Skip to content

Bump the production-dependencies group with 9 updates - #164

Closed
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/production-dependencies-d1dc1158d3
Closed

Bump the production-dependencies group with 9 updates#164
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/production-dependencies-d1dc1158d3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 17, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 9 updates:

Package From To
@oxlint/plugins 1.77.0 1.78.0
astro 7.2.0 7.2.2
@opencode-ai/sdk 1.18.15 1.18.18
@legendapp/list 3.3.3 3.3.5
@tanstack/react-router 1.170.22 1.170.28
lucide-react 1.30.0 1.31.0
zustand 5.0.14 5.0.15
@anthropic-ai/claude-agent-sdk 0.3.226 0.3.232
@anthropic-ai/sdk 0.115.0 0.117.1

Updates @oxlint/plugins from 1.77.0 to 1.78.0

Release notes

Sourced from @​oxlint/plugins's releases.

oxlint v1.78.0 & oxfmt v0.63.0

Table of Contents

Oxlint v1.78.0

🚀 Features

  • ccb8fe8 linter/jsdoc: Implement no-blank-blocks rule (#25207) (Mikhail Baev)
  • d4a897c linter/eslint: Implement one-var rule (#24470) (Cole Ellison)
  • 5ab9340 linter/jsx-a11y/anchor-has-content: Add options to match eslint (#24571) (Cole Ellison)

🐛 Bug Fixes

  • b746e00 linter/eslint/no-implicit-coercion: Preserve template coercion whitespace (#25470) (camc314)
  • a92c541 linter: Preserve source text for JS plugin ignore fixes (#25280) (Norcleeh)
  • 675c840 linter/eslint/prefer-promise-reject-errors: Handle parenthesized calls (#25378) (camc314)
  • 1703739 linter/unicorn/new-for-builtins: Ignore optional chains (#25411) (tanakalucky)
  • 95ece63 linter/unicorn/prefer-code-point: Downgrade the auto-fix to dangerous (#25412) (leemr)
  • c451a0e linter/vitest: Validate consistent-test-filename regex patterns (#25408) (Mikhail Baev)
  • 937825c react_compiler: Disable exhaustive memo validation by default (#25417) (Boshen)
  • f0f7dae linter/eslint/no-unused-vars: Report invalid regex options (#25380) (Cameron)
  • 44e73fd linter/unicorn/prefer-array-flat: Fix concat.apply suggestions (#25373) (Cameron)
  • 6846a9a linter/react/rules-of-hooks: Detect constructor callbacks (#25377) (camc314)
  • b247a9d linter/unicorn/new-for-builtins: Support Float16Array (#25382) (tanakalucky)
  • 19109cd linter/unicorn/error-message: Support SuppressedError messages (#25375) (camc314)
  • 9c13f5e linter: Assert token lookup invariants (#25368) (camc314)
  • bc35f83 linter/eslint/no-unused-vars: Bound catch parameter lookup (#25367) (camc314)
  • c159fb9 linter/unicorn/switch-case-braces: Bound token lookup (#25363) (camc314)
  • 03b2eb2 linter/unicorn/no-static-only-class: Bound token lookup (#25361) (camc314)
  • 0afc59e linter/unicorn/empty-brace-spaces: Bound token lookup (#25353) (camc314)
  • 2963d98 linter/eslint/no-unreachable-loop: Do not report loops whose body has a finally block (#25335) (Todor Andonov)
  • 589e5fb linter/eslint/no-param-reassign: Validate ignorePropertyModificationsForRegex property (#25346) (Mikhail Baev)
  • aae5d8b linter/eslint/no-throw-literal: False positive on variable declared without initializer (#25275) (cjnoname)
  • 6b1c479 oxlint: Normalize customized rule names (#25316) (camc314)
  • d494eb5 linter/unicorn/consistent-existence-index-check: Bound token lookup (#25325) (camc314)
  • 4266037 linter/typescript/prefer-namespace-keyword: Bound token lookup (#25322) (camc314)
  • 4745b4e linter/typescript/no-namespace: Bound token lookup (#25321) (camc314)
  • 648a481 linter/eslint/one-var: Avoid joining exported declarations (#25314) (camc314)
  • 9573937 linter/typescript: Validate ban-ts-comment description_format (#25320) (Mikhail Baev)
  • ebf7d18 linter/typescript/consistent-type-definitions: Bound token lookup (#25281) (camc314)
  • 1501ccf linter/typescript/consistent-generic-constructors: Bound token lookup (#25258) (camc314)

⚡ Performance

  • 8f784f3 linter: Reduce rule config dispatch size (#25461) (Boshen)
  • 2de4ec2 linter: Reduce visitor code size (#25441) (Boshen)
  • 6fb7f47 linter/unicorn/prefer-export-from: Narrow ExportFromDeclaration lookup (#25381) (camc314)

... (truncated)

Commits

Updates astro from 7.2.0 to 7.2.2

Release notes

Sourced from astro's releases.

astro@7.2.2

Patch Changes

  • #17611 9bc3207 Thanks @​thelazylamaGit! - Fixes component styles rendered from content entries remaining stale until a second save when an adapter uses Astro's fallback development environment

  • #17634 2267eee Thanks @​astrobot-houston! - Fixes incremental builds dropping optimized images for cached pages when using a collectStaticImages prerenderer (e.g. @astrojs/cloudflare with compile-time image optimization)

  • #17650 4cdf128 Thanks @​astrobot-houston! - Fixes intermittent ImageNotFound errors during build on projects with many images. The build now limits concurrent image file reads to avoid exhausting OS file descriptors (EMFILE) and retries transient I/O errors with backoff. Non-transient errors are no longer silently swallowed.

  • #17683 2378221 Thanks @​astrobot-houston! - Fixes prerenderConflictBehavior not applying to content collection duplicate ID warnings in the glob() and file() loaders. Setting it to 'error' now throws during content sync, and 'ignore' suppresses the warning.

  • #17659 90c6ea4 Thanks @​astrobot-houston! - Fixes the Fonts API breaking experimental.incrementalBuild caching by embedding a build-local, randomly-assigned server port in generated code used for the dependency hash

  • #17630 fd1d9ee Thanks @​ericclemmons! - Fixes incremental builds becoming prohibitively slow for sites with many pages or content entries that share a large dependency graph.

  • #17690 93beecc Thanks @​NgoQuocViet2001! - Prevents files in directories whose names start with pages from being treated as page routes

  • #17671 09f0dc7 Thanks @​tarikermis! - Fixes astro dev refusing to start after a Docker container restart when an unrelated process reuses the PID from a persisted lock file. Astro now checks the process command across platforms, so stale lock files are cleaned up and --force does not signal the unrelated process.

astro@7.2.1

Patch Changes

  • #17612 7133730 Thanks @​thelazylamaGit! - Fixes CSS hot module replacement after navigating between pages with ClientRouter

  • #17628 4ada248 Thanks @​astrobot-houston! - Fixes a CSP violation when using both security.csp and experimental.clientPrerender with data-astro-prefetch links. The dynamically injected <script type="speculationrules"> now uses a static "source": "document" approach with a CSS selector, producing a deterministic payload that is hashed and included in the CSP script-src directive at build time.

  • #17605 89e4647 Thanks @​ashleigh-yeoman! - Fixes middleware HMR not responding to changes in imported modules. Previously, only direct edits to the middleware file would trigger a reload.

  • #17582 bd2c1a5 Thanks @​astrobot-houston! - Fixes a regression where content collection reference() fields silently accepted entry IDs that don't exist, such as an ID that doesn't match a loader's slugified version of it. Astro now logs an error for references that point to a missing entry after all loaders finish syncing.

  • #17661 97b0cc7 Thanks @​ArmandPhilippot! - Improves Markdown options documentation with links to the Markdown guide and official processors.

  • #17349 4328c73 Thanks @​astrobot-houston! - Fixes an issue where requests handled by the dev prerender environment (e.g. /_image with @astrojs/cloudflare's prerenderEnvironment: 'node') returned a 500 when a prerendered catch-all route existed, because non-prerendered route modules were imported in an environment where their runtime-specific APIs are unavailable

  • #17603 722eed6 Thanks @​astrobot-houston! - Fixes <video> and <audio> elements being non-functional after navigating via view transitions (<ClientRouter />)

  • #17616 3a890d2 Thanks @​lazerg! - Fixes experimental.incrementalBuild re-rendering unchanged routes that import more than one asset. The route's dependency hash depended on the order the assets finished building, so two builds of identical sources could produce different hashes. The hash is now based on the file name each asset resolves to.

  • #17547 fba468c Thanks @​dmgawel! - Improves getCollection() and getEntry() performance for entries without local image references

  • #17602 16e0d9d Thanks @​astrobot-houston! - Fixes a build error caused by hash collisions in generated content collection image import identifiers

Changelog

Sourced from astro's changelog.

7.2.2

Patch Changes

  • #17611 9bc3207 Thanks @​thelazylamaGit! - Fixes component styles rendered from content entries remaining stale until a second save when an adapter uses Astro's fallback development environment

  • #17634 2267eee Thanks @​astrobot-houston! - Fixes incremental builds dropping optimized images for cached pages when using a collectStaticImages prerenderer (e.g. @astrojs/cloudflare with compile-time image optimization)

  • #17650 4cdf128 Thanks @​astrobot-houston! - Fixes intermittent ImageNotFound errors during build on projects with many images. The build now limits concurrent image file reads to avoid exhausting OS file descriptors (EMFILE) and retries transient I/O errors with backoff. Non-transient errors are no longer silently swallowed.

  • #17683 2378221 Thanks @​astrobot-houston! - Fixes prerenderConflictBehavior not applying to content collection duplicate ID warnings in the glob() and file() loaders. Setting it to 'error' now throws during content sync, and 'ignore' suppresses the warning.

  • #17659 90c6ea4 Thanks @​astrobot-houston! - Fixes the Fonts API breaking experimental.incrementalBuild caching by embedding a build-local, randomly-assigned server port in generated code used for the dependency hash

  • #17630 fd1d9ee Thanks @​ericclemmons! - Fixes incremental builds becoming prohibitively slow for sites with many pages or content entries that share a large dependency graph.

  • #17690 93beecc Thanks @​NgoQuocViet2001! - Prevents files in directories whose names start with pages from being treated as page routes

  • #17671 09f0dc7 Thanks @​tarikermis! - Fixes astro dev refusing to start after a Docker container restart when an unrelated process reuses the PID from a persisted lock file. Astro now checks the process command across platforms, so stale lock files are cleaned up and --force does not signal the unrelated process.

7.2.1

Patch Changes

  • #17612 7133730 Thanks @​thelazylamaGit! - Fixes CSS hot module replacement after navigating between pages with ClientRouter

  • #17628 4ada248 Thanks @​astrobot-houston! - Fixes a CSP violation when using both security.csp and experimental.clientPrerender with data-astro-prefetch links. The dynamically injected <script type="speculationrules"> now uses a static "source": "document" approach with a CSS selector, producing a deterministic payload that is hashed and included in the CSP script-src directive at build time.

  • #17605 89e4647 Thanks @​ashleigh-yeoman! - Fixes middleware HMR not responding to changes in imported modules. Previously, only direct edits to the middleware file would trigger a reload.

  • #17582 bd2c1a5 Thanks @​astrobot-houston! - Fixes a regression where content collection reference() fields silently accepted entry IDs that don't exist, such as an ID that doesn't match a loader's slugified version of it. Astro now logs an error for references that point to a missing entry after all loaders finish syncing.

  • #17661 97b0cc7 Thanks @​ArmandPhilippot! - Improves Markdown options documentation with links to the Markdown guide and official processors.

  • #17349 4328c73 Thanks @​astrobot-houston! - Fixes an issue where requests handled by the dev prerender environment (e.g. /_image with @astrojs/cloudflare's prerenderEnvironment: 'node') returned a 500 when a prerendered catch-all route existed, because non-prerendered route modules were imported in an environment where their runtime-specific APIs are unavailable

  • #17603 722eed6 Thanks @​astrobot-houston! - Fixes <video> and <audio> elements being non-functional after navigating via view transitions (<ClientRouter />)

  • #17616 3a890d2 Thanks @​lazerg! - Fixes experimental.incrementalBuild re-rendering unchanged routes that import more than one asset. The route's dependency hash depended on the order the assets finished building, so two builds of identical sources could produce different hashes. The hash is now based on the file name each asset resolves to.

  • #17547 fba468c Thanks @​dmgawel! - Improves getCollection() and getEntry() performance for entries without local image references

  • #17602 16e0d9d Thanks @​astrobot-houston! - Fixes a build error caused by hash collisions in generated content collection image import identifiers

Commits
  • 14f8f87 [ci] release (#17673)
  • 93beecc Fix page directory boundary detection (#17690)
  • 2378221 fix(content): apply prerenderConflictBehavior to content collection duplicate...
  • fd1d9ee fix(build): Optimize incremental builds with shared content graph hashing (#1...
  • 8df416a test: skip type check tests in ecosystem-ci (#17587)
  • 09f0dc7 Detect stale dev server lock files after PID reuse (#17671)
  • 2267eee fix: preserve restored image transforms when merging adapter-collected images...
  • 4cdf128 fix(assets): prevent EMFILE errors on large image builds with concurrency lim...
  • 90c6ea4 fix(fonts): strip volatile server address from incremental build hash (#17659)
  • 9bc3207 fix(dev): apply the dev CSS plugin to the fallback Astro environment (#17611)
  • Additional commits viewable in compare view

Updates @opencode-ai/sdk from 1.18.15 to 1.18.18

Commits

Updates @legendapp/list from 3.3.3 to 3.3.5

Release notes

Sourced from @​legendapp/list's releases.

v3.3.5

  • Fix: Changing dataKey no longer leaves the new dataset invisible. #519
  • Fix: maintainScrollAtEnd stays pinned as newly inserted rows are measured, and scroll corrections preserve anchoredEndSpace padding. #520
  • Fix: Programmatic scrolls no longer throw in browsers, get lost when they replace unfinished initial scrolling, or stop working after a previous request is canceled. #518

v3.3.4

  • Feat: getState().indexByKey(key) looks up an item’s current index by key.
  • Feat: anchoredEndSpace now works with standard React Native LegendList, including horizontal and RTL lists, and stays accurate after content measurements change. It supports single-column lists only.
  • Fix: maintainScrollAtEnd continues following content growth unless the user scrolls away.
  • Fix: Changing dataKey no longer briefly displays stale rows from the previous dataset.
  • Fix: Initial scrolling and scrollToIndex correctly account for padding, direction, and final-item gaps.
  • Fix: Web content-container sizing remains correct when callers provide padding or content-box styles.
  • Fix: useRecyclingEffect and useRecyclingState no longer crash outside a LegendList. #498
  • Fix: Programmatic scrolls settle reliably when superseded, already aligned on iOS, or interrupted by unmounting. #508
Changelog

Sourced from @​legendapp/list's changelog.

3.3.5

  • Fix: Changing dataKey no longer leaves the new dataset invisible. #519
  • Fix: maintainScrollAtEnd stays pinned as newly inserted rows are measured, and scroll corrections preserve anchoredEndSpace padding. #520
  • Fix: Programmatic scrolls no longer throw in browsers, get lost when they replace unfinished initial scrolling, or stop working after a previous request is canceled. #518

3.3.4

  • Feat: getState().indexByKey(key) looks up an item’s current index by key.
  • Feat: anchoredEndSpace now works with standard React Native LegendList, including horizontal and RTL lists, and stays accurate after content measurements change. It supports single-column lists only.
  • Fix: maintainScrollAtEnd continues following content growth unless the user scrolls away.
  • Fix: Changing dataKey no longer briefly displays stale rows from the previous dataset.
  • Fix: Initial scrolling and scrollToIndex correctly account for padding, direction, and final-item gaps.
  • Fix: Web content-container sizing remains correct when callers provide padding or content-box styles.
  • Fix: useRecyclingEffect and useRecyclingState no longer crash outside a LegendList. #498
  • Fix: Programmatic scrolls settle reliably when superseded, already aligned on iOS, or interrupted by unmounting. #508
Commits
  • 80193ce Version 3.3.5
  • d5a9dab fix: retain the deferred scroll runner during cleanup
  • 07b3ede fix: let imperative scrolling supersede initial scroll
  • aeebba5 fix: preserve anchored end padding during scroll adjustment
  • 61f8ec9 test: protect first-measurement end maintenance
  • ac4fa07 Merge pull request #520 from chrisnojima/fix-maintain-scroll-at-end-first-mea...
  • 21758bc Merge pull request #519 from chrisnojima/fix-fresh-data-transition-stuck-hidden
  • e463864 Merge pull request #518 from chrisnojima/fix-scheduled-work-cancel-receiver
  • c0dbac1 fix: follow content growth from first item measurements at the end
  • 627200d fix: reveal a fresh dataset when the readiness reset is never rendered
  • Additional commits viewable in compare view

Updates @tanstack/react-router from 1.170.22 to 1.170.28

Release notes

Sourced from @​tanstack/react-router's releases.

@​tanstack/react-router@​1.170.28

Patch Changes

  • #8055 0c25a7b - Avoid wrapping root components that may render the HTML document in a Suspense boundary during SSR and hydration.

  • #8054 31882c7 - Reuse resolved lazy route components when revisiting code-split routes, preventing unnecessary pending UI.

  • Updated dependencies [31882c7]:

    • @​tanstack/router-core@​1.171.23

@​tanstack/react-router@​1.170.27

Patch Changes

@​tanstack/react-router@​1.170.26

Patch Changes

  • #8045 f500760 - Warn when an Outlet is rendered inside a pending, error, or not-found component.

  • #8043 1aafca9 - remove the undocumented Link isTransitioning state and data-transitioning attribute

  • #8044 aa10b65 - Apply preloadDelay to viewport link preloading and cancel pending preloads when links leave the viewport.

  • Updated dependencies [7e93431]:

    • @​tanstack/router-core@​1.171.22
Changelog

Sourced from @​tanstack/react-router's changelog.

1.170.28

Patch Changes

  • #8055 0c25a7b - Avoid wrapping root components that may render the HTML document in a Suspense boundary during SSR and hydration.

  • #8054 31882c7 - Reuse resolved lazy route components when revisiting code-split routes, preventing unnecessary pending UI.

  • Updated dependencies [31882c7]:

    • @​tanstack/router-core@​1.171.23

1.170.27

Patch Changes

1.170.26

Patch Changes

  • #8045 f500760 - Warn when an Outlet is rendered inside a pending, error, or not-found component.

  • #8043 1aafca9 - remove the undocumented Link isTransitioning state and data-transitioning attribute

  • #8044 aa10b65 - Apply preloadDelay to viewport link preloading and cancel pending preloads when links leave the viewport.

  • Updated dependencies [7e93431]:

    • @​tanstack/router-core@​1.171.22

1.170.25

Patch Changes

  • Updated dependencies [51138a8]:
    • @​tanstack/router-core@​1.171.21

1.170.24

Patch Changes

1.170.23

Patch Changes

  • #7952 95dec51 - bail out of Link re-renders when the resolved href and active state are unchanged
Commits

Updates lucide-react from 1.30.0 to 1.31.0

Release notes

Sourced from lucide-react's releases.

Version 1.31.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.30.0...1.31.0

Commits

Updates zustand from 5.0.14 to 5.0.15

Release notes

Sourced from zustand's releases.

v5.0.15

Fix some issues in devtools and persist middleware.

What's Changed

Full Changelog: pmndrs/zustand@v5.0.14...v5.0.15

Commits
  • 2115efb v5.0.15
  • 1f531ba chore(deps): update dev dependencies (#3560)
  • aa6d2a1 docs: add zustand-devtools-bridge (#3559)
  • 3febf8c fix(persist): clearStorage() should invalidate concurrent async rehydration (...
  • f44cecc fix(devtools): correct V8 stack regex when source path contains spaces (#3531)
  • beca84e fix: update broken README links from docs/guides/ to docs/learn/guides/ (#3542)
  • 038f496 docs(persist): clarify createJSONStorage behavior and warn about production u...
  • a1f685c docs: fix missing code highlights in tic-tac-toe tutorial (#3527)
  • 07cee61 docs: fix missing highlight on setXIsNext line in tic-tac-toe tutorial (#3524)
  • 566b5bf Fix dead link in README.md: update immer guide path (#3519)
  • Additional commits viewable in compare view

Updates @anthropic-ai/claude-agent-sdk from 0.3.226 to 0.3.232

Release notes

Sourced from @​anthropic-ai/claude-agent-sdk's releases.

v0.3.232

What's changed

  • Subagent MCP tool_result frames whose result carries _meta now emit tool_use_result as { content, _meta } (matching main-loop frames) instead of a bare value
  • /context result messages now carry a structured context_usage payload (new SDKContextUsage type), so consumers can render the context-usage card without parsing the markdown table
  • vcs_state_changed events now populate the branch field for push operations, sourced from the pushed ref

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.232
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.232
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.232
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.232

v0.3.231

What's changed

  • Updated to parity with Claude Code v2.1.231

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.231
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.231
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.231
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.231

v0.3.229

What's changed

  • Added terminal_slash_commands to the system init message so Remote Control clients can hide terminal-oriented commands
  • Changed conversations whose messages alone exceed the API's 32 MB limit to end the turn with terminal_reason "api_error" instead of "image_error"; StopFailure error_details is "request_body_over_limit: …"

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.229
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.229
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.229
</tr></table>

... (truncated)

Changelog

Sourced from @​anthropic-ai/claude-agent-sdk's changelog.

0.3.232

  • Subagent MCP tool_result frames whose result carries _meta now emit tool_use_result as { content, _meta } (matching main-loop frames) instead of a bare value
  • /context result messages now carry a structured context_usage payload (new SDKContextUsage type), so consumers can render the context-usage card without parsing the markdown table
  • vcs_state_changed events now populate the branch field for push operations, sourced from the pushed ref

0.3.231

  • Updated to parity with Claude Code v2.1.231

0.3.230

  • Updated to parity with Claude Code v2.1.230

0.3.229

  • Added terminal_slash_commands to the system init message so Remote Control clients can hide terminal-oriented commands
  • Changed conversations whose messages alone exceed the API's 32 MB limit to end the turn with terminal_reason "api_error" instead of "image_error"; StopFailure error_details is "request_body_over_limit: …"

0.3.228

  • Agent tool results (AgentOutput): usage.output_tokens_details is now carried through

0.3.227

  • Updated to parity with Claude Code v2.1.227
Commits

Updates @anthropic-ai/sdk from 0.115.0 to 0.117.1

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk: v0.117.1

0.117.1 (2026-08-13)

Full Changelog: sdk-v0.117.0...sdk-v0.117.1

Chores

  • ci: allow manually re-publishing a package to npm from the release workflow (af60c1f)
  • internal: tag uploaded preview builds with the branch name (#295) (228f44e)

sdk: v0.117.0

0.117.0 (2026-08-13)

Full Changelog: sdk-v0.116.0...sdk-v0.117.0

Features

  • api: add output_behavior to dream creation (create a new memory store or update the input store in place) (6a5bd0f)

Bug Fixes

  • build: include dotfiles when flattening dist during git installs (917dbbb)
  • client: add models (a7bfbb1)
  • messages: honor per-request timeout in the non-streaming long-request check (#272) (0fdd8a8)
  • streaming: apply all message_delta fields when accumulating streamed messages (#289) (7b82659)
  • tool-runner: forward the response container id to the next request (#271) (5bdee4a)
  • tools: align path resolution, skill-archive members, and heartbeat bounds with the other SDKs (#264) (5fbc729)

Chores

  • ci: run breaking-change detection as a ci.yml job on every push (c34c1d5)
  • internal: switch from yarn to pnpm (f4eeea0)
  • tools: escape backslashes in skill archive exclusion patterns (#311) (67ede1c)

Documentation

  • api: clarify that user profile name is optional for resold profiles (1b6fed5)

sdk: v0.116.0

0.116.0 (2026-08-07)

Full Changelog: sdk-v0.115.0...sdk-v0.116.0

Features

  • api: add mid-conversation-tool-changes-2026-07-01 beta (70e04f6)
  • api: add support for session budgets, advisor tool, pinned inference location and skills auto-loading from GitHub (1336a4a)

... (truncated)

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.117.1 (2026-08-13)

Full Changelog: sdk-v0.117.0...sdk-v0.117.1

Chores

  • ci: allow manually re-publishing a package to npm from the release workflow (af60c1f)
  • internal: tag uploaded preview builds with the branch name (#295) (228f44e)

0.117.0 (2026-08-13)

Full Changelog: sdk-v0.116.0...sdk-v0.117.0

Features

  • api: add output_behavior to dream creation (create a new memory store or update the input store in place) (6a5bd0f)

Bug Fixes

  • build: include dotfiles when flattening dist during git installs (917dbbb)
  • client: add models (a7bfbb1)
  • messages: honor per-request timeout in the non-streaming long-request check (#272) (0fdd8a8)
  • streaming: apply all message_delta fields when accumulating streamed messages (#289) (

@dependabot
Bump the production-dependencies group with 9 updates
f0d27b0 
Bumps the production-dependencies group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [@oxlint/plugins](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint-plugins) | `1.77.0` | `1.78.0` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.2.0` | `7.2.2` |
| [@opencode-ai/sdk](https://github.com/sst/opencode-sdk-js) | `1.18.15` | `1.18.18` |
| [@legendapp/list](https://github.com/LegendApp/legend-list) | `3.3.3` | `3.3.5` |
| [@tanstack/react-router](https://github.com/TanStack/router/tree/HEAD/packages/react-router) | `1.170.22` | `1.170.28` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.30.0` | `1.31.0` |
| [zustand](https://github.com/pmndrs/zustand) | `5.0.14` | `5.0.15` |
| [@anthropic-ai/claude-agent-sdk](https://github.com/anthropics/claude-agent-sdk-typescript) | `0.3.226` | `0.3.232` |
| [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.115.0` | `0.117.1` |


Updates `@oxlint/plugins` from 1.77.0 to 1.78.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/apps_v1.78.0/npm/oxlint-plugins)

Updates `astro` from 7.2.0 to 7.2.2
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.2.2/packages/astro)

Updates `@opencode-ai/sdk` from 1.18.15 to 1.18.18
- [Release notes](https://github.com/sst/opencode-sdk-js/releases)
- [Changelog](https://github.com/anomalyco/opencode-sdk-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sst/opencode-sdk-js/commits)

Updates `@legendapp/list` from 3.3.3 to 3.3.5
- [Release notes](https://github.com/LegendApp/legend-list/releases)
- [Changelog](https://github.com/LegendApp/legend-list/blob/main/CHANGELOG.md)
- [Commits](LegendApp/legend-list@v3.3.3...v3.3.5)

Updates `@tanstack/react-router` from 1.170.22 to 1.170.28
- [Release notes](https://github.com/TanStack/router/releases)
- [Changelog](https://github.com/TanStack/router/blob/main/packages/react-router/CHANGELOG.md)
- [Commits](https://github.com/TanStack/router/commits/@tanstack/react-router@1.170.28/packages/react-router)

Updates `lucide-react` from 1.30.0 to 1.31.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.31.0/packages/lucide-react)

Updates `zustand` from 5.0.14 to 5.0.15
- [Release notes](https://github.com/pmndrs/zustand/releases)
- [Commits](pmndrs/zustand@v5.0.14...v5.0.15)

Updates `@anthropic-ai/claude-agent-sdk` from 0.3.226 to 0.3.232
- [Release notes](https://github.com/anthropics/claude-agent-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/claude-agent-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/claude-agent-sdk-typescript@v0.3.226...v0.3.232)

Updates `@anthropic-ai/sdk` from 0.115.0 to 0.117.1
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.115.0...sdk-v0.117.1)

---
updated-dependencies:
- dependency-name: "@oxlint/plugins"
  dependency-version: 1.78.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: astro
  dependency-version: 7.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@opencode-ai/sdk"
  dependency-version: 1.18.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@legendapp/list"
  dependency-version: 3.3.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@tanstack/react-router"
  dependency-version: 1.170.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: lucide-react
  dependency-version: 1.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: zustand
  dependency-version: 5.0.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@anthropic-ai/claude-agent-sdk"
  dependency-version: 0.3.232
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.117.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 17, 2026
@vercel

vercel Bot commented Aug 17, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated (UTC)
threadlines Ignored Ignored Preview Aug 18, 2026 3:06pm

Request Review

@github-actions github-actions Bot added vouch:trusted PR author is trusted by repo permissions or the VOUCHED list. size:L labels Aug 17, 2026
@badcuban badcuban mentioned this pull request Aug 18, 2026
Merged
@badcuban

badcuban commented Aug 18, 2026

Copy link
Copy Markdown
Collaborator

Superseded by #166, which bumps the same group to newer versions (including @anthropic-ai/claude-agent-sdk 0.3.234 with the required allowedTools compat change) after this branch conflicted with main.

@badcuban badcuban closed this Aug 18, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 18, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/production-dependencies-d1dc1158d3 branch August 18, 2026 15:34
badcuban added a commit that referenced this pull request Aug 19, 2026
@badcuban
chore(deps): bump provider SDKs and app dependencies to latest (#166)
3cc78d6 
* chore(deps): bump provider SDKs and app dependencies to latest

Replaces dependabot #164, which conflicted with main after #165 merged
and proposed versions that were already stale.

- @anthropic-ai/claude-agent-sdk ^0.3.234: picks up the background
  subagent resume fix (0.3.225) and the new context-usage, VCS-event,
  and effort fields. 0.3.233 removed the todo/task tools from the
  default surface on newer models, so the adapter now names them in
  allowedTools to keep the plan timeline populated.
- @anthropic-ai/sdk ^0.117.1, @github/copilot-sdk 1.0.11
- astro 7.2.3, @opencode-ai/sdk 1.18.18, @legendapp/list 3.3.7,
  @tanstack/react-router 1.170.29, router-plugin 1.168.32,
  lucide-react 1.32.0, zustand 5.0.15, wrangler 4.124.0
- @oxlint/plugins 1.78.0 (matching oxlint; 1.79.0 needs a coordinated
  oxlint-tsgolint/vite-plus bump)
- vitest family stays at 4.1.10: vite-plus 0.2.4 pins
  @vitest/browser-preview 4.1.10, and bumping vitest alone splits the
  family across two patch versions.

* chore(deps): hold @legendapp/list at 3.3.5

3.3.6/3.3.7 changed first-load scroll-follow behavior and the ChatView
stale-turn prompt-edit browser test failed twice in a row on CI with it
(passes locally). Pin back to the version with green CI evidence;
re-attempt 3.3.7 together with a test fix.

* ci: raise quality job timeout to 30 minutes

Dependency-bump branches invalidate every cache, and on slow runners the
job hits the 20-minute cap during browser runtime install (two runs
cancelled at 20m2Xs on #166).

* chore(deps): hold @tanstack/react-router at 1.170.28

The ChatView stale-turn prompt-edit browser test fails on every CI run
of this branch (element never renders, passes locally). 1.170.28 is the
newest router with a green CI run, and upstream is actively changing
pending-UI/navigation behavior in adjacent patches. Re-attempt the
router bump separately.

* ci: upload browser test failure screenshots as artifacts

Browser test failures on CI are usually invisible locally; the vitest
on-failure screenshot is the only evidence of what actually rendered.

* chore(deps): restore @legendapp/list 3.3.7 and react-router 1.170.29

The CI failures that prompted holding these back were runner
infrastructure (Azure apt mirror stalls hanging the browser runtime
install, plus one timing-flaky ChatView test that also failed on the
untouched dependabot branch). Both libraries fail and pass at both
versions; they were never the cause. This also clears the router-plugin
1.168.32 peer warning.

* ci: use the main Ubuntu mirror for apt before browser runtime install

azure.archive.ubuntu.com has been stalling apt for 20+ minutes on
hosted runners, starving the job timeout during playwright install
--with-deps. Rewrite apt sources to archive.ubuntu.com first.

* fix(ci): stabilize browser test workers

* fix(ci): stabilize stale-turn browser locator

* ci: update Ubuntu 24.04 apt mirror list

* test(web): reset ChatView environment state

* test(web): clear optimistic ChatView messages

* fix(server): preserve provider session identity
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code size:L vouch:trusted PR author is trusted by repo permissions or the VOUCHED list.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@badcuban