chore(deps): update all non-major dependencies#2297
Open
renovate[bot] wants to merge 1 commit into
Open
Conversation
Contributor
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
474346b to
333d6f5
Compare
333d6f5 to
161a45c
Compare
161a45c to
58463ab
Compare
58463ab to
0db6980
Compare
0db6980 to
6b17e30
Compare
6b17e30 to
efb2b8d
Compare
efb2b8d to
f5d0d8f
Compare
|
All alerts resolved. Learn more about Socket for GitHub. This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored. |
f5d0d8f to
de93ee3
Compare
de93ee3 to
f24f24e
Compare
f24f24e to
9c053f3
Compare
9c053f3 to
7ce5ac7
Compare
7ce5ac7 to
ba1cbad
Compare
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
ba1cbad to
3a12f46
Compare
3a12f46 to
19fce8b
Compare
19fce8b to
4e129f6
Compare
4e129f6 to
37091e9
Compare
37091e9 to
3947ebe
Compare
3947ebe to
e13240f
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^3.0.89→^3.0.92^4.0.4→^4.0.11^1.0.55→^1.0.58^3.0.214→^3.0.219^0.4.0→^0.5.0^1.2.114→^1.2.115^1.2.28→^1.2.29^1.2.87→^1.2.88^1.2.62→^1.2.63^1.2.1→^1.3.0^0.22.0→^0.22.1^0.2.10→^0.3.2^3.7.4→^3.7.5^7.0.2→^7.0.14^7.0.2→^7.0.14^0.17.0→^0.19.0^0.6.1→^0.6.2^2.5.132→^2.5.134^1.4.1→^1.4.2^3.3.5→^3.3.6Release Notes
vercel/ai (@ai-sdk/anthropic)
v3.0.92Compare Source
Patch Changes
ea1e95b]v3.0.91Compare Source
Patch Changes
95bc6fd: feat (provider/anthropic): addclaude-sonnet-5model idfa850e6]v3.0.90Compare Source
Patch Changes
28ff5a7: fix(anthropic): correctly map delta type when code execution tools are usedvercel/ai (@ai-sdk/gateway)
v4.0.11Compare Source
Patch Changes
5c5c0f5: Add experimental streaming transcription support for transcription models, including OpenAIgpt-realtime-whisperand xAI WebSocket STT.5c5c0f5]v4.0.10Compare Source
Patch Changes
31abef7: chore(provider/gateway): update gateway model settings filesv4.0.9Compare Source
Patch Changes
c6f5e62: Prevent prototype pollution when synchronously parsing provider JSON inputs and exposesecureJsonParsefrom provider-utils.c6f5e62]v4.0.8Compare Source
Patch Changes
8c616f0]v4.0.7Compare Source
Patch Changes
2edc641: chore(provider/gateway): update gateway model settings filesc18018c: feat (provider/anthropic): addclaude-sonnet-5model idv4.0.6Compare Source
Patch Changes
0274f34: feat (video): add first-classframeImagesandinputReferencescall options for video generation0274f34]v4.0.5Compare Source
Patch Changes
7e3c99e: chore(provider/gateway): update gateway model settings filescomarkdown/comark (@comark/nuxt)
v0.5.0: @comark/nuxt v0.5.0Compare Source
0.5.0 (2026-07-02)
nuxt/scripts (@nuxt/scripts)
v1.3.0Compare Source
🚀 Features
🐞 Bug Fixes
View changes on GitHub
nuxt-content/mdc (@nuxtjs/mdc)
v0.22.1Compare Source
compare changes
🩹 Fixes
📖 Documentation
🏡 Chore
❤️ Contributors
vercel/vercel (@vercel/connect)
v0.3.2Compare Source
Patch Changes
2f8d81f: Surface the connector's human-readable name through authorization challenges.startAuthorizationnow exposes the optionalconnectorobject returned byPOST /v1/connect/authorize/:connector(matching theconnectorobject on the token response), and the Eveconnect()adapter stamps the service display name (connector.serviceName, eg."Salesforce", falling back to the connector's ownconnector.namefor unknown services) onto theConnectionAuthorizationChallengeasdisplayNameso channels can render "Sign in with Salesforce" instead of a title-cased file name. Connection authors can override the server-reported name via the newdisplayNameoption onconnect(). No behavior change until the Vercel API starts returningconnector.v0.3.1Compare Source
Patch Changes
d29a8f9]v0.3.0Compare Source
Minor Changes
aa64ac7: Add the@vercel/connect/chatsubpath with adapter helpers for the Chat SDK (chat).connectSlackAdapter,connectGitHubAdapter, andconnectLinearAdaptereach return a config fragment you spread into the matchingcreate*Adapterfactory, wiring a Connect connector for both outbound app-scoped tokens (getTokenwithsubject: { type: 'app' }) and inbound trigger-forwarded webhooks (Vercel OIDC verification via the exportedcreateConnectWebhookVerifier). The subpath has no runtime dependency on@chat-adapter/*— it returns structural config types.vercel/vercel (@vercel/functions)
v3.7.5Compare Source
Patch Changes
d29a8f9]vercel/ai (ai)
v7.0.14Compare Source
Patch Changes
5c5c0f5: Add experimental streaming transcription support for transcription models, including OpenAIgpt-realtime-whisperand xAI WebSocket STT.5c5c0f5]v7.0.13Compare Source
Patch Changes
31abef7]v7.0.12Compare Source
Patch Changes
ecfeb6f: Sort tool results by their tool call order when converting generation output to response messages.a193137: FixextractJsonMiddlewarepreserving leading whitespace in the final streamed text suffix when no markdown fence prefix was stripped.c6f5e62]v7.0.11Compare Source
Patch Changes
0a87626: fix(ai): replace dynamic import() with loadBuiltinModule for diagnostics_channel to fix React Native/Hermes buildsv7.0.10Compare Source
Patch Changes
8c616f0: feat(mcp): add maxRetries option for failed mcp tool calls8c616f0]v7.0.9Compare Source
Patch Changes
2edc641]c18018c]v7.0.8Compare Source
Patch Changes
0274f34: feat (video): add first-classframeImagesandinputReferencescall options for video generation0274f34]v7.0.7Compare Source
Patch Changes
d598481: Fix:convertToModelMessagesno longer emits an empty assistant message when a block contains only unknown data parts (e.g. a data part beforestep-startwith noconvertDataPartprovided)v7.0.6Compare Source
Patch Changes
989402d: Add ToolLoopAgent types for deprecated tool call callback aliases.7e3c99e]v7.0.5Compare Source
Patch Changes
a2750db: fix(ai): prune orphaned tool-approval responses inpruneMessagesWhen pruning a specific tool by name (
toolCalls: [{ type, tools: [...] }]),pruneMessagesleft the tool'stool-approval-responsein place while removing itstool-approval-requestandtool-call. The tool name of an approval response was resolved per-message, but approval responses live in a separatetoolmessage from their approval request, so the name could never be resolved and the response was always kept. Tool name resolution is now done across all messages, so approval requests and responses are pruned together.vercel/eve (eve)
v0.19.0Compare Source
Minor Changes
92f5162: add generic chat sdk channel for adapter-backed agentsPatch Changes
8892504: Render the deployment home page with the eve SVG wordmark, baked-in agent name, and refined ready-state layout.3daaba0: Reduce development runtime snapshot disk usage by excluding.env*, generated dependency, and build output directories, using clone-friendly file copies where supported, and pruning stale snapshots after dev rebuilds.74ce164: reuse chat sdk twilio primitives for webhook, api, and voice helpersc0a0ae2: Terminal model-call failures in delegated subagent runs (e.g. an unresolvable model id returning 404) now propagate to the parent as a failed subagent result instead of a successful empty output, so orchestrator sessions no longer report success when a delegation failed.0498252: Tool execution failures now return failed tool results to the model instead of leaving streamed tool calls without matching result history. Agents can recover from failed calls such as a missingload_skilltarget within the same turn.v0.18.2Compare Source
Patch Changes
c5da8e7: Sandbox API requests now append aneve/<version>token to theuser-agentso the sandbox control plane can attribute traffic to eve.v0.18.1Compare Source
Patch Changes
68365e8: Show tool call input in Slack approval prompts so operators can inspect approval-gated actions before approving.68365e8: Harden Slack HITL posting against API limits: large approval batches now split across multiple messages instead of exceeding Slack's 50-block cap, and long freeform answers are truncated so the answered-card update cannot fail.v0.18.0Compare Source
Minor Changes
a75dd47: Vercel sandbox: drop theruntimeoption. eve now always boots its hosted sandboxes from the published eve image.Patch Changes
afc7ded: Alloweve devto start from a package-less flat agent that only hasinstructions.md. Development runtime snapshots now generate private package metadata when the authored app has none.7d1084d: fix(eve): remove unnecessary preview deployment check that prevented production access fromeve dev63f94f0: Remove optional framework peer dependencies from the published package metadata so installs no longer resolve unused framework packages.ba2e0ce: Create new Vercel projects throughvercel linkinstead of posting directly to the projects API. This lets the Vercel CLI apply its framework and local config handling while eve reads the resulting link metadata, keeps framework-specific eve host integrations when detected, and otherwise ensures new projects use the eve framework preset.v0.17.2Compare Source
Patch Changes
afa22f8: Cap recursive subagent delegation at three child-session levels by default, configurable withdefineAgent({ limits: { maxSubagentDepth } }). At the limit, eve no longer advertises subagent tools and blocks stale delegated calls before starting another child session.55e9ad5: Update the scaffold's default agent model toanthropic/claude-sonnet-5. New agents created witheve init(and the setup model picker's pre-selected default) now use Claude Sonnet 5 instead of Claude Sonnet 4.6.f26d600: use Chat SDK Slack format primitives for Slack mrkdwn conversion087d6fd: use chat sdk slack api primitives for slack channel api helpers70ebe69: use Chat SDK Slack webhook primitives for Slack channel parsing and verificationed8a935: Keep theWorkfloworchestration tool root-only. Delegated subagent sessions can still call visible subagent tools directly until the configured depth cap, but eve no longer advertisesWorkflowfrom those child sessions.37bd2bb: Use authoredeveChannel()auth forGET /eve/v1/infoso remoteeve devcan authenticate with the same policy as the session routes.2fdc561: Addlimits.maxInputTokensPerSessionandlimits.maxOutputTokensPerSessionto stop a durable session from starting more model calls after its accumulated provider-reported input or output token usage reaches the configured cap. Root sessions default to a 40M input-token budget, delegated subagent sessions default to 5M, and authored input limits override those defaults.39c90de: Add explicitdev:eve,build:eve, andstart:evescripts to generated Web Chat projects so users can run the embedded eve app directly when needed.v0.17.1Compare Source
Patch Changes
97aa99b: Add HTTP Basic userinfo and repeatable-H, --headersupport toeve devURL targets so the terminal UI can send credentials or routing headers to protected remote deployments.c7827fb: Stop injecting subagent tool descriptions into delegated child prompts. Child runs now receive only the caller's delegated message plus the stable subagent invocation wrapper.739af96: Update eve's bundled Workflow SDK dependency set to the latest 5.0.0 beta releases, keeping the core package and local workflow world aligned.open-circle/valibot (valibot)
v1.4.2Compare Source
Many thanks to @Faze-up and @chatman-media for contributing to this release.
Intl.Segmenterfor non-primitive locales, preventing it from being recreated on everywords,minWords,maxWordsandnotWordsvalidation (pull request #1521)flattenmethod to handle issue path keys that collide withObject.prototypemembers liketoStringinstead of throwing aTypeError(pull request #1522)intersectschema to merge object keys that collide withObject.prototypemembers liketoStringinstead of failing to merge them (pull request #1522)vuejs/language-tools (vue-tsc)
v3.3.6Compare Source
language-core
.d.tsboundary (#6104) - Thanks to @Holiden!WeakMapto cache inline TS ASTs - Thanks to @KazariEX!v-bindparsing behavior - Thanks to @KazariEX!allCodeFeatures- Thanks to @KazariEX!Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.