Bump @pinecone-database/pinecone from 8.0.0 to 8.2.0

[dependabot]

Bumps @pinecone-database/pinecone from 8.0.0 to 8.2.0.

Release notes

Sourced from @​pinecone-database/pinecone's releases.

Release v8.2.0

AdminClient: manage organizations, projects, and access (2026-04)

This release adds AdminClient, a second top-level entry point covering the Pinecone Admin API. It manages an organization and the resources beneath it including projects, API keys, service accounts, role bindings, invites, and users.

The Admin API authenticates differently from the rest of the SDK using service-account OAuth2 rather than a project Api-Key.

Authentication

Create a service account in the console under Organization Settings → Service Accounts, then either pass its credentials directly or set PINECONE_CLIENT_ID / PINECONE_CLIENT_SECRET:

import { AdminClient } from '@pinecone-database/pinecone';
// Reads PINECONE_CLIENT_ID / PINECONE_CLIENT_SECRET from the environment
const admin = new AdminClient();
// ...or pass credentials explicitly
const admin = new AdminClient({
clientId: 'your_client_id',
clientSecret: 'your_client_secret',
});

The AdminClient constructor is synchronous. The bearer token is fetched lazily on the first admin request and then cached for the lifetime of the client, with concurrent first calls sharing a single in-flight exchange. There is no proactive refresh, so a client held past its token's server-side expiry should be recreated. Rejected credentials surface as PineconeAuthorizationError, so instanceof checks behave the same as they do on the Pinecone client.

Resource surface

Sub-client	Methods
admin.projects	create describe list update delete
admin.organizations	describe list update delete
admin.apiKeys	create describe list update delete
admin.serviceAccounts	create describe list update rotateSecret delete
admin.roleBindings	create describe list delete
admin.invites	create describe list resend delete
admin.users	describe list delete

const project = await admin.projects.create({ name: 'my-project' });
// List operations return their results under data
const { data: projects } = await admin.projects.list();
// create returns the new record alongside its secret, which is shown only once
const { serviceAccount, clientSecret } = await admin.serviceAccounts.create({
name: 'ci-runner',
});
await admin.roleBindings.create({
</tr></table>

... (truncated)

Commits

• 4070122 [skip ci] Publish release v8.2.0
• 83231ef Bump dev dependencies and group REPL env var warnings (#425)
• d04f743 Add AdminClient for the Pinecone Admin API (v2026-04) (#424)
• a98d447 Regenerate 2026-04 to pull in admin API module (#420)
• 52acf4a Add jest-util as an explicit dev dependency (#421)
• c06da2e [skip ci] Publish release v8.1.0
• ca078d0 Implement list and update for alpha preview operations (#392)
• 4e6422a chore(deps): bump eslint to v10 + migrate to flat config (#409) (#419)
• aadfceb chore(deps): bump @​types/node to 26.1.1 (#410) (#418)
• 236c2e2 chore(deps): bump jest + @​types/jest to v30 (#405) (#417)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

Note

Low Risk
Lockfile-only dependency upgrade with no changes to Pinecone usage in src/; risk is limited to transitive SDK behavior in index/recommend flows.

Overview
Bumps the @pinecone-database/pinecone dependency from 8.0.0 to 8.2.0 in package.json and refreshes the lockfile entry (resolved tarball and integrity hash). No application source changes—existing usage of the Pinecone client and types like PineconeRecord is unchanged.

The newer SDK release adds optional capabilities (e.g. AdminClient for org/project admin APIs and alpha list/update helpers) that this example does not adopt.

^{Reviewed by Cursor Bugbot for commit abc9df9. Bugbot is set up for automated code reviews on this repo. Configure here.}