Skip to content

Bump the production-dependencies group across 1 directory with 8 updates - #137

Merged
badcuban merged 2 commits into
mainfrom
dependabot/npm_and_yarn/production-dependencies-bf8c741be3
Aug 10, 2026
Merged

Bump the production-dependencies group across 1 directory with 8 updates#137
badcuban merged 2 commits into
mainfrom
dependabot/npm_and_yarn/production-dependencies-bf8c741be3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 8 updates in the / directory:

Package From To
astro 7.1.6 7.2.0
@opencode-ai/sdk 1.18.11 1.18.15
@base-ui/react 1.6.0 1.7.0
@tanstack/react-pacer 0.22.1 0.23.0
@tanstack/react-router 1.170.18 1.170.22
lucide-react 1.28.0 1.30.0
@anthropic-ai/claude-agent-sdk 0.3.221 0.3.224
@github/copilot-sdk 1.0.8 1.0.9

Updates astro from 7.1.6 to 7.2.0

Release notes

Sourced from astro's releases.

astro@7.2.0

Minor Changes

  • #17174 0224a3a Thanks @​matthewp! - Adds the astro preview --background flag to start preview servers as background processes.

    This makes preview servers easier to manage from scripts and AI coding agents because the command returns after the server is ready instead of keeping the terminal attached to the long-running process.

    astro preview --background

    When a preview server is running in the background, you can inspect or stop it with new astro preview subcommands:

    astro preview status
astro preview logs
astro preview logs --follow
astro preview stop

    If Astro detects that astro preview is being run by an AI coding agent, background mode is enabled automatically. This matches the existing behavior for astro dev, allowing agents to continue working after the preview server starts while still receiving the server URL and process ID.

    To opt out of automatic background mode for preview servers, set ASTRO_PREVIEW_BACKGROUND=0 before running astro preview.

  • #17532 7f94895 Thanks @​florian-lefebvre! - Adds support for paths relative to your project root in logger.entrypoint

    Previously, pointing logger.entrypoint at a custom log handler living in your own project required building an absolute URL. You can now write the path directly:

    // astro.config.mjs
import { defineConfig } from 'astro/config';
export default defineConfig({
logger: {

entrypoint: new URL('./src/logger.js', import.meta.url),


entrypoint: './src/logger.js',
},
});

Paths starting with ./ or ../ are resolved against your project root. Package specifiers such as @org/astro-logger, absolute paths, and URL entrypoints keep working as before.

  • #17084 961bbe5 Thanks @​matthewp! - Widens the AstroPrerenderer render() return type so prerenderers can report incremental-build metadata

    A prerenderer's render() may now resolve to either a Response (as before) or a PrerenderResult object that pairs the response with the content entries and optimized-image transforms the page resolved. This lets prerenderers that render out of process (for example, in an adapter's runtime like workerd) report those dependencies back to the build, so incremental static builds can track and replay them for skipped pages.

    import type { AstroPrerenderer, PrerenderResult } from 'astro';
const prerenderer: AstroPrerenderer = {

    • ... (truncated)

    Changelog

    Sourced from astro's changelog.

    7.2.0

    Minor Changes

    • #17174 0224a3a Thanks @​matthewp! - Adds the astro preview --background flag to start preview servers as background processes.

      This makes preview servers easier to manage from scripts and AI coding agents because the command returns after the server is ready instead of keeping the terminal attached to the long-running process.

      astro preview --background

      When a preview server is running in the background, you can inspect or stop it with new astro preview subcommands:

      astro preview status
astro preview logs
astro preview logs --follow
astro preview stop

      If Astro detects that astro preview is being run by an AI coding agent, background mode is enabled automatically. This matches the existing behavior for astro dev, allowing agents to continue working after the preview server starts while still receiving the server URL and process ID.

      To opt out of automatic background mode for preview servers, set ASTRO_PREVIEW_BACKGROUND=0 before running astro preview.

    • #17532 7f94895 Thanks @​florian-lefebvre! - Adds support for paths relative to your project root in logger.entrypoint

      Previously, pointing logger.entrypoint at a custom log handler living in your own project required building an absolute URL. You can now write the path directly:

      // astro.config.mjs
import { defineConfig } from 'astro/config';
export default defineConfig({
logger: {

entrypoint: new URL('./src/logger.js', import.meta.url),


entrypoint: './src/logger.js',
},
});

    Paths starting with ./ or ../ are resolved against your project root. Package specifiers such as @org/astro-logger, absolute paths, and URL entrypoints keep working as before.

  • #17084 961bbe5 Thanks @​matthewp! - Widens the AstroPrerenderer render() return type so prerenderers can report incremental-build metadata

    A prerenderer's render() may now resolve to either a Response (as before) or a PrerenderResult object that pairs the response with the content entries and optimized-image transforms the page resolved. This lets prerenderers that render out of process (for example, in an adapter's runtime like workerd) report those dependencies back to the build, so incremental static builds can track and replay them for skipped pages.

    import type { AstroPrerenderer, PrerenderResult } from 'astro';

    • ... (truncated)

    Commits

    Updates @opencode-ai/sdk from 1.18.11 to 1.18.15

    Commits

    Updates @base-ui/react from 1.6.0 to 1.7.0

    Release notes

    Sourced from @​base-ui/react's releases.

    v1.7.0

    General changes

    Accordion

    Alert Dialog

    • Prevent <AlertDialog.Root> from reopening after remounting with a reused handle (#5109) by @​michaldudak

    Autocomplete

    Avatar

    Button

    Checkbox

    ... (truncated)

    Changelog

    Sourced from @​base-ui/react's changelog.

    v1.7.0

    Aug 4, 2026

    General changes

    Accordion

    Alert Dialog

    • Prevent <AlertDialog.Root> from reopening after remounting with a reused handle (#5109) by @​michaldudak

    Autocomplete

    Avatar

    Button

    ... (truncated)

    Commits
    • 254f474 [release] v1.7.0 (#5404)
    • 9222cda [meter] Format clamped values (#5409)
    • becc19a [combobox][autocomplete][select] Fix listbox separator semantics (#5399)
    • 7cc0eef [drawer] Fix click-only outside dismissal after swipe (#5392)
    • 1a2ca3c [all components] Fix canceled exit unmount (#5401)
    • 166e8ac [popups] Fix quadratic dev-mode trigger registration check (#5400)
    • 071e892 [all components] Avoid unused popup handle attachments (#5394)
    • cbc87d1 [select] Stabilize scroll arrow cleanup test (#5402)
    • 3b5715c [all components] Fix popup handle lifecycle regressions (#5387)
    • 54cfcc1 [typescript] Preserve published internals types (#5386)
    • Additional commits viewable in compare view

    Updates @tanstack/react-pacer from 0.22.1 to 0.23.0

    Release notes

    Sourced from @​tanstack/react-pacer's releases.

    @​tanstack/react-pacer@​0.23.0

    Minor Changes

    • Update package dependencies and migrate the devtools theme integration to the latest API. (#245)

    Patch Changes

    • fix: async utility return types no longer double-wrap promises. maybeExecute, flush, lastResult state, and onSuccess callbacks on AsyncDebouncer, AsyncThrottler, and AsyncRateLimiter (and the asyncDebounce/asyncThrottle/asyncRateLimit helpers) now use Awaited<ReturnType<TFn>> instead of ReturnType<TFn>. The useAsyncDebouncedCallback, useAsyncThrottledCallback, and useAsyncRateLimitedCallback hooks in react-pacer and preact-pacer now return Promise<Awaited<ReturnType<TFn>> | undefined>, matching the angular adapter and the actual runtime behavior (fixes #156) (#246)

    • Updated dependencies [dc47121, dc47121, dc47121, bd96217, dc47121]:

      • @​tanstack/pacer@​0.22.0
    Changelog

    Sourced from @​tanstack/react-pacer's changelog.

    0.23.0

    Minor Changes

    • Update package dependencies and migrate the devtools theme integration to the latest API. (#245)

    Patch Changes

    • fix: async utility return types no longer double-wrap promises. maybeExecute, flush, lastResult state, and onSuccess callbacks on AsyncDebouncer, AsyncThrottler, and AsyncRateLimiter (and the asyncDebounce/asyncThrottle/asyncRateLimit helpers) now use Awaited<ReturnType<TFn>> instead of ReturnType<TFn>. The useAsyncDebouncedCallback, useAsyncThrottledCallback, and useAsyncRateLimitedCallback hooks in react-pacer and preact-pacer now return Promise<Awaited<ReturnType<TFn>> | undefined>, matching the angular adapter and the actual runtime behavior (fixes #156) (#246)

    • Updated dependencies [dc47121, dc47121, dc47121, bd96217, dc47121]:

      • @​tanstack/pacer@​0.22.0
    Commits
    • c758955 ci: Version Packages (#248)
    • dc47121 fix: falsy queue items, AsyncRetryer memory leak, wait bypass, and Awaited re...
    • bd96217 fix: update deps and devtools theming (#245)
    • d497960 docs: use the dynamic README header endpoint (#241)
    • See full diff in compare view

    Updates @tanstack/react-router from 1.170.18 to 1.170.22

    Release notes

    Sourced from @​tanstack/react-router's releases.

    @​tanstack/react-router@​1.170.22

    Patch Changes

    • #7992 ea3a665 - retain mounted UI during revalidation

    • Updated dependencies [ea3a665]:

      • @​tanstack/router-core@​1.171.19
    Changelog

    Sourced from @​tanstack/react-router's changelog.

    1.170.22

    Patch Changes

    • #7992 ea3a665 - retain mounted UI during revalidation

    • Updated dependencies [ea3a665]:

      • @​tanstack/router-core@​1.171.19

    1.170.21

    Patch Changes

    • #7961 697ebb6 - Prevent a blank frame before zero-delay initial pending UI by using a component-scoped React transition for match publication. Pending timing, boundary selection, and rendered matches continue to come from the router core.

    • #7970 2435885 - createFileRoute does not rely on FileRoute class

    • #7971 86bf510 - clean intersection observer options in link component

    • #7967 6aefb33 - Preserve path params in their raw string form while matching routes so structured values returned by params.parse produce stable match IDs and do not reuse stale loader data.

      RouterCore.getMatchedRoutes() now returns [matchedRoutes, rawParams, foundRoute] instead of an object.

    • Updated dependencies [84db4a8, 9cac62a, 6aefb33]:

      • @​tanstack/router-core@​1.171.18
      • @​tanstack/history@​1.162.1

    1.170.20

    Patch Changes

    • Updated dependencies [b2908c6]:
      • @​tanstack/router-core@​1.171.17

    1.170.19

    Patch Changes

    • #7805 45c4ad8 - Rewrite match loading around a lane-based scheduler that tracks each navigation, preload, and background reload as an ordered unit of work. This fixes pending/redirect/retry state leaking between overlapping navigations, restores correct SSR status codes for redirects, errors, and not-found responses, and closes hydration gaps where the client re-ran work the server had already completed.

      • Invalidation now retires matching active preloads so older speculative loader results cannot become fresh cache data after invalidation.
      • Route headers() now only runs on the server, matching the documented behavior — it is no longer invoked during client-side asset projection.
      • The documented default gcTime and preloadGcTime now match the existing runtime default of 5 minutes (300_000).

      Removed / changed exported internals

      • RouterState no longer includes loadedAt, isTransitioning, statusCode, or redirect. Use match.updatedAt in place of loadedAt; subscribe to router.state.status / router.state.isLoading in place of isTransitioning; server response status and redirect handling are now internal to the server loader and are no longer exposed on router.state.
      • RouteMatch.fetchCount has been removed, with no replacement — it was purely informational.
      • RouteMatch.status no longer includes 'redirected' (it remains 'pending' | 'success' | 'error' | 'notFound') — redirected matches are dropped from the match list instead of being rendered.

    ... (truncated)

    Commits

    Updates lucide-react from 1.28.0 to 1.30.0

    Release notes

    Sourced from lucide-react's releases.

    Version 1.30.0

    What's Changed

    New Contributors

    Full Changelog: lucide-icons/lucide@1.29.0...1.30.0

    Version 1.29.0

    What's Changed

    Full Changelog: lucide-icons/lucide@1.28.0...1.29.0

    Commits

    Updates @anthropic-ai/claude-agent-sdk from 0.3.221 to 0.3.224

    Release notes

    Sourced from @​anthropic-ai/claude-agent-sdk's releases.

    v0.3.224

    What's changed

    • Added crossSessionInbound and dialogExpiry settings: cross-session messages sent to a session running with bypassed permissions are held for your approval, and messages to other sessions auto-deliver
    • Added subkind: 'peer-send-message' to the task-notification member of SDKMessageOrigin, marking a notification raised by a cross-session SendMessage
    • Added source: 'archive' plugin config variant to Settings, with url and optional sha256, for installing plugins from a zip over HTTPS
    • Added sandbox credential-masking fields to Settings: decode: 'jwt' with maskClaims, extract/onExtractNoMatch on envVars, and awsPairs/sigv4 for AWS SigV4 re-signing
    • Fixed long (>200 char) project paths resolving to another project's session directory under a shared sanitized prefix; session list/get/rename/tag/fork/delete and /resume no longer cross projects

    Update

    npm install @anthropic-ai/claude-agent-sdk@0.3.224
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.224
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.224
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.224

    v0.3.223

    What's changed

    • Added resumeDropsTurn option: with resumeSessionAt, declares the turn a truncating resume intends to drop; the CLI refuses the resume if anything else would be discarded
    • Result messages for repeated 529 overload failures now include api_error_status: 529, so SDK consumers can detect overload terminations structurally instead of matching message text
    • Bare headless (-p / SDK query() without canUseTool) now emits system/permission_denied stream events when a tool call is auto-denied
    • Documented usage vs modelUsage on stream-json results: usage is main-loop-only and per-turn; modelUsage is cumulative, covers all query-pipeline calls, and is the field for cost accounting

    Update

    npm install @anthropic-ai/claude-agent-sdk@0.3.223
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.223
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.223
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.223

    v0.3.222

    What's changed

    • Fixed query({ sessionStore, resume }) not carrying user settings.json (apiKeyHelper, env, hooks, permissions) into the resumed subprocess

    Update

    npm install @anthropic-ai/claude-agent-sdk@0.3.222
</tr></table>

    ... (truncated)

    Changelog

    Sourced from @​anthropic-ai/claude-agent-sdk's changelog.

    0.3.224

    • Added crossSessionInbound and dialogExpiry settings: cross-session messages sent to a session running with bypassed permissions are held for your approval, and messages to other sessions auto-deliver
    • Added subkind: 'peer-send-message' to the task-notification member of SDKMessageOrigin, marking a notification raised by a cross-session SendMessage
    • Added source: 'archive' plugin config variant to Settings, with url and optional sha256, for installing plugins from a zip over HTTPS
    • Added sandbox credential-masking fields to Settings: decode: 'jwt' with maskClaims, extract/onExtractNoMatch on envVars, and awsPairs/sigv4 for AWS SigV4 re-signing
    • Fixed long (>200 char) project paths resolving to another project's session directory under a shared sanitized prefix; session list/get/rename/tag/fork/delete and /resume no longer cross projects

    0.3.223

    • Added resumeDropsTurn option: with resumeSessionAt, declares the turn a truncating resume intends to drop; the CLI refuses the resume if anything else would be discarded
    • Result messages for repeated 529 overload failures now include api_error_status: 529, so SDK consumers can detect overload terminations structurally instead of matching message text
    • Bare headless (-p / SDK query() without canUseTool) now emits system/permission_denied stream events when a tool call is auto-denied
    • Documented usage vs modelUsage on stream-json results: usage is main-loop-only and per-turn; modelUsage is cumulative, covers all query-pipeline calls, and is the field for cost accounting

    0.3.222

    • Fixed query({ sessionStore, resume }) not carrying user settings.json (apiKeyHelper, env, hooks, permissions) into the resumed subprocess
    Commits

    Updates @github/copilot-sdk from 1.0.8 to 1.0.9

    Release notes

    Sourced from @​github/copilot-sdk's releases.

    rust/v1.0.9

    What's Changed

    New Contributors

    Full Changelog: github/copilot-sdk@rust/v1.0.9-preview.3...rust/v1.0.9

    v1.0.9

    What's Changed

    @dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 10, 2026
    @vercel

    vercel Bot commented Aug 10, 2026 •
    edited
    Loading

    Copy link
    Copy Markdown

    The latest updates on your projects. Learn more about Vercel for GitHub.

    1 Skipped Deployment
    Project Deployment Actions Updated (UTC)
    threadlines Skipped Skipped Aug 10, 2026 2:25pm

    Request Review

    @github-actions github-actions Bot added size:XXL vouch:trusted PR author is trusted by repo permissions or the VOUCHED list. labels Aug 10, 2026
    @dependabot
    Bump the production-dependencies group across 1 directory with 8 updates
    bf499b6 
    Bumps the production-dependencies group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.1.6` | `7.2.0` |
| [@opencode-ai/sdk](https://github.com/sst/opencode-sdk-js) | `1.18.11` | `1.18.15` |
| [@base-ui/react](https://github.com/mui/base-ui/tree/HEAD/packages/react) | `1.6.0` | `1.7.0` |
| [@tanstack/react-pacer](https://github.com/TanStack/pacer/tree/HEAD/packages/react-pacer) | `0.22.1` | `0.23.0` |
| [@tanstack/react-router](https://github.com/TanStack/router/tree/HEAD/packages/react-router) | `1.170.18` | `1.170.22` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.28.0` | `1.30.0` |
| [@anthropic-ai/claude-agent-sdk](https://github.com/anthropics/claude-agent-sdk-typescript) | `0.3.221` | `0.3.224` |
| [@github/copilot-sdk](https://github.com/github/copilot-sdk) | `1.0.8` | `1.0.9` |



Updates `astro` from 7.1.6 to 7.2.0
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.2.0/packages/astro)

Updates `@opencode-ai/sdk` from 1.18.11 to 1.18.15
- [Release notes](https://github.com/sst/opencode-sdk-js/releases)
- [Changelog](https://github.com/anomalyco/opencode-sdk-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sst/opencode-sdk-js/commits)

Updates `@base-ui/react` from 1.6.0 to 1.7.0
- [Release notes](https://github.com/mui/base-ui/releases)
- [Changelog](https://github.com/mui/base-ui/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mui/base-ui/commits/v1.7.0/packages/react)

Updates `@tanstack/react-pacer` from 0.22.1 to 0.23.0
- [Release notes](https://github.com/TanStack/pacer/releases)
- [Changelog](https://github.com/TanStack/pacer/blob/main/packages/react-pacer/CHANGELOG.md)
- [Commits](https://github.com/TanStack/pacer/commits/@tanstack/react-pacer@0.23.0/packages/react-pacer)

Updates `@tanstack/react-router` from 1.170.18 to 1.170.22
- [Release notes](https://github.com/TanStack/router/releases)
- [Changelog](https://github.com/TanStack/router/blob/main/packages/react-router/CHANGELOG.md)
- [Commits](https://github.com/TanStack/router/commits/@tanstack/react-router@1.170.22/packages/react-router)

Updates `lucide-react` from 1.28.0 to 1.30.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.30.0/packages/lucide-react)

Updates `@anthropic-ai/claude-agent-sdk` from 0.3.221 to 0.3.224
- [Release notes](https://github.com/anthropics/claude-agent-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/claude-agent-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/claude-agent-sdk-typescript@v0.3.221...v0.3.224)

Updates `@github/copilot-sdk` from 1.0.8 to 1.0.9
- [Release notes](https://github.com/github/copilot-sdk/releases)
- [Changelog](https://github.com/github/copilot-sdk/blob/main/CHANGELOG.md)
- [Commits](github/copilot-sdk@v1.0.8...v1.0.9)

---
updated-dependencies:
- dependency-name: "@anthropic-ai/claude-agent-sdk"
  dependency-version: 0.3.224
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@base-ui/react"
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@github/copilot-sdk"
  dependency-version: 1.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@opencode-ai/sdk"
  dependency-version: 1.18.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@tanstack/react-pacer"
  dependency-version: 0.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@tanstack/react-router"
  dependency-version: 1.170.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: astro
  dependency-version: 7.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: lucide-react
  dependency-version: 1.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot dependabot Bot changed the title Bump the production-dependencies group with 8 updates Bump the production-dependencies group across 1 directory with 8 updates Aug 10, 2026
    @dependabot
    dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-bf8c741be3 branch from 44fa95f to bf499b6 Compare August 10, 2026 14:22
    @badcuban
    Adapt model picker arrow-key test to Base UI 1.7 initial highlight
    965e04e 
    The picker list now opens with the current model already highlighted (Base UI 1.7.0 inline-combobox behaviour), so the first arrow moves to the next item instead of revealing the highlight. The test now asserts the initial highlight explicitly and needs one fewer arrow to reach Sonnet.
    @badcuban
    badcuban merged commit 1346c48 into main Aug 10, 2026
    15 checks passed
    @badcuban
    badcuban deleted the dependabot/npm_and_yarn/production-dependencies-bf8c741be3 branch August 10, 2026 14:35
    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

    Reviewers

    No reviews

    Assignees

    No one assigned

    Labels

    dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code size:XXL vouch:trusted PR author is trusted by repo permissions or the VOUCHED list.

    Projects

    None yet

    Milestone

    No milestone

    Development

    Successfully merging this pull request may close these issues.

    1 participant

    @badcuban