chore(deps): bump the patches group across 1 directory with 28 updates - #3332
chore(deps): bump the patches group across 1 directory with 28 updates#3332dependabot[bot] wants to merge 1 commit into
Conversation
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
There was a problem hiding this comment.
LGTM — routine patch-level dependency bump with no functional code changes.
Extended reasoning...
Overview
This PR only touches package.json and pnpm-lock.yaml, bumping 28 dependencies within their patch-version ranges (radix-ui components, ai-sdk packages, next, headlessui, jsonwebtoken, langfuse, opentelemetry, etc.). No application source files are modified.
Security risks
jsonwebtoken (9.0.2 -> 9.0.3) and next (16.2.6 -> 16.2.10) are the only bumps with any security surface, and both are patch releases moving forward, not introducing new risk. No auth/crypto logic in this repo is being changed directly — the version bumps just pull in upstream patch fixes.
Level of scrutiny
This warrants light scrutiny: it's a mechanical, tool-generated (dependabot-style) diff limited to dependency manifests, all changes are patch-level (per semver, only bug fixes, no breaking API changes expected), and CI (build, format, link-check) will catch any incompatibility.
Other factors
No CODEOWNER-sensitive or critical logic paths are touched. The PR is labeled auto-merge, consistent with routine dependency maintenance.
658b146 to
c735abe
Compare
c735abe to
0f65f1a
Compare
0f65f1a to
0e3ec0e
Compare
ae39b2e to
8322d14
Compare
8322d14 to
5b42e99
Compare
5b42e99 to
834fce6
Compare
834fce6 to
9da93ce
Compare
Bumps the patches group with 28 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@ai-sdk/mcp](https://github.com/vercel/ai/tree/HEAD/packages/mcp) | `2.0.7` | `2.0.20` | | [@ai-sdk/openai](https://github.com/vercel/ai/tree/HEAD/packages/openai) | `4.0.8` | `4.0.25` | | [@ai-sdk/openai-compatible](https://github.com/vercel/ai/tree/HEAD/packages/openai-compatible) | `3.0.5` | `3.0.18` | | [@ai-sdk/react](https://github.com/vercel/ai/tree/HEAD/packages/react) | `4.0.17` | `4.0.47` | | [@headlessui/react](https://github.com/tailwindlabs/headlessui/tree/HEAD/packages/@headlessui-react) | `2.2.0` | `2.2.10` | | [@inkeep/cxkit-react](https://github.com/inkeep/widget/tree/HEAD/packages/react) | `0.5.117` | `0.5.119` | | [@opentelemetry/api](https://github.com/open-telemetry/opentelemetry-js) | `1.9.0` | `1.9.1` | | [@radix-ui/react-accordion](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/accordion) | `1.2.3` | `1.2.20` | | [@radix-ui/react-collapsible](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/collapsible) | `1.1.11` | `1.1.20` | | [@radix-ui/react-dialog](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dialog) | `1.1.6` | `1.1.23` | | [@radix-ui/react-dropdown-menu](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dropdown-menu) | `2.1.6` | `2.1.24` | | [@radix-ui/react-hover-card](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/hover-card) | `1.1.6` | `1.1.23` | | [@radix-ui/react-label](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/label) | `2.1.2` | `2.1.15` | | [@radix-ui/react-popover](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/popover) | `1.1.15` | `1.1.23` | | [@radix-ui/react-presence](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/presence) | `1.1.5` | `1.1.10` | | [@radix-ui/react-scroll-area](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/scroll-area) | `1.2.9` | `1.2.18` | | [@radix-ui/react-separator](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/separator) | `1.1.2` | `1.1.15` | | [@radix-ui/react-tabs](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/tabs) | `1.1.3` | `1.1.21` | | [@radix-ui/react-use-controllable-state](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/use-controllable-state) | `1.2.2` | `1.2.6` | | [@react-three/fiber](https://github.com/pmndrs/react-three-fiber) | `9.6.0` | `9.6.1` | | [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `7.0.16` | `7.0.44` | | [jsonwebtoken](https://github.com/auth0/node-jsonwebtoken) | `9.0.2` | `9.0.3` | | [langfuse](https://github.com/langfuse/langfuse-js/tree/HEAD/langfuse) | `3.38.4` | `3.38.20` | | [next](https://github.com/vercel/next.js) | `16.2.6` | `16.2.12` | | [openai-edge](https://github.com/dan-kwiat/openai-edge) | `1.2.2` | `1.2.3` | | [use-stick-to-bottom](https://github.com/samdenty/use-stick-to-bottom) | `1.1.1` | `1.1.6` | | [@types/hast](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/hast) | `3.0.4` | `3.0.5` | | [@types/mdx](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/mdx) | `2.0.13` | `2.0.14` | Updates `@ai-sdk/mcp` from 2.0.7 to 2.0.20 - [Release notes](https://github.com/vercel/ai/releases) - [Changelog](https://github.com/vercel/ai/blob/main/packages/mcp/CHANGELOG.md) - [Commits](https://github.com/vercel/ai/commits/@ai-sdk/mcp@2.0.20/packages/mcp) Updates `@ai-sdk/openai` from 4.0.8 to 4.0.25 - [Release notes](https://github.com/vercel/ai/releases) - [Changelog](https://github.com/vercel/ai/blob/main/packages/openai/CHANGELOG.md) - [Commits](https://github.com/vercel/ai/commits/@ai-sdk/openai@4.0.25/packages/openai) Updates `@ai-sdk/openai-compatible` from 3.0.5 to 3.0.18 - [Release notes](https://github.com/vercel/ai/releases) - [Changelog](https://github.com/vercel/ai/blob/main/packages/openai-compatible/CHANGELOG.md) - [Commits](https://github.com/vercel/ai/commits/@ai-sdk/openai-compatible@3.0.18/packages/openai-compatible) Updates `@ai-sdk/react` from 4.0.17 to 4.0.47 - [Release notes](https://github.com/vercel/ai/releases) - [Changelog](https://github.com/vercel/ai/blob/main/packages/react/CHANGELOG.md) - [Commits](https://github.com/vercel/ai/commits/@ai-sdk/react@4.0.47/packages/react) Updates `@headlessui/react` from 2.2.0 to 2.2.10 - [Release notes](https://github.com/tailwindlabs/headlessui/releases) - [Changelog](https://github.com/tailwindlabs/headlessui/blob/main/packages/@headlessui-react/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/headlessui/commits/@headlessui/react@v2.2.10/packages/@headlessui-react) Updates `@inkeep/cxkit-react` from 0.5.117 to 0.5.119 - [Commits](https://github.com/inkeep/widget/commits/HEAD/packages/react) Updates `@opentelemetry/api` from 1.9.0 to 1.9.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v1.9.0...v1.9.1) Updates `@radix-ui/react-accordion` from 1.2.3 to 1.2.20 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/accordion/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/accordion) Updates `@radix-ui/react-collapsible` from 1.1.11 to 1.1.20 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/collapsible/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/collapsible) Updates `@radix-ui/react-dialog` from 1.1.6 to 1.1.23 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dialog/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dialog) Updates `@radix-ui/react-dropdown-menu` from 2.1.6 to 2.1.24 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dropdown-menu/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dropdown-menu) Updates `@radix-ui/react-hover-card` from 1.1.6 to 1.1.23 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/hover-card/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/hover-card) Updates `@radix-ui/react-label` from 2.1.2 to 2.1.15 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/label/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/label) Updates `@radix-ui/react-popover` from 1.1.15 to 1.1.23 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/popover/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/popover) Updates `@radix-ui/react-presence` from 1.1.5 to 1.1.10 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/presence/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/presence) Updates `@radix-ui/react-scroll-area` from 1.2.9 to 1.2.18 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/scroll-area/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/scroll-area) Updates `@radix-ui/react-separator` from 1.1.2 to 1.1.15 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/separator/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/separator) Updates `@radix-ui/react-tabs` from 1.1.3 to 1.1.21 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/tabs/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/tabs) Updates `@radix-ui/react-use-controllable-state` from 1.2.2 to 1.2.6 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/use-controllable-state/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/use-controllable-state) Updates `@react-three/fiber` from 9.6.0 to 9.6.1 - [Release notes](https://github.com/pmndrs/react-three-fiber/releases) - [Commits](pmndrs/react-three-fiber@v9.6.0...v9.6.1) Updates `ai` from 7.0.16 to 7.0.44 - [Release notes](https://github.com/vercel/ai/releases) - [Changelog](https://github.com/vercel/ai/blob/main/packages/ai/CHANGELOG.md) - [Commits](https://github.com/vercel/ai/commits/ai@7.0.44/packages/ai) Updates `jsonwebtoken` from 9.0.2 to 9.0.3 - [Changelog](https://github.com/auth0/node-jsonwebtoken/blob/master/CHANGELOG.md) - [Commits](auth0/node-jsonwebtoken@v9.0.2...v9.0.3) Updates `langfuse` from 3.38.4 to 3.38.20 - [Release notes](https://github.com/langfuse/langfuse-js/releases) - [Commits](https://github.com/langfuse/langfuse-js/commits/v3.38.20/langfuse) Updates `next` from 16.2.6 to 16.2.12 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.2.6...v16.2.12) Updates `openai-edge` from 1.2.2 to 1.2.3 - [Commits](https://github.com/dan-kwiat/openai-edge/commits) Updates `use-stick-to-bottom` from 1.1.1 to 1.1.6 - [Changelog](https://github.com/stackblitz-labs/use-stick-to-bottom/blob/main/CHANGELOG.md) - [Commits](https://github.com/samdenty/use-stick-to-bottom/commits) Updates `@types/hast` from 3.0.4 to 3.0.5 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/hast) Updates `@types/mdx` from 2.0.13 to 2.0.14 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/mdx) --- updated-dependencies: - dependency-name: "@ai-sdk/mcp" dependency-version: 2.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: "@ai-sdk/openai" dependency-version: 4.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: "@ai-sdk/openai-compatible" dependency-version: 3.0.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: "@ai-sdk/react" dependency-version: 4.0.23 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: "@headlessui/react" dependency-version: 2.2.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: "@inkeep/cxkit-react" dependency-version: 0.5.119 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: "@opentelemetry/api" dependency-version: 1.9.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: "@radix-ui/react-accordion" dependency-version: 1.2.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: "@radix-ui/react-collapsible" dependency-version: 1.1.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: "@radix-ui/react-dialog" dependency-version: 1.1.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: "@radix-ui/react-dropdown-menu" dependency-version: 2.1.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: "@radix-ui/react-hover-card" dependency-version: 1.1.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: "@radix-ui/react-label" dependency-version: 2.1.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: "@radix-ui/react-popover" dependency-version: 1.1.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: "@radix-ui/react-presence" dependency-version: 1.1.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: "@radix-ui/react-scroll-area" dependency-version: 1.2.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: "@radix-ui/react-separator" dependency-version: 1.1.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: "@radix-ui/react-tabs" dependency-version: 1.1.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: "@radix-ui/react-use-controllable-state" dependency-version: 1.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: "@react-three/fiber" dependency-version: 9.6.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: "@types/hast" dependency-version: 3.0.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patches - dependency-name: "@types/mdx" dependency-version: 2.0.14 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patches - dependency-name: ai dependency-version: 7.0.22 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: jsonwebtoken dependency-version: 9.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: langfuse dependency-version: 3.38.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: next dependency-version: 16.2.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: openai-edge dependency-version: 1.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: use-stick-to-bottom dependency-version: 1.1.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches ... Signed-off-by: dependabot[bot] <support@github.com>
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
Bumps the patches group with 28 updates in the / directory:
2.0.72.0.204.0.84.0.253.0.53.0.184.0.174.0.472.2.02.2.100.5.1170.5.1191.9.01.9.11.2.31.2.201.1.111.1.201.1.61.1.232.1.62.1.241.1.61.1.232.1.22.1.151.1.151.1.231.1.51.1.101.2.91.2.181.1.21.1.151.1.31.1.211.2.21.2.69.6.09.6.17.0.167.0.449.0.29.0.33.38.43.38.2016.2.616.2.121.2.21.2.31.1.11.1.63.0.43.0.52.0.132.0.14Updates
@ai-sdk/mcpfrom 2.0.7 to 2.0.20Changelog
Sourced from @ai-sdk/mcp's changelog.
... (truncated)
Commits
eb3d1afVersion Packages (#18208)97f0565fix: MCP requests and client initialization can hang past configured deadline...a56fbc0Version Packages (#18083)232a45aVersion Packages (#18004)8fd84f0Version Packages (#17983)0319ff3Version Packages (#17553)9352ac1Version Packages (#17417)d84ea43fix: OAuth discovery rejects RFC-compliant metadata without PKCE method decla...b8241a6Version Packages (#17264)48e7e78fix(react/mcp): harden MCP Apps metadata handling and host/iframe bridge (#17...Updates
@ai-sdk/openaifrom 4.0.8 to 4.0.25Changelog
Sourced from @ai-sdk/openai's changelog.
... (truncated)
Commits
eb3d1afVersion Packages (#18208)b192878feat: add experimental_toolCaller routing to generateText for code mode (#18219)beaecb3fix(provider/openai): resolve responses doStream at response.in_progress inst...a56fbc0Version Packages (#18083)2ab3f34Version Packages (#18023)96a237dfeat: support blocked domains in OpenAI web search (#18033)232a45aVersion Packages (#18004)c49380cfeat(openai,google): realtime translation providers (#17543)8fd84f0Version Packages (#17983)3c98985Version Packages (#17868)Updates
@ai-sdk/openai-compatiblefrom 3.0.5 to 3.0.18Changelog
Sourced from @ai-sdk/openai-compatible's changelog.
... (truncated)
Commits
eb3d1afVersion Packages (#18208)a56fbc0Version Packages (#18083)232a45aVersion Packages (#18004)8fd84f0Version Packages (#17983)0319ff3Version Packages (#17553)7120171Version Packages (#17465)8b52503feat(openai-compat): add an extensible providerOptions type for image model r...9352ac1Version Packages (#17417)2c080eatests: fix 'to to' typo in openai-compatible-provider.test.ts (#17328)b8241a6Version Packages (#17264)Updates
@ai-sdk/reactfrom 4.0.17 to 4.0.47Changelog
Sourced from @ai-sdk/react's changelog.
... (truncated)
Commits
3fb63ebVersion Packages (#18234)eb3d1afVersion Packages (#18208)a56fbc0Version Packages (#18083)2ab3f34Version Packages (#18023)c527d7bVersion Packages (#18020)232a45aVersion Packages (#18004)8fd84f0Version Packages (#17983)3c98985Version Packages (#17868)54d4d7aVersion Packages (#17796)799faf7Version Packages (#17653)Updates
@headlessui/reactfrom 2.2.0 to 2.2.10Release notes
Sourced from @headlessui/react's releases.
... (truncated)
Changelog
Sourced from @headlessui/react's changelog.
... (truncated)
Commits
d13526d2.2.10 -@headlessui/reactb0dcd8fHandle props on Fragment error due toSymbol(react.lazy)(#3873)7baca70Don’t render\<Portal>s while hydrating (#3825)5ef7395AddRefProptoprops(#3823)589ea902.2.9 -@headlessui/reactbba75c7update changelogca536edupdate changelog49e9e8edo not serialize React components into form fields2a647a7Ensure refs are forwarded when freezing data (#3390)da2fa94Freeze values as soon as possible (#3802)Updates
@inkeep/cxkit-reactfrom 0.5.117 to 0.5.119Commits
Updates
@opentelemetry/apifrom 1.9.0 to 1.9.1Release notes
Sourced from @opentelemetry/api's releases.
Changelog
Sourced from @opentelemetry/api's changelog.
Commits
279458eRelease 1.9.1 / 0.35.1 (#3573)4978743fix(http): remove outgoing headers normalization (#3557)d1f9594chore(deps): update dependency rimraf to v4 (#3532)e0abcc0fix: remove JSON syntax error and regenerate tsconfig files (#3566)a90c558fix(sdk-node): register instrumentations early (#3502)5b070b8fix: include TraceState in trace exports (#3569)dcb09b7chore(deps): update dependency gh-pages to v5 (#3571)3bc93a9feat: exponential histogram - part 1 - mapping functions (#3504)3670071fix: avoid grpc types dependency (#3551)b5ef0e4chore: fix proto generation (#3567)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@opentelemetry/apisince your current version.Updates
@radix-ui/react-accordionfrom 1.2.3 to 1.2.20Changelog
Sourced from @radix-ui/react-accordion's changelog.
... (truncated)
Commits
Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@radix-ui/react-accordionsince your current version.Updates
@radix-ui/react-collapsiblefrom 1.1.11 to 1.1.20Changelog
Sourced from @radix-ui/react-collapsible's changelog.
Commits
Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@radix-ui/react-collapsiblesince your current version.Updates
@radix-ui/react-dialogfrom 1.1.6 to 1.1.23Changelog
Sourced from @radix-ui/react-dialog's changelog.
... (truncated)
Commits
Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@radix-ui/react-dialogsince your current version.Updates
@radix-ui/react-dropdown-menufrom 2.1.6 to 2.1.24Changelog
Sourced from @radix-ui/react-dropdown-menu's changelog.
... (truncated)
Commits
Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@radix-ui/react-dropdown-menusince your current version.Updates
@radix-ui/react-hover-cardfrom 1.1.6 to 1.1.23Changelog
Sourced from @radix-ui/react-hover-card's changelog.