build(deps): bump the production-dependencies group across 1 directory with 8 updates

[dependabot]

Bumps the production-dependencies group with 8 updates in the / directory:

Package	From	To
@hono/node-server	2.0.12	2.1.1
@opencode-ai/sdk	1.17.11	1.18.20
@pierre/diffs	1.2.10	1.3.5
ai	6.0.206	7.0.73
ai-sdk-provider-claude-code	3.5.0	4.1.1
hono	4.12.32	4.13.3
next-intl	4.13.4	4.13.7
property-information	7.1.0	7.2.0

Updates @hono/node-server from 2.0.12 to 2.1.1

Release notes

Sourced from @​hono/node-server's releases.

v2.1.1

What's Changed

• perf: lazily materialize request headers by @​BlankParticle in honojs/node-server#389

Full Changelog: honojs/node-server@v2.1.0...v2.1.1

v2.1.0

What's Changed

• feat: add Early Hints (HTTP 103) middleware by @​bilal-azam in honojs/node-server#378
• fix(listener): avoid uncaught error when force-closing a non-standard socket by @​mohamedramadan14 in honojs/node-server#383

New Contributors

• @​bilal-azam made their first contribution in honojs/node-server#378
• @​mohamedramadan14 made their first contribution in honojs/node-server#383

Full Changelog: honojs/node-server@v2.0.12...v2.1.0

Commits

• 73c03ad 2.1.1
• 5515aa0 perf: lazily materialize request headers (#389)
• 82ba34e 2.1.0
• 1f2909a fix(listener): avoid uncaught error when force-closing a non-standard socket ...
• 977a242 feat: add Early Hints (HTTP 103) middleware (#378)
• See full diff in compare view

Updates @opencode-ai/sdk from 1.17.11 to 1.18.20

Commits

• See full diff in compare view

Updates @pierre/diffs from 1.2.10 to 1.3.5

Updates ai from 6.0.206 to 7.0.73

Release notes

Sourced from ai's releases.

ai@7.0.73

Patch Changes

• Updated dependencies [f607a12]
  • @​ai-sdk/gateway@​4.0.59

ai@6.0.264

Patch Changes

• 6a7e701: fix(ai): prevent duplicate text and reasoning part ids

ai@6.0.263

Patch Changes

• Updated dependencies [1e70580]
  • @​ai-sdk/gateway@​3.0.179

ai@6.0.262

Patch Changes

• 30526e9: Prevent exceptions in streaming onChunk and onError callbacks from terminating the stream or masking provider errors.
• Updated dependencies [7de3226]
• Updated dependencies [504da15]
  • @​ai-sdk/gateway@​3.0.178

Changelog

Sourced from ai's changelog.

7.0.73

Patch Changes

• Updated dependencies [f607a12]
  • @​ai-sdk/gateway@​4.0.59

7.0.72

Patch Changes

• Updated dependencies [fdcc814]
  • @​ai-sdk/gateway@​4.0.58

7.0.71

Patch Changes

• 9a37469: Prevent exceptions in streaming onChunk and onError callbacks from terminating the stream or masking provider errors.
• Updated dependencies [936719b]
  • @​ai-sdk/gateway@​4.0.57

7.0.70

Patch Changes

• 9566914: Stop multi-step text generation for client tool approval even when a provider-executed tool has a deferred result.
• b181020: fix: reject streamObject result promises and report failed completion when the provider stream errors
• 7054073: Filter preliminary tool outputs when ignoreIncompleteToolCalls is enabled.
• a828527: Prevent automatic tool execution when a model call ends with an unsafe finish reason.
• d3cc3fe: Clear partial UI message parts when a WorkflowAgent model-call step is retried.
• Updated dependencies [e6087c9]
  • @​ai-sdk/provider-utils@​5.0.28
  • @​ai-sdk/gateway@​4.0.56

7.0.69

Patch Changes

• Updated dependencies [1f7a464]
  • @​ai-sdk/gateway@​4.0.55

7.0.68

Patch Changes

• Updated dependencies [257632b]
  • @​ai-sdk/gateway@​4.0.54

7.0.67

... (truncated)

Commits

• eceb32a Version Packages (#19224)
• eac099e Version Packages (#19213)
• 9e7f81b test(ai): preserve raw stream errors when onError throws (#19214)
• e2aa796 Version Packages (#19186)
• 936719b feat(gateway): experimental batch API support (#19032)
• 9a37469 fix: contain streaming callback exceptions without interrupting consumers or ...
• 97a9489 Version Packages (#19085)
• b181020 fix: settle streamObject results and report provider stream failures without ...
• 7054073 fix: omit preliminary tool outputs when ignoring incomplete tool calls (#19084)
• a828527 fix: prevent automatic tool execution after unsafe model finish reasons (#19066)
• Additional commits viewable in compare view

Updates ai-sdk-provider-claude-code from 3.5.0 to 4.1.1

Release notes

Sourced from ai-sdk-provider-claude-code's releases.

v4.1.1

Agent SDK 0.3.232 pin and AI SDK dep refresh. See CHANGELOG. https://www.npmjs.com/package/ai-sdk-provider-claude-code/v/4.1.1

v4.1.0

Added

• resumeDropsTurn setting — maps the Claude Agent SDK's new resumeDropsTurn option: when resuming a session, drop the turn containing the given chain-entry UUID from the restored context. Companion to resumeSessionAt for forking a resumed session at a specific point; documented in the README options table and docs/sessions.md. (#142)

Changed

• Claude Agent SDK pinned at 0.3.226 (from 0.3.205) — resolves the weekly canary's Options drift guard failure; resumeDropsTurn was the only new Options key, and typecheck plus the full unit suite pass against the new pin. The dependency stays an exact pin, gated by the canary. (#142, #143)

Full changelog: ben-vargas/ai-sdk-provider-claude-code@v4.0.1...v4.1.0

v4.0.1

Fixed

The Claude Agent SDK's process-exit errors are bare (Claude Code process exited with code <N> — no stderr, no exit code), so when the CLI failed to start or crashed, the real cause sat unseen in error.data.stderr while the visible message stayed generic. (#136)

• Error messages now include the captured stderr. Mapped errors append a single-line excerpt as … | stderr (tail): … (last 5 non-empty lines, ANSI-stripped, 600-character cap), exactly once. The full capture — now bounded at 4000 characters — remains available via getErrorMetadata(error)?.stderr on every mapped path, including timeout errors and stderr-classified authentication failures.
• Classification now reads stderr. Authentication failures whose only evidence is on stderr (e.g. Not authenticated from a hard process exit) now produce a proper LoadAPIKeyError with the login instruction visible, and Request timed out/ETIMEDOUT on stderr classifies as a retryable timeout. Both use deliberately high-precision patterns so incidental stderr noise (a third-party 401 Unauthorized, debug chatter) can't misclassify an unrelated crash.
• Bounded retention. Collected stderr is capped at 4000 characters at the collectors and before any scanning of SDK-provided values, preventing unbounded memory growth on long noisy runs.
• The README gains an Error Diagnostics section documenting all of the above.

Same defect class as ai-sdk-provider-codex-cli#39, fixed there in v2.1.1/v1.3.1.

Full changelog: ben-vargas/ai-sdk-provider-claude-code@v4.0.0...v4.0.1

v4.0.0

Added

• Claude Agent SDK event callbacks - Adds first-class onSdkMessage, onTaskEvent, onHookEvent, onMcpStatusChange, onElicitation, and agent settings so hosts can observe raw SDK messages, task/subagent lifecycle, hook lifecycle, the request's initial MCP server status snapshot, MCP elicitation, and named main-thread agents without reaching through sdkOptions.
• Query controller API - Exports createClaudeCodeQueryController(query) and the ClaudeCodeQueryController type, and adds onQueryControllerCreated for safe live-query controls (interrupt, setPermissionMode, setMcpPermissionModeOverride, setModel, setMaxThinkingTokens, applyFlagSettings, mcpServerStatus, reconnectMcpServer, toggleMcpServer, setMcpServers, getContextUsage, rewindFiles, stopTask, backgroundTasks, and optional streamInput) while keeping the raw SDK Query reachable via controller.rawQuery. Control-protocol calls require the SDK Query to still be live, and most require SDK streaming input/output.
• Expanded provider metadata - Adds taskEvents, hookEvents, initial MCP server-status snapshots in mcpServers, and enriched permissionDenials (agentId, decisionReasonType, and raw when available) under providerMetadata['claude-code'].
• Additional SDK helper re-exports - Re-exports resolveSettings, filterEscalatingDefaultMode, SandboxCredentialsConfig, and SDKFilesPersistedEvent.
• Auto image streaming - With streamingInput: 'auto', supported image payloads now enable the Agent SDK streaming-input path automatically instead of requiring callers to set streamingInput: 'always' only for image prompts; streamingInput: 'off' disables that path and emits a generic type: 'other' image streaming-input warning.

Changed

• AI SDK v7 / LanguageModelV4 port - Updates the provider implementation for the AI SDK v7 provider contract and documents the remaining v7 support boundaries.
• Runtime and package baseline raised - Requires Node.js >=22, ships ESM-only output (CommonJS require() is no longer available), and requires a Zod peer of ^4.1.8.
• Claude Agent SDK pinned at 0.3.205 - Bumps the exact @anthropic-ai/claude-agent-sdk pin to 0.3.205. Upstream fixed the 0.3.198–0.3.202 published .d.ts defect (undeclared SDKControlRequestProgressMessage/SDKConversationResetMessage) in 0.3.203; 0.3.205 also changes Query.interrupt() to return the control-protocol response, which the query controller absorbs so ClaudeCodeQueryController.interrupt() keeps resolving void. The dependency stays an exact pin (not a caret) because upstream releases have repeatedly shipped broken type declarations; the weekly canary gates each pin move.
• Tool-error stream extension removed - Failed tool executions now use the AI SDK spec shape: tool-result with isError: true, replacing the provider-specific tool-error stream extension.
• AI SDK v6 users - Stay on the maintained 3.x line (ai-sdk-v6 dist-tag, ai-sdk-v6 maintenance branch) until adopting AI SDK v7 with the 4.x line.
• Optional-provider feasibility documented - ProviderV4.files() and ProviderV4.skills() remain absent because Claude Agent SDK 0.3.205 has no direct durable provider-reference upload API for files or skill bundles; the README distinguishes inline file data from reusable provider-reference uploads.
• Workflow serialization deferred - Documents that @ai-sdk/provider-utils@5.0.5 exposes WORKFLOW_SERIALIZE, WORKFLOW_DESERIALIZE, and serializeModelOptions() for provider model classes, while this provider defers serialization for provider instances/settings; callback and function settings must be reconstructed by applications.
• Custom/reasoning-file feasibility documented - Documents current V4 behavior for custom and reasoning-file parts: assistant-history replay skips parts Claude Code cannot represent, and the provider does not emit custom output or durable reasoning-file artifacts yet.

Fixed

... (truncated)

Changelog

Sourced from ai-sdk-provider-claude-code's changelog.

[4.1.1] - 2026-08-14

Changed

• Claude Agent SDK pinned at 0.3.232 - Bumps the exact @anthropic-ai/claude-agent-sdk pin from 0.3.226 to current npm latest. keyof Options is unchanged (64 keys; last new key remains resumeDropsTurn). No video content block. Do not use 0.3.233 / dist-tag next.
• AI SDK dependency pins refreshed - @ai-sdk/provider ^4.0.2 → ^4.0.7, @ai-sdk/provider-utils ^5.0.5 → ^5.0.27, and ai (devDependency) ^7.0.16 → ^7.0.66. Hygiene/CLI-parity only; no LanguageModelV4 or ProviderV4 contract change and no video input.

[4.1.0] - 2026-08-10

Added

• resumeDropsTurn setting (#142) - Maps the Agent SDK's new resumeDropsTurn option: when resuming a session, drop the turn containing the given chain-entry UUID from the restored context (companion to resumeSessionAt for forking at a specific point).

Changed

• Claude Agent SDK pinned at 0.3.226 - Bumps the exact @anthropic-ai/claude-agent-sdk pin from 0.3.205, resolving the weekly canary's Options drift guard failure (#142). resumeDropsTurn was the only new Options key; typecheck and the unit suite pass against the new pin.

[4.0.1] - 2026-07-10

Fixed

• Visible and bounded subprocess diagnostics (#136) - Error messages now carry a trimmed stderr tail, authentication and timeout classification also inspect captured stderr using separate high-precision login/API-key and timeout phrases to avoid incidental matches, and retained stderr stored in mapped error metadata, including timeout errors, is capped at 4000 characters.

[4.0.0] - 2026-07-10

Added

• Claude Agent SDK event callbacks - Adds first-class onSdkMessage, onTaskEvent, onHookEvent, onMcpStatusChange, onElicitation, and agent settings so hosts can observe raw SDK messages, task/subagent lifecycle, hook lifecycle, the request's initial MCP server status snapshot, MCP elicitation, and named main-thread agents without reaching through sdkOptions.
• Query controller API - Exports createClaudeCodeQueryController(query) and the ClaudeCodeQueryController type, and adds onQueryControllerCreated for safe live-query controls (interrupt, setPermissionMode, setMcpPermissionModeOverride, setModel, setMaxThinkingTokens, applyFlagSettings, mcpServerStatus, reconnectMcpServer, toggleMcpServer, setMcpServers, getContextUsage, rewindFiles, stopTask, backgroundTasks, and optional streamInput) while keeping the raw SDK Query reachable via controller.rawQuery. Control-protocol calls require the SDK Query to still be live, and most require SDK streaming input/output.
• Expanded provider metadata - Adds taskEvents, hookEvents, initial MCP server-status snapshots in mcpServers, and enriched permissionDenials (agentId, decisionReasonType, and raw when available) under providerMetadata['claude-code'].
• Additional SDK helper re-exports - Re-exports resolveSettings, filterEscalatingDefaultMode, SandboxCredentialsConfig, and SDKFilesPersistedEvent.
• Auto image streaming - With streamingInput: 'auto', supported image payloads now enable the Agent SDK streaming-input path automatically instead of requiring callers to set streamingInput: 'always' only for image prompts; streamingInput: 'off' disables that path and emits a generic type: 'other' image streaming-input warning.

Changed

• AI SDK v7 / LanguageModelV4 port - Updates the provider implementation for the AI SDK v7 provider contract and documents the remaining v7 support boundaries.
• Runtime and package baseline raised - Requires Node.js >=22, ships ESM-only output (CommonJS require() is no longer available), and requires a Zod peer of ^4.1.8.
• Claude Agent SDK pinned at 0.3.205 - Bumps the exact @anthropic-ai/claude-agent-sdk pin to 0.3.205. Upstream fixed the 0.3.198–0.3.202 published .d.ts defect (undeclared SDKControlRequestProgressMessage/SDKConversationResetMessage) in 0.3.203; 0.3.205 also changes Query.interrupt() to return the control-protocol response, which the query controller absorbs so ClaudeCodeQueryController.interrupt() keeps resolving void. The dependency stays an exact pin (not a caret) because upstream releases have repeatedly shipped broken type declarations; the weekly canary gates each pin move.
• Tool-error stream extension removed - Failed tool executions now use the AI SDK spec shape: tool-result with isError: true, replacing the provider-specific tool-error stream extension.
• AI SDK v6 users - Stay on the maintained 3.x line (ai-sdk-v6 dist-tag, ai-sdk-v6 maintenance branch) until adopting AI SDK v7 with the 4.x line.
• Optional-provider feasibility documented - ProviderV4.files() and ProviderV4.skills() remain absent because Claude Agent SDK 0.3.205 has no direct durable provider-reference upload API for files or skill bundles; the README distinguishes inline file data from reusable provider-reference uploads.
• Workflow serialization deferred - Documents that @ai-sdk/provider-utils@5.0.5 exposes WORKFLOW_SERIALIZE, WORKFLOW_DESERIALIZE, and serializeModelOptions() for provider model classes, while this provider defers serialization for provider instances/settings; callback and function settings must be reconstructed by applications.
• Custom/reasoning-file feasibility documented - Documents current V4 behavior for custom and reasoning-file parts: assistant-history replay skips parts Claude Code cannot represent, and the provider does not emit custom output or durable reasoning-file artifacts yet.

Fixed

• SDK peer lockfile fidelity restored - Restores the @anthropic-ai/sdk and @modelcontextprotocol/sdk peer dependency lockfile entries so clean installs get the Agent SDK's full derived type fidelity, and removes the CI --legacy-peer-deps flag now that standard peer resolution succeeds.
• Structured output tool envelope suppressed - JSON-mode structured output now streams and returns only the object text, without leaking the Agent SDK's internal StructuredOutput tool lifecycle as provider-executed tool parts.
• JSON-mode tool argument streaming isolated - Ordinary tool calls in JSON-mode requests no longer leak their argument deltas into response text, emit empty-input tool calls, or produce out-of-order tool-input deltas after the tool call; server/MCP tool blocks (server_tool_use / mcp_tool_use) also no longer leak their argument deltas into response text.
• Assistant history tool-result replay - Replayed assistant history now round-trips tool results correctly under the v7 message/content model instead of losing the result context.

... (truncated)

Commits

• 0944266 chore: bump Agent SDK 0.3.232 and AI SDK deps (v4.1.1) (#149)
• 4e21cd6 fix(ci): skip Claude review for Dependabot-triggered runs (#146)
• 8e0a417 fix(ci): repair invalid secrets gate in Claude Code Review workflow (#145)
• 8fad709 fix(ci): file one canary drift issue per run instead of per matrix leg (#144)
• b677227 feat: bump Claude Agent SDK to 0.3.226 and map resumeDropsTurn (v4.1.0) (#143)
• 0bae2dd fix: surface captured stderr in error messages and classification (#137)
• 836895e feat!: adopt AI SDK v7 (LanguageModelV4) (#134)
• e294bc5 fix: fail canary with a named error on collapsed SDKMessage types (v3.5.1) (#...
• See full diff in compare view

Updates hono from 4.12.32 to 4.13.3

Release notes

Sourced from hono's releases.

v4.13.3

What's Changed

• fix(client): prevent URL corruption when replaceUrlParam contains $ replacement tokens in honojs/hono#5227
• fix(etag): copy pending stream bytes in honojs/hono#5239
• fix(etag): avoid skipping headers when filtering 304 response headers in honojs/hono#5234
• fix(cors): append Origin to Vary header on OPTIONS preflight in honojs/hono#5235
• docs(context): add custom headers append option example to Context JSDoc in honojs/hono#5248
• fix(trie-router): match suffix wildcard routes in honojs/hono#5236
• fix(pattern-router/linear-router): prevent prefix overmatch on wildcard routes in honojs/hono#5252
• fix(csrf): exempt OPTIONS request from CSRF validation in honojs/hono#5250
• fix(utils/ipaddr): avoid truncation on embedded IPv4 addresses in expand IPv6 in honojs/hono#5247
• feat(pretty-json): support structured JSON content-types (+json) in honojs/hono#5226

Full Changelog: honojs/hono@v4.13.2...v4.13.3

v4.13.2

What's Changed

• fix(secure-headers): output standard empty parentheses () instead of none for disabled Permissions-Policy directives in honojs/hono#5197
• fix(jsx): render async children of document metadata tags instead of [object Promise] in honojs/hono#5204
• fix(etag): resolve incorrect incremental hashing for chunked responses in honojs/hono#5199
• fix(client): serialize multiple cookies correctly in honojs/hono#5202
• fix(etag): stabilize digest across stream chunks in honojs/hono#5205
• fix(url): strip trailing question mark correctly for optional params with regex quantifiers in honojs/hono#5209
• perf(cors): pre-join static array header options during initialization in honojs/hono#5210
• fix(client): send falsy JSON bodies in honojs/hono#5215
• feat(secure-headers): add missing W3C Permissions-Policy directives in honojs/hono#5214

Full Changelog: honojs/hono@v4.13.1...v4.13.2

v4.13.1

What's Changed

• fix(trie-router): count every slash a pattern consumes by @​Jaybhade in honojs/hono#5189
• fix(utils/stream): re-acquire writer lock when pipe() throws by @​Sriharsha-dev369 in honojs/hono#4988
• fix(etag): skip unsafe methods or error responses on non-* case by @​na-trium-144 in honojs/hono#5196

New Contributors

• @​Jaybhade made their first contribution in honojs/hono#5189
• @​Sriharsha-dev369 made their first contribution in honojs/hono#4988

Full Changelog: honojs/hono@v4.13.0...v4.13.1

v4.13.0

Hono v4.13.0 is now available!

The highlight of this release is performance: a batch of low-level optimizations makes the core request/response path significantly faster — up to 1.25x on common routes in our benchmark. This release also adds first-class support for the HTTP QUERY method, defined in RFC 10008, a new Method Not Allowed middleware, and more.

Performance improvements

This release includes a series of small optimizations: skipping unnecessary Headers allocations, replacing regex tests with indexOf, allocating internal state lazily, and more.

... (truncated)

Commits

• 0293343 4.13.3
• 5ad469a feat(pretty-json): support structured JSON content-types (+json) (#5226)
• c91ec9b fix(utils/ipaddr): avoid truncation on embedded IPv4 addresses in expandIPv6 ...
• eea9735 fix(csrf): exempt OPTIONS request from CSRF validation (#5250)
• a194628 fix(pattern-router/linear-router): prevent prefix overmatch on wildcard route...
• 63bbcf5 fix(trie-router): match suffix wildcard routes (#5236)
• ef0739d docs(context): add custom headers append option example to Context JSDoc (#5248)
• 8bf03c3 fix(cors): append Origin to Vary header on OPTIONS preflight (#5235)
• 546eca0 fix(etag): avoid skipping headers when filtering 304 response headers (#5234)
• 7195c24 fix(etag): copy pending stream bytes (#5239)
• Additional commits viewable in compare view

Updates next-intl from 4.13.4 to 4.13.7

Release notes

Sourced from next-intl's releases.

v4.13.7

4.13.7 (2026-08-17)

Bug Fixes

• Pin @swc/core to a range that is compatible with the extractor plugin (#2389) (a37d8aa) – by @​amannn

v4.13.6

4.13.6 (2026-08-10)

Bug Fixes

• Deprecate requestLocale param of getRequestConfig (#2380) (ae770af) – by @​amannn

See the blog post on next/root-params.

v4.13.5

4.13.5 (2026-08-04)

Bug Fixes

• Deprecate setRequestLocale and add blog post on next/root-params (#1632) – by @​amannn

Changelog

Sourced from next-intl's changelog.

4.13.7 (2026-08-17)

Bug Fixes

• Pin @swc/core to a range that is compatible with the extractor plugin (#2389) (a37d8aa) – by @​amannn

4.13.6 (2026-08-10)

Bug Fixes

• Deprecate requestLocale param of getRequestConfig (#2380) (ae770af) – by @​amannn

4.13.5 (2026-08-04)

Bug Fixes

• Deprecate setRequestLocale and add blog post on next/root-params (#1632) (1446d0d) – by @​amannn

Commits

• 4e5d46b v4.13.7
• a37d8aa fix: Pin @swc/core to a range that is compatible with the extractor plugin ...
• 41e027b v4.13.6
• ae770af fix: Deprecate requestLocale param of getRequestConfig (#2380)
• 729233f docs: Use "CLI" as label for eloqnt links (#2378)
• caab5da docs: Mention planned Route Handler and Server Action support for root params...
• 4a98b12 docs: Hide precompilation blog post from sidebar navigation (#2374)
• 0b25236 docs: Link to Next.js bind docs in root params blog post (#2375)
• 44f29f5 docs: Upgrade examples and e2e apps to Next.js 16.3 (#2354)
• 904d5e2 docs: Fix typo in blog post
• Additional commits viewable in compare view

Updates property-information from 7.1.0 to 7.2.0

Release notes

Sourced from property-information's releases.

7.2.0

Add

• cb86e8b Add new properties

Fix

• 992bfbc Add number for colSpan by @​johanrd in wooorm/property-information#26

Full Changelog: wooorm/property-information@7.1.0...7.2.0

Commits

• f6f547b 7.2.0
• 992bfbc Add number for colSpan
• 0839151 Update dev-dependencies
• cb86e8b Add new properties
• 83ece09 Update actions
• 930b589 Add missing JSDoc description
• a2822cf Update dev-dependencies
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.