Skip to content

chore(deps): bump the npm-minor-and-patch group across 1 directory with 48 updates - #1182

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-and-patch-458bbbc2bb
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-and-patch-458bbbc2bb

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 26, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the npm-minor-and-patch group with 48 updates in the / directory:

Package From To
@eslint-react/eslint-plugin 5.20.8 5.28.8
prettier 3.9.9 3.9.10
railway 3.11.0 3.16.0
typescript-eslint 8.70.1 8.72.0
@assistant-ui/core 0.2.22 0.3.31
@assistant-ui/store 0.2.21 0.3.22
react 19.3.0 19.3.1
vitest 4.1.11 4.1.12
@assistant-ui/react 0.14.27 0.15.31
posthog-js 1.435.2 1.438.21
react-dom 19.3.0 19.3.1
vite 6.4.4 6.4.5
@anthropic-ai/sandbox-runtime 0.0.77 0.0.81
@daytona/sdk 0.218.0 0.226.1
@hono/node-server 2.1.1 2.1.5
@modelcontextprotocol/sdk 1.32.1 1.32.2
@opentelemetry/api 1.9.1 1.10.0
@opentelemetry/exporter-prometheus 0.222.0 0.300.0
@opentelemetry/sdk-metrics 2.11.0 2.12.0
@sentry/node 10.75.3 10.76.2
cron-parser 5.10.1 5.10.2
jose 6.2.12 6.2.13
kysely 0.29.6 0.29.7
pg 8.23.0 8.23.1
zod 4.6.6 4.6.7
@swc/core 1.16.2 1.16.20
@ai-sdk/alibaba 2.0.56 2.0.75
@ai-sdk/anthropic 4.0.65 4.0.87
@ai-sdk/google 4.0.82 4.0.104
@ai-sdk/moonshotai 3.0.58 3.0.77
@ai-sdk/openai 4.0.78 4.0.101
@ai-sdk/openai-compatible 3.0.57 3.0.77
@ai-sdk/provider 4.0.18 4.0.33
@ai-sdk/provider-utils 5.0.49 5.0.67
@opentelemetry/core 2.11.0 2.12.0
ai 7.0.118 7.0.152
openai 7.23.0 7.43.0
parallel-web 1.3.3 1.3.6
@types/ws 8.18.1 8.18.2
@openuidev/react-headless 0.9.13 0.18.1
@openuidev/react-lang 0.2.15 0.4.1
@openuidev/react-ui 0.13.10 0.18.1
chart.js 4.5.1 4.6.1
lucide-react 0.562.0 0.577.0
react-resizable-panels 4.14.1 4.14.8
react-syntax-highlighter 16.1.1 16.1.2
@testing-library/jest-dom 6.6.3 6.9.1
@vitest/coverage-v8 4.1.11 4.1.12

Updates @eslint-react/eslint-plugin from 5.20.8 to 5.28.8

Release notes

Sourced from @​eslint-react/eslint-plugin's releases.

v5.28.8 (2026-10-24)

What's Changed

🐞 Fixes

  • react-x/purity: builtin member resolution no longer follows computed or unknown middle segments (ex: window[fetch], window.myLibrary.fetch), preventing false reports of non-builtin calls. (#2074)

🏗️ Internal

  • @eslint-react/eslint: added dual-purpose getText for direct or callback-style source text extraction, replacing repeated context.sourceCode.getText wrappers across packages. (#2073)

Full Changelog: Rel1cx/eslint-react@v5.28.7...v5.28.8

Attestation

https://github.com/Rel1cx/eslint-react/attestations/59146035

v5.28.7 (2026-10-23)

What's Changed

🐞 Fixes

  • react-x/purity: now reports Date calls during render, including Date(), Date(arg), and window.Date(); unlike new Date(arg), Date(arg) ignores its arguments and always returns the current time. (#2071) Thanks to @​aki05162525!

🏗️ Internal

  • Bumped effect and @effect/platform-node to 4.0.6, @tanstack/react-router to 1.170.46, @tanstack/react-start to 1.169.4, and eslint-plugin-de-morgan to 2.3.0.

New Contributors

Full Changelog: Rel1cx/eslint-react@v5.28.6...v5.28.7

Attestation

https://github.com/Rel1cx/eslint-react/attestations/59051814

v5.28.6 (2026-10-22)

What's Changed

🐞 Fixes

  • react-x/set-state-in-effect: the ref-derived parameter exemption now also applies to helpers wrapped in useCallback (ex: measure(ref.current) where measure = useCallback((el) => { setWidth(el.offsetWidth); }, [])). (#2065) Thanks to @​amhunt!
  • react-x/set-state-in-effect: a helper call behind a ref-derived guard (if, ternary, short-circuit, or early return) now exempts the setState calls it reaches, as a setState written in its place would be (ex: if (!anchorRef.current) return; commitPosition(0, true);); call sites are judged individually. (#2065) Thanks to @​amhunt!

... (truncated)

Changelog

Sourced from @​eslint-react/eslint-plugin's changelog.

v5.28.8 (2026-10-24)

🐞 Fixes

  • react-x/purity: builtin member resolution no longer follows computed or unknown middle segments (ex: window[fetch], window.myLibrary.fetch), preventing false reports of non-builtin calls. (#2074)

🏗️ Internal

  • @eslint-react/eslint: added dual-purpose getText for direct or callback-style source text extraction, replacing repeated context.sourceCode.getText wrappers across packages. (#2073)

Full Changelog: Rel1cx/eslint-react@v5.28.7...v5.28.8

v5.28.7 (2026-10-23)

🐞 Fixes

  • react-x/purity: now reports Date calls during render, including Date(), Date(arg), and window.Date(); unlike new Date(arg), Date(arg) ignores its arguments and always returns the current time. (#2071) Thanks to @​aki05162525!

🏗️ Internal

  • Bumped effect and @effect/platform-node to 4.0.6, @tanstack/react-router to 1.170.46, @tanstack/react-start to 1.169.4, and eslint-plugin-de-morgan to 2.3.0.

New Contributors

Full Changelog: Rel1cx/eslint-react@v5.28.6...v5.28.7

v5.28.6 (2026-10-22)

🐞 Fixes

  • react-x/set-state-in-effect: the ref-derived parameter exemption now also applies to helpers wrapped in useCallback (ex: measure(ref.current) where measure = useCallback((el) => { setWidth(el.offsetWidth); }, [])). (#2065) Thanks to @​amhunt!
  • react-x/set-state-in-effect: a helper call behind a ref-derived guard (if, ternary, short-circuit, or early return) now exempts the setState calls it reaches, as a setState written in its place would be (ex: if (!anchorRef.current) return; commitPosition(0, true);); call sites are judged individually. (#2065) Thanks to @​amhunt!

New Contributors

Full Changelog: Rel1cx/eslint-react@v5.28.5...v5.28.6

v5.28.5 (2026-10-22)

✨ New

  • react-dom/no-unsafe-target-blank: the suggested fix now adds rel="noreferrer" instead of rel="noreferrer noopener", since noreferrer already implies noopener per the HTML spec; values combining both tokens remain valid. (#2068)

🏗️ Internal

  • Removed redundant transitive dependency overrides. (#2064)

... (truncated)

Commits

Updates prettier from 3.9.9 to 3.9.10

Release notes

Sourced from prettier's releases.

3.9.10

  • Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.10

diff

Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

See micromark/micromark-extension-gfm-table@4f43ead for details.

Commits
  • 1172b82 Release 3.9.10
  • d014227 Update micromark-extension-gfm-table to fix the table parse issue on perfor...
  • 953b908 Bump Prettier dependency to 3.9.9
  • ad8a6bf Clean changelog_unreleased
  • See full diff in compare view

Updates railway from 3.11.0 to 3.16.0

Release notes

Sourced from railway's releases.

v3.16.0

Changes

  • #101 feat(iac): support the per-service cdn block

v3.15.0

Changes

  • #103 feat(iac): fn() reads function code from codeFile

v3.14.0

Changes

  • #100 test(iac): cover deploy.preDeployTimeoutSeconds on service()
  • #102 feat(iac): type and validate the image auto-update maintenance window

v3.13.1

Changes

  • #96 chore: move tsx to devDependencies

v3.13.0

Changes

  • #93 feat(iac): accept deploy.preDeployTimeoutSeconds
  • #94 feat(sandbox): exec process controls, sizing, sessions, and execHttp

v3.12.0

Changes

  • #79 feat: add sandbox public domains
  • #82 test: cover sandbox domains and stabilize checkpoint assertions
  • #92 feat(iac): support the per-service tracing block
Commits
  • 97fdb4f chore: release v3.16.0
  • b61bbb5 feat(iac): support the per-service cdn block (#101)
  • 5312d5f chore: release v3.15.0
  • 33f6e2e feat(iac): fn() reads function code from codeFile
  • a214466 chore: release v3.14.0
  • bcf3ce3 feat(iac): type and validate the image auto-update maintenance window (#102)
  • b95d745 test(iac): cover deploy.preDeployTimeoutSeconds on service() (#100)
  • e34b7aa chore: release v3.13.1
  • b89b702 Merge pull request #96 from AlemTuzlak/chore/tsx-dev-dependency
  • 9a8e672 chore: move tsx to devDependencies
  • Additional commits viewable in compare view

Updates typescript-eslint from 8.70.1 to 8.72.0

Release notes

Sourced from typescript-eslint's releases.

v8.72.0

8.72.0 (2026-10-19)

🚀 Features

  • eslint-plugin: lazy load rules (#13010)
  • eslint-plugin: [await-thenable] add allowMixedPromiseArrays option (#12992)
  • typescript-estree: error on abstract keyword that precedes export (#13019)

🩹 Fixes

  • ast-spec: add JSXFragment to JSXAttribute['value'] (#13051)
  • eslint-plugin: [prefer-readonly-parameter-types] check where allowed type aliases are declared (#13016)
  • eslint-plugin: [no-deprecated] report deprecated properties in object literals (#12704)
  • eslint-plugin: use isTypeLiteralType instead of type.isLiteral() to include bigint literals on TS < 5.0 (#13053)
  • eslint-plugin: [require-array-sort-compare] check tuples (#13058)
  • eslint-plugin: [require-array-sort-compare] ignore extra this type argument on TS < 5.1 (#13055)
  • type-utils: discriminateAnyType crashes when calling getAwaitedType on awaited type in TS < 5.0 (#13054)
  • typescript-estree: include leading and trailing comments & whitespace in Program range (#12991)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.71.2

8.71.2 (2026-10-12)

🩹 Fixes

  • eslint-plugin: [no-unused-vars] avoid false-positives when not using our parser (#12989)
  • eslint-plugin: [no-unnecessary-type-parameters] count instantiated mapped type templates (#12974)
  • eslint-plugin: [no-unused-vars] ignore type-only refs for after-used (#12977)
  • eslint-plugin: [no-unnecessary-type-parameters] parenthesize constraint in optional tuple elements (#12995)
  • eslint-plugin: [prefer-optional-chain] safe fix when the chain ends with a strict null comparison (#12805)
  • type-utils: match linked packages and packages with missing version in TypeOrValueSpecifier (#12948)

❤️ Thank You

... (truncated)

Changelog

Sourced from typescript-eslint's changelog.

8.72.0 (2026-10-19)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.71.2 (2026-10-12)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.71.1 (2026-10-05)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.71.0 (2026-09-28)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Updates @assistant-ui/core from 0.2.22 to 0.3.31

Release notes

Sourced from @​assistant-ui/core's releases.

@​assistant-ui/core@​0.3.31

Patch Changes

  • #9998 be34094 - fix: preserve earlier answers' streaming timing when a later run ends without new output. (@​Kinfe123)

  • #10018 e553142 - report failed and stopped turns with an outcome: an HTTP failure becomes rate_limited, validation_failed, or server_error with its status as error_code, a run stopped before its first token reports aborted, and a run that ends without output reports incomplete (@​okisdev)

  • #10022 770a07f - report a completed turn whose thread history failed to store as a persistence_error run (@​okisdev)

  • #9990 dd1acfc - feat: report every composer text write as a textChange event (composer.textChange in the store) with the text it left and its origin, so a user clearing the draft can be told apart from a send, a returned send, a reset, or input history recall; setText accepts { origin } (@​okisdev)

  • #10012 986fb1f - perf(core): a streaming token through useExternalMessageConverter, or through convertExternalMessages with a conversion cache, no longer rejoins every finished message in the thread (@​samdickson22)

  • #9907 5c27b22 - refactor(core): remove the unused src/adapters/index.ts barrel; the package exports are unchanged (@​okisdev)

  • #9915 1ebb427 - refactor(core): split cloud engagement events and the local storage thread codec into their own modules; the package exports are unchanged (@​okisdev)

  • #9914 50ef493 - refactor(core): move the external composer resource into its own module; the package exports are unchanged (@​okisdev)

  • #9911 4b231eb - fix(core): mark useLocalRuntime, useRemoteThreadListRuntime, useCloudThreadListAdapter and CloudFileAttachmentAdapter as client modules, like useExternalStoreRuntime and useCloudThreadListRuntime (@​okisdev)

  • #9925 957d4f6 - refactor(core): share six runtime algorithms between the legacy runtime and the store client; behavior and exports are unchanged (@​okisdev)

  • #10004 5d4eb88 - deprecate RemoteThreadListAdapter.unstable_Provider for removal in a future minor release; useRemoteThreadListRuntime now warns in development when an adapter with it keeps the runtime on the class core. return the same adapters from unstable_useAdapters instead. (@​okisdev)

  • #10005 94d25fa - fix: forward composer store events from ExternalThread (@​okisdev)

  • #9967 a107296 - fix: read interactable update results that LangGraph and LangChain return as JSON text, so id-less updates stay attributed to the instance they resolved to (@​okisdev)

  • #9938 847f621 - feat(core): unstable_interactableTool takes an optional name for its interactable, so the creating tool can be named apart from it (create_notepad beside update_notepad) (@​Mohamed3nan)

  • #9982 a3654c6 - document that createLocalStorageAdapter and createFileStorageAdapter support one writer per storage at a time (@​okisdev)

  • #10002 b6c3132 - docs: clarify voice adapter text acceptance ordering and interrupted reply delivery (@​Kinfe123)

  • #10001 a2252d0 - fix: keep replacement ExternalThread speech stoppable when an old utterance callback arrives after cleanup (@​Kinfe123)

  • #10011 e47249d - fix(core): supersede a speak started from inside the replaced utterance's cancel (@​okisdev)

  • #9969 9835bd9 - skip unchanged remote thread resources when the thread list host re-renders (@​okisdev)

  • #9927 1b62b6b - share the history write chain between the ag-ui and a2a runtimes (@​okisdev)

  • #10007 1de233d - fix(core): clear ExternalThread speech state when an adapter's cancel throws (@​okisdev)

  • #9974 90c6405 - Keep generated external message timestamps stable across conversion cache invalidations. (@​rajnish-verma-22172)

  • #9975 38d43ff - keep convertMessage timestamps stable in the external store runtime (@​okisdev)

  • #9867 0ba19fd - Expose thread-list unarchive support and disable unarchive controls when the adapter cannot restore archived threads. (@​dhanushkumarsivaji)

... (truncated)

Changelog

Sourced from @​assistant-ui/core's changelog.

0.3.31

Patch Changes

  • #9998 be34094 - fix: preserve earlier answers' streaming timing when a later run ends without new output. (@​Kinfe123)

  • #10018 e553142 - report failed and stopped turns with an outcome: an HTTP failure becomes rate_limited, validation_failed, or server_error with its status as error_code, a run stopped before its first token reports aborted, and a run that ends without output reports incomplete (@​okisdev)

  • #10022 770a07f - report a completed turn whose thread history failed to store as a persistence_error run (@​okisdev)

  • #9990 dd1acfc - feat: report every composer text write as a textChange event (composer.textChange in the store) with the text it left and its origin, so a user clearing the draft can be told apart from a send, a returned send, a reset, or input history recall; setText accepts { origin } (@​okisdev)

  • #10012 986fb1f - perf(core): a streaming token through useExternalMessageConverter, or through convertExternalMessages with a conversion cache, no longer rejoins every finished message in the thread (@​samdickson22)

  • #9907 5c27b22 - refactor(core): remove the unused src/adapters/index.ts barrel; the package exports are unchanged (@​okisdev)

  • #9915 1ebb427 - refactor(core): split cloud engagement events and the local storage thread codec into their own modules; the package exports are unchanged (@​okisdev)

  • #9914 50ef493 - refactor(core): move the external composer resource into its own module; the package exports are unchanged (@​okisdev)

  • #9911 4b231eb - fix(core): mark useLocalRuntime, useRemoteThreadListRuntime, useCloudThreadListAdapter and CloudFileAttachmentAdapter as client modules, like useExternalStoreRuntime and useCloudThreadListRuntime (@​okisdev)

  • #9925 957d4f6 - refactor(core): share six runtime algorithms between the legacy runtime and the store client; behavior and exports are unchanged (@​okisdev)

  • #10004 5d4eb88 - deprecate RemoteThreadListAdapter.unstable_Provider for removal in a future minor release; useRemoteThreadListRuntime now warns in development when an adapter with it keeps the runtime on the class core. return the same adapters from unstable_useAdapters instead. (@​okisdev)

  • #10005 94d25fa - fix: forward composer store events from ExternalThread (@​okisdev)

  • #9967 a107296 - fix: read interactable update results that LangGraph and LangChain return as JSON text, so id-less updates stay attributed to the instance they resolved to (@​okisdev)

  • #9938 847f621 - feat(core): unstable_interactableTool takes an optional name for its interactable, so the creating tool can be named apart from it (create_notepad beside update_notepad) (@​Mohamed3nan)

  • #9982 a3654c6 - document that createLocalStorageAdapter and createFileStorageAdapter support one writer per storage at a time (@​okisdev)

  • #10002 b6c3132 - docs: clarify voice adapter text acceptance ordering and interrupted reply delivery (@​Kinfe123)

  • #10001 a2252d0 - fix: keep replacement ExternalThread speech stoppable when an old utterance callback arrives after cleanup (@​Kinfe123)

  • #10011 e47249d - fix(core): supersede a speak started from inside the replaced utterance's cancel (@​okisdev)

  • #9969 9835bd9 - skip unchanged remote thread resources when the thread list host re-renders (@​okisdev)

  • #9927 1b62b6b - share the history write chain between the ag-ui and a2a runtimes (@​okisdev)

  • #10007 1de233d - fix(core): clear ExternalThread speech state when an adapter's cancel throws (@​okisdev)

  • #9974 90c6405 - Keep generated external message timestamps stable across conversion cache invalidations. (@​rajnish-verma-22172)

  • #9975 38d43ff - keep convertMessage timestamps stable in the external store runtime (@​okisdev)

... (truncated)

Commits
  • d8124e7 chore: update versions (#9903)
  • 770a07f fix(cloud): report turns whose history write failed as persistence_error (#10...
  • e553142 fix(cloud): report outcomes for failed and stopped turns (#10018)
  • 986fb1f perf(core): skip rejoining message parts when the conversion cache hits (#10012)
  • e47249d fix(core): supersede a speak started from inside the replaced utterance's can...
  • e28a3fa test(core): visit shared tool subtrees in each branch (#9996)
  • 93bc178 test(core): preserve explicit refusal for custom tool options (#10000)
  • db7a0bf test(core): exclude completed tool calls from background status (#9995)
  • ff3a14c test(core): preserve message ancestry during updates (#9997)
  • 4b7a9fe test(core): keep replacement thread loads abortable (#9994)
  • Additional commits viewable in compare view

Updates @assistant-ui/store from 0.2.21 to 0.3.22

Release notes

Sourced from @​assistant-ui/store's releases.

@​assistant-ui/store@​0.3.22

Patch Changes

  • #9108 ed0d969 - Track selectors that read through a forwarding client when its target changes. (@​rupic-app)

  • #9776 32a1b79 - useAuiState and aui.composer.getState() now see composer text as soon as setText returns, so an input that keeps its own state, such as react-mentions, no longer moves the caret to the end. (@​okisdev)

  • #9772 1808265 - Notify child handles after their derived scopes catch up with parent changes. (@​okisdev)

  • #9865 727a02d - preserve reading position when earlier messages load and support held follow and content inset updates (@​okisdev)

  • #9771 0c049eb - Keep Vue and Svelte viewport footer insets in the shared store controller. (@​okisdev)

@​assistant-ui/store@​0.3.21

Patch Changes

  • #9790 d2f04ca - fix: a client accessor called through call, apply or bind resolves its client like a direct call, so an optional call such as clientRef.current?.threads?.() no longer throws _b.call is not a function once a bundler lowers optional chaining (Vite 6's default build target does). Scope methods named call, apply, or bind are rejected by type validation because those names are reserved for invoking the accessor. (@​bgeils)

@​assistant-ui/store@​0.3.20

Patch Changes

  • #9338 a12da09 - fix: run layout effects through useIsomorphicLayoutEffect so React 18 server renders stop warning, while Ink keeps its layout phase (@​okisdev)
Changelog

Sourced from @​assistant-ui/store's changelog.

0.3.22

Patch Changes

  • #9108 ed0d969 - Track selectors that read through a forwarding client when its target changes. (@​rupic-app)

  • #9776 32a1b79 - useAuiState and aui.composer.getState() now see composer text as soon as setText returns, so an input that keeps its own state, such as react-mentions, no longer moves the caret to the end. (@​okisdev)

  • #9772 1808265 - Notify child handles after their derived scopes catch up with parent changes. (@​okisdev)

  • #9865 727a02d - preserve reading position when earlier messages load and support held follow and content inset updates (@​okisdev)

  • #9771 0c049eb - Keep Vue and Svelte viewport footer insets in the shared store controller. (@​okisdev)

0.3.21

Patch Changes

  • #9790 d2f04ca - fix: a client accessor called through call, apply or bind resolves its client like a direct call, so an optional call such as clientRef.current?.threads?.() no longer throws _b.call is not a function once a bundler lowers optional chaining (Vite 6's default build target does). Scope methods named call, apply, or bind are rejected by type validation because those names are reserved for invoking the accessor. (@​bgeils)

0.3.20

Patch Changes

  • #9338 a12da09 - fix: run layout effects through useIsomorphicLayoutEffect so React 18 server renders stop warning, while Ink keeps its layout phase (@​okisdev)

0.3.19

Patch Changes

0.3.18

Patch Changes

  • #9094 3ad209c - perf(store): wake only the selectors whose clients changed, so a token in a long thread no longer re-runs every message and part selector (@​okisdev)

  • #8869 9125e30 - Forward ExternalThread model-context changes through thread.modelContextUpdate. (@​rupic-app)

  • #8865 4ac25b9 - return the registered model context from ExternalThread's getModelContext instead of an empty one (@​okisdev)

  • #9003 116424f - Keep thread viewport observers stable and preserve scheduled scroll behavior. (@​rupic-app)

  • #9135 f306b40 - fix(store): cancel a queued bottom scroll when Enter, Space or a navigation key is pressed outside text entry, matching React (@​okisdev)

  • #8909 0d72f48 - move the Vue thread viewport's auto scroll into a framework-neutral createThre...

    Description has been truncated

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 26, 2026
@dependabot dependabot Bot added the javascript Pull requests that update javascript code label Oct 26, 2026
@changeset-bot

changeset-bot Bot commented Oct 26, 2026 •

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: a08cbfc

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@cursor cursor Bot left a comment •

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Stale Bugbot comment from a previous run.

"@modelcontextprotocol/sdk": "^1.32.2",
"@opentelemetry/api": "1.10.0",
"@opentelemetry/exporter-prometheus": "0.300.0",
"@opentelemetry/sdk-metrics": "2.12.0",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

OTEL Prometheus exporter version mismatch

High Severity

@opentelemetry/exporter-prometheus 0.300.0 is on the stable 3.x train and depends on @opentelemetry/sdk-metrics 3.0.0 and @opentelemetry/core 3.0.0, but this PR left those packages on 2.12.0. startSdkMetrics constructs a PrometheusExporter from 0.300 and passes it to a MeterProvider from 2.12, so SDK metrics scraping can fail at runtime from the dual-package split.

Additional Locations (1)
Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit ead96da. Configure here.

"@assistant-ui/react": "0.15.31",
"@openuidev/react-headless": "^0.18.1",
"@openuidev/react-lang": "^0.4.1",
"@openuidev/react-ui": "^0.18.1",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

OpenUI packages are incompatible

High Severity

@openuidev/react-ui 0.18.1 requires @openuidev/react-lang >=1.0.0 and OpenUI Lang 1.0, but this PR only moved react-lang to ^0.4.1. Streaming fences that never reach a root statement now render blank instead of a partial tree, so in-progress OpenUI output can disappear.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit ead96da. Configure here.

"@openuidev/react-lang": "^0.2.9",
"@openuidev/react-ui": "^0.13.2",
"@assistant-ui/core": "0.3.31",
"@assistant-ui/react": "0.15.31",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Stale assistant-ui peer ranges

Medium Severity

Direct deps moved to @assistant-ui/core 0.3.31 and @assistant-ui/react 0.15.31, but optional peers still advertise ^0.2.22 and ^0.14.24. Hosts that install those peer ranges get a second 0.2/0.14 copy beside the bundled 0.3/0.15, which splits AuiProvider state.

Additional Locations (1)
Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit ead96da. Configure here.

"winston": "^3.19.0",
"yaml": "^2.9.1",
"zod": "^4.6.5"
"zod": "^4.6.7"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Published packages missing changeset

Low Severity

This PR changes runtime dependencies that ship in published packages and does not add a .changeset/*.md. Run pnpm changeset and bump @truefoundry/trueforge-core, @truefoundry/trueforge, and @truefoundry/trueforge-ui (frontend is released via @truefoundry/trueforge).

Additional Locations (2)
Fix in Cursor Fix in Web

Triggered by project rule: TrueForge review rules

Reviewed by Cursor Bugbot for commit ead96da. Configure here.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-minor-and-patch-458bbbc2bb branch from ead96da to 1304940 Compare October 27, 2026 10:33

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

There are 5 total unresolved issues (including 4 from previous reviews).

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit 1304940. Configure here.

"winston": "^3.19.0",
"ws": "^8.22.0",
"zod": "^4.6.6"
"zod": "^4.6.7"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Missing changeset for published packages

Low Severity

This PR changes dependencies that ship in published packages and does not add a .changeset/*.md file. Run pnpm changeset and bump @truefoundry/trueforge-core, @truefoundry/trueforge, and @truefoundry/trueforge-ui.

Additional Locations (2)
Fix in Cursor Fix in Web

Triggered by project rule: TrueForge review rules

Reviewed by Cursor Bugbot for commit 1304940. Configure here.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-minor-and-patch-458bbbc2bb branch from 1304940 to 5bc154e Compare October 27, 2026 11:01
…th 48 updates

Bumps the npm-minor-and-patch group with 48 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@eslint-react/eslint-plugin](https://github.com/Rel1cx/eslint-react/tree/HEAD/plugins/eslint-plugin) | `5.20.8` | `5.28.8` |
| [prettier](https://github.com/prettier/prettier) | `3.9.9` | `3.9.10` |
| [railway](https://github.com/railwayapp/railway-ts-sdk) | `3.11.0` | `3.16.0` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.70.1` | `8.72.0` |
| [@assistant-ui/core](https://github.com/assistant-ui/assistant-ui/tree/HEAD/packages/core) | `0.2.22` | `0.3.31` |
| [@assistant-ui/store](https://github.com/assistant-ui/assistant-ui/tree/HEAD/packages/store) | `0.2.21` | `0.3.22` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.3.0` | `19.3.1` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.11` | `4.1.12` |
| [@assistant-ui/react](https://github.com/assistant-ui/assistant-ui/tree/HEAD/packages/react) | `0.14.27` | `0.15.31` |
| [posthog-js](https://github.com/PostHog/posthog-js) | `1.435.2` | `1.438.21` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.3.0` | `19.3.1` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `6.4.4` | `6.4.5` |
| [@anthropic-ai/sandbox-runtime](https://github.com/anthropics/sandbox-runtime) | `0.0.77` | `0.0.81` |
| [@daytona/sdk](https://github.com/daytona/clients) | `0.218.0` | `0.226.1` |
| [@hono/node-server](https://github.com/honojs/node-server) | `2.1.1` | `2.1.5` |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.32.1` | `1.32.2` |
| [@opentelemetry/api](https://github.com/open-telemetry/opentelemetry-js) | `1.9.1` | `1.10.0` |
| [@opentelemetry/exporter-prometheus](https://github.com/open-telemetry/opentelemetry-js) | `0.222.0` | `0.300.0` |
| [@opentelemetry/sdk-metrics](https://github.com/open-telemetry/opentelemetry-js) | `2.11.0` | `2.12.0` |
| [@sentry/node](https://github.com/getsentry/sentry-javascript) | `10.75.3` | `10.76.2` |
| [cron-parser](https://github.com/harrisiirak/cron-parser) | `5.10.1` | `5.10.2` |
| [jose](https://github.com/panva/jose) | `6.2.12` | `6.2.13` |
| [kysely](https://github.com/kysely-org/kysely) | `0.29.6` | `0.29.7` |
| [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.23.0` | `8.23.1` |
| [zod](https://github.com/colinhacks/zod) | `4.6.6` | `4.6.7` |
| [@swc/core](https://github.com/swc-project/swc/tree/HEAD/packages/core) | `1.16.2` | `1.16.20` |
| [@ai-sdk/alibaba](https://github.com/vercel/ai/tree/HEAD/packages/alibaba) | `2.0.56` | `2.0.75` |
| [@ai-sdk/anthropic](https://github.com/vercel/ai/tree/HEAD/packages/anthropic) | `4.0.65` | `4.0.87` |
| [@ai-sdk/google](https://github.com/vercel/ai/tree/HEAD/packages/google) | `4.0.82` | `4.0.104` |
| [@ai-sdk/moonshotai](https://github.com/vercel/ai/tree/HEAD/packages/moonshotai) | `3.0.58` | `3.0.77` |
| [@ai-sdk/openai](https://github.com/vercel/ai/tree/HEAD/packages/openai) | `4.0.78` | `4.0.101` |
| [@ai-sdk/openai-compatible](https://github.com/vercel/ai/tree/HEAD/packages/openai-compatible) | `3.0.57` | `3.0.77` |
| [@ai-sdk/provider](https://github.com/vercel/ai/tree/HEAD/packages/provider) | `4.0.18` | `4.0.33` |
| [@ai-sdk/provider-utils](https://github.com/vercel/ai/tree/HEAD/packages/provider-utils) | `5.0.49` | `5.0.67` |
| [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) | `2.11.0` | `2.12.0` |
| [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `7.0.118` | `7.0.152` |
| [openai](https://github.com/openai/openai-node) | `7.23.0` | `7.43.0` |
| [parallel-web](https://github.com/parallel-web/parallel-sdk-typescript) | `1.3.3` | `1.3.6` |
| [@types/ws](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/ws) | `8.18.1` | `8.18.2` |
| [@openuidev/react-headless](https://github.com/thesysdev/openui/tree/HEAD/packages/react-headless) | `0.9.13` | `0.18.1` |
| [@openuidev/react-lang](https://github.com/thesysdev/openui/tree/HEAD/packages/react-lang) | `0.2.15` | `0.4.1` |
| [@openuidev/react-ui](https://github.com/thesysdev/openui/tree/HEAD/packages/react-ui) | `0.13.10` | `0.18.1` |
| [chart.js](https://github.com/chartjs/Chart.js) | `4.5.1` | `4.6.1` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `0.562.0` | `0.577.0` |
| [react-resizable-panels](https://github.com/bvaughn/react-resizable-panels) | `4.14.1` | `4.14.8` |
| [react-syntax-highlighter](https://github.com/react-syntax-highlighter/react-syntax-highlighter) | `16.1.1` | `16.1.2` |
| [@testing-library/jest-dom](https://github.com/testing-library/jest-dom) | `6.6.3` | `6.9.1` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.11` | `4.1.12` |



Updates `@eslint-react/eslint-plugin` from 5.20.8 to 5.28.8
- [Release notes](https://github.com/Rel1cx/eslint-react/releases)
- [Changelog](https://github.com/Rel1cx/eslint-react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/Rel1cx/eslint-react/commits/v5.28.8/plugins/eslint-plugin)

Updates `prettier` from 3.9.9 to 3.9.10
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.9...3.9.10)

Updates `railway` from 3.11.0 to 3.16.0
- [Release notes](https://github.com/railwayapp/railway-ts-sdk/releases)
- [Commits](railwayapp/railway-ts-sdk@v3.11.0...v3.16.0)

Updates `typescript-eslint` from 8.70.1 to 8.72.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.0/packages/typescript-eslint)

Updates `@assistant-ui/core` from 0.2.22 to 0.3.31
- [Release notes](https://github.com/assistant-ui/assistant-ui/releases)
- [Changelog](https://github.com/assistant-ui/assistant-ui/blob/main/packages/core/CHANGELOG.md)
- [Commits](https://github.com/assistant-ui/assistant-ui/commits/@assistant-ui/core@0.3.31/packages/core)

Updates `@assistant-ui/store` from 0.2.21 to 0.3.22
- [Release notes](https://github.com/assistant-ui/assistant-ui/releases)
- [Changelog](https://github.com/assistant-ui/assistant-ui/blob/main/packages/store/CHANGELOG.md)
- [Commits](https://github.com/assistant-ui/assistant-ui/commits/@assistant-ui/store@0.3.22/packages/store)

Updates `react` from 19.3.0 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react)

Updates `vitest` from 4.1.11 to 4.1.12
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.12/packages/vitest)

Updates `@assistant-ui/react` from 0.14.27 to 0.15.31
- [Release notes](https://github.com/assistant-ui/assistant-ui/releases)
- [Changelog](https://github.com/assistant-ui/assistant-ui/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/assistant-ui/assistant-ui/commits/@assistant-ui/react@0.15.31/packages/react)

Updates `posthog-js` from 1.435.2 to 1.438.21
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/compare/posthog-js@1.435.2...posthog-js@1.438.21)

Updates `react-dom` from 19.3.0 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom)

Updates `vite` from 6.4.4 to 6.4.5
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v6.4.5/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v6.4.5/packages/vite)

Updates `@anthropic-ai/sandbox-runtime` from 0.0.77 to 0.0.81
- [Release notes](https://github.com/anthropics/sandbox-runtime/releases)
- [Commits](anthropics/sandbox-runtime@v0.0.77...v0.0.81)

Updates `@daytona/sdk` from 0.218.0 to 0.226.1
- [Release notes](https://github.com/daytona/clients/releases)
- [Commits](daytona/clients@v0.218.0...v0.226.1)

Updates `@hono/node-server` from 2.1.1 to 2.1.5
- [Release notes](https://github.com/honojs/node-server/releases)
- [Commits](honojs/node-server@v2.1.1...v2.1.5)

Updates `@modelcontextprotocol/sdk` from 1.32.1 to 1.32.2
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@1.32.1...1.32.2)

Updates `@opentelemetry/api` from 1.9.1 to 1.10.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v1.9.1...v1.10.0)

Updates `@opentelemetry/exporter-prometheus` from 0.222.0 to 0.300.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.222.0...experimental/v0.300.0)

Updates `@opentelemetry/sdk-metrics` from 2.11.0 to 2.12.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v2.11.0...v2.12.0)

Updates `@sentry/node` from 10.75.3 to 10.76.2
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.76.2/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.75.3...10.76.2)

Updates `cron-parser` from 5.10.1 to 5.10.2
- [Release notes](https://github.com/harrisiirak/cron-parser/releases)
- [Changelog](https://github.com/harrisiirak/cron-parser/blob/master/CHANGELOG.md)
- [Commits](harrisiirak/cron-parser@v5.10.1...v5.10.2)

Updates `jose` from 6.2.12 to 6.2.13
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](panva/jose@v6.2.12...v6.2.13)

Updates `kysely` from 0.29.6 to 0.29.7
- [Release notes](https://github.com/kysely-org/kysely/releases)
- [Commits](kysely-org/kysely@v0.29.6...v0.29.7)

Updates `pg` from 8.23.0 to 8.23.1
- [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md)
- [Commits](https://github.com/brianc/node-postgres/commits/pg@8.23.1/packages/pg)

Updates `zod` from 4.6.6 to 4.6.7
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.6.6...v4.6.7)

Updates `@swc/core` from 1.16.2 to 1.16.20
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/commits/v1.16.20/packages/core)

Updates `@ai-sdk/alibaba` from 2.0.56 to 2.0.75
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/alibaba/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/alibaba@2.0.75/packages/alibaba)

Updates `@ai-sdk/anthropic` from 4.0.65 to 4.0.87
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/anthropic/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/anthropic@4.0.87/packages/anthropic)

Updates `@ai-sdk/google` from 4.0.82 to 4.0.104
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/google/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/google@4.0.104/packages/google)

Updates `@ai-sdk/moonshotai` from 3.0.58 to 3.0.77
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/moonshotai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/moonshotai@3.0.77/packages/moonshotai)

Updates `@ai-sdk/openai` from 4.0.78 to 4.0.101
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/openai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/openai@4.0.101/packages/openai)

Updates `@ai-sdk/openai-compatible` from 3.0.57 to 3.0.77
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/openai-compatible/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/openai-compatible@3.0.77/packages/openai-compatible)

Updates `@ai-sdk/provider` from 4.0.18 to 4.0.33
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/provider/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/provider@4.0.33/packages/provider)

Updates `@ai-sdk/provider-utils` from 5.0.49 to 5.0.67
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/provider-utils/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/provider-utils@5.0.67/packages/provider-utils)

Updates `@opentelemetry/core` from 2.11.0 to 2.12.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v2.11.0...v2.12.0)

Updates `ai` from 7.0.118 to 7.0.152
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@7.0.152/packages/ai)

Updates `openai` from 7.23.0 to 7.43.0
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/main/CHANGELOG.md)
- [Commits](openai/openai-node@v7.23.0...v7.43.0)

Updates `parallel-web` from 1.3.3 to 1.3.6
- [Release notes](https://github.com/parallel-web/parallel-sdk-typescript/releases)
- [Changelog](https://github.com/parallel-web/parallel-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](parallel-web/parallel-sdk-typescript@v1.3.3...v1.3.6)

Updates `@types/ws` from 8.18.1 to 8.18.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/ws)

Updates `@openuidev/react-headless` from 0.9.13 to 0.18.1
- [Release notes](https://github.com/thesysdev/openui/releases)
- [Changelog](https://github.com/thesysdev/openui/blob/main/packages/react-headless/CHANGELOG.md)
- [Commits](https://github.com/thesysdev/openui/commits/@openuidev/react-headless@0.18.1/packages/react-headless)

Updates `@openuidev/react-lang` from 0.2.15 to 0.4.1
- [Release notes](https://github.com/thesysdev/openui/releases)
- [Changelog](https://github.com/thesysdev/openui/blob/main/packages/react-lang/CHANGELOG.md)
- [Commits](https://github.com/thesysdev/openui/commits/@openuidev/react-lang@0.4.1/packages/react-lang)

Updates `@openuidev/react-ui` from 0.13.10 to 0.18.1
- [Release notes](https://github.com/thesysdev/openui/releases)
- [Changelog](https://github.com/thesysdev/openui/blob/main/packages/react-ui/CHANGELOG.md)
- [Commits](https://github.com/thesysdev/openui/commits/@openuidev/react-ui@0.18.1/packages/react-ui)

Updates `chart.js` from 4.5.1 to 4.6.1
- [Release notes](https://github.com/chartjs/Chart.js/releases)
- [Commits](chartjs/Chart.js@v4.5.1...v4.6.1)

Updates `lucide-react` from 0.562.0 to 0.577.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/0.577.0/packages/lucide-react)

Updates `react-resizable-panels` from 4.14.1 to 4.14.8
- [Release notes](https://github.com/bvaughn/react-resizable-panels/releases)
- [Changelog](https://github.com/bvaughn/react-resizable-panels/blob/main/CHANGELOG.md)
- [Commits](bvaughn/react-resizable-panels@4.14.1...4.14.8)

Updates `react-syntax-highlighter` from 16.1.1 to 16.1.2
- [Release notes](https://github.com/react-syntax-highlighter/react-syntax-highlighter/releases)
- [Changelog](https://github.com/react-syntax-highlighter/react-syntax-highlighter/blob/master/CHANGELOG.MD)
- [Commits](react-syntax-highlighter/react-syntax-highlighter@v16.1.1...v16.1.2)

Updates `@testing-library/jest-dom` from 6.6.3 to 6.9.1
- [Release notes](https://github.com/testing-library/jest-dom/releases)
- [Changelog](https://github.com/testing-library/jest-dom/blob/main/CHANGELOG.md)
- [Commits](testing-library/jest-dom@v6.6.3...v6.9.1)

Updates `@vitest/coverage-v8` from 4.1.11 to 4.1.12
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.12/packages/coverage-v8)

---
updated-dependencies:
- dependency-name: "@ai-sdk/alibaba"
  dependency-version: 2.0.75
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@ai-sdk/anthropic"
  dependency-version: 4.0.87
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@ai-sdk/google"
  dependency-version: 4.0.104
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@ai-sdk/moonshotai"
  dependency-version: 3.0.77
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@ai-sdk/openai"
  dependency-version: 4.0.101
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@ai-sdk/openai-compatible"
  dependency-version: 3.0.77
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@ai-sdk/provider"
  dependency-version: 4.0.33
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@ai-sdk/provider-utils"
  dependency-version: 5.0.67
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@anthropic-ai/sandbox-runtime"
  dependency-version: 0.0.81
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@assistant-ui/core"
  dependency-version: 0.3.31
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@assistant-ui/react"
  dependency-version: 0.15.31
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@assistant-ui/store"
  dependency-version: 0.3.22
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@daytona/sdk"
  dependency-version: 0.226.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@eslint-react/eslint-plugin"
  dependency-version: 5.28.8
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@hono/node-server"
  dependency-version: 2.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.32.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@opentelemetry/api"
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@opentelemetry/core"
  dependency-version: 2.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@opentelemetry/exporter-prometheus"
  dependency-version: 0.300.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@opentelemetry/sdk-metrics"
  dependency-version: 2.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@openuidev/react-headless"
  dependency-version: 0.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@openuidev/react-lang"
  dependency-version: 0.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@openuidev/react-ui"
  dependency-version: 0.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@sentry/node"
  dependency-version: 10.76.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@swc/core"
  dependency-version: 1.16.20
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@testing-library/jest-dom"
  dependency-version: 6.9.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@types/ws"
  dependency-version: 8.18.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.1.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: ai
  dependency-version: 7.0.152
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: chart.js
  dependency-version: 4.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: cron-parser
  dependency-version: 5.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: jose
  dependency-version: 6.2.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: kysely
  dependency-version: 0.29.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: lucide-react
  dependency-version: 0.577.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: openai
  dependency-version: 7.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: parallel-web
  dependency-version: 1.3.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: pg
  dependency-version: 8.23.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: posthog-js
  dependency-version: 1.438.21
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: prettier
  dependency-version: 3.9.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: railway
  dependency-version: 3.16.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: react
  dependency-version: 19.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: react-dom
  dependency-version: 19.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: react-resizable-panels
  dependency-version: 4.14.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: react-syntax-highlighter
  dependency-version: 16.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: typescript-eslint
  dependency-version: 8.72.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: vite
  dependency-version: 6.4.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: vitest
  dependency-version: 4.1.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: zod
  dependency-version: 4.6.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-minor-and-patch-458bbbc2bb branch from 5bc154e to a08cbfc Compare October 27, 2026 11:40

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants