feat(deps): bump the production-patch-minor group across 3 directories with 18 updates by dependabot[bot] · Pull Request #2501 · braintrustdata/braintrust-sdk-javascript

dependabot · 2026-09-21T06:36:02Z

Bumps the production-patch-minor group with 18 updates in the / directory:

Package	From	To
dotenv	`16.4.5`	`16.6.1`
@next/env	`14.2.3`	`14.2.35`
@vercel/functions	`1.0.2`	`1.6.0`
acorn	`8.16.0`	`8.18.0`
cjs-module-lexer	`2.2.0`	`2.2.1`
cors	`2.8.5`	`2.8.6`
esbuild	`0.28.1`	`0.28.2`
minimatch	`10.2.5`	`10.2.6`
source-map	`0.7.6`	`0.8.0`
zod-to-json-schema	`3.25.1`	`3.25.2`
@braintrust/bt-darwin-arm64	`0.12.0`	`0.20.0`
@braintrust/bt-darwin-x64	`0.12.0`	`0.20.0`
@braintrust/bt-linux-arm64	`0.12.0`	`0.20.0`
@braintrust/bt-linux-x64	`0.12.0`	`0.20.0`
@braintrust/bt-linux-x64-musl	`0.12.0`	`0.20.0`
@braintrust/bt-win32-arm64	`0.12.0`	`0.20.0`
@braintrust/bt-win32-x64	`0.12.0`	`0.20.0`
@deepseek-ai/schemastery	`3.18.1`	`3.18.2`

Bumps the production-patch-minor group with 1 update in the /integrations/deepseek-harness directory: @deepseek-ai/schemastery.
Bumps the production-patch-minor group with 17 updates in the /js directory:

Package	From	To
dotenv	`16.4.5`	`16.6.1`
@next/env	`14.2.3`	`14.2.35`
@vercel/functions	`1.0.2`	`1.6.0`
acorn	`8.16.0`	`8.18.0`
cjs-module-lexer	`2.2.0`	`2.2.1`
cors	`2.8.5`	`2.8.6`
esbuild	`0.28.1`	`0.28.2`
minimatch	`10.2.5`	`10.2.6`
source-map	`0.7.6`	`0.8.0`
zod-to-json-schema	`3.25.1`	`3.25.2`
@braintrust/bt-darwin-arm64	`0.12.0`	`0.20.0`
@braintrust/bt-darwin-x64	`0.12.0`	`0.20.0`
@braintrust/bt-linux-arm64	`0.12.0`	`0.20.0`
@braintrust/bt-linux-x64	`0.12.0`	`0.20.0`
@braintrust/bt-linux-x64-musl	`0.12.0`	`0.20.0`
@braintrust/bt-win32-arm64	`0.12.0`	`0.20.0`
@braintrust/bt-win32-x64	`0.12.0`	`0.20.0`

Updates dotenv from 16.4.5 to 16.6.1

Changelog

Sourced from dotenv's changelog.

16.6.1 (2025-06-27)

Changed

Default quiet to true – hiding the runtime log message (#874)

NOTICE: 17.0.0 will be released with quiet defaulting to false. Use config({ quiet: true }) to suppress.

And check out the new dotenvx. As coding workflows evolve and agents increasingly handle secrets, encrypted .env files offer a much safer way to deploy both agents and code together with secure secrets. Simply switch require('dotenv').config() for require('@dotenvx/dotenvx').config().

16.6.0 (2025-06-26)

Added

Default log helpful message [dotenv@16.6.0] injecting env (1) from .env (#870)

Use { quiet: true } to suppress

Aligns dotenv more closely with dotenvx.

16.5.0 (2025-04-07)

Added

🎉 Added new sponsor Graphite - the AI developer productivity platform helping teams on GitHub ship higher quality software, faster.

[!TIP] Become a sponsor

The dotenvx README is viewed thousands of times DAILY on GitHub and NPM. Sponsoring dotenv is a great way to get in front of developers and give back to the developer community at the same time.

Changed

Remove _log method. Use _debug #862

16.4.7 (2024-12-03)

Changed

Ignore .tap folder when publishing. (oops, sorry about that everyone. - @motdotla) #848

16.4.6 (2024-12-02)

Changed

Clean up stale dev dependencies #847

Various README updates clarifying usage and alternative solutions using dotenvx

Commits

076ba3b 16.6.1
8867fe0 changelog 🪵
424c32d Merge pull request #874 from motdotla/default-quiet-to-true
5270faf changelog 🪵
86ce001 force failure of path.relative in test
e6799e6 add tests
ec72534 add to test coverage
c886084 send coverage to text as well
a791032 add test
fa67c02 test quiet: false
Additional commits viewable in compare view

Updates @next/env from 14.2.3 to 14.2.35

Commits

7b940d9 v14.2.35
f307368 v14.2.34
5a97b40 v14.2.33
89ee561 v14.2.32
55f7662 v14.2.31
243072b v14.2.30
ca92115 v14.2.29
e65628a v14.2.28
43f10b8 v14.2.27
10a042c v14.2.26
Additional commits viewable in compare view

Updates @vercel/functions from 1.0.2 to 1.6.0

Changelog

Sourced from @vercel/functions's changelog.

1.6.0

Minor Changes

Add middleware-related helper functions (#12938)

1.5.2

Patch Changes

[vercel/functions] add geolocation.postalCode (#12753)

1.5.1

Patch Changes

[@vercel/functions] update headers doc (#12649)

1.5.0

Minor Changes

ipAddress: accept headers as input (#12429)

1.4.2

Patch Changes

[functions] decode city name (#12234)

1.4.1

Patch Changes

Package files in the root folder (#11982)

1.4.0

Minor Changes

Added OIDC Token utility functions (#11701)

1.3.0

Minor Changes

[functions] add getEnv method. (#11783)

1.2.0

... (truncated)

Commits

1e98464 Version Packages (#12851)
a1266a8 [react-router] Add initial @vercel/react-router package (#12903)
3b5b731 Update @vercel/functions generated docs (#12812)
247fb5a [edge] use @vercel/functions (#12758)
8cf0f1a Version Packages (#12756)
2cace21 [vercel/functions] add geolocation.postalCode (#12753)
b051248 Version Packages (#12648)
03825ff [@vercel/functions] update headers doc (#12649)
fdee7f0 [docs] point @vercel/functions docs to vercel.com (#12431)
37293e5 Version Packages (#12424)
Additional commits viewable in compare view

Updates acorn from 8.16.0 to 8.18.0

Commits

d788421 Mark version 8.18.0
b61cb9a Add startLocation option
c8d515c Don't compute curLine when locations are off
a7bd3cd Reject an unparenthesized arrow function as the left operand of **
b7c31b6 Fix mistake in previous patch
5c4af50 Avoid scanning from start of document in loose parser's resetTo
5b9d16c Mark version 8.17.0
449f9fa Make linter happy
9e1bced Add a strict option to turn on strict mode for scripts
8a47812 Convert stack overflow errors to SyntaxError instances
Additional commits viewable in compare view

Updates cjs-module-lexer from 2.2.0 to 2.2.1

Release notes

Sourced from cjs-module-lexer's releases.

2.2.1

What's Changed

fix: lexer.d.mts was never published by @JounQin in nodejs/cjs-module-lexer#119

New Contributors

@JounQin made their first contribution in nodejs/cjs-module-lexer#119

Full Changelog: nodejs/cjs-module-lexer@2.2.0...2.2.1

Commits

e62ac73 2.2.1
020eeee fix: lexer.d.mts was never published (#119)
See full diff in compare view

Updates cors from 2.8.5 to 2.8.6

Release notes

Sourced from cors's releases.

v2.8.6

What's Changed

Build: Node.js@12.16 and Node.js.13.12 by @smondal in expressjs/cors#189

Update README.md for origin function callback parameters by @dstudzinski in expressjs/cors#180

Suggest passing false for disallowed domains, not erroring by @shackpank in expressjs/cors#175

Changed the term whitelist to allowlist in Documentation by @jkasun in expressjs/cors#200

Fix typo in README by @alex-grover in expressjs/cors#207

Added new link & website in the README by @manjunath00 in expressjs/cors#269

Fix functions call with extra parameter by @LuisEGR in expressjs/cors#245

🐛 Fix readme status badge by @homersimpsons in expressjs/cors#306

chore: add support for OSSF scorecard reporting by @inigomarquinez in expressjs/cors#321

ci: fix errors in ci github action for node 8 by @inigomarquinez in expressjs/cors#322

test: improved test robustness by @Alex-GF in expressjs/cors#320

chore: upgrade scorecard workflow pinned action versions by @carpasse in expressjs/cors#341

ci: add CodeQL (SAST) by @bjohansebas in expressjs/cors#340

docs: remove broken link to demo site by @dpopp07 in expressjs/cors#344

OSSF Scorecard recommendations by @UlisesGascon in expressjs/cors#350

build(deps): bump github/codeql-action from 3.24.7 to 3.28.19 by @dependabot[bot] in expressjs/cors#351

build(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 by @dependabot[bot] in expressjs/cors#353

build(deps): bump actions/checkout from 4.1.1 to 4.2.2 by @dependabot[bot] in expressjs/cors#354

build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.2 by @dependabot[bot] in expressjs/cors#355

build(deps-dev): bump express from 4.17.1 to 4.21.2 by @dependabot[bot] in expressjs/cors#356

build(deps): bump actions/upload-artifact from 4.5.0 to 4.6.2 by @dependabot[bot] in expressjs/cors#352

build(deps-dev): bump mocha from 9.1.1 to 9.2.2 by @dependabot[bot] in expressjs/cors#358

update the docs for per request config by @jonchurch in expressjs/cors#338

(fix): readme updated for #271 origin option for * by @dhananjaysa92 in expressjs/cors#289

ci: upgrade Node versions by @UlisesGascon in expressjs/cors#359

chore: add funding to package.json by @bjohansebas in expressjs/cors#363

build(deps): bump github/codeql-action from 3.28.19 to 4.31.2 by @dependabot[bot] in expressjs/cors#371

build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by @dependabot[bot] in expressjs/cors#370

docs: Cleanup README by @efekrskl in expressjs/cors#374

chore: add node v25 by @imangas in expressjs/cors#375

Extend CI test matrix by @imangas in expressjs/cors#376

docs: simplify code examples with header comments by @jonchurch in expressjs/cors#386

docs: tweak intro, add note w/ browser enforcement, FAQ by @jonchurch in expressjs/cors#385

chore: remove HISTORY.md and nonexistent CONTRIBUTING.md from tarball by @Phillip9587 in expressjs/cors#388

Release: 2.8.6 by @UlisesGascon in expressjs/cors#390

New Contributors

@smondal made their first contribution in expressjs/cors#189

@dstudzinski made their first contribution in expressjs/cors#180

@shackpank made their first contribution in expressjs/cors#175

@jkasun made their first contribution in expressjs/cors#200

@alex-grover made their first contribution in expressjs/cors#207

@manjunath00 made their first contribution in expressjs/cors#269

@LuisEGR made their first contribution in expressjs/cors#245

@homersimpsons made their first contribution in expressjs/cors#306

@inigomarquinez made their first contribution in expressjs/cors#321

@Alex-GF made their first contribution in expressjs/cors#320

@carpasse made their first contribution in expressjs/cors#341

... (truncated)

Changelog

Sourced from cors's changelog.

2.8.6 / 2026-01-22

Improve documentation (API, context, examples...)

Remove additional markdown files from tarball

Commits

f00a8c1 2.8.6 (#390)
848e2bd chore: remove HISTORY.md and nonexistent CONTRIBUTING.md from tarball (#388)
cf8947e docs: tweak intro, add note w/ browser enforcement, FAQ (#385)
bbf62a5 docs: simplify code examples with header comments (#386)
f442e77 Extend CI test matrix (#376)
d5cf6cd ci: add support for node@25 (#375)
7e6f7ee docs: revamp content (#374)
b25644c build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 (#370)
f881e91 build(deps): bump github/codeql-action from 3.28.19 to 4.31.2 (#371)
9a9a760 chore: add funding to package.json (#363)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for cors since your current version.

Updates esbuild from 0.28.1 to 0.28.2

Release notes

Sourced from esbuild's releases.

v0.28.2
Fix tree shaking bug due to TypeScript import alias (#4507)

This release fixes a bug that could cause esbuild to incorrectly tree-shake imports that are used in a TypeScript type alias under certain circumstances. Affected code uses a TypeScript-specific import assignment and looks something like this:
import Base from './dep.js';
import Alias = Base.SomeType;
Fix CSS minification bug involving & (#4497)

This release fixes a bug where esbuild's CSS minifier incorrectly removed a & when it was unsafe to do so. Here is an example:
/* Original code */
.a .b {
 & .b:not(& .c) {
 color: red;
 }
}
/* Old output (with --minify) */
.a .b{.b:not(& .c){color:red}}
/* New output (with --minify) */
.a .b{& .b:not(& .c){color:red}}
This should match yes but not no. The old output incorrectly matched both.
Avoid overwriting input files without --allow-overwrite (#4484)

For example: esbuild input.js --outfile=input.js tells esbuild to overwrite input.js with the output of running esbuild on it. This was supposed to already be prevented by default, but it accidentally regressed in version 0.17.0 and apparently didn't have any test coverage. The error message was being printed but the input file was still being overwritten. Oops.

This release puts the original behavior back. With this release, esbuild should now actually avoid overwriting input files unless --allow-overwrite is explicitly present. This is done by not writing out any files when a build error is encountered.

Fix incorrect code generated when using top-level await (#4498)

Previously esbuild could generate code containing a syntax error in complex scenarios involving top-level await used in a dependency cycle. The problem was a missing async on one or more module wrapper closures. With this release, esbuild now uses a fixed-point iteration algorithm to correctly annotate all dependencies in the cycle as needing an async module wrapper.
Fix a minification bug with lowered logical assignment operators (#4508)

This release fixes a bug that could cause esbuild to generate incorrect code for logical assignment operators when lowering them to an older target environment. Specifically the lowering process requires duplicating the left-hand side, but esbuild incorrectly failed to count the duplicate as a new usage when the left-hand side is an identifier. That then caused the minifier to believe that the left-hand side was only used once and could attempt to incorrectly inline an initializer into the first usage. This bug has now been fixed:
// Original code
function foo() {
 let x
 bar(x ||= {})

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.28.2
Fix tree shaking bug due to TypeScript import alias (#4507)

This release fixes a bug that could cause esbuild to incorrectly tree-shake imports that are used in a TypeScript type alias under certain circumstances. Affected code uses a TypeScript-specific import assignment and looks something like this:
import Base from './dep.js';
import Alias = Base.SomeType;
Fix CSS minification bug involving & (#4497)

This release fixes a bug where esbuild's CSS minifier incorrectly removed a & when it was unsafe to do so. Here is an example:
/* Original code */
.a .b {
 & .b:not(& .c) {
 color: red;
 }
}
/* Old output (with --minify) */
.a .b{.b:not(& .c){color:red}}
/* New output (with --minify) */
.a .b{& .b:not(& .c){color:red}}
This should match yes but not no. The old output incorrectly matched both.
Avoid overwriting input files without --allow-overwrite (#4484)

For example: esbuild input.js --outfile=input.js tells esbuild to overwrite input.js with the output of running esbuild on it. This was supposed to already be prevented by default, but it accidentally regressed in version 0.17.0 and apparently didn't have any test coverage. The error message was being printed but the input file was still being overwritten. Oops.

This release puts the original behavior back. With this release, esbuild should now actually avoid overwriting input files unless --allow-overwrite is explicitly present. This is done by not writing out any files when a build error is encountered.

Fix incorrect code generated when using top-level await (#4498)

Previously esbuild could generate code containing a syntax error in complex scenarios involving top-level await used in a dependency cycle. The problem was a missing async on one or more module wrapper closures. With this release, esbuild now uses a fixed-point iteration algorithm to correctly annotate all dependencies in the cycle as needing an async module wrapper.
Fix a minification bug with lowered logical assignment operators (#4508)

This release fixes a bug that could cause esbuild to generate incorrect code for logical assignment operators when lowering them to an older target environment. Specifically the lowering process requires duplicating the left-hand side, but esbuild incorrectly failed to count the duplicate as a new usage when the left-hand side is an identifier. That then caused the minifier to believe that the left-hand side was only used once and could attempt to incorrectly inline an initializer into the first usage. This bug has now been fixed:
// Original code
function foo() {
 let x

... (truncated)

Commits

609683d publish 0.28.2 to npm
11b1fe4 add to release notes
ab50d91 css: fix green/blue channel swap in oklch gamut mapping (#4488)
04627b6 fix #4498: async TLA checks need a worklist
5c15177 disable gopls in the go folder
fc2ee9b css: adjust parser to allow --foo: {...}
209db54 release notes for css nesting bugfix
c625d31 fix #4497: preserve nested ampersands during minification (#4500)
34474e2 better isolation of current part in js parser
07f6e8c fix #4507: import assignment tree-shaking bug
Additional commits viewable in compare view

Updates minimatch from 10.2.5 to 10.2.6

Commits

ded1bbd 10.2.6
0215dfe update deps and lint
10968ea improve test for .. eating drive letters
See full diff in compare view

Updates source-map from 0.7.6 to 0.8.0

Changelog

Sourced from source-map's changelog.

0.8.0

#528 mozilla/source-map#528 Adding security policy

#525 mozilla/source-map#525 Use Object.create for sourceContents

#520 mozilla/source-map#520 Fixes types for SourceMapConsumer.initialize

Commits

ac0a1a6 0.8.0
aa7ae07 Adding security policy (#528)
a75f52b Use Object.create for sourceContents (#525)
6bf82ff Added missing periods for consistency and correctness (#514)
f4f1a90 Merge pull request #519 from mozilla/nchevobbe-patch-1
a36f46f Merge pull request #520 from arcanis/patch-1
25ff939 Update source-map.d.ts
0ccf5ec prettier
f9aa371 Update CHANGELOG.md
See full diff in compare view

Maintainer changes

This version was pushed to npm by hmanilla, a new releaser for source-map since your current version.

Updates zod-to-json-schema from 3.25.1 to 3.25.2

Changelog

Sourced from zod-to-json-schema's changelog.

Changelog

Version Change

3.25.2 Bumps the peer dependency of Zod 3 to 3.25.28 - Versions before patch 13 caused OOM issues and versions between that and 28 removed the /v3 import alias.

3.25.1 Fixes large install size due to accidental inclusion of test files. Thanks, Felix Mosheev!

3.25.0 Adds support for v3.25 and v3 through v4 (import { z } from "zod/v3"). Big thank you to both Andrey Gubanovs and especially to Faïz Hernawan Abdillah, whose more minimal implementation was merged. This will likely be the final release of zod-to-json-schema, as v4 now supports JSON schema natively.

3.24.6 Removed use of instanceOf to check for optional properties as differing package versions could produce intermittent bugs. Added OpenAiAnyType to work around their schema restrictions.

3.24.5 Update .npmignore to drop 2 mb of test files. Thanks Misha Kaletsky!

3.24.4 Added options to set the value of additionalProperties in objects and record

3.24.3 Adds postProcess callback option

3.24.2 Restructured internals to remove circular dependencies which apparently might cause some build systems to whine a bit. Big thanks to Víctor Hernández for the fix.

3.24.1 Adds OpenAI target

3.24.0 Implements new string checks (jwt, base64url, cidr ipv4/v6), matching the new Zod version

3.23.5 Module import hotfix by Enzo Monjardín. Thanks!

3.23.4 Fixes branded regex property names and a weird edgecase in arrays. Thanks to Isaiah Marc Sanchez and Mitchell Merry!

3.23.3 More tests (Thanks Brett Zamir!), removed dead code

3.23.2 Lazily loads Emoji regex to avoid incompatibility with some environments. Thanks Jacob Lee!

3.23.1 Best-effort RegEx flag support by Spappz! Some minor fixes and additions, such as the title option.

3.23.0 Adds support for base64, date, time, duration and nanoid string validations. A warm welcome and a big thanks to Colin, the creator of Zod, joining in as a contributor :)

3.22.5 Adds new z.date() parsing options and override callback

3.22.4 Adds fix for nullable references in OpenAPI mode

3.22.3 Adjust root path from "#/" to "#" according to RFC 6901

3.22.2 Adds "output" pipe strategy

3.22.1 Fixes broken imports when using some bundlers

3.22.0 Support readonly. Export both CJS and ESM. Export everything from index. Alternative map parser. Improved pattern handling and updated sources.

3.21.4 Fixes missing support for exact array length

3.21.3 Fixes issue #77 (Reference path to nullable schemas in Open-API mode)

3.21.2 Adds "integer" type Date output to support min/max checks, markdownDescription option, fixes "none" refStrategy by adding "seen" and adds an option to use "pattern" with Zods' email enum instead of "format".

3.21.1 New target (2019-09) along with improved intersection schemas, improved mutual recursion references in definitions, descriptions respected in union parser and not removed in collapsed

3.21.0 Added new string validations (ip, emoji, etc) and BigInt checks to support Zod 3.21

3.20.5 Added uniqueItems to Set and an option to disregard pipe schemas

3.20.4 Bugfixes and improved record parsing for openApi3

3.20.3 Added Cuid2 support introduced in Zod 3.20.3

3.20.2 Reintroduced conditional simplified return-type for when target is OpenAPI 3

3.20.1 Fixed inconsistent casing in imports

3.20.0 Adds support for Zod 3.20 with catch and pipe parser as well as new string validations. Refactored Ref handling; adding definitions no longer considered experimental. Main API function refactored and simplified; output type less defined but a lot easier to maintain. Doubt anyone will miss it. Narrator: Someone did in fact miss it

3.19.4 Adds custom error message support

3.19.3 Mark definitions as experimental in the readme

3.19.2 Added definitions option

3.19.1 Strict unions fix

3.19.0 No new features added in Zod, parity bump

3.18.2 Fixes support for native enums

3.18.1 Add strictUnions options

3.18.0 Added support for branded types

3.17.2 Fix for reference paths when supplying name option string.

3.17.1 Added startsWith and endsWith string checks. Merge multiple pattern checks into allOf array.

3.17.0 Added switch case handler for new trim "check". No changes to functionality.

3.15.x - 3.16.x Skipped: Did not change the Zod API in any way relevant for this package.

3.14.1 Dependabot security updates

... (truncated)

Commits

See full diff in compare view

Updates @braintrust/bt-darwin-arm64 from 0.12.0 to 0.20.0

Release notes

Sourced from @braintrust/bt-darwin-arm64's releases.

v0.20.0

Install bt 0.20.0

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/braintrustdata/bt/releases/download/v0.20.0/bt-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/braintrustdata/bt/releases/download/v0.20.0/bt-installer.ps1 | iex"
Download bt 0.20.0

File Platform Checksum

bt-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum

bt-x86_64-apple-darwin.tar.gz Intel macOS checksum

bt-aarch64-pc-windows-msvc.zip ARM64 Windows checksum

bt-x86_64-pc-windows-msvc.zip x64 Windows checksum

bt-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum

bt-x86_64-unknown-linux-gnu.tar.gz x64 Linux checksum

bt-x86_64-unknown-linux-musl.tar.gz x64 MUSL Linux checksum

Commits

chore: release v0.20.0 (#372) (332193f)

bump bt daemon to latest (#371) (5827c45)

[topics] remove --relabel-overlap from topics (#369) (2875b61)

ci: fix release-notes commit range for manual/backport releases (#370) (0bcd6fa)

ci: add commit messages to generated release notes (#368) (e3ee4ed)

docs(skills): point sdk-install guides at per-language install pages (#358) (6501ad3)

Full Changelog: braintrustdata/bt@v0.19.3...v0.20.0

v0.19.3

Install bt 0.19.3

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/braintrustdata/bt/releases/download/v0.19.3/bt-installer.sh | sh
Install prebuilt binaries via powershell script

... (truncated)

Commits

332193f chore: release v0.20.0 (#372)
5827c45 bump bt daemon to latest (#371)
2875b61 [topics] remove --relabel-overlap from topics (#369)
0bcd6fa ci: fix release-notes commit range for manual/backport releases (#370)
e3ee4ed ci: add commit messages to generated release notes (#368)
6501ad3 docs(skills): point sdk-install guides at per-language install pages (#358)
71134cf chore: release v0.19.3 (#367)
b5be3e8 Bump Rust SDK and daemon dependencies (#366)
b724347 feat: Go eval support (#305)
6fee421 test: run full unit suite in CI (#364)
Additional commits viewable in compare view

Updates @braintrust/bt-darwin-x64 from 0.12.0 to 0.20.0

Release notes

Sourced from @braintrust/bt-darwin-x64's releases.

v0.20.0

Install bt 0.20.0

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/braintrustdata/bt/releases/download/v0.20.0/bt-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/braintrustdata/bt/releases/download/v0.20.0/bt-installer.ps1 | iex"
Download bt 0.20.0

File Platform Checksum

bt-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum

bt-x86_64-apple-darwin.tar.gz Intel macOS checksum

bt-aarch64-pc-windows-msvc.zip ARM64 Windows checksum

bt-x86_64-pc-windows-msvc.zip x64 Windows checksum

bt-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum

bt-x86_64-unknown-linux-gnu.tar.gz x64 Linux checksum

bt-x86_64-unknown-linux-musl.tar.gz x64 MUSL Linux checksum

Commits

chore: release v0.20.0 (#372) (332193f)

bump bt daemon to latest (#371) (5827c45)

[topics] remove --relabel-overlap from topics (#369) (2875b61)

ci: fix release-notes commit range for manual/backport releases (#370) (0bcd6fa)

ci: add commit messages to generated release notes (#368) (e3ee4ed)

docs(skills): point sdk-install guides at per-language install pages (#358) (6501ad3)

Full Changelog: braintrustdata/bt@v0.19.3...v0.20.0

v0.19.3

Install bt 0.19.3

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/braintrustdata/bt/releases/download/v0.19.3/bt-installer.sh | sh
Install prebuilt binaries via powershell script

... (truncated)

Commits

332193f chore: release v0.20.0 (#372)
5827c45 bump bt daemon to latest (#371)
2875b61 [topics] remove --relabel-overlap from topics (#369)
0bcd6fa ci: fix release-notes commit range for manual/backport releases (#370)
e3ee4ed ci: add commit messages to generated release notes (#368)
6501ad3 docs(skill...
Description has been truncated

…s with 18 updates Bumps the production-patch-minor group with 18 updates in the / directory: | Package | From | To | | --- | --- | --- | | [dotenv](https://github.com/motdotla/dotenv) | `16.4.5` | `16.6.1` | | [@next/env](https://github.com/vercel/next.js/tree/HEAD/packages/next-env) | `14.2.3` | `14.2.35` | | [@vercel/functions](https://github.com/vercel/vercel/tree/HEAD/packages/functions) | `1.0.2` | `1.6.0` | | [acorn](https://github.com/acornjs/acorn) | `8.16.0` | `8.18.0` | | [cjs-module-lexer](https://github.com/nodejs/cjs-module-lexer) | `2.2.0` | `2.2.1` | | [cors](https://github.com/expressjs/cors) | `2.8.5` | `2.8.6` | | [esbuild](https://github.com/evanw/esbuild) | `0.28.1` | `0.28.2` | | [minimatch](https://github.com/isaacs/minimatch) | `10.2.5` | `10.2.6` | | [source-map](https://github.com/mozilla/source-map) | `0.7.6` | `0.8.0` | | [zod-to-json-schema](https://github.com/StefanTerdell/zod-to-json-schema) | `3.25.1` | `3.25.2` | | [@braintrust/bt-darwin-arm64](https://github.com/braintrustdata/bt) | `0.12.0` | `0.20.0` | | [@braintrust/bt-darwin-x64](https://github.com/braintrustdata/bt) | `0.12.0` | `0.20.0` | | [@braintrust/bt-linux-arm64](https://github.com/braintrustdata/bt) | `0.12.0` | `0.20.0` | | [@braintrust/bt-linux-x64](https://github.com/braintrustdata/bt) | `0.12.0` | `0.20.0` | | [@braintrust/bt-linux-x64-musl](https://github.com/braintrustdata/bt) | `0.12.0` | `0.20.0` | | [@braintrust/bt-win32-arm64](https://github.com/braintrustdata/bt) | `0.12.0` | `0.20.0` | | [@braintrust/bt-win32-x64](https://github.com/braintrustdata/bt) | `0.12.0` | `0.20.0` | | [@deepseek-ai/schemastery](https://github.com/deepseek-ai/deepseek-harness/tree/HEAD/vendor/schemastery) | `3.18.1` | `3.18.2` | Bumps the production-patch-minor group with 1 update in the /integrations/deepseek-harness directory: [@deepseek-ai/schemastery](https://github.com/deepseek-ai/deepseek-harness/tree/HEAD/vendor/schemastery). Bumps the production-patch-minor group with 17 updates in the /js directory: | Package | From | To | | --- | --- | --- | | [dotenv](https://github.com/motdotla/dotenv) | `16.4.5` | `16.6.1` | | [@next/env](https://github.com/vercel/next.js/tree/HEAD/packages/next-env) | `14.2.3` | `14.2.35` | | [@vercel/functions](https://github.com/vercel/vercel/tree/HEAD/packages/functions) | `1.0.2` | `1.6.0` | | [acorn](https://github.com/acornjs/acorn) | `8.16.0` | `8.18.0` | | [cjs-module-lexer](https://github.com/nodejs/cjs-module-lexer) | `2.2.0` | `2.2.1` | | [cors](https://github.com/expressjs/cors) | `2.8.5` | `2.8.6` | | [esbuild](https://github.com/evanw/esbuild) | `0.28.1` | `0.28.2` | | [minimatch](https://github.com/isaacs/minimatch) | `10.2.5` | `10.2.6` | | [source-map](https://github.com/mozilla/source-map) | `0.7.6` | `0.8.0` | | [zod-to-json-schema](https://github.com/StefanTerdell/zod-to-json-schema) | `3.25.1` | `3.25.2` | | [@braintrust/bt-darwin-arm64](https://github.com/braintrustdata/bt) | `0.12.0` | `0.20.0` | | [@braintrust/bt-darwin-x64](https://github.com/braintrustdata/bt) | `0.12.0` | `0.20.0` | | [@braintrust/bt-linux-arm64](https://github.com/braintrustdata/bt) | `0.12.0` | `0.20.0` | | [@braintrust/bt-linux-x64](https://github.com/braintrustdata/bt) | `0.12.0` | `0.20.0` | | [@braintrust/bt-linux-x64-musl](https://github.com/braintrustdata/bt) | `0.12.0` | `0.20.0` | | [@braintrust/bt-win32-arm64](https://github.com/braintrustdata/bt) | `0.12.0` | `0.20.0` | | [@braintrust/bt-win32-x64](https://github.com/braintrustdata/bt) | `0.12.0` | `0.20.0` | Updates `dotenv` from 16.4.5 to 16.6.1 - [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md) - [Commits](motdotla/dotenv@v16.4.5...v16.6.1) Updates `@next/env` from 14.2.3 to 14.2.35 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](https://github.com/vercel/next.js/commits/v14.2.35/packages/next-env) Updates `@vercel/functions` from 1.0.2 to 1.6.0 - [Release notes](https://github.com/vercel/vercel/releases) - [Changelog](https://github.com/vercel/vercel/blob/main/packages/functions/CHANGELOG.md) - [Commits](https://github.com/vercel/vercel/commits/@vercel/functions@1.6.0/packages/functions) Updates `acorn` from 8.16.0 to 8.18.0 - [Commits](acornjs/acorn@8.16.0...8.18.0) Updates `cjs-module-lexer` from 2.2.0 to 2.2.1 - [Release notes](https://github.com/nodejs/cjs-module-lexer/releases) - [Changelog](https://github.com/nodejs/cjs-module-lexer/blob/main/CHANGELOG.md) - [Commits](nodejs/cjs-module-lexer@2.2.0...2.2.1) Updates `cors` from 2.8.5 to 2.8.6 - [Release notes](https://github.com/expressjs/cors/releases) - [Changelog](https://github.com/expressjs/cors/blob/master/HISTORY.md) - [Commits](expressjs/cors@v2.8.5...v2.8.6) Updates `esbuild` from 0.28.1 to 0.28.2 - [Release notes](https://github.com/evanw/esbuild/releases) - [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md) - [Commits](evanw/esbuild@v0.28.1...v0.28.2) Updates `minimatch` from 10.2.5 to 10.2.6 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v10.2.5...v10.2.6) Updates `source-map` from 0.7.6 to 0.8.0 - [Release notes](https://github.com/mozilla/source-map/releases) - [Changelog](https://github.com/mozilla/source-map/blob/master/CHANGELOG.md) - [Commits](mozilla/source-map@0.7.6...v0.8.0) Updates `zod-to-json-schema` from 3.25.1 to 3.25.2 - [Release notes](https://github.com/StefanTerdell/zod-to-json-schema/releases) - [Changelog](https://github.com/StefanTerdell/zod-to-json-schema/blob/master/changelog.md) - [Commits](https://github.com/StefanTerdell/zod-to-json-schema/commits) Updates `@braintrust/bt-darwin-arm64` from 0.12.0 to 0.20.0 - [Release notes](https://github.com/braintrustdata/bt/releases) - [Commits](braintrustdata/bt@v0.12.0...v0.20.0) Updates `@braintrust/bt-darwin-x64` from 0.12.0 to 0.20.0 - [Release notes](https://github.com/braintrustdata/bt/releases) - [Commits](braintrustdata/bt@v0.12.0...v0.20.0) Updates `@braintrust/bt-linux-arm64` from 0.12.0 to 0.20.0 - [Release notes](https://github.com/braintrustdata/bt/releases) - [Commits](braintrustdata/bt@v0.12.0...v0.20.0) Updates `@braintrust/bt-linux-x64` from 0.12.0 to 0.20.0 - [Release notes](https://github.com/braintrustdata/bt/releases) - [Commits](braintrustdata/bt@v0.12.0...v0.20.0) Updates `@braintrust/bt-linux-x64-musl` from 0.12.0 to 0.20.0 - [Release notes](https://github.com/braintrustdata/bt/releases) - [Commits](braintrustdata/bt@v0.12.0...v0.20.0) Updates `@braintrust/bt-win32-arm64` from 0.12.0 to 0.20.0 - [Release notes](https://github.com/braintrustdata/bt/releases) - [Commits](braintrustdata/bt@v0.12.0...v0.20.0) Updates `@braintrust/bt-win32-x64` from 0.12.0 to 0.20.0 - [Release notes](https://github.com/braintrustdata/bt/releases) - [Commits](braintrustdata/bt@v0.12.0...v0.20.0) Updates `@deepseek-ai/schemastery` from 3.18.1 to 3.18.2 - [Release notes](https://github.com/deepseek-ai/deepseek-harness/releases) - [Commits](https://github.com/deepseek-ai/deepseek-harness/commits/HEAD/vendor/schemastery) Updates `@deepseek-ai/schemastery` from 3.18.1 to 3.18.2 - [Release notes](https://github.com/deepseek-ai/deepseek-harness/releases) - [Commits](https://github.com/deepseek-ai/deepseek-harness/commits/HEAD/vendor/schemastery) Updates `dotenv` from 16.4.5 to 16.6.1 - [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md) - [Commits](motdotla/dotenv@v16.4.5...v16.6.1) Updates `@next/env` from 14.2.3 to 14.2.35 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](https://github.com/vercel/next.js/commits/v14.2.35/packages/next-env) Updates `@vercel/functions` from 1.0.2 to 1.6.0 - [Release notes](https://github.com/vercel/vercel/releases) - [Changelog](https://github.com/vercel/vercel/blob/main/packages/functions/CHANGELOG.md) - [Commits](https://github.com/vercel/vercel/commits/@vercel/functions@1.6.0/packages/functions) Updates `acorn` from 8.16.0 to 8.18.0 - [Commits](acornjs/acorn@8.16.0...8.18.0) Updates `cjs-module-lexer` from 2.2.0 to 2.2.1 - [Release notes](https://github.com/nodejs/cjs-module-lexer/releases) - [Changelog](https://github.com/nodejs/cjs-module-lexer/blob/main/CHANGELOG.md) - [Commits](nodejs/cjs-module-lexer@2.2.0...2.2.1) Updates `cors` from 2.8.5 to 2.8.6 - [Release notes](https://github.com/expressjs/cors/releases) - [Changelog](https://github.com/expressjs/cors/blob/master/HISTORY.md) - [Commits](expressjs/cors@v2.8.5...v2.8.6) Updates `esbuild` from 0.28.1 to 0.28.2 - [Release notes](https://github.com/evanw/esbuild/releases) - [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md) - [Commits](evanw/esbuild@v0.28.1...v0.28.2) Updates `minimatch` from 10.2.5 to 10.2.6 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v10.2.5...v10.2.6) Updates `source-map` from 0.7.6 to 0.8.0 - [Release notes](https://github.com/mozilla/source-map/releases) - [Changelog](https://github.com/mozilla/source-map/blob/master/CHANGELOG.md) - [Commits](mozilla/source-map@0.7.6...v0.8.0) Updates `zod-to-json-schema` from 3.25.1 to 3.25.2 - [Release notes](https://github.com/StefanTerdell/zod-to-json-schema/releases) - [Changelog](https://github.com/StefanTerdell/zod-to-json-schema/blob/master/changelog.md) - [Commits](https://github.com/StefanTerdell/zod-to-json-schema/commits) Updates `@braintrust/bt-darwin-arm64` from 0.12.0 to 0.20.0 - [Release notes](https://github.com/braintrustdata/bt/releases) - [Commits](braintrustdata/bt@v0.12.0...v0.20.0) Updates `@braintrust/bt-darwin-x64` from 0.12.0 to 0.20.0 - [Release notes](https://github.com/braintrustdata/bt/releases) - [Commits](braintrustdata/bt@v0.12.0...v0.20.0) Updates `@braintrust/bt-linux-arm64` from 0.12.0 to 0.20.0 - [Release notes](https://github.com/braintrustdata/bt/releases) - [Commits](braintrustdata/bt@v0.12.0...v0.20.0) Updates `@braintrust/bt-linux-x64` from 0.12.0 to 0.20.0 - [Release notes](https://github.com/braintrustdata/bt/releases) - [Commits](braintrustdata/bt@v0.12.0...v0.20.0) Updates `@braintrust/bt-linux-x64-musl` from 0.12.0 to 0.20.0 - [Release notes](https://github.com/braintrustdata/bt/releases) - [Commits](braintrustdata/bt@v0.12.0...v0.20.0) Updates `@braintrust/bt-win32-arm64` from 0.12.0 to 0.20.0 - [Release notes](https://github.com/braintrustdata/bt/releases) - [Commits](braintrustdata/bt@v0.12.0...v0.20.0) Updates `@braintrust/bt-win32-x64` from 0.12.0 to 0.20.0 - [Release notes](https://github.com/braintrustdata/bt/releases) - [Commits](braintrustdata/bt@v0.12.0...v0.20.0) --- updated-dependencies: - dependency-name: dotenv dependency-version: 16.6.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-patch-minor - dependency-name: "@next/env" dependency-version: 14.2.35 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-patch-minor - dependency-name: "@vercel/functions" dependency-version: 1.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-patch-minor - dependency-name: acorn dependency-version: 8.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-patch-minor - dependency-name: cjs-module-lexer dependency-version: 2.2.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-patch-minor - dependency-name: cors dependency-version: 2.8.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-patch-minor - dependency-name: esbuild dependency-version: 0.28.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-patch-minor - dependency-name: minimatch dependency-version: 10.2.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-patch-minor - dependency-name: source-map dependency-version: 0.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-patch-minor - dependency-name: zod-to-json-schema dependency-version: 3.25.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-patch-minor - dependency-name: "@braintrust/bt-darwin-arm64" dependency-version: 0.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-patch-minor - dependency-name: "@braintrust/bt-darwin-x64" dependency-version: 0.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-patch-minor - dependency-name: "@braintrust/bt-linux-arm64" dependency-version: 0.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-patch-minor - dependency-name: "@braintrust/bt-linux-x64" dependency-version: 0.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-patch-minor - dependency-name: "@braintrust/bt-linux-x64-musl" dependency-version: 0.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-patch-minor - dependency-name: "@braintrust/bt-win32-arm64" dependency-version: 0.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-patch-minor - dependency-name: "@braintrust/bt-win32-x64" dependency-version: 0.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-patch-minor - dependency-name: "@deepseek-ai/schemastery" dependency-version: 3.18.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-patch-minor - dependency-name: "@deepseek-ai/schemastery" dependency-version: 3.18.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-patch-minor - dependency-name: dotenv dependency-version: 16.6.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-patch-minor - dependency-name: "@next/env" dependency-version: 14.2.35 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-patch-minor - dependency-name: "@vercel/functions" dependency-version: 1.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-patch-minor - dependency-name: acorn dependency-version: 8.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-patch-minor - dependency-name: cjs-module-lexer dependency-version: 2.2.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-patch-minor - dependency-name: cors dependency-version: 2.8.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-patch-minor - dependency-name: esbuild dependency-version: 0.28.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-patch-minor - dependency-name: minimatch dependency-version: 10.2.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-patch-minor - dependency-name: source-map dependency-version: 0.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-patch-minor - dependency-name: zod-to-json-schema dependency-version: 3.25.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-patch-minor - dependency-name: "@braintrust/bt-darwin-arm64" dependency-version: 0.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-patch-minor - dependency-name: "@braintrust/bt-darwin-x64" dependency-version: 0.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-patch-minor - dependency-name: "@braintrust/bt-linux-arm64" dependency-version: 0.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-patch-minor - dependency-name: "@braintrust/bt-linux-x64" dependency-version: 0.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-patch-minor - dependency-name: "@braintrust/bt-linux-x64-musl" dependency-version: 0.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-patch-minor - dependency-name: "@braintrust/bt-win32-arm64" dependency-version: 0.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-patch-minor - dependency-name: "@braintrust/bt-win32-x64" dependency-version: 0.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-patch-minor ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-09-23T14:58:19Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 21, 2026

Abhijeet Prasad (AbhiPrasad) closed this Sep 23, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/production-patch-minor-23559ff6e6 branch September 23, 2026 14:58

Navigation Menu

feat(deps): bump the production-patch-minor group across 3 directories with 18 updates - #2501

feat(deps): bump the production-patch-minor group across 3 directories with 18 updates#2501
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-patch-minor-23559ff6e6

dependabot Bot commented on behalf of github Sep 21, 2026

Uh oh!

dependabot Bot commented on behalf of github Sep 23, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Version	Change
3.25.2	Bumps the peer dependency of Zod 3 to 3.25.28 - Versions before patch 13 caused OOM issues and versions between that and 28 removed the /v3 import alias.
3.25.1	Fixes large install size due to accidental inclusion of test files. Thanks, Felix Mosheev!
3.25.0	Adds support for v3.25 and v3 through v4 (`import { z } from "zod/v3"`). Big thank you to both Andrey Gubanovs and especially to Faïz Hernawan Abdillah, whose more minimal implementation was merged. This will likely be the final release of `zod-to-json-schema`, as v4 now supports JSON schema natively.
3.24.6	Removed use of instanceOf to check for optional properties as differing package versions could produce intermittent bugs. Added OpenAiAnyType to work around their schema restrictions.
3.24.5	Update .npmignore to drop 2 mb of test files. Thanks Misha Kaletsky!
3.24.4	Added options to set the value of additionalProperties in objects and record
3.24.3	Adds postProcess callback option
3.24.2	Restructured internals to remove circular dependencies which apparently might cause some build systems to whine a bit. Big thanks to Víctor Hernández for the fix.
3.24.1	Adds OpenAI target
3.24.0	Implements new string checks (jwt, base64url, cidr ipv4/v6), matching the new Zod version
3.23.5	Module import hotfix by Enzo Monjardín. Thanks!
3.23.4	Fixes branded regex property names and a weird edgecase in arrays. Thanks to Isaiah Marc Sanchez and Mitchell Merry!
3.23.3	More tests (Thanks Brett Zamir!), removed dead code
3.23.2	Lazily loads Emoji regex to avoid incompatibility with some environments. Thanks Jacob Lee!
3.23.1	Best-effort RegEx flag support by Spappz! Some minor fixes and additions, such as the title option.
3.23.0	Adds support for base64, date, time, duration and nanoid string validations. A warm welcome and a big thanks to Colin, the creator of Zod, joining in as a contributor :)
3.22.5	Adds new z.date() parsing options and override callback
3.22.4	Adds fix for nullable references in OpenAPI mode
3.22.3	Adjust root path from "#/" to "#" according to RFC 6901
3.22.2	Adds "output" pipe strategy
3.22.1	Fixes broken imports when using some bundlers
3.22.0	Support readonly. Export both CJS and ESM. Export everything from index. Alternative map parser. Improved pattern handling and updated sources.
3.21.4	Fixes missing support for exact array length
3.21.3	Fixes issue #77 (Reference path to nullable schemas in Open-API mode)
3.21.2	Adds "integer" type Date output to support min/max checks, markdownDescription option, fixes "none" refStrategy by adding "seen" and adds an option to use "pattern" with Zods' email enum instead of "format".
3.21.1	New target (2019-09) along with improved intersection schemas, improved mutual recursion references in definitions, descriptions respected in union parser and not removed in collapsed
3.21.0	Added new string validations (ip, emoji, etc) and BigInt checks to support Zod 3.21
3.20.5	Added uniqueItems to Set and an option to disregard pipe schemas
3.20.4	Bugfixes and improved record parsing for openApi3
3.20.3	Added Cuid2 support introduced in Zod 3.20.3
3.20.2	Reintroduced conditional simplified return-type for when target is OpenAPI 3
3.20.1	Fixed inconsistent casing in imports
3.20.0	Adds support for Zod 3.20 with catch and pipe parser as well as new string validations. Refactored Ref handling; adding definitions no longer considered experimental. Main API function refactored and simplified; output type less defined but a lot easier to maintain. Doubt anyone will miss it. Narrator: Someone did in fact miss it
3.19.4	Adds custom error message support
3.19.3	Mark `definitions` as experimental in the readme
3.19.2	Added `definitions` option
3.19.1	Strict unions fix
3.19.0	No new features added in Zod, parity bump
3.18.2	Fixes support for native enums
3.18.1	Add strictUnions options
3.18.0	Added support for branded types
3.17.2	Fix for reference paths when supplying name option string.
3.17.1	Added startsWith and endsWith string checks. Merge multiple pattern checks into allOf array.
3.17.0	Added switch case handler for new trim "check". No changes to functionality.
3.15.x - 3.16.x	Skipped: Did not change the Zod API in any way relevant for this package.
3.14.1	Dependabot security updates

File	Platform	Checksum
bt-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
bt-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
bt-aarch64-pc-windows-msvc.zip	ARM64 Windows	checksum
bt-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
bt-aarch64-unknown-linux-gnu.tar.gz	ARM64 Linux	checksum
bt-x86_64-unknown-linux-gnu.tar.gz	x64 Linux	checksum
bt-x86_64-unknown-linux-musl.tar.gz	x64 MUSL Linux	checksum

Conversation

dependabot Bot commented on behalf of github Sep 21, 2026

16.6.1 (2025-06-27)

Changed

16.6.0 (2025-06-26)

Added

16.5.0 (2025-04-07)

Added

Changed

16.4.7 (2024-12-03)

Changed

16.4.6 (2024-12-02)

Changed

1.6.0

Minor Changes

1.5.2

Patch Changes

1.5.1

Patch Changes

1.5.0

Minor Changes

1.4.2

Patch Changes

1.4.1

Patch Changes

1.4.0

Minor Changes

1.3.0

Minor Changes

1.2.0

2.2.1

What's Changed

New Contributors

v2.8.6

What's Changed

New Contributors

2.8.6 / 2026-01-22

v0.28.2

0.28.2

0.8.0

Changelog

v0.20.0

Install bt 0.20.0

Install prebuilt binaries via shell script

Install prebuilt binaries via powershell script

Download bt 0.20.0

Commits

v0.19.3

Install bt 0.19.3

Install prebuilt binaries via shell script

Install prebuilt binaries via powershell script

v0.20.0

Install bt 0.20.0

Install prebuilt binaries via shell script

Install prebuilt binaries via powershell script

Download bt 0.20.0

Commits

v0.19.3

Install bt 0.19.3

Install prebuilt binaries via shell script

Install prebuilt binaries via powershell script

Uh oh!

dependabot Bot commented on behalf of github Sep 23, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant