Commit Graph

604 Commits

Author SHA1 Message Date
github-actions[bot] c0bc769230 chore: version packages (#773)
This PR was opened by the [Changesets
release](https://github.com/changesets/action) GitHub action. When
you're ready to do a release, you can merge this and the packages will
be published to npm automatically. If you're not ready to do a release
yet, that's fine, whenever you add more changesets to main, this PR will
be updated.


# Releases
## deepagents-acp@0.1.27

### Patch Changes

- Updated dependencies
[[`bcc2f5d`](https://github.com/langchain-ai/deepagentsjs/commit/bcc2f5d0a8ac22898b716fc00b425fee208c8b86),
[`95afe3e`](https://github.com/langchain-ai/deepagentsjs/commit/95afe3e2682622067a263d2d24129985535b0f3b)]:
  - deepagents@1.13.1
## deepagents@1.13.1

### Patch Changes

- [#771](https://github.com/langchain-ai/deepagentsjs/pull/771)
[`bcc2f5d`](https://github.com/langchain-ai/deepagentsjs/commit/bcc2f5d0a8ac22898b716fc00b425fee208c8b86)
Thanks
[@thushanth-bengre-langchain](https://github.com/thushanth-bengre-langchain)!
- fix(deepagents): require `mode: "fork"` on `ForkedSubAgent`

`ForkedSubAgent.mode` was optional, defaulting to being omitted per its
own documented example. Since `SubAgent.systemPrompt` is also optional,
a `ForkedSubAgent` that omitted `mode` had the same shape as a plain
`SubAgent` and silently misrouted between forking and non-forking
behavior. `mode: "fork"` is now required on `ForkedSubAgent`, closing
the ambiguity.

- [#776](https://github.com/langchain-ai/deepagentsjs/pull/776)
[`95afe3e`](https://github.com/langchain-ai/deepagentsjs/commit/95afe3e2682622067a263d2d24129985535b0f3b)
Thanks [@baskaryan](https://github.com/baskaryan)! - chore(deepagents):
widen the `langsmith` peer range to `>=0.7.1 <0.10.0`

The upper bound stops below 0.10.0 rather than 1.0.0 because langsmith
is pre-1.0 and ships breaking changes in minor bumps, so a new minor
should be adopted deliberately instead of pre-authorized.
## @deepagents/evals@0.0.26

### Patch Changes

- Updated dependencies
[[`bcc2f5d`](https://github.com/langchain-ai/deepagentsjs/commit/bcc2f5d0a8ac22898b716fc00b425fee208c8b86),
[`95afe3e`](https://github.com/langchain-ai/deepagentsjs/commit/95afe3e2682622067a263d2d24129985535b0f3b)]:
  - deepagents@1.13.1

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
deepagents-acp@0.1.27 deepagents@1.13.1
2026-08-21 13:32:29 -07:00
Bagatur 95afe3e268 chore(deepagents): widen langsmith peer range to >=0.7.1 <0.10.0 (#776)
`langsmith` is declared as `^0.7.1`, which resolves to at most
**0.7.17** — the last release on that line. langsmith is now on 0.9.x,
so the range is pinned to a line it has moved off.

This matters more than a stale range usually would, because `langsmith`
is a real **dependency** of `@langchain/core` (`>=0.5.0 <1.0.0`), not
only a peer. So the narrow range doesn't just warn — it splits installs
across two langsmith copies, and two copies means two sets of
module-level singletons.

That split is already present in this workspace:

```
deepagents link:../../libs/deepagents
└── langsmith 0.7.10          <-- constrained by ^0.7.1
langchain 1.5.10
  └── langsmith 0.8.9
@langchain/langgraph 1.4.12
  └── langsmith 0.8.9
```

After this change the lockfile collapses to a single `langsmith@0.8.9`.

It also currently blocks downstream consumers: a service that bumps to
langsmith 0.9.x while depending on deepagents gets both an unmet-peer
warning and the dual-copy split, which surfaces as `tsc` errors like
*"Types have separate declarations of a private property 'apiKey'"*
where a `Client` crosses into `@langchain/core`'s tracer types.

### Why `<0.10.0` and not `<1.0.0`

langsmith is pre-1.0 and ships breaking changes in minor bumps — the
generated v2 client paths moved from `/v2/...` to `/api/v2/...` within
the 0.7 → 0.8 minor, for example. So a new minor should be adopted
deliberately rather than pre-authorized. `<0.10.0` covers every line
that exists today and forces a conscious bump at 0.10.

### Why widen rather than move to `^0.9`

Raising the floor to 0.9 would be a breaking change for consumers still
on 0.7.x/0.8.x, so it would need a major bump. Widening is
backward-compatible and unblocks the same people.

`deepagents`' langsmith surface is small — `Client`, plus
`SandboxClient` / `Sandbox` / `LangSmithResourceNotFoundError` /
`LangSmithSandboxError` and four option types from
`langsmith/experimental/sandbox` — and all of it is present and
unchanged across 0.8 and 0.9.

## Test Plan

- [x] `pnpm --filter deepagents typecheck` on the deduped 0.8.9
resolution — clean
- [x] Same, with `langsmith` forced to 0.9.0 — clean
- [x] `pnpm --filter deepagents test:unit` against 0.9.0 — 43 files,
1395 tests passing, no type errors
- [x] `pnpm format:check` and `pnpm lint` — clean
- [x] Maintainer sanity-check on the upper bound; happy to use `<0.9.0`
if you'd rather not bless 0.9 yet

One thing I noticed but did not change: `langsmith` is a peer with no
corresponding `devDependencies` entry, so CI exercises whatever resolves
transitively (0.7.10 before this change, 0.8.9 after) rather than the
peer range's edges. Pinning a dev version would make the peer explicitly
tested — happy to add it here or leave it as a follow-up.

Authored by Claude (Claude Code).

---------

Signed-off-by: Hunter Lovell <40191806+hntrl@users.noreply.github.com>
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
Co-authored-by: Hunter Lovell <40191806+hntrl@users.noreply.github.com>
2026-08-21 12:06:16 -07:00
Thushanth Bengre bcc2f5d0a8 fix(deepagents): restore required systemPrompt and fix isForkedSubAgent check (#771)
`isForkedSubAgent` was checking `mode === "fork"`, but mode defaults to
omitted on both `SubAgent` and `ForkedSubAgent`. A `ForkedSubAgent` that
omits mode (the documented default) failed that check and fell through
to the plain-`SubAgent` branch, ending up with no fork and no system
prompt.

Restores `SubAgent.systemPrompt` as required (it must stay required so a
plain SubAgent can't structurally collapse into a ForkedSubAgent) and
switches `isForkedSubAgent` back to checking systemPrompt presence.
2026-08-20 18:30:37 -04:00
John Kennedy cb3dbec4e7 fix(deps): patch nanoid, js-yaml, and postcss advisories (#770)
## Summary

Patches all four currently open Dependabot alerts in `pnpm-lock.yaml`
using narrow root-level pnpm overrides:

- `nanoid` 3.3.16 → 3.3.18 (GHSA-2v37-7h3g-55p8 / CVE-2026-67213)
- `js-yaml` 3.15.0 → 3.15.1 (GHSA-5p4m-2wfm-xmqj)
- `js-yaml` 4.3.0 → 4.3.1 (GHSA-5p4m-2wfm-xmqj)
- `postcss` 8.5.19 → 8.5.23 (GHSA-fxqj-rqcc-2cmp / CVE-2026-69153)

No direct application dependencies or runtime code are changed.

## Validation

- [x] `corepack pnpm install --frozen-lockfile`
- [x] `corepack pnpm format:check`
- [x] Verified patched lockfile resolutions are present and prior
vulnerable resolutions are absent
- [ ] `corepack pnpm lint` — blocked by an `oxlint` allocator panic in
this sandbox (exit 134)
- [ ] `corepack pnpm --filter "./libs/*" typecheck` — blocked by
pre-existing missing `@langchain/sandbox-standard-tests/vitest` build
artifacts/imports in `libs/deepagents`

Scoped to the four open Dependabot alerts.

Co-authored-by: langsmith-fleet[bot] <langsmith-fleet[bot]@users.noreply.github.com>
2026-08-19 23:25:19 -07:00
github-actions[bot] 43ef0e695a chore: version packages (#765)
This PR was opened by the [Changesets
release](https://github.com/changesets/action) GitHub action. When
you're ready to do a release, you can merge this and the packages will
be published to npm automatically. If you're not ready to do a release
yet, that's fine, whenever you add more changesets to main, this PR will
be updated.


# Releases
## deepagents@1.13.0

### Minor Changes

- [#675](https://github.com/langchain-ai/deepagentsjs/pull/675)
[`ba8d4aa`](https://github.com/langchain-ai/deepagentsjs/commit/ba8d4aa71664c23027e57eee0fcaa2701d60408f)
Thanks [@hntrl](https://github.com/hntrl)! - feat(filesystem): add
recursive delete tool

- [#752](https://github.com/langchain-ai/deepagentsjs/pull/752)
[`b20d6ad`](https://github.com/langchain-ai/deepagentsjs/commit/b20d6adc3dc7caf01281832548a17f381561318c)
Thanks
[@thushanth-bengre-langchain](https://github.com/thushanth-bengre-langchain)!
- feat(deepagents): add `ForkedSubAgent` for subagent conversation
forking

Lets a subagent inherit the parent's conversation history instead of
only seeing the task description.

### Patch Changes

- [#759](https://github.com/langchain-ai/deepagentsjs/pull/759)
[`85a55e1`](https://github.com/langchain-ai/deepagentsjs/commit/85a55e14da6cb19877ddd81d898d78d6ededfe74)
Thanks [@christian-bromann](https://github.com/christian-bromann)! -
fix(deepagents): cap sandbox glob find so root searches cannot OOM the
host

Recursive glob listed every path under the search root (and with `-L`
could loop through `/proc/*/root`). Prune virtual filesystems and
soft-cap find output so a `glob("**/x", "/")` cannot exhaust the runtime
heap.

- [#768](https://github.com/langchain-ai/deepagentsjs/pull/768)
[`f124127`](https://github.com/langchain-ai/deepagentsjs/commit/f124127255fbd4e4b03eb84a4b39c70421a07e35)
Thanks [@casparb](https://github.com/casparb)! - fix(deepagents): accept
permission paths that exactly equal a composite route

A permission path equal to a single-file mount (e.g. `/instructions.md`)
was rejected when the backend supported execution, forcing users to
write `/instructions.md/**`. The route-scoping check now also accepts
the route root itself. Sibling prefixes such as `/workspace2/**` for
route `/workspace` remain rejected.

- [#769](https://github.com/langchain-ai/deepagentsjs/pull/769)
[`d4045de`](https://github.com/langchain-ai/deepagentsjs/commit/d4045de67715bf3cd6198b0d516d176c0e4b75d0)
Thanks [@hntrl](https://github.com/hntrl)! - chore(deps): update
langgraph deps to track serialization fix
## deepagents-acp@0.1.26

### Patch Changes

- [#769](https://github.com/langchain-ai/deepagentsjs/pull/769)
[`d4045de`](https://github.com/langchain-ai/deepagentsjs/commit/d4045de67715bf3cd6198b0d516d176c0e4b75d0)
Thanks [@hntrl](https://github.com/hntrl)! - chore(deps): update
langgraph deps to track serialization fix

- Updated dependencies
[[`85a55e1`](https://github.com/langchain-ai/deepagentsjs/commit/85a55e14da6cb19877ddd81d898d78d6ededfe74),
[`f124127`](https://github.com/langchain-ai/deepagentsjs/commit/f124127255fbd4e4b03eb84a4b39c70421a07e35),
[`d4045de`](https://github.com/langchain-ai/deepagentsjs/commit/d4045de67715bf3cd6198b0d516d176c0e4b75d0),
[`ba8d4aa`](https://github.com/langchain-ai/deepagentsjs/commit/ba8d4aa71664c23027e57eee0fcaa2701d60408f),
[`b20d6ad`](https://github.com/langchain-ai/deepagentsjs/commit/b20d6adc3dc7caf01281832548a17f381561318c)]:
  - deepagents@1.13.0
## @langchain/quickjs@0.6.2

### Patch Changes

- [#769](https://github.com/langchain-ai/deepagentsjs/pull/769)
[`d4045de`](https://github.com/langchain-ai/deepagentsjs/commit/d4045de67715bf3cd6198b0d516d176c0e4b75d0)
Thanks [@hntrl](https://github.com/hntrl)! - chore(deps): update
langgraph deps to track serialization fix
## @deepagents/evals@0.0.25

### Patch Changes

- Updated dependencies
[[`85a55e1`](https://github.com/langchain-ai/deepagentsjs/commit/85a55e14da6cb19877ddd81d898d78d6ededfe74),
[`f124127`](https://github.com/langchain-ai/deepagentsjs/commit/f124127255fbd4e4b03eb84a4b39c70421a07e35),
[`d4045de`](https://github.com/langchain-ai/deepagentsjs/commit/d4045de67715bf3cd6198b0d516d176c0e4b75d0),
[`ba8d4aa`](https://github.com/langchain-ai/deepagentsjs/commit/ba8d4aa71664c23027e57eee0fcaa2701d60408f),
[`b20d6ad`](https://github.com/langchain-ai/deepagentsjs/commit/b20d6adc3dc7caf01281832548a17f381561318c)]:
  - deepagents@1.13.0

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
@langchain/quickjs@0.6.2 deepagents-acp@0.1.26 deepagents@1.13.0
2026-08-19 20:01:24 -07:00
Thushanth Bengre b20d6adc3d feat(deepagents): introduce ForkedSubAgent type for subagent conversation forking (#752)
## Summary

Replaces the `mode` field on `SubAgent` with a new `ForkedSubAgent` type
for opt-in conversation forking. A `ForkedSubAgent` has no
`systemPrompt` of its own — it always inherits the parent's message
history and exact system prompt, plus mirrored middleware when its model
matches the parent's. `CompiledSubAgent` keeps its existing `mode:
"handoff" | "fork"` field, unchanged.

## Changes

- New `ForkedSubAgent` type — same shape as `SubAgent` minus
`systemPrompt`; always forks.
- `SubAgent` no longer has a `mode` field — always isolated (same as
before this feature existed).
- `CompiledSubAgent.mode` unchanged.
- Mirrored middleware (memory/custom) only added when the model matches
the parent's; the system prompt itself is inherited unconditionally
either way.
- Updated fork test coverage in `subagent.test.ts` for the new type.

---------

Co-authored-by: Hunter Lovell <hunter@hntrl.io>
2026-08-19 19:56:11 -07:00
Hunter Lovell d4045de677 chore(deepagents): update langgraph deps (#769)
patches a ser/de bug for deepagents
2026-08-19 18:48:55 -07:00
Caspar Broekhuizen f124127255 fix(deepagents): accept permission paths equal to a composite route root (#768)
## Description

When filesystem `permissions` are combined with an execution-capable
backend, `createFilesystemMiddleware` requires every permission path to
be scoped to a `CompositeBackend` route. That check required a trailing
separator, so a permission path that exactly equals a single-file mount
(route `/instructions.md`, permission `/instructions.md`) was rejected
and users had to write `/instructions.md/**`. Python deepagents accepts
the exact form; this syncs JS with it by also accepting the route root
itself, mirroring `CompositeBackend.isPathWithinRoute`. It deliberately
does not adopt Python's looser bare `startsWith`, so sibling prefixes
like `/workspace2/**` for route `/workspace` are still rejected.

## Test Plan
- [ ] `npx vitest run src/middleware/fs.permissions.test.ts` in
`libs/deepagents` (new cases: exact file-mount route and exact directory
route root are accepted; sibling-prefix and `/**` rejections unchanged).

Made by [Open
SWE](https://openswe.vercel.app/agents/2758c734-16e9-54c3-b89f-ce698a566e71)

---------

Co-authored-by: Caspar Broekhuizen <25157475+casparb@users.noreply.github.com>
Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com>
Co-authored-by: Hunter Lovell <hunter@hntrl.io>
2026-08-19 10:03:48 -07:00
Christian Bromann 85a55e14da fix(deepagents): cap sandbox glob find so root searches cannot OOM the host (#759)
## Summary

Recursive glob listed every path under the search root, and with -L
could loop through proc pid root symlinks into the host heap.

- Sandbox `glob` listed the whole search tree via `find -L` and buffered
it in the host process, so `glob("**/…", "/")` could OOM the runtime.
Prune virtual filesystems and soft-cap find output; mark `truncated`
when the cap is hit.
2026-08-18 22:03:40 -07:00
Hunter Lovell ba8d4aa716 feat(deepagents): add recursive delete tool (#675)
## Summary

This adds a destructive `delete` filesystem tool backed by the core backend protocol, with recursive deletion for files/directories and write-permission enforcement over the whole target subtree.

## Changes

### Core filesystem backends

- Added `DeleteResult` and optional `delete(filePath)` support to the
backend protocol and adapters.
- Implemented recursive delete behavior for state, store, filesystem,
sandbox, context-hub, and composite backends.
- Preserved filesystem path containment and symlink safety: filesystem
deletes remove symlinks as links and do not follow them.
- Converts unsupported routed deletes in `CompositeBackend` into normal
backend errors.

### Filesystem middleware

- Added the final `delete` tool name with recursive file/directory
semantics.
- Treats `delete` as a write operation for filesystem permissions.
- Refuses recursive deletes if any deny-write permission pattern
overlaps the target subtree, without enumerating filesystem contents
first.
- Filters the `delete` tool out when the resolved backend does not
support deletion.

### Tests, evals, and prompts

- Added backend and middleware coverage for recursive deletes, missing
paths, symlink safety, unsupported backends, and permission denial.
- Added file-operation eval coverage for deleting a file and deleting a
directory recursively.
- Updated core filesystem prompts and sandbox examples to document the
new `delete` tool.
2026-08-18 20:04:11 -07:00
Hunter Lovell c0b3e3a30e test(deepagents): de-flake custom StateGraph subagent interrupt test (#763)
## Summary

De-flakes the integration test `should handle interrupt() in a custom
StateGraph sub-agent` in
`libs/deepagents/src/middleware/subagents-hitl.int.test.ts`, which
intermittently fails in CI with:

```
AssertionError: expected undefined to be defined
 at src/middleware/subagents-hitl.int.test.ts:301:36   // expect(result.__interrupt__).toBeDefined()
```

## Root cause

The test relies on a **live LLM** deciding to call the `task` tool to
delegate to the `document-reviewer` sub-agent. The original prompt only
softly suggested this ("Use the task tool to launch the
document-reviewer sub-agent"). When the model answers directly instead
of delegating, the sub-agent never runs, `interrupt()` never fires, and
`result.__interrupt__` is `undefined`, producing the flaky failure.

This is test-prompt flakiness, not a product regression. The
interrupt-propagation path is unchanged, and the sibling interrupt tests
in the same file (dict-based tools, sequential interrupts) pass in the
same runs. The failure toggles pass/fail across commits on an unrelated
branch (the delete-tool PR #675) that never touched subagent/interrupt
code.

## Changes

- Rewrote the prompt as a strict, imperative instruction: call the
`task` tool exactly once immediately, with the correct `subagent_type`
and `description`, and do not answer directly.
- Added an explicit assertion that the `task` tool was actually called.
If a non-delegating model slips through, the failure now points clearly
at "task tool was not called" instead of a confusing `__interrupt__`
assertion. This mirrors the existing check in the skipped
`CompiledSubAgent` test.

## Testing

- `pnpm typecheck`: no new errors from this file (pre-existing unrelated
errors in backend `*.int.test.ts` about a missing
`@langchain/sandbox-standard-tests` module remain).
- `oxlint`: clean on the edited file.
- This is a live-LLM integration test (`test:int`) requiring API keys,
so it runs in CI's Integration Tests job.
2026-08-18 18:47:25 -07:00
github-actions[bot] 2a01d04faf chore: version packages (#750)
This PR was opened by the [Changesets
release](https://github.com/changesets/action) GitHub action. When
you're ready to do a release, you can merge this and the packages will
be published to npm automatically. If you're not ready to do a release
yet, that's fine, whenever you add more changesets to main, this PR will
be updated.


# Releases
## deepagents-acp@0.1.25

### Patch Changes

- Updated dependencies
[[`b2afb8d`](https://github.com/langchain-ai/deepagentsjs/commit/b2afb8d600570b633fd97d4d2f8fd8bdb229ce35),
[`68337fc`](https://github.com/langchain-ai/deepagentsjs/commit/68337fcca19a6d7cc18e8917d575ea9ca3aebcbe),
[`7550c65`](https://github.com/langchain-ai/deepagentsjs/commit/7550c65204bdd9141a88b9b42d46899e05c7bc43)]:
  - deepagents@1.12.4
## deepagents@1.12.4

### Patch Changes

- [#747](https://github.com/langchain-ai/deepagentsjs/pull/747)
[`b2afb8d`](https://github.com/langchain-ai/deepagentsjs/commit/b2afb8d600570b633fd97d4d2f8fd8bdb229ce35)
Thanks [@casparb](https://github.com/casparb)! - fix(deepagents): batch
concurrent Context Hub mutations

- [#751](https://github.com/langchain-ai/deepagentsjs/pull/751)
[`68337fc`](https://github.com/langchain-ai/deepagentsjs/commit/68337fcca19a6d7cc18e8917d575ea9ca3aebcbe)
Thanks
[@thushanth-bengre-langchain](https://github.com/thushanth-bengre-langchain)!
- fix(deepagents): coerce grep tool's max_count to a number

- [#749](https://github.com/langchain-ai/deepagentsjs/pull/749)
[`7550c65`](https://github.com/langchain-ai/deepagentsjs/commit/7550c65204bdd9141a88b9b42d46899e05c7bc43)
Thanks
[@thushanth-bengre-langchain](https://github.com/thushanth-bengre-langchain)!
- fix(deepagents): exclude summarization state from subagent
input/output
## @deepagents/evals@0.0.24

### Patch Changes

- Updated dependencies
[[`b2afb8d`](https://github.com/langchain-ai/deepagentsjs/commit/b2afb8d600570b633fd97d4d2f8fd8bdb229ce35),
[`68337fc`](https://github.com/langchain-ai/deepagentsjs/commit/68337fcca19a6d7cc18e8917d575ea9ca3aebcbe),
[`7550c65`](https://github.com/langchain-ai/deepagentsjs/commit/7550c65204bdd9141a88b9b42d46899e05c7bc43)]:
  - deepagents@1.12.4

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
deepagents-acp@0.1.25 deepagents@1.12.4
2026-08-14 09:43:10 -07:00
Thushanth Bengre 68337fcca1 fix(deepagents): coerce grep tool's max_count to a number (#751)
Fixes #745 

`max_count` was the only numeric grep param without type coercion,
causing ToolInputParsingException on stringified input. Switched to
z.coerce.number().
2026-08-14 12:18:42 -04:00
Thushanth Bengre 7550c65204 fix(deepagents): exclude summarization state from subagent input/output (#749)
Fixes #748 

Excludes `_summarizationEvent`/`_summarizationSessionId` from subagent
state input/output. These weren't in `EXCLUDED_STATE_KEYS`, so a stale
parent cutoffIndex could silently drop a subagent's task description,
and a subagent's own summarization event could overwrite the parent's on
return.
2026-08-14 08:54:08 -04:00
Caspar Broekhuizen b2afb8d600 fix(deepagents): batch concurrent Context Hub mutations (#747)
ContextHubBackend now preserves concurrent file mutations in one durable
commit and retains compatible remote changes during conflict recovery.

---

Concurrent callers previously reused the same parent commit, causing
409s. Retries could also replay stale edit payloads.

Mutations now coalesce for 50 ms into serialized multi-file commits.
Conflict recovery replays ordered edit intent against refreshed state;
explicit writes, uploads, and deletes remain last-writer-wins.

---------

Co-authored-by: Hunter Lovell <hunter@hntrl.io>
2026-08-13 15:54:55 -07:00
github-actions[bot] 44d6d3dfea chore: version packages (#733)
This PR was opened by the [Changesets
release](https://github.com/changesets/action) GitHub action. When
you're ready to do a release, you can merge this and the packages will
be published to npm automatically. If you're not ready to do a release
yet, that's fine, whenever you add more changesets to main, this PR will
be updated.


# Releases
## deepagents-acp@0.1.24

### Patch Changes

- Updated dependencies
[[`77e104f`](https://github.com/langchain-ai/deepagentsjs/commit/77e104f26a62ae34afbb1393edf191009d37280c),
[`239be7e`](https://github.com/langchain-ai/deepagentsjs/commit/239be7e883227e463504652bc00272ec947a21a6),
[`1439bbf`](https://github.com/langchain-ai/deepagentsjs/commit/1439bbfb267e92b7a19ce0924399591495976c21)]:
  - deepagents@1.12.3
## deepagents@1.12.3

### Patch Changes

- [#724](https://github.com/langchain-ai/deepagentsjs/pull/724)
[`77e104f`](https://github.com/langchain-ai/deepagentsjs/commit/77e104f26a62ae34afbb1393edf191009d37280c)
Thanks [@gethin-langchain](https://github.com/gethin-langchain)! -
feat(deepagents): add `output_mode` parameter to the `grep` tool
(`files_with_matches` / `content` / `count`)

- [#732](https://github.com/langchain-ai/deepagentsjs/pull/732)
[`239be7e`](https://github.com/langchain-ai/deepagentsjs/commit/239be7e883227e463504652bc00272ec947a21a6)
Thanks [@hntrl](https://github.com/hntrl)! - fix(deepagents): disable
summary-input trimming by default

Match Python DeepAgents by providing the full selected conversation to
the summarizer unless `trimTokensToSummarize` is explicitly configured.
This prevents oversized tool results from producing context-empty
summaries under the default configuration.

- [#739](https://github.com/langchain-ai/deepagentsjs/pull/739)
[`1439bbf`](https://github.com/langchain-ai/deepagentsjs/commit/1439bbfb267e92b7a19ce0924399591495976c21)
Thanks [@taoche](https://github.com/taoche)! - fix(deepagents): extract
text from content blocks when building the summary
## @deepagents/evals@0.0.23

### Patch Changes

- Updated dependencies
[[`77e104f`](https://github.com/langchain-ai/deepagentsjs/commit/77e104f26a62ae34afbb1393edf191009d37280c),
[`239be7e`](https://github.com/langchain-ai/deepagentsjs/commit/239be7e883227e463504652bc00272ec947a21a6),
[`1439bbf`](https://github.com/langchain-ai/deepagentsjs/commit/1439bbfb267e92b7a19ce0924399591495976c21)]:
  - deepagents@1.12.3

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
deepagents-acp@0.1.24 deepagents@1.12.3
2026-08-12 16:02:01 -07:00
Wei Tao 1439bbfb26 fix(deepagents): extract text from content blocks when building the summary (#739)
## Description

`SummarizationMiddleware`'s `createSummary` falls back to
`JSON.stringify(response.content)` when the summarization model's
response content is not a string:

```ts
return typeof response.content === "string"
  ? response.content
  : JSON.stringify(response.content);
```

When the summarization model responds with a content block array, the
raw blocks are stringified verbatim into the summary `HumanMessage`.
This happens in practice when:

- **Thinking/reasoning is enabled** on the summarization model (e.g.
Claude on Bedrock with `thinking`): the content is `[{type: "reasoning",
reasoning: ..., signature: <opaque multi-KB signature>}, {type: "text",
...}]`, and the reasoning signature lands in the summary.
- **`invoke()` takes the internal streaming path** (a `prefersStreaming`
callback handler is attached, e.g. inside `streamEvents`, and
`disableStreaming` is not set): the aggregated `AIMessageChunk` content
is an array of many small text fragments.

Observed in production: a summary message of ~56KB consisting of an ~8KB
opaque reasoning signature plus hundreds of
`{"type":"text","text":"..."}` fragments — the "summary" ended up
bloating the context it was supposed to compact, and subsequent model
calls overflowed.

## Fix

Use the message's `text` accessor for non-string content, which extracts
and joins only the text blocks. String content is returned as-is
(unchanged behavior).

## Testing

Added a unit test where the summarization model returns reasoning +
split text blocks, asserting the summary message contains the joined
text and no reasoning payload. All 33 existing tests pass.

---------

Co-authored-by: Hunter Lovell <hunter@hntrl.io>
2026-08-11 00:15:46 -07:00
gethin-langchain 77e104f26a feat(deepagents): add output_mode parameter to the grep tool (#724)
## Summary
- The grep tool's description mentioned output_mode, but it was never an
actual parameter the tool always returned one hardcoded format.
- Added output_mode (files_with_matches/content/count) as a real schema
parameter, using the existing formatGrepMatches helper.

## Test plan
- Added tests in fs.test.ts for files_with_matches and count modes.
- All tests pass.

Note: default output is now sorted by path with no blank lines between
file groups (minor formatting change, same info).

---------

Co-authored-by: Hunter Lovell <hunter@hntrl.io>
2026-08-06 07:13:21 +00:00
Hunter Lovell 239be7e883 fix(deepagents): disable summary input trimming by default (#732)
## Summary

Prevent default DeepAgents JS summarization from discarding an oversized
message before it reaches the summary model

## Changes

### `deepagents`

- Make `trimTokensToSummarize` opt-in rather than defaulting to 4,000
tokens.
- Preserve existing capped behavior when callers explicitly configure
the option.
- Add coverage confirming oversized summary input reaches the summary
model under default configuration.
- Add a patch changeset for the bug fix.
2026-08-05 14:42:51 -07:00
dependabot[bot] 7398fe1486 build(deps): bump the patch-deps-updates-main group across 1 directory with 18 updates (#731)
Bumps the patch-deps-updates-main group with 18 updates in the /
directory:

| Package | From | To |
| --- | --- | --- |
| [@changesets/cli](https://github.com/changesets/changesets) | `2.31.0`
| `2.31.1` |
| [@langchain/core](https://github.com/langchain-ai/langchainjs) |
`1.2.3` | `1.2.4` |
|
[@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node)
| `26.1.1` | `26.1.2` |
| [tsdown](https://github.com/rolldown/tsdown) | `0.22.8` | `0.22.14` |
| [@langchain/anthropic](https://github.com/langchain-ai/langchainjs) |
`1.5.1` | `1.5.2` |
|
[@langchain/langgraph-sdk](https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/sdk)
| `1.9.27` | `1.9.28` |
| [langchain](https://github.com/langchain-ai/langchainjs) | `1.5.3` |
`1.5.4` |
| [p-queue](https://github.com/sindresorhus/p-queue) | `9.3.1` | `9.3.3`
|
| [langsmith](https://github.com/langchain-ai/langsmith-sdk) | `0.8.7` |
`0.8.9` |
| [@hono/node-server](https://github.com/honojs/node-server) | `2.0.10`
| `2.0.12` |
|
[@types/pg](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/pg)
| `8.20.0` | `8.20.3` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) |
`19.2.7` | `19.2.8` |
|
[@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react)
| `19.2.17` | `19.2.18` |
|
[react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom)
| `19.2.7` | `19.2.8` |
|
[@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom)
| `19.2.3` | `19.2.4` |
|
[@tailwindcss/vite](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-vite)
| `4.3.2` | `4.3.3` |
|
[@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react)
| `6.0.3` | `6.0.5` |
|
[tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss)
| `4.3.2` | `4.3.3` |


Updates `@changesets/cli` from 2.31.0 to 2.31.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/changesets/changesets/releases">@​changesets/cli's
releases</a>.</em></p>
<blockquote>
<h2><code>@​changesets/cli</code><a
href="https://github.com/2"><code>@​2</code></a>.31.1</h2>
<h3>Patch Changes</h3>
<ul>
<li><a
href="https://redirect.github.com/changesets/changesets/pull/2159">#2159</a>
<a
href="https://github.com/changesets/changesets/commit/15cf5928fb9968ba20b59ed6c794013c52c92d09"><code>15cf592</code></a>
Thanks <a
href="https://github.com/ingvaldlorentzen"><code>@​ingvaldlorentzen</code></a>!
- Fixed already-published version detection with npm 12, which always
wraps successful <code>npm info --json</code> output in an array. The
unwrapped output made <code>changeset publish</code> treat every package
as unpublished and fail attempting to republish existing versions.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/changesets/changesets/commit/a897bb8ac115fa65343a8bfe53654040c1542a80"><code>a897bb8</code></a>
Use a different publish tag for <code>maintenance/v2</code> branch (<a
href="https://redirect.github.com/changesets/changesets/issues/2162">#2162</a>)</li>
<li><a
href="https://github.com/changesets/changesets/commit/e8650b9bf45560ca7642a1e043ac92111b886073"><code>e8650b9</code></a>
Version Packages (<a
href="https://redirect.github.com/changesets/changesets/issues/2161">#2161</a>)</li>
<li><a
href="https://github.com/changesets/changesets/commit/15cf5928fb9968ba20b59ed6c794013c52c92d09"><code>15cf592</code></a>
Fixed handling of the npm 12 info output (<a
href="https://redirect.github.com/changesets/changesets/issues/2159">#2159</a>)</li>
<li><a
href="https://github.com/changesets/changesets/commit/9f2cb2ad87061ba1715691b7ebef7e192ccede58"><code>9f2cb2a</code></a>
Configure Changesets for <code>maintenance/v2</code> line (<a
href="https://redirect.github.com/changesets/changesets/issues/2076">#2076</a>)</li>
<li><a
href="https://github.com/changesets/changesets/commit/97247cb56a2746b6a73b65746547456e83c3f44c"><code>97247cb</code></a>
Change allowed publish pattern to <code>maintenance/v*</code> given
rulesets behavior (#...</li>
<li><a
href="https://github.com/changesets/changesets/commit/13286a8d89be5293ec8c6634ae981b4ed261e7a1"><code>13286a8</code></a>
Build(deps): Bump the github-actions group across 1 directory with 3
updates ...</li>
<li><a
href="https://github.com/changesets/changesets/commit/8f6acd658891ca4d4d7e458c67cf704c87ac46a1"><code>8f6acd6</code></a>
Update dependabot group to exclude major (<a
href="https://redirect.github.com/changesets/changesets/issues/2067">#2067</a>)</li>
<li><a
href="https://github.com/changesets/changesets/commit/c70c675c2a22062aeae881f78f436bf793e26f35"><code>c70c675</code></a>
Setup backport workflow and sync next setup (<a
href="https://redirect.github.com/changesets/changesets/issues/2057">#2057</a>)</li>
<li><a
href="https://github.com/changesets/changesets/commit/96720197013d2d49e5b32c30803e4653660348b6"><code>9672019</code></a>
Remove SECURITY.md to defer to .github (<a
href="https://redirect.github.com/changesets/changesets/issues/2055">#2055</a>)</li>
<li><a
href="https://github.com/changesets/changesets/commit/18e1661e3ad9bc4ab7bcd770ae172c560af44acc"><code>18e1661</code></a>
Use internal bot for versioning (<a
href="https://redirect.github.com/changesets/changesets/issues/2039">#2039</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/changesets/changesets/compare/@changesets/cli@2.31.0...@changesets/cli@2.31.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `@langchain/core` from 1.2.3 to 1.2.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/langchainjs/releases">@​langchain/core's
releases</a>.</em></p>
<blockquote>
<h2><code>@​langchain/core</code><a
href="https://github.com/1"><code>@​1</code></a>.2.4</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p><a
href="https://redirect.github.com/langchain-ai/langchainjs/pull/11190">#11190</a>
<a
href="https://github.com/langchain-ai/langchainjs/commit/9654bde694af4e78080a76a0b39d7edd35683449"><code>9654bde</code></a>
Thanks <a
href="https://github.com/pawel-twardziak"><code>@​pawel-twardziak</code></a>!
- Coalesce nested LangChain tracer callbacks that share run
bookkeeping.</p>
</li>
<li>
<p><a
href="https://redirect.github.com/langchain-ai/langchainjs/pull/11153">#11153</a>
<a
href="https://github.com/langchain-ai/langchainjs/commit/84ce6d65ef0ab2c556d5a5a3b5651b5cf3d73303"><code>84ce6d6</code></a>
Thanks <a
href="https://github.com/parveshsaini"><code>@​parveshsaini</code></a>!
- fix(core): bind splitText when trimMessages receives a TextSplitter
instance</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/f6dbb882d1d4a591d69020145b6a871fe7801b35"><code>f6dbb88</code></a>
chore: version packages (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11268">#11268</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/9654bde694af4e78080a76a0b39d7edd35683449"><code>9654bde</code></a>
fix(core): coalesce duplicate tracer copies sharing run state (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11190">#11190</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/84ce6d65ef0ab2c556d5a5a3b5651b5cf3d73303"><code>84ce6d6</code></a>
fix(core): bind splitText when trimMessages receives a TextSplitter
instance ...</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/710d74f3fc0ff98d5088c8e0c86752829cfaaa2c"><code>710d74f</code></a>
fix: resolve open Dependabot alerts (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11259">#11259</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/5226cddb0d0b31d33bb78fc51230e4283cd6cc64"><code>5226cdd</code></a>
chore(deps-dev): bump <code>@​hono/node-server</code> from 2.0.4 to
2.0.10 in /libs/langcha...</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/d829cb490112454b3cf8718a526f28450ff37062"><code>d829cb4</code></a>
chore: version packages (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11204">#11204</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/c8bd4c4a6dbde07fb24deb5870c02dc29c51ab53"><code>c8bd4c4</code></a>
feat(anthropic): add Claude Opus 5 support (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11255">#11255</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/741f380ae54afd2e920495b3042ea6346865836a"><code>741f380</code></a>
chore(deps): bump <code>@​hono/node-server</code> from 2.0.4 to 2.0.10
(<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11244">#11244</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/5103cee12ae0e3e56038f0c20edda5159b252daa"><code>5103cee</code></a>
chore(deps): bump js-yaml from 5.1.0 to 5.2.2 (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11256">#11256</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/db29a6a8060d9d8998f5fb566368e3bad5b32a5b"><code>db29a6a</code></a>
chore(deps): bump axios from 1.16.1 to 1.18.0 (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11228">#11228</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/langchain-ai/langchainjs/compare/@langchain/core@1.2.3...@langchain/core@1.2.4">compare
view</a></li>
</ul>
</details>
<br />

Updates `@types/node` from 26.1.1 to 26.1.2
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node">compare
view</a></li>
</ul>
</details>
<br />

Updates `tsdown` from 0.22.8 to 0.22.14
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/rolldown/tsdown/releases">tsdown's
releases</a>.</em></p>
<blockquote>
<h2>v0.22.14</h2>
<h3>   🚀 Features</h3>
<ul>
<li>Add CLI build concurrency option  -  by <a
href="https://github.com/sxzz"><code>@​sxzz</code></a> and
<strong>Jeroen Zwartepoorte</strong> <a
href="https://github.com/rolldown/tsdown/commit/8a14c35"><!-- raw HTML
omitted -->(8a14c)<!-- raw HTML omitted --></a></li>
</ul>
<h5>    <a
href="https://github.com/rolldown/tsdown/compare/v0.22.13...v0.22.14">View
changes on GitHub</a></h5>
<h2>v0.22.13</h2>
<h3>   🚀 Features</h3>
<ul>
<li><strong>deps</strong>: Support <code>neverBundle: true</code> to
externalize all dependencies  -  by <a
href="https://github.com/sxzz"><code>@​sxzz</code></a> <a
href="https://github.com/rolldown/tsdown/commit/d30a730"><!-- raw HTML
omitted -->(d30a7)<!-- raw HTML omitted --></a></li>
</ul>
<h3>   🐞 Bug Fixes</h3>
<ul>
<li>Prevent tinyexec from modifying PATH  -  by <a
href="https://github.com/sxzz"><code>@​sxzz</code></a> <a
href="https://github.com/rolldown/tsdown/commit/d84c54a"><!-- raw HTML
omitted -->(d84c5)<!-- raw HTML omitted --></a></li>
</ul>
<h5>    <a
href="https://github.com/rolldown/tsdown/compare/v0.22.12...v0.22.13">View
changes on GitHub</a></h5>
<h2>v0.22.12</h2>
<h3>   🚨 Breaking Changes</h3>
<ul>
<li><strong>exe</strong>: Standardize minimum Node.js version  -  by <a
href="https://github.com/sxzz"><code>@​sxzz</code></a> <a
href="https://github.com/rolldown/tsdown/commit/85f23ea"><!-- raw HTML
omitted -->(85f23)<!-- raw HTML omitted --></a></li>
</ul>
<h5>    <a
href="https://github.com/rolldown/tsdown/compare/v0.22.11...v0.22.12">View
changes on GitHub</a></h5>
<h2>v0.22.11</h2>
<h3>   🚀 Features</h3>
<ul>
<li><strong>deps</strong>: Add <code>resolveDepSubpath</code> option  - 
by <a href="https://github.com/sxzz"><code>@​sxzz</code></a> in <a
href="https://redirect.github.com/rolldown/tsdown/issues/1026">rolldown/tsdown#1026</a>
<a href="https://github.com/rolldown/tsdown/commit/346cb00"><!-- raw
HTML omitted -->(346cb)<!-- raw HTML omitted --></a></li>
</ul>
<h5>    <a
href="https://github.com/rolldown/tsdown/compare/v0.22.10...v0.22.11">View
changes on GitHub</a></h5>
<h2>v0.22.10</h2>
<h3>   🚀 Features</h3>
<ul>
<li><strong>exe</strong>: Support custom node index and download url  - 
by <a href="https://github.com/anytinz"><code>@​anytinz</code></a> in <a
href="https://redirect.github.com/rolldown/tsdown/issues/1023">rolldown/tsdown#1023</a>
<a href="https://github.com/rolldown/tsdown/commit/0d24a0e"><!-- raw
HTML omitted -->(0d24a)<!-- raw HTML omitted --></a></li>
</ul>
<h3>   🐞 Bug Fixes</h3>
<ul>
<li><strong>deps</strong>: External <code>peerDependenciesMeta</code>
deps  -  by <a href="https://github.com/sxzz"><code>@​sxzz</code></a> <a
href="https://github.com/rolldown/tsdown/commit/bad1b36"><!-- raw HTML
omitted -->(bad1b)<!-- raw HTML omitted --></a></li>
<li><strong>exe</strong>: Handle Windows node archives on Linux  -  by
<a href="https://github.com/sxzz"><code>@​sxzz</code></a> <a
href="https://github.com/rolldown/tsdown/commit/074e4f7"><!-- raw HTML
omitted -->(074e4)<!-- raw HTML omitted --></a></li>
</ul>
<h5>    <a
href="https://github.com/rolldown/tsdown/compare/v0.22.9...v0.22.10">View
changes on GitHub</a></h5>
<h2>v0.22.9</h2>
<h3>   🚀 Features</h3>
<ul>
<li>Upgrade rolldown to v1.2  -  by <a
href="https://github.com/sxzz"><code>@​sxzz</code></a> <a
href="https://github.com/rolldown/tsdown/commit/91bb5d2"><!-- raw HTML
omitted -->(91bb5)<!-- raw HTML omitted --></a></li>
</ul>
<h3>   🐞 Bug Fixes</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/rolldown/tsdown/commit/ff3bdbd456a7567fafd092f3b507f7cca37ac9c0"><code>ff3bdbd</code></a>
chore: release v0.22.14</li>
<li><a
href="https://github.com/rolldown/tsdown/commit/8a14c35fca6f3edfe07ea921be9ac256cfe9095b"><code>8a14c35</code></a>
feat: add CLI build concurrency option</li>
<li><a
href="https://github.com/rolldown/tsdown/commit/0525465860de26e75a5f3c0e32f9e0540aa63f64"><code>0525465</code></a>
docs: add note about <code>cjsDefault</code> only applying to explicit
entry modules</li>
<li><a
href="https://github.com/rolldown/tsdown/commit/a3a35517d0b35e4af2a0a591ee5f09d241412f22"><code>a3a3551</code></a>
refactor: fix lint</li>
<li><a
href="https://github.com/rolldown/tsdown/commit/3dec50674db7b5a5098b75ba8ce16e095c94eea8"><code>3dec506</code></a>
refactor: use native <code>Promise.withResolvers</code></li>
<li><a
href="https://github.com/rolldown/tsdown/commit/e0266c1908ee40520eba0971943b54737a35c0ad"><code>e0266c1</code></a>
docs: add tsdown users image</li>
<li><a
href="https://github.com/rolldown/tsdown/commit/a733505acc43c9d934648cbe22ef515c24d1a34f"><code>a733505</code></a>
refactor: upgrade verkit, simplify version parse</li>
<li><a
href="https://github.com/rolldown/tsdown/commit/e5fe2cac104713f0f1006cb977258effa09ccd78"><code>e5fe2ca</code></a>
style: format</li>
<li><a
href="https://github.com/rolldown/tsdown/commit/3e1fc633a07bbc085e1af87d45e910d8062311e4"><code>3e1fc63</code></a>
chore: release v0.22.13</li>
<li><a
href="https://github.com/rolldown/tsdown/commit/a6c8734001fba69bf3b096ac429b12b35ffc0ea6"><code>a6c8734</code></a>
chore: upgrade deps</li>
<li>Additional commits viewable in <a
href="https://github.com/rolldown/tsdown/compare/v0.22.8...v0.22.14">compare
view</a></li>
</ul>
</details>
<br />

Updates `@langchain/anthropic` from 1.5.1 to 1.5.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/langchainjs/releases">@​langchain/anthropic's
releases</a>.</em></p>
<blockquote>
<h2><code>@​langchain/anthropic</code><a
href="https://github.com/1"><code>@​1</code></a>.5.2</h2>
<h3>Patch Changes</h3>
<ul>
<li><a
href="https://redirect.github.com/langchain-ai/langchainjs/pull/11255">#11255</a>
<a
href="https://github.com/langchain-ai/langchainjs/commit/c8bd4c4a6dbde07fb24deb5870c02dc29c51ab53"><code>c8bd4c4</code></a>
Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! -
feat(anthropic): add claude-opus-5 support</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/d829cb490112454b3cf8718a526f28450ff37062"><code>d829cb4</code></a>
chore: version packages (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11204">#11204</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/c8bd4c4a6dbde07fb24deb5870c02dc29c51ab53"><code>c8bd4c4</code></a>
feat(anthropic): add Claude Opus 5 support (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11255">#11255</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/741f380ae54afd2e920495b3042ea6346865836a"><code>741f380</code></a>
chore(deps): bump <code>@​hono/node-server</code> from 2.0.4 to 2.0.10
(<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11244">#11244</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/5103cee12ae0e3e56038f0c20edda5159b252daa"><code>5103cee</code></a>
chore(deps): bump js-yaml from 5.1.0 to 5.2.2 (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11256">#11256</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/db29a6a8060d9d8998f5fb566368e3bad5b32a5b"><code>db29a6a</code></a>
chore(deps): bump axios from 1.16.1 to 1.18.0 (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11228">#11228</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/3eeeb8ace227289625380dedf9e0fef3ce4ab466"><code>3eeeb8a</code></a>
chore(deps-dev): bump typeorm from 1.0.0 to 1.1.0 (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11247">#11247</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/ee76ea0347fb611153e5ec7d0e70fa405f5293a3"><code>ee76ea0</code></a>
chore(deps): patch websocket-driver Dependabot advisories (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11213">#11213</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/e5d9de5df9e48a54cbcd95c6fc22a4ac8e78e155"><code>e5d9de5</code></a>
fix(deps): resolve Dependabot security alerts (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11212">#11212</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/b7b5c525ddc3388e767474d3ad37cb9101424ff4"><code>b7b5c52</code></a>
chore: add Socket optimized dependency overrides (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11205">#11205</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/a8cd4d9ae35ae8ae05e011115a351d976560ade9"><code>a8cd4d9</code></a>
feat(langchain): add tool error middleware (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11201">#11201</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/langchain-ai/langchainjs/compare/@langchain/anthropic@1.5.1...@langchain/anthropic@1.5.2">compare
view</a></li>
</ul>
</details>
<br />

Updates `@langchain/langgraph-sdk` from 1.9.27 to 1.9.28
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/langgraphjs/releases">@​langchain/langgraph-sdk's
releases</a>.</em></p>
<blockquote>
<h2><code>@​langchain/langgraph-sdk</code><a
href="https://github.com/1"><code>@​1</code></a>.9.28</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p><a
href="https://redirect.github.com/langchain-ai/langgraphjs/pull/2622">#2622</a>
<a
href="https://github.com/langchain-ai/langgraphjs/commit/cf2407a31657a8308312873a13863f496b34f3ca"><code>cf2407a</code></a>
Thanks <a
href="https://github.com/christian-bromann"><code>@​christian-bromann</code></a>!
- fix(sdk): clear hydrate interrupt allowlist on respond()</p>
<p><code>submit()</code> already cleared
<code>#hydratedActiveInterruptIds</code> so a new run's live
<code>input.requested</code> events were not dropped as historical.
<code>respond()</code> / <code>respondAll()</code> (via
<code>dispatchResume</code>) did not, so a follow-on HITL after resume
never appeared on <code>stream.interrupt</code> and free-text submits
could resume with the wrong payload.</p>
</li>
<li>
<p><a
href="https://redirect.github.com/langchain-ai/langgraphjs/pull/2613">#2613</a>
<a
href="https://github.com/langchain-ai/langgraphjs/commit/82a320faf6876238f8bac8aa6a7c593bef2be061"><code>82a320f</code></a>
Thanks <a
href="https://github.com/sreeramsama"><code>@​sreeramsama</code></a>! -
Fix <code>useStream</code> crash (<code>TypeError: Cannot read
properties of null (reading 'fetch')</code>) when a thread is cleared
while hydration is in flight. The stale hydrate now bails immediately
after the <code>getState()</code> await — it no longer applies the
fetched state to the thread that was left, nor opens a reconnect via
<code>threads.stream(null, …)</code>.</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/langgraphjs/blob/main/libs/sdk/CHANGELOG.md">@​langchain/langgraph-sdk's
changelog</a>.</em></p>
<blockquote>
<h2>1.9.28</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p><a
href="https://redirect.github.com/langchain-ai/langgraphjs/pull/2622">#2622</a>
<a
href="https://github.com/langchain-ai/langgraphjs/commit/cf2407a31657a8308312873a13863f496b34f3ca"><code>cf2407a</code></a>
Thanks <a
href="https://github.com/christian-bromann"><code>@​christian-bromann</code></a>!
- fix(sdk): clear hydrate interrupt allowlist on respond()</p>
<p><code>submit()</code> already cleared
<code>#hydratedActiveInterruptIds</code> so a new run's live
<code>input.requested</code> events were not dropped as historical.
<code>respond()</code> / <code>respondAll()</code> (via
<code>dispatchResume</code>) did not, so a follow-on HITL after resume
never appeared on <code>stream.interrupt</code> and free-text submits
could resume with the wrong payload.</p>
</li>
<li>
<p><a
href="https://redirect.github.com/langchain-ai/langgraphjs/pull/2613">#2613</a>
<a
href="https://github.com/langchain-ai/langgraphjs/commit/82a320faf6876238f8bac8aa6a7c593bef2be061"><code>82a320f</code></a>
Thanks <a
href="https://github.com/sreeramsama"><code>@​sreeramsama</code></a>! -
Fix <code>useStream</code> crash (<code>TypeError: Cannot read
properties of null (reading 'fetch')</code>) when a thread is cleared
while hydration is in flight. The stale hydrate now bails immediately
after the <code>getState()</code> await — it no longer applies the
fetched state to the thread that was left, nor opens a reconnect via
<code>threads.stream(null, …)</code>.</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/langchain-ai/langgraphjs/commit/483e6df5eaf0f9a5ca4d682131ee431d77018369"><code>483e6df</code></a>
chore: version packages (<a
href="https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/sdk/issues/2621">#2621</a>)</li>
<li><a
href="https://github.com/langchain-ai/langgraphjs/commit/cf2407a31657a8308312873a13863f496b34f3ca"><code>cf2407a</code></a>
fix(sdk): clear hydrate interrupt allowlist on respond() (<a
href="https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/sdk/issues/2622">#2622</a>)</li>
<li><a
href="https://github.com/langchain-ai/langgraphjs/commit/119b49c6f8e6368bb7f479295127930825912516"><code>119b49c</code></a>
chore(deps): bump the vue group with 2 updates (<a
href="https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/sdk/issues/2619">#2619</a>)</li>
<li><a
href="https://github.com/langchain-ai/langgraphjs/commit/c14b070b96dc96982f67e87cdc3e75384773bf2c"><code>c14b070</code></a>
chore(deps): bump the react group with 2 updates (<a
href="https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/sdk/issues/2620">#2620</a>)</li>
<li><a
href="https://github.com/langchain-ai/langgraphjs/commit/82a320faf6876238f8bac8aa6a7c593bef2be061"><code>82a320f</code></a>
fix(sdk): guard useStream hydrate reconnect against a cleared thread id
(<a
href="https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/sdk/issues/2613">#2613</a>)</li>
<li>See full diff in <a
href="https://github.com/langchain-ai/langgraphjs/commits/@langchain/langgraph-sdk@1.9.28/libs/sdk">compare
view</a></li>
</ul>
</details>
<br />

Updates `langchain` from 1.5.3 to 1.5.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/langchainjs/releases">langchain's
releases</a>.</em></p>
<blockquote>
<h2>langchain@1.5.4</h2>
<h3>Patch Changes</h3>
<ul>
<li><a
href="https://redirect.github.com/langchain-ai/langchainjs/pull/11201">#11201</a>
<a
href="https://github.com/langchain-ai/langchainjs/commit/a8cd4d9ae35ae8ae05e011115a351d976560ade9"><code>a8cd4d9</code></a>
Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! -
feat(langchain): add middleware for handling tool execution errors</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/d829cb490112454b3cf8718a526f28450ff37062"><code>d829cb4</code></a>
chore: version packages (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11204">#11204</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/c8bd4c4a6dbde07fb24deb5870c02dc29c51ab53"><code>c8bd4c4</code></a>
feat(anthropic): add Claude Opus 5 support (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11255">#11255</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/741f380ae54afd2e920495b3042ea6346865836a"><code>741f380</code></a>
chore(deps): bump <code>@​hono/node-server</code> from 2.0.4 to 2.0.10
(<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11244">#11244</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/5103cee12ae0e3e56038f0c20edda5159b252daa"><code>5103cee</code></a>
chore(deps): bump js-yaml from 5.1.0 to 5.2.2 (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11256">#11256</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/db29a6a8060d9d8998f5fb566368e3bad5b32a5b"><code>db29a6a</code></a>
chore(deps): bump axios from 1.16.1 to 1.18.0 (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11228">#11228</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/3eeeb8ace227289625380dedf9e0fef3ce4ab466"><code>3eeeb8a</code></a>
chore(deps-dev): bump typeorm from 1.0.0 to 1.1.0 (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11247">#11247</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/ee76ea0347fb611153e5ec7d0e70fa405f5293a3"><code>ee76ea0</code></a>
chore(deps): patch websocket-driver Dependabot advisories (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11213">#11213</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/e5d9de5df9e48a54cbcd95c6fc22a4ac8e78e155"><code>e5d9de5</code></a>
fix(deps): resolve Dependabot security alerts (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11212">#11212</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/b7b5c525ddc3388e767474d3ad37cb9101424ff4"><code>b7b5c52</code></a>
chore: add Socket optimized dependency overrides (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11205">#11205</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/a8cd4d9ae35ae8ae05e011115a351d976560ade9"><code>a8cd4d9</code></a>
feat(langchain): add tool error middleware (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11201">#11201</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/langchain-ai/langchainjs/compare/langchain@1.5.3...langchain@1.5.4">compare
view</a></li>
</ul>
</details>
<br />

Updates `p-queue` from 9.3.1 to 9.3.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sindresorhus/p-queue/releases">p-queue's
releases</a>.</em></p>
<blockquote>
<h2>v9.3.3</h2>
<ul>
<li>Fix rate limiter delaying tasks in a fresh window when
<code>intervalCap &gt; 1</code> 89a10bb</li>
</ul>
<hr />
<p><a
href="https://github.com/sindresorhus/p-queue/compare/v9.3.2...v9.3.3">https://github.com/sindresorhus/p-queue/compare/v9.3.2...v9.3.3</a></p>
<h2>v9.3.2</h2>
<ul>
<li>Fix per-task timeout validation  9efde42</li>
</ul>
<hr />
<p><a
href="https://github.com/sindresorhus/p-queue/compare/v9.3.1...v9.3.2">https://github.com/sindresorhus/p-queue/compare/v9.3.1...v9.3.2</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/sindresorhus/p-queue/commit/180ab9e25cd10b6f548767d7176076b50d25e188"><code>180ab9e</code></a>
9.3.3</li>
<li><a
href="https://github.com/sindresorhus/p-queue/commit/89a10bb7ade7928f484acab428c6e89fb144fedb"><code>89a10bb</code></a>
Fix rate limiter delaying tasks in a fresh window when <code>intervalCap
&gt; 1</code></li>
<li><a
href="https://github.com/sindresorhus/p-queue/commit/98ccb488771059368b21cc2356234a70dc961c8b"><code>98ccb48</code></a>
Meta tweaks</li>
<li><a
href="https://github.com/sindresorhus/p-queue/commit/78d494a392f410f6957bb0f7125fe855992a8876"><code>78d494a</code></a>
9.3.2</li>
<li><a
href="https://github.com/sindresorhus/p-queue/commit/9efde425e233ab59ff3e6842430d40fd2208c103"><code>9efde42</code></a>
Fix per-task timeout validation</li>
<li>See full diff in <a
href="https://github.com/sindresorhus/p-queue/compare/v9.3.1...v9.3.3">compare
view</a></li>
</ul>
</details>
<br />

Updates `langsmith` from 0.8.7 to 0.8.9
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/langsmith-sdk/releases">langsmith's
releases</a>.</em></p>
<blockquote>
<h2>v0.8.9</h2>
<h2>What's Changed</h2>
<ul>
<li>feat(sandbox): add JS Dockerfile snapshots by <a
href="https://github.com/langchain-infra"><code>@​langchain-infra</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2951">langchain-ai/langsmith-sdk#2951</a></li>
<li>chore(deps-dev): bump the js-minor-and-patch group across 1
directory with 11 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2931">langchain-ai/langsmith-sdk#2931</a></li>
<li>chore(deps): bump websockets from 15.0.1 to 16.0 in /python by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2811">langchain-ai/langsmith-sdk#2811</a></li>
<li>chore(deps): update myst-parser requirement from &gt;=3 to
&gt;=4.0.1 in /python by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2841">langchain-ai/langsmith-sdk#2841</a></li>
<li>chore(deps): bump the py-minor-and-patch group across 1 directory
with 19 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2934">langchain-ai/langsmith-sdk#2934</a></li>
<li>chore(deps): bump typescript from 5.9.3 to 6.0.3 in /js by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2839">langchain-ai/langsmith-sdk#2839</a></li>
<li>chore(deps-dev): bump google-adk from 1.10.0 to 2.1.0 in /python by
<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2960">langchain-ai/langsmith-sdk#2960</a></li>
<li>chore(deps-dev): bump wrapt from 1.17.3 to 2.2.1 in /python by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2961">langchain-ai/langsmith-sdk#2961</a></li>
<li>chore(deps-dev): bump the py-minor-and-patch group in /python with 6
updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2958">langchain-ai/langsmith-sdk#2958</a></li>
<li>chore(deps-dev): bump types-tqdm from 4.67.3.20260408 to
4.67.3.20260518 in /python by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2959">langchain-ai/langsmith-sdk#2959</a></li>
<li>ci: add minimum workflow permissions by <a
href="https://github.com/jkennedyvz"><code>@​jkennedyvz</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2967">langchain-ai/langsmith-sdk#2967</a></li>
<li>chore: update dependabot.yml to comply with posture checks by <a
href="https://github.com/jkennedyvz"><code>@​jkennedyvz</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2966">langchain-ai/langsmith-sdk#2966</a></li>
<li>test(python): deflake test_tracing_queue_limit_drops_when_full by <a
href="https://github.com/baskaryan"><code>@​baskaryan</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2964">langchain-ai/langsmith-sdk#2964</a></li>
<li>feat(sandbox): size the dockerfile-build sandbox via vcpus/mem_bytes
(python) by <a
href="https://github.com/langchain-infra"><code>@​langchain-infra</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2979">langchain-ai/langsmith-sdk#2979</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.8.8...v0.8.9">https://github.com/langchain-ai/langsmith-sdk/compare/v0.8.8...v0.8.9</a></p>
<h2>v0.8.8</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(python): retry sandbox pool timeouts by <a
href="https://github.com/baskaryan"><code>@​baskaryan</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2953">langchain-ai/langsmith-sdk#2953</a></li>
<li>fix(sandbox): build Dockerfile snapshots off /tmp by <a
href="https://github.com/langchain-infra"><code>@​langchain-infra</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2956">langchain-ai/langsmith-sdk#2956</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.8.7...v0.8.8">https://github.com/langchain-ai/langsmith-sdk/compare/v0.8.7...v0.8.8</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/1eda04b4e86a93befecbd869aef6022e7f516837"><code>1eda04b</code></a>
feat(sandbox): size the dockerfile-build sandbox via vcpus/mem_bytes
(python)...</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/5960910cbe044dca6a0961f099577f41166f9601"><code>5960910</code></a>
test(python): deflake test_tracing_queue_limit_drops_when_full (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/2964">#2964</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/846d4c5b17580b86618bd9a1573759e19d0cf647"><code>846d4c5</code></a>
chore: update dependabot.yml to comply with posture checks (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/2966">#2966</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/48b66b3ccaa0d2a305ffd1656e18bd4297af019f"><code>48b66b3</code></a>
ci: add minimum workflow permissions (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/2967">#2967</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/d0a93ac8a2872cf2dc6f7cb7a17645b21816d9c7"><code>d0a93ac</code></a>
chore(deps-dev): bump types-tqdm from 4.67.3.20260408 to 4.67.3.20260518
in /...</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/fc9ba745e3797950d0c97fce8d68c63c7915e60c"><code>fc9ba74</code></a>
chore(deps-dev): bump the py-minor-and-patch group in /python with 6
updates ...</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/d54e69b689029994d23cb6876a8e87c6e64a3e79"><code>d54e69b</code></a>
chore(deps-dev): bump wrapt from 1.17.3 to 2.2.1 in /python (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/2961">#2961</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/1d212585b886f79130db74c6741240ab79fc62bd"><code>1d21258</code></a>
chore(deps-dev): bump google-adk from 1.10.0 to 2.1.0 in /python (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/2960">#2960</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/b66d791bfec699eb5fc26df1e81be8b9a6677c2c"><code>b66d791</code></a>
chore(deps-dev): bump typescript from 5.9.3 to 6.0.3 in /js (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/2839">#2839</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/a0f9eff836623cce60bdcabb2a33275d8ec741ee"><code>a0f9eff</code></a>
chore(deps): bump the py-minor-and-patch group across 1 directory with
19 upd...</li>
<li>Additional commits viewable in <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.8.7...v0.8.9">compare
view</a></li>
</ul>
</details>
<br />

Updates `@hono/node-server` from 2.0.10 to 2.0.12
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/honojs/node-server/releases">@​hono/node-server's
releases</a>.</em></p>
<blockquote>
<h2>v2.0.12</h2>
<h2>What's Changed</h2>
<ul>
<li>test: replace supertest by <a
href="https://github.com/BlankParticle"><code>@​BlankParticle</code></a>
in <a
href="https://redirect.github.com/honojs/node-server/pull/379">honojs/node-server#379</a></li>
<li>fix(response): copy headers when init is a foreign Response by <a
href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/382">honojs/node-server#382</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/honojs/node-server/compare/v2.0.11...v2.0.12">https://github.com/honojs/node-server/compare/v2.0.11...v2.0.12</a></p>
<h2>v2.0.11</h2>
<h2>What's Changed</h2>
<ul>
<li>test: use a custom helper for path traversal tests by <a
href="https://github.com/BlankParticle"><code>@​BlankParticle</code></a>
in <a
href="https://redirect.github.com/honojs/node-server/pull/377">honojs/node-server#377</a></li>
<li>perf(request): fast-path QUERY methods by <a
href="https://github.com/usualoma"><code>@​usualoma</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/376">honojs/node-server#376</a></li>
<li>perf(request): fast-path PATCH method by <a
href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/380">honojs/node-server#380</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/honojs/node-server/compare/v2.0.10...v2.0.11">https://github.com/honojs/node-server/compare/v2.0.10...v2.0.11</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/honojs/node-server/commit/a813b6cdaa15baac3ead84e9e6ed5b72b2353c96"><code>a813b6c</code></a>
2.0.12</li>
<li><a
href="https://github.com/honojs/node-server/commit/caf48bafd4638bac5c338166b8858b72bcf79257"><code>caf48ba</code></a>
fix(response): copy headers when init is a foreign Response (<a
href="https://redirect.github.com/honojs/node-server/issues/382">#382</a>)</li>
<li><a
href="https://github.com/honojs/node-server/commit/3b1dd6875812e0b5aee43ec3fac66c191fd6251f"><code>3b1dd68</code></a>
test: replace supertest (<a
href="https://redirect.github.com/honojs/node-server/issues/379">#379</a>)</li>
<li><a
href="https://github.com/honojs/node-server/commit/834e54f15cf12b80cf82823c845b2bab41056cf0"><code>834e54f</code></a>
2.0.11</li>
<li><a
href="https://github.com/honojs/node-server/commit/ba72bcd8c563fbe1e9678e7ef27794a0aa4a6158"><code>ba72bcd</code></a>
perf(request): fast-path PATCH method (<a
href="https://redirect.github.com/honojs/node-server/issues/380">#380</a>)</li>
<li><a
href="https://github.com/honojs/node-server/commit/962baa463879da394008f27510d68dc90b640e99"><code>962baa4</code></a>
perf(request): fast-path QUERY methods (<a
href="https://redirect.github.com/honojs/node-server/issues/376">#376</a>)</li>
<li><a
href="https://github.com/honojs/node-server/commit/62284d659380cb0354510d0359c160c8d970764d"><code>62284d6</code></a>
test: use a custom helper for path traversal tests (<a
href="https://redirect.github.com/honojs/node-server/issues/377">#377</a>)</li>
<li>See full diff in <a
href="https://github.com/honojs/node-server/compare/v2.0.10...v2.0.12">compare
view</a></li>
</ul>
</details>
<br />

Updates `@types/pg` from 8.20.0 to 8.20.3
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/pg">compare
view</a></li>
</ul>
</details>
<br />

Updates `react` from 19.2.7 to 19.2.8
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/react/react/releases">react's
releases</a>.</em></p>
<blockquote>
<h2>19.2.8 (July 21st, 2026)</h2>
<h2>React Server Components</h2>
<ul>
<li>Performance improvements when decoding
(<a
href="https://redirect.github.com/facebook/react/pull/37087">#37087</a>
by <a href="https://github.com/eps1lon"><code>@​eps1lon</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/react/react/commit/1dd4ecbdabf826f527fc9a58c05ea70375b7d170"><code>1dd4ecb</code></a>
[FlightReply] Performance improvements when decoding (<a
href="https://github.com/react/react/tree/HEAD/packages/react/issues/37087">#37087</a>)</li>
<li><a
href="https://github.com/react/react/commit/b0d2fdb78bdfae075a7fa02ddcebbf25f90952c2"><code>b0d2fdb</code></a>
[19.2.x] Update required references to GitHub repo (<a
href="https://github.com/react/react/tree/HEAD/packages/react/issues/36753">#36753</a>)</li>
<li>See full diff in <a
href="https://github.com/react/react/commits/v19.2.8/packages/react">compare
view</a></li>
</ul>
</details>
<br />

Updates `@types/react` from 19.2.17 to 19.2.18
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react">compare
view</a></li>
</ul>
</details>
<br />

Updates `react-dom` from 19.2.7 to 19.2.8
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/react/react/releases">react-dom's
releases</a>.</em></p>
<blockquote>
<h2>19.2.8 (July 21st, 2026)</h2>
<h2>React Server Components</h2>
<ul>
<li>Performance improvements when decoding
(<a
href="https://redirect.github.com/facebook/react/pull/37087">#37087</a>
by <a href="https://github.com/eps1lon"><code>@​eps1lon</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/react/react/commit/1dd4ecbdabf826f527fc9a58c05ea70375b7d170"><code>1dd4ecb</code></a>
[FlightReply] Performance improvements when decoding (<a
href="https://github.com/react/react/tree/HEAD/packages/react-dom/issues/37087">#37087</a>)</li>
<li><a
href="https://github.com/react/react/commit/b0d2fdb78bdfae075a7fa02ddcebbf25f90952c2"><code>b0d2fdb</code></a>
[19.2.x] Update required references to GitHub repo (<a
href="https://github.com/react/react/tree/HEAD/packages/react-dom/issues/36753">#36753</a>)</li>
<li>See full diff in <a
href="https://github.com/react/react/commits/v19.2.8/packages/react-dom">compare
view</a></li>
</ul>
</details>
<br />

Updates `@types/react-dom` from 19.2.3 to 19.2.4
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom">compare
view</a></li>
</ul>
</details>
<br />

Updates `@tailwindcss/vite` from 4.3.2 to 4.3.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/tailwindlabs/tailwindcss/releases">@​tailwindcss/vite's
releases</a>.</em></p>
<blockquote>
<h2>v4.3.3</h2>
<h3>Fixed</h3>
<ul>
<li>Support <code>--watch --poll[=ms]</code> in
<code>@tailwindcss/cli</code> when filesystem events are unreliable or
unavailable (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20297">#20297</a>)</li>
<li>Canonicalization: match arbitrary hex colors against theme colors
case-insensitively (e.g. <code>bg-[#fff]</code> and
<code>bg-[#FFF]</code> → <code>bg-white</code>) (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20298">#20298</a>)</li>
<li>Prevent Preflight from overriding Firefox's native
<code>iframe:focus-visible</code> outline styles (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20292">#20292</a>)</li>
<li>Ensure <code>theme('colors.foo')</code> in JS plugins resolves
correctly when both <code>--color-foo</code> and
<code>--color-foo-bar</code> exist (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20299">#20299</a>)</li>
<li>Ensure fractional opacity modifiers work with named shadow sizes
like <code>shadow-sm/12.5</code>, <code>text-shadow-sm/12.5</code>,
<code>drop-shadow-sm/12.5</code>, and <code>inset-shadow-sm/12.5</code>
(<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20302">#20302</a>)</li>
<li>Parse selectors like <code>[data-foo]div</code> as two selectors
instead of one (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20303">#20303</a>)</li>
<li>Ensure <code>@tailwindcss/postcss</code> rebuilds when a
preprocessor like Sass changes the input CSS without changing the input
file on disk (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20310">#20310</a>)</li>
<li>Ensure CSS nesting is handled even when Lightning CSS isn't run,
such as in <code>@tailwindcss/browser</code> and Tailwind Play (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20124">#20124</a>)</li>
<li>Prevent achromatic theme colors from shifting hue when mixed in
polar color spaces like <code>oklch</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20314">#20314</a>)</li>
<li>Ensure <code>--spacing(0)</code> is optimized to <code>0px</code>
instead of <code>0</code> so it remains a <code>&lt;length&gt;</code>
when used in <code>calc(…)</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20319">#20319</a>)</li>
<li>Load <code>@parcel/watcher</code> only when needed in
<code>@tailwindcss/cli --watch</code> mode, so one-off builds and
<code>--watch --poll</code> work when <code>@parcel/watcher</code> can't
be loaded (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20325">#20325</a>)</li>
<li>Use explicit platform fonts instead of <code>system-ui</code> and
<code>ui-sans-serif</code> so CJK text respects the page's
<code>lang</code> attribute on Windows (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20318">#20318</a>)</li>
<li>Prevent <code>@tailwindcss/upgrade</code> from rewriting ignored
files when run from a subdirectory (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20329">#20329</a>)</li>
<li>Ensure earlier <code>@source</code> rules pointing to nested files
are scanned when later <code>@source</code> rules point to files in
parent folders (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20335">#20335</a>)</li>
<li>Prevent <code>@tailwindcss/vite</code> from triggering full page
reloads when scanned files are processed by Vite but haven't been loaded
as modules yet (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20336">#20336</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md">@​tailwindcss/vite's
changelog</a>.</em></p>
<blockquote>
<h2>[4.3.3] - 2026-07-16</h2>
<h3>Fixed</h3>
<ul>
<li>Support <code>--watch --poll[=ms]</code> in
<code>@tailwindcss/cli</code> when filesystem events are unreliable or
unavailable (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20297">#20297</a>)</li>
<li>Canonicalization: match arbitrary hex colors against theme colors
case-insensitively (e.g. <code>bg-[#fff]</code> and
<code>bg-[#FFF]</code> → <code>bg-white</code>) (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20298">#20298</a>)</li>
<li>Prevent Preflight from overriding Firefox's native
<code>iframe:focus-visible</code> outline styles (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20292">#20292</a>)</li>
<li>Ensure <code>theme('colors.foo')</code> in JS plugins resolves
correctly when both <code>--color-foo</code> and
<code>--color-foo-bar</code> exist (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20299">#20299</a>)</li>
<li>Ensure fractional opacity modifiers work with named shadow sizes
like <code>shadow-sm/12.5</code>, <code>text-shadow-sm/12.5</code>,
<code>drop-shadow-sm/12.5</code>, and <code>inset-shadow-sm/12.5</code>
(<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20302">#20302</a>)</li>
<li>Parse selectors like <code>[data-foo]div</code> as two selectors
instead of one (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20303">#20303</a>)</li>
<li>Ensure <code>@tailwindcss/postcss</code> rebuilds when a
preprocessor like Sass changes the input CSS without changing the input
file on disk (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20310">#20310</a>)</li>
<li>Ensure CSS nesting is handled even when Lightning CSS isn't run,
such as in <code>@tailwindcss/browser</code> and Tailwind Play (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20124">#20124</a>)</li>
<li>Prevent achromatic theme colors from shifting hue when mixed in
polar color spaces like <code>oklch</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20314">#20314</a>)</li>
<li>Ensure <code>--spacing(0)</code> is optimized to <code>0px</code>
instead of <code>0</code> so it remains a <code>&lt;length&gt;</code>
when used in <code>calc(…)</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20319">#20319</a>)</li>
<li>Load <code>@parcel/watcher</code> only when needed in
<code>@tailwindcss/cli --watch</code> mode, so one-off builds and
<code>--watch --poll</code> work when <code>@parcel/watcher</code> can't
be loaded (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20325">#20325</a>)</li>
<li>Use explicit platform fonts instead of <code>system-ui</code> and
<code>ui-sans-serif</code> so CJK text respects the page's
<code>lang</code> attribute on Windows (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20318">#20318</a>)</li>
<li>Prevent <code>@tailwindcss/upgrade</code> from rewriting ignored
files when run from a subdirectory (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20329">#20329</a>)</li>
<li>Ensure earlier <code>@source</code> rules pointing to nested files
are scanned when later <code>@source</code> rules point to files in
parent folders (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20335">#20335</a>)</li>
<li>Prevent <code>@tailwindcss/vite</code> from triggering full page
reloads when scanned files are processed by Vite but haven't been loaded
as modules yet (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20336">#20336</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/tailwindlabs/tailwindcss/commit/c2b24dd15fed1c59dd521bd86082f520c9f5ad0d"><code>c2b24dd</code></a>
4.3.3 (<a
href="https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-vite/issues/20334">#20334</a>)</li>
<li><a
href="https://github.com/tailwindlabs/tailwindcss/commit/bdcd7087b332d263353d46ed366b7b08040ded7a"><code>bdcd708</code></a>
Don't trigger a full page reload for scanned files that Vite processes
as mod...</li>
<li>See full diff in <a
href="https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/@tailwindcss-vite">compare
view</a></li>
</ul>
</details>
<br />

Updates `@types/react` from 19.2.17 to 19.2.18
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react">compare
view</a></li>
</ul>
</details>
<br />

Updates `@types/react-dom` from 19.2.3 to 19.2.4
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom">compare
view</a></li>
</ul>
</details>
<br />

Updates `@vitejs/plugin-react` from 6.0.3 to 6.0.5
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite-plugin-react/releases">@​vitejs/plugin-react's
releases</a>.</em></p>
<blockquote>
<h2>plugin-react@6.0.5</h2>
<h3>Fixed the react compiler preset filter to be linear (<a
href="https://redirect.github.com/vitejs/vite-plugin-react/pull/1353">#1353</a>)</h3>
<p>The improved filter in v6.0.3 was non-linear and caused a performance
regression (<a
href="https://redirect.github.com/vitejs/vite-plugin-react/issues/1349">#1349</a>).
The filter was changed to be linear to avoid that.</p>
<h2>plugin-react@6.0.4</h2>
<h3>Fixed <code>$RefreshSig$ is not defined</code> error when running
<code>vite dev</code> with <code>NODE_ENV=production</code></h3>
<p>When running <code>vite dev</code> with
<code>NODE_ENV=production</code>, the app errored with
<code>$RefreshSig$ is not defined</code>.
This error is now fixed.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md">@​vitejs/plugin-react's
changelog</a>.</em></p>
<blockquote>
<h2>6.0.5 (2026-07-30)</h2>
<h3>Fixed the react compiler preset filter to be linear (<a
href="https://redirect.github.com/vitejs/vite-plugin-react/pull/1353">#1353</a>)</h3>
<p>The improved filter in v6.0.3 was non-linear and caused a performance
regression (<a
href="https://redirect.github.com/vitejs/vite-plugin-react/issues/1349">#1349</a>).
The filter was changed to be linear to avoid that.</p>
<h2>6.0.4 (2026-07-22)</h2>
<h3>Fixed <code>$RefreshSig$ is not defined</code> error when running
<code>vite dev</code> with <code>NODE_ENV=production</code></h3>
<p>When running <code>vite dev</code> with
<code>NODE_ENV=production</code>, the app errored with
<code>$RefreshSig$ is not defined</code>.
This error is now fixed.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitejs/vite-plugin-react/commit/68c0cb8796ce18bd049c3d05c5210eaf0617eac0"><code>68c0cb8</code></a>
release: plugin-react@6.0.5 (<a
href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1362">#1362</a>)</li>
<li><a
href="https://github.com/vitejs/vite-plugin-react/commit/555cdbc126506317b05404481374406771a41e70"><code>555cdbc</code></a>
fix(react): make the react compiler preset filter linear (<a
href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1353">#1353</a>)</li>
<li><a
href="https://github.com/vitejs/vite-plugin-react/commit/a00a9f8240d5a7bb4062ee2a5bac68ea4f0defa6"><code>a00a9f8</code></a>
fix(deps): update all non-major dependencies (<a
href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1327">#1327</a>)</li>
<li><a
href="https://github.com/vitejs/vite-plugin-react/commit/f4b549822ec239799d746c030abb0b9a7d8f0a04"><code>f4b5498</code></a>
release: plugin-react@6.0.4</li>
<li><a
href="https://github.com/vitejs/vite-plugin-react/commit/7a4065906e07e616aee23c4fcc76a76b74a7d694"><code>7a40659</code></a>
fix(react): <code>$RefreshSig$ is not defined</code> with
NODE_ENV=production vite dev ...</li>
<li><a
href="https://github.com/vitejs/vite-plugin-react/commit/98b32d47a3f2517d52e8a51d8e28ff2ed13678a2"><code>98b32d4</code></a>
fix(deps): update react 19.2.8 (<a
href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1298">#1298</a>)</li>
<li><a
href="https://github.com/vitejs/vite-plugin-react/commit/8ae5449be23079dd17fdefc64064a3d94be6fc39"><code>8ae5449</code></a>
fix: babel-plugin-react-compiler cannot be imported when used in a
framework ...</li>
<li><a
href="https://github.com/vitejs/vite-plugin-react/commit/f09ea01b0b66a4900c3e42cef2aa0147e78b097c"><code>f09ea01</code></a>
fix(deps): update all non-major dependencies (<a
href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1282">#1282</a>)</li>
<li>See full diff in <a
href="https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.5/packages/plugin-react">compare
view</a></li>
</ul>
</details>
<br />

Updates `tailwindcss` from 4.3.2 to 4.3.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/tailwindlabs/tailwindcss/releases">tailwindcss's
releases</a>.</em></p>
<blockquote>
<h2>v4.3.3</h2>
<h3>Fixed</h3>
<ul>
<li>Support <code>--watch --poll[=ms]</code> in
<code>@tailwindcss/cli</code> when filesystem events are unreliable or
unavailable (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20297">#20297</a>)</li>
<li>Canonicalization: match arbitrary hex colors against theme colors
case-insensitively (e.g. <code>bg-[#fff]</code> and
<code>bg-[#FFF]</code> → <code>bg-white</code>) (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20298">#20298</a>)</li>
<li>Prevent Preflight from overriding Firefox's native
<code>iframe:focus-visible</code> outline styles (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20292">#20292</a>)</li>
<li>Ensure <code>theme('colors.foo')</code> in JS plugins resolves
correctly when both <code>--color-foo</code> and
<code>--color-foo-bar</code> exist (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20299">#20299</a>)</li>
<li>Ensure fractional opacity modifiers work with named shadow sizes
like <code>shadow-sm/12.5</code>, <code>text-shadow-sm/12.5</code>,
<code>drop-shadow-sm/12.5</code>, and <code>inset-shadow-sm/12.5</code>
(<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20302">#20302</a>)</li>
<li>Parse selectors like <code>[data-foo]div</code> as two selectors
instead of one (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20303">#20303</a>)</li>
<li>Ensure <code>@tailwindcss/postcss</code> rebuilds when a
preprocessor like Sass changes the input CSS without changing the input
file on disk (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20310">#20310</a>)</li>
<li>Ensure CSS nesting is handled even when Lightning CSS isn't run,
such as in <code>@tailwindcss/browser</code> and Tailwind Play (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20124">#20124</a>)</li>
<li>Prevent achromatic theme colors from shifting hue when mixed in
polar color spaces like <code>oklch</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20314">#20314</a>)</li>
<li>Ensure <code>--spacing(0)</code> is optimized to <code>0px</code>
instead of <code>0</code> so it remains a <code>&lt;length&gt;</code>
when used in <code>calc(…)</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20319">#20319</a>)</li>
<li>Load <code>@parcel/watcher</code> only when needed in
<code>@tailwindcss/cli --watch</code> mode, so one-off builds and
<code>--watch --poll</code> work when <code>@parcel/watcher</code> can't
be loaded (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20325">#20325</a>)</li>
<li>Use explicit platform fonts instead of <code>system-ui</code> and
<code>ui-sans-serif</code> so CJK text respects the page's
<code>lang</code> attribute on Windows (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20318">#20318</a>)</li>
<li>Prevent <code>@tailwindcss/upgrade</code> from rewriting ignored
files when run from a subdirectory (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20329">#20329</a>)</li>
<li>Ensure earlier <code>@source</code> rules pointing to nested files
are scanned when later <code>@source</code> rules point to files in
parent folders (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20335">#20335</a>)</li>
<li>Prevent <code>@tailwindcss/vite</code> from triggering full page
reloads when scanned files are processed by Vite but haven't been loaded
as modules yet (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20336">#20336</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md">tailwindcss's
changelog</a>.</em></p>
<blockquote>
<h2>[4.3.3] - 2026-07-16</h2>
<h3>Fixed</h3>
<ul>
<li>Support <code>--watch --poll[=ms]</code> in
<code>@tailwindcss/cli</code> when filesystem events are unreliable or
unavailable (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20297">#20297</a>)</li>
<li>Canonicalization: match arbitrary hex colors against theme colors
case-insensitively (e.g. <code>bg-[#fff]</code> and
<code>bg-[#FFF]</code> → <code>bg-white</code>) (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20298">#20298</a>)</li>
<li>Prevent Preflight from overriding Firefox's native
<code>iframe:focus-visible</code> outline styles (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20292">#20292</a>)</li>
<li>Ensure <code>theme('colors.foo')</code> in JS plugins resolves
correctly when both <code>--color-foo</code> and
<code>--color-foo-bar</code> exist (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20299">#20299</a>)</li>
<li>Ensure fractional opacity modifiers work with named shadow sizes
like <code>shadow-sm/12.5</code>, <code>text-shadow-sm/12.5</code>,
<code>drop-shadow-sm/12.5</code>, and <code>inset-shadow-sm/12.5</code>
(<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20302">#20302</a>)</li>
<li>Parse selectors like <code>[data-foo]div</code> as two selectors
instead of one (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20303">#20303</a>)</li>
<li>Ensure <code>@tailwindcss/postcss</code> rebuilds when a
preprocessor like Sass changes the input CSS without changing the input
file on disk (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20310">#20310</a>)</li>
<li>Ensure CSS nesting is handled even when Lightning CSS isn't run,
such as in <code>@tailwindcss/browser</code> and Tailwind Play (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20124">#20124</a>)</li>
<li>Prevent achromatic theme colors from shifting hue when mixed in
polar color spaces like <code>oklch</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20314">#20314</a>)</li>
<li>Ensure <code>--spacing(0)</code> is optimized to <code>0px</code>
instead of <code>0</code> so it remains a <code>&lt;length&gt;</code>
when used in <code>calc(…)</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20319">#20319</a>)</li>
<li>Load <code>@parcel/watcher</code> only when needed in
<code>@tailwindcss/cli --watch</code> mode, so one-off builds and
<code>--watch --poll</code> work when <code>@parcel/watcher</code> can't
be loaded (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20325">#20325</a>)</li>
<li>Use explicit platform fonts instead of <code>system-ui</code> and
<code>ui-sans-serif</code> so CJK text respects the page's
<code>lang</code> attribute on Windows (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20318">#20318</a>)</li>
<li>Prevent <code>@tailwindcss/upgrade</code> from rewriting ignored
files when run from a subdirectory (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20329">#20329</a>)</li>
<li>Ensure earlier <code>@source</code> rules pointing to nested files
are scanned when later <code>@source</code> rules point to files in
parent folders (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20335">#20335</a>)</li>
<li>Prevent <code>@tailwindcss/vite</code> from triggering full page
reloads when scanned files are processed by Vite but haven't been loaded
as modules yet (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20336">#20336</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/tailwindlabs/tailwindcss/commit/c2b24dd15fed1c59dd521bd86082f520c9f5ad0d"><code>c2b24dd</code></a>
4.3.3 (<a
href="https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss/issues/20334">#20334</a>)</li>
<li><a
href="https://github.com/tailwindlabs/tailwindcss/commit/e48c5e80473c25fe5a27fe267fbaf4f6512424a3"><code>e48c5e8</code></a>
Fix weird character re...

_Description has been truncated_

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-05 01:49:27 -07:00
dependabot[bot] 792c627aec build(deps): bump the minor-deps-updates-main group with 6 updates (#721)
Bumps the minor-deps-updates-main group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [globals](https://github.com/sindresorhus/globals) | `17.7.0` |
`17.8.0` |
| [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt) |
`0.60.0` | `0.61.0` |
| [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) |
`1.75.0` | `1.76.0` |
| [@daytona/sdk](https://github.com/daytona/clients) | `0.200.1` |
`0.202.0` |
| [acorn](https://github.com/acornjs/acorn) | `8.17.0` | `8.18.0` |
|
[lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react)
| `1.26.0` | `1.27.0` |

Updates `globals` from 17.7.0 to 17.8.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sindresorhus/globals/releases">globals's
releases</a>.</em></p>
<blockquote>
<h2>v17.8.0</h2>
<ul>
<li>Update globals (2026-07-01) (<a
href="https://redirect.github.com/sindresorhus/globals/issues/347">#347</a>)
7394811</li>
</ul>
<hr />
<p><a
href="https://github.com/sindresorhus/globals/compare/v17.7.0...v17.8.0">https://github.com/sindresorhus/globals/compare/v17.7.0...v17.8.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/sindresorhus/globals/commit/36c76590583fc1f31d755525862eda1793a7d661"><code>36c7659</code></a>
17.8.0</li>
<li><a
href="https://github.com/sindresorhus/globals/commit/739481186ed54482e29845eff0bc44803c35fde8"><code>7394811</code></a>
Update globals (2026-07-01) (<a
href="https://redirect.github.com/sindresorhus/globals/issues/347">#347</a>)</li>
<li>See full diff in <a
href="https://github.com/sindresorhus/globals/compare/v17.7.0...v17.8.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `oxfmt` from 0.60.0 to 0.61.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/oxc-project/oxc/commit/65fe65d8429e1d1bdf86c517ff08bd119ee87660"><code>65fe65d</code></a>
release(apps): oxlint v1.76.0 &amp;&amp; oxfmt v0.61.0 (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt/issues/24976">#24976</a>)</li>
<li>See full diff in <a
href="https://github.com/oxc-project/oxc/commits/oxfmt_v0.61.0/npm/oxfmt">compare
view</a></li>
</ul>
</details>
<br />

Updates `oxlint` from 1.75.0 to 1.76.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/oxc-project/oxc/releases">oxlint's
releases</a>.</em></p>
<blockquote>
<h2>oxlint v1.27.0 &amp;&amp; oxfmt v0.12.0</h2>
<h1>Oxlint v1.27.0</h1>
<h3>🚀 Features</h3>
<ul>
<li>222a8f0 linter/plugins: Implement
<code>SourceCode#isSpaceBetween</code> (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15498">#15498</a>)
(overlookmotel)</li>
<li>2f9735d linter/plugins: Implement
<code>context.languageOptions</code> (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15486">#15486</a>)
(overlookmotel)</li>
<li>bc731ff linter/plugins: Stub out all <code>Context</code> APIs (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15479">#15479</a>)
(overlookmotel)</li>
<li>5822cb4 linter/plugins: Add <code>extend</code> method to
<code>FILE_CONTEXT</code> (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15477">#15477</a>)
(overlookmotel)</li>
<li>7b1e6f3 apps: Add pure rust binaries and release to github (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15469">#15469</a>)
(Boshen)</li>
<li>2a89b43 linter: Introduce debug assertions after fixes to assert
validity (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15389">#15389</a>)
(camc314)</li>
<li>ad3c45a editor: Add <code>oxc.path.node</code> option (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15040">#15040</a>)
(Sysix)</li>
</ul>
<h3>🐛 Bug Fixes</h3>
<ul>
<li>6f3cd77 linter/no-var: Incorrect warning for blocks (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15504">#15504</a>)
(Hamir Mahal)</li>
<li>6957fb9 linter/plugins: Do not allow access to
<code>Context#id</code> in <code>createOnce</code> (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15489">#15489</a>)
(overlookmotel)</li>
<li>7409630 linter/plugins: Allow access to <code>cwd</code> in
<code>createOnce</code> in ESLint interop mode (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15488">#15488</a>)
(overlookmotel)</li>
<li>732205e parser: Reject <code>using</code> / <code>await using</code>
in a switch <code>case</code> / <code>default</code> clause (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15225">#15225</a>)
(sapphi-red)</li>
<li>a17ca32 linter/plugins: Replace <code>Context</code> class (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15448">#15448</a>)
(overlookmotel)</li>
<li>ecf2f7b language_server: Fail gracefully when tsgolint executable
not found (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15436">#15436</a>)
(camc314)</li>
<li>3c8d3a7 lang-server: Improve logging in failure case for tsgolint
(<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15299">#15299</a>)
(camc314)</li>
<li>ef71410 linter: Use jsx if source type is JS in fix debug assertion
(<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15434">#15434</a>)
(camc314)</li>
<li>e32bbf6 linter/no-var: Handle TypeScript declare keyword in fixer
(<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15426">#15426</a>)
(camc314)</li>
<li>6565dbe linter/switch-case-braces: Skip comments when searching for
<code>:</code> token (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15425">#15425</a>)
(camc314)</li>
<li>85bd19a linter/prefer-class-fields: Insert value after type
annotation in fixer (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15423">#15423</a>)
(camc314)</li>
<li>fde753e linter/plugins: Block access to
<code>context.settings</code> in <code>createOnce</code> (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15394">#15394</a>)
(overlookmotel)</li>
<li>ddd9f9f linter/forward-ref-uses-ref: Dont suggest removing wrapper
in invalid positions (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15388">#15388</a>)
(camc314)</li>
<li>dac2a9c linter/no-template-curly-in-string: Remove fixer (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15387">#15387</a>)
(camc314)</li>
<li>989b8e3 linter/no-var: Only fix to <code>const</code> if the var has
an initializer (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15385">#15385</a>)
(camc314)</li>
<li>cc403f5 linter/plugins: Return empty object for unimplemented
parserServices (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15364">#15364</a>)
(magic-akari)</li>
</ul>
<h3> Performance</h3>
<ul>
<li>25d577e language_server: Start tools in parallel (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15500">#15500</a>)
(Sysix)</li>
<li>3c57291 linter/plugins: Optimize loops (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15449">#15449</a>)
(overlookmotel)</li>
<li>3166233 linter/plugins: Remove <code>Arc</code>s (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15431">#15431</a>)
(overlookmotel)</li>
<li>9de1322 linter/plugins: Lazily deserialize settings JSON (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15395">#15395</a>)
(overlookmotel)</li>
<li>3049ec2 linter/plugins: Optimize <code>deepFreezeSettings</code> (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15392">#15392</a>)
(overlookmotel)</li>
<li>444ebfd linter/plugins: Use single object for
<code>parserServices</code> (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15378">#15378</a>)
(overlookmotel)</li>
</ul>
<h3>📚 Documentation</h3>
<ul>
<li>97d2104 linter: Update comment in lint.rs about default value for
tsconfig path (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15530">#15530</a>)
(Connor Shea)</li>
<li>2c6bd9e linter: Always refer as &quot;ES2015&quot; instead of
&quot;ES6&quot; (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15411">#15411</a>)
(sapphi-red)</li>
<li>a0c5203 linter/import/named: Update &quot;ES7&quot; comment in
examples (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15410">#15410</a>)
(sapphi-red)</li>
<li>3dc24b5 linter,minifier: Always refer as &quot;ES Modules&quot;
instead of &quot;ES6 Modules&quot; (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15409">#15409</a>)
(sapphi-red)</li>
<li>2ad77fb linter/no-this-before-super: Correct &quot;Why is this
bad?&quot; section (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15408">#15408</a>)
(sapphi-red)</li>
<li>57f0ce1 linter: Add backquotes where appropriate (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15407">#15407</a>)
(sapphi-red)</li>
</ul>
<h1>Oxfmt v0.12.0</h1>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md">oxlint's
changelog</a>.</em></p>
<blockquote>
<h2>[1.76.0] - 2026-07-27</h2>
<h3>🚀 Features</h3>
<ul>
<li>8d31dfa linter: Verify eslint/no-restricted-globals config schema
(<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24598">#24598</a>)
(vigneshwar)</li>
<li>7069621 linter: Verify jest/vitest prefer-lowercase-title config
schema (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24724">#24724</a>)
(Bartok)</li>
<li>016cf2a linter/oxc: Add bad-match-all-arg rule (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24900">#24900</a>)
(camc314)</li>
<li>cdc941e linter/n: Implement <code>exports-style</code> rule (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24087">#24087</a>)
(Mikhail Baev)</li>
<li>1ad6f6c linter/eslint: Implement <code>id-denylist</code> rule (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24632">#24632</a>)
(Mikhail Baev)</li>
</ul>
<h3>📚 Documentation</h3>
<ul>
<li>3ff2e0e linter: Clarify config extends types (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24936">#24936</a>)
(Boshen)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/oxc-project/oxc/commit/65fe65d8429e1d1bdf86c517ff08bd119ee87660"><code>65fe65d</code></a>
release(apps): oxlint v1.76.0 &amp;&amp; oxfmt v0.61.0 (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24976">#24976</a>)</li>
<li><a
href="https://github.com/oxc-project/oxc/commit/3ff2e0e6fa1670d2300b2fb44dddc08c2df50a00"><code>3ff2e0e</code></a>
docs(linter): clarify config extends types (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24936">#24936</a>)</li>
<li><a
href="https://github.com/oxc-project/oxc/commit/8d31dfa3934b0c8d276e022ad546836ee6d1dcd7"><code>8d31dfa</code></a>
feat(linter): verify eslint/no-restricted-globals config schema (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24598">#24598</a>)</li>
<li><a
href="https://github.com/oxc-project/oxc/commit/7069621199a47158b853743ab6664126ec7b24b4"><code>7069621</code></a>
feat(linter): verify jest/vitest prefer-lowercase-title config schema
(<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24724">#24724</a>)</li>
<li><a
href="https://github.com/oxc-project/oxc/commit/016cf2acd64e4f6d34226aecc84e69d342708858"><code>016cf2a</code></a>
feat(linter/oxc): add bad-match-all-arg rule (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24900">#24900</a>)</li>
<li><a
href="https://github.com/oxc-project/oxc/commit/cdc941e5f81d00dfca63cc17cc39eb6d1462a9ed"><code>cdc941e</code></a>
feat(linter/n): implement <code>exports-style</code> rule (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24087">#24087</a>)</li>
<li><a
href="https://github.com/oxc-project/oxc/commit/1ad6f6c823da92a9b70a9f8c23d355d1b99f9e75"><code>1ad6f6c</code></a>
feat(linter/eslint): implement <code>id-denylist</code> rule (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24632">#24632</a>)</li>
<li>See full diff in <a
href="https://github.com/oxc-project/oxc/commits/oxlint_v1.76.0/npm/oxlint">compare
view</a></li>
</ul>
</details>
<br />

Updates `@daytona/sdk` from 0.200.1 to 0.202.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/daytona/clients/releases">@​daytona/sdk's
releases</a>.</em></p>
<blockquote>
<h2>v0.202.0</h2>
<h2>0.202.0 (2026-07-29)</h2>
<h3>🚀 Features</h3>
<ul>
<li><strong>sdk:</strong> promote fork and create-snapshot to stable
API, deprecate experimental aliases (<a
href="https://redirect.github.com/daytona/clients/pull/143">#143</a>)</li>
<li><strong>sdk-typescript:</strong> distinguish client-side argument
validation from server 400s and restore timeout compatibility (<a
href="https://redirect.github.com/daytona/clients/pull/146">#146</a>)</li>
</ul>
<h3>Chores</h3>
<ul>
<li>sync go.sum for v0.201.0 (<a
href="https://redirect.github.com/daytona/clients/pull/138">#138</a>)</li>
<li>batch dependabot 20260727 (<a
href="https://redirect.github.com/daytona/clients/pull/140">#140</a>)</li>
<li><strong>sdk-go:</strong> bump to v0.202.0 (<a
href="https://redirect.github.com/daytona/clients/pull/147">#147</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>daytonaBot</li>
<li>Mirko Džaja <a
href="https://github.com/MDzaja"><code>@​MDzaja</code></a></li>
</ul>
<h2>v0.201.0</h2>
<h2>0.201.0 (2026-07-27)</h2>
<h3>🚀 Features</h3>
<ul>
<li><strong>sdk:</strong> add autoDestroyAt range filter to sandbox list
(<a
href="https://redirect.github.com/daytona/clients/pull/121">#121</a>)</li>
<li><strong>sdk:</strong> pre-signed sandbox file download/upload URLs
(<a
href="https://redirect.github.com/daytona/clients/pull/23">#23</a>)</li>
<li><strong>sdk:</strong> structured error responses with typed error
codes (<a
href="https://redirect.github.com/daytona/clients/pull/27">#27</a>)</li>
</ul>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>sdk:</strong> sign S3 requests with the region provided by
the API (<a
href="https://redirect.github.com/daytona/clients/pull/111">#111</a>)</li>
<li><strong>sdk-typescript:</strong> declare tslib and ws as runtime
dependencies (<a
href="https://redirect.github.com/daytona/clients/pull/128">#128</a>)</li>
<li><strong>toolbox-api-client-python:</strong> optional
FileInfo.modifiedAt for old-runner compatibility (<a
href="https://redirect.github.com/daytona/clients/pull/134">#134</a>)</li>
</ul>
<h3>Chores</h3>
<ul>
<li>sync go.sum for v0.200.1 (<a
href="https://redirect.github.com/daytona/clients/pull/118">#118</a>)</li>
<li>batch deps 20260723 (<a
href="https://redirect.github.com/daytona/clients/pull/123">#123</a>)</li>
<li><strong>sdk-go:</strong> bump to v0.201.0 (<a
href="https://redirect.github.com/daytona/clients/pull/137">#137</a>)</li>
</ul>
<h3>Uncategorized changes</h3>
<ul>
<li>Relax dotenv dependency to allow 3.x (<a
href="https://redirect.github.com/daytona/clients/pull/129">#129</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Abdelrahman Alzboon <a
href="https://github.com/a-zboon"><code>@​a-zboon</code></a></li>
<li>daytonaBot</li>
<li>Mirko Džaja <a
href="https://github.com/MDzaja"><code>@​MDzaja</code></a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/daytona/clients/commit/0ab96e5e1cd254abcc2e7f5d86d010f93055ee6f"><code>0ab96e5</code></a>
chore(sdk-go): bump to v0.202.0 (<a
href="https://redirect.github.com/daytona/clients/issues/147">#147</a>)</li>
<li><a
href="https://github.com/daytona/clients/commit/acb1e3e939889a7f9028a269debc1a110c4fe1eb"><code>acb1e3e</code></a>
feat(sdk-typescript): distinguish client-side argument validation from
server...</li>
<li><a
href="https://github.com/daytona/clients/commit/90470636897512e5885ec13121908d3b7fcc2a29"><code>9047063</code></a>
feat(sdk): promote fork and create-snapshot to stable API, deprecate
experime...</li>
<li><a
href="https://github.com/daytona/clients/commit/3e3cb92d4b0ce92e8365e12a20bece065ee141b1"><code>3e3cb92</code></a>
chore: batch dependabot 20260727 (<a
href="https://redirect.github.com/daytona/clients/issues/140">#140</a>)</li>
<li><a
href="https://github.com/daytona/clients/commit/23da590904f3b83cd51779989627a686eb1cf775"><code>23da590</code></a>
ci(release): gate release workflows behind the release environment (<a
href="https://redirect.github.com/daytona/clients/issues/139">#139</a>)</li>
<li><a
href="https://github.com/daytona/clients/commit/a2857d745f594a4310380e176e007b2987c6b0cc"><code>a2857d7</code></a>
ci(publish): gate publish jobs behind the release environment (<a
href="https://redirect.github.com/daytona/clients/issues/127">#127</a>)</li>
<li><a
href="https://github.com/daytona/clients/commit/361e6bbf32c3c9a551e480ca8b5c88231b5ca084"><code>361e6bb</code></a>
chore: sync go.sum for v0.201.0 (<a
href="https://redirect.github.com/daytona/clients/issues/138">#138</a>)</li>
<li><a
href="https://github.com/daytona/clients/commit/f8f8a932ce25e1000cf9be114bf62110bda94e3b"><code>f8f8a93</code></a>
chore(sdk-go): bump to v0.201.0 (<a
href="https://redirect.github.com/daytona/clients/issues/137">#137</a>)</li>
<li><a
href="https://github.com/daytona/clients/commit/03d91a264e14c1a0d311343736746276b9f287a1"><code>03d91a2</code></a>
feat(sdk): structured error responses with typed error codes (<a
href="https://redirect.github.com/daytona/clients/issues/27">#27</a>)</li>
<li><a
href="https://github.com/daytona/clients/commit/f261547c38b4128045700ef90ddb94a47bd860e1"><code>f261547</code></a>
Relax dotenv dependency to allow 3.x (<a
href="https://redirect.github.com/daytona/clients/issues/129">#129</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/daytona/clients/compare/v0.200.1...v0.202.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `acorn` from 8.17.0 to 8.18.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/acornjs/acorn/commit/d788421b242ddccb28040f1431438ee5cf474208"><code>d788421</code></a>
Mark version 8.18.0</li>
<li><a
href="https://github.com/acornjs/acorn/commit/b61cb9a4f245c0f7abc8c3ea9f85b5ac8bc5fbce"><code>b61cb9a</code></a>
Add startLocation option</li>
<li><a
href="https://github.com/acornjs/acorn/commit/c8d515c7f9c8baa62bf5ccffba98507b7be46218"><code>c8d515c</code></a>
Don't compute curLine when locations are off</li>
<li><a
href="https://github.com/acornjs/acorn/commit/a7bd3cd15702d28a7c8ef28365b3f04cf00d107c"><code>a7bd3cd</code></a>
Reject an unparenthesized arrow function as the left operand of
<code>**</code></li>
<li><a
href="https://github.com/acornjs/acorn/commit/b7c31b626e135c4ed130ff5063c44c20ea8e231a"><code>b7c31b6</code></a>
Fix mistake in previous patch</li>
<li><a
href="https://github.com/acornjs/acorn/commit/5c4af50af1536f144f0a4f254c50e5e34c0a2415"><code>5c4af50</code></a>
Avoid scanning from start of document in loose parser's resetTo</li>
<li>See full diff in <a
href="https://github.com/acornjs/acorn/compare/8.17.0...8.18.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `lucide-react` from 1.26.0 to 1.27.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/lucide-icons/lucide/releases">lucide-react's
releases</a>.</em></p>
<blockquote>
<h2>Version 1.27.0</h2>
<h2>What's Changed</h2>
<ul>
<li>feat(icons): removed brand names from tags &amp; revised brand
stopwords by <a
href="https://github.com/karsa-mistmere"><code>@​karsa-mistmere</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4575">lucide-icons/lucide#4575</a></li>
<li>fix(docs): Fix site build by <a
href="https://github.com/ericfennis"><code>@​ericfennis</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4582">lucide-icons/lucide#4582</a></li>
<li>fix(icons): optimised <code>square-scissors</code> icons by <a
href="https://github.com/karsa-mistmere"><code>@​karsa-mistmere</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4581">lucide-icons/lucide#4581</a></li>
<li>fix(packages/angular): add more supported attributes for SVG nodes
by <a
href="https://github.com/karsa-mistmere"><code>@​karsa-mistmere</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4570">lucide-icons/lucide#4570</a></li>
<li>feat(icons): added <code>pending-cw</code> icon by <a
href="https://github.com/NielsLazaroms"><code>@​NielsLazaroms</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4439">lucide-icons/lucide#4439</a></li>
<li>fix(icons): changed <code>zap</code> and <code>zap-off</code> icons
by <a href="https://github.com/kapowaz"><code>@​kapowaz</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4536">lucide-icons/lucide#4536</a></li>
<li>feat(icons): add <code>square-off</code> icon by <a
href="https://github.com/october-learns"><code>@​october-learns</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4496">lucide-icons/lucide#4496</a></li>
<li>chore(deps-dev): bump astro from 6.4.8 to 7.1.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4572">lucide-icons/lucide#4572</a></li>
<li>fix(icons): changed <code>toolbox</code> icon by <a
href="https://github.com/karsa-mistmere"><code>@​karsa-mistmere</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4571">lucide-icons/lucide#4571</a></li>
<li>feat(icons): add scan-square by <a
href="https://github.com/samuelalake"><code>@​samuelalake</code></a> in
<a
href="https://redirect.github.com/lucide-icons/lucide/pull/4550">lucide-icons/lucide#4550</a></li>
<li>feat(icons): added <code>user-shield</code> icon by <a
href="https://github.com/MArtytraM99"><code>@​MArtytraM99</code></a> in
<a
href="https://redirect.github.com/lucide-icons/lucide/pull/3099">lucide-icons/lucide#3099</a></li>
<li>feat(icons): added <code>mosque</code> icon by <a
href="https://github.com/iskepr"><code>@​iskepr</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4494">lucide-icons/lucide#4494</a></li>
<li>fix(request-review): Remove pull_request_target by <a
href="https://github.com/ericfennis"><code>@​ericfennis</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4593">lucide-icons/lucide#4593</a></li>
<li>fix(icons): changed <code>feather</code> icon by <a
href="https://github.com/karsa-mistmere"><code>@​karsa-mistmere</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4584">lucide-icons/lucide#4584</a></li>
<li>feat(ci): added custom prettier plugin for icon SVG files by <a
href="https://github.com/karsa-mistmere"><code>@​karsa-mistmere</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4576">lucide-icons/lucide#4576</a></li>
<li>ci(ci.yml): Remove concurrency in ci.yml by <a
href="https://github.com/ericfennis"><code>@​ericfennis</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4595">lucide-icons/lucide#4595</a></li>
<li>fix(icons): changed <code>barrel</code> icon by <a
href="https://github.com/karsa-mistmere"><code>@​karsa-mistmere</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4592">lucide-icons/lucide#4592</a></li>
<li>feat(lab): Migrate lab to main repo. by <a
href="https://github.com/ericfennis"><code>@​ericfennis</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4521">lucide-icons/lucide#4521</a></li>
<li>fix(icons): changed <code>trophy</code> icon by <a
href="https://github.com/karsa-mistmere"><code>@​karsa-mistmere</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4591">lucide-icons/lucide#4591</a></li>
<li>feat(analytics): add utm source and medium by <a
href="https://github.com/jguddas"><code>@​jguddas</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4596">lucide-icons/lucide#4596</a></li>
<li>feat(docs): Add lab requirement in pull_request_template.md by <a
href="https://github.com/danielbayley"><code>@​danielbayley</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3651">lucide-icons/lucide#3651</a></li>
<li>feat(icons): replaces <code>podcast</code> icon with new
<code>mic-*</code> icons by <a
href="https://github.com/karsa-mistmere"><code>@​karsa-mistmere</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4583">lucide-icons/lucide#4583</a></li>
<li>feat(icons): add layout-freeform by <a
href="https://github.com/samuelalake"><code>@​samuelalake</code></a> in
<a
href="https://redirect.github.com/lucide-icons/lucide/pull/4543">lucide-icons/lucide#4543</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/NielsLazaroms"><code>@​NielsLazaroms</code></a>
made their first contribution in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4439">lucide-icons/lucide#4439</a></li>
<li><a href="https://github.com/kapowaz"><code>@​kapowaz</code></a> made
their first contribution in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4536">lucide-icons/lucide#4536</a></li>
<li><a
href="https://github.com/october-learns"><code>@​october-learns</code></a>
made their first contribution in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4496">lucide-icons/lucide#4496</a></li>
<li><a
href="https://github.com/samuelalake"><code>@​samuelalake</code></a>
made their first contribution in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4550">lucide-icons/lucide#4550</a></li>
<li><a href="https://github.com/iskepr"><code>@​iskepr</code></a> made
their first contribution in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4494">lucide-icons/lucide#4494</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/lucide-icons/lucide/compare/1.26.0...1.27.0">https://github.com/lucide-icons/lucide/compare/1.26.0...1.27.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/lucide-icons/lucide/commits/1.27.0/packages/lucide-react">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-05 01:36:46 -07:00
dependabot[bot] 53194d08ad build(deps): bump the major-deps-updates group with 2 updates (#719)
Bumps the major-deps-updates group with 2 updates:
[actions/setup-python](https://github.com/actions/setup-python) and
[actions/stale](https://github.com/actions/stale).

Updates `actions/setup-python` from 6.3.0 to 7.0.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/setup-python/releases">actions/setup-python's
releases</a>.</em></p>
<blockquote>
<h2>v7.0.0</h2>
<h2>What's Changed</h2>
<h3>Enhancements</h3>
<ul>
<li>Migrate to ESM and upgrade dependencies by <a
href="https://github.com/priyagupta108"><code>@​priyagupta108</code></a>
in <a
href="https://redirect.github.com/actions/setup-python/pull/1330">actions/setup-python#1330</a></li>
<li>Pin SHA commits and update docs with latest versions by <a
href="https://github.com/HarithaVattikuti"><code>@​HarithaVattikuti</code></a>
in <a
href="https://redirect.github.com/actions/setup-python/pull/1338">actions/setup-python#1338</a></li>
<li>Remove the pip-install input by <a
href="https://github.com/gowridurgad"><code>@​gowridurgad</code></a> in
<a
href="https://redirect.github.com/actions/setup-python/pull/1336">actions/setup-python#1336</a></li>
</ul>
<h3>Bug Fix</h3>
<ul>
<li>Fix to Classify stderr warning messages as warnings instead of
errors in annotations by <a
href="https://github.com/lmvysakh"><code>@​lmvysakh</code></a> in <a
href="https://redirect.github.com/actions/setup-python/pull/1335">actions/setup-python#1335</a></li>
<li>Validate and retry manifest fetch to prevent silent failures by <a
href="https://github.com/priyagupta108"><code>@​priyagupta108</code></a>
in <a
href="https://redirect.github.com/actions/setup-python/pull/1332">actions/setup-python#1332</a></li>
</ul>
<h3>Dependency Upgrade</h3>
<ul>
<li>Bump certifi from 2020.6.20 to 2024.7.4 in
/<strong>tests</strong>/data by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/setup-python/pull/1328">actions/setup-python#1328</a></li>
<li>Remove EOL Python versions and Bumps numpy text fixture by <a
href="https://github.com/priya-kinthali"><code>@​priya-kinthali</code></a>
in <a
href="https://redirect.github.com/actions/setup-python/pull/1333">actions/setup-python#1333</a></li>
<li>Upgrade <code>@​actions/cache</code> to 6.2.0 by <a
href="https://github.com/philip-gai"><code>@​philip-gai</code></a> in <a
href="https://redirect.github.com/actions/setup-python/pull/1337">actions/setup-python#1337</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/lmvysakh"><code>@​lmvysakh</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-python/pull/1335">actions/setup-python#1335</a></li>
<li><a
href="https://github.com/philip-gai"><code>@​philip-gai</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/setup-python/pull/1337">actions/setup-python#1337</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-python/compare/v6...v7.0.0">https://github.com/actions/setup-python/compare/v6...v7.0.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/setup-python/commit/5fda3b95a4ea91299a34e894583c3862153e4b97"><code>5fda3b9</code></a>
Pin SHA commits and update docs with latest versions (<a
href="https://redirect.github.com/actions/setup-python/issues/1338">#1338</a>)</li>
<li><a
href="https://github.com/actions/setup-python/commit/4ab7e95f05e168b4356aebde89dd84f59c283d8e"><code>4ab7e95</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/setup-python/issues/1337">#1337</a>
from actions/philip-gai/bump-actions-cache-6-2-0</li>
<li><a
href="https://github.com/actions/setup-python/commit/0f3a009f475dbea83c0371cd85d099690fee8c5c"><code>0f3a009</code></a>
Remove the pip-install input (<a
href="https://redirect.github.com/actions/setup-python/issues/1336">#1336</a>)</li>
<li><a
href="https://github.com/actions/setup-python/commit/f8cf4291c8b8e273ddd26e569454615c7315d932"><code>f8cf429</code></a>
Migrate to ESM and upgrade dependencies (<a
href="https://redirect.github.com/actions/setup-python/issues/1330">#1330</a>)</li>
<li><a
href="https://github.com/actions/setup-python/commit/54baeea5b34417d10a7479663a23cca53ea209b5"><code>54baeea</code></a>
Validate and retry manifest fetch to prevent silent failures (<a
href="https://redirect.github.com/actions/setup-python/issues/1332">#1332</a>)</li>
<li><a
href="https://github.com/actions/setup-python/commit/c7092773a316760f4ecfe498e4af668a4dafeac5"><code>c709277</code></a>
Annotation code fix (<a
href="https://redirect.github.com/actions/setup-python/issues/1335">#1335</a>)</li>
<li><a
href="https://github.com/actions/setup-python/commit/6849080452e69b330395e8a6d23cf90f56d76a1a"><code>6849080</code></a>
remove EOL Python versions and Bumps numpy text fixture (<a
href="https://redirect.github.com/actions/setup-python/issues/1333">#1333</a>)</li>
<li><a
href="https://github.com/actions/setup-python/commit/0903b469fbf4441aadfe4f4b249dc5b1fba3a73e"><code>0903b46</code></a>
Bump certifi from 2020.6.20 to 2024.7.4 in /<strong>tests</strong>/data
(<a
href="https://redirect.github.com/actions/setup-python/issues/1328">#1328</a>)</li>
<li>See full diff in <a
href="https://github.com/actions/setup-python/compare/ece7cb06caefa5fff74198d8649806c4678c61a1...5fda3b95a4ea91299a34e894583c3862153e4b97">compare
view</a></li>
</ul>
</details>
<br />

Updates `actions/stale` from 10.4.0 to 11.0.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/stale/releases">actions/stale's
releases</a>.</em></p>
<blockquote>
<h2>v11.0.0</h2>
<h2>What's Changed</h2>
<h3>Enhancement</h3>
<ul>
<li>Migrate to ESM and update dependencies by <a
href="https://github-grid.enterprise.slack.com/team/U08CVLQ4JKE"><code>@​chiranjib-swain</code></a>
in <a
href="https://redirect.github.com/actions/stale/pull/1350">actions/stale#1350</a></li>
</ul>
<h3>Dependency Update</h3>
<ul>
<li>Override brace-expansion to 5.0.8 to address 24 high-severity
dependency vulnerabilities by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1351">actions/stale#1351</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/stale/compare/v10...v11.0.0">https://github.com/actions/stale/compare/v10...v11.0.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/stale/commit/4391f3da665fdf50b6810c1a66712fb9ba21aa93"><code>4391f3d</code></a>
Fix 24 high severity vulnerabilities by overriding brace-expansion to
5.0.8 (...</li>
<li><a
href="https://github.com/actions/stale/commit/eaf9131fae5eafd0c31a64ebe3a2e183266fec48"><code>eaf9131</code></a>
refactor: update imports to use ES module syntax and improve test
structure (...</li>
<li>See full diff in <a
href="https://github.com/actions/stale/compare/1e223db275d687790206a7acac4d1a11bd6fe629...4391f3da665fdf50b6810c1a66712fb9ba21aa93">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-05 01:36:38 -07:00
dependabot[bot] e91f5bbc04 build(deps): bump actions/checkout from 7.0.0 to 7.0.1 in the patch-deps-updates group (#718)
Bumps the patch-deps-updates group with 1 update:
[actions/checkout](https://github.com/actions/checkout).

Updates `actions/checkout` from 7.0.0 to 7.0.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/checkout/releases">actions/checkout's
releases</a>.</em></p>
<blockquote>
<h2>v7.0.1</h2>
<h2>What's Changed</h2>
<ul>
<li>skip running unsafe pr check if input is default by <a
href="https://github.com/aiqiaoy"><code>@​aiqiaoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2518">actions/checkout#2518</a></li>
<li>trim only ascii whitespace for branch by <a
href="https://github.com/aiqiaoy"><code>@​aiqiaoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2521">actions/checkout#2521</a></li>
<li>escape values passed to --unset by <a
href="https://github.com/aiqiaoy"><code>@​aiqiaoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2530">actions/checkout#2530</a></li>
<li>Various dependency updates</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/checkout/compare/v7...v7.0.1">https://github.com/actions/checkout/compare/v7...v7.0.1</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/actions/checkout/blob/main/CHANGELOG.md">actions/checkout's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<h2>v7.0.1</h2>
<ul>
<li>Skip running unsafe pr check if input is default by <a
href="https://github.com/aiqiaoy"><code>@​aiqiaoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2518">actions/checkout#2518</a></li>
<li>Trim only ascii whitespace for branch by <a
href="https://github.com/aiqiaoy"><code>@​aiqiaoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2521">actions/checkout#2521</a></li>
<li>Escape values passed to --unset by <a
href="https://github.com/aiqiaoy"><code>@​aiqiaoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2530">actions/checkout#2530</a></li>
<li>Various dependency updates</li>
</ul>
<h2>v7.0.0</h2>
<ul>
<li>Block checking out fork PR for pull_request_target and workflow_run
by <a href="https://github.com/aiqiaoy"><code>@​aiqiaoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2454">actions/checkout#2454</a></li>
<li>Various dependency updates</li>
</ul>
<h2>v6.0.3</h2>
<ul>
<li>Fix checkout init for SHA-256 repositories by <a
href="https://github.com/yaananth"><code>@​yaananth</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2439">actions/checkout#2439</a></li>
<li>fix: expand merge commit SHA regex and add SHA-256 test cases by <a
href="https://github.com/yaananth"><code>@​yaananth</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2414">actions/checkout#2414</a></li>
</ul>
<h2>v6.0.2</h2>
<ul>
<li>Fix tag handling: preserve annotations and explicit fetch-tags by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2356">actions/checkout#2356</a></li>
</ul>
<h2>v6.0.1</h2>
<ul>
<li>Add worktree support for persist-credentials includeIf by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2327">actions/checkout#2327</a></li>
</ul>
<h2>v6.0.0</h2>
<ul>
<li>Persist creds to a separate file by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2286">actions/checkout#2286</a></li>
<li>Update README to include Node.js 24 support details and requirements
by <a href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a>
in <a
href="https://redirect.github.com/actions/checkout/pull/2248">actions/checkout#2248</a></li>
</ul>
<h2>v5.0.1</h2>
<ul>
<li>Port v6 cleanup to v5 by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2301">actions/checkout#2301</a></li>
</ul>
<h2>v5.0.0</h2>
<ul>
<li>Update actions checkout to use node 24 by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2226">actions/checkout#2226</a></li>
</ul>
<h2>v4.3.1</h2>
<ul>
<li>Port v6 cleanup to v4 by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2305">actions/checkout#2305</a></li>
</ul>
<h2>v4.3.0</h2>
<ul>
<li>docs: update README.md by <a
href="https://github.com/motss"><code>@​motss</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1971">actions/checkout#1971</a></li>
<li>Add internal repos for checking out multiple repositories by <a
href="https://github.com/mouismail"><code>@​mouismail</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1977">actions/checkout#1977</a></li>
<li>Documentation update - add recommended permissions to Readme by <a
href="https://github.com/benwells"><code>@​benwells</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2043">actions/checkout#2043</a></li>
<li>Adjust positioning of user email note and permissions heading by <a
href="https://github.com/joshmgross"><code>@​joshmgross</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2044">actions/checkout#2044</a></li>
<li>Update README.md by <a
href="https://github.com/nebuk89"><code>@​nebuk89</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2194">actions/checkout#2194</a></li>
<li>Update CODEOWNERS for actions by <a
href="https://github.com/TingluoHuang"><code>@​TingluoHuang</code></a>
in <a
href="https://redirect.github.com/actions/checkout/pull/2224">actions/checkout#2224</a></li>
<li>Update package dependencies by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2236">actions/checkout#2236</a></li>
</ul>
<h2>v4.2.2</h2>
<ul>
<li><code>url-helper.ts</code> now leverages well-known environment
variables by <a href="https://github.com/jww3"><code>@​jww3</code></a>
in <a
href="https://redirect.github.com/actions/checkout/pull/1941">actions/checkout#1941</a></li>
<li>Expand unit test coverage for <code>isGhes</code> by <a
href="https://github.com/jww3"><code>@​jww3</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1946">actions/checkout#1946</a></li>
</ul>
<h2>v4.2.1</h2>
<ul>
<li>Check out other refs/* by commit if provided, fall back to ref by <a
href="https://github.com/orhantoy"><code>@​orhantoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1924">actions/checkout#1924</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/checkout/commit/3d3c42e5aac5ba805825da76410c181273ba90b1"><code>3d3c42e</code></a>
prep v7.0.1 release (<a
href="https://redirect.github.com/actions/checkout/issues/2531">#2531</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/28802689a136bfcdb721715abd713740beecbe07"><code>2880268</code></a>
escape values passed to --unset (<a
href="https://redirect.github.com/actions/checkout/issues/2530">#2530</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/12cd2235efa0937479335606d7c3ac9f6c0973b1"><code>12cd223</code></a>
trim only ascii whitespace for branch (<a
href="https://redirect.github.com/actions/checkout/issues/2521">#2521</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/62661c4e71a304b2823ed026347b8d34c3eac541"><code>62661c4</code></a>
skip running unsafe pr check if input is default (<a
href="https://redirect.github.com/actions/checkout/issues/2518">#2518</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/e8d4307400f9427dba7cb98e488d6ab85f1cec5f"><code>e8d4307</code></a>
Bump the minor-actions-dependencies group with 2 updates (<a
href="https://redirect.github.com/actions/checkout/issues/2499">#2499</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/631c942040754b6e095e929c1677c07e10ed4f87"><code>631c942</code></a>
eslint 9 (<a
href="https://redirect.github.com/actions/checkout/issues/2474">#2474</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/4f1f4aec02e41874fa0262ea8ff5172d7978ad1e"><code>4f1f4ae</code></a>
Bump actions/upload-artifact from 4 to 7 (<a
href="https://redirect.github.com/actions/checkout/issues/2476">#2476</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/ba097532fb203f7e88c9c3c0b899b49469908a92"><code>ba09753</code></a>
Bump actions/checkout from 6 to 7 (<a
href="https://redirect.github.com/actions/checkout/issues/2488">#2488</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/b9e0990d219a03df7633c93f6f005a8fecbcab22"><code>b9e0990</code></a>
Bump docker/login-action from 3.3.0 to 4.2.0 (<a
href="https://redirect.github.com/actions/checkout/issues/2479">#2479</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/e8cb398be4a550817e382abf69e4c12c76fce1f2"><code>e8cb398</code></a>
Bump docker/build-push-action from 6.5.0 to 7.2.0 (<a
href="https://redirect.github.com/actions/checkout/issues/2478">#2478</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/actions/checkout/compare/9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0...3d3c42e5aac5ba805825da76410c181273ba90b1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/checkout&package-manager=github_actions&previous-version=7.0.0&new-version=7.0.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-05 01:36:29 -07:00
dependabot[bot] 9475c45c77 build(deps): bump hono from 4.12.30 to 4.12.34 (#729)
Bumps [hono](https://github.com/honojs/hono) from 4.12.30 to 4.12.34.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/honojs/hono/releases">hono's
releases</a>.</em></p>
<blockquote>
<h2>v4.12.34</h2>
<h2>Security fixes</h2>
<p>This release includes fixes for the following security issues:</p>
<h3><code>memo()</code> retains SSR output across requests, leading to
cross-user data disclosure</h3>
<p>Affects: <code>hono/jsx</code> (server-side rendering). Fixes
<code>memo()</code> reusing a retained render result across requests
when props compare equal, where a component reading request-scoped
values from ambient context — <code>useContext()</code>,
<code>useRequestContext()</code>, or <code>getContext()</code> — could
serve HTML rendered for another user's request, disclosing account data
or request-scoped secrets such as CSRF tokens. GHSA-f23p-vx2j-j53r</p>
<h3>ReDoS in CORS middleware via
<code>Access-Control-Request-Headers</code></h3>
<p>Affects: <code>hono/cors</code>. Fixes a whitespace-tolerant regular
expression with quadratic backtracking used to parse the
<code>Access-Control-Request-Headers</code> preflight header when
<code>allowHeaders</code> is not configured (the default), where a
single preflight request carrying a long whitespace run could consume
seconds of CPU and stall request processing. GHSA-8j4g-w8fx-2239</p>
<h3>Algorithmic complexity DoS in Language Middleware</h3>
<p>Affects: <code>hono/language</code>. Fixes quadratic string
processing in language-tag normalization, where a crafted language tag
with a large number of hyphen-separated subtags — supplied via a query
parameter, cookie, or <code>Accept-Language</code> header — could cause
excessive CPU consumption and block the event loop.
GHSA-54fx-42gc-7vw4</p>
<h3>Proxy Helper does not remove response headers listed in the
<code>Connection</code> header</h3>
<p>Affects: <code>hono/proxy</code>. Fixes <code>proxy()</code>
forwarding response headers that the origin's <code>Connection</code>
header designates as connection-scoped, where headers intended only for
the immediate peer — per RFC 9110 Section 7.6.1 — could be exposed to
clients, disclosing connection-scoped or internal metadata.
GHSA-79qm-7rj5-m7r9</p>
<hr />
<p>Users who use <code>hono/jsx</code> for server-side rendering,
<code>hono/cors</code>, <code>hono/language</code>, or
<code>hono/proxy</code> are strongly encouraged to upgrade to this
version.</p>
<h2>v4.12.33</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(cookie): relax name validation when parsing Cookie header in <a
href="https://redirect.github.com/honojs/hono/pull/5164">honojs/hono#5164</a></li>
<li>chore: bump <code>@hono/node-server</code> in <a
href="https://redirect.github.com/honojs/hono/pull/5167">honojs/hono#5167</a></li>
<li>fix(jsx): handle useSyncExternalStore subscription and snapshot
changes in <a
href="https://redirect.github.com/honojs/hono/pull/5166">honojs/hono#5166</a></li>
<li>chore: remove undici in favor of global fetch in <a
href="https://redirect.github.com/honojs/hono/pull/5168">honojs/hono#5168</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/honojs/hono/compare/v4.12.32...v4.12.33">https://github.com/honojs/hono/compare/v4.12.32...v4.12.33</a></p>
<h2>v4.12.32</h2>
<h2>What's Changed</h2>
<ul>
<li>ci: enable reports for type &amp; bundle size check in <a
href="https://redirect.github.com/honojs/hono/pull/5148">honojs/hono#5148</a></li>
<li>fix(aws-lambda): add jwt and lambda authorizer types for API Gateway
v2 in <a
href="https://redirect.github.com/honojs/hono/pull/5142">honojs/hono#5142</a></li>
<li>fix(sse): emit empty id field to reset Last-Event-ID in <a
href="https://redirect.github.com/honojs/hono/pull/5138">honojs/hono#5138</a></li>
<li>test(cloudflare-workers): add coverage for onClose, onError, send,
and close in Cloudflare Workers websocket adapter in <a
href="https://redirect.github.com/honojs/hono/pull/5145">honojs/hono#5145</a></li>
<li>fix: use <code>Object.create(null)</code> when parsing query,
headers, and params in <a
href="https://redirect.github.com/honojs/hono/pull/5161">honojs/hono#5161</a></li>
<li>fix(secure-headers): keep CSP callbacks scoped to their header in <a
href="https://redirect.github.com/honojs/hono/pull/5147">honojs/hono#5147</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/honojs/hono/compare/v4.12.31...v4.12.32">https://github.com/honojs/hono/compare/v4.12.31...v4.12.32</a></p>
<h2>v4.12.31</h2>
<h2>What's Changed</h2>
<ul>
<li>test(context): assert case-insensitive header names in response
helpers by <a
href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a
href="https://redirect.github.com/honojs/hono/pull/5116">honojs/hono#5116</a></li>
<li>chore(benchmark): add app.fetch() overhead benchmark by <a
href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a
href="https://redirect.github.com/honojs/hono/pull/5117">honojs/hono#5117</a></li>
<li>refactor(aws-lambada): remove FIXME in <code>@ts-expect-error</code>
by <a href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in
<a
href="https://redirect.github.com/honojs/hono/pull/5130">honojs/hono#5130</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/honojs/hono/commit/734755ace341607628219ea1dd8ca17f01bf1a5c"><code>734755a</code></a>
4.12.34</li>
<li><a
href="https://github.com/honojs/hono/commit/9839ff32a349bf088b6ddfa604010879dd2d3a05"><code>9839ff3</code></a>
chore: update <code>bun.lock</code> (<a
href="https://redirect.github.com/honojs/hono/issues/5182">#5182</a>)</li>
<li><a
href="https://github.com/honojs/hono/commit/0c45036d6b0ddf42ab2fa44639dc8710825d5c0f"><code>0c45036</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/honojs/hono/commit/720b566290793d4358bf39843adcb7cf4da4548f"><code>720b566</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/honojs/hono/commit/f70e2c31684387b3231cc38512a31df6ca76a1c7"><code>f70e2c3</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/honojs/hono/commit/93fc250d8b4df58ea542cb945171de8013d5e6d5"><code>93fc250</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/honojs/hono/commit/51db3131d5e97076327edaa0afdb60ebb77c264f"><code>51db313</code></a>
4.12.33</li>
<li><a
href="https://github.com/honojs/hono/commit/aed146364d5c48a8336b8c82fedfabebf8063d07"><code>aed1463</code></a>
chore: remove undici in favor of global fetch (<a
href="https://redirect.github.com/honojs/hono/issues/5168">#5168</a>)</li>
<li><a
href="https://github.com/honojs/hono/commit/224d2f5cbf2b4bc2ebb7482d0592149a8d9f0574"><code>224d2f5</code></a>
fix(jsx): handle useSyncExternalStore subscription and snapshot changes
(<a
href="https://redirect.github.com/honojs/hono/issues/5166">#5166</a>)</li>
<li><a
href="https://github.com/honojs/hono/commit/df653cea0450657977887d56a5188368387456c8"><code>df653ce</code></a>
chore: bump <code>@hono/node-server</code> (<a
href="https://redirect.github.com/honojs/hono/issues/5167">#5167</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/honojs/hono/compare/v4.12.30...v4.12.34">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=hono&package-manager=npm_and_yarn&previous-version=4.12.30&new-version=4.12.34)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/langchain-ai/deepagentsjs/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-05 01:27:45 -07:00
Hunter Lovell 521738d457 fix: correct changelogs and versions (#727)
## Summary

Correct the release metadata for provider packages whose `1.0.0`
versions were published prematurely and deprecated. This preserves the
intended pre-1.0 version lines by advancing each affected package by a
patch release.

## Changes

### Provider packages

- Change `@langchain/node-vfs` and `@langchain/daytona` to `0.2.2`;
`@langchain/deno` to `0.2.3`; `@langchain/modal` to `0.1.6`; and
`@langchain/quickjs` to `0.6.1`.
- Replace each accidental `1.0.0` changelog heading with the corrected
patch version and a notice directing consumers away from the deprecated
release.
@langchain/daytona@0.2.2 @langchain/deno@0.2.3 @langchain/modal@0.1.6 @langchain/node-vfs@0.2.2 @langchain/quickjs@0.6.1
2026-08-04 12:40:10 -07:00
github-actions[bot] 5af75fffbe chore: version packages (#726)
This PR was opened by the [Changesets
release](https://github.com/changesets/action) GitHub action. When
you're ready to do a release, you can merge this and the packages will
be published to npm automatically. If you're not ready to do a release
yet, that's fine, whenever you add more changesets to main, this PR will
be updated.


# Releases
## deepagents-acp@0.1.23

### Patch Changes

- Updated dependencies
[[`590c2a5`](https://github.com/langchain-ai/deepagentsjs/commit/590c2a5042473f096d5fac5ddbb4be96e2ace0f2)]:
  - deepagents@1.12.2
## deepagents@1.12.2

### Patch Changes

- [#723](https://github.com/langchain-ai/deepagentsjs/pull/723)
[`590c2a5`](https://github.com/langchain-ai/deepagentsjs/commit/590c2a5042473f096d5fac5ddbb4be96e2ace0f2)
Thanks
[@thushanth-bengre-langchain](https://github.com/thushanth-bengre-langchain)!
- fix(deepagents): prevent stack overflow in CompositeBackend grep/glob
on huge result sets, and add a grep match-count cap

`CompositeBackend` accumulated merged `ls`/`grep`/`glob` results with
`push(...entries)`, which passes every entry as a separate function
argument and overflows the call stack (RangeError: Maximum call stack
size exceeded) when a broad search over a large tree returns hundreds of
thousands of entries. Results are now accumulated with a plain loop, so
no result-set size can overflow the stack.

`grep` also gains an optional `maxCount` (backend) / `max_count` (tool)
cap, mirroring the Python SDK. When the cap is hit, results are flagged
`truncated: true` on `GrepResult`/`GlobResult` and the grep tool appends
a note telling the model to narrow the search. The cap defaults to 1000
via the `grepMaxCount` middleware option (set to `null` to disable).
`CompositeBackend` splits the budget across routed backends and
OR-propagates the `truncated` flag on merged results.
## @deepagents/evals@0.0.22

### Patch Changes

- Updated dependencies
[[`590c2a5`](https://github.com/langchain-ai/deepagentsjs/commit/590c2a5042473f096d5fac5ddbb4be96e2ace0f2)]:
  - deepagents@1.12.2

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
deepagents-acp@0.1.23 deepagents@1.12.2
2026-08-04 15:20:01 -04:00
thushanth-bengre-langchain 590c2a5042 fix(deepagents): prevent stack overflow in CompositeBackend grep/glob (#723)
## Summary

- Fixes `RangeError: Maximum call stack size exceeded` from
`CompositeBackend.glob`/`grep` when a broad search (e.g.
`**/*.{ts,tsx,...}` at `/`) returns hundreds of thousands of entries.
Root cause: results were merged with `push(...entries)`, which passes
each entry as a separate function argument and overflows V8's
argument-stack limit. Now accumulated with a plain loop.
- Ports the Python SDK's grep match-count cap (`ef591e7`): optional
`maxCount` backend param / `max_count` tool arg, `grepMaxCount`
middleware option (default 1000, `null` disables), `truncated` flag on
`GrepResult`/`GlobResult`, and a truncation note in the grep tool
output. `CompositeBackend` splits the budget across routes and
OR-propagates `truncated`.

## Backward compatibility

- `truncated` is optional; `maxCount` defaults to unset everywhere. No
required changes for existing or new users.

## Test plan

- [x] Regression test: mocked backend returning 200k entries —
`glob`/`grep` complete without `RangeError` (verified it fails with the
old spread).
- [x] Cap enforcement, `truncated` propagation across composite routes,
middleware note rendering.
- [x] `pnpm test` (format + lint + all lib tests) passes.
2026-08-04 11:27:03 -07:00
github-actions[bot] 064b1724de chore: version packages (#715)
This PR was opened by the [Changesets
release](https://github.com/changesets/action) GitHub action. When
you're ready to do a release, you can merge this and the packages will
be published to npm automatically. If you're not ready to do a release
yet, that's fine, whenever you add more changesets to main, this PR will
be updated.


# Releases
## deepagents-acp@0.1.22

### Patch Changes

- Updated dependencies
[[`ffec5de`](https://github.com/langchain-ai/deepagentsjs/commit/ffec5de0e66ed5ab64bc4c6bee2ff90effb4bfa1)]:
  - deepagents@1.12.1
## deepagents@1.12.1

### Patch Changes

- [#713](https://github.com/langchain-ai/deepagentsjs/pull/713)
[`ffec5de`](https://github.com/langchain-ai/deepagentsjs/commit/ffec5de0e66ed5ab64bc4c6bee2ff90effb4bfa1)
Thanks [@gethin-langchain](https://github.com/gethin-langchain)! -
fix(deepagents): grep/glob match when `path` points directly at a file
## @deepagents/evals@0.0.21

### Patch Changes

- Updated dependencies
[[`ffec5de`](https://github.com/langchain-ai/deepagentsjs/commit/ffec5de0e66ed5ab64bc4c6bee2ff90effb4bfa1)]:
  - deepagents@1.12.1

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
deepagents-acp@0.1.22 deepagents@1.12.1
2026-07-31 08:10:45 +00:00
gethin-langchain ffec5de0e6 fix(deepagents): grep/glob match when path points directly at a file (#713)
## Summary
- `grep`/`glob` on `StateBackend`/`StoreBackend` returned zero matches
whenever `path` pointed at an exact file (no glob) — the shared
`validatePath` helper forced a trailing `/` before prefix-matching, so a
file's own key could never match itself+`/`.
- Added a `filterFilesByPath` helper that checks for an exact key match
in the files map first, falling back to the existing directory-prefix
behavior otherwise.

## Test plan
- [x] Added regression tests in `utils.test.ts`: exact-file path (no
glob) for grep and glob, plus directory + glob/filename non-regression
cases for both.
- [x] `pnpm --filter deepagents test` — all tests pass.
2026-07-31 00:54:11 -07:00
github-actions[bot] bed2d344bc chore: version packages (#712)
This PR was opened by the [Changesets
release](https://github.com/changesets/action) GitHub action. When
you're ready to do a release, you can merge this and the packages will
be published to npm automatically. If you're not ready to do a release
yet, that's fine, whenever you add more changesets to main, this PR will
be updated.


# Releases
## deepagents@1.12.0

### Minor Changes

- [#703](https://github.com/langchain-ai/deepagentsjs/pull/703)
[`d25097f`](https://github.com/langchain-ai/deepagentsjs/commit/d25097f78d0e66741da34e1d74551f3c19991126)
Thanks [@hntrl](https://github.com/hntrl)! - feat(deepagents): adopt
more minimal prompting

We've observed that current models don't need as verbose of prompting
guidance, so we're reducing the amount of perscriptive guidance that
deepagents has. This is reflected in the generic system prompt (which is
now blank), and in the tool descriptions (which have been simplified).

- [#708](https://github.com/langchain-ai/deepagentsjs/pull/708)
[`1225a7f`](https://github.com/langchain-ai/deepagentsjs/commit/1225a7ff8673686c2a3c0411636a9511b7d8d0d0)
Thanks [@hntrl](https://github.com/hntrl)! - feat(deepagents): make todo
middleware opt-in

- [#674](https://github.com/langchain-ai/deepagentsjs/pull/674)
[`dd142fe`](https://github.com/langchain-ai/deepagentsjs/commit/dd142fe4fc54c986d5bcf51211d9a839a427e931)
Thanks [@hntrl](https://github.com/hntrl)! - feat(filesystem): allow
`write_file` to create missing files or completely replace existing
files
## deepagents-acp@0.1.21

### Patch Changes

- Updated dependencies
[[`d25097f`](https://github.com/langchain-ai/deepagentsjs/commit/d25097f78d0e66741da34e1d74551f3c19991126),
[`1225a7f`](https://github.com/langchain-ai/deepagentsjs/commit/1225a7ff8673686c2a3c0411636a9511b7d8d0d0),
[`dd142fe`](https://github.com/langchain-ai/deepagentsjs/commit/dd142fe4fc54c986d5bcf51211d9a839a427e931)]:
  - deepagents@1.12.0
## @langchain/node-vfs@1.0.0

### Patch Changes

- [#674](https://github.com/langchain-ai/deepagentsjs/pull/674)
[`dd142fe`](https://github.com/langchain-ai/deepagentsjs/commit/dd142fe4fc54c986d5bcf51211d9a839a427e931)
Thanks [@hntrl](https://github.com/hntrl)! - fix: allow
`VfsBackend.write` to overwrite existing files while continuing to
reject symlinks
## @langchain/daytona@1.0.0


## @langchain/deno@1.0.0


## @langchain/modal@1.0.0


## @langchain/quickjs@1.0.0


## @langchain/sandbox-standard-tests@2.0.0


## @deepagents/evals@0.0.20

### Patch Changes

- Updated dependencies
[[`d25097f`](https://github.com/langchain-ai/deepagentsjs/commit/d25097f78d0e66741da34e1d74551f3c19991126),
[`1225a7f`](https://github.com/langchain-ai/deepagentsjs/commit/1225a7ff8673686c2a3c0411636a9511b7d8d0d0),
[`dd142fe`](https://github.com/langchain-ai/deepagentsjs/commit/dd142fe4fc54c986d5bcf51211d9a839a427e931)]:
  - deepagents@1.12.0

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
@langchain/daytona@1.0.0 @langchain/deno@1.0.0 @langchain/modal@1.0.0 @langchain/node-vfs@1.0.0 @langchain/quickjs@1.0.0 @langchain/sandbox-standard-tests@2.0.0 deepagents-acp@0.1.21 deepagents@1.12.0
2026-07-29 09:47:28 -07:00
Hunter Lovell b177148922 chore: exit pre-release (#711) 2026-07-29 09:26:40 -07:00
github-actions[bot] 149f4585f1 chore: version packages (rc) (#709)
This PR was opened by the [Changesets
release](https://github.com/changesets/action) GitHub action. When
you're ready to do a release, you can merge this and the packages will
be published to npm automatically. If you're not ready to do a release
yet, that's fine, whenever you add more changesets to main, this PR will
be updated.

⚠️⚠️⚠️⚠️⚠️⚠️

`main` is currently in **pre mode** so this branch has prereleases
rather than normal releases. If you want to exit prereleases, run
`changeset pre exit` on `main`.

⚠️⚠️⚠️⚠️⚠️⚠️

# Releases
## deepagents@1.12.0-rc.1

### Minor Changes

- [#708](https://github.com/langchain-ai/deepagentsjs/pull/708)
[`1225a7f`](https://github.com/langchain-ai/deepagentsjs/commit/1225a7ff8673686c2a3c0411636a9511b7d8d0d0)
Thanks [@hntrl](https://github.com/hntrl)! - feat(deepagents): make todo
middleware opt-in
## deepagents-acp@0.1.21-rc.1

### Patch Changes

- Updated dependencies
[[`1225a7f`](https://github.com/langchain-ai/deepagentsjs/commit/1225a7ff8673686c2a3c0411636a9511b7d8d0d0)]:
  - deepagents@1.12.0-rc.1
## @deepagents/evals@0.0.20-rc.1

### Patch Changes

- Updated dependencies
[[`1225a7f`](https://github.com/langchain-ai/deepagentsjs/commit/1225a7ff8673686c2a3c0411636a9511b7d8d0d0)]:
  - deepagents@1.12.0-rc.1

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
deepagents-acp@0.1.21-rc.1 deepagents@1.12.0-rc.1
2026-07-27 08:48:51 -07:00
John Kennedy 79e4654efa fix(deps): resolve Dependabot alerts (#710)
## Summary
- pin `axios` to 1.18.0 for eight open advisories
- pin `protobufjs` 7.x to 7.6.5
- pin `@opentelemetry/propagator-jaeger` to 2.9.0
- pin `js-yaml` 4.x to 4.3.0
- regenerate the pnpm lockfile

## Verification
- `pnpm install --frozen-lockfile` passed
- `git diff --check` passed
- confirmed vulnerable lockfile versions were removed
- `pnpm format:check` blocked by a missing
`@oxfmt/binding-linux-x64-gnu` optional native binding in this Node 18
sandbox
- `pnpm typecheck` reached existing missing
`@langchain/sandbox-standard-tests/vitest` declarations in integration
tests
- `pnpm audit --prod` reports the separate known `node-vfs-polyfill`
malware advisory, which has no patched version and is not among the open
Dependabot alerts addressed here

Co-authored-by: John Kennedy <john@users.noreply.github.com>
2026-07-25 13:57:37 -07:00
Hunter Lovell 1225a7ff86 feat(deepagents): make todo middleware opt-in (#708)
## Summary

Makes `todoListMiddleware` opt-in. Default agents and default subagents
no longer expose `write_todos` or the `todos` state channel, reducing
the default tool surface while preserving explicit opt-in.

## Changes

- Remove default todo middleware from the main, general-purpose, and
declarative subagent stacks.
- Preserve opt-in support through `middleware: [todoListMiddleware()]`;
declarative subagents opt in through their own middleware.
- Remove `write_todos` from always-present tool typing and built-in
name-collision handling.
- Update state and subagent documentation plus shared runtime assertions
for the optional todo state/tool.

### Harness profiles and coverage

- Re-add todo middleware in the Codex harness profile because its
model-specific prompt requires `write_todos`
- Apply profile `extraMiddleware` to subagent stacks, with profile
factories creating fresh instances per stack.
- Add coverage for default exclusion, explicit opt-in,
main/GP/declarative isolation, profile middleware propagation, and type
inference.
2026-07-24 15:40:43 -07:00
dependabot[bot] 71000c0b70 build(deps): bump the minor-deps-updates-main group across 1 directory with 10 updates (#707)
Bumps the minor-deps-updates-main group with 10 updates in the /
directory:

| Package | From | To |
| --- | --- | --- |
| [lint-staged](https://github.com/lint-staged/lint-staged) | `17.0.8` |
`17.2.0` |
| [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt) |
`0.57.0` | `0.60.0` |
| [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) |
`1.72.0` | `1.75.0` |
| [tsx](https://github.com/privatenumber/tsx) | `4.22.4` | `4.23.1` |
|
[@agentclientprotocol/sdk](https://github.com/agentclientprotocol/typescript-sdk)
| `1.1.0` | `1.3.0` |
| [@daytona/sdk](https://github.com/daytona/clients) | `0.192.0` |
`0.200.1` |
| [modal](https://github.com/modal-labs/modal-client) | `0.8.2` |
`0.9.0` |
| [magic-string](https://github.com/Rich-Harris/magic-string) | `1.0.0`
| `1.1.0` |
| [langsmith](https://github.com/langchain-ai/langsmith-sdk) | `0.7.14`
| `0.8.7` |
|
[lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react)
| `1.23.0` | `1.26.0` |


Updates `lint-staged` from 17.0.8 to 17.2.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/lint-staged/lint-staged/releases">lint-staged's
releases</a>.</em></p>
<blockquote>
<h2>v17.2.0</h2>
<h3>Minor Changes</h3>
<ul>
<li>
<p><a
href="https://redirect.github.com/lint-staged/lint-staged/pull/1823">#1823</a>
<a
href="https://github.com/lint-staged/lint-staged/commit/ee156cc7039494f1db11f389b1233c78f588238c"><code>ee156cc</code></a>
- The chunking of tasks based on maximum command line argument length
has been re-implemented to be more precise. Now the chunking happens
based on the final generated command string, instead of just the list of
staged files like previously. This benefits mainly Windows platforms and
function commands like:</p>
<pre lang="js"><code>/** @type {import('lint-staged').Configuration} */
export default {
&quot;*.ts&quot;: () =&gt; &quot;tsc&quot;, // Run &quot;tsc&quot; when
any TS file is changed (for entire project)
};
</code></pre>
<p>Where the spawned command is literally <code>&quot;tsc&quot;</code>
without any extra arguments. Previously, this was still chunked when a
lot of files were staged. Now, it probably won't be chunked because the
length of the command is just three letters.</p>
<p>Also, native JavaScript/Node.js function tasks won't be chunked at
all, when previously they were run multiple times when chunked:</p>
<pre lang="js"><code>/** @type {import('lint-staged').Configuration} */
export default {
  &quot;*.js&quot;: {
    title: &quot;Log staged JS files to console&quot;,
    task: async (files) =&gt; {
      console.log(&quot;Staged JS files:&quot;, files);
    },
  },
};
</code></pre>
</li>
</ul>
<h2>v17.1.1</h2>
<h3>Patch Changes</h3>
<ul>
<li><a
href="https://redirect.github.com/lint-staged/lint-staged/pull/1820">#1820</a>
<a
href="https://github.com/lint-staged/lint-staged/commit/a626a9f269d9ff6498a9b8245490e096f90c4bb7"><code>a626a9f</code></a>
- It's now possible to set <code>--max-arg-length=Infinity</code> to
effectively disable chunking of tasks based on the number of staged
files. The parsing and validation of the numeric CLI options
<code>--max-arg-length</code> and <code>--concurrency</code> has been
improved.</li>
</ul>
<h2>v17.1.0</h2>
<h3>Minor Changes</h3>
<ul>
<li>
<p><a
href="https://redirect.github.com/lint-staged/lint-staged/pull/1816">#1816</a>
<a
href="https://github.com/lint-staged/lint-staged/commit/7568d4fb15ba3c3317a7aec36195461cb2f272d7"><code>7568d4f</code></a>
- The console output of <em>lint-staged</em> has been simplified so that
there's less interactive spinners and more explicit messages like
<em>&quot;Started…</em>&quot; -&gt; &quot;<em>Done!</em>&quot;. The
primary purpose of this was to remove <a
href="https://github.com/listr2/listr2"><code>Listr2</code></a>, a very
large dependency.</p>
<p><strong>Before:</strong></p>
<p>Size of <code>node_modules/</code> after installing: <code>1561.7
kB</code> with 29 packages.</p>
<p>Fancy interactive spinners, but output dynamically changes:</p>
<pre lang="shell"><code>✔ Backed up original state in git stash
(0b191303)
✔ Running tasks for staged files...
✔ Staging changes from tasks...
✔ Cleaning up temporary files...
</code></pre>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md">lint-staged's
changelog</a>.</em></p>
<blockquote>
<h2>17.2.0</h2>
<h3>Minor Changes</h3>
<ul>
<li>
<p><a
href="https://redirect.github.com/lint-staged/lint-staged/pull/1823">#1823</a>
<a
href="https://github.com/lint-staged/lint-staged/commit/ee156cc7039494f1db11f389b1233c78f588238c"><code>ee156cc</code></a>
- The chunking of tasks based on maximum command line argument length
has been re-implemented to be more precise. Now the chunking happens
based on the final generated command string, instead of just the list of
staged files like previously. This benefits mainly Windows platforms and
function commands like:</p>
<pre lang="js"><code>/** @type {import('lint-staged').Configuration} */
export default {
&quot;*.ts&quot;: () =&gt; &quot;tsc&quot;, // Run &quot;tsc&quot; when
any TS file is changed (for entire project)
};
</code></pre>
<p>Where the spawned command is literally <code>&quot;tsc&quot;</code>
without any extra arguments. Previously, this was still chunked when a
lot of files were staged. Now, it probably won't be chunked because the
length of the command is just three letters.</p>
<p>Also, native JavaScript/Node.js function tasks won't be chunked at
all, when previously they were run multiple times when chunked:</p>
<pre lang="js"><code>/** @type {import('lint-staged').Configuration} */
export default {
  &quot;*.js&quot;: {
    title: &quot;Log staged JS files to console&quot;,
    task: async (files) =&gt; {
      console.log(&quot;Staged JS files:&quot;, files);
    },
  },
};
</code></pre>
</li>
</ul>
<h2>17.1.1</h2>
<h3>Patch Changes</h3>
<ul>
<li><a
href="https://redirect.github.com/lint-staged/lint-staged/pull/1820">#1820</a>
<a
href="https://github.com/lint-staged/lint-staged/commit/a626a9f269d9ff6498a9b8245490e096f90c4bb7"><code>a626a9f</code></a>
- It's now possible to set <code>--max-arg-length=Infinity</code> to
effectively disable chunking of tasks based on the number of staged
files. The parsing and validation of the numeric CLI options
<code>--max-arg-length</code> and <code>--concurrency</code> has been
improved.</li>
</ul>
<h2>17.1.0</h2>
<h3>Minor Changes</h3>
<ul>
<li>
<p><a
href="https://redirect.github.com/lint-staged/lint-staged/pull/1816">#1816</a>
<a
href="https://github.com/lint-staged/lint-staged/commit/7568d4fb15ba3c3317a7aec36195461cb2f272d7"><code>7568d4f</code></a>
- The console output of <em>lint-staged</em> has been simplified so that
there's less interactive spinners and more explicit messages like
<em>&quot;Started…</em>&quot; -&gt; &quot;<em>Done!</em>&quot;. The
primary purpose of this was to remove <a
href="https://github.com/listr2/listr2"><code>Listr2</code></a>, a very
large dependency.</p>
<p><strong>Before:</strong></p>
<p>Size of <code>node_modules/</code> after installing: <code>1561.7
kB</code> with 29 packages.</p>
<p>Fancy interactive spinners, but output dynamically changes:</p>
<pre lang="shell"><code>✔ Backed up original state in git stash
(0b191303)
✔ Running tasks for staged files...
</code></pre>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/lint-staged/lint-staged/commit/fb540fba1513a83a6be3fa31aeed4eae679c3e31"><code>fb540fb</code></a>
Merge pull request <a
href="https://redirect.github.com/lint-staged/lint-staged/issues/1824">#1824</a>
from lint-staged/changeset-release/main</li>
<li><a
href="https://github.com/lint-staged/lint-staged/commit/dc0a738a1b39033804667b3df3fb0f71cb03708a"><code>dc0a738</code></a>
chore(changeset): release</li>
<li><a
href="https://github.com/lint-staged/lint-staged/commit/60cbb8818f8c0d51d6d1e4c59c7a9e558d8fffe1"><code>60cbb88</code></a>
Merge pull request <a
href="https://redirect.github.com/lint-staged/lint-staged/issues/1823">#1823</a>
from lint-staged/reimplement-chunk-files</li>
<li><a
href="https://github.com/lint-staged/lint-staged/commit/2354dc42686e2c2bff4a5dff3abd57f3cc69624e"><code>2354dc4</code></a>
build(deps): update dependencies</li>
<li><a
href="https://github.com/lint-staged/lint-staged/commit/0516e7fa9bc8a05aee922872f4ebe5d9c21a8213"><code>0516e7f</code></a>
docs: adjust debug logs</li>
<li><a
href="https://github.com/lint-staged/lint-staged/commit/e22f6ede988cc6efe7c0065dcb8cb1408f2584dd"><code>e22f6ed</code></a>
style: run <code>oxfmt</code> on README.md</li>
<li><a
href="https://github.com/lint-staged/lint-staged/commit/37e8e1ad73a58c0b187716bd5172744ad50f36d1"><code>37e8e1a</code></a>
fix: restore chunking of git add command after running tasks</li>
<li><a
href="https://github.com/lint-staged/lint-staged/commit/2c75f1d0f2cc2c28c7191c48beafb281e3d1e78e"><code>2c75f1d</code></a>
chore: remove unused file</li>
<li><a
href="https://github.com/lint-staged/lint-staged/commit/ee156cc7039494f1db11f389b1233c78f588238c"><code>ee156cc</code></a>
feat: add improved lazy-chunking of command strings</li>
<li><a
href="https://github.com/lint-staged/lint-staged/commit/baa7c987f68e0c338b1fd5ad751da05e9cbe238d"><code>baa7c98</code></a>
feat: remove current <code>chunkFiles</code> implementation</li>
<li>Additional commits viewable in <a
href="https://github.com/lint-staged/lint-staged/compare/v17.0.8...v17.2.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `oxfmt` from 0.57.0 to 0.60.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/oxc-project/oxc/commit/83abe3b49c0913b1a984a7eec5e433a59fd76eae"><code>83abe3b</code></a>
release(apps): oxlint v1.75.0 &amp;&amp; oxfmt v0.60.0 (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt/issues/24713">#24713</a>)</li>
<li><a
href="https://github.com/oxc-project/oxc/commit/e2e0f94253c5ce91a00394e2cba974bc152798db"><code>e2e0f94</code></a>
chore(docs): update sponsor section (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt/issues/24588">#24588</a>)</li>
<li><a
href="https://github.com/oxc-project/oxc/commit/2d4e8d20644e0e7446f0a381894b45ea339a0625"><code>2d4e8d2</code></a>
release(apps): oxlint v1.74.0 &amp;&amp; oxfmt v0.59.0 (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt/issues/24454">#24454</a>)</li>
<li><a
href="https://github.com/oxc-project/oxc/commit/415fe1e7bb423cf05019c5e2c9a5705eebbc5447"><code>415fe1e</code></a>
fix(oxfmt): error on ignorePatterns that cannot match files outside the
confi...</li>
<li><a
href="https://github.com/oxc-project/oxc/commit/39677ba50d908ea09f6d9e58ded328461212f52a"><code>39677ba</code></a>
release(apps): oxlint v1.73.0 &amp;&amp; oxfmt v0.58.0 (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt/issues/24219">#24219</a>)</li>
<li>See full diff in <a
href="https://github.com/oxc-project/oxc/commits/oxfmt_v0.60.0/npm/oxfmt">compare
view</a></li>
</ul>
</details>
<br />

Updates `oxlint` from 1.72.0 to 1.75.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/oxc-project/oxc/releases">oxlint's
releases</a>.</em></p>
<blockquote>
<h2>oxlint v1.27.0 &amp;&amp; oxfmt v0.12.0</h2>
<h1>Oxlint v1.27.0</h1>
<h3>🚀 Features</h3>
<ul>
<li>222a8f0 linter/plugins: Implement
<code>SourceCode#isSpaceBetween</code> (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15498">#15498</a>)
(overlookmotel)</li>
<li>2f9735d linter/plugins: Implement
<code>context.languageOptions</code> (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15486">#15486</a>)
(overlookmotel)</li>
<li>bc731ff linter/plugins: Stub out all <code>Context</code> APIs (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15479">#15479</a>)
(overlookmotel)</li>
<li>5822cb4 linter/plugins: Add <code>extend</code> method to
<code>FILE_CONTEXT</code> (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15477">#15477</a>)
(overlookmotel)</li>
<li>7b1e6f3 apps: Add pure rust binaries and release to github (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15469">#15469</a>)
(Boshen)</li>
<li>2a89b43 linter: Introduce debug assertions after fixes to assert
validity (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15389">#15389</a>)
(camc314)</li>
<li>ad3c45a editor: Add <code>oxc.path.node</code> option (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15040">#15040</a>)
(Sysix)</li>
</ul>
<h3>🐛 Bug Fixes</h3>
<ul>
<li>6f3cd77 linter/no-var: Incorrect warning for blocks (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15504">#15504</a>)
(Hamir Mahal)</li>
<li>6957fb9 linter/plugins: Do not allow access to
<code>Context#id</code> in <code>createOnce</code> (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15489">#15489</a>)
(overlookmotel)</li>
<li>7409630 linter/plugins: Allow access to <code>cwd</code> in
<code>createOnce</code> in ESLint interop mode (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15488">#15488</a>)
(overlookmotel)</li>
<li>732205e parser: Reject <code>using</code> / <code>await using</code>
in a switch <code>case</code> / <code>default</code> clause (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15225">#15225</a>)
(sapphi-red)</li>
<li>a17ca32 linter/plugins: Replace <code>Context</code> class (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15448">#15448</a>)
(overlookmotel)</li>
<li>ecf2f7b language_server: Fail gracefully when tsgolint executable
not found (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15436">#15436</a>)
(camc314)</li>
<li>3c8d3a7 lang-server: Improve logging in failure case for tsgolint
(<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15299">#15299</a>)
(camc314)</li>
<li>ef71410 linter: Use jsx if source type is JS in fix debug assertion
(<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15434">#15434</a>)
(camc314)</li>
<li>e32bbf6 linter/no-var: Handle TypeScript declare keyword in fixer
(<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15426">#15426</a>)
(camc314)</li>
<li>6565dbe linter/switch-case-braces: Skip comments when searching for
<code>:</code> token (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15425">#15425</a>)
(camc314)</li>
<li>85bd19a linter/prefer-class-fields: Insert value after type
annotation in fixer (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15423">#15423</a>)
(camc314)</li>
<li>fde753e linter/plugins: Block access to
<code>context.settings</code> in <code>createOnce</code> (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15394">#15394</a>)
(overlookmotel)</li>
<li>ddd9f9f linter/forward-ref-uses-ref: Dont suggest removing wrapper
in invalid positions (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15388">#15388</a>)
(camc314)</li>
<li>dac2a9c linter/no-template-curly-in-string: Remove fixer (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15387">#15387</a>)
(camc314)</li>
<li>989b8e3 linter/no-var: Only fix to <code>const</code> if the var has
an initializer (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15385">#15385</a>)
(camc314)</li>
<li>cc403f5 linter/plugins: Return empty object for unimplemented
parserServices (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15364">#15364</a>)
(magic-akari)</li>
</ul>
<h3> Performance</h3>
<ul>
<li>25d577e language_server: Start tools in parallel (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15500">#15500</a>)
(Sysix)</li>
<li>3c57291 linter/plugins: Optimize loops (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15449">#15449</a>)
(overlookmotel)</li>
<li>3166233 linter/plugins: Remove <code>Arc</code>s (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15431">#15431</a>)
(overlookmotel)</li>
<li>9de1322 linter/plugins: Lazily deserialize settings JSON (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15395">#15395</a>)
(overlookmotel)</li>
<li>3049ec2 linter/plugins: Optimize <code>deepFreezeSettings</code> (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15392">#15392</a>)
(overlookmotel)</li>
<li>444ebfd linter/plugins: Use single object for
<code>parserServices</code> (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15378">#15378</a>)
(overlookmotel)</li>
</ul>
<h3>📚 Documentation</h3>
<ul>
<li>97d2104 linter: Update comment in lint.rs about default value for
tsconfig path (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15530">#15530</a>)
(Connor Shea)</li>
<li>2c6bd9e linter: Always refer as &quot;ES2015&quot; instead of
&quot;ES6&quot; (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15411">#15411</a>)
(sapphi-red)</li>
<li>a0c5203 linter/import/named: Update &quot;ES7&quot; comment in
examples (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15410">#15410</a>)
(sapphi-red)</li>
<li>3dc24b5 linter,minifier: Always refer as &quot;ES Modules&quot;
instead of &quot;ES6 Modules&quot; (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15409">#15409</a>)
(sapphi-red)</li>
<li>2ad77fb linter/no-this-before-super: Correct &quot;Why is this
bad?&quot; section (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15408">#15408</a>)
(sapphi-red)</li>
<li>57f0ce1 linter: Add backquotes where appropriate (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/15407">#15407</a>)
(sapphi-red)</li>
</ul>
<h1>Oxfmt v0.12.0</h1>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md">oxlint's
changelog</a>.</em></p>
<blockquote>
<h2>[1.75.0] - 2026-07-20</h2>
<h3>🚀 Features</h3>
<ul>
<li>dd18383 linter/node: Implement no-top-level-await rule (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24634">#24634</a>)
(Connor Shea)</li>
<li>16a65f2 linter/react: Implement function-component-definition rule
(<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24471">#24471</a>)
(Cole Ellison)</li>
<li>7f1f585 linter: Reuse <code>jest/padding-around-test-blocks</code>
for <code>vitest/padding-around-test-blocks</code> (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24519">#24519</a>)
(Mikhail Baev)</li>
<li>99978a8 linter/import/consistent-type-specifier-style: Support
<code>prefer-top-level-if-only-type-imports</code> option (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24502">#24502</a>)
(camc314)</li>
</ul>
<h3>🐛 Bug Fixes</h3>
<ul>
<li>8694167 linter/eslint/prefer-destructuring: Handle typed
declarations (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24616">#24616</a>)
(camc314)</li>
</ul>
<h2>[1.74.0] - 2026-07-13</h2>
<h3>🚀 Features</h3>
<ul>
<li>0433a83 linter/eslint/no-inner-declarations: Add
<code>namespaces</code> option (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24044">#24044</a>)
(Boshen)</li>
</ul>
<h3>🐛 Bug Fixes</h3>
<ul>
<li>8337835 linter: Error on <code>ignorePatterns</code> that cannot
match files aoutside the config directory (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24341">#24341</a>)
(leaysgur)</li>
<li>2ce5a33 linter: Resolve <code>ignorePatterns</code> relative to the
config dir (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24339">#24339</a>)
(leaysgur)</li>
</ul>
<h3> Performance</h3>
<ul>
<li>7f80cac linter/vue/prop-name-casing: Precompile
<code>ignoreProps</code> regex pattern (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24413">#24413</a>)
(connorshea)</li>
<li>6272051 linter/typescript/no-require-imports: Compile allow patterns
once (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24417">#24417</a>)
(connorshea)</li>
<li>33805b9 linter/jsdoc/require-param: Compile checkTypesPattern regex
once (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24420">#24420</a>)
(connorshea)</li>
</ul>
<h2>[1.73.0] - 2026-07-06</h2>
<h3>🚀 Features</h3>
<ul>
<li>a2c97f3 linter/unicorn: Implement <code>explicit-timer-delay</code>
rule (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/23612">#23612</a>)
(Mikhail Baev)</li>
<li>85735cb linter/unicorn: Implement
<code>no-confusing-array-with</code> rule (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/23638">#23638</a>)
(Shekhu☺️)</li>
<li>cb4fbb9 linter/eslint: Implement no-unreachable-loop rule (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/23975">#23975</a>)
(Todor Andonov)</li>
<li>dc32112 linter/eslint/no-constant-binary-expression: Check
relational comparisons (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24088">#24088</a>)
(camc314)</li>
<li>d963967 linter/unicorn/no-array-sort: Add
<code>allowAfterSpread</code> option (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24043">#24043</a>)
(Boshen)</li>
<li>0a75682 linter: Add per-rule timings for type-aware linting (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/22488">#22488</a>)
(camchenry)</li>
<li>743e222 linter/react: Add <code>disallowedValues</code> option for
<code>forbid-dom-props</code> rule (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/23970">#23970</a>)
(Mikhail Baev)</li>
</ul>
<h3>🐛 Bug Fixes</h3>
<ul>
<li>bdb51c7 linter/jest/prefer-ending-with-an-expect: Validate config
patterns (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24122">#24122</a>)
(camc314)</li>
<li>45d607d linter/react/forbid-component-props: Make allow/disallow
lists optional in schema (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24024">#24024</a>)
(Boshen)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/oxc-project/oxc/commit/83abe3b49c0913b1a984a7eec5e433a59fd76eae"><code>83abe3b</code></a>
release(apps): oxlint v1.75.0 &amp;&amp; oxfmt v0.60.0 (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24713">#24713</a>)</li>
<li><a
href="https://github.com/oxc-project/oxc/commit/6ce51d3ff39d675bb3ce12abe31c5807f9683833"><code>6ce51d3</code></a>
chore(deps): update dependency oxlint-tsgolint to v7.0.2000 (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24763">#24763</a>)</li>
<li><a
href="https://github.com/oxc-project/oxc/commit/dd18383ee1504b319aee45f832045bcd1a7285d5"><code>dd18383</code></a>
feat(linter/node): implement no-top-level-await rule (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24634">#24634</a>)</li>
<li><a
href="https://github.com/oxc-project/oxc/commit/8694167be72c03776728943f5d0ca0943b944225"><code>8694167</code></a>
fix(linter/eslint/prefer-destructuring): handle typed declarations (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24616">#24616</a>)</li>
<li><a
href="https://github.com/oxc-project/oxc/commit/e2e0f94253c5ce91a00394e2cba974bc152798db"><code>e2e0f94</code></a>
chore(docs): update sponsor section (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24588">#24588</a>)</li>
<li><a
href="https://github.com/oxc-project/oxc/commit/16a65f269cf6b0bf19abab9de884b190ef0e8e25"><code>16a65f2</code></a>
feat(linter/react): implement function-component-definition rule (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24471">#24471</a>)</li>
<li><a
href="https://github.com/oxc-project/oxc/commit/7f1f585b868de329c8ce6bbb4e4b036813f8bcd5"><code>7f1f585</code></a>
feat(linter): reuse <code>jest/padding-around-test-blocks</code> for
`vitest/padding-aro...</li>
<li><a
href="https://github.com/oxc-project/oxc/commit/99978a8bbb8d97f3cb31a6e3b57e13875f36be23"><code>99978a8</code></a>
feat(linter/import/consistent-type-specifier-style): support
`prefer-top-leve...</li>
<li><a
href="https://github.com/oxc-project/oxc/commit/2d4e8d20644e0e7446f0a381894b45ea339a0625"><code>2d4e8d2</code></a>
release(apps): oxlint v1.74.0 &amp;&amp; oxfmt v0.59.0 (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24454">#24454</a>)</li>
<li><a
href="https://github.com/oxc-project/oxc/commit/7f80cac4fdfb9f488886267fe7a85ca2b73be85e"><code>7f80cac</code></a>
perf(linter/vue/prop-name-casing): precompile <code>ignoreProps</code>
regex pattern (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/2">#2</a>...</li>
<li>Additional commits viewable in <a
href="https://github.com/oxc-project/oxc/commits/oxlint_v1.75.0/npm/oxlint">compare
view</a></li>
</ul>
</details>
<br />

Updates `tsx` from 4.22.4 to 4.23.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/privatenumber/tsx/releases">tsx's
releases</a>.</em></p>
<blockquote>
<h2>v4.23.1</h2>
<h2><a
href="https://github.com/privatenumber/tsx/compare/v4.23.0...v4.23.1">4.23.1</a>
(2026-07-13)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>support tsImport after global preload (<a
href="https://github.com/privatenumber/tsx/commit/8d4ffc24f37b396ca2fe3f251aa92c4919f2c1a4">8d4ffc2</a>)</li>
<li><strong>watch:</strong> avoid clearing piped output (<a
href="https://github.com/privatenumber/tsx/commit/95d0672e0247a829ae4469daa493212967ea768e">95d0672</a>)</li>
<li><strong>watch:</strong> treat script and dependency paths literally
(<a
href="https://github.com/privatenumber/tsx/commit/79fddde523d3bb7d0af66682ce1265f95113a073">79fddde</a>)</li>
</ul>
<h3>Performance Improvements</h3>
<ul>
<li>index transform cache lazily (<a
href="https://github.com/privatenumber/tsx/commit/e818ad608159a6fb36fb8a0bd59327fec313323d">e818ad6</a>)</li>
<li>load esbuild lazily in CLI (<a
href="https://github.com/privatenumber/tsx/commit/d0679381b60a55a9b5863603a4022a81db5d13c8">d067938</a>)</li>
<li>map Node TypeScript formats directly (<a
href="https://github.com/privatenumber/tsx/commit/cdcc6232a3277fb3028b226958b66c49a6d86c17">cdcc623</a>)</li>
<li>use sync module hooks on Node v22.22.3+ (<a
href="https://github.com/privatenumber/tsx/commit/f8992f1a50213e11b7ef8ab5121c78e0d2f29384">f8992f1</a>)</li>
</ul>
<hr />
<p>This release is also available on:</p>
<ul>
<li><a href="https://www.npmjs.com/package/tsx/v/4.23.1"><code>npm
package (@​latest dist-tag)</code></a></li>
</ul>
<h2>v4.23.0</h2>
<h1><a
href="https://github.com/privatenumber/tsx/compare/v4.22.5...v4.23.0">4.23.0</a>
(2026-07-03)</h1>
<h3>Bug Fixes</h3>
<ul>
<li>avoid redundant filesystem probes during module resolution (<a
href="https://github.com/privatenumber/tsx/commit/257bbbb7eb2784cad6a3bb7a2d9c9747d28d96ec">257bbbb</a>),
closes <a
href="https://redirect.github.com/privatenumber/tsx/issues/809">privatenumber/tsx#809</a></li>
</ul>
<h3>Features</h3>
<ul>
<li>add multi-scenario startup benchmark suite (<a
href="https://github.com/privatenumber/tsx/commit/c178197b104d055fd3431f7448982f3156394d12">c178197</a>),
closes <a
href="https://redirect.github.com/privatenumber/tsx/issues/809">privatenumber/tsx#809</a>
<a
href="https://redirect.github.com/privatenumber/tsx/issues/809">#809</a>
<a href="https://github.com/hi/issues/signal">hi#signal</a> <a
href="https://redirect.github.com/privatenumber/tsx/issues/145">privatenumber/tsx#145</a>
<a
href="https://redirect.github.com/privatenumber/tsx/issues/809">#809</a></li>
</ul>
<hr />
<p>This release is also available on:</p>
<ul>
<li><a href="https://www.npmjs.com/package/tsx/v/4.23.0"><code>npm
package (@​latest dist-tag)</code></a></li>
</ul>
<h2>v4.22.5</h2>
<h2><a
href="https://github.com/privatenumber/tsx/compare/v4.22.4...v4.22.5">4.22.5</a>
(2026-07-02)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>isolate hook state per async module.register() registration (<a
href="https://github.com/privatenumber/tsx/commit/a305f365f0cbcc31a44549dcbb0e63dc2883e96d">a305f36</a>)</li>
</ul>
<hr />
<p>This release is also available on:</p>
<ul>
<li><a href="https://www.npmjs.com/package/tsx/v/4.22.5"><code>npm
package (@​latest dist-tag)</code></a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/privatenumber/tsx/commit/79fddde523d3bb7d0af66682ce1265f95113a073"><code>79fddde</code></a>
fix(watch): treat script and dependency paths literally</li>
<li><a
href="https://github.com/privatenumber/tsx/commit/e818ad608159a6fb36fb8a0bd59327fec313323d"><code>e818ad6</code></a>
perf: index transform cache lazily</li>
<li><a
href="https://github.com/privatenumber/tsx/commit/cdcc6232a3277fb3028b226958b66c49a6d86c17"><code>cdcc623</code></a>
perf: map Node TypeScript formats directly</li>
<li><a
href="https://github.com/privatenumber/tsx/commit/d0679381b60a55a9b5863603a4022a81db5d13c8"><code>d067938</code></a>
perf: load esbuild lazily in CLI</li>
<li><a
href="https://github.com/privatenumber/tsx/commit/95d0672e0247a829ae4469daa493212967ea768e"><code>95d0672</code></a>
fix(watch): avoid clearing piped output</li>
<li><a
href="https://github.com/privatenumber/tsx/commit/6fd4607e8a99d1efe27f185f749c659138f00ece"><code>6fd4607</code></a>
docs: add per-page metadata</li>
<li><a
href="https://github.com/privatenumber/tsx/commit/f4176d8c6329a12205ed9b8c582e559cafc45018"><code>f4176d8</code></a>
docs: generate sitemap</li>
<li><a
href="https://github.com/privatenumber/tsx/commit/8d4ffc24f37b396ca2fe3f251aa92c4919f2c1a4"><code>8d4ffc2</code></a>
fix: support tsImport after global preload</li>
<li><a
href="https://github.com/privatenumber/tsx/commit/f0e89b244c98849dc5f9483fa33aaaf983ede18f"><code>f0e89b2</code></a>
docs: document Node's public type-stripping API vs internal loader
path</li>
<li><a
href="https://github.com/privatenumber/tsx/commit/f8992f1a50213e11b7ef8ab5121c78e0d2f29384"><code>f8992f1</code></a>
perf: use sync module hooks on Node v22.22.3+</li>
<li>Additional commits viewable in <a
href="https://github.com/privatenumber/tsx/compare/v4.22.4...v4.23.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `@agentclientprotocol/sdk` from 1.1.0 to 1.3.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/agentclientprotocol/typescript-sdk/releases">@​agentclientprotocol/sdk's
releases</a>.</em></p>
<blockquote>
<h2>v1.3.0</h2>
<h2><a
href="https://github.com/agentclientprotocol/typescript-sdk/compare/v1.2.1...v1.3.0">1.3.0</a>
(2026-07-21)</h2>
<h3>Features</h3>
<ul>
<li><strong>experimental:</strong> Add experimental ACP v2 API (<a
href="https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/223">#223</a>)
(<a
href="https://github.com/agentclientprotocol/typescript-sdk/commit/26cdeb48dc389335830fdb51d61dbfa88d644e96">26cdeb4</a>)</li>
<li>Update to schema v1.20.0 and v2.0.0-alpha.2 (<a
href="https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/225">#225</a>)
(<a
href="https://github.com/agentclientprotocol/typescript-sdk/commit/cb61107a3a9c9881bcf1a7988596bdd17aaf93c5">cb61107</a>)</li>
</ul>
<h2>v1.2.1</h2>
<h2><a
href="https://github.com/agentclientprotocol/typescript-sdk/compare/v1.2.0...v1.2.1">1.2.1</a>
(2026-07-07)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>http:</strong> make SSE close and response delivery
deterministic (<a
href="https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/209">#209</a>)
(<a
href="https://github.com/agentclientprotocol/typescript-sdk/commit/2adee0f5071bd1201c84b7d8a2836cfe011d4c9a">2adee0f</a>)</li>
<li>Preserve extensible union semantics in TS schemas (<a
href="https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/215">#215</a>)
(<a
href="https://github.com/agentclientprotocol/typescript-sdk/commit/e3232216ac172283e4f77f9d75c12f820952b5e9">e323221</a>)</li>
</ul>
<h2>v1.2.0</h2>
<h2><a
href="https://github.com/agentclientprotocol/typescript-sdk/compare/v1.1.0...v1.2.0">1.2.0</a>
(2026-07-06)</h2>
<h3>Features</h3>
<ul>
<li>Update schema to 1.17.0 (<a
href="https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/204">#204</a>)
(<a
href="https://github.com/agentclientprotocol/typescript-sdk/commit/fa8b5bd426fec07a85203d6a6e4b83d173243cf1">fa8b5bd</a>)</li>
<li>Update schema to 1.19.0 (<a
href="https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/213">#213</a>)
(<a
href="https://github.com/agentclientprotocol/typescript-sdk/commit/6599433640feb8e36372a767554869fd5097fdd3">6599433</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>make ndJsonStream receive path linear in message size (<a
href="https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/210">#210</a>)
(<a
href="https://github.com/agentclientprotocol/typescript-sdk/commit/2fc41d2822579f754042db4d4f8c53b7c9b9ad2f">2fc41d2</a>)</li>
<li>unify JSON-RPC message validation policy across transports (<a
href="https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/212">#212</a>)
(<a
href="https://github.com/agentclientprotocol/typescript-sdk/commit/5e01eb2ac2cd72c8c6ebff1015874366c781eaa5">5e01eb2</a>),
closes <a
href="https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/211">#211</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/agentclientprotocol/typescript-sdk/blob/main/CHANGELOG.md">@​agentclientprotocol/sdk's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/agentclientprotocol/typescript-sdk/compare/v1.2.1...v1.3.0">1.3.0</a>
(2026-07-21)</h2>
<h3>Features</h3>
<ul>
<li><strong>experimental:</strong> Add experimental ACP v2 API (<a
href="https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/223">#223</a>)
(<a
href="https://github.com/agentclientprotocol/typescript-sdk/commit/26cdeb48dc389335830fdb51d61dbfa88d644e96">26cdeb4</a>)</li>
<li>Update to schema v1.20.0 and v2.0.0-alpha.2 (<a
href="https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/225">#225</a>)
(<a
href="https://github.com/agentclientprotocol/typescript-sdk/commit/cb61107a3a9c9881bcf1a7988596bdd17aaf93c5">cb61107</a>)</li>
</ul>
<h2><a
href="https://github.com/agentclientprotocol/typescript-sdk/compare/v1.2.0...v1.2.1">1.2.1</a>
(2026-07-07)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>http:</strong> make SSE close and response delivery
deterministic (<a
href="https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/209">#209</a>)
(<a
href="https://github.com/agentclientprotocol/typescript-sdk/commit/2adee0f5071bd1201c84b7d8a2836cfe011d4c9a">2adee0f</a>)</li>
<li>Preserve extensible union semantics in TS schemas (<a
href="https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/215">#215</a>)
(<a
href="https://github.com/agentclientprotocol/typescript-sdk/commit/e3232216ac172283e4f77f9d75c12f820952b5e9">e323221</a>)</li>
</ul>
<h2><a
href="https://github.com/agentclientprotocol/typescript-sdk/compare/v1.1.0...v1.2.0">1.2.0</a>
(2026-07-06)</h2>
<h3>Features</h3>
<ul>
<li>Update schema to 1.17.0 (<a
href="https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/204">#204</a>)
(<a
href="https://github.com/agentclientprotocol/typescript-sdk/commit/fa8b5bd426fec07a85203d6a6e4b83d173243cf1">fa8b5bd</a>)</li>
<li>Update schema to 1.19.0 (<a
href="https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/213">#213</a>)
(<a
href="https://github.com/agentclientprotocol/typescript-sdk/commit/6599433640feb8e36372a767554869fd5097fdd3">6599433</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>make ndJsonStream receive path linear in message size (<a
href="https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/210">#210</a>)
(<a
href="https://github.com/agentclientprotocol/typescript-sdk/commit/2fc41d2822579f754042db4d4f8c53b7c9b9ad2f">2fc41d2</a>)</li>
<li>unify JSON-RPC message validation policy across transports (<a
href="https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/212">#212</a>)
(<a
href="https://github.com/agentclientprotocol/typescript-sdk/commit/5e01eb2ac2cd72c8c6ebff1015874366c781eaa5">5e01eb2</a>),
closes <a
href="https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/211">#211</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/agentclientprotocol/typescript-sdk/commit/fa32570936b42bf4f3aef175c6e926860914b638"><code>fa32570</code></a>
chore(main): release 1.3.0 (<a
href="https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/224">#224</a>)</li>
<li><a
href="https://github.com/agentclientprotocol/typescript-sdk/commit/cb61107a3a9c9881bcf1a7988596bdd17aaf93c5"><code>cb61107</code></a>
feat: Update to schema v1.20.0 and v2.0.0-alpha.2 (<a
href="https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/225">#225</a>)</li>
<li><a
href="https://github.com/agentclientprotocol/typescript-sdk/commit/26cdeb48dc389335830fdb51d61dbfa88d644e96"><code>26cdeb4</code></a>
feat(experimental): Add experimental ACP v2 API (<a
href="https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/223">#223</a>)</li>
<li><a
href="https://github.com/agentclientprotocol/typescript-sdk/commit/0daecae58483e362753004c985119865d7cc6edd"><code>0daecae</code></a>
chore(deps-dev): bump nanoid from 3.3.15 to 3.3.16 (<a
href="https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/222">#222</a>)</li>
<li><a
href="https://github.com/agentclientprotocol/typescript-sdk/commit/32c3bc1fc391b21d1c6af9fa91158d17bfbdfe1d"><code>32c3bc1</code></a>
chore(deps): bump the minor group with 16 updates (<a
href="https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/221">#221</a>)</li>
<li><a
href="https://github.com/agentclientprotocol/typescript-sdk/commit/3eecb545bb8839adef73516d2b9b51f54a5ee790"><code>3eecb54</code></a>
chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0 (<a
href="https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/220">#220</a>)</li>
<li><a
href="https://github.com/agentclientprotocol/typescript-sdk/commit/76da0322243549ee6122ddf62cb1392537991c43"><code>76da032</code></a>
chore(deps): bump the minor group with 42 updates (<a
href="https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/216">#216</a>)</li>
<li><a
href="https://github.com/agentclientprotocol/typescript-sdk/commit/26da1ae7ab66fae0f5e77272dee3e5d562d24aee"><code>26da1ae</code></a>
chore(main): release 1.2.1 (<a
href="https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/214">#214</a>)</li>
<li><a
href="https://github.com/agentclientprotocol/typescript-sdk/commit/e3232216ac172283e4f77f9d75c12f820952b5e9"><code>e323221</code></a>
fix: Preserve extensible union semantics in TS schemas (<a
href="https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/215">#215</a>)</li>
<li><a
href="https://github.com/agentclientprotocol/typescript-sdk/commit/2adee0f5071bd1201c84b7d8a2836cfe011d4c9a"><code>2adee0f</code></a>
fix(http): make SSE close and response delivery deterministic (<a
href="https://redirect.github.com/agentclientprotocol/typescript-sdk/issues/209">#209</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/agentclientprotocol/typescript-sdk/compare/v1.1.0...v1.3.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `@daytona/sdk` from 0.192.0 to 0.200.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/daytona/clients/releases">@​daytona/sdk's
releases</a>.</em></p>
<blockquote>
<h2>v0.200.1</h2>
<h2>0.200.1 (2026-07-22)</h2>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>sdk-python,sdk-ruby:</strong> share one expiry worker across
event subscriptions (<a
href="https://redirect.github.com/daytona/clients/pull/109">#109</a>)</li>
</ul>
<h3>Chores</h3>
<ul>
<li>sync go.sum for v0.200.0 (<a
href="https://redirect.github.com/daytona/clients/pull/107">#107</a>)</li>
<li><strong>sdk-go:</strong> bump to v0.200.1 (<a
href="https://redirect.github.com/daytona/clients/pull/112">#112</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>daytonaBot</li>
<li>Mirko Džaja <a
href="https://github.com/MDzaja"><code>@​MDzaja</code></a></li>
</ul>
<h2>v0.200.0</h2>
<h2>0.200.0 (2026-07-21)</h2>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>cli,sdk-ruby:</strong> enforce TLS verification in Ruby
Socket.IO client and create CLI config with 0600 (<a
href="https://redirect.github.com/daytona/clients/pull/96">#96</a>)</li>
<li><strong>sdk-go:</strong> make HTTP timeout configurable and honor
long execution timeouts (<a
href="https://redirect.github.com/daytona/clients/pull/103">#103</a>)</li>
</ul>
<h3>Chores</h3>
<ul>
<li>sync go.sum for v0.199.0 (<a
href="https://redirect.github.com/daytona/clients/pull/95">#95</a>)</li>
<li>add publish CLI checkbox and skip SDKs without an explicit version
(<a
href="https://github.com/daytona/clients/commit/c7a147762">c7a147762</a>)</li>
<li>add opt-in publish CLI checkbox and skip SDKs without an explicit
version (<a
href="https://github.com/daytona/clients/commit/88a17a89b">88a17a89b</a>)</li>
<li><strong>sdk-go:</strong> bump to v0.200.0 (<a
href="https://redirect.github.com/daytona/clients/pull/104">#104</a>)</li>
<li><strong>sdk-python:</strong> retry poetry lock to tolerate stale
PyPI CDN (<a
href="https://github.com/daytona/clients/commit/dd1c2d500">dd1c2d500</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>daytonaBot</li>
<li>MDzaja <a
href="https://github.com/MDzaja"><code>@​MDzaja</code></a></li>
<li>Mirko Džaja <a
href="https://github.com/MDzaja"><code>@​MDzaja</code></a></li>
</ul>
<h2>v0.199.0</h2>
<h2>0.199.0 (2026-07-17)</h2>
<h3>🚀 Features</h3>
<ul>
<li><strong>sdk,cli:</strong> sandbox TTL support (<a
href="https://redirect.github.com/daytona/clients/pull/74">#74</a>)</li>
<li>⚠️ <strong>sdk-python:</strong> require Python &gt;=3.10 (<a
href="https://redirect.github.com/daytona/clients/pull/83">#83</a>)</li>
</ul>
<h3>Chores</h3>
<ul>
<li>sync go.sum for v0.198.0 (<a
href="https://redirect.github.com/daytona/clients/pull/82">#82</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/daytona/clients/commit/3d2223c79fe528693c00e331ae85499350c6d809"><code>3d2223c</code></a>
chore(sdk-go): bump to v0.200.1 (<a
href="https://redirect.github.com/daytona/clients/issues/112">#112</a>)</li>
<li><a
href="https://github.com/daytona/clients/commit/abdc95d754f30f086b2ab103ca40abb29f094dfe"><code>abdc95d</code></a>
fix(sdk-python,sdk-ruby): share one expiry worker across event
subscriptions ...</li>
<li><a
href="https://github.com/daytona/clients/commit/cbc24fc95ee2d52471df3f1413b130669321b219"><code>cbc24fc</code></a>
chore: sync go.sum for v0.200.0 (<a
href="https://redirect.github.com/daytona/clients/issues/107">#107</a>)</li>
<li><a
href="https://github.com/daytona/clients/commit/8f2d8fceafda70684ee63e1abb28196175d68aa8"><code>8f2d8fc</code></a>
chore(sdk-go): bump to v0.200.0 (<a
href="https://redirect.github.com/daytona/clients/issues/104">#104</a>)</li>
<li><a
href="https://github.com/daytona/clients/commit/431e9698b2551edaf9f60acdd1bb769c701b5271"><code>431e969</code></a>
fix(sdk-go): make HTTP timeout configurable and honor long execution
timeouts...</li>
<li><a
href="https://github.com/daytona/clients/commit/a0ce4ec78d6affb46b82c33958d6bbd72e0041ac"><code>a0ce4ec</code></a>
fix(cli,sdk-ruby): enforce TLS verification in Ruby Socket.IO client and
crea...</li>
<li><a
href="https://github.com/daytona/clients/commit/dd1c2d5008eb4ef2023c1b82a26b9a4d490d3851"><code>dd1c2d5</code></a>
chore(sdk-python): retry poetry lock to tolerate stale PyPI CDN</li>
<li><a
href="https://github.com/daytona/clients/commit/88a17a89b6d1d7a3aa3c5249cc6fd402bbd0306d"><code>88a17a8</code></a>
chore: add opt-in publish CLI checkbox and skip SDKs without an explicit
version</li>
<li><a
href="https://github.com/daytona/clients/commit/c7a147762880f5900480ddfe782b9b8ade3ca97c"><code>c7a1477</code></a>
chore: add publish CLI checkbox and skip SDKs without an explicit
version</li>
<li><a
href="https://github.com/daytona/clients/commit/d1f23d775b85078c0a7c42b598327db153cf53b3"><code>d1f23d7</code></a>
chore: sync go.sum for v0.199.0 (<a
href="https://redirect.github.com/daytona/clients/issues/95">#95</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/daytona/clients/compare/v0.192.0...v0.200.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `modal` from 0.8.2 to 0.9.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/modal-labs/modal-client/blob/main/CHANGELOG_GO_JS.md">modal's
changelog</a>.</em></p>
<blockquote>
<h2>js/v0.9.0, go/v0.9.0</h2>
<ul>
<li>(Go, JS) <code>Functions.FromName</code> / <code>Cls.FromName</code>
(Go) and <code>client.functions.fromName</code> /
<code>client.cls.fromName</code> (JS) now accept an optional
<code>Version</code> (Go) / <code>version</code> (JS) parameter to look
up a version-pinned Function or Cls.</li>
<li>(Go, JS) <code>Secrets.FromMap</code> (Go) /
<code>client.secrets.fromObject</code> (JS) is now lazy, so the returned
<code>Secret</code> has an empty <code>SecretID</code> (Go) /
<code>secretId</code> (JS) until it is first used. Latency for
<code>Sandbox.ExperimentalCreate</code> /
<code>Sandbox.experimentalCreate</code> and <code>Sandbox.Exec</code> /
<code>Sandbox.exec</code> is improved by sending the secrets directly to
the Sandbox and avoiding the secret creation limits.</li>
<li>(Go, JS) <code>Function.WithOptions</code> /
<code>Cls.WithOptions</code> (Go) and <code>Function_.withOptions</code>
/ <code>Cls.withOptions</code> (JS) now accept a
<code>RoutingRegion</code> / <code>routingRegion</code> option to
override the region the Function's or Cls's inputs and outputs are
routed through.</li>
<li>(Go, JS) Added <code>Sandbox.Filesystem.Watch</code> (Go) /
<code>Sandbox.filesystem.watch</code> (JS) to watch a path in the
Sandbox for filesystem changes. It yields <code>FileWatchEvent</code>
objects and supports <code>Recursive</code> / <code>recursive</code>, an
event-type <code>Filter</code> / <code>filter</code>, and a
<code>Timeout</code> / <code>timeoutMs</code> bound.</li>
<li><strong>Breaking:</strong> (Go, JS)
<code>Sandbox.ReloadVolumes</code> (Go) /
<code>Sandbox.reloadVolumes</code> (JS) now blocks until the Volumes
have been reloaded, bounded by a new timeout (55 seconds by default)
that is configurable via <code>SandboxReloadVolumesParams.Timeout</code>
(Go) / <code>SandboxReloadVolumesParams.timeoutMs</code> (JS). If the
reload does not complete within that window, a <code>TimeoutError</code>
is raised.</li>
<li><strong>Breaking:</strong> (Go, JS) Renamed the
<code>VolumeMountOptions</code> type to
<code>VolumeMountOptionsParams</code>. In Go, update
<code>WithMountOptions(&amp;VolumeMountOptions{...})</code> /
<code>withMountOptions</code> type annotations accordingly.</li>
<li><strong>Breaking:</strong> (Go) Changed
<code>OutboundCIDRAllowlist</code> and
<code>OutboundDomainAllowlist</code> in <code>SandboxCreateParams</code>
from <code>[]string</code> to <code>*Allowlist</code>. A non-nil
<code>*Allowlist</code> enables allowlist mode (even with empty
<code>Entries</code>, which blocks all traffic of that type);
<code>nil</code> means open access. Migrate <code>OutboundCIDRAllowlist:
[]string{&quot;10.0.0.0/8&quot;}</code> to <code>OutboundCIDRAllowlist:
&amp;Allowlist{Entries: []string{&quot;10.0.0.0/8&quot;}}</code>.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/modal-labs/modal-client/commit/77d609d2fabac3829df7e82cb57b120a383d0512"><code>77d609d</code></a>
Prepare Go/JS release 0.9.0 (<a
href="https://redirect.github.com/modal-labs/modal-client/issues/47971">#47971</a>)</li>
<li><a
href="https://github.com/modal-labs/modal-client/commit/08386a15ffa07ce8c2ce98812a1b257b901d7304"><code>08386a1</code></a>
Stream sandbox filesystem writes over TaskExecStdinWriteStream (<a
href="https://redirect.github.com/modal-labs/modal-client/issues/47234">#47234</a>)</li>
<li><a
href="https://github.com/modal-labs/modal-client/commit/66a31e0f0c963afecf42ace06b80098a8919315e"><code>66a31e0</code></a>
[sdk] proto for billing.summary() (<a
href="https://redirect.github.com/modal-labs/modal-client/issues/47659">#47659</a>)</li>
<li><a
href="https://github.com/modal-labs/modal-client/commit/d227469034b9aa005549ce65593f040db636fd14"><code>d227469</code></a>
Rename VolumeMountOptions to VolumeMountOptionsParams (<a
href="https://redirect.github.com/modal-labs/modal-client/issues/47885">#47885</a>)</li>
<li><a
href="https://github.com/modal-labs/modal-client/commit/9928de6f170598d95d454f88b01417bb88fe9cd3"><code>9928de6</code></a>
Support tag filters in V2 sandbox list (Python, Go, JS clients) (<a
href="https://redirect.github.com/modal-labs/modal-client/issues/47871">#47871</a>)</li>
<li><a
href="https://github.com/modal-labs/modal-client/commit/36958ac60bd3610ea2987700df3d1d16c5a37e25"><code>36958ac</code></a>
[Volume Experimental Options] Add experimental_options to Python client
Volum...</li>
<li><a
href="https://github.com/modal-labs/modal-client/commit/c3265a204b892df609c122fe2c4275b8d693ff90"><code>c3265a2</code></a>
Sandboxes [new FS API]: add watch to JS SDK (<a
href="https://redirect.github.com/modal-labs/modal-client/issues/43323">#43323</a>)</li>
<li><a
href="https://github.com/modal-labs/modal-client/commit/8d7368ab5e5e8940ba01c9f2f3ca58d19f900134"><code>8d7368a</code></a>
Fix modal curl help (<a
href="https://redirect.github.com/modal-labs/modal-client/issues/47836">#47836</a>)</li>
<li><a
href="https://github.com/modal-labs/modal-client/commit/5f2f5611d471bbccfee17b8ee1b7f95b037d973e"><code>5f2f561</code></a>
Implement SandboxTagsGetV2 and SandboxTagsSetV2 in the sandbox
controller (<a
href="https://redirect.github.com/modal-labs/modal-client/issues/4">#4</a>...</li>
<li><a
href="https://github.com/modal-labs/modal-client/commit/0686911ded7b0d7733bf21b252f4311305e3d9e6"><code>0686911</code></a>
[Volume Experimental Options] Add VolumeCreateOptions message to
VolumeGetOrC...</li>
<li>Additional commits viewable in <a
href="https://github.com/modal-labs/modal-client/compare/go/v0.8.2...go/v0.9.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `magic-string` from 1.0.0 to 1.1.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/Rich-Harris/magic-string/releases">magic-string's
releases</a>.</em></p>
<blockquote>
<h2>v1.1.0</h2>
<h3>   🐞 Bug Fixes</h3>
<ul>
<li>Trim replacements longer than the range they replace  -  by <a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>
in <a
href="https://redirect.github.com/Rich-Harris/magic-string/issues/312">Rich-Harris/magic-string#312</a>
<a
href="https://github.com/Rich-Harris/magic-string/commit/ec1a139"><!--
raw HTML omitted -->(ec1a1)<!-- raw HTML omitted --></a></li>
</ul>
<h3>   🏎 Performance</h3>
<ul>
<li>Use a <code>Map</code> for tracking chunks  -  by <a
href="https://github.com/43081j"><code>@​43081j</code></a> in <a
href="https://redirect.github.com/Rich-Harris/magic-string/issues/313">Rich-Harris/magic-string#313</a>
<a
href="https://github.com/Rich-Harris/magic-string/commit/25d7461"><!--
raw HTML omitted -->(25d74)<!-- raw HTML omitted --></a></li>
</ul>
<h5>    <a
href="https://github.com/Rich-Harris/magic-string/compare/v1.0.0...v1.1.0">View
changes on GitHub</a></h5>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/Rich-Harris/magic-string/blob/master/CHANGELOG.md">magic-string's
changelog</a>.</em></p>
<blockquote>
<h1><a
href="https://github.com/Rich-Harris/magic-string/compare/v1.0.0...v1.1.0">1.1.0</a>
(2026-07-23)</h1>
<h3>Bug Fixes</h3>
<ul>
<li>trim replacements longer than the range they replace (<a
href="https://redirect.github.com/Rich-Harris/magic-string/issues/312">#312</a>)
(<a
href="https://github.com/Rich-Harris/magic-string/commit/ec1a13955a4d7623175256520a3eb276ed365af8">ec1a139</a>)</li>
</ul>
<h3>Performance Improvements</h3>
<ul>
<li>use a <code>Map</code> for tracking chunks (<a
href="https://redirect.github.com/Rich-Harris/magic-string/issues/313">#313</a>)
(<a
href="https://github.com/Rich-Harris/magic-string/commit/25d746120d84bd778c100ab75fa658160eb0865d">25d7461</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/Rich-Harris/magic-string/commit/f51bfc9032a0606fb110e61279fb10f01907dd69"><code>f51bfc9</code></a>
chore: release v1.1.0</li>
<li><a
href="https://github.com/Rich-Harris/magic-string/commit/ec1a13955a4d7623175256520a3eb276ed365af8"><code>ec1a139</code></a>
fix: trim replacements longer than the range they replace (<a
href="https://redirect.github.com/Rich-Harris/magic-string/issues/312">#312</a>)</li>
<li><a
href="https://github.com/Rich-Harris/magic-string/commit/25d746120d84bd778c100ab75fa658160eb0865d"><code>25d7461</code></a>
perf: use a <code>Map</code> for tracking chunks (<a
href="https://redirect.github.com/Rich-Harris/magic-string/issues/313">#313</a>)</li>
<li><a
href="https://github.com/Rich-Harris/magic-string/commit/80c16ca63939f81666414991ab11bdbf000f6441"><code>80c16ca</code></a>
chore: disable sourcemaps (<a
href="https://redirect.github.com/Rich-Harris/magic-string/issues/311">#311</a>)</li>
<li>See full diff in <a
href="https://github.com/Rich-Harris/magic-string/compare/v1.0.0...v1.1.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `langsmith` from 0.7.14 to 0.8.7
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/langsmith-sdk/releases">langsmith's
releases</a>.</em></p>
<blockquote>
<h2>v0.8.7</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: reconnect sandbox command streams on EOF by <a
href="https://github.com/ramon-langchain"><code>@​ramon-langchain</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2941">langchain-ai/langsmith-sdk#2941</a></li>
<li>feat(sandbox): build snapshots from Dockerfiles by <a
href="https://github.com/langchain-infra"><code>@​langchain-infra</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2950">langchain-ai/langsmith-sdk#2950</a></li>
<li>fix(python): add organization id to context URLs by <a
href="https://github.com/vishnu-ssuresh"><code>@​vishnu-ssuresh</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2945">langchain-ai/langsmith-sdk#2945</a></li>
<li>fix(js): add organization id to context URLs by <a
href="https://github.com/vishnu-ssuresh"><code>@​vishnu-ssuresh</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2946">langchain-ai/langsmith-sdk#2946</a></li>
<li>release(py): 0.8.7 by <a
href="https://github.com/ramon-langchain"><code>@​ramon-langchain</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2947">langchain-ai/langsmith-sdk#2947</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.8.6...v0.8.7">https://github.com/langchain-ai/langsmith-sdk/compare/v0.8.6...v0.8.7</a></p>
<h2>v0.8.6</h2>
<h2>What's Changed</h2>
<ul>
<li>chore(deps-dev): bump <code>@​google/genai</code> from 1.50.1 to
2.0.1 in /js by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2875">langchain-ai/langsmith-sdk#2875</a></li>
<li>chore(deps): bump mako from 1.3.11 to 1.3.12 in /python by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2880">langchain-ai/langsmith-sdk#2880</a></li>
<li>chore(deps): bump authlib from 1.6.11 to 1.6.12 in /python by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2888">langchain-ai/langsmith-sdk#2888</a></li>
<li>chore(deps): bump hono from 4.12.15 to 4.12.18 in /js by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2894">langchain-ai/langsmith-sdk#2894</a></li>
<li>chore(deps): bump fast-uri from 3.1.0 to 3.1.2 in /js by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2895">langchain-ai/langsmith-sdk#2895</a></li>
<li>chore(deps-dev): bump <code>@​anthropic-ai/sdk</code> from 0.94.0 to
0.95.0 in /js by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2881">langchain-ai/langsmith-sdk#2881</a></li>
<li>chore(deps): bump postcss from 8.5.8 to 8.5.14 in /js by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2898">langchain-ai/langsmith-sdk#2898</a></li>
<li>chore(deps): bump <code>@​protobufjs/utf8</code> from 1.1.0 to 1.1.1
in /js/internal/environment_tests/test-exports-vite in the npm_and_yarn
group across 1 directory by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2908">langchain-ai/langsmith-sdk#2908</a></li>
<li>chore(deps): bump hono from 4.12.18 to 4.12.19 in /js by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2909">langchain-ai/langsmith-sdk#2909</a></li>
<li>chore(deps): bump protobufjs from 7.5.7 to 8.0.1 in /js by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2896">langchain-ai/langsmith-sdk#2896</a></li>
<li>chore(deps): bump idna from 3.11 to 3.15 in /python by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2913">langchain-ai/langsmith-sdk#2913</a></li>
<li>chore(deps-dev): bump <code>@​anthropic-ai/sdk</code> from 0.95.0 to
0.95.1 in /js by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2912">langchain-ai/langsmith-sdk#2912</a></li>
<li>AI SDK telemetry and AI SDK v7 support by <a
href="https://github.com/dqbd"><code>@​dqbd</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2901">langchain-ai/langsmith-sdk#2901</a></li>
<li>feat: install websockets by default for sandbox by <a
href="https://github.com/open-swe"><code>@​open-swe</code></a>[bot] in
<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2916">langchain-ai/langsmith-sdk#2916</a></li>
<li>release(js): 0.7.2 by <a
href="https://github.com/dqbd"><code>@​dqbd</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2922">langchain-ai/langsmith-sdk#2922</a></li>
<li>feat: add list_runs_from_annotation_queue method [closes LSDK-193]
by <a
href="https://github.com/open-swe"><code>@​open-swe</code></a>[bot] in
<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2892">langchain-ai/langsmith-sdk#2892</a></li>
<li>chore(deps-dev): bump <code>@​anthropic-ai/sdk</code> from 0.95.1 to
0.95.2 in /js by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2917">langchain-ai/langsmith-sdk#2917</a></li>
<li>chore(deps-dev): bump types-pyyaml from 6.0.12.20250915 to
6.0.12.20260518 in /python by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2927">langchain-ai/langsmith-sdk#2927</a></li>
<li>chore(deps): update pydata-sphinx-theme requirement from &gt;=0.15
to &gt;=0.18.0 in /python by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2928">langchain-ai/langsmith-sdk#2928</a></li>
<li>chore: exclude langsmith_api from ruff linter by <a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2933">langchain-ai/langsmith-sdk#2933</a></li>
<li>fix(python): retry sandbox connect timeouts by <a
href="https://github.com/ramon-langchain"><code>@​ramon-langchain</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2940">langchain-ai/langsmith-sdk#2940</a></li>
<li>fix(js): [LSDK-202] return context hub URLs for pushed contexts by
<a
href="https://github.com/vishnu-ssuresh"><code>@​vishnu-ssuresh</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2939">langchain-ai/langsmith-sdk#2939</a></li>
<li>fix(python): RunTree.create_child appends to self.child_runs
LSE-2221 by <a
href="https://github.com/catherine-langchain"><code>@​catherine-langchain</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2942">langchain-ai/langsmith-sdk#2942</a></li>
<li>release(js): 0.7.3 by <a
href="https://github.com/vishnu-ssuresh"><code>@​vishnu-ssuresh</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2943">langchain-ai/langsmith-sdk#2943</a></li>
<li>fix(python): [LSDK-202] return context hub URLs for pushed contexts
by <a
href="https://github.com/vishnu-ssuresh"><code>@​vishnu-ssuresh</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2938">langchain-ai/langsmith-sdk#2938</a></li>
<li>release(py): 0.8.6 by <a
href="https://github.com/vishnu-ssuresh"><code>@​vishnu-ssuresh</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2944">langchain-ai/langsmith-sdk#2944</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/KiewanVillatel"><code>@​KiewanVillatel</code></a>
made their first contribution in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2933">langchain-ai/langsmith-sdk#2933</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.8.5...v0.8.6">https://github.com/langchain-ai/langsmith-sdk/compare/v0.8.5...v0.8.6</a></p>
<h2>v0.8.5</h2>
<h2>What's Changed</h2>
<ul>
<li>release(js): 0.7.0 by <a
href="https://github.com/ramon-langchain"><code>@​ramon-langchain</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2890">langchain-ai/langsmith-sdk#2890</a></li>
<li>fix(js): add alias for <code>experimental/sandbox</code> to appease
broad peer dep range within <code>deepagents</code> by <a
href="https://github.com/dqbd"><code>@​dqbd</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2893">langchain-ai/langsmith-sdk#2893</a></li>
<li>feat(js): allow disabling multipart streaming via env variable by <a
href="https://github.com/dqbd"><code>@​dqbd</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2900">langchain-ai/langsmith-sdk#2900</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/1b3bfc44efe00643c5906af90eb7868e45ad830a"><code>1b3bfc4</code></a>
release(py): 0.8.7 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/2947">#2947</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/9303f0b9187140ff4ed89b89553b499fe369d48d"><code>9303f0b</code></a>
fix(js): add organization id to context URLs (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/2946">#2946</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/cf028ed6f4d3aac3b8bd762b0440b69ae5fa5bbd"><code>cf028ed</code></a>
fix(python): add organization id to context URLs (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/2945">#2945</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/52305b2815bfc693f64db9b211f588ac2cd99845"><code>52305b2</code></a>
feat(sandbox): build snapshots from Dockerfiles (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/2950">#29...

_Description has been truncated_

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-24 15:26:37 -07:00
dependabot[bot] 24ea7fa8ac build(deps): bump the major-deps-updates-main group across 1 directory with 2 updates (#695)
Bumps the major-deps-updates-main group with 2 updates in the /
directory: [typescript](https://github.com/microsoft/TypeScript) and
[magic-string](https://github.com/Rich-Harris/magic-string).

Updates `typescript` from 6.0.3 to 7.0.2
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/microsoft/TypeScript/commits">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~microsoft1es">microsoft1es</a>, a new
releaser for typescript since your current version.</p>
</details>
<br />

Updates `magic-string` from 0.30.21 to 1.0.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/Rich-Harris/magic-string/releases">magic-string's
releases</a>.</em></p>
<blockquote>
<h2>v1.0.0</h2>
<p>In <code>magic-string</code> v1.0.0, it's now <strong>pure
ESM</strong>, and the type declarations are built from the TypeScript
source. This means the previous CJS, UMD, and IIFE builds are now
dropped as we believe the ecosystem is moving forward for ESM. The
version was bumped to v1.0.0 instead of v0.31 to distinguish this
breaking change, and since magic-string has been verified by the
ecosystem for over a decade, the API is stable enough to be marked as
v1.</p>
<p>Genreated changelogs:</p>
<h3>   🚨 Breaking Changes</h3>
<ul>
<li>Migrate build to pure ESM and TypeScript  -  by <a
href="https://github.com/sxzz"><code>@​sxzz</code></a> in <a
href="https://redirect.github.com/Rich-Harris/magic-string/issues/310">Rich-Harris/magic-string#310</a>
<a
href="https://github.com/Rich-Harris/magic-string/commit/0e22897"><!--
raw HTML omitted -->(0e228)<!-- raw HTML omitted --></a></li>
</ul>
<h3>   🐞 Bug Fixes</h3>
<ul>
<li>Avoid crash when moving a zero-length range  -  by <a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>
and <a href="https://github.com/antfu"><code>@​antfu</code></a> in <a
href="https://redirect.github.com/Rich-Harris/magic-string/issues/307">Rich-Harris/magic-string#307</a>
<a
href="https://github.com/Rich-Harris/magic-string/commit/56fe8cb"><!--
raw HTML omitted -->(56fe8)<!-- raw HTML omitted --></a></li>
</ul>
<h3>   🏎 Performance</h3>
<ul>
<li>Add fast path for non-exclusion indent  -  by <a
href="https://github.com/43081j"><code>@​43081j</code></a> in <a
href="https://redirect.github.com/Rich-Harris/magic-string/issues/308">Rich-Harris/magic-string#308</a>
<a
href="https://github.com/Rich-Harris/magic-string/commit/992baba"><!--
raw HTML omitted -->(992ba)<!-- raw HTML omitted --></a></li>
</ul>
<h5>    <a
href="https://github.com/Rich-Harris/magic-string/compare/v0.30.21...v1.0.0">View
changes on GitHub</a></h5>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/Rich-Harris/magic-string/blob/master/CHANGELOG.md">magic-string's
changelog</a>.</em></p>
<blockquote>
<h1><a
href="https://github.com/Rich-Harris/magic-string/compare/v0.30.21...v1.0.0">1.0.0</a>
(2026-07-16)</h1>
<h3>Bug Fixes</h3>
<ul>
<li>avoid crash when moving a zero-length range (<a
href="https://redirect.github.com/Rich-Harris/magic-string/issues/307">#307</a>)
(<a
href="https://github.com/Rich-Harris/magic-string/commit/56fe8cb61e6b64a778e5eb7d0334c57aacb0c4c8">56fe8cb</a>)</li>
</ul>
<h3>Performance Improvements</h3>
<ul>
<li>add fast path for non-exclusion indent (<a
href="https://redirect.github.com/Rich-Harris/magic-string/issues/308">#308</a>)
(<a
href="https://github.com/Rich-Harris/magic-string/commit/992baba37ac10bb5e35ad00fb516a272b8757a91">992baba</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/Rich-Harris/magic-string/commit/2da7cf08eb1dfde70d95b03115727ab50694472d"><code>2da7cf0</code></a>
chore: release v1.0.0</li>
<li><a
href="https://github.com/Rich-Harris/magic-string/commit/56fe8cb61e6b64a778e5eb7d0334c57aacb0c4c8"><code>56fe8cb</code></a>
fix: avoid crash when moving a zero-length range (<a
href="https://redirect.github.com/Rich-Harris/magic-string/issues/307">#307</a>)</li>
<li><a
href="https://github.com/Rich-Harris/magic-string/commit/992baba37ac10bb5e35ad00fb516a272b8757a91"><code>992baba</code></a>
perf: add fast path for non-exclusion indent (<a
href="https://redirect.github.com/Rich-Harris/magic-string/issues/308">#308</a>)</li>
<li><a
href="https://github.com/Rich-Harris/magic-string/commit/0e22897fd5e792fdb7a1d9ccde5c1fbce6aa596b"><code>0e22897</code></a>
feat!: migrate build to pure ESM and TypeScript (<a
href="https://redirect.github.com/Rich-Harris/magic-string/issues/310">#310</a>)</li>
<li>See full diff in <a
href="https://github.com/Rich-Harris/magic-string/compare/v0.30.21...v1.0.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-24 14:45:40 -07:00
Hunter Lovell 0e6a35b647 fix(deno): extend reconnect readiness retry (#706)
## Summary

Stabilizes the Deno sandbox reconnection integration test when Deno
Deploy has not yet exposed a new deployment to a second WebSocket
client. The test now uses a bounded readiness window instead of failing
after the shorter retry interval.

## Changes

### `@langchain/deno`

- Extend the reconnect test's retry window to 12 attempts with a
2-second delay.
- Document that temporary `404 DEPLOYMENT_NOT_FOUND` responses are
expected during Deno Deploy propagation.
2026-07-23 21:26:02 -07:00
github-actions[bot] a55022dc2f chore: version packages (rc) (#699)
This PR was opened by the [Changesets
release](https://github.com/changesets/action) GitHub action. When
you're ready to do a release, you can merge this and the packages will
be published to npm automatically. If you're not ready to do a release
yet, that's fine, whenever you add more changesets to main, this PR will
be updated.

⚠️⚠️⚠️⚠️⚠️⚠️

`main` is currently in **pre mode** so this branch has prereleases
rather than normal releases. If you want to exit prereleases, run
`changeset pre exit` on `main`.

⚠️⚠️⚠️⚠️⚠️⚠️

# Releases
## deepagents@1.12.0-rc.0

### Minor Changes

- [#703](https://github.com/langchain-ai/deepagentsjs/pull/703)
[`d25097f`](https://github.com/langchain-ai/deepagentsjs/commit/d25097f78d0e66741da34e1d74551f3c19991126)
Thanks [@hntrl](https://github.com/hntrl)! - feat(deepagents): adopt
more minimal prompting

We've observed that current models don't need as verbose of prompting
guidance, so we're reducing the amount of perscriptive guidance that
deepagents has. This is reflected in the generic system prompt (which is
now blank), and in the tool descriptions (which have been simplified).

- [#674](https://github.com/langchain-ai/deepagentsjs/pull/674)
[`dd142fe`](https://github.com/langchain-ai/deepagentsjs/commit/dd142fe4fc54c986d5bcf51211d9a839a427e931)
Thanks [@hntrl](https://github.com/hntrl)! - feat(filesystem): allow
`write_file` to create missing files or completely replace existing
files
## deepagents-acp@0.1.21-rc.0

### Patch Changes

- Updated dependencies
[[`d25097f`](https://github.com/langchain-ai/deepagentsjs/commit/d25097f78d0e66741da34e1d74551f3c19991126),
[`dd142fe`](https://github.com/langchain-ai/deepagentsjs/commit/dd142fe4fc54c986d5bcf51211d9a839a427e931)]:
  - deepagents@1.12.0-rc.0
## @langchain/daytona@1.0.0-rc.0

### Patch Changes

- Updated dependencies
[[`d25097f`](https://github.com/langchain-ai/deepagentsjs/commit/d25097f78d0e66741da34e1d74551f3c19991126),
[`dd142fe`](https://github.com/langchain-ai/deepagentsjs/commit/dd142fe4fc54c986d5bcf51211d9a839a427e931)]:
  - deepagents@1.12.0-rc.0
## @langchain/deno@1.0.0-rc.0

### Patch Changes

- Updated dependencies
[[`d25097f`](https://github.com/langchain-ai/deepagentsjs/commit/d25097f78d0e66741da34e1d74551f3c19991126),
[`dd142fe`](https://github.com/langchain-ai/deepagentsjs/commit/dd142fe4fc54c986d5bcf51211d9a839a427e931)]:
  - deepagents@1.12.0-rc.0
## @langchain/modal@1.0.0-rc.0

### Patch Changes

- Updated dependencies
[[`d25097f`](https://github.com/langchain-ai/deepagentsjs/commit/d25097f78d0e66741da34e1d74551f3c19991126),
[`dd142fe`](https://github.com/langchain-ai/deepagentsjs/commit/dd142fe4fc54c986d5bcf51211d9a839a427e931)]:
  - deepagents@1.12.0-rc.0
## @langchain/node-vfs@1.0.0-rc.0

### Patch Changes

- [#674](https://github.com/langchain-ai/deepagentsjs/pull/674)
[`dd142fe`](https://github.com/langchain-ai/deepagentsjs/commit/dd142fe4fc54c986d5bcf51211d9a839a427e931)
Thanks [@hntrl](https://github.com/hntrl)! - fix: allow
`VfsBackend.write` to overwrite existing files while continuing to
reject symlinks

- Updated dependencies
[[`d25097f`](https://github.com/langchain-ai/deepagentsjs/commit/d25097f78d0e66741da34e1d74551f3c19991126),
[`dd142fe`](https://github.com/langchain-ai/deepagentsjs/commit/dd142fe4fc54c986d5bcf51211d9a839a427e931)]:
  - deepagents@1.12.0-rc.0
## @langchain/quickjs@1.0.0-rc.0

### Patch Changes

- Updated dependencies
[[`d25097f`](https://github.com/langchain-ai/deepagentsjs/commit/d25097f78d0e66741da34e1d74551f3c19991126),
[`dd142fe`](https://github.com/langchain-ai/deepagentsjs/commit/dd142fe4fc54c986d5bcf51211d9a839a427e931)]:
  - deepagents@1.12.0-rc.0
## @langchain/sandbox-standard-tests@2.0.0-rc.0

### Patch Changes

- Updated dependencies
[[`d25097f`](https://github.com/langchain-ai/deepagentsjs/commit/d25097f78d0e66741da34e1d74551f3c19991126),
[`dd142fe`](https://github.com/langchain-ai/deepagentsjs/commit/dd142fe4fc54c986d5bcf51211d9a839a427e931)]:
  - deepagents@1.12.0-rc.0
## @deepagents/evals@0.0.20-rc.0

### Patch Changes

- Updated dependencies
[[`d25097f`](https://github.com/langchain-ai/deepagentsjs/commit/d25097f78d0e66741da34e1d74551f3c19991126),
[`dd142fe`](https://github.com/langchain-ai/deepagentsjs/commit/dd142fe4fc54c986d5bcf51211d9a839a427e931)]:
  - deepagents@1.12.0-rc.0

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
@langchain/daytona@1.0.0-rc.0 @langchain/deno@1.0.0-rc.0 @langchain/modal@1.0.0-rc.0 @langchain/node-vfs@1.0.0-rc.0 @langchain/quickjs@1.0.0-rc.0 @langchain/sandbox-standard-tests@2.0.0-rc.0 deepagents-acp@0.1.21-rc.0 deepagents@1.12.0-rc.0
2026-07-23 21:18:40 -07:00
Hunter Lovell d25097f78d feat(deepagents): simplify prompting (#703)
## Summary

The SDK currently ships authored base prose plus middleware guidance
that largely duplicates the tool schemas. This change adopts a more lean
default: no authored base prompt, no duplicate built-in usage prose, and
concise tool descriptions.

Skills, memory, custom system prompts, custom tool descriptions, and
required filesystem routing context remain intact. The legacy
base-prompt surface is removed rather than preserved as a default path.

## Changes

### Default prompt

- Remove the authored default base prompt and its obsolete public
surface.
- Suppress LangChain's default todo middleware prompt while leaving
deepagents-owned middleware prompt-free by default.
- Remove unused filesystem, subagent, async-subagent, and execution
prompt constants and exports.

### Durable tool guidance

- Keep large-result recovery guidance in `read_file` and `grep`
descriptions.
- Keep async task status freshness guidance in `check_async_task` and
`list_async_tasks` descriptions.
- Trim filesystem and task descriptions to their purpose and
load-bearing constraints.
- Build grep and execute descriptions from the configured filesystem
tool set so they do not recommend unavailable tools.

### Token impact

Offline (`o200k_base`, default-agent tool schemas):

| Tool | Before | After | Delta |
| --- | ---: | ---: | ---: |
| `task` | 1,664 | 389 | -77% |
| `read_file` | 728 | 494 | -32% |
| `grep` | 688 | 555 | -19% |
| `edit_file` | 273 | 257 | -6% |
| `glob` | 217 | 172 | -21% |
| `write_file` | 177 | 177 | — |
| `delete` | 146 | 146 | — |
| `ls` | 111 | 111 | — |
| **Total** | **4,005** | **2,302** | **-43%** |

For a default-agent `hello` turn, input tokens drop from 5,395 to 1,895
(-65%).

### Evaluation results

The lean prompt matched the baseline on correctness (0.81) and solve
rate (0.635 vs. 0.634). Unified evaluation macro and micro scores
improved from 0.413 to 0.437 and from 0.371 to 0.394, respectively. (see
more detailed results in
https://github.com/langchain-ai/deepagents/pull/5009 and
https://github.com/langchain-ai/deepagents/pull/4859)
2026-07-23 21:06:12 -07:00
Hunter Lovell 5833cec84f fix(daytona): isolate integration test cleanup (#702)
## Summary

Scopes Daytona integration-test cleanup to a single GitHub Actions run
and attempt, preventing concurrent CI runs from deleting each other’s
active sandboxes.

## Changes

- Add a per-execution sandbox label derived from GitHub’s run ID and
attempt, with a local-process fallback.
- Remove the ineffective pre-test cleanup, which cannot match sandboxes
from earlier runs once labels are per-execution.
- Configure a 15-minute Daytona auto-delete TTL after the existing
5-minute auto-stop interval, bounding leaks when a cancelled process
cannot run final cleanup.
- Correct the Deno reconnect integration test to keep its duration-based
sandbox active while opening a second client, because `close()`
terminates the remote deployment.
2026-07-23 20:24:58 -07:00
Hunter Lovell fd6219ae75 chore(deepagents): revert system prompt configuration (#700)
reverts #669
2026-07-23 19:12:05 -07:00
Hunter Lovell ef794da80b chore: rc pre-release (#701) 2026-07-23 18:56:03 -07:00
Hunter Lovell dd142fe4fc feat(deepagents): allow write_file to overwrite files (#674)
## Summary

`write_file` now creates missing files and replaces existing files
entirely, removing the previous create-only error path while preserving
write permissions and symlink protections.

## Changes

### deepagents filesystem backends

- Updated `FilesystemBackend`, `StateBackend`, `StoreBackend`,
`BaseSandbox`, and `node-vfs` write behavior to allow full-file
replacement on existing paths.
- Preserved path safety and symlink protections in filesystem-backed
writes.
- Removed the sandbox existence precheck so writes rely on the
upload/write transport.

### Tool prompts and examples

- Aligned the `write_file` tool description and schema text with the
Python SDK wording.
- Updated sandbox example prompts so `write_file` is described as
creating or fully replacing files.

### Tests and evals

- Updated backend, middleware, and shared sandbox standard tests that
previously expected an existing-file error.
- Added overwrite coverage for filesystem, sandbox, state, store,
middleware, node-vfs, and file-operation evals.

### Release

- Added a changeset for `deepagents` documenting the new overwrite
behavior.
2026-07-22 16:10:05 -07:00
Christian Bromann b215e70d88 ci: route integration tests through LangSmith LLM Gateway (#697)
## Summary
- Add a shared Vitest setup that remaps Anthropic/OpenAI/etc. clients
onto the LangSmith LLM Gateway when `LANGSMITH_GATEWAY_KEY` is present.
- Wire that setup into all package int-test Vitest configs.
- Pass `LANGSMITH_GATEWAY_KEY` into the CI integration-test job (falls
back to direct provider keys if unset).
2026-07-20 16:28:01 -07:00
dependabot[bot] 16c8d14307 build(deps): bump node from 22-alpine to 26-alpine in /examples/async-subagent-server in the major-deps-updates-docker group (#683)
Bumps the major-deps-updates-docker group in
/examples/async-subagent-server with 1 update: node.

Updates `node` from 22-alpine to 26-alpine


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=node&package-manager=docker&previous-version=22-alpine&new-version=26-alpine)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-19 17:04:25 -07:00
dependabot[bot] f180d0cfb4 build(deps): bump softprops/action-gh-release from 3.0.1 to 3.0.2 in the patch-deps-updates group (#684)
Bumps the patch-deps-updates group with 1 update:
[softprops/action-gh-release](https://github.com/softprops/action-gh-release).

Updates `softprops/action-gh-release` from 3.0.1 to 3.0.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/softprops/action-gh-release/releases">softprops/action-gh-release's
releases</a>.</em></p>
<blockquote>
<h2>v3.0.2</h2>
<p><code>3.0.2</code> is a patch release focused on release reliability
and compatibility. It
reuses existing draft releases when publishing prereleases, supports
replacing
release assets on Gitea, hardens streamed asset uploads, and provides
clearer
release-creation diagnostics. It also includes TypeScript, coverage, and
tooling
maintenance merged since <code>3.0.1</code>.</p>
<p>This release fixes <a
href="https://redirect.github.com/softprops/action-gh-release/issues/795">#795</a>,
<a
href="https://redirect.github.com/softprops/action-gh-release/issues/438">#438</a>,
and <a
href="https://redirect.github.com/softprops/action-gh-release/issues/803">#803</a>.
The upload transport hardening covers the
historical failure reported in <a
href="https://redirect.github.com/softprops/action-gh-release/issues/790">#790</a>,
although current hosted Node 24 runners did
not reproduce it naturally. The diagnostics work is related to <a
href="https://redirect.github.com/softprops/action-gh-release/issues/786">#786</a>
and does not
claim a reproducible release-creation fix.</p>
<h2>What's Changed</h2>
<h3>Exciting New Features 🎉</h3>
<ul>
<li>feat: improve release error reporting and test coverage by <a
href="https://github.com/chenrui333"><code>@​chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/813">softprops/action-gh-release#813</a></li>
</ul>
<h3>Bug fixes 🐛</h3>
<ul>
<li>fix: publish existing draft releases as prereleases by <a
href="https://github.com/godfengliang"><code>@​godfengliang</code></a>
in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/801">softprops/action-gh-release#801</a></li>
<li>fix: upload small checksum assets reliably by <a
href="https://github.com/chenrui333"><code>@​chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/815">softprops/action-gh-release#815</a></li>
<li>fix: replace existing release assets on Gitea by <a
href="https://github.com/chenrui333"><code>@​chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/816">softprops/action-gh-release#816</a></li>
<li>fix: clarify release creation 404 errors by <a
href="https://github.com/chenrui333"><code>@​chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/817">softprops/action-gh-release#817</a></li>
</ul>
<h3>Other Changes 🔄</h3>
<ul>
<li>chore(deps): upgrade TypeScript to 7 by <a
href="https://github.com/chenrui333"><code>@​chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/812">softprops/action-gh-release#812</a></li>
<li>chore(deps): remove unused TypeScript tooling by <a
href="https://github.com/chenrui333"><code>@​chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/814">softprops/action-gh-release#814</a></li>
<li>dependency, Node 24 pin, and CI maintenance merged since
<code>3.0.1</code></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md">softprops/action-gh-release's
changelog</a>.</em></p>
<blockquote>
<h2>3.0.2</h2>
<p><code>3.0.2</code> is a patch release focused on release reliability
and compatibility. It
reuses existing draft releases when publishing prereleases, supports
replacing
release assets on Gitea, hardens streamed asset uploads, and provides
clearer
release-creation diagnostics. It also includes TypeScript, coverage, and
tooling
maintenance merged since <code>3.0.1</code>.</p>
<p>This release fixes <a
href="https://redirect.github.com/softprops/action-gh-release/issues/795">#795</a>,
<a
href="https://redirect.github.com/softprops/action-gh-release/issues/438">#438</a>,
and <a
href="https://redirect.github.com/softprops/action-gh-release/issues/803">#803</a>.
The upload transport hardening covers the
historical failure reported in <a
href="https://redirect.github.com/softprops/action-gh-release/issues/790">#790</a>,
although current hosted Node 24 runners did
not reproduce it naturally. The diagnostics work is related to <a
href="https://redirect.github.com/softprops/action-gh-release/issues/786">#786</a>
and does not
claim a reproducible release-creation fix.</p>
<h2>What's Changed</h2>
<h3>Exciting New Features 🎉</h3>
<ul>
<li>feat: improve release error reporting and test coverage by <a
href="https://github.com/chenrui333"><code>@​chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/813">softprops/action-gh-release#813</a></li>
</ul>
<h3>Bug fixes 🐛</h3>
<ul>
<li>fix: publish existing draft releases as prereleases by <a
href="https://github.com/godfengliang"><code>@​godfengliang</code></a>
in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/801">softprops/action-gh-release#801</a></li>
<li>fix: upload small checksum assets reliably by <a
href="https://github.com/chenrui333"><code>@​chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/815">softprops/action-gh-release#815</a></li>
<li>fix: replace existing release assets on Gitea by <a
href="https://github.com/chenrui333"><code>@​chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/816">softprops/action-gh-release#816</a></li>
<li>fix: clarify release creation 404 errors by <a
href="https://github.com/chenrui333"><code>@​chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/817">softprops/action-gh-release#817</a></li>
</ul>
<h3>Other Changes 🔄</h3>
<ul>
<li>chore(deps): upgrade TypeScript to 7 by <a
href="https://github.com/chenrui333"><code>@​chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/812">softprops/action-gh-release#812</a></li>
<li>chore(deps): remove unused TypeScript tooling by <a
href="https://github.com/chenrui333"><code>@​chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/814">softprops/action-gh-release#814</a></li>
<li>dependency, Node 24 pin, and CI maintenance merged since
<code>3.0.1</code></li>
</ul>
<h2>3.0.1</h2>
<ul>
<li>maintenance release with updated dependencies</li>
</ul>
<h2>3.0.0</h2>
<p><code>3.0.0</code> is a major release that moves the action runtime
from Node 20 to Node 24.
Use <code>v3</code> on GitHub-hosted runners and self-hosted fleets that
already support the
Node 24 Actions runtime. <code>v2.6.2</code> was the final Node
20-compatible release and is
no longer maintained or supported.</p>
<h2>What's Changed</h2>
<h3>Other Changes 🔄</h3>
<ul>
<li>Move the action runtime and bundle target to Node 24</li>
<li>Update <code>@types/node</code> to the Node 24 line and allow future
Dependabot updates</li>
<li>Keep the floating major tag on <code>v3</code>; freeze
<code>v2</code> at the final <code>v2.6.2</code> release</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/softprops/action-gh-release/commit/3d0d9888cb7fd7b750713d6e236d1fcb99157228"><code>3d0d988</code></a>
release 3.0.2 (<a
href="https://redirect.github.com/softprops/action-gh-release/issues/818">#818</a>)</li>
<li><a
href="https://github.com/softprops/action-gh-release/commit/7e13ed4ac596a4adf801d3812be5a089356949aa"><code>7e13ed4</code></a>
fix: clarify release creation 404 errors (<a
href="https://redirect.github.com/softprops/action-gh-release/issues/817">#817</a>)</li>
<li><a
href="https://github.com/softprops/action-gh-release/commit/e6c70a53cf67373fbff7eeebca7782b4fe8f106c"><code>e6c70a5</code></a>
fix: replace existing release assets on Gitea (<a
href="https://redirect.github.com/softprops/action-gh-release/issues/816">#816</a>)</li>
<li><a
href="https://github.com/softprops/action-gh-release/commit/f3453378888d5ef6208e2788af1c5ba50d8a898d"><code>f345337</code></a>
fix: publish existing draft releases as prereleases (<a
href="https://redirect.github.com/softprops/action-gh-release/issues/801">#801</a>)</li>
<li><a
href="https://github.com/softprops/action-gh-release/commit/d8a89a206684ded8435bf16d6f698bf04ab05164"><code>d8a89a2</code></a>
fix: upload small checksum assets reliably (<a
href="https://redirect.github.com/softprops/action-gh-release/issues/815">#815</a>)</li>
<li><a
href="https://github.com/softprops/action-gh-release/commit/45ece40c3178522904ac6c51c21d8a4e3565f3c8"><code>45ece40</code></a>
chore(deps): remove unused TypeScript tooling (<a
href="https://redirect.github.com/softprops/action-gh-release/issues/814">#814</a>)</li>
<li><a
href="https://github.com/softprops/action-gh-release/commit/f6b913c3f95302d88e8ef7cb2859c2e7656aa01e"><code>f6b913c</code></a>
feat: improve release error reporting and test coverage (<a
href="https://redirect.github.com/softprops/action-gh-release/issues/813">#813</a>)</li>
<li><a
href="https://github.com/softprops/action-gh-release/commit/15f193d7d8aa9623b5181913a31fafceb4e8cef9"><code>15f193d</code></a>
chore(deps): upgrade TypeScript to 7 (<a
href="https://redirect.github.com/softprops/action-gh-release/issues/812">#812</a>)</li>
<li><a
href="https://github.com/softprops/action-gh-release/commit/cc8268d46a81d57ec9b061f27b0dd68ebd7fb17f"><code>cc8268d</code></a>
chore(deps): bump actions/checkout in the github-actions group (<a
href="https://redirect.github.com/softprops/action-gh-release/issues/810">#810</a>)</li>
<li><a
href="https://github.com/softprops/action-gh-release/commit/fd0ed1e85b6730f87f5c67d7355751c46ad513d6"><code>fd0ed1e</code></a>
chore(deps): bump the npm group with 3 updates (<a
href="https://redirect.github.com/softprops/action-gh-release/issues/811">#811</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/softprops/action-gh-release/compare/718ea10b132b3b2eba29c1007bb80653f286566b...3d0d9888cb7fd7b750713d6e236d1fcb99157228">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=softprops/action-gh-release&package-manager=github_actions&previous-version=3.0.1&new-version=3.0.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-19 17:04:18 -07:00
dependabot[bot] be3a0fd65b build(deps): bump actions/stale from 10.3.0 to 10.4.0 in the minor-deps-updates group (#685)
Bumps the minor-deps-updates group with 1 update:
[actions/stale](https://github.com/actions/stale).

Updates `actions/stale` from 10.3.0 to 10.4.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/stale/releases">actions/stale's
releases</a>.</em></p>
<blockquote>
<h2>v10.4.0</h2>
<h2>What's Changed</h2>
<h3>Bug Fix</h3>
<ul>
<li>Fixed <code>only-issue-types</code> validation by <a
href="https://github.com/trueberryless"><code>@​trueberryless</code></a>
in <a
href="https://redirect.github.com/actions/stale/pull/1338">actions/stale#1338</a></li>
</ul>
<h3>Dependency Updates</h3>
<ul>
<li>Bump undici to 6.27.0 via override, clean up stale license files,
and version to 10.4.0. by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1342">actions/stale#1342</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/trueberryless"><code>@​trueberryless</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/stale/pull/1338">actions/stale#1338</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/stale/compare/v10.3.0...v10.4.0">https://github.com/actions/stale/compare/v10.3.0...v10.4.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/stale/commit/1e223db275d687790206a7acac4d1a11bd6fe629"><code>1e223db</code></a>
Bump undici to 6.27.0 via override, clean up stale license files, and
version...</li>
<li><a
href="https://github.com/actions/stale/commit/9461cb10066d1553762bac6a02599ab8c26b14dd"><code>9461cb1</code></a>
fix: <code>only-issue-types</code> does not affect PRs (<a
href="https://redirect.github.com/actions/stale/issues/1338">#1338</a>)</li>
<li>See full diff in <a
href="https://github.com/actions/stale/compare/eb5cf3af3ac0a1aa4c9c45633dd1ae542a27a899...1e223db275d687790206a7acac4d1a11bd6fe629">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/stale&package-manager=github_actions&previous-version=10.3.0&new-version=10.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-19 17:04:09 -07:00
dependabot[bot] 7a69610a37 build(deps): bump actions/setup-node from 6.4.0 to 7.0.0 in the major-deps-updates group (#686)
Bumps the major-deps-updates group with 1 update:
[actions/setup-node](https://github.com/actions/setup-node).

Updates `actions/setup-node` from 6.4.0 to 7.0.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/setup-node/releases">actions/setup-node's
releases</a>.</em></p>
<blockquote>
<h2>v7.0.0</h2>
<h2>What's Changed</h2>
<h3>Enhancements:</h3>
<ul>
<li>Add cache-primary-key and cache-matched-key as outputs by <a
href="https://github.com/gowridurgad"><code>@​gowridurgad</code></a> in
<a
href="https://redirect.github.com/actions/setup-node/pull/1577">actions/setup-node#1577</a></li>
<li>Migrate to ESM and upgrade dependencies by <a
href="https://github.com/gowridurgad"><code>@​gowridurgad</code></a> in
<a
href="https://redirect.github.com/actions/setup-node/pull/1574">actions/setup-node#1574</a></li>
</ul>
<h3>Bug fixes:</h3>
<ul>
<li>Remove dummy NODE_AUTH_TOKEN export by <a
href="https://github.com/gowridurgad"><code>@​gowridurgad</code></a> in
<a
href="https://redirect.github.com/actions/setup-node/pull/1558">actions/setup-node#1558</a></li>
<li>Only use <code>mirrorToken</code> in <code>getManifest</code> if
it's provided by <a
href="https://github.com/deiga"><code>@​deiga</code></a> in <a
href="https://redirect.github.com/actions/setup-node/pull/1548">actions/setup-node#1548</a></li>
</ul>
<h3>Documentation updates:</h3>
<ul>
<li>Add documentation for publishing to npm with Trusted Publisher
(OIDC) by <a
href="https://github.com/chiranjib-swain"><code>@​chiranjib-swain</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/1536">actions/setup-node#1536</a></li>
<li>docs: Update restore-only cache documentation by <a
href="https://github.com/priya-kinthali"><code>@​priya-kinthali</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/1550">actions/setup-node#1550</a></li>
<li>docs: Update caching recommendations to mitigate cache poisoning
risks by <a
href="https://github.com/chiranjib-swain"><code>@​chiranjib-swain</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/1567">actions/setup-node#1567</a></li>
</ul>
<h3>Dependency update:</h3>
<ul>
<li>Upgrade <code>@​actions/cache</code> to 5.1.0, log cache write
denied by <a
href="https://github.com/jasongin"><code>@​jasongin</code></a> in <a
href="https://redirect.github.com/actions/setup-node/pull/1569">actions/setup-node#1569</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/chiranjib-swain"><code>@​chiranjib-swain</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-node/pull/1536">actions/setup-node#1536</a></li>
<li><a href="https://github.com/deiga"><code>@​deiga</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/setup-node/pull/1548">actions/setup-node#1548</a></li>
<li><a href="https://github.com/jasongin"><code>@​jasongin</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-node/pull/1569">actions/setup-node#1569</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-node/compare/v6...v7.0.0">https://github.com/actions/setup-node/compare/v6...v7.0.0</a></p>
<h2>v6.5.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Update <code>@​actions/cache</code> to 5.1.0 and add security
overrides for undici and fast-xml-parser by <a
href="https://github.com/HarithaVattikuti"><code>@​HarithaVattikuti</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/1579">actions/setup-node#1579</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-node/compare/v6.4.0...v6.5.0">https://github.com/actions/setup-node/compare/v6.4.0...v6.5.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/setup-node/commit/820762786026740c76f36085b0efc47a31fe5020"><code>8207627</code></a>
Migrate to ESM and upgrade dependencies (<a
href="https://redirect.github.com/actions/setup-node/issues/1574">#1574</a>)</li>
<li><a
href="https://github.com/actions/setup-node/commit/04be95cf3511ea51ebf9f224ddfb99cc7ab87cd4"><code>04be95c</code></a>
Add cache-primary-key and cache-matched-key as outputs (<a
href="https://redirect.github.com/actions/setup-node/issues/1577">#1577</a>)</li>
<li><a
href="https://github.com/actions/setup-node/commit/7c2c68d20d402ed6a201ada70a81341941093140"><code>7c2c68d</code></a>
docs: Update caching recommendations to mitigate cache poisoning risks
(<a
href="https://redirect.github.com/actions/setup-node/issues/1567">#1567</a>)</li>
<li><a
href="https://github.com/actions/setup-node/commit/6a61c0375d66246de94630495909f12cf8dac84d"><code>6a61c03</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/setup-node/issues/1569">#1569</a>
from jasongin/update-actions-cache-5.1.0</li>
<li><a
href="https://github.com/actions/setup-node/commit/30eb73b41ded577900c1ebf968ef95cdf8f7434f"><code>30eb73b</code></a>
Resolve high-severity audit issues</li>
<li><a
href="https://github.com/actions/setup-node/commit/4e1a87a501d0302f99e30e2748568adcb388d09f"><code>4e1a87a</code></a>
Update dist</li>
<li><a
href="https://github.com/actions/setup-node/commit/360237f0c01778d0c17291f75c56d6feae4f7574"><code>360237f</code></a>
Strict equality</li>
<li><a
href="https://github.com/actions/setup-node/commit/4f8aac5beb2f0854bc79651567a18c67eb0b9de3"><code>4f8aac5</code></a>
Bump <code>@​actions/cache</code> to 5.1.0, log cache write denied</li>
<li><a
href="https://github.com/actions/setup-node/commit/f4a67bbeca970f103397d3d2b9462cf787cd2980"><code>f4a67bb</code></a>
Only use <code>mirrorToken</code> in <code>getManifest</code> if it's
provided (<a
href="https://redirect.github.com/actions/setup-node/issues/1548">#1548</a>)</li>
<li><a
href="https://github.com/actions/setup-node/commit/0355742c943ddb13ca8a6b700f824231caa91e75"><code>0355742</code></a>
Remove dummy NODE_AUTH_TOKEN export (<a
href="https://redirect.github.com/actions/setup-node/issues/1558">#1558</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/actions/setup-node/compare/48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e...820762786026740c76f36085b0efc47a31fe5020">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/setup-node&package-manager=github_actions&previous-version=6.4.0&new-version=7.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-19 17:04:02 -07:00
dependabot[bot] 1bc2a4d248 build(deps): bump the patch-deps-updates-main group across 1 directory with 15 updates (#692)
Bumps the patch-deps-updates-main group with 15 updates in the /
directory:

| Package | From | To |
| --- | --- | --- |
| [@langchain/core](https://github.com/langchain-ai/langchainjs) |
`1.2.1` | `1.2.3` |
|
[@langchain/langgraph](https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/langgraph-core)
| `1.4.7` | `1.4.8` |
|
[@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node)
| `26.1.0` | `26.1.1` |
|
[@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8)
| `4.1.9` | `4.1.10` |
|
[@vitest/ui](https://github.com/vitest-dev/vitest/tree/HEAD/packages/ui)
| `4.1.9` | `4.1.10` |
| [tsdown](https://github.com/rolldown/tsdown) | `0.22.3` | `0.22.8` |
|
[vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest)
| `4.1.9` | `4.1.10` |
|
[@langchain/langgraph-sdk](https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/sdk)
| `1.9.25` | `1.9.27` |
| [@langchain/openai](https://github.com/langchain-ai/langchainjs) |
`1.5.3` | `1.5.5` |
| [langchain](https://github.com/langchain-ai/langchainjs) | `1.5.2` |
`1.5.3` |
|
[@sveltejs/acorn-typescript](https://github.com/sveltejs/acorn-typescript)
| `1.0.10` | `1.0.11` |
| [p-queue](https://github.com/sindresorhus/p-queue) | `9.3.0` | `9.3.1`
|
| [hono](https://github.com/honojs/hono) | `4.12.27` | `4.12.30` |
| [@hono/node-server](https://github.com/honojs/node-server) | `2.0.6` |
`2.0.10` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) |
`8.1.3` | `8.1.4` |


Updates `@langchain/core` from 1.2.1 to 1.2.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/langchainjs/releases">@​langchain/core's
releases</a>.</em></p>
<blockquote>
<h2><code>@​langchain/core</code><a
href="https://github.com/1"><code>@​1</code></a>.2.3</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p><a
href="https://redirect.github.com/langchain-ai/langchainjs/pull/11200">#11200</a>
<a
href="https://github.com/langchain-ai/langchainjs/commit/08e588865927c3bf0eb2ec418cfb3fba527e14bb"><code>08e5888</code></a>
Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! -
fix(aws): normalize and safely replay Bedrock reasoning blocks</p>
<p>Emit standard reasoning blocks with preserved signatures, omit
incomplete signature-only reasoning during replay, and retain
compatibility with legacy and redacted Bedrock reasoning.</p>
</li>
</ul>
<h2><code>@​langchain/core</code><a
href="https://github.com/1"><code>@​1</code></a>.2.2</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p><a
href="https://redirect.github.com/langchain-ai/langchainjs/pull/11171">#11171</a>
<a
href="https://github.com/langchain-ai/langchainjs/commit/82bef01ad3dd5e0317e48da40707be6bccc52f94"><code>82bef01</code></a>
Thanks <a
href="https://github.com/christian-bromann"><code>@​christian-bromann</code></a>!
- fix(core): coerce string v1 AIMessage content to text blocks</p>
<p>Prevent <code>contentBlocks.push is not a function</code> when
constructing an
<code>AIMessage</code> with <code>response_metadata.output_version ===
&quot;v1&quot;</code> and string
<code>content</code> (common in serialized LangGraph stream
payloads).</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/82a6b8ebf1a876b0ac819f2ee0ae6c6582031cb5"><code>82a6b8e</code></a>
chore: version packages (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11202">#11202</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/08e588865927c3bf0eb2ec418cfb3fba527e14bb"><code>08e5888</code></a>
fix(aws): normalize Bedrock reasoning blocks (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11200">#11200</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/21aaeb0b2ea5f526702bf6b8f7e1f6da34a21d2e"><code>21aaeb0</code></a>
fix: patch 13 high/critical Dependabot alerts (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11199">#11199</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/782c7f2b2b5c67352736686c8d124e5f85e97fd0"><code>782c7f2</code></a>
chore(dev): bump <code>@​types/node</code> from 25.9.1 to 26.1.0 in the
types group across ...</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/f51f338cf4dd3ba188b048b3bfa8134e9b9a64cf"><code>f51f338</code></a>
chore: version packages (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11176">#11176</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/09e7f6d3408323fee5e19fc9af277114b1e8c89d"><code>09e7f6d</code></a>
fix(openai): drop <code>tool_call</code> content blocks from chat
completions input (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11">#11</a>...</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/a9f123a49c1c50fd32d54fe4cb15963d21252d5d"><code>a9f123a</code></a>
fix(openai): filter out content blocks the chat completions api rejects
as in...</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/cc39f564a9df18655ee4ae92de3f32e251021db8"><code>cc39f56</code></a>
chore: version packages (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11172">#11172</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/82bef01ad3dd5e0317e48da40707be6bccc52f94"><code>82bef01</code></a>
fix(core): coerce string v1 AIMessage content to text blocks (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11171">#11171</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/8a7c5f83e570c615c6b34e1234f5972dc7a2169c"><code>8a7c5f8</code></a>
chore: version packages (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11170">#11170</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/langchain-ai/langchainjs/compare/@langchain/core@1.2.1...@langchain/core@1.2.3">compare
view</a></li>
</ul>
</details>
<br />

Updates `@langchain/langgraph` from 1.4.7 to 1.4.8
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/langgraphjs/releases">@​langchain/langgraph's
releases</a>.</em></p>
<blockquote>
<h2><code>@​langchain/langgraph</code><a
href="https://github.com/1"><code>@​1</code></a>.4.8</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p><a
href="https://redirect.github.com/langchain-ai/langgraphjs/pull/2604">#2604</a>
<a
href="https://github.com/langchain-ai/langgraphjs/commit/42ec39460bfe0c3be017fb043c668c3204c8a175"><code>42ec394</code></a>
Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! -
fix(pregel): wait for completed-superstep persistence with sync
durability</p>
</li>
<li>
<p>Updated dependencies [<a
href="https://github.com/langchain-ai/langgraphjs/commit/f326b89365043bfa846e0b428564bcafafab4aaa"><code>f326b89</code></a>,
<a
href="https://github.com/langchain-ai/langgraphjs/commit/c201256b27d55c9aa333d3d15f6ec16c2fd7de9b"><code>c201256</code></a>]:</p>
<ul>
<li><code>@​langchain/langgraph-sdk</code><a
href="https://github.com/1"><code>@​1</code></a>.9.26</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/langgraphjs/blob/main/libs/langgraph-core/CHANGELOG.md">@​langchain/langgraph's
changelog</a>.</em></p>
<blockquote>
<h2>1.4.8</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p><a
href="https://redirect.github.com/langchain-ai/langgraphjs/pull/2604">#2604</a>
<a
href="https://github.com/langchain-ai/langgraphjs/commit/42ec39460bfe0c3be017fb043c668c3204c8a175"><code>42ec394</code></a>
Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! -
fix(pregel): wait for completed-superstep persistence with sync
durability</p>
</li>
<li>
<p>Updated dependencies [<a
href="https://github.com/langchain-ai/langgraphjs/commit/f326b89365043bfa846e0b428564bcafafab4aaa"><code>f326b89</code></a>,
<a
href="https://github.com/langchain-ai/langgraphjs/commit/c201256b27d55c9aa333d3d15f6ec16c2fd7de9b"><code>c201256</code></a>]:</p>
<ul>
<li><code>@​langchain/langgraph-sdk</code><a
href="https://github.com/1"><code>@​1</code></a>.9.26</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/langchain-ai/langgraphjs/commit/3dccad1391e173eead64f9e2d6dd977fdc345f7d"><code>3dccad1</code></a>
chore: version packages (<a
href="https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/langgraph-core/issues/2603">#2603</a>)</li>
<li><a
href="https://github.com/langchain-ai/langgraphjs/commit/42ec39460bfe0c3be017fb043c668c3204c8a175"><code>42ec394</code></a>
fix(core): enforce sync durability barriers (<a
href="https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/langgraph-core/issues/2604">#2604</a>)</li>
<li><a
href="https://github.com/langchain-ai/langgraphjs/commit/644892c7db89d1c58e4928c156af3b662b85e443"><code>644892c</code></a>
docs(langgraph): fix README logo paths (<a
href="https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/langgraph-core/issues/2599">#2599</a>)</li>
<li><a
href="https://github.com/langchain-ai/langgraphjs/commit/8fb6376a75c4e868fd688578e17780148132716b"><code>8fb6376</code></a>
chore: update Vitest to 4.1.9 (<a
href="https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/langgraph-core/issues/2587">#2587</a>)</li>
<li><a
href="https://github.com/langchain-ai/langgraphjs/commit/81f63653d388514ea71c3a6978718a8ae31278db"><code>81f6365</code></a>
chore(deps): bump the langchain group with 8 updates (<a
href="https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/langgraph-core/issues/2578">#2578</a>)</li>
<li>See full diff in <a
href="https://github.com/langchain-ai/langgraphjs/commits/@langchain/langgraph@1.4.8/libs/langgraph-core">compare
view</a></li>
</ul>
</details>
<br />

Updates `@types/node` from 26.1.0 to 26.1.1
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node">compare
view</a></li>
</ul>
</details>
<br />

Updates `@vitest/coverage-v8` from 4.1.9 to 4.1.10
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitest-dev/vitest/releases">@​vitest/coverage-v8's
releases</a>.</em></p>
<blockquote>
<h2>v4.1.10</h2>
<h3>   🐞 Bug Fixes</h3>
<ul>
<li><strong>browser</strong>: Check fs access in builtin commands
[backport to v4]  -  by <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a>,
<strong>Hiroshi Ogawa</strong> and <strong>OpenCode
(claude-opus-4-8)</strong> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10680">vitest-dev/vitest#10680</a>
<a href="https://github.com/vitest-dev/vitest/commit/5c18dd267"><!-- raw
HTML omitted -->(5c18d)<!-- raw HTML omitted --></a></li>
<li><strong>vm</strong>: Fix external module resolve error with deps
optimizer query for encoded URI [backport to v4]  -  by <a
href="https://github.com/SveLil"><code>@​SveLil</code></a> and <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10661">vitest-dev/vitest#10661</a>
<a href="https://github.com/vitest-dev/vitest/commit/bae52b511"><!-- raw
HTML omitted -->(bae52)<!-- raw HTML omitted --></a></li>
</ul>
<h5>    <a
href="https://github.com/vitest-dev/vitest/compare/v4.1.9...v4.1.10">View
changes on GitHub</a></h5>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitest-dev/vitest/commit/db616d227b6e0cb07a94f5d1bba262ee95db7e46"><code>db616d2</code></a>
chore: release v4.1.10 (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8/issues/10718">#10718</a>)</li>
<li>See full diff in <a
href="https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/coverage-v8">compare
view</a></li>
</ul>
</details>
<br />

Updates `@vitest/ui` from 4.1.9 to 4.1.10
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitest-dev/vitest/releases">@​vitest/ui's
releases</a>.</em></p>
<blockquote>
<h2>v4.1.10</h2>
<h3>   🐞 Bug Fixes</h3>
<ul>
<li><strong>browser</strong>: Check fs access in builtin commands
[backport to v4]  -  by <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a>,
<strong>Hiroshi Ogawa</strong> and <strong>OpenCode
(claude-opus-4-8)</strong> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10680">vitest-dev/vitest#10680</a>
<a href="https://github.com/vitest-dev/vitest/commit/5c18dd267"><!-- raw
HTML omitted -->(5c18d)<!-- raw HTML omitted --></a></li>
<li><strong>vm</strong>: Fix external module resolve error with deps
optimizer query for encoded URI [backport to v4]  -  by <a
href="https://github.com/SveLil"><code>@​SveLil</code></a> and <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10661">vitest-dev/vitest#10661</a>
<a href="https://github.com/vitest-dev/vitest/commit/bae52b511"><!-- raw
HTML omitted -->(bae52)<!-- raw HTML omitted --></a></li>
</ul>
<h5>    <a
href="https://github.com/vitest-dev/vitest/compare/v4.1.9...v4.1.10">View
changes on GitHub</a></h5>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitest-dev/vitest/commit/db616d227b6e0cb07a94f5d1bba262ee95db7e46"><code>db616d2</code></a>
chore: release v4.1.10 (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/ui/issues/10718">#10718</a>)</li>
<li>See full diff in <a
href="https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/ui">compare
view</a></li>
</ul>
</details>
<br />

Updates `tsdown` from 0.22.3 to 0.22.8
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/rolldown/tsdown/releases">tsdown's
releases</a>.</em></p>
<blockquote>
<h2>v0.22.8</h2>
<h3>   🚀 Features</h3>
<ul>
<li><strong>deps</strong>: Add <code>onlyImport</code> option  -  by <a
href="https://github.com/sxzz"><code>@​sxzz</code></a> and
<strong>Claude Fable 5</strong> <a
href="https://github.com/rolldown/tsdown/commit/c579828"><!-- raw HTML
omitted -->(c5798)<!-- raw HTML omitted --></a></li>
</ul>
<h3>   🐞 Bug Fixes</h3>
<ul>
<li><strong>config</strong>: Concat plugins arrays when merging config
 -  by <a href="https://github.com/sxzz"><code>@​sxzz</code></a> <a
href="https://github.com/rolldown/tsdown/commit/b1c8014"><!-- raw HTML
omitted -->(b1c80)<!-- raw HTML omitted --></a></li>
</ul>
<h5>    <a
href="https://github.com/rolldown/tsdown/compare/v0.22.7...v0.22.8">View
changes on GitHub</a></h5>
<h2>v0.22.7</h2>
<h3>   🚀 Features</h3>
<ul>
<li><strong>logger</strong>: Add <code>suppressWarnings</code> option to
filter warnings  -  by <a
href="https://github.com/sxzz"><code>@​sxzz</code></a> <a
href="https://github.com/rolldown/tsdown/commit/dc51011"><!-- raw HTML
omitted -->(dc510)<!-- raw HTML omitted --></a></li>
</ul>
<h5>    <a
href="https://github.com/rolldown/tsdown/compare/v0.22.6...v0.22.7">View
changes on GitHub</a></h5>
<h2>v0.22.6</h2>
<p><em>No significant changes</em></p>
<h5>    <a
href="https://github.com/rolldown/tsdown/compare/v0.22.5...v0.22.6">View
changes on GitHub</a></h5>
<h2>v0.22.5</h2>
<h3>   🚀 Features</h3>
<ul>
<li>Support TS 7  -  by <a
href="https://github.com/sxzz"><code>@​sxzz</code></a> <a
href="https://github.com/rolldown/tsdown/commit/b21f198"><!-- raw HTML
omitted -->(b21f1)<!-- raw HTML omitted --></a></li>
</ul>
<h3>   🐞 Bug Fixes</h3>
<ul>
<li>Evaluate banner/footer function addon per chunk  -  by <a
href="https://github.com/spokodev"><code>@​spokodev</code></a> in <a
href="https://redirect.github.com/rolldown/tsdown/issues/1011">rolldown/tsdown#1011</a>
<a href="https://github.com/rolldown/tsdown/commit/517c5f3"><!-- raw
HTML omitted -->(517c5)<!-- raw HTML omitted --></a></li>
<li><strong>shims</strong>: Don't emit esm shim banner in cjs output for
unbundle  -  by <a
href="https://github.com/materwelonDhruv"><code>@​materwelonDhruv</code></a>
in <a
href="https://redirect.github.com/rolldown/tsdown/issues/991">rolldown/tsdown#991</a>
<a href="https://github.com/rolldown/tsdown/commit/4bb30f3"><!-- raw
HTML omitted -->(4bb30)<!-- raw HTML omitted --></a></li>
</ul>
<h5>    <a
href="https://github.com/rolldown/tsdown/compare/v0.22.4...v0.22.5">View
changes on GitHub</a></h5>
<h2>v0.22.4</h2>
<h3>   🚀 Features</h3>
<ul>
<li>Export tsdown version  -  by <a
href="https://github.com/userquin"><code>@​userquin</code></a> in <a
href="https://redirect.github.com/rolldown/tsdown/issues/976">rolldown/tsdown#976</a>
<a href="https://github.com/rolldown/tsdown/commit/a09384c"><!-- raw
HTML omitted -->(a0938)<!-- raw HTML omitted --></a></li>
</ul>
<h3>   🐞 Bug Fixes</h3>
<ul>
<li>Respect failOnWarn regardless of logger level  -  by <a
href="https://github.com/spokodev"><code>@​spokodev</code></a> and <a
href="https://github.com/sxzz"><code>@​sxzz</code></a> in <a
href="https://redirect.github.com/rolldown/tsdown/issues/960">rolldown/tsdown#960</a>
<a href="https://github.com/rolldown/tsdown/commit/f635a43"><!-- raw
HTML omitted -->(f635a)<!-- raw HTML omitted --></a></li>
<li><strong>create-tsdown</strong>: Skip cd hint for current directory
 -  by <a
href="https://github.com/jong-kyung"><code>@​jong-kyung</code></a> in <a
href="https://redirect.github.com/rolldown/tsdown/issues/1002">rolldown/tsdown#1002</a>
<a href="https://github.com/rolldown/tsdown/commit/66983f4"><!-- raw
HTML omitted -->(66983)<!-- raw HTML omitted --></a></li>
<li><strong>css</strong>: Generate source maps to avoid
<code>SOURCEMAP_BROKEN</code> warning  -  by <a
href="https://github.com/ocavue"><code>@​ocavue</code></a> in <a
href="https://redirect.github.com/rolldown/tsdown/issues/982">rolldown/tsdown#982</a>
<a href="https://github.com/rolldown/tsdown/commit/84b7c34"><!-- raw
HTML omitted -->(84b7c)<!-- raw HTML omitted --></a></li>
<li><strong>pkg</strong>: Await readFile before removing temp pack
directory  -  by <a
href="https://github.com/azais-corentin"><code>@​azais-corentin</code></a>
in <a
href="https://redirect.github.com/rolldown/tsdown/issues/999">rolldown/tsdown#999</a>
<a href="https://github.com/rolldown/tsdown/commit/c0a486f"><!-- raw
HTML omitted -->(c0a48)<!-- raw HTML omitted --></a></li>
</ul>
<h3>   🏎 Performance</h3>
<ul>
<li>Reduce install size  -  by <a
href="https://github.com/sxzz"><code>@​sxzz</code></a> <a
href="https://github.com/rolldown/tsdown/commit/10e6fe1"><!-- raw HTML
omitted -->(10e6f)<!-- raw HTML omitted --></a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/rolldown/tsdown/commit/8d80e30f73c69f1e76b6a8861967061a7940352a"><code>8d80e30</code></a>
chore: release v0.22.8</li>
<li><a
href="https://github.com/rolldown/tsdown/commit/cf6e59883637662b4c94b34174d86f1e0ecbf297"><code>cf6e598</code></a>
chore: upgrade deps</li>
<li><a
href="https://github.com/rolldown/tsdown/commit/c5798288223ca4d9184014f3409cb7a3a071dedd"><code>c579828</code></a>
feat(deps): add <code>onlyImport</code> option</li>
<li><a
href="https://github.com/rolldown/tsdown/commit/b1c8014ec37e74f5f8c5daa961781c875ecfc719"><code>b1c8014</code></a>
fix(config): concat plugins arrays when merging config</li>
<li><a
href="https://github.com/rolldown/tsdown/commit/8700f10332f6e204a1153a88b6a9a70d8393bd7c"><code>8700f10</code></a>
chore(deps): update pnpm to v11.12.0 (<a
href="https://redirect.github.com/rolldown/tsdown/issues/997">#997</a>)</li>
<li><a
href="https://github.com/rolldown/tsdown/commit/7859ee24332d080289b13d6841c5645f3c45963e"><code>7859ee2</code></a>
docs: update Rolldown links to correct URL structure (<a
href="https://redirect.github.com/rolldown/tsdown/issues/1017">#1017</a>)</li>
<li><a
href="https://github.com/rolldown/tsdown/commit/b4046e61ebdca889e80b7b61aac19af1921fd30c"><code>b4046e6</code></a>
chore: release v0.22.7</li>
<li><a
href="https://github.com/rolldown/tsdown/commit/dc5101166d0fa935a8eae9c17b7c298cc47cc3c4"><code>dc51011</code></a>
feat(logger): add <code>suppressWarnings</code> option to filter
warnings</li>
<li><a
href="https://github.com/rolldown/tsdown/commit/da57b0a52dc186210fb343d0dcf6449016411aff"><code>da57b0a</code></a>
docs: fix build</li>
<li><a
href="https://github.com/rolldown/tsdown/commit/08b13409b1e8e3024ca2120933ab76d016c8f805"><code>08b1340</code></a>
chore: release v0.22.6</li>
<li>Additional commits viewable in <a
href="https://github.com/rolldown/tsdown/compare/v0.22.3...v0.22.8">compare
view</a></li>
</ul>
</details>
<br />

Updates `vitest` from 4.1.9 to 4.1.10
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitest-dev/vitest/releases">vitest's
releases</a>.</em></p>
<blockquote>
<h2>v4.1.10</h2>
<h3>   🐞 Bug Fixes</h3>
<ul>
<li><strong>browser</strong>: Check fs access in builtin commands
[backport to v4]  -  by <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a>,
<strong>Hiroshi Ogawa</strong> and <strong>OpenCode
(claude-opus-4-8)</strong> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10680">vitest-dev/vitest#10680</a>
<a href="https://github.com/vitest-dev/vitest/commit/5c18dd267"><!-- raw
HTML omitted -->(5c18d)<!-- raw HTML omitted --></a></li>
<li><strong>vm</strong>: Fix external module resolve error with deps
optimizer query for encoded URI [backport to v4]  -  by <a
href="https://github.com/SveLil"><code>@​SveLil</code></a> and <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10661">vitest-dev/vitest#10661</a>
<a href="https://github.com/vitest-dev/vitest/commit/bae52b511"><!-- raw
HTML omitted -->(bae52)<!-- raw HTML omitted --></a></li>
</ul>
<h5>    <a
href="https://github.com/vitest-dev/vitest/compare/v4.1.9...v4.1.10">View
changes on GitHub</a></h5>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitest-dev/vitest/commit/db616d227b6e0cb07a94f5d1bba262ee95db7e46"><code>db616d2</code></a>
chore: release v4.1.10 (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/10718">#10718</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/bae52b5112a6fd8200101b88bf8af9685d077295"><code>bae52b5</code></a>
fix(vm): fix external module resolve error with deps optimizer query for
enco...</li>
<li>See full diff in <a
href="https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/vitest">compare
view</a></li>
</ul>
</details>
<br />

Updates `@langchain/langgraph-sdk` from 1.9.25 to 1.9.27
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/langgraphjs/releases">@​langchain/langgraph-sdk's
releases</a>.</em></p>
<blockquote>
<h2><code>@​langchain/langgraph-sdk</code><a
href="https://github.com/1"><code>@​1</code></a>.9.27</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p><a
href="https://redirect.github.com/langchain-ai/langgraphjs/pull/2606">#2606</a>
<a
href="https://github.com/langchain-ai/langgraphjs/commit/fa4658c79489eb5fb3e38744c34a6f5bf2373831"><code>fa4658c</code></a>
Thanks <a
href="https://github.com/christian-bromann"><code>@​christian-bromann</code></a>!
- fix(sdk): omit carried <code>since</code> on SSE reconnect</p>
<p>Protocol <code>seq</code> is connection-scoped: a new <code>POST
/stream/events</code> re-numbers Redis replay from 1, so advancing
<code>since</code> from observed seqs and sending it after a successful
open filtered out the full history (heartbeats only). An explicit caller
<code>since</code> is still sent until the stream connects (including
pre-ready retries); post-connect reconnects omit <code>since</code> and
rely on durable <code>event_id</code> dedup.</p>
</li>
</ul>
<h2><code>@​langchain/langgraph-sdk</code><a
href="https://github.com/1"><code>@​1</code></a>.9.26</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p><a
href="https://redirect.github.com/langchain-ai/langgraphjs/pull/2605">#2605</a>
<a
href="https://github.com/langchain-ai/langgraphjs/commit/f326b89365043bfa846e0b428564bcafafab4aaa"><code>f326b89</code></a>
Thanks <a
href="https://github.com/christian-bromann"><code>@​christian-bromann</code></a>!
- fix(sdk): keep SSE reconnect enabled with custom fetch</p>
<p>Auth/proxy fetch shims previously forced <code>maxReconnectAttempts:
0</code>, so HITL waits that lost <code>/stream/events</code> (e.g.
<code>ERR_QUIC_PROTOCOL_ERROR</code>) never recovered and left
<code>respond()</code>/<code>submit()</code> spinning. Fail-fast test
mocks should pass <code>maxReconnectAttempts: 0</code> explicitly. Also
plumbs reconnect options through framework <code>useStream</code>
bindings.</p>
</li>
<li>
<p><a
href="https://redirect.github.com/langchain-ai/langgraphjs/pull/2602">#2602</a>
<a
href="https://github.com/langchain-ai/langgraphjs/commit/c201256b27d55c9aa333d3d15f6ec16c2fd7de9b"><code>c201256</code></a>
Thanks <a
href="https://github.com/HugoDurand"><code>@​HugoDurand</code></a>! -
fix(sdk): support clearing a cron's end time via
<code>crons.update(cronId, { endTime: null })</code></p>
<p><code>CronsClient.update</code> now accepts <code>endTime:
null</code> to clear a previously set cron end time; omitting
<code>endTime</code> still leaves it unchanged. The field was typed
<code>string</code>, so callers could not express &quot;clear&quot; even
though the request already forwards an explicit <code>null</code>.</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/langgraphjs/blob/main/libs/sdk/CHANGELOG.md">@​langchain/langgraph-sdk's
changelog</a>.</em></p>
<blockquote>
<h2>1.9.27</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p><a
href="https://redirect.github.com/langchain-ai/langgraphjs/pull/2606">#2606</a>
<a
href="https://github.com/langchain-ai/langgraphjs/commit/fa4658c79489eb5fb3e38744c34a6f5bf2373831"><code>fa4658c</code></a>
Thanks <a
href="https://github.com/christian-bromann"><code>@​christian-bromann</code></a>!
- fix(sdk): omit carried <code>since</code> on SSE reconnect</p>
<p>Protocol <code>seq</code> is connection-scoped: a new <code>POST
/stream/events</code> re-numbers Redis replay from 1, so advancing
<code>since</code> from observed seqs and sending it after a successful
open filtered out the full history (heartbeats only). An explicit caller
<code>since</code> is still sent until the stream connects (including
pre-ready retries); post-connect reconnects omit <code>since</code> and
rely on durable <code>event_id</code> dedup.</p>
</li>
</ul>
<h2>1.9.26</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p><a
href="https://redirect.github.com/langchain-ai/langgraphjs/pull/2605">#2605</a>
<a
href="https://github.com/langchain-ai/langgraphjs/commit/f326b89365043bfa846e0b428564bcafafab4aaa"><code>f326b89</code></a>
Thanks <a
href="https://github.com/christian-bromann"><code>@​christian-bromann</code></a>!
- fix(sdk): keep SSE reconnect enabled with custom fetch</p>
<p>Auth/proxy fetch shims previously forced <code>maxReconnectAttempts:
0</code>, so HITL waits that lost <code>/stream/events</code> (e.g.
<code>ERR_QUIC_PROTOCOL_ERROR</code>) never recovered and left
<code>respond()</code>/<code>submit()</code> spinning. Fail-fast test
mocks should pass <code>maxReconnectAttempts: 0</code> explicitly. Also
plumbs reconnect options through framework <code>useStream</code>
bindings.</p>
</li>
<li>
<p><a
href="https://redirect.github.com/langchain-ai/langgraphjs/pull/2602">#2602</a>
<a
href="https://github.com/langchain-ai/langgraphjs/commit/c201256b27d55c9aa333d3d15f6ec16c2fd7de9b"><code>c201256</code></a>
Thanks <a
href="https://github.com/HugoDurand"><code>@​HugoDurand</code></a>! -
fix(sdk): support clearing a cron's end time via
<code>crons.update(cronId, { endTime: null })</code></p>
<p><code>CronsClient.update</code> now accepts <code>endTime:
null</code> to clear a previously set cron end time; omitting
<code>endTime</code> still leaves it unchanged. The field was typed
<code>string</code>, so callers could not express &quot;clear&quot; even
though the request already forwards an explicit <code>null</code>.</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/langchain-ai/langgraphjs/commit/afb42cd7fe7a461c9d19be8f81603865fc26b66f"><code>afb42cd</code></a>
chore: version packages (<a
href="https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/sdk/issues/2607">#2607</a>)</li>
<li><a
href="https://github.com/langchain-ai/langgraphjs/commit/fa4658c79489eb5fb3e38744c34a6f5bf2373831"><code>fa4658c</code></a>
fix(sdk): omit since on SSE reconnect (<a
href="https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/sdk/issues/2606">#2606</a>)</li>
<li><a
href="https://github.com/langchain-ai/langgraphjs/commit/3dccad1391e173eead64f9e2d6dd977fdc345f7d"><code>3dccad1</code></a>
chore: version packages (<a
href="https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/sdk/issues/2603">#2603</a>)</li>
<li><a
href="https://github.com/langchain-ai/langgraphjs/commit/f326b89365043bfa846e0b428564bcafafab4aaa"><code>f326b89</code></a>
fix(sdk): keep SSE reconnect enabled with custom fetch (<a
href="https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/sdk/issues/2605">#2605</a>)</li>
<li><a
href="https://github.com/langchain-ai/langgraphjs/commit/c201256b27d55c9aa333d3d15f6ec16c2fd7de9b"><code>c201256</code></a>
fix(sdk): support clearing cron end_time via update({ endTime: null })
(<a
href="https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/sdk/issues/2602">#2602</a>)</li>
<li><a
href="https://github.com/langchain-ai/langgraphjs/commit/8fb6376a75c4e868fd688578e17780148132716b"><code>8fb6376</code></a>
chore: update Vitest to 4.1.9 (<a
href="https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/sdk/issues/2587">#2587</a>)</li>
<li><a
href="https://github.com/langchain-ai/langgraphjs/commit/8f3f4596f1803148b6e1cb4823bb0760ef42704c"><code>8f3f459</code></a>
chore(deps): bump the vue group across 1 directory with 2 updates (<a
href="https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/sdk/issues/2581">#2581</a>)</li>
<li><a
href="https://github.com/langchain-ai/langgraphjs/commit/3c8318dcc24c2818db6c6d445ccd64e590cd0186"><code>3c8318d</code></a>
chore(deps-dev): bump the svelte group with 2 updates (<a
href="https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/sdk/issues/2580">#2580</a>)</li>
<li><a
href="https://github.com/langchain-ai/langgraphjs/commit/1cb398587893ba2e7614d80f60fe87cd2736c882"><code>1cb3985</code></a>
chore(deps-dev): bump the react group with 2 updates (<a
href="https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/sdk/issues/2582">#2582</a>)</li>
<li><a
href="https://github.com/langchain-ai/langgraphjs/commit/81f63653d388514ea71c3a6978718a8ae31278db"><code>81f6365</code></a>
chore(deps): bump the langchain group with 8 updates (<a
href="https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/sdk/issues/2578">#2578</a>)</li>
<li>See full diff in <a
href="https://github.com/langchain-ai/langgraphjs/commits/@langchain/langgraph-sdk@1.9.27/libs/sdk">compare
view</a></li>
</ul>
</details>
<br />

Updates `@langchain/openai` from 1.5.3 to 1.5.5
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/langchainjs/releases">@​langchain/openai's
releases</a>.</em></p>
<blockquote>
<h2><code>@​langchain/openai</code><a
href="https://github.com/1"><code>@​1</code></a>.5.5</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p><a
href="https://redirect.github.com/langchain-ai/langchainjs/pull/11175">#11175</a>
<a
href="https://github.com/langchain-ai/langchainjs/commit/a9f123a49c1c50fd32d54fe4cb15963d21252d5d"><code>a9f123a</code></a>
Thanks <a
href="https://github.com/colifran"><code>@​colifran</code></a>! -
fix(openai): filter out content blocks the chat completions api rejects
as input</p>
</li>
<li>
<p><a
href="https://redirect.github.com/langchain-ai/langchainjs/pull/11177">#11177</a>
<a
href="https://github.com/langchain-ai/langchainjs/commit/09e7f6d3408323fee5e19fc9af277114b1e8c89d"><code>09e7f6d</code></a>
Thanks <a
href="https://github.com/colifran"><code>@​colifran</code></a>! -
fix(openai): drop tool_call content blocks from chat completions
input</p>
</li>
</ul>
<h2><code>@​langchain/openai</code><a
href="https://github.com/1"><code>@​1</code></a>.5.4</h2>
<h3>Patch Changes</h3>
<ul>
<li><a
href="https://redirect.github.com/langchain-ai/langchainjs/pull/11169">#11169</a>
<a
href="https://github.com/langchain-ai/langchainjs/commit/988ca7dc9f1debd48278c6e888553e11c7845ca3"><code>988ca7d</code></a>
Thanks <a
href="https://github.com/colifran"><code>@​colifran</code></a>! -
fix(openai): emit output_text for assistant content in responses
input</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/f51f338cf4dd3ba188b048b3bfa8134e9b9a64cf"><code>f51f338</code></a>
chore: version packages (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11176">#11176</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/09e7f6d3408323fee5e19fc9af277114b1e8c89d"><code>09e7f6d</code></a>
fix(openai): drop <code>tool_call</code> content blocks from chat
completions input (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11">#11</a>...</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/a9f123a49c1c50fd32d54fe4cb15963d21252d5d"><code>a9f123a</code></a>
fix(openai): filter out content blocks the chat completions api rejects
as in...</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/cc39f564a9df18655ee4ae92de3f32e251021db8"><code>cc39f56</code></a>
chore: version packages (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11172">#11172</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/82bef01ad3dd5e0317e48da40707be6bccc52f94"><code>82bef01</code></a>
fix(core): coerce string v1 AIMessage content to text blocks (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11171">#11171</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/8a7c5f83e570c615c6b34e1234f5972dc7a2169c"><code>8a7c5f8</code></a>
chore: version packages (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11170">#11170</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/988ca7dc9f1debd48278c6e888553e11c7845ca3"><code>988ca7d</code></a>
fix(openai): emit <code>output_text</code> for assistant content in
responses input (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11">#11</a>...</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/e233f4192475cfb97dbd8907b2fb69b812b6950a"><code>e233f41</code></a>
chore: version packages (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11168">#11168</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/4c7a06ec3e4728bb036a28f678dd8ec2521e1c82"><code>4c7a06e</code></a>
fix(langchain): malformed tool input schemas are unrecoverable (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11167">#11167</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/1a1fe3ca9cd779abda3baf23529434dca601f00b"><code>1a1fe3c</code></a>
chore(deps): bump the aws group across 1 directory with 7 updates (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11134">#11134</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/langchain-ai/langchainjs/compare/@langchain/openai@1.5.3...@langchain/openai@1.5.5">compare
view</a></li>
</ul>
</details>
<br />

Updates `langchain` from 1.5.2 to 1.5.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/langchainjs/releases">langchain's
releases</a>.</em></p>
<blockquote>
<h2>langchain@1.5.3</h2>
<h3>Patch Changes</h3>
<ul>
<li><a
href="https://redirect.github.com/langchain-ai/langchainjs/pull/11167">#11167</a>
<a
href="https://github.com/langchain-ai/langchainjs/commit/4c7a06ec3e4728bb036a28f678dd8ec2521e1c82"><code>4c7a06e</code></a>
Thanks <a
href="https://github.com/colifran"><code>@​colifran</code></a>! -
fix(langchain): malformed tool input schemas are unrecoverable</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/e233f4192475cfb97dbd8907b2fb69b812b6950a"><code>e233f41</code></a>
chore: version packages (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11168">#11168</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/4c7a06ec3e4728bb036a28f678dd8ec2521e1c82"><code>4c7a06e</code></a>
fix(langchain): malformed tool input schemas are unrecoverable (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11167">#11167</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/1a1fe3ca9cd779abda3baf23529434dca601f00b"><code>1a1fe3c</code></a>
chore(deps): bump the aws group across 1 directory with 7 updates (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11134">#11134</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/553155b5807becca67dcca790b8e42b4e7950b50"><code>553155b</code></a>
chore(deps): bump js-yaml from 5.0.0 to 5.1.0 (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11142">#11142</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/24bde73901daa41b626eac843453a7a951ff98c3"><code>24bde73</code></a>
chore(deps): bump prettier from 3.8.3 to 3.9.4 in the typescript-eslint
group...</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/8db72635b93f2f9c8dd79472414741a624c375a9"><code>8db7263</code></a>
fix: remove duplicate pnpm lockfile entries (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11141">#11141</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/99449de42a492ac5302f61f294f11836779e7b16"><code>99449de</code></a>
chore(deps): bump the langchain group with 5 updates (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11131">#11131</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/39c17d7388e76cea7f4eb59c3833b2d62df297cb"><code>39c17d7</code></a>
chore(deps): bump google-auth-library from 10.6.2 to 10.9.0 in the
google gro...</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/32613bee109a3e72423fbe4a3fa774ec12f20e63"><code>32613be</code></a>
chore(deps): bump the build-and-test group with 2 updates (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11133">#11133</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/2ecacad5912bb8f9289a01828c0583f2a17e7b79"><code>2ecacad</code></a>
chore(deps): bump the gh-actions-minor-and-patch group with 2 updates
(<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11129">#11129</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/langchain-ai/langchainjs/compare/langchain@1.5.2...langchain@1.5.3">compare
view</a></li>
</ul>
</details>
<br />

Updates `@sveltejs/acorn-typescript` from 1.0.10 to 1.0.11
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sveltejs/acorn-typescript/releases">@​sveltejs/acorn-typescript's
releases</a>.</em></p>
<blockquote>
<h2><code>@​sveltejs/acorn-typescript</code><a
href="https://github.com/1"><code>@​1</code></a>.0.11</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p>fix: const initializer in ambient context (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/52">#52</a>)</p>
</li>
<li>
<p>fix: avoid emitting duplicate comments (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/50">#50</a>)</p>
</li>
<li>
<p>fix: allow <code>in</code> operator inside parenthesized expressions
in a <code>for</code> loop initializer (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/53">#53</a>)</p>
</li>
<li>
<p>Fix dts ambient declaration export validation. (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/54">#54</a>)</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/sveltejs/acorn-typescript/blob/main/CHANGELOG.md">@​sveltejs/acorn-typescript's
changelog</a>.</em></p>
<blockquote>
<h2>1.0.11</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p>fix: const initializer in ambient context (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/52">#52</a>)</p>
</li>
<li>
<p>fix: avoid emitting duplicate comments (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/50">#50</a>)</p>
</li>
<li>
<p>fix: allow <code>in</code> operator inside parenthesized expressions
in a <code>for</code> loop initializer (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/53">#53</a>)</p>
</li>
<li>
<p>Fix dts ambient declaration export validation. (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/54">#54</a>)</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/sveltejs/acorn-typescript/commit/312d079f95462124ce126cf491dcf48cfbbc3b82"><code>312d079</code></a>
Version Packages (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/issues/55">#55</a>)</li>
<li><a
href="https://github.com/sveltejs/acorn-typescript/commit/356c8a3b3416b30d5483aafc32d569fd36c15eff"><code>356c8a3</code></a>
fix: ambient declaration exports (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/issues/54">#54</a>)</li>
<li><a
href="https://github.com/sveltejs/acorn-typescript/commit/aa129d91538ac5aa6fd8541986f494af56049828"><code>aa129d9</code></a>
fix: allow operator inside parenthesized for-loop initializers (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/issues/53">#53</a>)</li>
<li><a
href="https://github.com/sveltejs/acorn-typescript/commit/875412f1cd781e62f7580d71dcf9870f36381bf6"><code>875412f</code></a>
fix: const initializer in ambient context (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/issues/52">#52</a>)</li>
<li><a
href="https://github.com/sveltejs/acorn-typescript/commit/ba47c7a630eb58f4ede7f1f4cd7be3720f565734"><code>ba47c7a</code></a>
fix: avoid emitting duplicate comments (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/issues/50">#50</a>)</li>
<li><a
href="https://github.com/sveltejs/acorn-typescript/commit/13c49a741738868b94bdc9ac5975d149d0780d42"><code>13c49a7</code></a>
ci: set explicit read permissions on ci workflow (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/issues/44">#44</a>)</li>
<li>See full diff in <a
href="https://github.com/sveltejs/acorn-typescript/compare/@sveltejs/acorn-typescript@1.0.10...@sveltejs/acorn-typescript@1.0.11">compare
view</a></li>
</ul>
</details>
<br />

Updates `p-queue` from 9.3.0 to 9.3.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sindresorhus/p-queue/releases">p-queue's
releases</a>.</em></p>
<blockquote>
<h2>v9.3.1</h2>
<ul>
<li>Fix <code>onSizeLessThan()</code> resolving late when the queue
drains without a completion d9cf2be</li>
</ul>
<hr />
<p><a
href="https://github.com/sindresorhus/p-queue/compare/v9.3.0...v9.3.1">https://github.com/sindresorhus/p-queue/compare/v9.3.0...v9.3.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/sindresorhus/p-queue/commit/a06fbc928725f074c72716e1ba21106df6822dae"><code>a06fbc9</code></a>
9.3.1</li>
<li><a
href="https://github.com/sindresorhus/p-queue/commit/d9cf2be011f3b7f127cac476de2d9927ed723491"><code>d9cf2be</code></a>
Fix <code>onSizeLessThan()</code> resolving late when the queue drains
without a completion</li>
<li>See full diff in <a
href="https://github.com/sindresorhus/p-queue/compare/v9.3.0...v9.3.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `hono` from 4.12.27 to 4.12.30
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/honojs/hono/releases">hono's
releases</a>.</em></p>
<blockquote>
<h2>v4.12.30</h2>
<h2>What's Changed</h2>
<ul>
<li>chore(benchmark/routers): bump deps in <a
href="https://redirect.github.com/honojs/hono/pull/5107">honojs/hono#5107</a></li>
<li>chore(benchmark): remove not used benchmarks in <a
href="https://redirect.github.com/honojs/hono/pull/5108">honojs/hono#5108</a></li>
<li>chore: update to ts6 in prep for ts7 in <a
href="https://redirect.github.com/honojs/hono/pull/5104">honojs/hono#5104</a></li>
<li>fix(cache): deduplicate Cache-Control directives case-insensitively
in <a
href="https://redirect.github.com/honojs/hono/pull/5025">honojs/hono#5025</a></li>
<li>fix(compress): do not compress 206 Partial Content responses in <a
href="https://redirect.github.com/honojs/hono/pull/5020">honojs/hono#5020</a></li>
<li>fix(client): replaceUrlParam should not match a param that prefixes
another in <a
href="https://redirect.github.com/honojs/hono/pull/5096">honojs/hono#5096</a></li>
<li>fix(method-override): set duplex when forwarding a stream body in
query mode in <a
href="https://redirect.github.com/honojs/hono/pull/5110">honojs/hono#5110</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/honojs/hono/compare/v4.12.29...v4.12.30">https://github.com/honojs/hono/compare/v4.12.29...v4.12.30</a></p>
<h2>v4.12.29</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(client): merge function headers with per-request headers by <a
href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a
href="https://redirect.github.com/honojs/hono/pull/5092">honojs/hono#5092</a></li>
<li>chore: fix no-op tsc in test script by <a
href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a
href="https://redirect.github.com/honojs/hono/pull/5093">honojs/hono#5093</a></li>
<li>fix(lambda-edge): resolve the handler with the value passed to the
callback by <a
href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a
href="https://redirect.github.com/honojs/hono/pull/5094">honojs/hono#5094</a></li>
<li>docs(language): add JSDoc <a
href="https://github.com/example"><code>@​example</code></a> to
languageDetector by <a
href="https://github.com/codebybilal18"><code>@​codebybilal18</code></a>
in <a
href="https://redirect.github.com/honojs/hono/pull/5081">honojs/hono#5081</a></li>
<li>test(workerd): add <code>compatibilityDate</code> by <a
href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a
href="https://redirect.github.com/honojs/hono/pull/5100">honojs/hono#5100</a></li>
<li>fix(lambda-edge): base64 encode content-encoded response bodies by
<a href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a
href="https://redirect.github.com/honojs/hono/pull/5099">honojs/hono#5099</a></li>
<li>fix(aws-lambda): treat any non-identity content-encoding as binary
by <a href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in
<a
href="https://redirect.github.com/honojs/hono/pull/5101">honojs/hono#5101</a></li>
<li>fix(types): strip extra properties from array types in JSONParsed by
<a
href="https://github.com/Arman-Luthra"><code>@​Arman-Luthra</code></a>
in <a
href="https://redirect.github.com/honojs/hono/pull/5103">honojs/hono#5103</a></li>
<li>fix(trie-router): match empty wildcard remainder after regexp param
by <a href="https://github.com/usualoma"><code>@​usualoma</code></a> in
<a
href="https://redirect.github.com/honojs/hono/pull/5102">honojs/hono#5102</a></li>
<li>fix(etag): treat If-None-Match: <code>*</code> as a match by <a
href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a
href="https://redirect.github.com/honojs/hono/pull/5084">honojs/hono#5084</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/codebybilal18"><code>@​codebybilal18</code></a>
made their first contribution in <a
href="https://redirect.github.com/honojs/hono/pull/5081">honojs/hono#5081</a></li>
<li><a
href="https://github.com/Arman-Luthra"><code>@​Arman-Luthra</code></a>
made their first contribution in <a
href="https://redirect.github.com/honojs/hono/pull/5103">honojs/hono#5103</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/honojs/hono/compare/v4.12.28...v4.12.29">https://github.com/honojs/hono/compare/v4.12.28...v4.12.29</a></p>
<h2>v4.12.28</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(serve-static): treat empty string content as found by <a
href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a
href="https://redirect.github.com/honojs/hono/pull/5062">honojs/hono#5062</a></li>
<li>docs(MIGRATION): fix req.raw.headers reference (property, not
method) by <a
href="https://github.com/EduardF1"><code>@​EduardF1</code></a> in <a
href="https://redirect.github.com/honojs/hono/pull/5047">honojs/hono#5047</a></li>
<li>chore: don't publish <code>*.tsbuildinfo</code> by <a
href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a
href="https://redirect.github.com/honojs/hono/pull/5066">honojs/hono#5066</a></li>
<li>fix(utils/body,validator): normalize Content-Type media type for
case-insensitive matching by <a
href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a
href="https://redirect.github.com/honojs/hono/pull/5067">honojs/hono#5067</a></li>
<li>fix: avoid circular dependency between body.ts and request.ts by <a
href="https://github.com/usualoma"><code>@​usualoma</code></a> in <a
href="https://redirect.github.com/honojs/hono/pull/5071">honojs/hono#5071</a></li>
<li>fix(bun): report the requested subprotocol on WSContext.protocol by
<a href="https://github.com/greymoth-jp"><code>@​greymoth-jp</code></a>
in <a
href="https://redirect.github.com/honojs/hono/pull/5059">honojs/hono#5059</a></li>
<li>chore: bump <code>devDependencies</code> by <a
href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a
href="https://redirect.github.com/honojs/hono/pull/5085">honojs/hono#5085</a></li>
<li>fix(aws-lambda): detect V2 events by request context, not rawPath
alone by <a
href="https://github.com/VihaanAgarwal"><code>@​VihaanAgarwal</code></a>
in <a
href="https://redirect.github.com/honojs/hono/pull/5033">honojs/hono#5033</a></li>
<li>docs(context-storage): fix JSDoc by <a
href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a
href="https://redirect.github.com/honojs/hono/pull/5086">honojs/hono#5086</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/EduardF1"><code>@​EduardF1</code></a>
made their first contribution in <a
href="https://redirect.github.com/honojs/hono/pull/5047">honojs/hono#5047</a></li>
<li><a
href="https://github.com/greymoth-jp"><code>@​greymoth-jp</code></a>
made their first contribution in <a
href="https://redirect.github.com/honojs/hono/pull/5059">honojs/hono#5059</a></li>
<li><a
href="https://github.com/VihaanAgarwal"><code>@​VihaanAgarwal</code></a>
made their first contribution in <a
href="https://redirect.github.com/honojs/hono/pull/5033">honojs/hono#5033</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/honojs/hono/compare/v4.12.27...v4.12.28">https://github.com/honojs/hono/compare/v4.12.27...v4.12.28</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/honojs/hono/commit/b2ae3a2204a48ce15a26448fd746d39745eb1837"><code>b2ae3a2</code></a>
4.12.30</li>
<li><a
href="https://github.com/honojs/hono/commit/e0cdeb0a89e777e6b2d75c59f516962670fb47dc"><code>e0cdeb0</code></a>
fix(method-override): set duplex when forwarding a stream body in query
mode ...</li>
<li><a
href="https://github.com/honojs/hono/commit/653025e5c3a5eaf3b0e50d338250f601d7a5e56a"><code>653025e</code></a>
fix(client): replaceUrlParam should not match a param that prefixes
another (...</li>
<li><a
href="https://github.com/honojs/hono/commit/67efb27f7bcba7a99cae7779b7eb71c3fcada8d8"><code>67efb27</code></a>
fix(compress): do not compress 206 Partial Content responses (<a
href="https://redirect.github.com/honojs/hono/issues/5020">#5020</a>)</li>
<li><a
href="https://github.com/honojs/hono/commit/a48c8bf248eec5c2ecd468be5054c0d260a0dbfe"><code>a48c8bf</code></a>
fix(cache): deduplicate Cache-Control directives case-insensitively (<a
href="https://redirect.github.com/honojs/hono/issues/5025">#5025</a>)</li>
<li><a
href="https://github.com/honojs/hono/commit/3bb9a0e3a7dc0083061e91e885b2e9308585ee40"><code>3bb9a0e</code></a>
chore: update to ts6 in prep for ts7 (<a
href="https://redirect.github.com/honojs/hono/issues/5104">#5104</a>)</li>
<li><a
href="https://github.com/honojs/hono/commit/d3f97caa29bba1f1ae31a4e023c25224aa2a4261"><code>d3f97ca</code></a>
chore(benchmark): remove not used benchmarks (<a
href="https://redirect.github.com/honojs/hono/issues/5108">#5108</a>)</li>
<li><a
href="https://github.com/honojs/hono/commit/29a3f73fd5ebab6c96c08e0607e801efa99bb954"><code>29a3f73</code></a>
chore(benchmark/routers): bump deps (<a
href="https://redirect.github.com/honojs/hono/issues/5107">#5107</a>)</li>
<li><a
href="https://github.com/honojs/hono/commit/cda1af200256fa9a014bbcc2fdf79db201a627b6"><code>cda1af2</code></a>
4.12.29</li>
<li><a
href="https://github.com/honojs/hono/commit/2126289c15b0f87fb928645c4ed92d0f81d21cd4"><code>2126289</code></a>
fix(etag): treat If-None-Match: <code>*</code> as a match (<a
href="https://redirect.github.com/honojs/hono/issues/5084">#5084</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/honojs/hono/compare/v4.12.27...v4.12.30">compare
view</a></li>
</ul>
</details>
<br />

Updates `@hono/node-server` from 2.0.6 to 2.0.10
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/honojs/node-server/releases">@​hono/node-server's
releases</a>.</em></p>
<blockquote>
<h2>v2.0.10</h2>
<h2>Security fixes</h2>
<p>This release includes a fix for the following security issue:</p>
<h3>Unauthenticated memory-leak DoS via aborted WebSocket handshake</h3>
<p>Affects: <code>upgradeWebSocket</code>. A WebSocket upgrade request
with a missing or malformed <code>Sec-WebSocket-Key</code> header leaked
the request's <code>IncomingMessage</code> and left a promise pending,
even though no connection was established. Since the route is reachable
pre-handshake without authentication, an attacker could flood it to
gradually exhaust memory. <a
href="https://github.com/honojs/node-server/security/advisories/GHSA-9mqv-5hh9-4cgg">GHSA-9mqv-5hh9-4cgg</a></p>
<hr />
<p>Users of <code>upgradeWebSocket</code> are encouraged to upgrade to
this version.</p>
<h2>v2.0.9</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(websocket): polyfill missing ErrorEvent global by <a
href="https://github.com/otnc"><code>@​otnc</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/371">honojs/node-server#371</a></li>
<li>fix(serve-static): correct Range header parsing edge cases by <a
href="https://github.com/otnc"><code>@​otnc</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/372">honojs/node-server#372</a></li>
<li>fix: recover complete request bodies after client disconnect by <a
href="https://github.com/usualoma"><code>@​usualoma</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/375">honojs/node-server#375</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/otnc"><code>@​otnc</code></a> made their
first contribution in <a
href="https://redirect.github.com/honojs/node-server/pull/371">honojs/node-server#371</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/honojs/node-server/compare/v2.0.8...v2.0.9">https://github.com/honojs/node-server/compare/v2.0.8...v2.0.9</a></p>
<h2>v2.0.8</h2>
<h2>What's Changed</h2>
<ul>
<li>ci(release): add <code>--no-git-checks</code> option for <code>pnpm
stage publish</code> by <a
href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/369">honojs/node-server#369</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/honojs/node-server/compare/v2.0.7...v2.0.8">https://github.com/honojs/node-server/compare/v2.0.7...v2.0.8</a></p>
<h2>v2.0.7</h2>
<h2>What's Changed</h2>
<ul>
<li>chore: migrate to pnpm by <a
href="https://github.com/BlankParticle"><code>@​BlankParticle</code></a>
in <a
href="https://redirect.github.com/honojs/node-server/pull/367">honojs/node-server#367</a></li>
<li>fix(serve-static): serve precompressed files for
application/octet-stream by <a
href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/366">honojs/node-server#366</a></li>
<li>chore: bump <code>supertest</code> by <a
href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/368">honojs/node-server#368</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/honojs/node-server/compare/v2.0.6...v2.0.7">https://github.com/honojs/node-server/compare/v2.0.6...v2.0.7</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/honojs/node-server/commit/7c1457ed5536c02fdd2f001129fae67bcbca54a1"><code>7c1457e</code></a>
2.0.10</li>
<li><a
href="https://github.com/honojs/node-server/commit/3a21938c418340e980cb7ffa88e78369f78392d1"><code>3a21938</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/honojs/node-server/commit/98420217e53a17a238ef1aa1a6bef0b2b70136c5"><code>9842021</code></a>
2.0.9</li>
<li><a
href="https://github.com/honojs/node-server/commit/51f3bf56f56d9691ec0f7e1562a96f0b485a7dd9"><code>51f3bf5</code></a>
fix: recover complete request bodies after client disconnect (<a
href="https://redirect.github.com/honojs/node-server/issues/375">#375</a>)</li>
<li><a
href="https://github.com/honojs/node-server/commit/fdb87badbe313cfbfe6bb2355e9893dc0698d2bd"><code>fdb87ba</code></a>
fix(serve-static): correct Range header parsing edge cases (<a
href="https://redirect.github.com/honojs/node-server/issues/372">#372</a>)</li>
<li><a
href="https://github.com/honojs/node-server/commit/912e3fd80c4311756f724bd566de1433c8d772d9"><code>912e3fd</code></a>
fix(websocket): polyfill missing ErrorEvent global (<a
href="https://redirect.github.com/honojs/node-server/issues/371">#371</a>)</li>
<li><a
href="https://github.com/honojs/node-server/commit/114c15efb38dabaf81af774ddb764409e3d156d8"><code>114c15e</code></a>
2.0.8</li>
<li><a
href="https://github.com/honojs/node-server/commit/5db2d5df662cd69ff5c4cc23b8ecb3a6f63e4e38"><code>5db2d5d</code></a>
ci(release): add <code>--no-git-checks</code> option for <code>pnpm
stage publish</code> (<a
href="https://redirect.github.com/honojs/node-server/issues/369">#369</a>)</li>
<li><a
href="https://github.com/honojs/node-server/commit/a528a77ed2c28dc12775c849abc6b6df6d4cb44c"><code>a528a77</code></a>
2.0.7</li>
<li><a
href="https://github.com/honojs/node-server/commit/b2d610c1e37a96639fbb2eae662e858800aa8906"><code>b2d610c</code></a>
chore: bump <code>supertest</code> (<a
href="https://redirect.github.com/honojs/node-server/issues/368">#368</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/honojs/node-server/compare/v2.0.6...v2.0.10">compare
view</a></li>
</ul>
</details>
<br />

Updates `vite` from 8.1.3 to 8.1.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/releases">vite's
releases</a>.</em></p>
<blockquote>
<h2>v8.1.4</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.1.4/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md">vite's
changelog</a>.</em></p>
<blockquote>
<h2><!-- raw HTML omitted --><a
href="https://github.com/vitejs/vite/compare/v8.1.3...v8.1.4">8.1.4</a>
(2026-07-09)<!-- raw HTML omitted --></h2>
<h3>Features</h3>
<ul>
<li><strong>legacy:</strong> prefer oxc as minifier (fix <a
href="https://redirect.github.com/vitejs/vite/issues/21973">#21973</a>)
(<a
href="https://redirect.github.com/vitejs/vite/issues/22468">#22468</a>)
(<a
href="https://github.com/vitejs/vite/commit/ab5dafa8e66296ef201f615489fb57954bb740ce">ab5dafa</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><strong>build:</strong> add workaround for building on stackblitz
(<a
href="https://redirect.github.com/vitejs/vite/issues/22840">#22840</a>)
(<a
href="https://github.com/vitejs/vite/commit/575c32c29925c554f4ef4068738ab89c6878f615">575c32c</a>)</li>
<li><strong>build:</strong> keep <code>import.meta.url</code> in preload
function as-is (<a
href="https://redirect.github.com/vitejs/vite/issues/22839">#22839</a>)
(<a
href="https://github.com/vitejs/vite/commit/f1f90ed4742b3cf453428c7e581a6016a4d47321">f1f90ed</a>)</li>
<li><strong>deps:</strong> update all non-major dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/22865">#22865</a>)
(<a
href="https://github.com/vitejs/vite/commit/d4295a9ffce428c0e51892373e00c07fccc0498a">d4295a9</a>)</li>
<li><strong>deps:</strong> update rolldown-related dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/22866">#22866</a>)
(<a
href="https://github.com/vitejs/vite/commit/7cf07e4c5f7a6af276012e0c2ec06e08499e951e">7cf07e4</a>)</li>
<li><strong>html:</strong> avoid backtracking in import-only check (<a
href="https://redirect.github.com/vitejs/vite/issues/22848">#22848</a>)
(<a
href="https://github.com/vitejs/vite/commit/b5868c01a124d345664450aaebd677bfba964c05">b5868c0</a>)</li>
<li><strong>optimizer:</strong> avoid optimizer run for transform
request before init (<a
href="https://redirect.github.com/vitejs/vite/issues/22852">#22852</a>)
(<a
href="https://github.com/vitejs/vite/commit/72a5e2192506f51a5efd09c059815a5c43a9eacb">72a5e21</a>)</li>
<li><strong>ssr:</strong> align named export function call stacktrace
column with Node (<a
href="https://redirect.github.com/vitejs/vite/issues/22829">#22829</a>)
(<a
href="https://github.com/vitejs/vite/commit/173a1b648c321e0f836e5a94fc47c4fa9b081bfc">173a1b6</a>)</li>
<li>strip pure CSS chunk imports when chunkImportMap is enabled (<a
href="https://redirect.github.com/vitejs/vite/issues/22841">#22841</a>)
(<a
href="https://github.com/vitejs/vite/commit/648bd04933093d0aac9565f21a49811437776886">648bd04</a>)</li>
</ul>
<h3>Documentation</h3>
<ul>
<li>fix incorrect <code>@default</code> for <code>server.cors</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/22859">#22859</a>)
(<a
href="https://github.com/vitejs/vite/commit/70435b2551ee4fe3a0d55c8a3bb61b96f44d2763">70435b2</a>)</li>
</ul>
<h3>Miscellaneous Chores</h3>
<ul>
<li><strong>deps:</strong> update dependency postcss-modules to v9 (<a
href="https://redirect.github.com/vitejs/vite/issues/22867">#22867</a>)
(<a
href="https://github.com/vitejs/vite/commit/a9539d69efc7a4ccf988bbf5da31c2b416ba990e">a9539d6</a>)</li>
</ul>
<h3>Code Refactoring</h3>
<ul>
<li>eliminate ineffectiveDynamicImport warn (<a
href="https://redirect.github.com/vitejs/vite/issues/22876">#22876</a>)
(<a
href="https://github.com/vitejs/vite/commit/ea22fb352aad9a42c0a9d08f39d8a0bae8c111a5">ea22fb3</a>)</li>
</ul>
<h3>Tests</h3>
<ul>
<li>avoid warnings (<a
href="https://redirect.github.com/vitejs/vite/issues/22851">#22851</a>)
(<a
href="https://github.com/vitejs/vite/commit/af21ab68adac3380dc9a854d2fe3f776654301cd">af21ab6</a>)</li>
</ul>
<h3>Build System</h3>
<ul>
<li>remove the custom onLog function (<a
href="https://redirect.github.com/vitejs/vite/issues/22878">#22878</a>)
(<a
href="https://github.com/vitejs/vite/commit/2c4a217a63dc0a7fcb10bc710a988f32b173f481">2c4a217</a>)</li>
<li>replace deprecated <code>onwarn</code> with <code>onLog</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/22741">#22741</a>)
(<a
href="https://github.com/vitejs/vite/commit/c581b5588cb8e94603d17bce2ff9fec8e8e0a3bf">c581b55</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitejs/vite/commit/a477454442eff649b430f9e3c6caf2500fcb7183"><code>a477454</code></a>
release: v8.1.4</li>
<li><a
href="https://github.com/vitejs/vite/commit/ab5dafa8e66296ef201f615489fb57954bb740ce"><code>ab5dafa</code></a>
feat(legacy): prefer oxc as minifier (fix <a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21973">#21973</a>)
(<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22468">#22468</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/173a1b648c321e0f836e5a94fc47c4fa9b081bfc"><code>173a1b6</code></a>
fix(ssr): align named export function call stacktrace column with Node
(<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22829">#22829</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/575c32c29925c554f4ef4068738ab89c6878f615"><code>575c32c</code></a>
fix(build): add ...

_Description has been truncated_

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-19 17:03:53 -07:00
github-actions[bot] 60e32118b0 chore: version packages (#694)
This PR was opened by the [Changesets
release](https://github.com/changesets/action) GitHub action. When
you're ready to do a release, you can merge this and the packages will
be published to npm automatically. If you're not ready to do a release
yet, that's fine, whenever you add more changesets to main, this PR will
be updated.


# Releases
## deepagents-acp@0.1.20

### Patch Changes

- Updated dependencies
[[`2ebb178`](https://github.com/langchain-ai/deepagentsjs/commit/2ebb1785e4625ecf82635582e17fe41fbfbac603)]:
  - deepagents@1.11.1
## deepagents@1.11.1

### Patch Changes

- [#693](https://github.com/langchain-ai/deepagentsjs/pull/693)
[`2ebb178`](https://github.com/langchain-ai/deepagentsjs/commit/2ebb1785e4625ecf82635582e17fe41fbfbac603)
Thanks [@colifran](https://github.com/colifran)! - fix(deepagents):
return recoverable errors for invalid/denied filesystem tool paths
instead of throwing
## @deepagents/evals@0.0.19

### Patch Changes

- Updated dependencies
[[`2ebb178`](https://github.com/langchain-ai/deepagentsjs/commit/2ebb1785e4625ecf82635582e17fe41fbfbac603)]:
  - deepagents@1.11.1

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
deepagents-acp@0.1.20 deepagents@1.11.1
2026-07-17 15:10:22 -07:00