Skip to content

chore(deps)(deps): bump the production-dependencies group across 1 directory with 7 updates - #468

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/apps/api/production-dependencies-39066032cc
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/apps/api/production-dependencies-39066032cc

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 21, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 7 updates in the /apps/api directory:

Package From To
@anthropic-ai/sdk 0.123.0 0.125.0
@sentry/bun 10.73.0 10.74.0
bullmq 5.81.4 5.81.5
nodemailer 10.0.0 10.0.9
openai 7.10.0 7.15.0
resend 6.26.0 6.28.0
stripe 22.6.1 22.6.2

Updates @anthropic-ai/sdk from 0.123.0 to 0.125.0

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk: v0.125.0

0.125.0 (2026-09-10)

Full Changelog: sdk-v0.124.0...sdk-v0.125.0

Features

  • api: add auto mode tool permissions for Managed Agents (7f5e2c6)
  • api: add content_too_large web_fetch tool error code (f06416e)
  • api: add the user-profiles-2026-09-04 beta value and external_user_details to user profiles (318d42d)
  • api: support mounting public GitHub repositories without an authorization_token in Managed Agents sessions (9e2d945)

Chores

  • client: clean up the unused idempotency request option (4ce2772)
  • docs: correct the environment scope field description (835c677)
  • internal: restore package version (b43a7f6)
  • internal: stop stamping the package version into generated files (80ace5e)
  • tests: restore empty test package marker files (4f27519)

sdk: v0.124.0

0.124.0 (2026-09-04)

Full Changelog: sdk-v0.123.0...sdk-v0.124.0

Features

  • api: add Claude Tag category and user breakdowns to usage reports (669ff22)
  • api: add named types for organization compliance settings state (54be8da)
  • api: add support for sending a workspace ID on more endpoints (a11e6f1)

Bug Fixes

  • repair custom-code merge in messages resources (#455) (7ac43b9)
  • tools: create agent-toolset files and directories owner-only (#485) (a9c2298)

Chores

  • internal: bundle the mock server spec and update breaking-change detection (8752d02)
  • internal: codegen related update (a63afbc)
  • tests: reword the skip reason on the path-level query param tests (999bee5)

Documentation

  • api: update a few doc strings (2ef3d59)
Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.125.0 (2026-09-10)

Full Changelog: sdk-v0.124.0...sdk-v0.125.0

Features

  • api: add auto mode tool permissions for Managed Agents (7f5e2c6)
  • api: add content_too_large web_fetch tool error code (f06416e)
  • api: add the user-profiles-2026-09-04 beta value and external_user_details to user profiles (318d42d)
  • api: support mounting public GitHub repositories without an authorization_token in Managed Agents sessions (9e2d945)

Chores

  • client: clean up the unused idempotency request option (4ce2772)
  • docs: correct the environment scope field description (835c677)
  • internal: restore package version (b43a7f6)
  • internal: stop stamping the package version into generated files (80ace5e)
  • tests: restore empty test package marker files (4f27519)

0.124.0 (2026-09-04)

Full Changelog: sdk-v0.123.0...sdk-v0.124.0

Features

  • api: add Claude Tag category and user breakdowns to usage reports (669ff22)
  • api: add named types for organization compliance settings state (54be8da)
  • api: add support for sending a workspace ID on more endpoints (a11e6f1)

Bug Fixes

  • repair custom-code merge in messages resources (#455) (7ac43b9)
  • tools: create agent-toolset files and directories owner-only (#485) (a9c2298)

Chores

  • internal: bundle the mock server spec and update breaking-change detection (8752d02)
  • internal: codegen related update (a63afbc)
  • tests: reword the skip reason on the path-level query param tests (999bee5)

Documentation

  • api: update a few doc strings (2ef3d59)
Commits
  • 135f71e Merge pull request #1184 from anthropics/release-please--branches--main--chan...
  • 415537b chore: release main
  • 7f5e2c6 feat(api): add auto mode tool permissions for Managed Agents
  • 9e2d945 feat(api): support mounting public GitHub repositories without an authorizati...
  • 96ecb87 environments: the worker runs on the work item's session token alone when one...
  • 318d42d feat(api): add the user-profiles-2026-09-04 beta value and external_user_deta...
  • 835c677 chore(docs): correct the environment scope field description
  • 4ce2772 chore(client): clean up the unused idempotency request option
  • f06416e feat(api): add content_too_large web_fetch tool error code
  • b43a7f6 chore(internal): restore package version
  • Additional commits viewable in compare view

Updates @sentry/bun from 10.73.0 to 10.74.0

Release notes

Sourced from @​sentry/bun's releases.

10.74.0

  • feat(v10): Streamline isolation scope handling & reset in isolation scopes (#24152)
  • fix(server-utils): Include Gemini reasoning tokens in Vercel AI token usage (#23433)
  • fix(v10/browser): Set user_agent.original on all spans for consistent filtering (#24226)
  • fix(v10/cloudflare): Auto-instrument classes re-exported from the worker entry (#24181)
  • fix(v10/core): Guard loadModule default parameter against ESM scope (#24154)
  • fix(v10/core): Match wrapped Facebook Mobile browser errors in DEFAULT_IGNORE_ERRORS (#23877)
  • fix(v10/core): Resolve MCP capture policy per operation (#23796)
  • fix(v10/nextjs): Fix SDK import crashing under jsdom/happy-dom (#23906)
  • fix(v10/nextjs): Keep the Pages Router runtime out of App Router client bundles (#24223)
  • fix(v10/nextjs): Register Vercel AI span processors on Next.js (#23773)
  • fix(v10/nuxt): Windows file:// for import-in-the-middle hook and isAbsolute for C:\ (#24026)
  • fix(v10/profiling-node): Bump @​sentry/node-cpu-profiler to 2.4.4 (#24238)
  • fix(v10/sveltekit): Handle SvelteKit 3 error kinds in handleErrorWithSentry (#23995)
  • fix(v10/sveltekit): Read Cloudflare execution context from platform.ctx (#23994)
  • fix(v10/sveltekit): Read SvelteKit config from the Vite plugin (#23998)
  • test(e2e): Assert Next.js Cloudflare worker bundle stays free of orchestrion bundler plugins (#23910)

Work in this release was contributed by @​halillusion and @​zkasuran. Thank you for your contributions!

Bundle size 📦

Path Size
@​sentry/browser 27.12 KB
@​sentry/browser - with treeshaking flags 25.59 KB
@​sentry/browser (incl. Tracing) 45.53 KB
@​sentry/browser (incl. Tracing + Span Streaming) 47.29 KB
@​sentry/browser (incl. Tracing, Profiling) 50.18 KB
@​sentry/browser (incl. Tracing, Replay) 83.87 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 73.74 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 88.49 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 100.82 KB
@​sentry/browser (incl. Feedback) 43.89 KB
@​sentry/browser (incl. sendFeedback) 31.8 KB
@​sentry/browser (incl. FeedbackAsync) 36.82 KB
@​sentry/browser (incl. Metrics) 28.19 KB
@​sentry/browser (incl. Logs) 28.41 KB
@​sentry/browser (incl. Metrics & Logs) 29.09 KB
@​sentry/react 28.89 KB
@​sentry/react (incl. Tracing) 47.74 KB
@​sentry/vue 32.42 KB
@​sentry/vue (incl. Tracing) 47.47 KB
@​sentry/svelte 27.15 KB

... (truncated)

Changelog

Sourced from @​sentry/bun's changelog.

10.74.0

  • feat(v10): Streamline isolation scope handling & reset in isolation scopes (#24152)
  • fix(server-utils): Include Gemini reasoning tokens in Vercel AI token usage (#23433)
  • fix(v10/browser): Set user_agent.original on all spans for consistent filtering (#24226)
  • fix(v10/cloudflare): Auto-instrument classes re-exported from the worker entry (#24181)
  • fix(v10/core): Guard loadModule default parameter against ESM scope (#24154)
  • fix(v10/core): Match wrapped Facebook Mobile browser errors in DEFAULT_IGNORE_ERRORS (#23877)
  • fix(v10/core): Resolve MCP capture policy per operation (#23796)
  • fix(v10/nextjs): Fix SDK import crashing under jsdom/happy-dom (#23906)
  • fix(v10/nextjs): Keep the Pages Router runtime out of App Router client bundles (#24223)
  • fix(v10/nextjs): Register Vercel AI span processors on Next.js (#23773)
  • fix(v10/nuxt): Windows file:// for import-in-the-middle hook and isAbsolute for C:\ (#24026)
  • fix(v10/profiling-node): Bump @​sentry/node-cpu-profiler to 2.4.4 (#24238)
  • fix(v10/sveltekit): Handle SvelteKit 3 error kinds in handleErrorWithSentry (#23995)
  • fix(v10/sveltekit): Read Cloudflare execution context from platform.ctx (#23994)
  • fix(v10/sveltekit): Read SvelteKit config from the Vite plugin (#23998)
  • test(e2e): Assert Next.js Cloudflare worker bundle stays free of orchestrion bundler plugins (#23910)

Work in this release was contributed by @​halillusion and @​zkasuran. Thank you for your contributions!

Commits
  • ce5009a release: 10.74.0
  • 4b24ddd meta(changelog): Update changelog for 10.74.0 (#24252)
  • 371ed5d fix(v10/profiling-node): Bump @​sentry/node-cpu-profiler to 2.4.4 (#24238)
  • 9f38e48 fix(v10/browser): Set user_agent.original on all spans for consistent filte...
  • 264f990 fix(v10/cloudflare): Auto-instrument classes re-exported from the worker entr...
  • c89f6e6 fix(v10/nextjs): Keep the Pages Router runtime out of App Router client bundl...
  • de25dcb fix(v10/core): Guard loadModule default parameter against ESM scope (#24154)
  • b627037 feat(v10): Streamline isolation scope handling & reset in isolation scopes (#...
  • 2ce0ea1 fix(v10/nuxt): Windows file:// for import-in-the-middle hook and isAbsolute f...
  • 3e0eccc fix(server-utils): Include Gemini reasoning tokens in Vercel AI token usage (...
  • Additional commits viewable in compare view

Updates bullmq from 5.81.4 to 5.81.5

Release notes

Sourced from bullmq's releases.

v5.81.5

5.81.5 (2026-09-10)

Bug Fixes

  • worker: backport blocking client recovery to v5.x (#4722) (9767238)
Commits

Updates nodemailer from 10.0.0 to 10.0.9

Release notes

Sourced from nodemailer's releases.

v10.0.9

10.0.9 (2026-09-12)

Bug Fixes

  • addressparser: bound the '@' probe to the run being scanned (1465c3f)
  • addressparser: keep the text after a comment out of a quoted local part address (2f36eb1)

v10.0.8

10.0.8 (2026-09-11)

Bug Fixes

  • mime-node: clean the boundary where it is written, not only where it is built (e14278d)
  • mime-node: drop every control character from multipart boundary material (a82a355)

v10.0.7

10.0.7 (2026-09-11)

Bug Fixes

  • mime-funcs: do not double encode Buffer input when chunking base64 mime words (#1865) (4327a59)
  • mime-node: keep a boundary that is only line breaks from stripping to empty (ec46800)
  • mime-node: strip line breaks from multipart boundary material (#1867) (03c1a5c)
  • smtp-pool: release rate-limited connections on close (#1866) (7f5c7a4)

v10.0.6

10.0.6 (2026-09-11)

Bug Fixes

  • addressparser: scan free text for an address in linear time (437d7fc)

v10.0.5

10.0.5 (2026-09-11)

Bug Fixes

  • addressparser: parse comment-joined addresses in linear time (c07f175)

v10.0.4

10.0.4 (2026-09-11)

Bug Fixes

... (truncated)

Changelog

Sourced from nodemailer's changelog.

10.0.9 (2026-09-12)

Bug Fixes

  • addressparser: bound the '@' probe to the run being scanned (1465c3f)
  • addressparser: keep the text after a comment out of a quoted local part address (2f36eb1)

10.0.8 (2026-09-11)

Bug Fixes

  • mime-node: clean the boundary where it is written, not only where it is built (e14278d)
  • mime-node: drop every control character from multipart boundary material (a82a355)

10.0.7 (2026-09-11)

Bug Fixes

  • mime-funcs: do not double encode Buffer input when chunking base64 mime words (#1865) (4327a59)
  • mime-node: keep a boundary that is only line breaks from stripping to empty (ec46800)
  • mime-node: strip line breaks from multipart boundary material (#1867) (03c1a5c)
  • smtp-pool: release rate-limited connections on close (#1866) (7f5c7a4)

10.0.6 (2026-09-11)

Bug Fixes

  • addressparser: scan free text for an address in linear time (437d7fc)

10.0.5 (2026-09-11)

Bug Fixes

  • addressparser: parse comment-joined addresses in linear time (c07f175)

10.0.4 (2026-09-11)

Bug Fixes

  • fetch: scope a cookie without a Path to the RFC 6265 default path (2f907cb)
  • fetch: send cookies set with Path back to the exact path (#1861) (d557113)
  • mail-composer: keep httpHeaders and tls for href alternatives and icalEvent (#1862) (7f502be)
  • resolve well-known services by their primary domains (#1859) (085f525)
  • ses-transport: throw a configuration error when the SES client is missing (#1863) (4d9c4c9)

... (truncated)

Commits
  • 5a35d59 chore(master): release 10.0.9 (#1871)
  • 2f36eb1 fix(addressparser): keep the text after a comment out of a quoted local part ...
  • 1465c3f fix(addressparser): bound the '@' probe to the run being scanned
  • 1732dc4 chore(deps): update dev dependencies
  • ec7eda6 chore(deps): update dev dependencies
  • 618f912 chore(master): release 10.0.8 (#1870)
  • e14278d fix(mime-node): clean the boundary where it is written, not only where it is ...
  • a82a355 fix(mime-node): drop every control character from multipart boundary material
  • 29166ff chore(master): release 10.0.7 (#1869)
  • ec46800 fix(mime-node): keep a boundary that is only line breaks from stripping to empty
  • Additional commits viewable in compare view

Updates openai from 7.10.0 to 7.15.0

Release notes

Sourced from openai's releases.

v7.15.0

7.15.0 (2026-09-10)

Features

v7.14.0

7.14.0 (2026-09-10)

Features

Bug Fixes

  • deps-dev: bump joi from 18.2.3 to 18.2.5 in /ecosystem-tests/vercel-edge (#2702) (029b805)
  • deps: bump next from 15.5.23 to 15.5.25 in /ecosystem-tests/vercel-edge (#2703) (e9446db)
  • deps: bump sharp from 0.35.3 to 0.35.4 in /ecosystem-tests/vercel-edge (#2704) (ca95705)
  • deps: update remaining tooling and fixture patches (#2712) (bcaabee)

v7.13.0

7.13.0 (2026-09-09)

Features

v7.12.1

7.12.1 (2026-09-09)

Includes the GPT Image 2.5 support from 7.12.0, which was not published to npm.

Features

  • api: add GPT Image 2.5 models and image options (#2705) (6500a16)

Bug Fixes

  • ci: run Cloudflare example regressions before release (#2706) (c5cc31c)

v7.12.0

7.12.0 (2026-09-08)

... (truncated)

Changelog

Sourced from openai's changelog.

7.15.0 (2026-09-10)

Features

7.14.0 (2026-09-10)

Features

Bug Fixes

  • deps-dev: bump joi from 18.2.3 to 18.2.5 in /ecosystem-tests/vercel-edge (#2702) (029b805)
  • deps: bump next from 15.5.23 to 15.5.25 in /ecosystem-tests/vercel-edge (#2703) (e9446db)
  • deps: bump sharp from 0.35.3 to 0.35.4 in /ecosystem-tests/vercel-edge (#2704) (ca95705)
  • deps: update remaining tooling and fixture patches (#2712) (bcaabee)

7.13.0 (2026-09-09)

Features

7.12.1 (2026-09-09)

Includes the GPT Image 2.5 support from 7.12.0, which was not published to npm.

Features

  • api: add GPT Image 2.5 models and image options (#2705) (6500a16)

Bug Fixes

  • ci: run Cloudflare example regressions before release (#2706) (c5cc31c)

7.12.0 (2026-09-08)

Features

  • api: add GPT Image 2.5 models and image options (#2705) (6500a16)

... (truncated)

Commits
  • 50eb4b2 release: 7.15.0 (#2720)
  • 20a47f9 feat(api): add Agents API (#2719)
  • c1f88cd release: 7.14.0 (#2711)
  • c037ba7 feat(api) Add Live API (#2718)
  • fe2d6a3 test: reduce CI subprocess and validation overhead (#2713)
  • bcaabee fix(deps): update remaining tooling and fixture patches (#2712)
  • 029b805 fix(deps-dev): bump joi from 18.2.3 to 18.2.5 in /ecosystem-tests/vercel-edge...
  • e9446db fix(deps): bump next from 15.5.23 to 15.5.25 in /ecosystem-tests/vercel-edge ...
  • ca95705 fix(deps): bump sharp from 0.35.3 to 0.35.4 in /ecosystem-tests/vercel-edge (...
  • a661a7d release: 7.13.0 (#2710)
  • Additional commits viewable in compare view

Updates resend from 6.26.0 to 6.28.0

Release notes

Sourced from resend's releases.

v6.28.0

What's Changed

Full Changelog: resend/resend-node@v6.27.0...v6.28.0

v6.27.0

What's Changed

Full Changelog: resend/resend-node@v6.26.0...v6.27.0

Commits

Updates stripe from 22.6.1 to 22.6.2

Release notes

Sourced from stripe's releases.

v22.6.2

  • #2841 Validate that webhook secrets are non-empty

See the changelog for more details.

Changelog

Sourced from stripe's changelog.

22.6.2 - 2026-09-09

  • #2841 Validate that webhook secrets are non-empty
Commits
  • d9d0927 Bump version to 22.6.2
  • a7baa7e Validate that webhook secrets are non-empty (#2841)
  • b64815c Print npm HTTP logs in the publish job when debug logging is on (#2838)
  • 998f558 Restore the NODE_AUTH_TOKEN placeholder in the publish job (#2837)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…rectory with 7 updates

Bumps the production-dependencies group with 7 updates in the /apps/api directory:

| Package | From | To |
| --- | --- | --- |
| [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.123.0` | `0.125.0` |
| [@sentry/bun](https://github.com/getsentry/sentry-javascript) | `10.73.0` | `10.74.0` |
| [bullmq](https://github.com/taskforcesh/bullmq) | `5.81.4` | `5.81.5` |
| [nodemailer](https://github.com/nodemailer/nodemailer) | `10.0.0` | `10.0.9` |
| [openai](https://github.com/openai/openai-node) | `7.10.0` | `7.15.0` |
| [resend](https://github.com/resend/resend-node) | `6.26.0` | `6.28.0` |
| [stripe](https://github.com/stripe/stripe-node) | `22.6.1` | `22.6.2` |



Updates `@anthropic-ai/sdk` from 0.123.0 to 0.125.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.123.0...sdk-v0.125.0)

Updates `@sentry/bun` from 10.73.0 to 10.74.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.74.0/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.73.0...10.74.0)

Updates `bullmq` from 5.81.4 to 5.81.5
- [Release notes](https://github.com/taskforcesh/bullmq/releases)
- [Commits](taskforcesh/bullmq@v5.81.4...v5.81.5)

Updates `nodemailer` from 10.0.0 to 10.0.9
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](nodemailer/nodemailer@v10.0.0...v10.0.9)

Updates `openai` from 7.10.0 to 7.15.0
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/main/CHANGELOG.md)
- [Commits](openai/openai-node@v7.10.0...v7.15.0)

Updates `resend` from 6.26.0 to 6.28.0
- [Release notes](https://github.com/resend/resend-node/releases)
- [Changelog](https://github.com/resend/resend-node/blob/canary/CHANGELOG.md)
- [Commits](resend/resend-node@v6.26.0...v6.28.0)

Updates `stripe` from 22.6.1 to 22.6.2
- [Release notes](https://github.com/stripe/stripe-node/releases)
- [Changelog](https://github.com/stripe/stripe-node/blob/master/CHANGELOG.md)
- [Commits](stripe/stripe-node@v22.6.1...v22.6.2)

---
updated-dependencies:
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.125.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@sentry/bun"
  dependency-version: 10.74.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: bullmq
  dependency-version: 5.81.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: nodemailer
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: openai
  dependency-version: 7.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: resend
  dependency-version: 6.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: stripe
  dependency-version: 22.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 21, 2026
@dependabot
dependabot Bot requested a review from agjs as a code owner September 21, 2026 07:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants