fix(deps): update all non-major dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@ai-sdk/provider (source)	3.0.8 → 3.0.11
@anthropic-ai/sdk	0.78.0 → 0.106.0
@commitlint/cli (source)	20.4.2 → 20.5.3
@commitlint/config-conventional (source)	20.4.2 → 20.5.3
@jest/globals (source)	30.2.0 → 30.4.1
@types/node (source)	25.3.0 → 25.9.4
ai (source)	6.0.97 → 6.0.211
commitizen	4.3.1 → 4.3.2
dotenv	17.3.1 → 17.4.2
jest (source)	30.2.0 → 30.4.2
openai	6.22.0 → 6.45.0
semantic-release	25.0.3 → 25.0.5
ts-jest (source)	29.4.6 → 29.4.11

---

Release Notes

vercel/ai (@​ai-sdk/provider)

v3.0.11

Compare Source

Patch Changes

• 1b40ac7: Publish all packages under the @ai-v6 dist tag.

v3.0.10

Compare Source

Patch Changes

• a727da4: chore: ensure consistent import handling and avoid import duplicates or cycles

v3.0.9

Compare Source

Patch Changes

• a7f3c72: trigger release for all packages after provenance setup

anthropics/anthropic-sdk-typescript (@​anthropic-ai/sdk)

v0.106.0

Compare Source

Full Changelog: sdk-v0.105.0...sdk-v0.106.0

Features

• client: add support for system.message streaming events (a7c14b7)

Bug Fixes

• helpers: single source for x-stainless-helper, append semantics, and tag the fallback middleware (#​107) (106bea0)

Chores

• api: add support for new refusal category (b38fd01)
• api: add support for sending User Profile ID in request headers (198583e)

v0.105.0

Compare Source

Full Changelog: sdk-v0.104.2...sdk-v0.105.0

Features

• api: add support for new code_execution_20260120 tool (8dc2b54)
• stream: lazily parse partial tool json input (#​99) (e55ceee)

Chores

• internal/deps: bump swc to 1.15.40 (#​97) (a1d4d75)
• internal: use are the types wrong directly (#​94) (3d362af)
• tests: stop using deprecated models (#​98) (65ae1af)

v0.104.2

Compare Source

Full Changelog: sdk-v0.104.1...sdk-v0.104.2

Chores

• api: remove retired models from API and SDKs (a942876)

v0.104.1

Compare Source

Full Changelog: sdk-v0.104.0...sdk-v0.104.1

Bug Fixes

• api: add frontier_llm refusal category (465e686)

v0.104.0

Compare Source

Full Changelog: sdk-v0.103.0...sdk-v0.104.0

Features

• api: add support for Managed Agents deployments and environment variable credentials (d01e38b)

v0.103.0

Compare Source

Full Changelog: sdk-v0.102.0...sdk-v0.103.0

Features

• api: add support for claude-mythos-5 and claude-fable-5, with support for server-side fallbacks on refusal (cc337f7)
• client: adds client-side fallbacks middleware for API providers that do not support server-side fallbacks (cc337f7)
• middleware: add ctx.logger (#​55) (edd1454)

Bug Fixes

• client: 3p middleware ordering (#​53) (2a4c339)

v0.102.0

Compare Source

Full Changelog: sdk-v0.101.0...sdk-v0.102.0

Features

• api: small updates to Managed Agents types (8ba4f92)

Bug Fixes

• client: run middleware before request signing (#​45) (95f1a4a)

v0.101.0

Compare Source

Full Changelog: sdk-v0.100.1...sdk-v0.101.0

Features

• client: add support for middleware (9b01120)

Bug Fixes

• apply request timeout to inner fetch only, not middleware chain (#​40) (25c13f6)
• streaming: carry stop_details through beta message_delta accumulation (ed3fec7)
• streaming: correctly parse json numbers with scientific notation (#​9) (7d5e642)

Chores

• internal: fix artifact url (925ec27)
• internal: fix branch names (fa3cf2c)
• internal: update private repo name (a8ac213)

Documentation

• point security reports to Anthropic's HackerOne program (#​16) (5c7912c)

v0.100.1

Compare Source

Full Changelog: sdk-v0.100.0...sdk-v0.100.1

Bug Fixes

• streaming: carry encrypted_content on beta compaction blocks (#​1025) (eccddf3)

Chores

• client: update lockfiles to have proper dependencies on standardwebhooks (5e9b523)

v0.100.0

Compare Source

Full Changelog: sdk-v0.99.0...sdk-v0.100.0

Features

• api: Add support for claude-opus-4-8, mid-conversation system blocks, and usage.output_tokens_details (bb0bf27)

Documentation

• replace literal newlines (66ba142)

v0.99.0

Compare Source

Full Changelog: sdk-v0.98.1...sdk-v0.99.0

Features

• support custom file size caps (#​1029) (814cd4c)

Bug Fixes

• streaming: carry stop_details through message_delta accumulation (#​1027) (198bc27)

v0.98.1

Full Changelog: sdk-v0.98.0...sdk-v0.98.1

Bug Fixes

• client: preserve directory prefix in skills.versions.create uploads (#​1024) (abbcd6a)

Chores

• client: swap to using Trusted Publishing (821a50e)
• examples: rename managed-agents private-sandbox-worker example to self-hosted-sandbox-worker (#​1023) (49fe221)

v0.98.0

Full Changelog: sdk-v0.97.1...sdk-v0.98.0

Features

• api: Add support for thinking-token-count beta for estimated tokens in thinking block deltas when streaming (0528d47)

v0.97.1

Full Changelog: sdk-v0.97.0...sdk-v0.97.1

Bug Fixes

• runner: skip tool calls SessionToolRunner does not own (9987379)

v0.97.0

Full Changelog: sdk-v0.96.0...sdk-v0.97.0

Features

• client: Add support for self-hosted sandboxes in CMA with sandbox helpers (659a343)

Bug Fixes

• typescript: upgrade tsc-multi so that it works with Node 26 (623f71c)

Chores

• tests: remove redundant File import (cf821fc)

v0.96.0

Full Changelog: sdk-v0.95.2...sdk-v0.96.0

Features

• api: Add BetaManagedAgentsSearchResultBlock types (08f02f3)
• api: Add support for cache diagnostics beta (eafbd6d)

Bug Fixes

• zod: ensure only zod/v4 types are used (#​992) (9e08bcc)

Chores

• api: spec updates (27d64ef)

v0.95.2

Full Changelog: sdk-v0.95.1...sdk-v0.95.2

v0.95.1

Full Changelog: sdk-v0.95.0...sdk-v0.95.1

Chores

• redact api-key headers in debug logs (fad8fee)

v0.95.0

Full Changelog: sdk-v0.94.0...sdk-v0.95.0

Features

• api: add support for Managed Agents multiagents and outcomes, webhooks, vault validation (e0c0e9b)

Bug Fixes

• api: Adjust webhook configuration (deed3f6)

v0.94.0

Full Changelog: sdk-v0.93.0...sdk-v0.94.0

Features

• client: allow targeting a workspace for OIDC federation token exchange (bde6620)

v0.93.0

Full Changelog: sdk-v0.92.0...sdk-v0.93.0

Features

• client: add Workload Identity Federation, interactive OAuth, and auth profiles (d5d6abd)

v0.92.0

Full Changelog: sdk-v0.91.1...sdk-v0.92.0

Features

• api: improve Managed Agents APIs (ca1bf4a)
• support setting headers via env (32f67d4)

Bug Fixes

• bedrock: throw APIError for error events delivered in chunk frames (#​1021) (3ae887b)

Chores

• format: run eslint and prettier separately (7ce257c)
• internal: codegen related update (f08cc77)

v0.91.1

Full Changelog: sdk-v0.91.0...sdk-v0.91.1

Bug Fixes

• memory: use restrictive file mode for memory files (#​901) (6db3b7e)

Chores

• formatter: run prettier and eslint separately (974d22f)

v0.91.0

Full Changelog: sdk-v0.90.0...sdk-v0.91.0

Features

• api: CMA Memory public beta (ddf732f)
• bedrock: use auth header for mantle client (#​866) (aec801a)

Bug Fixes

• api: fix errors in api spec (ae10768)
• api: restore missing features (1a5b47b)

Chores

• internal: more robust bootstrap script (7716e19)
• tests: bump steady to v0.22.1 (219a971)

v0.90.0

Full Changelog: sdk-v0.89.0...sdk-v0.90.0

Features

• api: add claude-opus-4-7, token budgets and user_profiles (b26134b)

Chores

• actually delete release-doctor.yml (0fe984d)
• ci: remove release-doctor workflow (08e58bd)

v0.89.0

Full Changelog: sdk-v0.88.0...sdk-v0.89.0

Features

• api: manual updates (57c2a11)
• api: mark Sonnet and Opus 4 as deprecated (eff41b7)

Bug Fixes

• streaming: add missing events (4c52919)

v0.88.0

Full Changelog: sdk-v0.87.0...sdk-v0.88.0

Features

• vertex eu region (#​882) (1933857)

Documentation

• improve examples (de4f483)
• update examples (454e1c5)

v0.87.0

Full Changelog: sdk-v0.86.1...sdk-v0.87.0

Features

• api: Add beta advisor tool (1e99a8d)

v0.86.1

Full Changelog: sdk-v0.86.0...sdk-v0.86.1

Chores

• update @​anthropic-ai/sdk dependency version (#​870) (036342b)

v0.86.0

Full Changelog: sdk-v0.85.0...sdk-v0.86.0

Features

• api: add support for Claude Managed Agents (2ef732a)

Chores

• internal: codegen related update (d644830)

v0.85.0

Full Changelog: sdk-v0.84.0...sdk-v0.85.0

Features

• client: Create Bedrock Mantle client (#​810) (2f1f4a1)

v0.84.0

Full Changelog: sdk-v0.83.0...sdk-v0.84.0

Features

• api: Add support for claude-mythos-preview (d4057b0)
• tools: add AbortSignal support for tool runner (#​848) (972d591)

v0.82.0

Full Changelog: sdk-v0.81.0...sdk-v0.82.0

Features

• api: add structured stop_details to message responses (031328a)
• prepare aws package (#​782) (f351d4d)
• support API keys in Bedrock SDK (#​824) (be6c608)

Chores

• tests: bump steady to v0.20.2 (6cf12cc)

v0.81.0

Full Changelog: sdk-v0.80.0...sdk-v0.81.0

Features

• add .type field to APIError for error kind identification (#​790) (4bf637d)

Bug Fixes

• memory: append path separator in validatePath prefix check (0ac69b3)

Chores

• ci: run builds on CI even if only spec metadata changed (70b657a)
• ci: skip lint on metadata-only changes (69bdc94)
• internal: codegen related update (7ff7390)
• internal: update gitignore (46d6667)
• internal: update multipart form array serialization (d55b07d)
• tests: bump steady to v0.19.4 (4957a5e)
• tests: bump steady to v0.19.5 (c511ae0)
• tests: bump steady to v0.19.6 (6d2b4b9)
• tests: bump steady to v0.19.7 (d6cff9d)
• tests: bump steady to v0.20.1 (284561f)

v0.80.0

Full Changelog: sdk-v0.79.0...sdk-v0.80.0

Features

• api: manual updates (dd12f1a)
• api: manual updates (9c0a077)

Chores

• internal: tweak CI branches (4a5819e)

v0.79.0

Full Changelog: sdk-v0.78.0...sdk-v0.79.0

Features

• add support for filesystem memory tools (#​599) (1064199)
• api: chore(config): clean up model enum list (#​31) (07727a6)
• api: GA thinking-display-setting (4dc8df4)
• tests: update mock server (e5c3be9)

Bug Fixes

• docs/contributing: correct pnpm link command (16bf66c)
• internal: skip tests that depend on mock server (07417e5)
• zod: use v4 import path for Zod ^3.25 compatibility (#​925) (c6c0ac8)

Chores

• client: remove unused import (3827ab5)
• internal: codegen related update (2c1fc10)
• internal: improve import alias names (5b9615b)
• internal: move stringifyQuery implementation to internal function (16239f3)
• internal: update dependencies to address dependabot vulnerabilities (6fdea5e)
• mcp-server: improve instructions (66e5363)
• remove accidentally committed file (#​929) (0989113)
• tests: unskip tests that are now supported in steady (616a98a)

Documentation

• streamline and standardize docs (#​687) (dbdc5d3)

conventional-changelog/commitlint (@​commitlint/cli)

v20.5.3

Compare Source

Note: Version bump only for package @​commitlint/cli

v20.5.2

Compare Source

Note: Version bump only for package @​commitlint/cli

v20.5.0

Compare Source

Bug Fixes

• cli: validate that --cwd directory exists before execution (#​4658) (cf80f75), closes #​4595

20.4.4 (2026-03-12)

Note: Version bump only for package @​commitlint/cli

20.4.3 (2026-03-03)

Bug Fixes

• footer parser does not escape special chars for regex #​4560 (#​4634) (8ff7c7f)

20.4.2 (2026-02-19)

Note: Version bump only for package @​commitlint/cli

20.4.1 (2026-02-02)

Note: Version bump only for package @​commitlint/cli

v20.4.4

Compare Source

Note: Version bump only for package @​commitlint/cli

v20.4.3

Compare Source

Bug Fixes

• footer parser does not escape special chars for regex #​4560 (#​4634) (8ff7c7f)

conventional-changelog/commitlint (@​commitlint/config-conventional)

v20.5.3

Compare Source

Note: Version bump only for package @​commitlint/config-conventional

v20.5.0

Compare Source

Note: Version bump only for package @​commitlint/config-conventional

20.4.4 (2026-03-12)

Note: Version bump only for package @​commitlint/config-conventional

20.4.3 (2026-03-03)

Bug Fixes

• footer parser does not escape special chars for regex #​4560 (#​4634) (8ff7c7f)

20.4.2 (2026-02-19)

Note: Version bump only for package @​commitlint/config-conventional

20.4.1 (2026-02-02)

Note: Version bump only for package @​commitlint/config-conventional

v20.4.4

Compare Source

Note: Version bump only for package @​commitlint/config-conventional

v20.4.3

Compare Source

Bug Fixes

• footer parser does not escape special chars for regex #​4560 (#​4634) (8ff7c7f)

jestjs/jest (@​jest/globals)

v30.4.1

Compare Source

Features

• [jest-config, jest-core, jest-runner, jest-schemas, jest-types] Allow custom runner configuration options via tuple format ['runner-path', {options}] (#​16141)

Fixes

• [jest-runtime] Align CJS-from-ESM default export with Node: module.exports is always the ESM default, __esModule unwrapping is no longer applied (#​16143)

v30.4.0

Compare Source

Features

• [babel-jest] Support collecting coverage from .mts, .cts (and other) files (#​15994)
• [jest-circus, jest-cli, jest-config, jest-core, jest-jasmine2, jest-types] Add --collect-tests flag to discover and list tests without executing them (#​16006)
• [jest-config, jest-runner, jest-worker] Add workerGracefulExitTimeout config option to control how long workers are given to exit before being force-killed (#​15984)
• [jest-config] Add support for jest.config.mts as a valid configuration file (#​16005)
• [jest-config, jest-core, jest-reporters, jest-runner] verbose and silent can now be set per-project; the project-level value overrides the global value for that project's tests (#​16133)
• [@jest/fake-timers] Accept Temporal.Duration in jest.advanceTimersByTime() and jest.advanceTimersByTimeAsync() (#​16128)
• [@jest/fake-timers] Accept Temporal.Instant and Temporal.ZonedDateTime in jest.setSystemTime() and useFakeTimers({now}) (#​16128)
• [@jest/fake-timers] Support faking Temporal.Now.* (#​16131)
• [jest-mock] Add clearMocksOnScope(scope) on ModuleMocker for clearing every mock function exposed on a scope object (#​16088)
• [jest-resolve] Add canResolveSync() on Resolver so callers can detect when a user-configured resolver only exports an async hook (#​16064)
• [jest-runtime] Use synchronous evaluate() for ES modules without top-level await on Node versions that support it (v24.9+), and prefer the synchronous transform path when a sync transformer is configured (#​16062)
• [jest-runtime] Support require() of ES modules on Node v24.9+ (#​16074)
• [jest-runtime] Validate TC39 import attributes (with { type: 'json' }) on ESM imports (#​16127)
• [@jest/transform] Add canTransformSync(filename) on ScriptTransformer so callers can pick the sync vs async transform path (#​16062)
• [jest-util] Add isError helper (#​16076)
• [pretty-format] Support React 19 (#​16123)

Fixes

• [expect-utils] Fix toStrictEqual failing on structuredClone results due to cross-realm constructor mismatch (#​15959)
• [@jest/expect-utils] Prevent toMatchObject/subset matching from throwing when encountering exotic iterables (#​15952)
• [fake-timers] Convert Date to milliseconds before passing to @sinonjs/fake-timers (#​16029)
• [jest] Export GlobalConfig and ProjectConfig TypeScript types (#​16132)
• [jest-circus] Prevent crash when asyncError is undefined for non-Error throws (#​16003)
• [jest-circus, jest-jasmine2] Include Error.cause in JSON failureMessages output (#​15967)
• [jest-config] Fix preset path resolution on Windows when the preset uses subpath exports (#​15961)
• [jest-config] Allow collectCoverage and coverageProvider in project config without a validation warning (#​16132)
• [jest-config] Project config validator now emits "is not supported in an individual project configuration" instead of "probably a typing mistake" for known global-only options (#​16132)
• [jest-environment-node] Fix --localstorage-file warning on Node 25+ (#​16086)
• [jest-reporters] Apply global coverage threshold to unmatched pattern files in addition to glob/path thresholds (#​16137)
• [jest-reporters, jest-runner, jest-runtime, jest-transform] Fix coverage report not showing correct code coverage when using projects config option (#​16140)
• [jest-runtime] Resolve expect and @jest/expect from the internal module registry so test-file imports share the same JestAssertionError as the global expect (#​16130)
• [jest-runtime] Improve CJS-from-ESM interop: __esModule/Babel default unwrap, broader named-export coverage, and shared CJS singleton across importers (#​16050)
• [jest-runtime] Load .js files with ESM syntax but no "type":"module" marker as native ESM (#​16050)
• [jest-runtime] Extend the .js-with-ESM-syntax fallback to require() on Node v24.9+ - falls back to require(esm) when the CJS parser rejects ESM syntax (#​16078)
• [jest-runtime] Fix deadlocks and double-evaluation in concurrent ESM and wasm imports (#​16050)
• [jest-runtime] Fix error when require() is called after the Jest environment has been torn down (#​15951)
• [jest-runtime] Fix missing error when import() is called after the Jest environment has been torn down (#​16080)
• [jest-runtime] Fix virtual unstable_mockModule registrations not respected in ESM (#​16081)
• [jest-runtime] Apply moduleNameMapper when resolving modules with require.resolve() and the paths option (#​16135)

Chore & Maintenance

• [@jest/fake-timers] Upgrade @sinonjs/fake-timers (#​16139)
• [jest-runtime] Use synchronous `

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.