 4.0.92

Changelog

Sourced from @​ai-sdk/anthropic's changelog.

4.0.92

Patch Changes

  • 61a315e: fix: map the top-level reasoning option consistently across providers

    Providers now resolve reasoning the same way:

    1. A provider-specific reasoning setting in providerOptions is sent unchanged. OpenAI no longer drops providerOptions.openai.reasoningEffort values that are not in its list for the model, and Fireworks no longer rewrites providerOptions.fireworks.reasoningEffort. Fireworks also sends top-level reasoning values directly instead of rounding them to 'high' at most, except for model families known to reject 'none' (GPT-OSS, GLM-5.3, Muse Spark) or 'minimal' (Nemotron, Inkling).
    2. Otherwise, reasoning maps to the closest level the model supports, rounding down, and rounds up only when there is no lower level. For example, 'xhigh' now maps to 'high' instead of 'max' on Anthropic and Bedrock models without xhigh effort, and 'medium' maps to 'low' instead of 'high' on DeepSeek, Kimi K3, and Mistral GLM-5.3 models.
    3. 'none' on a model that cannot disable reasoning maps to the model's lowest level with a compatibility warning, instead of being dropped or sending a request the API rejects. This affects GPT-6 models without 'none', xAI grok-4.5 and later, Groq GPT-OSS, Kimi K3, Perplexity, QuiverAI, Bedrock OpenAI gpt-oss models, and Gemini 2.5 Pro (minimum thinking budget). Gemini 3 and Anthropic and Bedrock between_tools mappings now emit the compatibility warning too.

    mapReasoningToProviderEffort now accepts any reasoning value, returns an optional providerOptionsEffort unchanged, and rounds levels that are missing from the effort map to the closest supported level. mapReasoningToProviderBudget maps 'none' to the minimum reasoning budget, always returns a budget, and uses the default percentage for levels missing from budgetPercentages. OpenAICompatibleChatConfig adds an optional mapReasoning function for mapping the top-level reasoning option.

  • Updated dependencies [61a315e]

    • @​ai-sdk/provider-utils@​5.0.71

4.0.91

Patch Changes

  • 50da4c5: Fix workflow serialization of Anthropic models using API keys or synchronous auth tokens while preserving support for asynchronous token providers.

4.0.90

Patch Changes

  • 63bf860: Support synchronous and asynchronous authToken providers so applications can use refreshable credentials, including Anthropic workload identity federation helpers for inference. Resolve tokens before each request while preserving existing authentication headers and beta-header behavior.
  • Updated dependencies [57086ff]
  • Updated dependencies [95348b3]
    • @​ai-sdk/provider-utils@​5.0.70

4.0.89

Patch Changes

  • Updated dependencies [e64ed82]
    • @​ai-sdk/provider-utils@​5.0.69

4.0.88

Patch Changes

  • e729d58: chore(docs): update README.md for consistent format and to avoid duplication
  • Updated dependencies [5475347]
  • Updated dependencies [e729d58]
    • @​ai-sdk/provider@​4.0.34
    • @​ai-sdk/provider-utils@​5.0.68

4.0.87

... (truncated)

Commits
  • d1067fd Version Packages (#24173)
  • 61a315e fix: map reasoning consistently across providers (#24123)
  • a5db0af Version Packages (#24143)
  • 50da4c5 fix(anthropic): preserve workflow serialization for synchronous credentials (...
  • 1f3cdbb Version Packages (#24084)
  • 95348b3 feat(provider-utils): change Experimental_SandboxSession's spawn() method...
  • 63bf860 feat(anthropic): support refreshable auth tokens (#24096)
  • e197b50 Version Packages (#23955)
  • 612be23 Version Pa...

    Description has been truncated

@dependabot
deps: bump the minor-patch group across 1 directory with 21 updates
ca13426 
Bumps the minor-patch group with 21 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@opentelemetry/api](https://github.com/open-telemetry/opentelemetry-js) | `1.9.1` | `1.10.0` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.71.2` | `8.72.1` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.71.2` | `8.72.1` |
| [eslint](https://github.com/eslint/eslint) | `10.12.0` | `10.13.0` |
| [eslint-plugin-n](https://github.com/eslint-community/eslint-plugin-n) | `18.4.1` | `18.5.0` |
| [markdownlint-cli2](https://github.com/DavidAnson/markdownlint-cli2) | `0.23.3` | `0.24.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.5` | `26.6.6` |
| [@anthropic-ai/claude-agent-sdk](https://github.com/anthropics/claude-agent-sdk-typescript) | `0.3.301` | `0.3.314` |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.32.1` | `1.32.2` |
| [@ai-sdk/anthropic](https://github.com/vercel/ai/tree/HEAD/packages/anthropic) | `4.0.81` | `4.0.92` |
| [@ai-sdk/google](https://github.com/vercel/ai/tree/HEAD/packages/google) | `4.0.98` | `4.0.108` |
| [@fastify/static](https://github.com/fastify/fastify-static) | `10.1.6` | `10.1.8` |
| [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `7.0.142` | `7.0.157` |
| [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.18.4` | `7.18.5` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.4` | `8.3.5` |
| [typedoc-plugin-markdown](https://github.com/typedoc2md/typedoc-plugin-markdown/tree/HEAD/packages/typedoc-plugin-markdown) | `4.14.0` | `4.14.1` |
| [@opentelemetry/exporter-metrics-otlp-grpc](https://github.com/open-telemetry/opentelemetry-js) | `0.223.0` | `0.300.0` |
| [@opentelemetry/exporter-trace-otlp-grpc](https://github.com/open-telemetry/opentelemetry-js) | `0.223.0` | `0.300.0` |
| [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.223.0` | `0.300.0` |
| [@opentelemetry/semantic-conventions](https://github.com/open-telemetry/opentelemetry-js) | `1.43.0` | `1.44.0` |
| [sql.js](https://github.com/sql-js/sql.js) | `1.15.0` | `1.15.2` |



Updates `@opentelemetry/api` from 1.9.1 to 1.10.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v1.9.1...v1.10.0)

Updates `@typescript-eslint/eslint-plugin` from 8.71.2 to 8.72.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.1/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.71.2 to 8.72.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.1/packages/parser)

Updates `eslint` from 10.12.0 to 10.13.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.12.0...v10.13.0)

Updates `eslint-plugin-n` from 18.4.1 to 18.5.0
- [Release notes](https://github.com/eslint-community/eslint-plugin-n/releases)
- [Changelog](https://github.com/eslint-community/eslint-plugin-n/blob/master/CHANGELOG.md)
- [Commits](eslint-community/eslint-plugin-n@v18.4.1...v18.5.0)

Updates `markdownlint-cli2` from 0.23.3 to 0.24.0
- [Changelog](https://github.com/DavidAnson/markdownlint-cli2/blob/main/CHANGELOG.md)
- [Commits](DavidAnson/markdownlint-cli2@v0.23.3...v0.24.0)

Updates `@types/node` from 26.6.5 to 26.6.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@anthropic-ai/claude-agent-sdk` from 0.3.301 to 0.3.314
- [Release notes](https://github.com/anthropics/claude-agent-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/claude-agent-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/claude-agent-sdk-typescript@v0.3.301...v0.3.314)

Updates `@modelcontextprotocol/sdk` from 1.32.1 to 1.32.2
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@1.32.1...1.32.2)

Updates `@ai-sdk/anthropic` from 4.0.81 to 4.0.92
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/anthropic/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/anthropic@4.0.92/packages/anthropic)

Updates `@ai-sdk/google` from 4.0.98 to 4.0.108
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/google/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/google@4.0.108/packages/google)

Updates `@fastify/static` from 10.1.6 to 10.1.8
- [Release notes](https://github.com/fastify/fastify-static/releases)
- [Commits](fastify/fastify-static@v10.1.6...v10.1.8)

Updates `ai` from 7.0.142 to 7.0.157
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@7.0.157/packages/ai)

Updates `react-router-dom` from 7.18.4 to 7.18.5
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/react-router-dom@7.18.5/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.18.5/packages/react-router-dom)

Updates `vite` from 8.3.4 to 8.3.5
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.3.5/packages/vite)

Updates `typedoc-plugin-markdown` from 4.14.0 to 4.14.1
- [Release notes](https://github.com/typedoc2md/typedoc-plugin-markdown/releases)
- [Changelog](https://github.com/typedoc2md/typedoc-plugin-markdown/blob/main/packages/typedoc-plugin-markdown/CHANGELOG.md)
- [Commits](https://github.com/typedoc2md/typedoc-plugin-markdown/commits/typedoc-plugin-markdown@4.14.1/packages/typedoc-plugin-markdown)

Updates `@opentelemetry/exporter-metrics-otlp-grpc` from 0.223.0 to 0.300.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.223.0...experimental/v0.300.0)

Updates `@opentelemetry/exporter-trace-otlp-grpc` from 0.223.0 to 0.300.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.223.0...experimental/v0.300.0)

Updates `@opentelemetry/sdk-node` from 0.223.0 to 0.300.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.223.0...experimental/v0.300.0)

Updates `@opentelemetry/semantic-conventions` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@semconv/v1.43.0...semconv/v1.44.0)

Updates `sql.js` from 1.15.0 to 1.15.2
- [Release notes](https://github.com/sql-js/sql.js/releases)
- [Commits](sql-js/sql.js@v1.15.0...v1.15.2)

---
updated-dependencies:
- dependency-name: "@opentelemetry/api"
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.72.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.72.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: eslint
  dependency-version: 10.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: eslint-plugin-n
  dependency-version: 18.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: markdownlint-cli2
  dependency-version: 0.24.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: "@types/node"
  dependency-version: 26.6.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: "@anthropic-ai/claude-agent-sdk"
  dependency-version: 0.3.314
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.32.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: "@ai-sdk/anthropic"
  dependency-version: 4.0.92
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: "@ai-sdk/google"
  dependency-version: 4.0.108
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: "@fastify/static"
  dependency-version: 10.1.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: ai
  dependency-version: 7.0.157
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: react-router-dom
  dependency-version: 7.18.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: vite
  dependency-version: 8.3.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: typedoc-plugin-markdown
  dependency-version: 4.14.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: "@opentelemetry/exporter-metrics-otlp-grpc"
  dependency-version: 0.300.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: "@opentelemetry/exporter-trace-otlp-grpc"
  dependency-version: 0.300.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: "@opentelemetry/sdk-node"
  dependency-version: 0.300.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: "@opentelemetry/semantic-conventions"
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: sql.js
  dependency-version: 1.15.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Dependency updates (Dependabot) label Nov 2, 2026
@DeDuva Claude

DeDuva commented Nov 2, 2026 •
edited
Loading

Copy link
Copy Markdown
Owner

Validation failed — not merging. minor-patch group across 1 directory, 21 updates, head ca134262.

Stage: npm ci in a clean worktree of this head. It never reached build or test — exit 1 with ERESOLVE. CI agrees independently: test (job 125166911385) annotates npm install failed after 3 attempts, and sdk-exports-validation (job 125166911522) fails the same way.

Error:

npm error code ERESOLVE
npm error While resolving: @opentelemetry/context-async-hooks@2.12.0
npm error Found: @opentelemetry/api@1.10.0
npm error   dev @opentelemetry/api@"^1.10.0" from the root project
npm error Could not resolve dependency:
npm error peer @opentelemetry/api@">=1.0.0 <1.10.0" from @opentelemetry/context-async-hooks@2.12.0

Likely cause — the group is internally inconsistent. It raises @opentelemetry/api from ^1.9.0 to ^1.10.0 (root devDependencies and packages/squad-sdk optionalDependencies) while leaving @opentelemetry/context-async-hooks at ^2.12.0, whose peer range is >=1.0.0 <1.10.0 — so 1.10.0 is excluded by exactly one version. The OTel 2.x line will not accept api 1.10; the version that does is the 3.x line, which is #193, a major sitting separately. So this is not stale base and not lockfile drift: the manifest changes genuinely do not resolve, and the lockfile committed here was built by Dependabot without that constraint being satisfiable.

Two further things in this group that are not minor-patch in substance, worth settling in the same decision:

  • @opentelemetry/sdk-node, @opentelemetry/exporter-trace-otlp-grpc and @opentelemetry/exporter-metrics-otlp-grpc go ^0.223.0 → ^0.300.0. Under semver a 0.x minor bump is breaking, and a 77-minor jump is a major-scrutiny change regardless of the group it arrives in.
  • markdownlint-cli2 goes ^0.23.3 → ^0.24.0 — also 0.x, so also breaking by semver, and it gates lint:docs.

Recommended next action (nothing was changed here). The @opentelemetry/api ceiling has to be resolved before this group can install at all, and it is a human's call which way: either hold @opentelemetry/api at ^1.9.0 until the OTel 3.x migration in #193 is taken deliberately, or take the whole OTel stack to 3.x together and retire #193 into it. Patching either manifest here would be editing the PR, so it was left alone. The non-OTel members of this group (eslint, @typescript-eslint/eslint-plugin, @types/node, ai, @ai-sdk/*, vite, react-router-dom, @anthropic-ai/claude-agent-sdk, @modelcontextprotocol/sdk) are unexamined — they are blocked behind an install that never ran, not judged.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Dependency updates (Dependabot)

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@DeDuva