Skip to content

Bump the ai-runtime group across 1 directory with 2 updates#16

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/ai-runtime-66d31c6a71
Open

Bump the ai-runtime group across 1 directory with 2 updates#16
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/ai-runtime-66d31c6a71

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 26, 2026

Copy link
Copy Markdown

Bumps the ai-runtime group with 2 updates in the / directory: nodemailer and openai.

Updates nodemailer from 8.0.7 to 8.0.9

Release notes

Sourced from nodemailer's releases.

v8.0.9

8.0.9 (2026-05-26)

Bug Fixes

  • two pending security advisories (jsonTransport access bypass, List-* CRLF injection) (#1820) (5f69497)

v8.0.8

8.0.8 (2026-05-23)

Bug Fixes

  • enforce strict TLS for OAuth2 and Ethereal credential requests (#1818) (833d6e5)
  • four listener/stream leaks in SMTP transport, connection, pool (#1817) (850bb91)
Changelog

Sourced from nodemailer's changelog.

8.0.9 (2026-05-26)

Bug Fixes

  • two pending security advisories (jsonTransport access bypass, List-* CRLF injection) (#1820) (5f69497)

8.0.8 (2026-05-23)

Bug Fixes

  • enforce strict TLS for OAuth2 and Ethereal credential requests (#1818) (833d6e5)
  • four listener/stream leaks in SMTP transport, connection, pool (#1817) (850bb91)
Commits
  • 07303cb chore(master): release 8.0.9 (#1821)
  • 5f69497 fix: two pending security advisories (jsonTransport access bypass, List-* CRL...
  • 15138a8 chore(master): release 8.0.8 (#1819)
  • 850bb91 fix: four listener/stream leaks in SMTP transport, connection, pool (#1817)
  • 833d6e5 fix: enforce strict TLS for OAuth2 and Ethereal credential requests (#1818)
  • See full diff in compare view

Updates openai from 6.37.0 to 6.39.0

Release notes

Sourced from openai's releases.

v6.39.0

6.39.0 (2026-05-21)

Full Changelog: v6.38.0...v6.39.0

Features

  • api: api update (33ea11f)
  • api: manual updates (c210b09)
  • api: manual updates (92df9dc)
  • api: update OpenAPI spec or Stainless config (c7c0f52)

Bug Fixes

  • types: allow runtime fetch options (8f5003d)
  • typescript: upgrade tsc-multi so that it works with Node 26 (068f9c6)

Chores

  • api: docs updates (9d43adb)
  • tests: remove redundant File import (5465bbe)

v6.38.0

6.38.0 (2026-05-13)

Full Changelog: v6.37.0...v6.38.0

Features

  • api: add service_tier parameter to responses compact method (423e838)
Changelog

Sourced from openai's changelog.

6.39.0 (2026-05-21)

Full Changelog: v6.38.0...v6.39.0

Features

  • api: api update (33ea11f)
  • api: manual updates (c210b09)
  • api: manual updates (92df9dc)
  • api: update OpenAPI spec or Stainless config (c7c0f52)

Bug Fixes

  • types: allow runtime fetch options (8f5003d)
  • typescript: upgrade tsc-multi so that it works with Node 26 (068f9c6)

Chores

  • api: docs updates (9d43adb)
  • tests: remove redundant File import (5465bbe)

6.38.0 (2026-05-13)

Full Changelog: v6.37.0...v6.38.0

Features

  • api: add service_tier parameter to responses compact method (423e838)
Commits
  • 2002111 release: 6.39.0
  • d6dc9b7 feat(api): manual updates
  • 7444892 feat(api): api update
  • f5db3f1 fix(types): allow runtime fetch options
  • 33b391a chore(api): docs updates
  • bfe3016 fix(typescript): upgrade tsc-multi so that it works with Node 26
  • 3320b20 chore(tests): remove redundant File import
  • 3250890 feat(api): manual updates
  • d9fbf39 feat(api): update OpenAPI spec or Stainless config
  • 8a8436e codegen metadata
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the ai-runtime group with 2 updates in the / directory: [nodemailer](https://github.com/nodemailer/nodemailer) and [openai](https://github.com/openai/openai-node).


Updates `nodemailer` from 8.0.7 to 8.0.9
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](nodemailer/nodemailer@v8.0.7...v8.0.9)

Updates `openai` from 6.37.0 to 6.39.0
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/master/CHANGELOG.md)
- [Commits](openai/openai-node@v6.37.0...v6.39.0)

---
updated-dependencies:
- dependency-name: nodemailer
  dependency-version: 8.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ai-runtime
- dependency-name: openai
  dependency-version: 6.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ai-runtime
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants