Christian Bromann
b1d307ab84
ci(infra): run framework browser tests only when paths change ( #2425 )
...
## Summary
- Add a `detect-changes` job to the browser test workflow using
`dorny/paths-filter@v3.0.2`.
- Run all four framework browser jobs when `libs/sdk/**` changes or when
this workflow file changes.
- Run only the matching job when `libs/sdk-react`, `libs/sdk-angular`,
`libs/sdk-vue`, or `libs/sdk-svelte` changes.
- Keep the full matrix on `workflow_dispatch` (manual runs and CI
dispatched via workflow_dispatch).
2026-05-22 07:15:30 -07:00
dependabot[bot]
674173b8ac
chore(deps-dev): bump turbo from 2.8.15 to 2.9.14 ( #2428 )
...
Bumps [turbo](https://github.com/vercel/turborepo ) from 2.8.15 to
2.9.14.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vercel/turborepo/releases ">turbo's
releases</a>.</em></p>
<blockquote>
<h2>Turborepo v2.9.14</h2>
<blockquote>
<p>[!NOTE]
This release contains important security fixes.</p>
</blockquote>
<h3>High:</h3>
<ul>
<li><a
href="https://github.com/vercel/turborepo/security/advisories/GHSA-5xc8-49mv-x4mm ">GHSA-5xc8-49mv-x4mm:
Turborepo VSCode Extension command injection</a></li>
</ul>
<h3>Low:</h3>
<ul>
<li><a
href="https://github.com/vercel/turborepo/security/advisories/GHSA-hcf7-66rw-9f5r ">GHSA-hcf7-66rw-9f5r:
Login callback CSRF/session fixation</a></li>
<li><a
href="https://github.com/vercel/turborepo/security/advisories/GHSA-3qcw-2rhx-2726 ">GHSA-3qcw-2rhx-2726:
Unexpected local code execution during Yarn Berry detection</a></li>
</ul>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<h3>Changelog</h3>
<ul>
<li>release(turborepo): 2.9.12 by <a
href="https://github.com/github-actions "><code>@github-actions</code></a>[bot]
in <a
href="https://redirect.github.com/vercel/turborepo/pull/12774 ">vercel/turborepo#12774</a></li>
<li>fix: Restore docs mobile menu by <a
href="https://github.com/anthonyshew "><code>@anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/12782 ">vercel/turborepo#12782</a></li>
<li>ci: Use <code>pull_request</code> for PR title linting by <a
href="https://github.com/anthonyshew "><code>@anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/12787 ">vercel/turborepo#12787</a></li>
<li>ci: Scope GitHub Actions caches by branch by <a
href="https://github.com/anthonyshew "><code>@anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/12788 ">vercel/turborepo#12788</a></li>
<li>test: Validate lockfiles without dependency downloads by <a
href="https://github.com/anthonyshew "><code>@anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/12789 ">vercel/turborepo#12789</a></li>
<li>Removed unneeded import form hash creation script in docs by <a
href="https://github.com/dancrumb "><code>@dancrumb</code></a> in <a
href="https://redirect.github.com/vercel/turborepo/pull/12799 ">vercel/turborepo#12799</a></li>
<li>fix: Validate auth callback state by <a
href="https://github.com/anthonyshew "><code>@anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/12802 ">vercel/turborepo#12802</a></li>
<li>fix: Harden VS Code extension command execution by <a
href="https://github.com/anthonyshew "><code>@anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/12800 ">vercel/turborepo#12800</a></li>
<li>fix: Avoid project-local Yarn during detection by <a
href="https://github.com/anthonyshew "><code>@anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/12801 ">vercel/turborepo#12801</a></li>
<li>chore: Release 2.9.13 by <a
href="https://github.com/anthonyshew "><code>@anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/12803 ">vercel/turborepo#12803</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/dancrumb "><code>@dancrumb</code></a>
made their first contribution in <a
href="https://redirect.github.com/vercel/turborepo/pull/12799 ">vercel/turborepo#12799</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/vercel/turborepo/compare/v2.9.12...v2.9.14 ">https://github.com/vercel/turborepo/compare/v2.9.12...v2.9.14 </a></p>
<h2>Turborepo v2.9.13-canary.1</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<h3>Changelog</h3>
<ul>
<li>release(turborepo): 2.9.11-canary.7 by <a
href="https://github.com/github-actions "><code>@github-actions</code></a>[bot]
in <a
href="https://redirect.github.com/vercel/turborepo/pull/12768 ">vercel/turborepo#12768</a></li>
<li>fix: Allow <code>$TURBO_EXTENDS$</code> in LSP diagnostics by <a
href="https://github.com/anthonyshew "><code>@anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/12770 ">vercel/turborepo#12770</a></li>
<li>release(turborepo): 2.9.11 by <a
href="https://github.com/github-actions "><code>@github-actions</code></a>[bot]
in <a
href="https://redirect.github.com/vercel/turborepo/pull/12771 ">vercel/turborepo#12771</a></li>
<li>fix: Allow transit nodes in LSP diagnostics by <a
href="https://github.com/anthonyshew "><code>@anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/12773 ">vercel/turborepo#12773</a></li>
<li>release(turborepo): 2.9.12 by <a
href="https://github.com/github-actions "><code>@github-actions</code></a>[bot]
in <a
href="https://redirect.github.com/vercel/turborepo/pull/12774 ">vercel/turborepo#12774</a></li>
<li>fix: Restore docs mobile menu by <a
href="https://github.com/anthonyshew "><code>@anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/12782 ">vercel/turborepo#12782</a></li>
<li>ci: Use <code>pull_request</code> for PR title linting by <a
href="https://github.com/anthonyshew "><code>@anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/12787 ">vercel/turborepo#12787</a></li>
<li>ci: Scope GitHub Actions caches by branch by <a
href="https://github.com/anthonyshew "><code>@anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/12788 ">vercel/turborepo#12788</a></li>
<li>test: Validate lockfiles without dependency downloads by <a
href="https://github.com/anthonyshew "><code>@anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/12789 ">vercel/turborepo#12789</a></li>
<li>Removed unneeded import form hash creation script in docs by <a
href="https://github.com/dancrumb "><code>@dancrumb</code></a> in <a
href="https://redirect.github.com/vercel/turborepo/pull/12799 ">vercel/turborepo#12799</a></li>
<li>fix: Validate auth callback state by <a
href="https://github.com/anthonyshew "><code>@anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/12802 ">vercel/turborepo#12802</a></li>
<li>fix: Harden VS Code extension command execution by <a
href="https://github.com/anthonyshew "><code>@anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/12800 ">vercel/turborepo#12800</a></li>
<li>fix: Avoid project-local Yarn during detection by <a
href="https://github.com/anthonyshew "><code>@anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/12801 ">vercel/turborepo#12801</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vercel/turborepo/commit/fc62fe0d9c347d1d24f0ed8946284856593ddb93 "><code>fc62fe0</code></a>
publish 2.9.14 to registry</li>
<li><a
href="https://github.com/vercel/turborepo/commit/fb8c9aec0f9e83f95783659a5ce9c4478cf62cb9 "><code>fb8c9ae</code></a>
chore: Release 2.9.13 (<a
href="https://redirect.github.com/vercel/turborepo/issues/12803 ">#12803</a>)</li>
<li><a
href="https://github.com/vercel/turborepo/commit/e8e629da4e1fb75231089e91b19be9d327a3e649 "><code>e8e629d</code></a>
fix: Avoid project-local Yarn during detection (<a
href="https://redirect.github.com/vercel/turborepo/issues/12801 ">#12801</a>)</li>
<li><a
href="https://github.com/vercel/turborepo/commit/91c90cbf12f524c5c29b713d6472dd5fcdecb309 "><code>91c90cb</code></a>
fix: Harden VS Code extension command execution (<a
href="https://redirect.github.com/vercel/turborepo/issues/12800 ">#12800</a>)</li>
<li><a
href="https://github.com/vercel/turborepo/commit/84f450894e87da1eed864d51f6f637f26980d560 "><code>84f4508</code></a>
fix: Validate auth callback state (<a
href="https://redirect.github.com/vercel/turborepo/issues/12802 ">#12802</a>)</li>
<li><a
href="https://github.com/vercel/turborepo/commit/1779ad7901384f106236a6e196059e4929745514 "><code>1779ad7</code></a>
Removed unneeded import form hash creation script in docs (<a
href="https://redirect.github.com/vercel/turborepo/issues/12799 ">#12799</a>)</li>
<li><a
href="https://github.com/vercel/turborepo/commit/71f8c90a807ffb9b9876ea8a04f523f473bf5c8d "><code>71f8c90</code></a>
test: Validate lockfiles without dependency downloads (<a
href="https://redirect.github.com/vercel/turborepo/issues/12789 ">#12789</a>)</li>
<li><a
href="https://github.com/vercel/turborepo/commit/5fcb96024d503127bb0ed760ebe159b7716c52b3 "><code>5fcb960</code></a>
ci: Scope GitHub Actions caches by branch (<a
href="https://redirect.github.com/vercel/turborepo/issues/12788 ">#12788</a>)</li>
<li><a
href="https://github.com/vercel/turborepo/commit/4cf9fabc9a6f6c99fe4e2f2da9f35be631be062a "><code>4cf9fab</code></a>
ci: Use <code>pull_request</code> for PR title linting (<a
href="https://redirect.github.com/vercel/turborepo/issues/12787 ">#12787</a>)</li>
<li><a
href="https://github.com/vercel/turborepo/commit/859c629bc401f239ac7980a132746ca90478e17c "><code>859c629</code></a>
fix: Restore docs mobile menu (<a
href="https://redirect.github.com/vercel/turborepo/issues/12782 ">#12782</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/vercel/turborepo/compare/v2.8.15...v2.9.14 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/langchain-ai/langgraphjs/network/alerts ).
</details>
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Christian Bromann <git@bromann.dev >
2026-05-22 07:07:17 -07:00
Christian Bromann
f32a37384c
fix ci
2026-05-22 15:53:53 +02:00
dependabot[bot]
2435ff6ab3
chore(deps): bump pnpm/action-setup from 5.0.0 to 6.0.4 ( #2357 )
...
Bumps [pnpm/action-setup](https://github.com/pnpm/action-setup ) from
5.0.0 to 6.0.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pnpm/action-setup/releases ">pnpm/action-setup's
releases</a>.</em></p>
<blockquote>
<h2>v6.0.4</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: use npm co-located with the action node binary by <a
href="https://github.com/benquarmby "><code>@benquarmby</code></a> in <a
href="https://redirect.github.com/pnpm/action-setup/pull/239 ">pnpm/action-setup#239</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/benquarmby "><code>@benquarmby</code></a> made
their first contribution in <a
href="https://redirect.github.com/pnpm/action-setup/pull/239 ">pnpm/action-setup#239</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/pnpm/action-setup/compare/v6.0.3...v6.0.4 ">https://github.com/pnpm/action-setup/compare/v6.0.3...v6.0.4 </a></p>
<h2>v6.0.3</h2>
<p>Updated pnpm to v11.0.0-rc.5</p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/pnpm/action-setup/compare/v6.0.2...v6.0.3 ">https://github.com/pnpm/action-setup/compare/v6.0.2...v6.0.3 </a></p>
<h2>v6.0.2</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: pnpm self-update binary shadowed by bootstrap on PATH by <a
href="https://github.com/oniani1 "><code>@oniani1</code></a> in <a
href="https://redirect.github.com/pnpm/action-setup/pull/230 ">pnpm/action-setup#230</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/oniani1 "><code>@oniani1</code></a> made
their first contribution in <a
href="https://redirect.github.com/pnpm/action-setup/pull/230 ">pnpm/action-setup#230</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/pnpm/action-setup/compare/v6.0.1...v6.0.2 ">https://github.com/pnpm/action-setup/compare/v6.0.1...v6.0.2 </a></p>
<h2>v6.0.1</h2>
<p>Update pnpm to v11.0.0-rc.2. <code>pnpm-lock.yaml</code> will not be
saved with two documents unless the <code>packageManager</code> is set
via <code>devEngines.packageManager</code>. Related issue: <a
href="https://redirect.github.com/pnpm/action-setup/issues/228 ">pnpm/action-setup#228</a></p>
<h2>v6.0.0</h2>
<p>Added support for pnpm <a
href="https://github.com/pnpm/pnpm/releases/tag/v11.0.0-rc.0 ">v11</a>.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pnpm/action-setup/commit/26f6d4f2c533a43e6b5da0b4a5dd983f98f7b49a "><code>26f6d4f</code></a>
fix: use npm co-located with the action node binary (<a
href="https://redirect.github.com/pnpm/action-setup/issues/239 ">#239</a>)</li>
<li><a
href="https://github.com/pnpm/action-setup/commit/903f9c1a6ebcba6cf41d87230be49611ac97822e "><code>903f9c1</code></a>
fix: update pnpm to 11.0.0-rc.5</li>
<li><a
href="https://github.com/pnpm/action-setup/commit/bdf0af2a9d539c0fd91f655344d2934bfd5a2cdd "><code>bdf0af2</code></a>
test: add strict version-match jobs to reproduce <a
href="https://redirect.github.com/pnpm/action-setup/issues/225 ">#225</a>
/ <a
href="https://redirect.github.com/pnpm/action-setup/issues/227 ">#227</a></li>
<li><a
href="https://github.com/pnpm/action-setup/commit/71c92474e7e4f5bca283fb17ef80fba9cdb2b4b1 "><code>71c9247</code></a>
fix: pnpm self-update binary shadowed by bootstrap on PATH (<a
href="https://redirect.github.com/pnpm/action-setup/issues/230 ">#230</a>)</li>
<li><a
href="https://github.com/pnpm/action-setup/commit/078e9d416474b29c0c387560859308974f7e9c53 "><code>078e9d4</code></a>
fix: update pnpm to 11.0.0-rc.2</li>
<li><a
href="https://github.com/pnpm/action-setup/commit/08c4be7e2e672a47d11bd04269e27e5f3e8529cb "><code>08c4be7</code></a>
docs(README): update action-setup version</li>
<li><a
href="https://github.com/pnpm/action-setup/commit/579891461a117d7c030d0430bbc772562374d9e1 "><code>5798914</code></a>
chore: update .gitignore</li>
<li><a
href="https://github.com/pnpm/action-setup/commit/ddffd667542d33325b6f1d9bda9cfcc7861fc400 "><code>ddffd66</code></a>
fix: remove accidentally committed file</li>
<li><a
href="https://github.com/pnpm/action-setup/commit/b43f991918ce53332dce4c15c32ae14261d12d65 "><code>b43f991</code></a>
fix: update pnpm to 11.0.0-rc.0</li>
<li><a
href="https://github.com/pnpm/action-setup/commit/3852509c9e55070b5aac70d0500b8772d13ed4e6 "><code>3852509</code></a>
README.md: bring versions up-to-date (<a
href="https://redirect.github.com/pnpm/action-setup/issues/222 ">#222</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/pnpm/action-setup/compare/fc06bc1257f339d1d5d8b3a19a8cae5388b55320...26f6d4f2c533a43e6b5da0b4a5dd983f98f7b49a ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-04 22:41:58 -07:00
dependabot[bot]
34d848c806
chore(deps): bump actions/upload-pages-artifact from 4.0.0 to 5.0.0 ( #2356 )
...
Bumps
[actions/upload-pages-artifact](https://github.com/actions/upload-pages-artifact )
from 4.0.0 to 5.0.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/upload-pages-artifact/releases ">actions/upload-pages-artifact's
releases</a>.</em></p>
<blockquote>
<h2>v5.0.0</h2>
<h1>Changelog</h1>
<ul>
<li>Update upload-artifact action to version 7 <a
href="https://github.com/Tom-van-Woudenberg "><code>@Tom-van-Woudenberg</code></a>
(<a
href="https://redirect.github.com/actions/upload-pages-artifact/issues/139 ">#139</a>)</li>
<li>feat: add <code>include-hidden-files</code> input <a
href="https://github.com/jonchurch "><code>@jonchurch</code></a> (<a
href="https://redirect.github.com/actions/upload-pages-artifact/issues/137 ">#137</a>)</li>
</ul>
<p>See details of <a
href="https://github.com/actions/upload-pages-artifact/compare/v4.0.0...v4.0.1 ">all
code changes</a> since previous release.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/upload-pages-artifact/commit/fc324d3547104276b827a68afc52ff2a11cc49c9 "><code>fc324d3</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/upload-pages-artifact/issues/139 ">#139</a>
from Tom-van-Woudenberg/patch-1</li>
<li><a
href="https://github.com/actions/upload-pages-artifact/commit/fe9d4b7d84090e1d8d9c53a0236f810d4e00d2c3 "><code>fe9d4b7</code></a>
Merge branch 'main' into patch-1</li>
<li><a
href="https://github.com/actions/upload-pages-artifact/commit/0ca16172ca884f0a37117fed41734f29784cc980 "><code>0ca1617</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/upload-pages-artifact/issues/137 ">#137</a>
from jonchurch/include-hidden-files</li>
<li><a
href="https://github.com/actions/upload-pages-artifact/commit/57f0e8492b437b7818227931fef2faa1a379839b "><code>57f0e84</code></a>
Update action.yml</li>
<li><a
href="https://github.com/actions/upload-pages-artifact/commit/4a90348b2933470dc78cec55534259872a6d3c0d "><code>4a90348</code></a>
v7 --> hash</li>
<li><a
href="https://github.com/actions/upload-pages-artifact/commit/56f665a6f297fa95f8d735b314187fb2d7764569 "><code>56f665a</code></a>
Update upload-artifact action to version 7</li>
<li><a
href="https://github.com/actions/upload-pages-artifact/commit/f7615f5917213b24245d49ba96693d0f5375a414 "><code>f7615f5</code></a>
Add <code>include-hidden-files</code> input</li>
<li>See full diff in <a
href="https://github.com/actions/upload-pages-artifact/compare/7b1f4a764d45c48632c6b24a0339c27f5614fb0b...fc324d3547104276b827a68afc52ff2a11cc49c9 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-04 22:41:48 -07:00
dependabot[bot]
4f810a2ce7
chore(deps): bump the minor-and-patch group with 2 updates ( #2355 )
...
Bumps the minor-and-patch group with 2 updates:
[actions/setup-node](https://github.com/actions/setup-node ) and
[actions/upload-artifact](https://github.com/actions/upload-artifact ).
Updates `actions/setup-node` from 6.3.0 to 6.4.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/setup-node/releases ">actions/setup-node's
releases</a>.</em></p>
<blockquote>
<h2>v6.4.0</h2>
<h2>What's Changed</h2>
<h3>Dependency updates:</h3>
<ul>
<li>Upgrade <a
href="https://github.com/actions "><code>@actions</code></a>
dependencies by <a
href="https://github.com/Copilot "><code>@Copilot</code></a> in <a
href="https://redirect.github.com/actions/setup-node/pull/1525 ">actions/setup-node#1525</a></li>
<li>Update Node.js versions in versions.yml and bump package to v6.4.0
by <a
href="https://github.com/priya-kinthali "><code>@priya-kinthali</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/1533 ">actions/setup-node#1533</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/Copilot "><code>@Copilot</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/setup-node/pull/1525 ">actions/setup-node#1525</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-node/compare/v6...v6.4.0 ">https://github.com/actions/setup-node/compare/v6...v6.4.0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/setup-node/commit/48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e "><code>48b55a0</code></a>
Update Node.js versions in versions.yml and bump package to v6.4.0 (<a
href="https://redirect.github.com/actions/setup-node/issues/1533 ">#1533</a>)</li>
<li><a
href="https://github.com/actions/setup-node/commit/ab72c7e7eba0eaa11f8cab0f5679243900c2cac9 "><code>ab72c7e</code></a>
Upgrade <a href="https://github.com/actions "><code>@actions</code></a>
dependencies (<a
href="https://redirect.github.com/actions/setup-node/issues/1525 ">#1525</a>)</li>
<li>See full diff in <a
href="https://github.com/actions/setup-node/compare/53b83947a5a98c8d113130e565377fae1a50d02f...48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e ">compare
view</a></li>
</ul>
</details>
<br />
Updates `actions/upload-artifact` from 7.0.0 to 7.0.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/upload-artifact/releases ">actions/upload-artifact's
releases</a>.</em></p>
<blockquote>
<h2>v7.0.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Update the readme with direct upload details by <a
href="https://github.com/danwkennedy "><code>@danwkennedy</code></a> in
<a
href="https://redirect.github.com/actions/upload-artifact/pull/795 ">actions/upload-artifact#795</a></li>
<li>Readme: bump all the example versions to v7 by <a
href="https://github.com/danwkennedy "><code>@danwkennedy</code></a> in
<a
href="https://redirect.github.com/actions/upload-artifact/pull/796 ">actions/upload-artifact#796</a></li>
<li>Include changes in typespec/ts-http-runtime 0.3.5 by <a
href="https://github.com/yacaovsnc "><code>@yacaovsnc</code></a> in <a
href="https://redirect.github.com/actions/upload-artifact/pull/797 ">actions/upload-artifact#797</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/upload-artifact/compare/v7...v7.0.1 ">https://github.com/actions/upload-artifact/compare/v7...v7.0.1 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/upload-artifact/commit/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a "><code>043fb46</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/upload-artifact/issues/797 ">#797</a>
from actions/yacaovsnc/update-dependency</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/634250c1388765ea7ed0f053e636f1f399000b94 "><code>634250c</code></a>
Include changes in typespec/ts-http-runtime 0.3.5</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/e454baaac2be505c9450e11b8f3215c6fc023ce8 "><code>e454baa</code></a>
Readme: bump all the example versions to v7 (<a
href="https://redirect.github.com/actions/upload-artifact/issues/796 ">#796</a>)</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/74fad66b98a6d799dc004d3353ccd0e6f6b2530e "><code>74fad66</code></a>
Update the readme with direct upload details (<a
href="https://redirect.github.com/actions/upload-artifact/issues/795 ">#795</a>)</li>
<li>See full diff in <a
href="https://github.com/actions/upload-artifact/compare/bbbca2ddaa5d8feaa63e36b76fdaad77386f024f...043fb46d1a93c77aae656e7c1c64a875d1fc6a0a ">compare
view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-04 22:41:40 -07:00
Hunter Lovell
e3ff7735eb
ci: add PR title lint workflow ( #2318 )
...
## Summary
Adds pull request title linting to enforce Conventional Commit style
titles in this repository.
## Changes
- Add .github/workflows/pr_lint.yml
- Reject empty scopes in PR titles (for example, fix(): ...)
- Validate title format via amannn/action-semantic-pull-request
- Allow langgraphjs package/area scopes and ignore label override
2026-04-14 14:24:40 -07:00
dependabot[bot]
950ab9a12c
chore(deps): bump actions/download-artifact from 8.0.0 to 8.0.1 in the minor-and-patch group ( #2265 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-01 20:03:11 -07:00
dependabot[bot]
842c54e06d
chore(deps): bump actions/deploy-pages from 4.0.5 to 5.0.0 ( #2266 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-01 20:02:36 -07:00
dependabot[bot]
7dadddb170
chore(deps): bump actions/configure-pages from 5.0.0 to 6.0.0 ( #2267 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-01 20:02:27 -07:00
dependabot[bot]
aea45cd8fb
chore(deps): bump pnpm/action-setup from 4.2.0 to 5.0.0 ( #2268 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-01 20:02:19 -07:00
Mason Daugherty
ea19bd95ec
ci: tighten top-level release permissions to contents: read ( #2259 )
2026-03-31 14:36:07 -04:00
John Kennedy
a1c8d32133
chore: fix dependabot — single root entry with ecosystem groups ( #2152 )
...
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-03-10 12:42:50 -07:00
John Kennedy
1075bff7b9
chore: update dependabot.yml with per-libs/ entries and monthly schedule ( #2051 )
...
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-03-10 19:20:00 +00:00
Christian Bromann
e051ef6aa8
feat(sdk): add vue, svelte, angular implementation of useStream hook ( #2001 )
...
Co-authored-by: Tat Dat Duong <david@duong.cz >
2026-03-10 10:48:46 -07:00
dependabot[bot]
e81047421f
chore(deps): bump actions/setup-node from 6.2.0 to 6.3.0 in the minor-deps-updates group ( #2034 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-06 14:10:54 -08:00
Hunter Lovell
b1272bd43a
fix: add explicit : symbol annotations for cross-version compatibility ( #2024 )
2026-03-02 15:32:14 -08:00
Hunter Lovell
0b1c4f32bb
chore: symlink READMEs to langgraph-core and remove sync check ( #2020 )
2026-03-02 13:12:38 -08:00
Sydney Runkle
adfc233aee
Add files via upload
2026-03-02 12:06:42 -05:00
dependabot[bot]
032c326448
chore(deps): bump the major-deps-updates group with 2 updates ( #2008 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-27 13:45:09 -08:00
dependabot[bot]
f05ff2a9e4
chore(deps): bump changesets/action from 1.6.0 to 1.7.0 in the minor-deps-updates group ( #1963 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-19 11:30:48 -08:00
John Kennedy
33ac058467
workflow perms ( #1948 )
2026-02-07 17:12:10 -08:00
dependabot[bot]
1be14aabab
chore(deps): bump actions/checkout from 6.0.1 to 6.0.2 in the patch-deps-updates group ( #1919 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-23 08:35:24 -08:00
dependabot[bot]
3b4ff55d8a
chore(deps): bump the minor-deps-updates group with 2 updates ( #1920 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-23 08:35:13 -08:00
dependabot[bot]
9cbc75733d
chore(deps): bump actions/setup-node from 6.1.0 to 6.2.0 in the minor-deps-updates group ( #1906 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-20 00:12:59 -08:00
David Duong
1727c4274f
chore: allow publishing packages via pkg.pr.new ( #1910 )
2026-01-17 17:32:03 +01:00
dependabot[bot]
f1400adb8d
chore(deps): bump the major-deps-updates group with 2 updates ( #1875 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-11 23:45:20 -08:00
Christian Bromann
b470748990
fix(ci): make pipeline for effective and secure ( #1870 )
...
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
2026-01-10 19:13:31 -08:00
David Duong
e7aeffeb72
chore: replace yarn with pnpm ( #1862 )
...
Co-authored-by: Christian Bromann <git@bromann.dev >
2026-01-09 19:52:29 +01:00
Christian Bromann
b251b407dc
fix(ci): fix deploy_docs workflow ( #1858 )
2026-01-09 00:02:03 -08:00
Christian Bromann
a9fa28b6ad
fix(ci): add missing build step in release ( #1856 )
2026-01-08 23:44:45 -08:00
Christian Bromann
a84c1ff182
fix(ci): another attempt fixing pipeline ( #1853 )
2026-01-08 18:28:19 -08:00
Christian Bromann
e9f7e8e9e6
fix(ci): fix release pipeline take 2 ( #1850 )
2026-01-08 17:25:51 -08:00
Christian Bromann
3ec85a43df
fix(ci): fix broken release pipeline ( #1848 )
2026-01-08 16:40:14 -08:00
Christian Bromann
730dc7c3b8
feat(sdk): add type-safe tool call streaming with agent type inference ( #1826 )
...
Co-authored-by: David Duong <david@duong.cz >
2026-01-08 14:50:18 -08:00
David Duong
f93e9932e3
chore: add trusted publishing ( #1830 )
2025-12-20 02:52:34 +01:00
dependabot[bot]
2802f0f165
chore(deps): bump actions/checkout from 5 to 6 ( #1792 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-02 01:40:10 +01:00
dependabot[bot]
42373d348e
chore(deps): bump actions/setup-node from 5 to 6 ( #1740 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-11 15:18:48 +01:00
Lauren Hirata Singh
5f9ff42cbb
chore(docs): Revert the revert "fix: rollback doc redirects" (add redirects) ( #1761 )
2025-10-29 12:11:59 -04:00
Hunter Lovell
4b7933cd0a
feat: langgraph canonical package ( #1742 )
2025-10-20 17:02:16 -07:00
Hunter Lovell
1e1ecbbcf8
feat: merge v1 ( #1733 )
...
Co-authored-by: Tat Dat Duong <david@duong.cz >
Co-authored-by: Christian Bromann <git@bromann.dev >
Co-authored-by: Nuno Campos <nuno@langchain.dev >
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2025-10-17 16:34:43 -07:00
Hunter Lovell
98a6c7b48f
fix: rollback doc redirects ( #1732 )
2025-10-17 13:50:49 -07:00
Lauren Hirata Singh
890fe8f816
chore(docs): fix redirects ( #1728 )
2025-10-16 14:03:53 -04:00
David Duong
4ea2ffe3b9
chore: docs template gh link ( #1630 )
2025-09-09 22:31:10 +00:00
dependabot[bot]
6d04634c2d
chore(deps): bump actions/setup-python from 5 to 6 ( #1615 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-09 01:38:50 +02:00
dependabot[bot]
2d024d469d
chore(deps): bump actions/setup-node from 4 to 5 ( #1614 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-09 01:38:42 +02:00
dependabot[bot]
b6ae560b79
chore(deps): bump actions/upload-pages-artifact from 3 to 4 ( #1574 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-08-28 00:11:08 +02:00
dependabot[bot]
2620c99816
chore(deps): bump actions/checkout from 4 to 5 ( #1522 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-08-12 11:12:28 +02:00
David Duong
679a1bebf8
fix(cli): pnpm support for sysinfo command, update gh template ( #1489 )
2025-08-05 01:21:18 +02:00
David Duong
3b45c56493
chore: add priviledged template ( #1400 )
2025-07-15 11:39:46 +02:00