Skip to content

chore: bump the npm-dependencies group across 1 directory with 16 updates - #60

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-5189296e97
Open

chore: bump the npm-dependencies group across 1 directory with 16 updates#60
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-5189296e97

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 24, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-dependencies group with 16 updates in the / directory:

Package From To
@ai-sdk/devtools 0.0.24 1.0.12
@ai-sdk/anthropic 3.0.96 4.0.40
@ai-sdk/google 3.0.91 4.0.49
@ai-sdk/openai 3.0.84 4.0.45
@biomejs/biome 2.5.3 2.5.9
@nx/js 22.7.7 23.1.1
@swc-node/register 1.11.1 1.12.1
@swc/core 1.15.43 1.16.1
@tanstack/intent 0.0.44 0.3.6
@types/node 25.9.5 26.2.0
ai 6.0.224 7.0.73
nx 22.7.7 23.1.1
tsx 4.23.0 4.23.12
typescript 6.0.3 7.0.2
vite 6.4.3 8.2.2
vitest 4.1.10 4.1.11

Updates @ai-sdk/devtools from 0.0.24 to 1.0.12

Release notes

Sourced from @​ai-sdk/devtools's releases.

@​ai-sdk/harness-cline@​1.0.12

Patch Changes

  • Updated dependencies [b74971f]
  • Updated dependencies [fa6af57]
    • @​ai-sdk/provider-utils@​5.0.29
    • @​ai-sdk/harness@​1.0.85
Changelog

Sourced from @​ai-sdk/devtools's changelog.

1.0.12

Patch Changes

  • Updated dependencies [ad6a650]
    • @​ai-sdk/provider@​4.0.7

1.0.11

Patch Changes

  • Updated dependencies [3469d0c]
    • @​ai-sdk/provider@​4.0.6

1.0.10

Patch Changes

  • Updated dependencies [79e133c]
    • @​ai-sdk/provider@​4.0.5

1.0.9

Patch Changes

  • d09a5fd: Add safe image, audio, and video previews for media parts in DevTools prompts and tool inputs and outputs.

1.0.8

Patch Changes

  • Updated dependencies [1e2f324]
    • @​ai-sdk/provider@​4.0.4

1.0.7

Patch Changes

  • 1c53b40: feat(devtools): add a persistent light theme to the viewer

1.0.6

Patch Changes

  • 5be55f1: Use an explicit latest tag in the DevTools viewer command so it starts from monorepo workspaces where DevTools is only installed transitively.

1.0.5

Patch Changes

... (truncated)

Commits

Updates @ai-sdk/anthropic from 3.0.96 to 4.0.40

Changelog

Sourced from @​ai-sdk/anthropic's changelog.

4.0.40

Patch Changes

  • Updated dependencies [e6087c9]
    • @​ai-sdk/provider-utils@​5.0.28

4.0.39

Patch Changes

  • 4579b08: Preserve Anthropic server-tool caller metadata in multi-turn conversations.

4.0.38

Patch Changes

  • Updated dependencies [7fbfc6d]
    • @​ai-sdk/provider-utils@​5.0.27

4.0.37

Patch Changes

  • Updated dependencies [401a4ba]
    • @​ai-sdk/provider-utils@​5.0.26

4.0.36

Patch Changes

  • Updated dependencies [ad6a650]
  • Updated dependencies [81cd026]
    • @​ai-sdk/provider@​4.0.7
    • @​ai-sdk/provider-utils@​5.0.25

4.0.35

Patch Changes

  • Updated dependencies [1937bef]
    • @​ai-sdk/provider-utils@​5.0.24

4.0.34

Patch Changes

  • e6415bd: feat(anthropic): add text batch support

4.0.33

... (truncated)

Commits

Updates @ai-sdk/google from 3.0.91 to 4.0.49

Changelog

Sourced from @​ai-sdk/google's changelog.

4.0.49

Patch Changes

  • f607a12: chore(google): drop support for Imagen models and their integration following API shutdown

4.0.48

Patch Changes

  • 6c5a1ed: Inline local JSON Schema references in Google tool and structured-output schemas.

4.0.47

Patch Changes

  • e6087c9: fix: handle empty string tool call IDs
  • Updated dependencies [e6087c9]
    • @​ai-sdk/provider-utils@​5.0.28

4.0.46

Patch Changes

  • f69920a: fix(google): use low as the minimum reasoning level for full Gemini Flash 3.7 and later

4.0.45

Patch Changes

  • bb0cf2e: fix(google): coerce minimal reasoning to low for Gemini 3.7 Flash

4.0.44

Patch Changes

  • 16650e9: feat(google): add gemini-3.7-flash model

4.0.43

Patch Changes

  • 8e90283: Preserve forced tool calls when strict function tools are configured.

4.0.42

Patch Changes

  • Updated dependencies [7fbfc6d]
    • @​ai-sdk/provider-utils@​5.0.27

... (truncated)

Commits

Updates @ai-sdk/openai from 3.0.84 to 4.0.45

Changelog

Sourced from @​ai-sdk/openai's changelog.

4.0.45

Patch Changes

  • 6be0f51: fix(openai): expand internal parallel tool call wrappers from the Responses API while preserving stateful continuation and streaming fallbacks

4.0.44

Patch Changes

  • e6087c9: fix: handle empty string tool call IDs
  • Updated dependencies [e6087c9]
    • @​ai-sdk/provider-utils@​5.0.28

4.0.43

Patch Changes

  • a062795: fix(openai): support built-in and provider-defined tools in the Responses allowedTools option

    allowedTools emitted every allow-list entry as { type: 'function', name }, but OpenAI identifies built-in tools by type. Allow-listing a declared provider-defined tool (web search, image generation, MCP, custom, ...) therefore failed with Tool choice '<name>' not found in 'tools' parameter. Entries are now derived from the declared tool, including the MCP server label and custom tool name.

    Tools that OpenAI cannot allow-list (the tool search tool, deferred tools, and namespaced tools) are dropped from the allow-list with a warning, and an error is thrown if that would leave the allow-list empty rather than silently sending an unrestricted request.

    Ambiguous names are now reported instead of resolved silently. A name that matches both a declared tool and another tool's provider tool name resolves to the declared tool and warns; a provider tool name shared by several tools in the same request (two MCP servers, for example) is dropped with a warning. A name that matches no declared tool keeps its existing behavior and is now warned about.

4.0.42

Patch Changes

  • b6fff2e: feat(provider/openai): support explicit Responses compaction triggers

4.0.41

Patch Changes

  • 59d6def: Reconstruct provider-executed shell calls when continuing OpenAI Responses with storage disabled.

4.0.40

Patch Changes

... (truncated)

Commits

Updates @biomejs/biome from 2.5.3 to 2.5.9

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.9

2.5.9

Patch Changes

  • #11321 41386f3 Thanks @​dyc3! - Fixed #11315: The CSS parser now recovers at declaration boundaries after bogus declarations, allowing subsequent valid declarations to be parsed.

  • #11248 57b197e Thanks @​yanthomasdev! - Expanded the environment variable metadata used by biome rage to include BIOME_BINARY, BIOME_LOG_FILE, and RUST_BACKTRACE as well as reworded explanations for better readability.

  • #11377 a8798ea Thanks @​Netail! - Added a new nursery rule useNamedLayer which disallows anonymous cascade layers.

    @layer {
  a {
    color: red;
  }
}

  • #11327 6771cf5 Thanks @​dyc3! - The HTML formatter now preserves meaningful blank lines in HTML, including spacing after elements with trailing spaces and blank lines between comment groups.

     <div>
   <!-- first group -->
+
   <!-- second group -->
 </div>

  • #10312 ba8aa18 Thanks @​dyc3! - Added the nursery rule useTailwindShorthandClasses, which suggests shorter Tailwind utility classes. For example, the rule suggests replacing w-4 h-4 with size-4.

  • #11333 715e0cd Thanks @​kkkhs! - Fixed #11328: lint/nursery/useExpect now recognizes Vitest Browser Mode expect.element() calls as assertions.

  • #11343 9b98211 Thanks @​johncarmack1984! - Fixed #11311: the CSS parser now accepts Tailwind container-query variant names in @variant, such as @xl and @max-xl. These previously produced a parse error and a noUnknownAtRules diagnostic.

    @variant @xl {
  div {
    background: red;
  }
}

  • #11220 3e8c488 Thanks @​santichausis! - Fixed #9541: noUndeclaredVariables, noUnusedImports, and noUnusedVariables now correctly recognise exported variables and functions declared in one embedded <script> block as usable from a sibling <script> block, in Svelte's <script module>/<script> pair and Vue's non-setup <script> blocks.

    For example, Biome no longer reports greet as undeclared in the following Svelte component:

    <script module>

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.9

Patch Changes

  • #11321 41386f3 Thanks @​dyc3! - Fixed #11315: The CSS parser now recovers at declaration boundaries after bogus declarations, allowing subsequent valid declarations to be parsed.

  • #11248 57b197e Thanks @​yanthomasdev! - Expanded the environment variable metadata used by biome rage to include BIOME_BINARY, BIOME_LOG_FILE, and RUST_BACKTRACE as well as reworded explanations for better readability.

  • #11377 a8798ea Thanks @​Netail! - Added a new nursery rule useNamedLayer which disallows anonymous cascade layers.

    @layer {
  a {
    color: red;
  }
}

  • #11327 6771cf5 Thanks @​dyc3! - The HTML formatter now preserves meaningful blank lines in HTML, including spacing after elements with trailing spaces and blank lines between comment groups.

     <div>
   <!-- first group -->
+
   <!-- second group -->
 </div>

  • #10312 ba8aa18 Thanks @​dyc3! - Added the nursery rule useTailwindShorthandClasses, which suggests shorter Tailwind utility classes. For example, the rule suggests replacing w-4 h-4 with size-4.

  • #11333 715e0cd Thanks @​kkkhs! - Fixed #11328: lint/nursery/useExpect now recognizes Vitest Browser Mode expect.element() calls as assertions.

  • #11343 9b98211 Thanks @​johncarmack1984! - Fixed #11311: the CSS parser now accepts Tailwind container-query variant names in @variant, such as @xl and @max-xl. These previously produced a parse error and a noUnknownAtRules diagnostic.

    @variant @xl {
  div {
    background: red;
  }
}

  • #11220 3e8c488 Thanks @​santichausis! - Fixed #9541: noUndeclaredVariables, noUnusedImports, and noUnusedVariables now correctly recognise exported variables and functions declared in one embedded <script> block as usable from a sibling <script> block, in Svelte's <script module>/<script> pair and Vue's non-setup <script> blocks.

    For example, Biome no longer reports greet as undeclared in the following Svelte component:

    <script module>
  export function greet() {
    console.log("Hello!");

... (truncated)

Commits

Updates @nx/js from 22.7.7 to 23.1.1

Release notes

Sourced from @​nx/js's releases.

23.1.1 (2026-07-30)

🚀 Features

  • core: derive stable repo key from normalized remote and relative path (#36439)
  • repo: add react + vite + vitest + playwright example (#35921)

🩹 Fixes

  • angular-rspack: speed up builds and align behavior with the esbuild application builder (#36268, #34936)
  • bundling: support TypeScript esbuildConfig files in the esbuild executor (#36352, #36349)
  • bundling: acknowledge @​swc/core build scripts when configuring rollup (#36412)
  • core: speed up npm lockfile parsing (#36216)
  • core: speed up lockfile parsing and catalog resolution (#36223)
  • core: show performance report recommendations only when actionable (#36344)
  • core: close daemon log descriptors after spawn to avoid Node 26 crash (#36280)
  • core: prevent shell injection in nx import (#36348)
  • core: correct the 22.6.0 gitignore and analytics migration wiring (#36356)
  • core: support npm 12 and pnpm in the package provenance check (#36354, #36338)
  • core: honor pnpm minimumReleaseAge config on pnpm 11 (#36335, #36330)
  • core: support pnpm 11 patched dependency hashes (#36360)
  • core: resolve name refs copied into pattern-matched target arrays (#36359)
  • core: resolve source-loaded plugin transitive workspace imports (#36296)
  • core: unbreak pnpm 11 installs by acknowledging build-script deps from generators (#36302)
  • core: include continuous and default-config dependencies in show target (#36374)
  • core: make unit tests pass locally regardless of invoking package manager (#35994)
  • core: respect --aiAgents none to skip AI agent file generation (#34944, #34692)
  • core: use --config.frozen-lockfile=false for pnpm add during migrate (#36337)
  • core: run selected projects with --exclude-task-dependencies (#35562)
  • core: stop passing git revisions through a shell in affected commands (#36379)
  • core: collect trickling watcher bursts fully on daemon force-flush (#36391)
  • core: report tasks running in another Nx process in the inline TUI (#36341)
  • core: stop ratatui cursor queries from racing the TUI event stream (#36318)
  • core: render critical-path tasks as a nested list in the job summary (#36394)
  • core: keep pnpm-workspace.yaml comments and read package.json as jsonc (#36411)
  • core: support multiple brace groups in workspace glob matching (#36395)
  • core: handle CRLF line endings in pnpm multi-document lockfiles (#36419, #35828, #35840)
  • core: correct glob pattern expansion for ZeroOrOne groups (#31857)
  • core: stop re-querying confirmed cache misses in task orchestrator (#36301, #35632)
  • core: sample project graph perf span telemetry per session at 10% (#36420)
  • core: strip terminal query sequences when replaying task output (#36432)
  • core: preserve FORCE_COLOR=0 intent for forked child tasks (#35293)
  • core: handle colons in target name when resolving inputs to generate graph (#36429, #33710)
  • core: merge default plugins through the source-map-aware merge path (#36257)
  • core: keep nx migrate on the requested version when release-age gates interfere (#36444)
  • core: avoid bogus duplicate project name errors when generating nested apps (#36458)
  • core: pin typescript in preset dependencies so npm cannot hoist typescript 7 (#36497)
  • core: bump pinned axios and brace-expansion past vulnerable versions (#36507, #36474)
  • core: parse pnpm lockfiles that omit the packages block (#36512)
  • core: keep real dependencies when omitting peers from npm temp installs (#36518)

... (truncated)

Commits
  • 82f3693 fix(js): resolve package and extension-less tsconfig extends read from the tr...
  • d86441d fix(js): resolve the verdaccio bin through its package.json (#36479)
  • df40b73 fix(linter): use projectService for typed linting in flat configs (#35727)
  • 5b6abe1 fix(core): unbreak pnpm 11 installs by acknowledging build-script deps from g...
  • b045079 fix(js): parse pnpm/npm publish JSON containing braces in file paths (#36241)
  • 57e661b fix(js): support private methods and static blocks in babel preset (#36218)
  • a88e494 chore(repo): migrate to nx 23.1.0-rc.2 (#36269)
  • ba1d651 fix(js): bump @​swc/cli to 0.8.1 to patch critical decompress advisory (#36294)
  • 03483ea fix(js): pin rootDir on composite tsconfigs for ts6 (ts-jest strips composite...
  • 60ac6f3 fix(js): pin tsconfig root dir even when it matches the config directory (#36...
  • Additional commits viewable in compare view

Updates @swc-node/register from 1.11.1 to 1.12.1

Commits
  • 8fdebc5 chore(release): publish
  • b2663d0 chore(deps): update pnpm to v11.14.0 (#1061)
  • 986094d fix(register): always inline source maps in auto mode so debuggers work (#1062)
  • eec0e8c chore(register): replace json-stable-stringify (#1060)
  • f3462b2 chore(release): publish
  • 0ee7282 chore: migrate to workspace versions
  • fd2a91f chore: remove useless npm version script
  • 9729f75 chore(deps): update dependency ava to v8 (#1033)
  • 1f1c80b chore(deps): update pnpm to v11.13.1 (#1058)
  • e249b6d fix(@​swc-node/register): import of dynamically loaded files; fixes #883 (#965)
  • Additional commits viewable in compare view

Updates @swc/core from 1.15.43 to 1.16.1

Changelog

Sourced from @​swc/core's changelog.

[1.16.1] - 2026-08-19

Bug Fixes

[1.16.0] - 2026-08-14

Bug Fixes

  • (encoding) Fix incorrect fields count (#11905) (6fb4ca1)

    • BREAKING: Fix incorrect fields count (#11905)

  • (es/ast) Prevent mutable reference escape (#12088) (592f559)

  • (es/ast) Fix panic on JSX surrogate entities (#11803) (d21de47)

    • BREAKING: fix panic on JSX surrogate entities (#11803)

  • (es/es2015) Preserve this in static field parameters (#12085) (5b758ed)

  • (es/minifier) Remove unused variable initializer cycles (#12106) (0421534)

  • (es/minifier) Bound arguments parameter injection (#12053) (46d6f41)

  • (es/preset-env) Lower unsupported async generators (#12086) (3a144b1)

  • (hstr) Avoid references to uninitialized bytes (#12087) (68f0983)

  • (plugin) Make raw byte reconstruction unsafe (#12089) (83ab4ed)

  • (plugin/runner) Write Wasmer cache atomically (#12100) (3c4f404)

... (truncated)

Commits
  • 490c7d8 chore: Publish 1.16.1 with swc_core v77.0.2
  • 7e4d782 chore: Publish 1.16.1-nightly-20260819.1 with swc_core v77.0.2
  • ae2117a chore: Publish 1.16.0 with swc_core v77.0.0
  • 99671f1 chore: Publish 1.16.0-nightly-20260814.1 with swc_core v77.0.0
  • 394c7c9 refactor(es/ast)!: introduce FunctionBody (#12096)
  • 9ae902e refactor(es/ast)!: use Function for object accessors (#12077)
  • 1687c0f refactor(es/ast)!: split TypeScript this parameters (#12075)
  • 0febbba chore: Publish 1.15.47 with swc_core v75.0.0
  • 68abe42 chore: Publish 1.15.47-nightly-20260729.1 with swc_core v75.0.0
  • 9383162 chore: Publish 1.15.46 with swc_core v74.0.1
  • Additional commits viewable in compare view

Updates @tanstack/intent from 0.0.44 to 0.3.6

Release notes

Sourced from @​tanstack/intent's releases.

@​tanstack/intent@​0.3.6

Patch Changes

  • #201 ca0c761 - Support * package patterns such as @tanstack/* in intent.skills allowlists.

@​tanstack/intent@​0.3.5

Patch Changes

  • #194 e885566 - Fix setup, setup-github-actions, meta, and scaffold failing with "No templates directory found" / "Meta-skills directory not found" in the published package. getMetaDir hardcoded ../../meta, which is correct for the src/commands/ source layout but overshoots to @tanstack/meta from the flat dist/ layout the build ships. Walk up to the first meta/ directory instead so resolution works in both layouts (and symlinked installs).

  • #191 3620cca - Tighten skill-source identity to (kind, id) instead of name alone: workspace:foo no longer authorizes an npm-installed foo (and vice versa) in intent.skills, the "declared but not discovered" notice, and skill loading via intent load.

@​tanstack/intent@​0.3.4

Patch Changes

  • #190 45c863d - Improve the maintainer skill-authoring workflow:

    - Add `validate --set-version <version>`, which stamps `metadata.library_version` across matched skills via YAML surgery (preserving comments, line endings, and body) and then re-validates.
- Correct the `generate-skill` meta-skill so it no longer emits slash-path `name` values that fail validation, and the `skill-staleness-check` meta-skill so it points at the real `intent stale` command instead of a non-existent script.

  • #188 2a25b36 - Refuse to load a Yarn PnP runtime resolved from within node_modules; only a project root or ancestor .pnp.cjs is trusted.

@​tanstack/intent@​0.3.3

Patch Changes

  • #185 b7920e9 - Fix intent list suppressing the allow-all risk warning.

    When intent.skills is set to allow-all ("*"), intent list --no-notices and INTENT_NO_NOTICES=1 no longer hide the warning that all skill sources are permitted. This banner is a security-relevant signal, not a migration tip, so it's now excluded from suppression while other notices remain suppressible as before.

  • #187 fb3c08b - Fix potential hangs on slow or large environments:

    • Bound the npm registry staleness check with a request timeout so intent list and other staleness checks can't hang indefinitely on a slow or unreachable registry.
    • Bound global package-manager detection with a command timeout so it can't hang indefinitely when the environment's global node_modules is slow to resolve.
    • Avoid enumerating a workspace package's entire skill tree just to check whether it has any skills, reducing filesystem work in large monorepos.

@​tanstack/intent@​0.3.2

Patch Changes

  • #180 d67a5d6 - Add proactive skill catalogs to installed Intent hooks.

    intent hooks install now installs session-start catalog hooks for supported agents alongside the existing edit gate. Agents see the allowed local Intent skills at session start, resume, clear, and compact where the agent supports those lifecycle events, then still need to run intent load before editing.

    The generated hook loads the catalog through the Intent CLI with agent audience redaction instead of importing package code from the target repository.

@​tanstack/intent@​0.3.1

Patch Changes

  • #176 5419b02 - Add agent-safe hidden skill source handling to intent list.

    intent list now detects agent sessions with std-env and redacts unlisted allowlist candidates from agent-facing output. Agents see allowed skills plus a count-only hidden-source notice, while intent list --show-hidden reveals hidden source names only outside agent sessions.

... (truncated)

Commits
  • c12842a ci: changeset release (#202)
  • ca0c761 Support wildcard patterns in intent.skills allowlists (#201)
  • 6039a26 ci: changeset release (#192)
  • e885566 fix(intent): walk up to meta/ instead of hardcoded depth (#194)
  • 3620cca Distinguish npm and workspace sources with the same package name (#191)
  • 7e320ab ci: changeset release (#189)
  • 45c863d Improve maintainer skill-authoring DX (#190)
  • 2a25b36 Harden scanner trust boundaries: non-suppressible permit-all banner + reject ...
  • 8a25a7b ci: changeset release (#186)
  • fb3c08b perf: batch of low-risk fixes for hangs and unnecessary FS work (#187)
  • Additional commits viewable in compare view

Updates @types/node from 25.9.5 to 26.2.0

Commits

Updates ai from 6.0.224 to 7.0.73

Release notes

Sourced from ai's releases.

ai@7.0.73

Patch Changes

  • Updated dependencies [f607a12]
    • @​ai-sdk/gateway@​4.0.59

ai@6.0.264

Patch Changes

  • 6a7e701: fix(ai): prevent duplicate text and reasoning part ids

ai@6.0.263

Patch Changes

  • Updated dependencies [1e70580]
    • @​ai-sdk/gateway@​3.0.179

ai@6.0.262

Patch Changes

  • 30526e9: Prevent exceptions in streaming onChunk and onError callbacks from terminating the stream or masking provider errors.
  • Updated dependencies [7de3226]
  • Updated dependencies [504da15]
    • @​ai-sdk/gateway@​3.0.178
Changelog

Sourced from ai's changelog.

7.0.73

Patch Changes

  • Updated dependencies [f607a12]
    • @​ai-sdk/gateway@​4.0.59

7.0.72

Patch Changes

  • Updated dependencies [fdcc814]
    • @​ai-sdk/gateway@​4.0.58

7.0.71

Patch Changes

  • 9a37469: Prevent exceptions in streaming onChunk and onError callbacks from terminating the stream or masking provider errors.
  • Updated dependencies [936719b]
    • @​ai-sdk/gateway@​4.0.57

7.0.70

Patch Changes

  • 9566914: Stop multi-step text generation for client tool approval even when a provider-executed tool has a deferred result.
  • b181020: fix: reject streamObject result promises and re...

    Description has been truncated

@dependabot
chore: bump the npm-dependencies group across 1 directory with 16 upd…
5c6bc6d 
…ates

Bumps the npm-dependencies group with 16 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@ai-sdk/devtools](https://github.com/vercel/ai/tree/HEAD/packages/devtools) | `0.0.24` | `1.0.12` |
| [@ai-sdk/anthropic](https://github.com/vercel/ai/tree/HEAD/packages/anthropic) | `3.0.96` | `4.0.40` |
| [@ai-sdk/google](https://github.com/vercel/ai/tree/HEAD/packages/google) | `3.0.91` | `4.0.49` |
| [@ai-sdk/openai](https://github.com/vercel/ai/tree/HEAD/packages/openai) | `3.0.84` | `4.0.45` |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.3` | `2.5.9` |
| [@nx/js](https://github.com/nrwl/nx/tree/HEAD/packages/js) | `22.7.7` | `23.1.1` |
| [@swc-node/register](https://github.com/swc-project/swc-node) | `1.11.1` | `1.12.1` |
| [@swc/core](https://github.com/swc-project/swc/tree/HEAD/packages/core) | `1.15.43` | `1.16.1` |
| [@tanstack/intent](https://github.com/TanStack/intent) | `0.0.44` | `0.3.6` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.9.5` | `26.2.0` |
| [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `6.0.224` | `7.0.73` |
| [nx](https://github.com/nrwl/nx/tree/HEAD/packages/nx) | `22.7.7` | `23.1.1` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.0` | `4.23.12` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `6.4.3` | `8.2.2` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.10` | `4.1.11` |



Updates `@ai-sdk/devtools` from 0.0.24 to 1.0.12
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/devtools/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/devtools@1.0.12/packages/devtools)

Updates `@ai-sdk/anthropic` from 3.0.96 to 4.0.40
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/anthropic/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/anthropic@4.0.40/packages/anthropic)

Updates `@ai-sdk/google` from 3.0.91 to 4.0.49
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/google/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/google@4.0.49/packages/google)

Updates `@ai-sdk/openai` from 3.0.84 to 4.0.45
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/openai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/openai@4.0.45/packages/openai)

Updates `@biomejs/biome` from 2.5.3 to 2.5.9
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.9/packages/@biomejs/biome)

Updates `@nx/js` from 22.7.7 to 23.1.1
- [Release notes](https://github.com/nrwl/nx/releases)
- [Commits](https://github.com/nrwl/nx/commits/23.1.1/packages/js)

Updates `@swc-node/register` from 1.11.1 to 1.12.1
- [Release notes](https://github.com/swc-project/swc-node/releases)
- [Commits](https://github.com/swc-project/swc-node/compare/@swc-node/register@1.11.1...@swc-node/register@1.12.1)

Updates `@swc/core` from 1.15.43 to 1.16.1
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/commits/v1.16.1/packages/core)

Updates `@tanstack/intent` from 0.0.44 to 0.3.6
- [Release notes](https://github.com/TanStack/intent/releases)
- [Commits](https://github.com/TanStack/intent/compare/@tanstack/intent@0.0.44...@tanstack/intent@0.3.6)

Updates `@types/node` from 25.9.5 to 26.2.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `ai` from 6.0.224 to 7.0.73
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@7.0.73/packages/ai)

Updates `nx` from 22.7.7 to 23.1.1
- [Release notes](https://github.com/nrwl/nx/releases)
- [Commits](https://github.com/nrwl/nx/commits/23.1.1/packages/nx)

Updates `tsx` from 4.23.0 to 4.23.12
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.0...v4.23.12)

Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v6.0.3...v7.0.2)

Updates `vite` from 6.4.3 to 8.2.2
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.2.2/packages/vite)

Updates `vitest` from 4.1.10 to 4.1.11
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/vitest)

---
updated-dependencies:
- dependency-name: "@ai-sdk/devtools"
  dependency-version: 1.0.12
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: "@ai-sdk/anthropic"
  dependency-version: 4.0.40
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: "@ai-sdk/google"
  dependency-version: 4.0.49
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: "@ai-sdk/openai"
  dependency-version: 4.0.45
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: "@biomejs/biome"
  dependency-version: 2.5.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@nx/js"
  dependency-version: 23.1.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: "@swc-node/register"
  dependency-version: 1.12.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@swc/core"
  dependency-version: 1.16.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@tanstack/intent"
  dependency-version: 0.3.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@types/node"
  dependency-version: 26.2.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: ai
  dependency-version: 7.0.73
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: nx
  dependency-version: 23.1.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: tsx
  dependency-version: 4.23.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: vite
  dependency-version: 8.2.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: vitest
  dependency-version: 4.1.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 24, 2026
@socket-security

socket-security Bot commented Aug 24, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Addednx@​23.1.15810093100100
Added@​ai-sdk/​google@​4.0.49721008898100
Added@​ai-sdk/​openai@​4.0.45731008898100
Added@​nx/​js@​23.1.1761009299100
Addedvitest@​4.1.11981007999100
Added@​types/​node@​26.2.01001008195100
Addedtsx@​4.23.121001008194100
Addedvite@​8.2.2981008297100
Added@​ai-sdk/​anthropic@​4.0.40951008898100
Updatedtypescript@​6.0.3 ⏵ 7.0.29910089 -1100100 +10
Added@​swc-node/​register@​1.12.19810010090100
Added@​swc/​core@​1.16.19210010096100
Added@​tanstack/​intent@​0.3.61001009994100
Added@​ai-sdk/​devtools@​1.0.129910010098100
Addedai@​7.0.739910010099100
Added@​biomejs/​biome@​2.5.910010010099100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants