Skip to content

build(deps): bump the non-major group across 1 directory with 64 updates - #73

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/non-major-73ef32af82
Open

build(deps): bump the non-major group across 1 directory with 64 updates#73
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/non-major-73ef32af82

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 7, 2026

Copy link
Copy Markdown
Contributor

Bumps the non-major group with 64 updates in the / directory:

Package From To
@ai-sdk/anthropic 4.0.16 4.0.49
@ai-sdk/fal 3.0.12 3.0.37
@ai-sdk/gateway 4.0.23 4.0.74
@ai-sdk/google 4.0.18 4.0.63
@ai-sdk/mistral 4.0.13 4.0.39
@ai-sdk/openai 4.0.16 4.0.58
@ai-sdk/react 4.0.34 4.0.95
@composio/core 0.14.0 0.18.0
@composio/vercel 0.11.1 0.11.2
@convex-dev/auth 0.0.94 0.0.95
@convex-dev/resend 0.2.5 0.2.8
@polar-sh/checkout 0.4.0 0.4.1
@polar-sh/sdk 0.48.1 0.49.0
@radix-ui/react-alert-dialog 1.1.20 1.1.23
@radix-ui/react-avatar 1.2.3 1.2.6
@radix-ui/react-checkbox 1.3.8 1.3.11
@radix-ui/react-dialog 1.1.20 1.1.23
@radix-ui/react-dropdown-menu 2.1.21 2.1.24
@radix-ui/react-hover-card 1.1.20 1.1.23
@radix-ui/react-label 2.1.12 2.1.15
@radix-ui/react-popover 1.1.20 1.1.23
@radix-ui/react-progress 1.1.13 1.1.16
@radix-ui/react-radio-group 1.4.4 1.4.7
@radix-ui/react-scroll-area 1.2.15 1.2.18
@radix-ui/react-select 2.3.4 2.3.7
@radix-ui/react-separator 1.1.12 1.1.15
@radix-ui/react-slot 1.3.0 1.3.3
@radix-ui/react-switch 1.3.4 1.3.7
@radix-ui/react-tabs 1.1.18 1.1.21
@radix-ui/react-tooltip 1.2.13 1.2.16
@radix-ui/react-use-controllable-state 1.2.4 1.2.6
@tanstack/react-devtools 0.10.8 0.10.12
@tanstack/react-query 5.101.2 5.102.8
@tanstack/react-query-devtools 5.101.2 5.102.8
@tanstack/react-router 1.170.18 1.170.32
@tanstack/react-router-devtools 1.167.0 1.167.1
@tanstack/react-router-ssr-query 1.167.1 1.167.2
@tanstack/react-start 1.168.32 1.168.49
@upstash/redis 1.38.0 1.38.3
ai 7.0.31 7.0.92
convex 1.42.3 1.45.0
dayjs 1.11.21 1.11.23
exa-js 2.16.0 2.19.0
katex 0.18.1 0.18.5
lucide-react 1.25.0 1.40.0
marked 18.0.6 18.0.11
posthog-js 1.404.1 1.426.3
posthog-node 5.45.2 5.51.6
react 19.2.7 19.2.8
@types/react 19.2.17 19.2.18
react-dom 19.2.7 19.2.8
@types/react-dom 19.2.3 19.2.7
sonner 2.0.7 2.0.8
streamdown 2.5.0 2.6.0
zod 4.4.3 4.5.4
zustand 5.0.14 5.0.15
@tanstack/devtools-vite 0.8.1 0.8.5
@testing-library/react 16.3.2 16.3.3
@vitejs/plugin-react 6.0.3 6.1.1
lint-staged 17.1.0 17.4.1
oxfmt 0.59.0 0.66.0
oxlint 1.74.0 1.81.0
vite 8.1.5 8.2.2
vite-plugin-oxlint 2.1.2 2.2.0

Updates @ai-sdk/anthropic from 4.0.16 to 4.0.49

Changelog

Sourced from @​ai-sdk/anthropic's changelog.

4.0.49

Patch Changes

  • 65397d7: fix(anthropic): recognize dated Google Vertex Claude 4 model IDs when selecting model capabilities

4.0.48

Patch Changes

  • 4d25a08: feat(anthropic): add fable 5.1 support
  • Updated dependencies [6bcc0f8]
    • @​ai-sdk/provider-utils@​5.0.36

4.0.47

Patch Changes

  • 5190b67: feat(provider): extend the FilesV4 interface with optional getFileMetadata, downloadFile (streaming), and deleteFile operations, plus abortSignal/headers call options and a { type: 'stream' } upload data variant; upload results now expose byteSize, createdAt, and expiresAt (also surfaced by the core uploadFile() helper, which now forwards abortSignal/headers); add postMultipartStreamToApi (streaming multipart uploads with deterministic part ordering and failure-path stream teardown), deleteFromApi, and createBinaryStreamResponseHandler to provider-utils
  • Updated dependencies [5190b67]
    • @​ai-sdk/provider@​4.0.10
    • @​ai-sdk/provider-utils@​5.0.35

4.0.46

Patch Changes

  • aa45741: fix(provider/anthropic): preserve native message batch request counts in provider metadata and support the full language-model option surface in batch requests
  • Updated dependencies [aa45741]
    • @​ai-sdk/provider@​4.0.9
    • @​ai-sdk/provider-utils@​5.0.34

4.0.45

Patch Changes

  • Updated dependencies [90192f1]
    • @​ai-sdk/provider-utils@​5.0.33

4.0.44

Patch Changes

  • Updated dependencies [3e125ba]
    • @​ai-sdk/provider-utils@​5.0.32

4.0.43

Patch Changes

... (truncated)

Commits

Updates @ai-sdk/fal from 3.0.12 to 3.0.37

Release notes

Sourced from @​ai-sdk/fal's releases.

@​ai-sdk/gmicloud@​3.0.15

Patch Changes

  • Updated dependencies [e5a22f0]
    • @​ai-sdk/openai-compatible@​3.0.44
Changelog

Sourced from @​ai-sdk/fal's changelog.

3.0.37

Patch Changes

  • Updated dependencies [6bcc0f8]
    • @​ai-sdk/provider-utils@​5.0.36

3.0.36

Patch Changes

  • Updated dependencies [5190b67]
    • @​ai-sdk/provider@​4.0.10
    • @​ai-sdk/provider-utils@​5.0.35

3.0.35

Patch Changes

  • Updated dependencies [aa45741]
    • @​ai-sdk/provider@​4.0.9
    • @​ai-sdk/provider-utils@​5.0.34

3.0.34

Patch Changes

  • Updated dependencies [90192f1]
    • @​ai-sdk/provider-utils@​5.0.33

3.0.33

Patch Changes

  • Updated dependencies [3e125ba]
    • @​ai-sdk/provider-utils@​5.0.32

3.0.32

Patch Changes

  • Updated dependencies [a9782e1]
  • Updated dependencies [35841f5]
  • Updated dependencies [d2f3353]
    • @​ai-sdk/provider-utils@​5.0.31

3.0.31

Patch Changes

... (truncated)

Commits

Updates @ai-sdk/gateway from 4.0.23 to 4.0.74

Changelog

Sourced from @​ai-sdk/gateway's changelog.

4.0.74

Patch Changes

  • a7e324b: chore(provider/gateway): update gateway model settings files

4.0.73

Patch Changes

  • 5484f27: chore(provider/gateway): update gateway model settings files
  • 36eb7ee: chore(provider/gateway): update gateway model settings files
  • 622fa7f: feat(google): add gemini-3.8-flash model

4.0.72

Patch Changes

  • 4d25a08: feat(anthropic): add fable 5.1 support
  • Updated dependencies [6bcc0f8]
    • @​ai-sdk/provider-utils@​5.0.36

4.0.71

Patch Changes

  • Updated dependencies [5190b67]
    • @​ai-sdk/provider@​4.0.10
    • @​ai-sdk/provider-utils@​5.0.35

4.0.70

Patch Changes

  • 1329d5a: chore(provider/gateway): update gateway model settings files

4.0.69

Patch Changes

  • d2507af: chore(provider/gateway): update gateway model settings files
  • Updated dependencies [aa45741]
    • @​ai-sdk/provider@​4.0.9
    • @​ai-sdk/provider-utils@​5.0.34

4.0.68

Patch Changes

  • 805bbfc: chore(provider/gateway): update gateway model settings files

... (truncated)

Commits

Updates @ai-sdk/google from 4.0.18 to 4.0.63

Changelog

Sourced from @​ai-sdk/google's changelog.

4.0.63

Patch Changes

  • 18ad19c: feat(google): support agentic video processing in the Interactions API
  • 048ce06: feat(batch): surface the uploaded input file on the batch start result (providerMetadata.<provider>.inputFileId / inputFileExpiresAt) and accept an inputFileExpiresAfter provider option on the OpenAI and xAI batch input file upload
  • 622fa7f: feat(google): add gemini-3.8-flash model

4.0.62

Patch Changes

  • Updated dependencies [6bcc0f8]
    • @​ai-sdk/provider-utils@​5.0.36

4.0.61

Patch Changes

  • 5190b67: feat(provider): extend the FilesV4 interface with optional getFileMetadata, downloadFile (streaming), and deleteFile operations, plus abortSignal/headers call options and a { type: 'stream' } upload data variant; upload results now expose byteSize, createdAt, and expiresAt (also surfaced by the core uploadFile() helper, which now forwards abortSignal/headers); add postMultipartStreamToApi (streaming multipart uploads with deterministic part ordering and failure-path stream teardown), deleteFromApi, and createBinaryStreamResponseHandler to provider-utils
  • Updated dependencies [5190b67]
    • @​ai-sdk/provider@​4.0.10
    • @​ai-sdk/provider-utils@​5.0.35

4.0.60

Patch Changes

  • e07b577: feat: add tool calling support to batch

4.0.59

Patch Changes

  • ca29e9b: fix(google): support video response formats in Gemini Interactions

4.0.58

Patch Changes

  • Updated dependencies [aa45741]
    • @​ai-sdk/provider@​4.0.9
    • @​ai-sdk/provider-utils@​5.0.34

4.0.57

Patch Changes

  • 949ef93: fix(google): recognize Google Files URLs when using a baseUrl
  • Updated dependencies [90192f1]

... (truncated)

Commits

Updates @ai-sdk/mistral from 4.0.13 to 4.0.39

Changelog

Sourced from @​ai-sdk/mistral's changelog.

4.0.39

Patch Changes

  • Updated dependencies [6bcc0f8]
    • @​ai-sdk/provider-utils@​5.0.36

4.0.38

Patch Changes

  • Updated dependencies [5190b67]
    • @​ai-sdk/provider@​4.0.10
    • @​ai-sdk/provider-utils@​5.0.35

4.0.37

Patch Changes

  • Updated dependencies [aa45741]
    • @​ai-sdk/provider@​4.0.9
    • @​ai-sdk/provider-utils@​5.0.34

4.0.36

Patch Changes

  • e83d6dc: Preserve complete Mistral chat usage objects in raw usage metadata.
  • Updated dependencies [90192f1]
    • @​ai-sdk/provider-utils@​5.0.33

4.0.35

Patch Changes

  • Updated dependencies [3e125ba]
    • @​ai-sdk/provider-utils@​5.0.32

4.0.34

Patch Changes

  • ff35434: Add the promptCacheKey chat provider option for Mistral prompt cache affinity.
  • Updated dependencies [a9782e1]
  • Updated dependencies [35841f5]
  • Updated dependencies [d2f3353]
    • @​ai-sdk/provider-utils@​5.0.31

4.0.33

... (truncated)

Commits

Updates @ai-sdk/openai from 4.0.16 to 4.0.58

Changelog

Sourced from @​ai-sdk/openai's changelog.

4.0.58

Patch Changes

  • b54e551: fix(openai): support documented Responses image generation options
  • 17d3436: feat(openai): add support for ultrafast service tier

4.0.57

Patch Changes

  • 048ce06: feat(batch): surface the uploaded input file on the batch start result (providerMetadata.<provider>.inputFileId / inputFileExpiresAt) and accept an inputFileExpiresAfter provider option on the OpenAI and xAI batch input file upload
  • 7243530: fix(openai): preserve complete Responses API raw usage objects

4.0.56

Patch Changes

  • Updated dependencies [6bcc0f8]
    • @​ai-sdk/provider-utils@​5.0.36

4.0.55

Patch Changes

  • 3fc40db: feat(openai): implement getFileMetadata, downloadFile (streaming), and deleteFile on the OpenAI files interface, support streaming uploads via { type: 'stream' } data, expose byteSize/createdAt/expiresAt on upload results, and thread abortSignal/headers through all file operations; blank and dot-segment file ids are rejected/encoded so they cannot retarget request paths
  • Updated dependencies [5190b67]
    • @​ai-sdk/provider@​4.0.10
    • @​ai-sdk/provider-utils@​5.0.35

4.0.54

Patch Changes

  • f6fac50: fix(openai): handle null usage in responses
  • e07b577: feat: add tool calling support to batch

4.0.53

Patch Changes

  • 7439d7a: Fix workflow deserialization for OpenAI Responses models.

4.0.52

Patch Changes

  • 1c68540: Preserve explicit prompt cache breakpoints on scalar Responses tool results.
  • Updated dependencies [aa45741]
    • @​ai-sdk/provider@​4.0.9

... (truncated)

Commits

Updates @ai-sdk/react from 4.0.34 to 4.0.95

Release notes

Sourced from @​ai-sdk/react's releases.

@​ai-sdk/react@​4.0.95

Patch Changes

  • d1904d3: fix(ai): surface fallback errors for empty HTTP response bodies
  • Updated dependencies [a51cc94]
  • Updated dependencies [809e922]
  • Updated dependencies [d1904d3]
  • Updated dependencies [84e5a79]
  • Updated dependencies [a8e8ad0]
    • ai@7.0.92
    • @​ai-sdk/mcp@​2.0.44
Changelog

Sourced from @​ai-sdk/react's changelog.

4.0.95

Patch Changes

  • d1904d3: fix(ai): surface fallback errors for empty HTTP response bodies
  • Updated dependencies [a51cc94]
  • Updated dependencies [809e922]
  • Updated dependencies [d1904d3]
  • Updated dependencies [84e5a79]
  • Updated dependencies [a8e8ad0]
    • ai@7.0.92
    • @​ai-sdk/mcp@​2.0.44

4.0.94

Patch Changes

  • Updated dependencies [802af1e]
    • ai@7.0.91

4.0.93

Patch Changes

  • Updated dependencies [6bcc0f8]
    • @​ai-sdk/provider-utils@​5.0.36
    • ai@7.0.90
    • @​ai-sdk/mcp@​2.0.43

4.0.92

Patch Changes

  • Updated dependencies [5190b67]
    • @​ai-sdk/provider@​4.0.10
    • @​ai-sdk/provider-utils@​5.0.35
    • ai@7.0.89
    • @​ai-sdk/mcp@​2.0.42

4.0.91

Patch Changes

  • Updated dependencies [8b6b756]
  • Updated dependencies [e07b577]
    • ai@7.0.88

4.0.90

Patch Changes

... (truncated)

Commits

Updates @composio/core from 0.14.0 to 0.18.0

Release notes

Sourced from @​composio/core's releases.

@​composio/core@​0.18.0

Minor Changes

  • 04817cb: Fix strict-mode tool schemas for OpenAI structured outputs. Strict normalization now applies OpenAI's contract at every depth (nested objects, anyOf branches, array items, inlined $ref/$defs): every object lists all of its properties in required and sets additionalProperties: false, so tools with nested or optional parameters no longer produce schemas the API rejects with a 400. Optional parameters are no longer dropped: they stay available and are widened to accept null, the emulation of optional fields OpenAI documents, and the strict providers drop a null argument the tool's own schema does not accept before executing the tool. Tools whose schema strict mode cannot express (objects with arbitrary keys, allOf, prefixItems, unresolved $refs) are sent without strict mode with a warning naming the tool and path, instead of being narrowed. @composio/core exports the new toStrictJsonSchema() and omitNullToolArguments() utilities; removeNonRequiredProperties is unchanged for other callers. The Python OpenAIResponsesProvider gains a matching opt-in strict=True constructor flag that also emits strict: true on the wrapped tool.

Patch Changes

  • 449f4e1: Block automatic uploads when a sensitive directory or file name is hidden by symlink resolution.
  • 9545806: Bound the best-effort telemetry requests with a timeout so a stalled telemetry endpoint cannot leave an SDK call pending indefinitely.
  • db7b576: Declare Node.js 22.22.3 as the minimum supported runtime for every published TypeScript package so package managers surface incompatible runtimes before users encounter ESM loading failures.
  • fe66cbe: Omit empty-string file-uploadable arguments from tool execution requests instead of forwarding them to the backend, which rejected them with "Input should be a valid dictionary or instance of FileUploadable". This now also applies when dangerouslyAllowAutoUploadDownloadFiles is off, and with it on an empty value is no longer attempted as an upload.
  • c0f1609: Fix three ComposioError subclasses (ComposioToolVersionRequiredError, JsonSchemaToZodError, JsonSchemaRefResolutionError) that omitted their this.name assignment and therefore reported name as 'ComposioError' instead of their own class name, mis-grouping distinct error types in error telemetry.
  • d544006: Close a DNS-rebinding window in the SSRF guard: the address validated by assertSafeFetchTarget is now the address ssrfSafeFetch connects to, so a hostname is no longer resolved a second time between the check and the connection. Each redirect hop is re-validated and re-pinned. The request still carries the original hostname in Host and TLS SNI, so certificate verification is unchanged. Hops whose effective dispatcher is a configured route — a caller-supplied dispatcher, a global ProxyAgent/EnvHttpProxyAgent, or NODE_USE_ENV_PROXY env-proxy mode — keep the pre-flight check only, mirroring the Python guard's documented proxy residual.
  • Updated dependencies [db7b576]
    • @​composio/json-schema-to-zod@​0.3.1
Changelog

Sourced from @​composio/core's changelog.

0.18.0

Minor Changes

  • 04817cb: Fix strict-mode tool schemas for OpenAI structured outputs. Strict normalization now applies OpenAI's contract at every depth (nested objects, anyOf branches, array items, inlined $ref/$defs): every object lists all of its properties in required and sets additionalProperties: false, so tools with nested or optional parameters no longer produce schemas the API rejects with a 400. Optional parameters are no longer dropped: they stay available and are widened to accept null, the emulation of optional fields OpenAI documents, and the strict providers drop a null argument the tool's own schema does not accept before executing the tool. Tools whose schema strict mode cannot express (objects with arbitrary keys, allOf, prefixItems, unresolved $refs) are sent without strict mode with a warning naming the tool and path, instead of being narrowed. @composio/core exports the new toStrictJsonSchema() and omitNullToolArguments() utilities; removeNonRequiredProperties is unchanged for other callers. The Python OpenAIResponsesProvider gains a matching opt-in strict=True constructor flag that also emits strict: true on the wrapped tool.

Patch Changes

  • 449f4e1: Block automatic uploads when a sensitive directory or file name is hidden by symlink resolution.
  • 9545806: Bound the best-effort telemetry requests with a timeout so a stalled telemetry endpoint cannot leave an SDK call pending indefinitely.
  • db7b576: Declare Node.js 22.22.3 as the minimum supported runtime for every published TypeScript package so package managers surface incompatible runtimes before users encounter ESM loading failures.
  • fe66cbe: Omit empty-string file-uploadable arguments from tool execution requests instead of forwarding them to the backend, which rejected them with "Input should be a valid dictionary or instance of FileUploadable". This now also applies when dangerouslyAllowAutoUploadDownloadFiles is off, and with it on an empty value is no longer attempted as an upload.
  • c0f1609: Fix three ComposioError subclasses (ComposioToolVersionRequiredError, JsonSchemaToZodError, JsonSchemaRefResolutionError) that omitted their this.name assignment and therefore reported name as 'ComposioError' instead of their own class name, mis-grouping distinct error types in error telemetry.
  • d544006: Close a DNS-rebinding window in the SSRF guard: the address validated by assertSafeFetchTarget is now the address ssrfSafeFetch connects to, so a hostname is no longer resolved a second time between the check and the connection. Each redirect hop is re-validated and re-pinned. The request still carries the original hostname in Host and TLS SNI, so certificate verification is unchanged. Hops whose effective dispatcher is a configured route — a caller-supplied dispatcher, a global ProxyAgent/EnvHttpProxyAgent, or NODE_USE_ENV_PROXY env-proxy mode — keep the pre-flight check only, mirroring the Python guard's documented proxy residual.
  • Updated dependencies [db7b576]
    • @​composio/json-schema-to-zod@​0.3.1

0.17.0

Minor Changes

  • 760f8d0: Allow OpenAI and Anthropic provider tool-call helpers to execute through a supplied Tool Router session. Session meta-tools now retain their session context while provider argument normalization remains intact; existing user-ID calls continue to use direct execution. Anthropic helper failures now preserve their error text in { error } results without changing successful payloads. Custom provider subclasses overriding executeToolCall or handleToolCalls may require updates because these methods now accept session targets.

Patch Changes

  • 6ba9179: Validate the URLs that come from API responses before fetching them. Tool-execution downloads (s3Url), S3 presigned uploads (new_presigned_url), Tool Router session file downloads (RemoteFile.buffer() / blob() / text() / save()) and session file uploads (upload_url) now go through the same SSRF guard that already covered user-supplied URLs, so a response naming a private, loopback, or link-local address is refused instead of fetched. Redirect hops are re-validated. Edge runtimes keep their current behavior: session file transfers are not blocked there, since a Worker cannot resolve DNS to check and its fetch does not originate inside the caller's network.

0.16.0

Minor Changes

  • 5e57815: Keep free-form object roots, patternProperties, and additionalProperties when parsing a tool schema.

    ToolSchema.parse used to reject a bare { "type": "object" } root, drop root patternProperties as an unknown key, and reject a root additionalProperties written as a schema instead of a boolean. Free-form roots now parse successfully, and both constraints survive parsing exactly as written. The public ToolSchema type now makes properties optional to reflect those valid property-less object schemas.

    This matters downstream. Every provider reads inputParameters after parsing, so a tool that declares dynamic keys had those rules stripped before the model ever saw them.

    An omitted additionalProperties still stays omitted. The parser does not invent a value, because each converter decides its own default.

    What no longer works

    Parsing no longer fails on a schema-valued root additionalProperties.

    const tool = ToolSchema.parse({
      slug: 'MY_TOOL',
      inputParameters: {
        type: 'object',
        properties: { name: { type: 'string' } },
        additionalProperties: { type: 'number' },

... (truncated)

Commits
  • dbe5a63 Release: update version
  • 08306f8 Merge branch 'next' into fix/error-subclass-names
  • 3c7b938 Merge branch 'next' into fix/telemetry-request-timeout
  • cf42328 fix(telemetry): clear timeout on serialization errors
  • 9feca8f fix(json-schema): accept document-root references in strict mode
  • 81631f8 Merge branch 'next' into fix/strict-mode-keep-optional-parameters
  • c088076 fix(docs): escape pipes in generated text
  • 8fe03ef test(json-schema): add strict-mode edge cases enumerated with a second model
  • b47d513 fix(core): report every construct strict mode cannot rewrite
  • 678ac72 fix(docs): complete generated string escaping
  • Additional commits viewable in compare view

Updates @composio/vercel from 0.11.1 to 0.11.2

Release notes

Sourced from @​composio/vercel's releases.

@​composio/vercel@​0.11.2

Patch Changes

  • db7b576: Declare Node.js 22.22.3 as the minimum supported runtime for every published TypeScript package so package managers surface incompatible runtimes before users encounter ESM loading failures.
  • 04817cb: Fix strict-mode tool schemas for OpenAI structured outputs. Strict normalization now applies OpenAI's contract at every depth (nested objects, anyOf branches, array items, inlined $ref/$defs): every object lists all of its properties in required and sets additionalProperties: false, so tools with nested or optional parameters no longer produce schemas the API rejects with a 400. Optional parameters are no longer dropped: they stay available and are widened to accept null, the emulation of optional fields OpenAI documents, and the strict providers drop a null argument the tool's own schema does not accept before executing the tool. Tools whose schema strict mode cannot express (objects with arbitrary keys, allOf, prefixItems, unresolved $refs) are sent without strict mode with a warning naming the tool and path, instead of being narrowed. @composio/core exports the new toStrictJsonSchema() and omitNullToolArguments() utilities; removeNonRequiredProperties is unchanged for other callers. The Python OpenAIResponsesProvider gains a matching opt-in strict=True constructor flag that also emits strict: true on the wrapped tool.
Changelog

Sourced from @​composio/vercel's changelog.

0.11.2

Patch Changes

  • db7b576: Declare Node.js 22.22.3 as the minimum supported runtime for every published TypeScript package so package managers surface incompatible runtimes before users encounter ESM loading failures.
  • 04817cb: Fix strict-mode tool schemas for OpenAI structured outputs. Strict normalization now applies OpenAI's contract at every depth (nested objects, anyOf branches, array items, inlined $ref/$defs): every object lists all of its properties in required and sets additionalProperties: false, so tools with nested or optional parameters no longer produce schemas the API rejects with a 400. Optional parameters are no longer dropped: they stay available and are widened to accept null, the emulation of optional fields OpenAI documents, and the strict providers drop a null argument the tool's own schema does not accept before executing the tool. Tools whose schema strict mode cannot express (objects with arbitrary keys, allOf, prefixItems, unresolved $refs) are sent without strict mode with a warning naming the tool and path, instead of being narrowed. @composio/core exports the new toStrictJsonSchema() and omitNullToolArguments() utilities; removeNonRequiredProperties is unchanged for other callers. The Python OpenAIResponsesProvider gains a matching opt-in strict=True constructor flag that also emits strict: true on the wrapped tool.
Commits
  • dbe5a63 Release: update version
  • a93e8df docs(providers): clarify strict schema behavior
  • 81631f8 Merge branch 'next' into fix/strict-mode-keep-optional-parameters
  • e6fb9f9 feat(core): keep $defs recursion under strict mode
  • fb30e8f fix(vercel): keep optional parameters available under strict mode
  • db7b576 fix(ts): declare the supported Node.js engine floor (#4219)
  • 04817cb fix(openai): recursive strict-mode schema normalization for structured output...
  • 1503786 refactor(core): forbid explicit any and type JSON Schema recursively (#3968)
  • See full diff in compare view

Updates @convex-dev/auth from 0.0.94 to 0.0.95

Changelog

Sourced from @​convex-dev/auth's changelog.

0.0.95

  • fix: a failed OTP/magic-link sign-in no longer consumes the verification code it rejected
  • fix: signIn called with only a code now resolves with { tokens: null } for every failure instead of rejecting for some
Commits

Updates @convex-dev/resend from 0.2.5 to 0.2.8

Changelog

Sourced from @​convex-dev/resend's changelog.

0.2.8

  • Added an optional idempotencyKey to sendEmail for enqueue-time dedupe: a duplicate enqueue with the same key returns the existing EmailId instead of sending twice (#107).

0.2.7

  • Bumps Workpool dependency and convex peer dependency

0.2.6

  • forward message_id from Resend webhook payloads to onEmailEvent (#101)
Commits
Maintainer changes

This version was pushed to npm by reece-convex, a new releaser for @​convex-dev/resend since your current version.


Updates `@polar-sh...

Description has been truncated


Summary by cubic

Bumps 64 non-major dependencies across runtime, AI SDK, and dev tooling packages.

Dependencies

  • @composio/core 0.18.0 fixes strict-mode OpenAI structured-output schemas, hardens the SSRF guard, and declares Node.js 22.22.3+ as the minimum runtime.
  • @convex-dev/auth 0.0.95 stops a failed OTP/magic-link sign-in from consuming the rejected verification code.
  • AI SDK providers add new model IDs (Gemini 3.8 flash, Fable 5.1) and expand file operations with metadata, streaming download, and delete support.

Written for commit b44aa39. Summary will update on new commits.

Review in cubic

Bumps the non-major group with 64 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@ai-sdk/anthropic](https://github.com/vercel/ai/tree/HEAD/packages/anthropic) | `4.0.16` | `4.0.49` |
| [@ai-sdk/fal](https://github.com/vercel/ai/tree/HEAD/packages/fal) | `3.0.12` | `3.0.37` |
| [@ai-sdk/gateway](https://github.com/vercel/ai/tree/HEAD/packages/gateway) | `4.0.23` | `4.0.74` |
| [@ai-sdk/google](https://github.com/vercel/ai/tree/HEAD/packages/google) | `4.0.18` | `4.0.63` |
| [@ai-sdk/mistral](https://github.com/vercel/ai/tree/HEAD/packages/mistral) | `4.0.13` | `4.0.39` |
| [@ai-sdk/openai](https://github.com/vercel/ai/tree/HEAD/packages/openai) | `4.0.16` | `4.0.58` |
| [@ai-sdk/react](https://github.com/vercel/ai/tree/HEAD/packages/react) | `4.0.34` | `4.0.95` |
| [@composio/core](https://github.com/ComposioHQ/composio/tree/HEAD/ts/packages/core) | `0.14.0` | `0.18.0` |
| [@composio/vercel](https://github.com/ComposioHQ/composio/tree/HEAD/ts/packages/providers/vercel) | `0.11.1` | `0.11.2` |
| [@convex-dev/auth](https://github.com/get-convex/convex-auth) | `0.0.94` | `0.0.95` |
| [@convex-dev/resend](https://github.com/get-convex/resend) | `0.2.5` | `0.2.8` |
| [@polar-sh/checkout](https://github.com/polarsource/polar/tree/HEAD/clients/packages/checkout) | `0.4.0` | `0.4.1` |
| [@polar-sh/sdk](https://github.com/polarsource/polar-js) | `0.48.1` | `0.49.0` |
| [@radix-ui/react-alert-dialog](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/alert-dialog) | `1.1.20` | `1.1.23` |
| [@radix-ui/react-avatar](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/avatar) | `1.2.3` | `1.2.6` |
| [@radix-ui/react-checkbox](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/checkbox) | `1.3.8` | `1.3.11` |
| [@radix-ui/react-dialog](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dialog) | `1.1.20` | `1.1.23` |
| [@radix-ui/react-dropdown-menu](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dropdown-menu) | `2.1.21` | `2.1.24` |
| [@radix-ui/react-hover-card](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/hover-card) | `1.1.20` | `1.1.23` |
| [@radix-ui/react-label](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/label) | `2.1.12` | `2.1.15` |
| [@radix-ui/react-popover](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/popover) | `1.1.20` | `1.1.23` |
| [@radix-ui/react-progress](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/progress) | `1.1.13` | `1.1.16` |
| [@radix-ui/react-radio-group](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/radio-group) | `1.4.4` | `1.4.7` |
| [@radix-ui/react-scroll-area](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/scroll-area) | `1.2.15` | `1.2.18` |
| [@radix-ui/react-select](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/select) | `2.3.4` | `2.3.7` |
| [@radix-ui/react-separator](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/separator) | `1.1.12` | `1.1.15` |
| [@radix-ui/react-slot](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/slot) | `1.3.0` | `1.3.3` |
| [@radix-ui/react-switch](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/switch) | `1.3.4` | `1.3.7` |
| [@radix-ui/react-tabs](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/tabs) | `1.1.18` | `1.1.21` |
| [@radix-ui/react-tooltip](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/tooltip) | `1.2.13` | `1.2.16` |
| [@radix-ui/react-use-controllable-state](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/use-controllable-state) | `1.2.4` | `1.2.6` |
| [@tanstack/react-devtools](https://github.com/TanStack/devtools/tree/HEAD/packages/react-devtools) | `0.10.8` | `0.10.12` |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.101.2` | `5.102.8` |
| [@tanstack/react-query-devtools](https://github.com/TanStack/query/tree/HEAD/packages/react-query-devtools) | `5.101.2` | `5.102.8` |
| [@tanstack/react-router](https://github.com/TanStack/router/tree/HEAD/packages/react-router) | `1.170.18` | `1.170.32` |
| [@tanstack/react-router-devtools](https://github.com/TanStack/router/tree/HEAD/packages/react-router-devtools) | `1.167.0` | `1.167.1` |
| [@tanstack/react-router-ssr-query](https://github.com/TanStack/router/tree/HEAD/packages/react-router-ssr-query) | `1.167.1` | `1.167.2` |
| [@tanstack/react-start](https://github.com/TanStack/router/tree/HEAD/packages/react-start) | `1.168.32` | `1.168.49` |
| [@upstash/redis](https://github.com/upstash/redis-js) | `1.38.0` | `1.38.3` |
| [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `7.0.31` | `7.0.92` |
| [convex](https://github.com/get-convex/convex-backend/tree/HEAD/npm-packages/convex) | `1.42.3` | `1.45.0` |
| [dayjs](https://github.com/iamkun/dayjs) | `1.11.21` | `1.11.23` |
| [exa-js](https://github.com/exa-labs/exa-js) | `2.16.0` | `2.19.0` |
| [katex](https://github.com/KaTeX/KaTeX) | `0.18.1` | `0.18.5` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.25.0` | `1.40.0` |
| [marked](https://github.com/markedjs/marked) | `18.0.6` | `18.0.11` |
| [posthog-js](https://github.com/PostHog/posthog-js) | `1.404.1` | `1.426.3` |
| [posthog-node](https://github.com/PostHog/posthog-js/tree/HEAD/packages/node) | `5.45.2` | `5.51.6` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.2.8` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.17` | `19.2.18` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.2.8` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.3` | `19.2.7` |
| [sonner](https://github.com/emilkowalski/sonner) | `2.0.7` | `2.0.8` |
| [streamdown](https://github.com/vercel/streamdown/tree/HEAD/packages/streamdown) | `2.5.0` | `2.6.0` |
| [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.5.4` |
| [zustand](https://github.com/pmndrs/zustand) | `5.0.14` | `5.0.15` |
| [@tanstack/devtools-vite](https://github.com/TanStack/devtools/tree/HEAD/packages/devtools-vite) | `0.8.1` | `0.8.5` |
| [@testing-library/react](https://github.com/testing-library/react-testing-library) | `16.3.2` | `16.3.3` |
| [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.0.3` | `6.1.1` |
| [lint-staged](https://github.com/lint-staged/lint-staged) | `17.1.0` | `17.4.1` |
| [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt) | `0.59.0` | `0.66.0` |
| [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.74.0` | `1.81.0` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.1.5` | `8.2.2` |
| [vite-plugin-oxlint](https://github.com/52-entertainment/vite-plugin-oxlint) | `2.1.2` | `2.2.0` |



Updates `@ai-sdk/anthropic` from 4.0.16 to 4.0.49
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/anthropic/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/anthropic@4.0.49/packages/anthropic)

Updates `@ai-sdk/fal` from 3.0.12 to 3.0.37
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/fal/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/fal@3.0.37/packages/fal)

Updates `@ai-sdk/gateway` from 4.0.23 to 4.0.74
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/gateway/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/gateway@4.0.74/packages/gateway)

Updates `@ai-sdk/google` from 4.0.18 to 4.0.63
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/google/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/google@4.0.63/packages/google)

Updates `@ai-sdk/mistral` from 4.0.13 to 4.0.39
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/mistral/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/mistral@4.0.39/packages/mistral)

Updates `@ai-sdk/openai` from 4.0.16 to 4.0.58
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/openai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/openai@4.0.58/packages/openai)

Updates `@ai-sdk/react` from 4.0.34 to 4.0.95
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/react@4.0.95/packages/react)

Updates `@composio/core` from 0.14.0 to 0.18.0
- [Release notes](https://github.com/ComposioHQ/composio/releases)
- [Changelog](https://github.com/ComposioHQ/composio/blob/next/ts/packages/core/CHANGELOG.md)
- [Commits](https://github.com/ComposioHQ/composio/commits/@composio/core@0.18.0/ts/packages/core)

Updates `@composio/vercel` from 0.11.1 to 0.11.2
- [Release notes](https://github.com/ComposioHQ/composio/releases)
- [Changelog](https://github.com/ComposioHQ/composio/blob/next/ts/packages/providers/vercel/CHANGELOG.md)
- [Commits](https://github.com/ComposioHQ/composio/commits/@composio/vercel@0.11.2/ts/packages/providers/vercel)

Updates `@convex-dev/auth` from 0.0.94 to 0.0.95
- [Changelog](https://github.com/get-convex/convex-auth/blob/main/CHANGELOG.md)
- [Commits](get-convex/convex-auth@v0.0.94...v0.0.95)

Updates `@convex-dev/resend` from 0.2.5 to 0.2.8
- [Changelog](https://github.com/get-convex/resend/blob/main/CHANGELOG.md)
- [Commits](get-convex/resend@v0.2.5...v0.2.8)

Updates `@polar-sh/checkout` from 0.4.0 to 0.4.1
- [Release notes](https://github.com/polarsource/polar/releases)
- [Changelog](https://github.com/polarsource/polar/blob/main/clients/packages/checkout/CHANGELOG.md)
- [Commits](https://github.com/polarsource/polar/commits/@polar-sh/checkout@0.4.1/clients/packages/checkout)

Updates `@polar-sh/sdk` from 0.48.1 to 0.49.0
- [Release notes](https://github.com/polarsource/polar-js/releases)
- [Changelog](https://github.com/polarsource/polar-js/blob/main/RELEASES.md)
- [Commits](polarsource/polar-js@v0.48.1...v0.49.0)

Updates `@radix-ui/react-alert-dialog` from 1.1.20 to 1.1.23
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/alert-dialog/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/alert-dialog)

Updates `@radix-ui/react-avatar` from 1.2.3 to 1.2.6
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/avatar/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/avatar)

Updates `@radix-ui/react-checkbox` from 1.3.8 to 1.3.11
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/checkbox/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/checkbox)

Updates `@radix-ui/react-dialog` from 1.1.20 to 1.1.23
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dialog/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dialog)

Updates `@radix-ui/react-dropdown-menu` from 2.1.21 to 2.1.24
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dropdown-menu/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dropdown-menu)

Updates `@radix-ui/react-hover-card` from 1.1.20 to 1.1.23
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/hover-card/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/hover-card)

Updates `@radix-ui/react-label` from 2.1.12 to 2.1.15
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/label/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/label)

Updates `@radix-ui/react-popover` from 1.1.20 to 1.1.23
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/popover/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/popover)

Updates `@radix-ui/react-progress` from 1.1.13 to 1.1.16
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/progress/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/progress)

Updates `@radix-ui/react-radio-group` from 1.4.4 to 1.4.7
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/radio-group/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/radio-group)

Updates `@radix-ui/react-scroll-area` from 1.2.15 to 1.2.18
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/scroll-area/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/scroll-area)

Updates `@radix-ui/react-select` from 2.3.4 to 2.3.7
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/select/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/select)

Updates `@radix-ui/react-separator` from 1.1.12 to 1.1.15
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/separator/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/separator)

Updates `@radix-ui/react-slot` from 1.3.0 to 1.3.3
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/slot/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/slot)

Updates `@radix-ui/react-switch` from 1.3.4 to 1.3.7
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/switch/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/switch)

Updates `@radix-ui/react-tabs` from 1.1.18 to 1.1.21
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/tabs/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/tabs)

Updates `@radix-ui/react-tooltip` from 1.2.13 to 1.2.16
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/tooltip/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/tooltip)

Updates `@radix-ui/react-use-controllable-state` from 1.2.4 to 1.2.6
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/use-controllable-state/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/use-controllable-state)

Updates `@tanstack/react-devtools` from 0.10.8 to 0.10.12
- [Release notes](https://github.com/TanStack/devtools/releases)
- [Changelog](https://github.com/TanStack/devtools/blob/main/packages/react-devtools/CHANGELOG.md)
- [Commits](https://github.com/TanStack/devtools/commits/@tanstack/react-devtools@0.10.12/packages/react-devtools)

Updates `@tanstack/react-query` from 5.101.2 to 5.102.8
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.102.8/packages/react-query)

Updates `@tanstack/react-query-devtools` from 5.101.2 to 5.102.8
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query-devtools/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query-devtools@5.102.8/packages/react-query-devtools)

Updates `@tanstack/react-router` from 1.170.18 to 1.170.32
- [Release notes](https://github.com/TanStack/router/releases)
- [Changelog](https://github.com/TanStack/router/blob/main/packages/react-router/CHANGELOG.md)
- [Commits](https://github.com/TanStack/router/commits/@tanstack/react-router@1.170.32/packages/react-router)

Updates `@tanstack/react-router-devtools` from 1.167.0 to 1.167.1
- [Release notes](https://github.com/TanStack/router/releases)
- [Changelog](https://github.com/TanStack/router/blob/main/packages/react-router-devtools/CHANGELOG.md)
- [Commits](https://github.com/TanStack/router/commits/@tanstack/react-router-devtools@1.167.1/packages/react-router-devtools)

Updates `@tanstack/react-router-ssr-query` from 1.167.1 to 1.167.2
- [Release notes](https://github.com/TanStack/router/releases)
- [Changelog](https://github.com/TanStack/router/blob/main/packages/react-router-ssr-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/router/commits/@tanstack/react-router-ssr-query@1.167.2/packages/react-router-ssr-query)

Updates `@tanstack/react-start` from 1.168.32 to 1.168.49
- [Release notes](https://github.com/TanStack/router/releases)
- [Changelog](https://github.com/TanStack/router/blob/main/packages/react-start/CHANGELOG.md)
- [Commits](https://github.com/TanStack/router/commits/@tanstack/react-start@1.168.49/packages/react-start)

Updates `@upstash/redis` from 1.38.0 to 1.38.3
- [Release notes](https://github.com/upstash/redis-js/releases)
- [Commits](https://github.com/upstash/redis-js/compare/@upstash/redis@1.38.0...@upstash/redis@1.38.3)

Updates `ai` from 7.0.31 to 7.0.92
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@7.0.92/packages/ai)

Updates `convex` from 1.42.3 to 1.45.0
- [Release notes](https://github.com/get-convex/convex-backend/releases)
- [Changelog](https://github.com/get-convex/convex-backend/blob/main/npm-packages/convex/CHANGELOG.md)
- [Commits](https://github.com/get-convex/convex-backend/commits/HEAD/npm-packages/convex)

Updates `dayjs` from 1.11.21 to 1.11.23
- [Release notes](https://github.com/iamkun/dayjs/releases)
- [Changelog](https://github.com/iamkun/dayjs/blob/v1.11.23/CHANGELOG.md)
- [Commits](iamkun/dayjs@v1.11.21...v1.11.23)

Updates `exa-js` from 2.16.0 to 2.19.0
- [Release notes](https://github.com/exa-labs/exa-js/releases)
- [Changelog](https://github.com/exa-labs/exa-js/blob/master/CHANGELOG.md)
- [Commits](exa-labs/exa-js@v2.16.0...v2.19.0)

Updates `katex` from 0.18.1 to 0.18.5
- [Release notes](https://github.com/KaTeX/KaTeX/releases)
- [Changelog](https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md)
- [Commits](KaTeX/KaTeX@v0.18.1...v0.18.5)

Updates `lucide-react` from 1.25.0 to 1.40.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.40.0/packages/lucide-react)

Updates `marked` from 18.0.6 to 18.0.11
- [Release notes](https://github.com/markedjs/marked/releases)
- [Commits](markedjs/marked@v18.0.6...v18.0.11)

Updates `posthog-js` from 1.404.1 to 1.426.3
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/compare/posthog-js@1.404.1...posthog-js@1.426.3)

Updates `posthog-node` from 5.45.2 to 5.51.6
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/packages/node/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/commits/posthog-node@5.51.6/packages/node)

Updates `react` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react)

Updates `@types/react` from 19.2.17 to 19.2.18
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-dom` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom)

Updates `@types/react-dom` from 19.2.3 to 19.2.7
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `sonner` from 2.0.7 to 2.0.8
- [Release notes](https://github.com/emilkowalski/sonner/releases)
- [Commits](emilkowalski/sonner@v2.0.7...v2.0.8)

Updates `streamdown` from 2.5.0 to 2.6.0
- [Release notes](https://github.com/vercel/streamdown/releases)
- [Changelog](https://github.com/vercel/streamdown/blob/main/packages/streamdown/CHANGELOG.md)
- [Commits](https://github.com/vercel/streamdown/commits/streamdown@2.6.0/packages/streamdown)

Updates `zod` from 4.4.3 to 4.5.4
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.4.3...v4.5.4)

Updates `zustand` from 5.0.14 to 5.0.15
- [Release notes](https://github.com/pmndrs/zustand/releases)
- [Commits](pmndrs/zustand@v5.0.14...v5.0.15)

Updates `@tanstack/devtools-vite` from 0.8.1 to 0.8.5
- [Release notes](https://github.com/TanStack/devtools/releases)
- [Changelog](https://github.com/TanStack/devtools/blob/main/packages/devtools-vite/CHANGELOG.md)
- [Commits](https://github.com/TanStack/devtools/commits/@tanstack/devtools-vite@0.8.5/packages/devtools-vite)

Updates `@testing-library/react` from 16.3.2 to 16.3.3
- [Release notes](https://github.com/testing-library/react-testing-library/releases)
- [Changelog](https://github.com/testing-library/react-testing-library/blob/main/CHANGELOG.md)
- [Commits](testing-library/react-testing-library@v16.3.2...v16.3.3)

Updates `@vitejs/plugin-react` from 6.0.3 to 6.1.1
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.1.1/packages/plugin-react)

Updates `lint-staged` from 17.1.0 to 17.4.1
- [Release notes](https://github.com/lint-staged/lint-staged/releases)
- [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md)
- [Commits](lint-staged/lint-staged@v17.1.0...v17.4.1)

Updates `oxfmt` from 0.59.0 to 0.66.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.66.0/npm/oxfmt)

Updates `oxlint` from 1.74.0 to 1.81.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.81.0/npm/oxlint)

Updates `vite` from 8.1.5 to 8.2.2
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.2.2/packages/vite)

Updates `vite-plugin-oxlint` from 2.1.2 to 2.2.0
- [Release notes](https://github.com/52-entertainment/vite-plugin-oxlint/releases)
- [Commits](52-entertainment/vite-plugin-oxlint@2.1.2...2.2.0)

---
updated-dependencies:
- dependency-name: "@ai-sdk/anthropic"
  dependency-version: 4.0.49
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: "@ai-sdk/fal"
  dependency-version: 3.0.37
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: "@ai-sdk/gateway"
  dependency-version: 4.0.74
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: "@ai-sdk/google"
  dependency-version: 4.0.63
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: "@ai-sdk/mistral"
  dependency-version: 4.0.39
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: "@ai-sdk/openai"
  dependency-version: 4.0.58
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: "@ai-sdk/react"
  dependency-version: 4.0.95
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: "@composio/core"
  dependency-version: 0.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major
- dependency-name: "@composio/vercel"
  dependency-version: 0.11.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: "@convex-dev/auth"
  dependency-version: 0.0.95
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: "@convex-dev/resend"
  dependency-version: 0.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: "@polar-sh/checkout"
  dependency-version: 0.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: "@polar-sh/sdk"
  dependency-version: 0.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major
- dependency-name: "@radix-ui/react-alert-dialog"
  dependency-version: 1.1.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: "@radix-ui/react-avatar"
  dependency-version: 1.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: "@radix-ui/react-checkbox"
  dependency-version: 1.3.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: "@radix-ui/react-dialog"
  dependency-version: 1.1.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: "@radix-ui/react-dropdown-menu"
  dependency-version: 2.1.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: "@radix-ui/react-hover-card"
  dependency-version: 1.1.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: "@radix-ui/react-label"
  dependency-version: 2.1.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: "@radix-ui/react-popover"
  dependency-version: 1.1.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: "@radix-ui/react-progress"
  dependency-version: 1.1.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: "@radix-ui/react-radio-group"
  dependency-version: 1.4.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: "@radix-ui/react-scroll-area"
  dependency-version: 1.2.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: "@radix-ui/react-select"
  dependency-version: 2.3.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: "@radix-ui/react-separator"
  dependency-version: 1.1.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: "@radix-ui/react-slot"
  dependency-version: 1.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: "@radix-ui/react-switch"
  dependency-version: 1.3.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: "@radix-ui/react-tabs"
  dependency-version: 1.1.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: "@radix-ui/react-tooltip"
  dependency-version: 1.2.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: "@radix-ui/react-use-controllable-state"
  dependency-version: 1.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: "@tanstack/react-devtools"
  dependency-version: 0.10.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.102.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major
- dependency-name: "@tanstack/react-query-devtools"
  dependency-version: 5.102.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major
- dependency-name: "@tanstack/react-router"
  dependency-version: 1.170.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: "@tanstack/react-router-devtools"
  dependency-version: 1.167.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: "@tanstack/react-router-ssr-query"
  dependency-version: 1.167.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: "@tanstack/react-start"
  dependency-version: 1.168.49
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: "@upstash/redis"
  dependency-version: 1.38.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: ai
  dependency-version: 7.0.92
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: convex
  dependency-version: 1.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major
- dependency-name: dayjs
  dependency-version: 1.11.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: exa-js
  dependency-version: 2.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major
- dependency-name: katex
  dependency-version: 0.18.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: lucide-react
  dependency-version: 1.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major
- dependency-name: marked
  dependency-version: 18.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: posthog-js
  dependency-version: 1.426.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major
- dependency-name: posthog-node
  dependency-version: 5.51.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major
- dependency-name: react
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: "@types/react"
  dependency-version: 19.2.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: react-dom
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: sonner
  dependency-version: 2.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: streamdown
  dependency-version: 2.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major
- dependency-name: zod
  dependency-version: 4.5.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major
- dependency-name: zustand
  dependency-version: 5.0.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: "@tanstack/devtools-vite"
  dependency-version: 0.8.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: "@testing-library/react"
  dependency-version: 16.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: non-major
- dependency-name: lint-staged
  dependency-version: 17.4.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: non-major
- dependency-name: oxfmt
  dependency-version: 0.66.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: non-major
- dependency-name: oxlint
  dependency-version: 1.81.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: non-major
- dependency-name: vite
  dependency-version: 8.2.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: non-major
- dependency-name: vite-plugin-oxlint
  dependency-version: 2.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: non-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 7, 2026
@vercel

vercel Bot commented Sep 7, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated
open-chat Ignored Ignored Sep 7, 2026 8:19am UTC

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants