chore(deps): bump the patches group across 1 directory with 27 updates - #3490
chore(deps): bump the patches group across 1 directory with 27 updates#3490dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the patches group with 27 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@ai-sdk/mcp](https://github.com/vercel/ai/tree/HEAD/packages/mcp) | `2.0.7` | `2.0.22` | | [@ai-sdk/openai](https://github.com/vercel/ai/tree/HEAD/packages/openai) | `4.0.8` | `4.0.27` | | [@ai-sdk/openai-compatible](https://github.com/vercel/ai/tree/HEAD/packages/openai-compatible) | `3.0.5` | `3.0.20` | | [@ai-sdk/react](https://github.com/vercel/ai/tree/HEAD/packages/react) | `4.0.17` | `4.0.51` | | [@headlessui/react](https://github.com/tailwindlabs/headlessui/tree/HEAD/packages/@headlessui-react) | `2.2.0` | `2.2.10` | | [@inkeep/cxkit-react](https://github.com/inkeep/widget/tree/HEAD/packages/react) | `0.5.117` | `0.5.119` | | [@opentelemetry/api](https://github.com/open-telemetry/opentelemetry-js) | `1.9.0` | `1.9.1` | | [@radix-ui/react-accordion](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/accordion) | `1.2.3` | `1.2.20` | | [@radix-ui/react-collapsible](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/collapsible) | `1.1.11` | `1.1.20` | | [@radix-ui/react-dialog](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dialog) | `1.1.6` | `1.1.23` | | [@radix-ui/react-dropdown-menu](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dropdown-menu) | `2.1.6` | `2.1.24` | | [@radix-ui/react-hover-card](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/hover-card) | `1.1.6` | `1.1.23` | | [@radix-ui/react-label](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/label) | `2.1.2` | `2.1.15` | | [@radix-ui/react-popover](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/popover) | `1.1.15` | `1.1.23` | | [@radix-ui/react-presence](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/presence) | `1.1.5` | `1.1.10` | | [@radix-ui/react-scroll-area](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/scroll-area) | `1.2.9` | `1.2.18` | | [@radix-ui/react-separator](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/separator) | `1.1.2` | `1.1.15` | | [@radix-ui/react-tabs](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/tabs) | `1.1.3` | `1.1.21` | | [@radix-ui/react-use-controllable-state](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/use-controllable-state) | `1.2.2` | `1.2.6` | | [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `7.0.16` | `7.0.48` | | [jsonwebtoken](https://github.com/auth0/node-jsonwebtoken) | `9.0.2` | `9.0.3` | | [langfuse](https://github.com/langfuse/langfuse-js/tree/HEAD/langfuse) | `3.38.4` | `3.38.20` | | [next](https://github.com/vercel/next.js) | `16.2.6` | `16.2.12` | | [openai-edge](https://github.com/dan-kwiat/openai-edge) | `1.2.2` | `1.2.3` | | [use-stick-to-bottom](https://github.com/samdenty/use-stick-to-bottom) | `1.1.1` | `1.1.6` | | [@types/hast](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/hast) | `3.0.4` | `3.0.5` | | [@types/mdx](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/mdx) | `2.0.13` | `2.0.14` | Updates `@ai-sdk/mcp` from 2.0.7 to 2.0.22 - [Release notes](https://github.com/vercel/ai/releases) - [Changelog](https://github.com/vercel/ai/blob/main/packages/mcp/CHANGELOG.md) - [Commits](https://github.com/vercel/ai/commits/@ai-sdk/mcp@2.0.22/packages/mcp) Updates `@ai-sdk/openai` from 4.0.8 to 4.0.27 - [Release notes](https://github.com/vercel/ai/releases) - [Changelog](https://github.com/vercel/ai/blob/main/packages/openai/CHANGELOG.md) - [Commits](https://github.com/vercel/ai/commits/@ai-sdk/openai@4.0.27/packages/openai) Updates `@ai-sdk/openai-compatible` from 3.0.5 to 3.0.20 - [Release notes](https://github.com/vercel/ai/releases) - [Changelog](https://github.com/vercel/ai/blob/main/packages/openai-compatible/CHANGELOG.md) - [Commits](https://github.com/vercel/ai/commits/@ai-sdk/openai-compatible@3.0.20/packages/openai-compatible) Updates `@ai-sdk/react` from 4.0.17 to 4.0.51 - [Release notes](https://github.com/vercel/ai/releases) - [Changelog](https://github.com/vercel/ai/blob/main/packages/react/CHANGELOG.md) - [Commits](https://github.com/vercel/ai/commits/@ai-sdk/react@4.0.51/packages/react) Updates `@headlessui/react` from 2.2.0 to 2.2.10 - [Release notes](https://github.com/tailwindlabs/headlessui/releases) - [Changelog](https://github.com/tailwindlabs/headlessui/blob/main/packages/@headlessui-react/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/headlessui/commits/@headlessui/react@v2.2.10/packages/@headlessui-react) Updates `@inkeep/cxkit-react` from 0.5.117 to 0.5.119 - [Commits](https://github.com/inkeep/widget/commits/HEAD/packages/react) Updates `@opentelemetry/api` from 1.9.0 to 1.9.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v1.9.0...v1.9.1) Updates `@radix-ui/react-accordion` from 1.2.3 to 1.2.20 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/accordion/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/accordion) Updates `@radix-ui/react-collapsible` from 1.1.11 to 1.1.20 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/collapsible/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/collapsible) Updates `@radix-ui/react-dialog` from 1.1.6 to 1.1.23 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dialog/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dialog) Updates `@radix-ui/react-dropdown-menu` from 2.1.6 to 2.1.24 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dropdown-menu/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dropdown-menu) Updates `@radix-ui/react-hover-card` from 1.1.6 to 1.1.23 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/hover-card/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/hover-card) Updates `@radix-ui/react-label` from 2.1.2 to 2.1.15 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/label/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/label) Updates `@radix-ui/react-popover` from 1.1.15 to 1.1.23 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/popover/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/popover) Updates `@radix-ui/react-presence` from 1.1.5 to 1.1.10 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/presence/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/presence) Updates `@radix-ui/react-scroll-area` from 1.2.9 to 1.2.18 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/scroll-area/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/scroll-area) Updates `@radix-ui/react-separator` from 1.1.2 to 1.1.15 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/separator/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/separator) Updates `@radix-ui/react-tabs` from 1.1.3 to 1.1.21 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/tabs/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/tabs) Updates `@radix-ui/react-use-controllable-state` from 1.2.2 to 1.2.6 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/use-controllable-state/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/use-controllable-state) Updates `ai` from 7.0.16 to 7.0.48 - [Release notes](https://github.com/vercel/ai/releases) - [Changelog](https://github.com/vercel/ai/blob/main/packages/ai/CHANGELOG.md) - [Commits](https://github.com/vercel/ai/commits/ai@7.0.48/packages/ai) Updates `jsonwebtoken` from 9.0.2 to 9.0.3 - [Changelog](https://github.com/auth0/node-jsonwebtoken/blob/master/CHANGELOG.md) - [Commits](auth0/node-jsonwebtoken@v9.0.2...v9.0.3) Updates `langfuse` from 3.38.4 to 3.38.20 - [Release notes](https://github.com/langfuse/langfuse-js/releases) - [Commits](https://github.com/langfuse/langfuse-js/commits/v3.38.20/langfuse) Updates `next` from 16.2.6 to 16.2.12 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.2.6...v16.2.12) Updates `openai-edge` from 1.2.2 to 1.2.3 - [Commits](https://github.com/dan-kwiat/openai-edge/commits) Updates `use-stick-to-bottom` from 1.1.1 to 1.1.6 - [Changelog](https://github.com/stackblitz-labs/use-stick-to-bottom/blob/main/CHANGELOG.md) - [Commits](https://github.com/samdenty/use-stick-to-bottom/commits) Updates `@types/hast` from 3.0.4 to 3.0.5 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/hast) Updates `@types/mdx` from 2.0.13 to 2.0.14 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/mdx) --- updated-dependencies: - dependency-name: "@ai-sdk/mcp" dependency-version: 2.0.22 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: "@ai-sdk/openai" dependency-version: 4.0.27 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: "@ai-sdk/openai-compatible" dependency-version: 3.0.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: "@ai-sdk/react" dependency-version: 4.0.51 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: "@headlessui/react" dependency-version: 2.2.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: "@inkeep/cxkit-react" dependency-version: 0.5.119 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: "@opentelemetry/api" dependency-version: 1.9.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: "@radix-ui/react-accordion" dependency-version: 1.2.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: "@radix-ui/react-collapsible" dependency-version: 1.1.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: "@radix-ui/react-dialog" dependency-version: 1.1.23 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: "@radix-ui/react-dropdown-menu" dependency-version: 2.1.24 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: "@radix-ui/react-hover-card" dependency-version: 1.1.23 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: "@radix-ui/react-label" dependency-version: 2.1.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: "@radix-ui/react-popover" dependency-version: 1.1.23 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: "@radix-ui/react-presence" dependency-version: 1.1.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: "@radix-ui/react-scroll-area" dependency-version: 1.2.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: "@radix-ui/react-separator" dependency-version: 1.1.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: "@radix-ui/react-tabs" dependency-version: 1.1.21 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: "@radix-ui/react-use-controllable-state" dependency-version: 1.2.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: ai dependency-version: 7.0.48 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: jsonwebtoken dependency-version: 9.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: langfuse dependency-version: 3.38.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: next dependency-version: 16.2.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: openai-edge dependency-version: 1.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: use-stick-to-bottom dependency-version: 1.1.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: "@types/hast" dependency-version: 3.0.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patches - dependency-name: "@types/mdx" dependency-version: 2.0.14 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patches ... Signed-off-by: dependabot[bot] <support@github.com>
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
There was a problem hiding this comment.
LGTM — routine dependency patch bump, no bugs found.
Extended reasoning...
Overview
This PR only touches package.json and pnpm-lock.yaml, bumping 27 packages within a dependabot "patches" group (AI SDK packages, Radix UI primitives, Next.js, jsonwebtoken, langfuse, etc.). No application source code, content, or configuration files are changed.
Security risks
jsonwebtoken (9.0.2 → 9.0.3) is a security-relevant dependency, but this is a patch release from upstream and not something introduced by this PR's diff. No new attack surface is introduced by this change itself — it is purely a version bump with no code changes on the langfuse-docs side.
Level of scrutiny
This warrants light scrutiny: it's a mechanical, tool-generated lockfile/manifest update with no logic changes. The main risk in this class of PR is a transitive dependency resolution issue or a breaking change slipping in under a "patch" label, but all bumps here are within existing major/minor version lines and the lockfile is internally consistent.
Other factors
No CODEOWNERS-sensitive files are touched, no large-scale design decisions are involved, and the bug hunting system found no issues. This matches the standard profile of PRs that don't need human review before merging.
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
Bumps the patches group with 27 updates in the / directory:
2.0.72.0.224.0.84.0.273.0.53.0.204.0.174.0.512.2.02.2.100.5.1170.5.1191.9.01.9.11.2.31.2.201.1.111.1.201.1.61.1.232.1.62.1.241.1.61.1.232.1.22.1.151.1.151.1.231.1.51.1.101.2.91.2.181.1.21.1.151.1.31.1.211.2.21.2.67.0.167.0.489.0.29.0.33.38.43.38.2016.2.616.2.121.2.21.2.31.1.11.1.63.0.43.0.52.0.132.0.14Updates
@ai-sdk/mcpfrom 2.0.7 to 2.0.22Changelog
Sourced from @ai-sdk/mcp's changelog.
... (truncated)
Commits
e84b8bcVersion Packages (#18291)e464a0cVersion Packages (#18237)eb3d1afVersion Packages (#18208)97f0565fix: MCP requests and client initialization can hang past configured deadline...a56fbc0Version Packages (#18083)232a45aVersion Packages (#18004)8fd84f0Version Packages (#17983)0319ff3Version Packages (#17553)9352ac1Version Packages (#17417)d84ea43fix: OAuth discovery rejects RFC-compliant metadata without PKCE method decla...Updates
@ai-sdk/openaifrom 4.0.8 to 4.0.27Changelog
Sourced from @ai-sdk/openai's changelog.
... (truncated)
Commits
e84b8bcVersion Packages (#18291)5fc7da5chore: centralize empty language model usage creation in provider utils (#18209)93b2acdchore: centralize response metadata conversion (#18212)e464a0cVersion Packages (#18237)f7c4a38fix:@ai-sdk/openaifile uploads with expiresAfter are rejected instead of ...eb3d1afVersion Packages (#18208)b192878feat: add experimental_toolCaller routing to generateText for code mode (#18219)beaecb3fix(provider/openai): resolve responses doStream at response.in_progress inst...a56fbc0Version Packages (#18083)2ab3f34Version Packages (#18023)Updates
@ai-sdk/openai-compatiblefrom 3.0.5 to 3.0.20Changelog
Sourced from @ai-sdk/openai-compatible's changelog.
... (truncated)
Commits
e84b8bcVersion Packages (#18291)5fc7da5chore: centralize empty language model usage creation in provider utils (#18209)93b2acdchore: centralize response metadata conversion (#18212)e464a0cVersion Packages (#18237)eb3d1afVersion Packages (#18208)a56fbc0Version Packages (#18083)232a45aVersion Packages (#18004)8fd84f0Version Packages (#17983)0319ff3Version Packages (#17553)7120171Version Packages (#17465)Updates
@ai-sdk/reactfrom 4.0.17 to 4.0.51Changelog
Sourced from @ai-sdk/react's changelog.
... (truncated)
Commits
3bc0d4fVersion Packages (#18311)e84b8bcVersion Packages (#18291)8d9993aVersion Packages (#18282)e464a0cVersion Packages (#18237)3fb63ebVersion Packages (#18234)eb3d1afVersion Packages (#18208)a56fbc0Version Packages (#18083)2ab3f34Version Packages (#18023)c527d7bVersion Packages (#18020)232a45aVersion Packages (#18004)Updates
@headlessui/reactfrom 2.2.0 to 2.2.10Release notes
Sourced from @headlessui/react's releases.
... (truncated)
Changelog
Sourced from @headlessui/react's changelog.
... (truncated)
Commits
d13526d2.2.10 -@headlessui/reactb0dcd8fHandle props on Fragment error due toSymbol(react.lazy)(#3873)7baca70Don’t render\<Portal>s while hydrating (#3825)5ef7395AddRefProptoprops(#3823)589ea902.2.9 -@headlessui/reactbba75c7update changelogca536edupdate changelog49e9e8edo not serialize React components into form fields2a647a7Ensure refs are forwarded when freezing data (#3390)da2fa94Freeze values as soon as possible (#3802)Updates
@inkeep/cxkit-reactfrom 0.5.117 to 0.5.119Commits
Updates
@opentelemetry/apifrom 1.9.0 to 1.9.1Release notes
Sourced from @opentelemetry/api's releases.
Changelog
Sourced from @opentelemetry/api's changelog.
Commits
279458eRelease 1.9.1 / 0.35.1 (#3573)4978743fix(http): remove outgoing headers normalization (#3557)d1f9594chore(deps): update dependency rimraf to v4 (#3532)e0abcc0fix: remove JSON syntax error and regenerate tsconfig files (#3566)a90c558fix(sdk-node): register instrumentations early (#3502)5b070b8fix: include TraceState in trace exports (#3569)dcb09b7chore(deps): update dependency gh-pages to v5 (#3571)3bc93a9feat: exponential histogram - part 1 - mapping functions (#3504)3670071fix: avoid grpc types dependency (#3551)b5ef0e4chore: fix proto generation (#3567)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@opentelemetry/apisince your current version.Updates
@radix-ui/react-accordionfrom 1.2.3 to 1.2.20Changelog
Sourced from @radix-ui/react-accordion's changelog.
... (truncated)
Commits
Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@radix-ui/react-accordionsince your current version.Updates
@radix-ui/react-collapsiblefrom 1.1.11 to 1.1.20Changelog
Sourced from @radix-ui/react-collapsible's changelog.
Commits
Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@radix-ui/react-collapsiblesince your current version.Updates
@radix-ui/react-dialogfrom 1.1.6 to 1.1.23Changelog
Sourced from @radix-ui/react-dialog's changelog.
... (truncated)
Commits
Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@radix-ui/react-dialogsince your current version.Updates
@radix-ui/react-dropdown-menufrom 2.1.6 to 2.1.24Changelog
Sourced from @radix-ui/react-dropdown-menu's changelog.
... (truncated)
Commits
Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@radix-ui/react-dropdown-menusince your current version.Updates
@radix-ui/react-hover-cardfrom 1.1.6 to 1.1.23Changelog
Sourced from @radix-ui/react-hover-card's changelog.