Skip to content

build(deps): bump the production-dependencies group across 1 directory with 9 updates - #115

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-bfdf285210
Closed

build(deps): bump the production-dependencies group across 1 directory with 9 updates#115
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-bfdf285210

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 7, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the production-dependencies group with 9 updates in the / directory:

Package From To
@hono/node-server 2.0.12 2.1.1
@opencode-ai/sdk 1.17.11 1.18.27
@pierre/diffs 1.2.10 1.4.0
ai 6.0.206 7.0.92
ai-sdk-provider-claude-code 3.5.0 4.2.0
hono 4.12.32 4.13.5
next-intl 4.13.4 4.14.2
property-information 7.1.0 7.2.0
zod 4.4.3 4.5.4

Updates @hono/node-server from 2.0.12 to 2.1.1

Release notes

Sourced from @​hono/node-server's releases.

v2.1.1

What's Changed

Full Changelog: honojs/node-server@v2.1.0...v2.1.1

v2.1.0

What's Changed

New Contributors

Full Changelog: honojs/node-server@v2.0.12...v2.1.0

Commits

Updates @opencode-ai/sdk from 1.17.11 to 1.18.27

Commits

Updates @pierre/diffs from 1.2.10 to 1.4.0

Updates ai from 6.0.206 to 7.0.92

Release notes

Sourced from ai's releases.

ai@7.0.92

Patch Changes

  • a51cc94: fix(ai): preserve provider metadata from empty smooth stream deltas
  • d1904d3: fix(ai): surface fallback errors for empty HTTP response bodies
  • 84e5a79: fix(ai): skip smoothStream delays while the document is hidden
  • a8e8ad0: fix(ai): expose call ID and abort reason in streamText onAbort callbacks
  • Updated dependencies [a7e324b]
    • @​ai-sdk/gateway@​4.0.74

ai@6.0.277

Patch Changes

  • Updated dependencies [8839d87]
    • @​ai-sdk/gateway@​3.0.189

ai@6.0.276

Patch Changes

  • 760ac87: fix(ai): preserve provider metadata from empty smooth stream deltas
  • 5e43974: fix(ai): skip smoothStream delays while the document is hidden
  • Updated dependencies [13507cb]
  • Updated dependencies [7782fec]
  • Updated dependencies [978e084]
  • Updated dependencies [d0c255c]
    • @​ai-sdk/gateway@​3.0.188
Changelog

Sourced from ai's changelog.

7.0.92

Patch Changes

  • a51cc94: fix(ai): preserve provider metadata from empty smooth stream deltas
  • d1904d3: fix(ai): surface fallback errors for empty HTTP response bodies
  • 84e5a79: fix(ai): skip smoothStream delays while the document is hidden
  • a8e8ad0: fix(ai): expose call ID and abort reason in streamText onAbort callbacks
  • Updated dependencies [a7e324b]
    • @​ai-sdk/gateway@​4.0.74

7.0.91

Patch Changes

  • 802af1e: Add configurable recovery for provider errors received after streamText response streaming begins. Explicitly configuring streamRetries enables isolated retry attempts, including one bounded callback-directed recovery through StreamTextOnErrorRetryCallback with streamRetries: 0; recovered results and metadata reflect only the successful attempt, while the existing StreamTextOnErrorCallback contract and logging-only observer behavior remain compatible.
  • Updated dependencies [5484f27]
  • Updated dependencies [36eb7ee]
  • Updated dependencies [622fa7f]
    • @​ai-sdk/gateway@​4.0.73

7.0.90

Patch Changes

  • Updated dependencies [4d25a08]
  • Updated dependencies [6bcc0f8]
    • @​ai-sdk/gateway@​4.0.72
    • @​ai-sdk/provider-utils@​5.0.36

7.0.89

Patch Changes

  • 5190b67: feat(provider): extend the FilesV4 interface with optional getFileMetadata, downloadFile (streaming), and deleteFile operations, plus abortSignal/headers call options and a { type: 'stream' } upload data variant; upload results now expose byteSize, createdAt, and expiresAt (also surfaced by the core uploadFile() helper, which now forwards abortSignal/headers); add postMultipartStreamToApi (streaming multipart uploads with deterministic part ordering and failure-path stream teardown), deleteFromApi, and createBinaryStreamResponseHandler to provider-utils
  • Updated dependencies [5190b67]
    • @​ai-sdk/provider@​4.0.10
    • @​ai-sdk/provider-utils@​5.0.35
    • @​ai-sdk/gateway@​4.0.71

7.0.88

Patch Changes

  • 8b6b756: fix(ai): prevent generateText from accepting responses that violate required tool choices
  • e07b577: feat: add tool calling support to batch

7.0.87

Patch Changes

... (truncated)

Commits
  • 34f3b79 Version Packages (#20250)
  • a8e8ad0 fix: align streamText onAbort callback types and documentation with runtime a...
  • 84e5a79 fix: prevent smoothStream from stalling streams in background tabs (#20219)
  • a51cc94 fix: preserve provider metadata from empty smoothStream deltas without leakin...
  • d1904d3 fix: surface fallback error messages for empty HTTP error responses (#20112)
  • 79b4ab8 Version Packages (#20192)
  • 802af1e feat: add configurable, attempt-isolated recovery for mid-stream provider fai...
  • 8a09c78 Version Packages (#20144)
  • 3bd0fcf Version Packages (#20126)
  • 5190b67 feat(provider): add optional getFileMetadata/downloadFile/deleteFile to Files...
  • Additional commits viewable in compare view

Updates ai-sdk-provider-claude-code from 3.5.0 to 4.2.0

Release notes

Sourced from ai-sdk-provider-claude-code's releases.

v4.2.0

Added

  • errorKind on ClaudeCodeErrorMetadata — the structured SDK assistant error kind (e.g. 'account_on_hold', 'billing_error', 'overloaded') is now preserved on every mapped error path. Set only when the SDK delivers the kind structurally; heuristic (message/stderr text) classifications never fabricate one. Typed as open string so future SDK kinds flow through without a type-level break. (#155, #156)
  • Actionable account_on_hold / billing_error mapping — account-state failures now map to non-retryable APICallErrors with Anthropic Console guidance, classified before the auth-substring heuristics so they can never be misrouted to re-authentication (LoadAPIKeyError). (#155, #156)
  • isAccountStateError() helper — detects account-state failures structurally, never from message text; account-state errors never satisfy isAuthenticationError(), even when the metadata carries exit code 401. (#155, #156)
  • SDKAssistantMessageError type re-export — the SDK's known-value union of structured assistant error kinds, for consumers narrowing errorKind. (#156)
  • perTaskStopAffordance setting — maps the Agent SDK's new capability assertion that the host renders per-task stop controls wired to stopTask(), so an interrupt on a live open-input query spares running background tasks. (#153, #154)
  • Completed hook type re-exports — PreModelSwitch/PostModelSwitch hook types (new in SDK 0.3.251) plus the previously missing DirectoryAddedHookInput, restoring the full HookInput union guarantee. (#154)

Changed

  • Claude Agent SDK pinned at 0.3.251 (from 0.3.232) — resolves the weekly canary's Options drift guard failure; perTaskStopAffordance was the only new Options key, and typecheck plus the full unit suite pass against the new pin. Inherited runtime behavior changes are noted in the CHANGELOG. (#153, #154)

Full changelog: ben-vargas/ai-sdk-provider-claude-code@v4.1.1...v4.2.0

v4.1.1

Changed

  • Claude Agent SDK pinned at 0.3.232 (from 0.3.226) — bumps the exact @anthropic-ai/claude-agent-sdk pin to current npm latest. keyof Options is unchanged (64 keys; last new key remains resumeDropsTurn). Do not use 0.3.233 / dist-tag next.
  • AI SDK dependency pins refreshed — @ai-sdk/provider ^4.0.2 → ^4.0.7, @ai-sdk/provider-utils ^5.0.5 → ^5.0.27, and ai (devDependency) ^7.0.16 → ^7.0.66. Hygiene/CLI-parity only; no LanguageModelV4 or ProviderV4 contract change.

Full changelog: ben-vargas/ai-sdk-provider-claude-code@v4.1.0...v4.1.1

v4.1.0

Added

  • resumeDropsTurn setting — maps the Claude Agent SDK's new resumeDropsTurn option: when resuming a session, drop the turn containing the given chain-entry UUID from the restored context. Companion to resumeSessionAt for forking a resumed session at a specific point; documented in the README options table and docs/sessions.md. (#142)

Changed

  • Claude Agent SDK pinned at 0.3.226 (from 0.3.205) — resolves the weekly canary's Options drift guard failure; resumeDropsTurn was the only new Options key, and typecheck plus the full unit suite pass against the new pin. The dependency stays an exact pin, gated by the canary. (#142, #143)

Full changelog: ben-vargas/ai-sdk-provider-claude-code@v4.0.1...v4.1.0

v4.0.1

Fixed

The Claude Agent SDK's process-exit errors are bare (Claude Code process exited with code <N> — no stderr, no exit code), so when the CLI failed to start or crashed, the real cause sat unseen in error.data.stderr while the visible message stayed generic. (#136)

  • Error messages now include the captured stderr. Mapped errors append a single-line excerpt as … | stderr (tail): … (last 5 non-empty lines, ANSI-stripped, 600-character cap), exactly once. The full capture — now bounded at 4000 characters — remains available via getErrorMetadata(error)?.stderr on every mapped path, including timeout errors and stderr-classified authentication failures.
  • Classification now reads stderr. Authentication failures whose only evidence is on stderr (e.g. Not authenticated from a hard process exit) now produce a proper LoadAPIKeyError with the login instruction visible, and Request timed out/ETIMEDOUT on stderr classifies as a retryable timeout. Both use deliberately high-precision patterns so incidental stderr noise (a third-party 401 Unauthorized, debug chatter) can't misclassify an unrelated crash.
  • Bounded retention. Collected stderr is capped at 4000 characters at the collectors and before any scanning of SDK-provided values, preventing unbounded memory growth on long noisy runs.
  • The README gains an Error Diagnostics section documenting all of the above.

Same defect class as ai-sdk-provider-codex-cli#39, fixed there in v2.1.1/v1.3.1.

Full changelog: ben-vargas/ai-sdk-provider-claude-code@v4.0.0...v4.0.1

v4.0.0

... (truncated)

Changelog

Sourced from ai-sdk-provider-claude-code's changelog.

[4.2.0] - 2026-08-31

Added

  • errorKind on ClaudeCodeErrorMetadata (#155) - The structured SDK assistant error kind (SDKAssistantMessageError, e.g. 'account_on_hold', 'billing_error', 'overloaded') is now preserved on every mapped error path: authentication LoadAPIKeyErrors, timeouts, retryable overload/rate-limit errors, model-not-found, and the generic fallback. The field is set only when the SDK delivered the kind structurally — heuristic (message/stderr text) classifications never fabricate one. Typed as open string so future SDK kinds flow through without a type-level break.
  • isAccountStateError() helper (#155) - Returns true exactly when the metadata carries the structured kind 'account_on_hold' or 'billing_error' on an APICallError. These are account-state problems resolved in the Anthropic Console, not credential problems — they are APICallError, never LoadAPIKeyError, and never satisfy isAuthenticationError().
  • SDKAssistantMessageError type re-export - The SDK's current known-value union of structured assistant error kinds, for consumers narrowing errorKind.
  • Actionable account_on_hold / billing_error mapping (#155) - Structurally reported account-state kinds now map to non-retryable APICallErrors with console guidance, classified before the auth-substring heuristics so account-state error text mentioning "unauthorized" cannot be misrouted to re-authentication.
  • perTaskStopAffordance setting (#153) - Maps the Agent SDK's new perTaskStopAffordance option: a capability assertion that the host app renders per-task stop controls wired to stopTask(), so an interrupt on a live open-input query spares running background tasks and only aborts the current turn. Unset means the SDK's fail-closed default (interrupt kills background tasks); one-shot (closed-input) requests kill held-back tasks on interrupt regardless.
  • Completed hook type re-exports - Re-exports PreModelSwitchHookInput, PostModelSwitchHookInput, PreModelSwitchHookSpecificOutput, and PostModelSwitchHookSpecificOutput (new in SDK 0.3.251) plus the previously missing DirectoryAddedHookInput, restoring the "every member of the SDK HookInput union" guarantee, with a compile-time entry-point check.

Changed

  • Account-state error messages - Structurally reported account_on_hold / billing_error failures now carry actionable Anthropic Console guidance appended to the original SDK message (previously generic fall-through text). Retryability and error classes for all previously mapped kinds are unchanged.
  • Claude Agent SDK pinned at 0.3.251 - Bumps the exact @anthropic-ai/claude-agent-sdk pin from 0.3.232, resolving the weekly canary's Options drift guard failure (#153). perTaskStopAffordance was the only new Options key (64 → 65); typecheck and the unit suite pass against the new pin.

Inherited upstream behavior changes

  • Because this bump replaces the bundled Agent SDK runtime, 0.3.232 → 0.3.251 behavior changes are inherited. Notably, an AgentDefinition that omits model now uses a configured default subagent model before falling back to the parent model. New hook events PreModelSwitch/PostModelSwitch and the account_on_hold assistant error kind (mapped to an actionable non-retryable error in this release, together with billing_error — see Added above) also arrive with this runtime.

[4.1.1] - 2026-08-14

Changed

  • Claude Agent SDK pinned at 0.3.232 - Bumps the exact @anthropic-ai/claude-agent-sdk pin from 0.3.226 to current npm latest. keyof Options is unchanged (64 keys; last new key remains resumeDropsTurn). No video content block. Do not use 0.3.233 / dist-tag next.
  • AI SDK dependency pins refreshed - @ai-sdk/provider ^4.0.2 → ^4.0.7, @ai-sdk/provider-utils ^5.0.5 → ^5.0.27, and ai (devDependency) ^7.0.16 → ^7.0.66. Hygiene/CLI-parity only; no LanguageModelV4 or ProviderV4 contract change and no video input.

[4.1.0] - 2026-08-10

Added

  • resumeDropsTurn setting (#142) - Maps the Agent SDK's new resumeDropsTurn option: when resuming a session, drop the turn containing the given chain-entry UUID from the restored context (companion to resumeSessionAt for forking at a specific point).

Changed

  • Claude Agent SDK pinned at 0.3.226 - Bumps the exact @anthropic-ai/claude-agent-sdk pin from 0.3.205, resolving the weekly canary's Options drift guard failure (#142). resumeDropsTurn was the only new Options key; typecheck and the unit suite pass against the new pin.

[4.0.1] - 2026-07-10

Fixed

  • Visible and bounded subprocess diagnostics (#136) - Error messages now carry a trimmed stderr tail, authentication and timeout classification also inspect captured stderr using separate high-precision login/API-key and timeout phrases to avoid incidental matches, and retained stderr stored in mapped error metadata, including timeout errors, is capped at 4000 characters.

[4.0.0] - 2026-07-10

Added

  • Claude Agent SDK event callbacks - Adds first-class onSdkMessage, onTaskEvent, onHookEvent, onMcpStatusChange, onElicitation, and agent settings so hosts can observe raw SDK messages, task/subagent lifecycle, hook lifecycle, the request's initial MCP server status snapshot, MCP elicitation, and named main-thread agents without reaching through sdkOptions.
  • Query controller API - Exports createClaudeCodeQueryController(query) and the ClaudeCodeQueryController type, and adds onQueryControllerCreated for safe live-query controls (interrupt, setPermissionMode, setMcpPermissionModeOverride, setModel, setMaxThinkingTokens, applyFlagSettings, mcpServerStatus, reconnectMcpServer, toggleMcpServer, setMcpServers, getContextUsage, rewindFiles, stopTask, backgroundTasks, and optional streamInput) while keeping the raw SDK Query reachable via controller.rawQuery. Control-protocol calls require the SDK Query to still be live, and most require SDK streaming input/output.
  • Expanded provider metadata - Adds taskEvents, hookEvents, initial MCP server-status snapshots in mcpServers, and enriched permissionDenials (agentId, decisionReasonType, and raw when available) under providerMetadata['claude-code'].

... (truncated)

Commits
  • ac40fa6 feat: map account_on_hold/billing_error to structured, actionable errors (pre...
  • c52dba3 fix(ci): remove --max-turns caps; use job timeout-minutes as overrun backstop...
  • e225ecb fix(ci): raise Claude Code Review --max-turns 20 -> 50 (#157)
  • 8ae70a7 feat: bump Claude Agent SDK to 0.3.251 and map perTaskStopAffordance (v4.2.0)...
  • 0944266 chore: bump Agent SDK 0.3.232 and AI SDK deps (v4.1.1) (#149)
  • 4e21cd6 fix(ci): skip Claude review for Dependabot-triggered runs (#146)
  • 8e0a417 fix(ci): repair invalid secrets gate in Claude Code Review workflow (#145)
  • 8fad709 fix(ci): file one canary drift issue per run instead of per matrix leg (#144)
  • b677227 feat: bump Claude Agent SDK to 0.3.226 and map resumeDropsTurn (v4.1.0) (#143)
  • 0bae2dd fix: surface captured stderr in error messages and classification (#137)
  • Additional commits viewable in compare view

Updates hono from 4.12.32 to 4.13.5

Release notes

Sourced from hono's releases.

v4.13.5

Security fixes

This release includes fixes for the following security issues:

Query parser reads parameters after the URL fragment, causing cache-key and proxy interpretation differentials

Affects: Cache Middleware and applications behind a proxy, WAF, or logging layer that inspects query strings. Fixes query parsing that did not stop at the URL fragment, so a ? after a # was treated as the start of a query string and the application could read parameters that the other component never saw. GHSA-crvj-82cr-hjcx

Incomplete fix for CVE-2026-39408: toSSG() still writes files outside the output directory

Affects: toSSG() for Static Site Generation. Fixes a path normalization gap where consecutive parent-directory segments in ssgParams values were not fully collapsed, bypassing the containment check added in 4.12.12. GHSA-gqvv-2mrq-wpjv

Unbounded dot-notation nesting in parseBody() can cause memory exhaustion

Affects: parseBody() when dot-notation parsing is enabled. Fixes unbounded expansion of dot-separated field names, where a small request body could allocate a disproportionately large object graph and concurrent requests could exhaust the heap. GHSA-g6gw-c38x-mqfc

Users who use Cache Middleware, deploy behind a proxy or WAF that inspects query strings, use Static Site Generation, or use parseBody({ dot: true }) are strongly encouraged to upgrade to this version.

v4.13.4

What's Changed

  • fix(request): handle params on unmatched requests in honojs/hono#5268
  • fix(jsx/dom): execute previous ref cleanup when ref prop changes on re-render in honojs/hono#5264
  • fix(reg-exp-router): associate wildcard middleware with matching routes in honojs/hono#5266
  • perf(router): share null object creation in honojs/hono#5267
  • fix(etag): match If-None-Match tags with optional whitespace before the comma in honojs/hono#5222
  • fix(client): skip undefined header and cookie values in honojs/hono#5244
  • fix(client): skip an undefined entry inside a query array in honojs/hono#5272
  • fix(client): skip an undefined entry inside a form array in honojs/hono#5280
  • fix(client): support custom buildSearchParams and filter undefined query in $ws() bin honojs/hono#5256
  • fix(accepts): support wildcard media types and specificity ordering in defaultMatch in honojs/hono#5255
  • fix(client): omit empty query delimiter in honojs/hono#5283
  • fix(request): drop stale content length for cloned FormData in honojs/hono#5282
  • fix(request): serialize cached JSON body in cloneRawRequest in honojs/hono#5288
  • fix(cookie): allow parsing signed cookies with empty string values in honojs/hono#5246
  • fix(utils/stream): do not let abort listeners crash abort() in honojs/hono#5274

Full Changelog: honojs/hono@v4.13.3...v4.13.4

v4.13.3

What's Changed

  • fix(client): prevent URL corruption when replaceUrlParam contains $ replacement tokens in honojs/hono#5227
  • fix(etag): copy pending stream bytes in honojs/hono#5239
  • fix(etag): avoid skipping headers when filtering 304 response headers in honojs/hono#5234
  • fix(cors): append Origin to Vary header on OPTIONS preflight in honojs/hono#5235
  • docs(context): add custom headers append option example to Context JSDoc in honojs/hono#5248
  • fix(trie-router): match suffix wildcard routes in honojs/hono#5236

... (truncated)

Commits
  • 06880c4 4.13.5
  • 531e9c5 Merge commit from fork
  • 3a67f7f Merge commit from fork
  • 9c28d72 Merge commit from fork
  • 017000d 4.13.4
  • 5e5b83d fix(utils/stream): do not let abort listeners crash abort() (#5274)
  • 241ae4c fix(cookie): allow parsing signed cookies with empty string values (#5246)
  • c409d85 fix(request): serialize cached JSON body in cloneRawRequest (#5288)
  • 612b59c fix(request): drop stale content length for cloned FormData (#5282)
  • 73794bd fix(client): omit empty query delimiter (#5283)
  • Additional commits viewable in compare view

Updates next-intl from 4.13.4 to 4.14.2

Release notes

Sourced from next-intl's releases.

v4.14.2

4.14.2 (2026-09-01)

Bug Fixes

v4.14.1

4.14.1 (2026-08-28)

Bug Fixes

v4.14.0

4.14.0 (2026-08-27)

Features

⚠️ If you're using useExtracted and the po format, this requires an update to your messages.

Please see amannn/next-intl#2393 for details and an upgrade prompt.

v4.13.7

4.13.7 (2026-08-17)

Bug Fixes

v4.13.6

4.13.6 (2026-08-10)

Bug Fixes

See the blog post on next/root-params.

v4.13.5

4.13.5 (2026-08-04)

Bug Fixes

Changelog

Sourced from next-intl's changelog.

4.14.2 (2026-09-01)

Bug Fixes

4.14.1 (2026-08-28)

Bug Fixes

4.14.0 (2026-08-27)

Features

4.13.7 (2026-08-17)

Bug Fixes

4.13.6 (2026-08-10)

Bug Fixes

4.13.5 (2026-08-04)

Bug Fixes

Commits

Updates property-information from 7.1.0 to 7.2.0

Release notes

Sourced from property-information's releases.

7.2.0

Add

  • cb86e8b Add new properties

Fix

Full Changelog: wooorm/property-information@7.1.0...7.2.0

Commits

Updates zod from 4.4.3 to 4.5.4

Release notes

Sourced from zod's releases.

v4.5.4

Commits:

  • 84e416fbf4740527bbc8f319634f4e1b065bb42c fix(v4): stop the cycle walk from firing a default factory (#6500)
  • e8e206fa33ac5fe7ce20a2beb12d57b1cb3df653 4.5.4

v4.5.3

Commits:

  • e6b6ab347675cd2bd54b1bdbed16f98c59be82a9 docs(blog): widen the z.compile example to a 20-property schema
  • 87d6464418582bb96fc665a01f852ca6da324ad0 fix(docs): drop the OG description when the title wraps past two lines
  • 99fce394a026823e602b9c30d8d5d9f5f1932ce7 bench(v4): z.compile() against zod-compiler (#6499)
  • e3a695b6bf3f0d591ea682816e3cdaea04b0f967 docs(v4): record the email regex and container output-shape findings under Open
  • 7e24a24288183ce02554f1ded7775d0650a7b7e6 docs(blog): drop the reading time and put a GitHub link in the navbar
  • eab51ff3592b2d11d863f4ee4d5452f31a3de1b6 fix(v4): emit record numeric keys as strings in toJSONSchema (#6497)

v4.5.2

Commits:

  • a354314ac04fdd5484aa62dd5c3a4b553211a0e4 fix(docs): keep blog posts out of the docs collection (#6484)
  • d378c42aff6869f0929058a7923cd775880f5c4c ci: drop canary publishing from the release workflow (#6487)
  • 212b941791e7faae078e17645eb612824fd8f79a fix(v4): let a prototype method getter answer a bare call so vi.spyOn works (#6488)
  • e7576f542a7bc7ef3cc5eeec237714fd0e6b6e98 docs(blog): let the page show through the navbar in dark mode (#6489)
  • fedb06fafe33a66ce0b5c236ad2557e0a5a170fe fix(docs): match the blog TOC hover bar to the 2px active indicator
  • 6c932fcb2eea6eb671710ea058ca9fdc382ada89 chore: bump devcontainer image to Node 24 (#6470)
  • 6635d9dd367a664109de83c021995821f48efa29 docs(blog): soften the "method memoization" attribution
  • 019ae299cc75daa132bf1acf59086a520abf6b85 fix(docs): drop ISR on the docs route so the home page hydrates
  • 652bb438aa4c626c1cd7948c6849c4691239fca7 chore(docs): drop the scroll log from the route-change scroller
  • 571c8e8a3d73b4305f4abfdd6977773cc12f2bf5 fix(docs): render blog tabs with the stock fumadocs tab card
  • 9a193aa24b4efa3b315b91d4c56c8bc385b8513f 4.5.2

v4.5.1

Commits:

  • 2e862dbf89da2835e5206a8fd3d3be61afe3cf7f ci: gate the GitHub release and JSR publish on the version being live on npm
  • 8e03380510db36fa6fda979fc78a375fdea8021c 4.5.1

v4.5.0

Zod 4.5 is now available.

npm install zod@latest

At a glance:

@dependabot
build(deps): bump the production-dependencies group across 1 director…
7a2fe57 
…y with 9 updates

Bumps the production-dependencies group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@hono/node-server](https://github.com/honojs/node-server) | `2.0.12` | `2.1.1` |
| [@opencode-ai/sdk](https://github.com/sst/opencode-sdk-js) | `1.17.11` | `1.18.27` |
| @pierre/diffs | `1.2.10` | `1.4.0` |
| [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `6.0.206` | `7.0.92` |
| [ai-sdk-provider-claude-code](https://github.com/ben-vargas/ai-sdk-provider-claude-code) | `3.5.0` | `4.2.0` |
| [hono](https://github.com/honojs/hono) | `4.12.32` | `4.13.5` |
| [next-intl](https://github.com/amannn/next-intl) | `4.13.4` | `4.14.2` |
| [property-information](https://github.com/wooorm/property-information) | `7.1.0` | `7.2.0` |
| [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.5.4` |



Updates `@hono/node-server` from 2.0.12 to 2.1.1
- [Release notes](https://github.com/honojs/node-server/releases)
- [Commits](honojs/node-server@v2.0.12...v2.1.1)

Updates `@opencode-ai/sdk` from 1.17.11 to 1.18.27
- [Release notes](https://github.com/sst/opencode-sdk-js/releases)
- [Changelog](https://github.com/anomalyco/opencode-sdk-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sst/opencode-sdk-js/commits)

Updates `@pierre/diffs` from 1.2.10 to 1.4.0

Updates `ai` from 6.0.206 to 7.0.92
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@7.0.92/packages/ai)

Updates `ai-sdk-provider-claude-code` from 3.5.0 to 4.2.0
- [Release notes](https://github.com/ben-vargas/ai-sdk-provider-claude-code/releases)
- [Changelog](https://github.com/ben-vargas/ai-sdk-provider-claude-code/blob/main/CHANGELOG.md)
- [Commits](ben-vargas/ai-sdk-provider-claude-code@v3.5.0...v4.2.0)

Updates `hono` from 4.12.32 to 4.13.5
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.12.32...v4.13.5)

Updates `next-intl` from 4.13.4 to 4.14.2
- [Release notes](https://github.com/amannn/next-intl/releases)
- [Changelog](https://github.com/amannn/next-intl/blob/main/CHANGELOG.md)
- [Commits](amannn/next-intl@v4.13.4...v4.14.2)

Updates `property-information` from 7.1.0 to 7.2.0
- [Release notes](https://github.com/wooorm/property-information/releases)
- [Commits](wooorm/property-information@7.1.0...7.2.0)

Updates `zod` from 4.4.3 to 4.5.4
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.4.3...v4.5.4)

---
updated-dependencies:
- dependency-name: "@hono/node-server"
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@opencode-ai/sdk"
  dependency-version: 1.18.27
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@pierre/diffs"
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: ai
  dependency-version: 7.0.92
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: ai-sdk-provider-claude-code
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: hono
  dependency-version: 4.13.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: next-intl
  dependency-version: 4.14.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: property-information
  dependency-version: 7.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: zod
  dependency-version: 4.5.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 7, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 14, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are no longer updatable, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 14, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/production-dependencies-bfdf285210 branch September 14, 2026 14:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants