Skip to content

chore(deps): update all non-major dependencies#2297

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch
Open

chore(deps): update all non-major dependencies#2297
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Jun 29, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
@ai-sdk/anthropic (source) ^3.0.89^3.0.92 age confidence
@ai-sdk/gateway (source) ^4.0.4^4.0.11 age confidence
@ai-sdk/mcp (source) ^1.0.55^1.0.58 age confidence
@ai-sdk/vue (source) ^3.0.214^3.0.219 age confidence
@comark/nuxt (source) ^0.4.0^0.5.0 age confidence
@iconify-json/lucide ^1.2.114^1.2.115 age confidence
@iconify-json/octicon ^1.2.28^1.2.29 age confidence
@iconify-json/simple-icons ^1.2.87^1.2.88 age confidence
@iconify-json/vscode-icons ^1.2.62^1.2.63 age confidence
@nuxt/scripts (source) ^1.2.1^1.3.0 age confidence
@nuxtjs/mdc ^0.22.0^0.22.1 age confidence
@vercel/connect (source) ^0.2.10^0.3.2 age confidence
@vercel/functions (source) ^3.7.4^3.7.5 age confidence
ai (source) ^7.0.2^7.0.14 age confidence
ai (source) ^7.0.2^7.0.14 age confidence
eve (source) ^0.17.0^0.19.0 age confidence
microsandbox ^0.6.1^0.6.2 age confidence
shaders ^2.5.132^2.5.134 age confidence
valibot (source) ^1.4.1^1.4.2 age confidence
vue-tsc (source) ^3.3.5^3.3.6 age confidence

Release Notes

vercel/ai (@​ai-sdk/anthropic)

v3.0.92

Compare Source

Patch Changes

v3.0.91

Compare Source

Patch Changes

v3.0.90

Compare Source

Patch Changes
  • 28ff5a7: fix(anthropic): correctly map delta type when code execution tools are used
vercel/ai (@​ai-sdk/gateway)

v4.0.11

Compare Source

Patch Changes

v4.0.10

Compare Source

Patch Changes
  • 31abef7: chore(provider/gateway): update gateway model settings files

v4.0.9

Compare Source

Patch Changes
  • c6f5e62: Prevent prototype pollution when synchronously parsing provider JSON inputs and expose secureJsonParse from provider-utils.
  • Updated dependencies [c6f5e62]

v4.0.8

Compare Source

Patch Changes

v4.0.7

Compare Source

Patch Changes
  • 2edc641: chore(provider/gateway): update gateway model settings files
  • c18018c: feat (provider/anthropic): add claude-sonnet-5 model id

v4.0.6

Compare Source

Patch Changes

v4.0.5

Compare Source

Patch Changes
  • 7e3c99e: chore(provider/gateway): update gateway model settings files
comarkdown/comark (@​comark/nuxt)

v0.5.0: @​comark/nuxt v0.5.0

Compare Source

0.5.0 (2026-07-02)

nuxt/scripts (@​nuxt/scripts)

v1.3.0

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub
nuxt-content/mdc (@​nuxtjs/mdc)

v0.22.1

Compare Source

compare changes

🩹 Fixes
  • Validate xlink:href and fix data:text/html prefix check in sanitizer (#​491)
📖 Documentation
  • Clarify indentation when using components (#​482)
🏡 Chore
❤️ Contributors
vercel/vercel (@​vercel/connect)

v0.3.2

Compare Source

Patch Changes
  • 2f8d81f: Surface the connector's human-readable name through authorization challenges. startAuthorization now exposes the optional connector object returned by POST /v1/connect/authorize/:connector (matching the connector object on the token response), and the Eve connect() adapter stamps the service display name (connector.serviceName, eg. "Salesforce", falling back to the connector's own connector.name for unknown services) onto the ConnectionAuthorizationChallenge as displayName so channels can render "Sign in with Salesforce" instead of a title-cased file name. Connection authors can override the server-reported name via the new displayName option on connect(). No behavior change until the Vercel API starts returning connector.

v0.3.1

Compare Source

Patch Changes

v0.3.0

Compare Source

Minor Changes
  • aa64ac7: Add the @vercel/connect/chat subpath with adapter helpers for the Chat SDK (chat). connectSlackAdapter, connectGitHubAdapter, and connectLinearAdapter each return a config fragment you spread into the matching create*Adapter factory, wiring a Connect connector for both outbound app-scoped tokens (getToken with subject: { type: 'app' }) and inbound trigger-forwarded webhooks (Vercel OIDC verification via the exported createConnectWebhookVerifier). The subpath has no runtime dependency on @chat-adapter/* — it returns structural config types.
vercel/vercel (@​vercel/functions)

v3.7.5

Compare Source

Patch Changes
vercel/ai (ai)

v7.0.14

Compare Source

Patch Changes

v7.0.13

Compare Source

Patch Changes

v7.0.12

Compare Source

Patch Changes
  • ecfeb6f: Sort tool results by their tool call order when converting generation output to response messages.
  • a193137: Fix extractJsonMiddleware preserving leading whitespace in the final streamed text suffix when no markdown fence prefix was stripped.
  • Updated dependencies [c6f5e62]

v7.0.11

Compare Source

Patch Changes
  • 0a87626: fix(ai): replace dynamic import() with loadBuiltinModule for diagnostics_channel to fix React Native/Hermes builds

v7.0.10

Compare Source

Patch Changes

v7.0.9

Compare Source

Patch Changes

v7.0.8

Compare Source

Patch Changes

v7.0.7

Compare Source

Patch Changes
  • d598481: Fix: convertToModelMessages no longer emits an empty assistant message when a block contains only unknown data parts (e.g. a data part before step-start with no convertDataPart provided)

v7.0.6

Compare Source

Patch Changes

v7.0.5

Compare Source

Patch Changes
  • a2750db: fix(ai): prune orphaned tool-approval responses in pruneMessages

    When pruning a specific tool by name (toolCalls: [{ type, tools: [...] }]), pruneMessages left the tool's tool-approval-response in place while removing its tool-approval-request and tool-call. The tool name of an approval response was resolved per-message, but approval responses live in a separate tool message from their approval request, so the name could never be resolved and the response was always kept. Tool name resolution is now done across all messages, so approval requests and responses are pruned together.

vercel/eve (eve)

v0.19.0

Compare Source

Minor Changes
  • 92f5162: add generic chat sdk channel for adapter-backed agents
Patch Changes
  • 8892504: Render the deployment home page with the eve SVG wordmark, baked-in agent name, and refined ready-state layout.
  • 3daaba0: Reduce development runtime snapshot disk usage by excluding .env*, generated dependency, and build output directories, using clone-friendly file copies where supported, and pruning stale snapshots after dev rebuilds.
  • 74ce164: reuse chat sdk twilio primitives for webhook, api, and voice helpers
  • c0a0ae2: Terminal model-call failures in delegated subagent runs (e.g. an unresolvable model id returning 404) now propagate to the parent as a failed subagent result instead of a successful empty output, so orchestrator sessions no longer report success when a delegation failed.
  • 0498252: Tool execution failures now return failed tool results to the model instead of leaving streamed tool calls without matching result history. Agents can recover from failed calls such as a missing load_skill target within the same turn.

v0.18.2

Compare Source

Patch Changes
  • c5da8e7: Sandbox API requests now append an eve/<version> token to the user-agent so the sandbox control plane can attribute traffic to eve.

v0.18.1

Compare Source

Patch Changes
  • 68365e8: Show tool call input in Slack approval prompts so operators can inspect approval-gated actions before approving.
  • 68365e8: Harden Slack HITL posting against API limits: large approval batches now split across multiple messages instead of exceeding Slack's 50-block cap, and long freeform answers are truncated so the answered-card update cannot fail.

v0.18.0

Compare Source

Minor Changes
  • a75dd47: Vercel sandbox: drop the runtime option. eve now always boots its hosted sandboxes from the published eve image.
Patch Changes
  • afc7ded: Allow eve dev to start from a package-less flat agent that only has instructions.md. Development runtime snapshots now generate private package metadata when the authored app has none.
  • 7d1084d: fix(eve): remove unnecessary preview deployment check that prevented production access from eve dev
  • 63f94f0: Remove optional framework peer dependencies from the published package metadata so installs no longer resolve unused framework packages.
  • ba2e0ce: Create new Vercel projects through vercel link instead of posting directly to the projects API. This lets the Vercel CLI apply its framework and local config handling while eve reads the resulting link metadata, keeps framework-specific eve host integrations when detected, and otherwise ensures new projects use the eve framework preset.

v0.17.2

Compare Source

Patch Changes
  • afa22f8: Cap recursive subagent delegation at three child-session levels by default, configurable with defineAgent({ limits: { maxSubagentDepth } }). At the limit, eve no longer advertises subagent tools and blocks stale delegated calls before starting another child session.
  • 55e9ad5: Update the scaffold's default agent model to anthropic/claude-sonnet-5. New agents created with eve init (and the setup model picker's pre-selected default) now use Claude Sonnet 5 instead of Claude Sonnet 4.6.
  • f26d600: use Chat SDK Slack format primitives for Slack mrkdwn conversion
  • 087d6fd: use chat sdk slack api primitives for slack channel api helpers
  • 70ebe69: use Chat SDK Slack webhook primitives for Slack channel parsing and verification
  • ed8a935: Keep the Workflow orchestration tool root-only. Delegated subagent sessions can still call visible subagent tools directly until the configured depth cap, but eve no longer advertises Workflow from those child sessions.
  • 37bd2bb: Use authored eveChannel() auth for GET /eve/v1/info so remote eve dev can authenticate with the same policy as the session routes.
  • 2fdc561: Add limits.maxInputTokensPerSession and limits.maxOutputTokensPerSession to stop a durable session from starting more model calls after its accumulated provider-reported input or output token usage reaches the configured cap. Root sessions default to a 40M input-token budget, delegated subagent sessions default to 5M, and authored input limits override those defaults.
  • 39c90de: Add explicit dev:eve, build:eve, and start:eve scripts to generated Web Chat projects so users can run the embedded eve app directly when needed.

v0.17.1

Compare Source

Patch Changes
  • 97aa99b: Add HTTP Basic userinfo and repeatable -H, --header support to eve dev URL targets so the terminal UI can send credentials or routing headers to protected remote deployments.
  • c7827fb: Stop injecting subagent tool descriptions into delegated child prompts. Child runs now receive only the caller's delegated message plus the stable subagent invocation wrapper.
  • 739af96: Update eve's bundled Workflow SDK dependency set to the latest 5.0.0 beta releases, keeping the core package and local workflow world aligned.
open-circle/valibot (valibot)

v1.4.2

Compare Source

Many thanks to @​Faze-up and @​chatman-media for contributing to this release.

  • Fix word count actions to cache the Intl.Segmenter for non-primitive locales, preventing it from being recreated on every words, minWords, maxWords and notWords validation (pull request #​1521)
  • Fix flatten method to handle issue path keys that collide with Object.prototype members like toString instead of throwing a TypeError (pull request #​1522)
  • Fix intersect schema to merge object keys that collide with Object.prototype members like toString instead of failing to merge them (pull request #​1522)
vuejs/language-tools (vue-tsc)

v3.3.6

Compare Source

language-core
  • fix: make generic component internal context inference type-safe across .d.ts boundary (#​6104) - Thanks to @​Holiden!
  • fix: do not treat non-trivial property accesses as compound - Thanks to @​KazariEX!
  • fix: treat semicolon-terminated expressions as compound - Thanks to @​KazariEX!
  • fix: preserve return types for compound event handlers - Thanks to @​KazariEX!
  • fix: use WeakMap to cache inline TS ASTs - Thanks to @​KazariEX!
  • fix: match upstream CSS v-bind parsing behavior - Thanks to @​KazariEX!
  • fix: include setup bindings as potential component names (#​6111) - Thanks to @​KazariEX!
  • perf: reduce boundary code feature allocations - Thanks to @​KazariEX!
  • refactor: centralize code features and deprecate allCodeFeatures - Thanks to @​KazariEX!

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "on Monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot requested a review from atinux as a code owner June 29, 2026 14:34
@vercel

vercel Bot commented Jun 29, 2026

Copy link
Copy Markdown
Contributor

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
nuxt Ready Ready Preview, Comment Jul 3, 2026 11:15pm

@socket-security

socket-security Bot commented Jul 1, 2026

Copy link
Copy Markdown

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants