Skip to content

chore(deps): bump the production-dependencies group across 1 directory with 7 updates - #191

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-c91ddc66c7
Open

chore(deps): bump the production-dependencies group across 1 directory with 7 updates#191
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-c91ddc66c7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 22, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 7 updates in the / directory:

Package From To
@a2a-js/sdk 1.1.0 1.2.0
@types/node 26.4.1 26.6.2
zod 4.5.4 4.6.5
@openai/agents 0.17.0 0.18.0
hono 4.13.7 4.13.8
@temporalio/workflow 1.23.0 1.24.0
@temporalio/worker 1.23.0 1.24.0

Updates @a2a-js/sdk from 1.1.0 to 1.2.0

Release notes

Sourced from @​a2a-js/sdk's releases.

v1.2.0

1.2.0 (2026-09-18)

Features

  • server: Introduce SettleByTaskId method (#692) (e856bda)

Bug Fixes

  • accept GetExtendedAgentCard JSON-RPC calls with omitted params (#687) (047d970)
  • avoid mutating caller message configuration (#725) (e3a6428)
  • client: cache the extended Agent Card only after signature verification (#711) (55b601c)
  • guard terminal state transitions and make cancelTask atomic (#636) (7b87c94)
  • preserve call context for JSON-RPC tenant requests (#708) (ae20aca)
  • preserve HeadersInit in authenticating fetch (#721) (f8c33fa)
  • preserve historyLength=0 and reject invalid REST listTasks pageSize (#685) (32c1865)
  • reject empty task IDs with RequestMalformedError in getTask/cancelTask (#629) (71aae97)
  • reject invalid ListTasks status filters with RequestMalformedError (#631) (a881fae)
  • reject missing required extensions before mutating task history (#690) (3b4ef3f)
  • reject whitespace-only taskId on sendMessage (#689) (85227a0)
  • return 404/-32001 for missing push notification configs (#630) (34f06e3)
  • scope ExecutionEventBusManager by tenant and owner to match TaskStore (#707) (69d8899)
  • stamp the resolved taskId onto sendMessage push configs (#688) (cfb19a8)
Changelog

Sourced from @​a2a-js/sdk's changelog.

1.2.0 (2026-09-18)

Features

  • server: Introduce SettleByTaskId method (#692) (e856bda)

Bug Fixes

  • accept GetExtendedAgentCard JSON-RPC calls with omitted params (#687) (047d970)
  • avoid mutating caller message configuration (#725) (e3a6428)
  • client: cache the extended Agent Card only after signature verification (#711) (55b601c)
  • guard terminal state transitions and make cancelTask atomic (#636) (7b87c94)
  • preserve call context for JSON-RPC tenant requests (#708) (ae20aca)
  • preserve HeadersInit in authenticating fetch (#721) (f8c33fa)
  • preserve historyLength=0 and reject invalid REST listTasks pageSize (#685) (32c1865)
  • reject empty task IDs with RequestMalformedError in getTask/cancelTask (#629) (71aae97)
  • reject invalid ListTasks status filters with RequestMalformedError (#631) (a881fae)
  • reject missing required extensions before mutating task history (#690) (3b4ef3f)
  • reject whitespace-only taskId on sendMessage (#689) (85227a0)
  • return 404/-32001 for missing push notification configs (#630) (34f06e3)
  • scope ExecutionEventBusManager by tenant and owner to match TaskStore (#707) (69d8899)
  • stamp the resolved taskId onto sendMessage push configs (#688) (cfb19a8)
Commits
  • 685cf31 chore(main): release 1.2.0 (#677)
  • ad59828 chore(deps-dev): bump brace-expansion from 1.1.12 to 1.1.18 (#597)
  • 32c1865 fix: preserve historyLength=0 and reject invalid REST listTasks pageSize (#685)
  • bae0e6d chore(deps-dev): bump form-data from 2.5.5 to 2.5.6 in /src/samples (#530)
  • d9c57d5 chore(deps-dev): bump simple-git from 3.33.0 to 3.36.0 (#460)
  • af0ba50 chore(deps): bump postcss from 8.5.6 to 8.5.14 (#461)
  • b8477e3 chore(deps-dev): bump @​tootallnate/once from 2.0.0 to 2.0.1 in /src/samples (...
  • 3b4ef3f fix: reject missing required extensions before mutating task history (#690)
  • bab7ede chore(deps): bump nanoid from 3.3.11 to 3.3.18 (#702)
  • 0cffaf3 chore(deps-dev): bump js-yaml from 4.1.1 to 4.3.2 (#731)
  • Additional commits viewable in compare view

Updates @types/node from 26.4.1 to 26.6.2

Commits

Updates zod from 4.5.4 to 4.6.5

Release notes

Sourced from zod's releases.

v4.6.5

Commits:

  • d2b135cfb7a3582b9eb515756b9166bcb9521f4a docs: add the 4.6.x patch highlights to the 4.6 post
  • f1448f7cee00df9fe1e9ad84a000aa1828cc8bc1 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections
  • de65a5cb39ed22a507fac935788f718fa88d104f docs: lead the properties section with the check and add a Zod Mini tab (#6598)
  • 56222cd1532c07bcb91b67df529cab4c0a215330 feat(instanceof): key the .properties() shape off the instance type (#6600)
  • ca0229a404818290e6cdcfefcd7eb2d04bcbb543 Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)"
  • cc4cd4ee9c52fcaa10964e48cc144541e41a5ed9 Revert "Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)""
  • 0f3f5ee3ca56c7574bf849e54f79e9a6e02562ee 4.6.5
  • 59bbc03e10c636b9eb3c393dfeb552819774ec21 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump

v4.6.4

A patch on top of 4.6.3.

  • d6bc1e30 feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)
  • ad32d751 perf: z.url() rejects an invalid URL with URL.canParse() instead of a throwing constructor, about 50x faster; fewer allocations on the validation path (#6588)
  • 2bb08717 chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump
  • f6e1701a chore(deps): bump next to 15.5.25 and vite to 7.3.6 (#6153)

v4.6.3

A patch on top of 4.6.2.

  • 413cce9a fix(v4): make z.properties() a check again (#6594) — removes the standalone z.properties() schema from 4.6.0; z.instanceof().properties() and .check(...z.properties()) are unchanged
  • 75d63ee1 docs: show only the .properties() method form in the 4.6 post
  • 46da9572 docs: match the error-message examples to what the parsers emit

v4.6.2

A patch on top of 4.6.1.

v4.6.1

A patch on top of 4.6.0.

v4.6.0

Zod 4.6 is now available.

npm install zod@latest

At a glance:

... (truncated)

Commits
  • 59bbc03 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump
  • 0f3f5ee 4.6.5
  • cc4cd4e Revert "Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, ref...
  • ca0229a Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed w...
  • 56222cd feat(instanceof): key the .properties() shape off the instance type (#6600)
  • de65a5c docs: lead the properties section with the check and add a Zod Mini tab (#6598)
  • f1448f7 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections
  • d2b135c docs: add the 4.6.x patch highlights to the 4.6 post
  • 2bb0871 chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump
  • 743aedb 4.6.4
  • Additional commits viewable in compare view

Updates @openai/agents from 0.17.0 to 0.18.0

Release notes

Sourced from @​openai/agents's releases.

v0.18.0

Key Changes

Docker file API migration

Docker file APIs now run entirely inside a running container. This changes compatibility for applications that relied on host-side file access: images need /bin/sh and GNU filesystem utilities, including realpath, and access uses the container's default user or explicit runAs. Use a compatible image and suitable file permissions. Editor updates accept source files up to 10 MiB; use execCommand for larger edits. Newly added path grants require resume or recreation before file APIs can use them.

Optional UnixLocal file protection

UnixLocalSandboxClient adds fileIOProtection: 'auto' | 'required' | 'off'. The default 'auto' selects Python-based file protection when available and otherwise retains Node filesystem behavior. Use 'required' to reject unavailable protection or 'off' to retain the Node backend. Inspect session.fileIOBackend to see the selection. This protection applies to file/editor operations and does not confine host shell commands.

Image-generation action selection

imageGenerationTool() now accepts action: 'generate' | 'edit' | 'auto' and forwards it through streaming and non-streaming Responses requests. Leaving action unspecified preserves provider defaults.

What's Changed

Documentation & Other Changes

New Contributors

Full Changelog: openai/openai-agents-js@v0.17.2...v0.18.0

v0.17.2

What's Changed

Documentation & Other Changes

Full Changelog: openai/openai-agents-js@v0.17.1...v0.17.2

v0.17.1

What's Changed

... (truncated)

Commits
  • 71abeaa chore: update versions (#1859)
  • 064fcb2 fix: harden UnixLocal file I/O and route Docker file APIs through containers ...
  • 19d0b5f fix(core): avoid redundant final computer screenshots (#1827)
  • a0f48ff fix: preserve sandbox workdirs for shell command lists (#1862)
  • a3a9215 feat: support the image generation tool action option (#1861)
  • f3bfca2 fix(realtime): preserve agent_end response ownership (#1858)
  • b665b0e fix: recover deferred tools during response continuation (#1856)
  • 78b67df chore: update versions (#1852)
  • 83f3240 chore: remove private packges from changeset targets
  • 8d1f019 fix: preserve model settings for GPT-5 and newer models (#1850)
  • Additional commits viewable in compare view

Updates hono from 4.13.7 to 4.13.8

Release notes

Sourced from hono's releases.

v4.13.8

What's Changed

Full Changelog: honojs/hono@v4.13.7...v4.13.8

Commits
  • 098e119 4.13.8
  • e8c8c21 perf(jsx/dom): optimize matching-head child lookup during reconciliation (#5329)
  • 8755b17 docs(combine): fix except() JSDoc param and add missing @​returns (#5346)
  • edd138e fix(request): keep the request media type when reusing a cached body (#5366)
  • 9b4e9c2 fix(accept): clamp a negative q to 0, not 1 (#5357)
  • 65cff90 fix(accept): treat the q parameter name as case-insensitive (#5349)
  • f147de5 fix(accepts, language): skip accept entries with quality 0 when matching (#5311)
  • 90e1b94 fix(aws-lambda): respect backpressure when streaming the response body (#5351)
  • 7792f5d perf(jsx/dom): reduce lookup work for large keyed updates (#5340)
  • e7b38ee docs: fix typos in code comments and link third-party middleware section (#5343)
  • See full diff in compare view

Updates @temporalio/workflow from 1.23.0 to 1.24.0

Release notes

Sourced from @​temporalio/workflow's releases.

v1.24.0

Breaking Changes

  • @temporalio/openai-agents now requires @openai/agents-core and @openai/agents-openai ~0.14.3. A project pinned to 0.13.x or earlier hits a peer dependency conflict until it upgrades.
  • Experimental: External storage StorageDriverSelector now receives a StorageDriverSelectContext instead of a StorageDriverStoreContext. Update the parameter type; the new type carries the same abortSignal and target fields.

Added

  • Experimental: New methods for ActivityHandle: pause, unpause, updateOptions and restoreOriginalOptions.
  • ActivityHandle.describe now accepts options that can be used to include additional data associated with activity execution, such as input and result.
  • Experimental: @temporalio/openai-agents can run OpenAI Agents SandboxAgents as Temporal Workflows. SandboxAgent operations are Activities; hosted tool credentials and sandbox environment values that reference allowlisted Worker environment variables are resolved on Worker so their values are not recorded in Workflow history.
  • Experimental: Added rawValueTypeInfo, which allows RawValue inputs and results to be preserved across serialization boundaries when explicitly configured on TypeInfo-aware APIs.
  • Experimental: External Storage download and upload metrics are now reported to Core on Workflow Activation completions and included in its workflow-task duration log.

Changed

  • Standalone Activities APIs are stable.
  • ActivityClient now passes serialization context to data converter when interacting with standalone activities.
  • A workflow query issued from inside a Nexus operation handler now propagates the link the server returns for the workflow that processed it, so the caller's Nexus operation event points back at the queried workflow.
  • A common.v1.Link.Workflow now serializes to temporal:///namespaces/{ns}/workflows/{wid}/{rid} with the optional reason as a query param, matching the other SDKs; previously it reused the workflow event path and dropped reason. Inbound Workflow links are now parsed as well.

Fixed

  • Activity errors converted to ApplicationFailure now preserve native Error.cause chains in serialized failures.
  • Nexus handlers now report uncaught Workflow and standalone Activity already-started errors as non-retryable INTERNAL Handler Errors, preventing retries when ID reuse or conflict policies reject duplicate execution IDs.
  • Workflow activation failures now retain Workflow state until Core eviction, preventing premature execution-context disposal after converter or codec errors.
  • Fixed non-sticky Workflow Task poller starvation on Workers configured with a small Workflow cache (maxCachedWorkflows). Sticky pollers could consume every Workflow-cache permit and starve the non-sticky poller, so a Worker could stop accepting new Workflows until a poll timed out (up to ~60s). (Core fix: temporalio/sdk-rust#1534.)
  • Bumped the core-bridge HTTP/2 client stack (h2 0.4.13 → 0.4.19, hyper 1.8.1 → 1.11.0), picking up upstream fixes for stream-cancel flow-control leaks and missed wakeups on reset/trailers that can affect cancellation-heavy long-poll workloads.

... (truncated)

Changelog

Sourced from @​temporalio/workflow's changelog.

[1.24.0] - 2026-09-14

Breaking Changes

  • @temporalio/openai-agents now requires @openai/agents-core and @openai/agents-openai ~0.14.3. A project pinned to 0.13.x or earlier hits a peer dependency conflict until it upgrades.
  • Experimental: External storage StorageDriverSelector now receives a StorageDriverSelectContext instead of a StorageDriverStoreContext. Update the parameter type; the new type carries the same abortSignal and target fields.

Added

  • Experimental: New methods for ActivityHandle: pause, unpause, updateOptions and restoreOriginalOptions.
  • ActivityHandle.describe now accepts options that can be used to include additional data associated with activity execution, such as input and result.
  • Experimental: @temporalio/openai-agents can run OpenAI Agents SandboxAgents as Temporal Workflows. SandboxAgent operations are Activities; hosted tool credentials and sandbox environment values that reference allowlisted Worker environment variables are resolved on Worker so their values are not recorded in Workflow history.
  • Experimental: Added rawValueTypeInfo, which allows RawValue inputs and results to be preserved across serialization boundaries when explicitly configured on TypeInfo-aware APIs.
  • Experimental: External Storage download and upload metrics are now reported to Core on Workflow Activation completions and included in its workflow-task duration log.

Changed

  • Standalone Activities APIs are stable.
  • ActivityClient now passes serialization context to data converter when interacting with standalone activities.
  • A workflow query issued from inside a Nexus operation handler now propagates the link the server returns for the workflow that processed it, so the caller's Nexus operation event points back at the queried workflow.
  • A common.v1.Link.Workflow now serializes to temporal:///namespaces/{ns}/workflows/{wid}/{rid} with the optional reason as a query param, matching the other SDKs; previously it reused the workflow event path and dropped reason. Inbound Workflow links are now parsed as well.

Fixed

  • Activity errors converted to ApplicationFailure now preserve native Error.cause chains in serialized failures.
  • Nexus handlers now report uncaught Workflow and standalone Activity already-started errors as non-retryable INTERNAL Handler Errors, preventing retries when ID reuse or conflict policies reject duplicate execution IDs.
  • Workflow activation failures now retain Workflow state until Core eviction, preventing premature execution-context disposal after converter or codec errors.
  • Fixed non-sticky Workflow Task poller starvation on Workers configured with a small Workflow cache (maxCachedWorkflows). Sticky pollers could consume every Workflow-cache permit and starve the non-sticky poller, so a Worker could stop accepting new Workflows until a poll timed out (up to ~60s). (Core fix: temporalio/sdk-rust#1534.)
  • Bumped the core-bridge HTTP/2 client stack (h2 0.4.13 → 0.4.19, hyper 1.8.1 → 1.11.0), picking up upstream fixes for stream-cancel flow-control leaks and missed wakeups on reset/trailers that can affect cancellation-heavy long-poll workloads.
Commits

Updates @temporalio/worker from 1.23.0 to 1.24.0

Release notes

Sourced from @​temporalio/worker's releases.

v1.24.0

Breaking Changes

  • @temporalio/openai-agents now requires @openai/agents-core and @openai/agents-openai ~0.14.3. A project pinned to 0.13.x or earlier hits a peer dependency conflict until it upgrades.
  • Experimental: External storage StorageDriverSelector now receives a StorageDriverSelectContext instead of a StorageDriverStoreContext. Update the parameter type; the new type carries the same abortSignal and target fields.

Added

  • Experimental: New methods for ActivityHandle: pause, unpause, updateOptions and restoreOriginalOptions.
  • ActivityHandle.describe now accepts options that can be used to include additional data associated with activity execution, such as input and result.
  • Experimental: @temporalio/openai-agents can run OpenAI Agents SandboxAgents as Temporal Workflows. SandboxAgent operations are Activities; hosted tool credentials and sandbox environment values that reference allowlisted Worker environment variables are resolved on Worker so their values are not recorded in Workflow history.
  • Experimental: Added rawValueTypeInfo, which allows RawValue inputs and results to be preserved across serialization boundaries when explicitly configured on TypeInfo-aware APIs.
  • Experimental: External Storage download and upload metrics are now reported to Core on Workflow Activation completions and included in its workflow-task duration log.

Changed

  • Standalone Activities APIs are stable.
  • ActivityClient now passes serialization context to data converter when interacting with standalone activities.
  • A workflow query issued from inside a Nexus operation handler now propagates the link the server returns for the workflow that processed it, so the caller's Nexus operation event points back at the queried workflow.
  • A common.v1.Link.Workflow now serializes to temporal:///namespaces/{ns}/workflows/{wid}/{rid} with the optional reason as a query param, matching the other SDKs; previously it reused the workflow event path and dropped reason. Inbound Workflow links are now parsed as well.

Fixed

  • Activity errors converted to ApplicationFailure now preserve native Error.cause chains in serialized failures.
  • Nexus handlers now report uncaught Workflow and standalone Activity already-started errors as non-retryable INTERNAL Handler Errors, preventing retries when ID reuse or conflict policies reject duplicate execution IDs.
  • Workflow activation failures now retain Workflow state until Core eviction, preventing premature execution-context disposal after converter or codec errors.
  • Fixed non-sticky Workflow Task poller starvation on Workers configured with a small Workflow cache (maxCachedWorkflows). Sticky pollers could consume every Workflow-cache permit and starve the non-sticky poller, so a Worker could stop accepting new Workflows until a poll timed out (up to ~60s). (Core fix: temporalio/sdk-rust#1534.)
  • Bumped the core-bridge HTTP/2 client stack (h2 0.4.13 → 0.4.19, hyper 1.8.1 → 1.11.0), picking up upstream fixes for stream-cancel flow-control leaks and missed wakeups on reset/trailers that can affect cancellation-heavy long-poll workloads.

... (truncated)

Changelog

Sourced from @​temporalio/worker's changelog.

[1.24.0] - 2026-09-14

Breaking Changes

  • @temporalio/openai-agents now requires @openai/agents-core and @openai/agents-openai ~0.14.3. A project pinned to 0.13.x or earlier hits a peer dependency conflict until it upgrades.
  • Experimental: External storage StorageDriverSelector now receives a StorageDriverSelectContext instead of a StorageDriverStoreContext. Update the parameter type; the new type carries the same abortSignal and target fields.

Added

  • Experimental: New methods for ActivityHandle: pause, unpause, updateOptions and restoreOriginalOptions.
  • ActivityHandle.describe now accepts options that can be used to include additional data associated with activity execution, such as input and result.
  • Experimental: @temporalio/openai-agents can run OpenAI Agents SandboxAgents as Temporal Workflows. SandboxAgent operations are Activities; hosted tool credentials and sandbox environment values that reference allowlisted Worker environment variables are resolved on Worker so their values are not recorded in Workflow history.
  • Experimental: Added rawValueTypeInfo, which allows RawValue inputs and results to be preserved across serialization boundaries when explicitly configured on TypeInfo-aware APIs.
  • Experimental: External Storage download and upload metrics are now reported to Core on Workflow Activation completions and included in its workflow-task duration log.

Changed

  • Standalone Activities APIs are stable.
  • ActivityClient now passes serialization context to data converter when interacting with standalone activities.
  • A workflow query issued from inside a Nexus operation handler now propagates the link the server returns for the workflow that processed it, so the caller's Nexus operation event points back at the queried workflow.
  • A common.v1.Link.Workflow now serializes to temporal:///namespaces/{ns}/workflows/{wid}/{rid} with the optional reason as a query param, matching the other SDKs; previously it reused the workflow event path and dropped reason. Inbound Workflow links are now parsed as well.

Fixed

  • Activity errors converted to ApplicationFailure now preserve native Error.cause chains in serialized failures.
  • Nexus handlers now report uncaught Workflow and standalone Activity already-started errors as non-retryable INTERNAL Handler Errors, preventing retries when ID reuse or conflict policies reject duplicate execution IDs.
  • Workflow activation failures now retain Workflow state until Core eviction, preventing premature execution-context disposal after converter or codec errors.
  • Fixed non-sticky Workflow Task poller starvation on Workers configured with a small Workflow cache (maxCachedWorkflows). Sticky pollers could consume every Workflow-cache permit and starve the non-sticky poller, so a Worker could stop accepting new Workflows until a poll timed out (up to ~60s). (Core fix: temporalio/sdk-rust#1534.)
  • Bumped the core-bridge HTTP/2 client stack (h2 0.4.13 → 0.4.19, hyper 1.8.1 → 1.11.0), picking up upstream fixes for stream-cancel flow-control leaks and missed wakeups on reset/trailers that can affect cancellation-heavy long-poll workloads.
Commits
  • 1fd1c81 Prepare release 1.24.0 (#2425)
  • a6a4e78 feat(worker): report external storage metrics on workflow task completions (#...
  • f827cda Retain failed Workflows until Core eviction (#2378)
  • 3e9f28b fix(nexus): make already-started errors non-retryable (#2371)
  • 5a370b8 Use new payload visitor for workflow activations and completions (#2329)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the production-dependencies group across 1 director…
a014d96 
…y with 7 updates

Bumps the production-dependencies group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@a2a-js/sdk](https://github.com/a2aproject/a2a-js) | `1.1.0` | `1.2.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.4.1` | `26.6.2` |
| [zod](https://github.com/colinhacks/zod) | `4.5.4` | `4.6.5` |
| [@openai/agents](https://github.com/openai/openai-agents-js) | `0.17.0` | `0.18.0` |
| [hono](https://github.com/honojs/hono) | `4.13.7` | `4.13.8` |
| [@temporalio/workflow](https://github.com/temporalio/sdk-typescript/tree/HEAD/packages/workflow) | `1.23.0` | `1.24.0` |
| [@temporalio/worker](https://github.com/temporalio/sdk-typescript/tree/HEAD/packages/worker) | `1.23.0` | `1.24.0` |



Updates `@a2a-js/sdk` from 1.1.0 to 1.2.0
- [Release notes](https://github.com/a2aproject/a2a-js/releases)
- [Changelog](https://github.com/a2aproject/a2a-js/blob/main/CHANGELOG.md)
- [Commits](a2aproject/a2a-js@v1.1.0...v1.2.0)

Updates `@types/node` from 26.4.1 to 26.6.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `zod` from 4.5.4 to 4.6.5
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.5.4...v4.6.5)

Updates `@openai/agents` from 0.17.0 to 0.18.0
- [Release notes](https://github.com/openai/openai-agents-js/releases)
- [Commits](openai/openai-agents-js@v0.17.0...v0.18.0)

Updates `hono` from 4.13.7 to 4.13.8
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.13.7...v4.13.8)

Updates `@temporalio/workflow` from 1.23.0 to 1.24.0
- [Release notes](https://github.com/temporalio/sdk-typescript/releases)
- [Changelog](https://github.com/temporalio/sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](https://github.com/temporalio/sdk-typescript/commits/v1.24.0/packages/workflow)

Updates `@temporalio/worker` from 1.23.0 to 1.24.0
- [Release notes](https://github.com/temporalio/sdk-typescript/releases)
- [Changelog](https://github.com/temporalio/sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](https://github.com/temporalio/sdk-typescript/commits/v1.24.0/packages/worker)

---
updated-dependencies:
- dependency-name: "@a2a-js/sdk"
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@types/node"
  dependency-version: 26.6.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: zod
  dependency-version: 4.6.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@openai/agents"
  dependency-version: 0.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: hono
  dependency-version: 4.13.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@temporalio/workflow"
  dependency-version: 1.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@temporalio/worker"
  dependency-version: 1.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 22, 2026
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 22, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@douglas-grishen douglas-grishen Awaiting requested review from douglas-grishen douglas-grishen is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants