Skip to content

chore(deps): bump the patches group across 1 directory with 27 updates - #3490

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/patches-6c2763dab2
Closed

chore(deps): bump the patches group across 1 directory with 27 updates#3490
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/patches-6c2763dab2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor

Bumps the patches group with 27 updates in the / directory:

Package From To
@ai-sdk/mcp 2.0.7 2.0.22
@ai-sdk/openai 4.0.8 4.0.27
@ai-sdk/openai-compatible 3.0.5 3.0.20
@ai-sdk/react 4.0.17 4.0.51
@headlessui/react 2.2.0 2.2.10
@inkeep/cxkit-react 0.5.117 0.5.119
@opentelemetry/api 1.9.0 1.9.1
@radix-ui/react-accordion 1.2.3 1.2.20
@radix-ui/react-collapsible 1.1.11 1.1.20
@radix-ui/react-dialog 1.1.6 1.1.23
@radix-ui/react-dropdown-menu 2.1.6 2.1.24
@radix-ui/react-hover-card 1.1.6 1.1.23
@radix-ui/react-label 2.1.2 2.1.15
@radix-ui/react-popover 1.1.15 1.1.23
@radix-ui/react-presence 1.1.5 1.1.10
@radix-ui/react-scroll-area 1.2.9 1.2.18
@radix-ui/react-separator 1.1.2 1.1.15
@radix-ui/react-tabs 1.1.3 1.1.21
@radix-ui/react-use-controllable-state 1.2.2 1.2.6
ai 7.0.16 7.0.48
jsonwebtoken 9.0.2 9.0.3
langfuse 3.38.4 3.38.20
next 16.2.6 16.2.12
openai-edge 1.2.2 1.2.3
use-stick-to-bottom 1.1.1 1.1.6
@types/hast 3.0.4 3.0.5
@types/mdx 2.0.13 2.0.14

Updates @ai-sdk/mcp from 2.0.7 to 2.0.22

Changelog

Sourced from @​ai-sdk/mcp's changelog.

2.0.22

Patch Changes

  • Updated dependencies [5fc7da5]
  • Updated dependencies [93b2acd]
    • @​ai-sdk/provider-utils@​5.0.18

2.0.21

Patch Changes

  • Updated dependencies [fa95504]
    • @​ai-sdk/provider-utils@​5.0.17

2.0.20

Patch Changes

  • 97f0565: Honor MCP request deadlines and support bounding or aborting client initialization.
  • Updated dependencies [d8210b6]
  • Updated dependencies [b192878]
    • @​ai-sdk/provider-utils@​5.0.16

2.0.19

Patch Changes

  • Updated dependencies [1659cd5]
  • Updated dependencies [6a5bdff]
    • @​ai-sdk/provider-utils@​5.0.15

2.0.18

Patch Changes

  • Updated dependencies [0c464d9]
  • Updated dependencies [c49380c]
    • @​ai-sdk/provider-utils@​5.0.14

2.0.17

Patch Changes

  • Updated dependencies [1e2f324]
    • @​ai-sdk/provider@​4.0.4
    • @​ai-sdk/provider-utils@​5.0.13

2.0.16

... (truncated)

Commits

Updates @ai-sdk/openai from 4.0.8 to 4.0.27

Changelog

Sourced from @​ai-sdk/openai's changelog.

4.0.27

Patch Changes

  • 5fc7da5: chore: centralize empty language model usage creation in provider utilities.
  • 93b2acd: chore: centralize response metadata conversion
  • Updated dependencies [5fc7da5]
  • Updated dependencies [93b2acd]
    • @​ai-sdk/provider-utils@​5.0.18

4.0.26

Patch Changes

  • f7c4a38: Serialize file upload expiry settings in the multipart field shape accepted by OpenAI.
  • Updated dependencies [fa95504]
    • @​ai-sdk/provider-utils@​5.0.17

4.0.25

Patch Changes

  • beaecb3: fix(provider/openai): resolve responses doStream at response.in_progress instead of first output token

    The early-stream-error peek treated response.in_progress as an unknown chunk, so doStream did not resolve until the first output item arrived — delaying stream availability (and downstream TTFB for proxies/gateways) by the model's full time-to-first-token. response.in_progress is now modeled in the chunk schema and marks the request as accepted: the peek keeps watching for error frames for a short grace window (50ms) so quota/rate-limit errors flushed alongside response.in_progress still throw as retryable APICallErrors, while healthy streams become available right after upstream acknowledges the request.

  • b192878: feat: add experimental_toolCaller routing to generateText for code mode

  • Updated dependencies [d8210b6]

  • Updated dependencies [b192878]

    • @​ai-sdk/provider-utils@​5.0.16

4.0.24

Patch Changes

  • Updated dependencies [1659cd5]
  • Updated dependencies [6a5bdff]
    • @​ai-sdk/provider-utils@​5.0.15

4.0.23

Patch Changes

  • 96a237d: Add blocked domain filters to the OpenAI and Azure Responses API web search tools.

4.0.22

Patch Changes

  • c49380c: feat: add experimental streaming speech translation models (openai.translation('gpt-realtime-translate') over the OpenAI Realtime translations WebSocket and google.translation('gemini-3.5-live-translate-preview') over the Gemini Live API). connectToWebSocket in @ai-sdk/provider-utils now passes close code and reason to onClose (additive, optional parameter).

... (truncated)

Commits

Updates @ai-sdk/openai-compatible from 3.0.5 to 3.0.20

Changelog

Sourced from @​ai-sdk/openai-compatible's changelog.

3.0.20

Patch Changes

  • 5fc7da5: chore: centralize empty language model usage creation in provider utilities.
  • 93b2acd: chore: centralize response metadata conversion
  • Updated dependencies [5fc7da5]
  • Updated dependencies [93b2acd]
    • @​ai-sdk/provider-utils@​5.0.18

3.0.19

Patch Changes

  • Updated dependencies [fa95504]
    • @​ai-sdk/provider-utils@​5.0.17

3.0.18

Patch Changes

  • Updated dependencies [d8210b6]
  • Updated dependencies [b192878]
    • @​ai-sdk/provider-utils@​5.0.16

3.0.17

Patch Changes

  • Updated dependencies [1659cd5]
  • Updated dependencies [6a5bdff]
    • @​ai-sdk/provider-utils@​5.0.15

3.0.16

Patch Changes

  • Updated dependencies [0c464d9]
  • Updated dependencies [c49380c]
    • @​ai-sdk/provider-utils@​5.0.14

3.0.15

Patch Changes

  • Updated dependencies [1e2f324]
    • @​ai-sdk/provider@​4.0.4
    • @​ai-sdk/provider-utils@​5.0.13

3.0.14

... (truncated)

Commits

Updates @ai-sdk/react from 4.0.17 to 4.0.51

Changelog

Sourced from @​ai-sdk/react's changelog.

4.0.51

Patch Changes

  • ai@7.0.48

4.0.50

Patch Changes

  • Updated dependencies [5fc7da5]
  • Updated dependencies [93b2acd]
    • @​ai-sdk/provider-utils@​5.0.18
    • ai@7.0.47
    • @​ai-sdk/mcp@​2.0.22

4.0.49

Patch Changes

  • ai@7.0.46

4.0.48

Patch Changes

  • Updated dependencies [d6ce0ee]
  • Updated dependencies [fa95504]
  • Updated dependencies [349afe7]
    • ai@7.0.45
    • @​ai-sdk/provider-utils@​5.0.17
    • @​ai-sdk/mcp@​2.0.21

4.0.47

Patch Changes

  • Updated dependencies [015acb4]
    • ai@7.0.44

4.0.46

Patch Changes

  • Updated dependencies [d8210b6]
  • Updated dependencies [b192878]
  • Updated dependencies [97f0565]
    • @​ai-sdk/provider-utils@​5.0.16
    • ai@7.0.43
    • @​ai-sdk/mcp@​2.0.20

... (truncated)

Commits

Updates @headlessui/react from 2.2.0 to 2.2.10

Release notes

Sourced from @​headlessui/react's releases.

@​headlessui/react@​v2.2.10

Fixed

  • Don’t render <Portal> while hydrating (#3825)
  • Fix passing props on Fragment error due to Symbol(react.lazy) (#3873)

@​headlessui/react@​v2.2.9

Fixed

  • Improve focus management in shadow DOM roots (#3794)
  • Don't accidentally open the Combobox when touching the ComboboxButton while dragging on mobile (#3795)
  • Ensure sibling Dialog components are scrollable on mobile (#3796)
  • Infer Combobox type based on onChange handler (#3798)
  • Allow home/end key default behavior inside ComboboxInput when Combobox is closed (#3798)
  • Ensure interacting with a Dialog on iOS works after interacting with a disallowed area (#3801)
  • Freeze Listbox values as soon as a value is selected (#3802)
  • Ensure refs are forwarded when freezing data (#3390)
  • Do not serialize React components into form fields (49e9e8e)

@​headlessui/react@​v2.2.8

Fixed

  • Ensure we are not freezing data when the static prop is used (#3779)
  • Ensure onChange types are contravariant instead of bivariant (#3781)
  • Support <summary> as a focusable element inside <details> (#3389)
  • Fix Maximum update depth exceeded crash when using transition prop (#3782)
  • Ensure pressing Tab in the ComboboxInput, correctly syncs the input value (#3785)
  • Ensure --button-width and --input-width have the latest value (#3786)
  • Fix 'Invalid prop data-headlessui-state supplied to React.Fragment' warning (#3788)
  • Ensure element in ref callback is always connected when rendering in a Portal (#3789)
  • Ensure form state is up to date when using uncontrolled components (#3790)
  • Ensure data-open on ComboboxInput is up to date (#3791)
  • Ensure changing the immediate prop value on the Combobox component works as expected (#3792)

@​headlessui/react@​v2.2.7

Fixed

  • Fix incorrect double invocation of menu items, listbox options and combobox options (#3766)
  • Fix memory leak in SSR environment (#3767)
  • Ensure programmatic .click() on MenuButton ref works (#3768)
  • Don't activate hovered items while using the keyboard (#3769)

@​headlessui/react@​v2.2.6

Fixed

  • Fix immediately closing Listbox by requiring some cursor movement (#3762)

@​headlessui/react@​v2.2.5

Fixed

... (truncated)

Changelog

Sourced from @​headlessui/react's changelog.

[2.2.10] - 2026-04-07

Fixed

  • Don’t render <Portal> while hydrating (#3825)
  • Fix passing props on Fragment error due to Symbol(react.lazy) (#3873)

[2.2.9] - 2025-09-25

Fixed

  • Improve focus management in shadow DOM roots (#3794)
  • Don't accidentally open the Combobox when touching the ComboboxButton while dragging on mobile (#3795)
  • Ensure sibling Dialog components are scrollable on mobile (#3796)
  • Infer Combobox type based on onChange handler (#3798)
  • Allow home/end key default behavior inside ComboboxInput when Combobox is closed (#3798)
  • Ensure interacting with a Dialog on iOS works after interacting with a disallowed area (#3801)
  • Freeze Listbox values as soon as a value is selected (#3802)
  • Ensure refs are forwarded when freezing data (#3390)
  • Do not serialize React components into form fields (49e9e8e)

[2.2.8] - 2025-09-12

Fixed

  • Ensure we are not freezing data when the static prop is used (#3779)
  • Ensure onChange types are contravariant instead of bivariant (#3781)
  • Support <summary> as a focusable element inside <details> (#3389)
  • Fix Maximum update depth exceeded crash when using transition prop (#3782)
  • Ensure pressing Tab in the ComboboxInput, correctly syncs the input value (#3785)
  • Ensure --button-width and --input-width have the latest value (#3786)
  • Fix 'Invalid prop data-headlessui-state supplied to React.Fragment' warning (#3788)
  • Ensure element in ref callback is always connected when rendering in a Portal (#3789)
  • Ensure form state is up to date when using uncontrolled components (#3790)
  • Ensure data-open on ComboboxInput is up to date (#3791)
  • Ensure changing the immediate prop value on the Combobox component works as expected (#3792)

[2.2.7] - 2025-07-30

Fixed

  • Fix incorrect double invocation of menu items, listbox options and combobox options (#3766)
  • Fix memory leak in SSR environment (#3767)
  • Ensure programmatic .click() on MenuButton ref works (#3768)
  • Don't activate hovered items while using the keyboard (#3769)

[2.2.6] - 2025-07-24

Fixed

... (truncated)

Commits

Updates @inkeep/cxkit-react from 0.5.117 to 0.5.119

Commits

Updates @opentelemetry/api from 1.9.0 to 1.9.1

Release notes

Sourced from @​opentelemetry/api's releases.

api/v1.9.1

1.9.1

🐛 (Bug Fix)

  • fix(api): prioritize esnext export condition as it is more specific #5458
  • fix(api): update diag consoleLogger to use original console methods to prevent infinite loop when a console instrumentation is present #6395
  • fix(api): use Attributes instead of deprecated SpanAttributes in SpanOptions #6478 @​overbalance
  • fix(diag): change types in DiagComponentLogger from any to unknown#5478 @​loganrosen
  • fix(api): re-introduce fallback chain for global utils #6523 @​pichlermarc

🏠 (Internal)

Changelog

Sourced from @​opentelemetry/api's changelog.

1.9.1

🐛 (Bug Fix)

🏠 (Internal)

  • chore: fix cross project links and missing implicitly exported types #3533 @​legendecas
  • feat(sdk-metrics): add exponential histogram mapping functions #3504 @​mwear
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​opentelemetry/api since your current version.


Updates @radix-ui/react-accordion from 1.2.3 to 1.2.20

Changelog

Sourced from @​radix-ui/react-accordion's changelog.

1.2.20

  • Reverted breaking changes that caused compatibility issues with React Server Components.
  • Updated dependencies: @radix-ui/react-collapsible@1.1.20, @radix-ui/react-collection@1.1.15, @radix-ui/react-compose-refs@1.1.5, @radix-ui/react-context@1.2.2, @radix-ui/react-direction@1.1.4, @radix-ui/react-id@1.1.4, @radix-ui/react-primitive@2.1.10, @radix-ui/react-use-controllable-state@1.2.6

1.2.19

  • Updated dependencies: @radix-ui/react-collection@1.1.14, @radix-ui/react-primitive@2.1.9, @radix-ui/react-collapsible@1.1.19

1.2.18

  • Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
  • Updated dependencies: @radix-ui/primitive@1.1.7, @radix-ui/react-collapsible@1.1.18, @radix-ui/react-collection@1.1.13, @radix-ui/react-compose-refs@1.1.4, @radix-ui/react-context@1.2.1, @radix-ui/react-direction@1.1.3, @radix-ui/react-id@1.1.3, @radix-ui/react-primitive@2.1.8, @radix-ui/react-use-controllable-state@1.2.5

1.2.17

  • Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.
  • Updated dependencies: @radix-ui/react-collapsible@1.1.17, @radix-ui/react-use-controllable-state@1.2.4, @radix-ui/primitive@1.1.6, @radix-ui/react-collection@1.1.12, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.2.0, @radix-ui/react-direction@1.1.2, @radix-ui/react-id@1.1.2, @radix-ui/react-primitive@2.1.7

1.2.16

  • Updated dependencies: @radix-ui/primitive@1.1.5, @radix-ui/react-context@1.2.0, @radix-ui/react-collapsible@1.1.16, @radix-ui/react-collection@1.1.12

1.2.15

  • Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-collapsible@1.1.15, @radix-ui/react-collection@1.1.11

1.2.14

  • Fixed Duplicate index signature errors that surfaced when consuming multiple packages together.
  • Updated dependencies: @radix-ui/react-primitive@2.1.6, @radix-ui/react-collection@1.1.10, @radix-ui/react-collapsible@1.1.14

1.2.13

  • Added repository.directory to all package.json files
  • Updated dependencies: @radix-ui/react-collapsible@1.1.13, @radix-ui/react-collection@1.1.9, @radix-ui/react-direction@1.1.2, @radix-ui/primitive@1.1.4, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.1.4, @radix-ui/react-id@1.1.2, @radix-ui/react-primitive@2.1.5, @radix-ui/react-use-controllable-state@1.2.3

1.2.12

  • Updated dependencies: @radix-ui/primitive@1.1.3, @radix-ui/react-context@1.1.3, @radix-ui/react-collapsible@1.1.12, @radix-ui/react-collection@1.1.8, @radix-ui/react-primitive@2.1.4

1.2.11

  • Replace deprecated 'ElementRef' with 'ComponentRef' (#3426)
  • Updated dependencies: @radix-ui/react-collapsible@1.1.11, @radix-ui/react-collection@1.1.7, @radix-ui/react-primitive@2.1.3

1.2.10

  • Updated dependencies: @radix-ui/react-collection@1.1.6, @radix-ui/react-primitive@2.1.2, @radix-ui/react-collapsible@1.1.10

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​radix-ui/react-accordion since your current version.


Updates @radix-ui/react-collapsible from 1.1.11 to 1.1.20

Changelog

Sourced from @​radix-ui/react-collapsible's changelog.

1.1.20

  • Reverted breaking changes that caused compatibility issues with React Server Components.
  • Updated dependencies: @radix-ui/react-compose-refs@1.1.5, @radix-ui/react-context@1.2.2, @radix-ui/react-id@1.1.4, @radix-ui/react-presence@1.1.10, @radix-ui/react-primitive@2.1.10, @radix-ui/react-use-controllable-state@1.2.6, @radix-ui/react-use-layout-effect@1.1.4

1.1.19

  • Updated dependencies: @radix-ui/react-primitive@2.1.9

1.1.18

  • Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
  • Updated dependencies: @radix-ui/primitive@1.1.7, @radix-ui/react-compose-refs@1.1.4, @radix-ui/react-context@1.2.1, @radix-ui/react-id@1.1.3, @radix-ui/react-presence@1.1.9, @radix-ui/react-primitive@2.1.8, @radix-ui/react-use-controllable-state@1.2.5, @radix-ui/react-use-layout-effect@1.1.3

1.1.17

  • Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.
  • Updated dependencies: @radix-ui/react-presence@1.1.8, @radix-ui/react-use-controllable-state@1.2.4, @radix-ui/primitive@1.1.6, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.2.0, @radix-ui/react-id@1.1.2, @radix-ui/react-primitive@2.1.7, @radix-ui/react-use-layout-effect@1.1.2

1.1.16

  • Updated dependencies: @radix-ui/primitive@1.1.5, @radix-ui/react-context@1.2.0, @radix-ui/react-presence@1.1.7

1.1.15

  • Updated dependencies: @radix-ui/react-primitive@2.1.7

1.1.14

  • Updated dependencies: @radix-ui/react-primitive@2.1.6

1.1.13

  • Fixed triggers referencing a non-existent element via aria-controls when their content is removed from the DOM (credit to @​dodomorandi for the original PR)
  • Added repository.directory to all package.json files
  • Updated dependencies: @radix-ui/react-presence@1.1.6, @radix-ui/primitive@1.1.4, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.1.4, @radix-ui/react-id@1.1.2, @radix-ui/react-primitive@2.1.5, @radix-ui/react-use-controllable-state@1.2.3, @radix-ui/react-use-layout-effect@1.1.2

1.1.12

  • Updated dependencies: @radix-ui/react-presence@1.1.5, @radix-ui/primitive@1.1.3, @radix-ui/react-context@1.1.3, @radix-ui/react-primitive@2.1.4
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​radix-ui/react-collapsible since your current version.


Updates @radix-ui/react-dialog from 1.1.6 to 1.1.23

Changelog

Sourced from @​radix-ui/react-dialog's changelog.

1.1.23

  • Reverted breaking changes that caused compatibility issues with React Server Components.
  • Updated dependencies: @radix-ui/react-compose-refs@1.1.5, @radix-ui/react-context@1.2.2, @radix-ui/react-dismissable-layer@1.1.19, @radix-ui/react-focus-guards@1.1.6, @radix-ui/react-focus-scope@1.1.16, @radix-ui/react-id@1.1.4, @radix-ui/react-portal@1.1.17, @radix-ui/react-presence@1.1.10, @radix-ui/react-primitive@2.1.10, @radix-ui/react-slot@1.3.3, @radix-ui/react-use-controllable-state@1.2.6, @radix-ui/react-use-layout-effect@1.1.4

1.1.22

  • Updated dependencies: @radix-ui/react-slot@1.3.2, @radix-ui/react-primitive@2.1.9, @radix-ui/react-dismissable-layer@1.1.18, @radix-ui/react-focus-scope@1.1.15, @radix-ui/react-portal@1.1.16

1.1.21

  • Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
  • Updated dependencies: @radix-ui/primitive@1.1.7, @radix-ui/react-compose-refs@1.1.4, @radix-ui/react-context@1.2.1, @radix-ui/react-dismissable-layer@1.1.17, @radix-ui/react-focus-guards@1.1.5, @radix-ui/react-focus-scope@1.1.14, @radix-ui/react-id@1.1.3, @radix-ui/react-portal@1.1.15, @radix-ui/react-presence@1.1.9, @radix-ui/react-primitive@2.1.8, @radix-ui/react-slot@1.3.1, @radix-ui/react-use-controllable-state@1.2.5, @radix-ui/react-use-layout-effect@1.1.3

1.1.20

  • Fixed broken ARIA references in Dialogs where a title or description elements are not rendered.
  • Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.
  • Updated dependencies: @radix-ui/react-dismissable-layer@1.1.16, @radix-ui/react-focus-scope@1.1.13, @radix-ui/react-portal@1.1.14, @radix-ui/react-presence@1.1.8, @radix-ui/react-use-controllable-state@1.2.4, @radix-ui/primitive@1.1.6, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.2.0, @radix-ui/react-focus-guards@1.1.4, @radix-ui/react-id@1.1.2, @radix-ui/react-primitive@2.1.7, @radix-ui/react-slot@1.3.0, @radix-ui/react-use-layout-effect@1.1.2

1.1.19

  • Updated dependencies: @radix-ui/react-dismissable-layer@1.1.15, @radix-ui/primitive@1.1.5, @radix-ui/react-context@1.2.0, @radix-ui/react-focus-scope@1.1.12, @radix-ui/react-presence@1.1.7

1.1.18

  • Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-dismissable-layer@1.1.14, @radix-ui/react-focus-scope@1.1.11, @radix-ui/react-portal@1.1.13

1.1.17

  • Removed dev-only warnings for dialogs when title and/or description is not rendered.
  • Fixed Dismissable Layer so outside interactions stopped by extension UI overlays do not dismiss dialogs or popovers.
  • Updated dependencies: @radix-ui/react-slot@1.3.0, @radix-ui/react-dismissable-layer@1.1.13, @radix-ui/react-primitive@2.1.6, @radix-ui/react-focus-scope@1.1.10, @radix-ui/react-portal@1.1.12

1.1.16

  • Fixed disabled pointer events in closed dialogs
  • Fixed a bug where iOS text selection and editing on HTML inputs within react-dialog were broken
  • Fixed triggers referencing a non-existent element via aria-controls when their content is removed from the DOM (credit to @​dodomorandi for the original PR)
  • Added repository.directory to all package.json files
  • Updated dependencies: @radix-ui/react-presence@1.1.6, @radix-ui/react-slot@1.2.5, @radix-ui/react-focus-guards@1.1.4, @radix-ui/react-dismissable-layer@1.1.12, @radix-ui/primitive@1.1.4, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.1.4, @radix-ui/react-focus-scope@1.1.9, @radix-ui/react-id@1.1.2, @radix-ui/react-portal@1.1.11, @radix-ui/react-primitive@2.1.5, @radix-ui/react-use-controllable-state@1.2.3

1.1.15

  • Updated dependencies: @radix-ui/react-presence@1.1.5, @radix-ui/react-slot@1.2.4, @radix-ui/react-focus-guards@1.1.3, @radix-ui/primitive@1.1.3, @radix-ui/react-context@1.1.3, @radix-ui/react-primitive@2.1.4, @radix-ui/react-dismissable-layer@1.1.11, @radix-ui/react-focus-scope@1.1.8, @radix-ui/react-portal@1.1.10

1.1.14

  • Replace deprecated 'ElementRef' with 'ComponentRef' (#3426)
  • Updated dependencies: @radix-ui/react-dismissable-layer@1.1.10, @radix-ui/react-focus-scope@1.1.7, @radix-ui/react-portal@1.1.9, @radix-ui/react-slot@1.2.3, @radix-ui/react-primitive@2.1.3

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​radix-ui/react-dialog since your current version.


Updates @radix-ui/react-dropdown-menu from 2.1.6 to 2.1.24

Changelog

Sourced from @​radix-ui/react-dropdown-menu's changelog.

2.1.24

  • Reverted breaking changes that caused compatibility issues with React Server Components.
  • Updated dependencies: @radix-ui/react-compose-refs@1.1.5, @radix-ui/react-context@1.2.2, @radix-ui/react-id@1.1.4, @radix-ui/react-menu@2.1.24, @radix-ui/react-primitive@2.1.10, @radix-ui/react-use-controllable-state@1.2.6

2.1.23

  • Updated dependencies: @radix-ui/react-menu@2.1.23, @radix-ui/react-primitive@2.1.9

2.1.22

  • Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
  • Updated dependencies: @radix-ui/primitive@1.1.7, @radix-ui/react-compose-refs@1.1.4, @radix-ui/react-context@1.2.1, @radix-ui/react-id@1.1.3, @radix-ui/react-menu@2.1.22, @radix-ui/react-primitive@2.1.8, @radix-ui/react-use-controllable-state@1.2.5

2.1.21

  • Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.
  • Updated dependencies: @radix-ui/react-menu@2.1.21, @radix-ui/react-use-controllable-state@1.2.4, @radix-ui/primitive@1.1.6, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.2.0, @radix-ui/react-id@1.1.2, @radix-ui/react-primitive@2.1.7

2.1.20

  • Fixed menu items, tab triggers, toolbar links, and select items intercepting Space/Enter keys that originate from focusable descendants.
  • Updated dependencies: @radix-ui/primitive@1.1.5, @radix-ui/react-context@1.2.0, @radix-ui/react-menu@2.1.20

2.1.19

  • Fixed infinite re-render loop in React 19 caused by unstable composed ref callback references.

Other updates

  • Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-menu@2.1.19

2.1.18

  • Fixed a bug where menus and submenus remained open after a window loses focus.
  • Updated dependencies: @radix-ui/react-menu@2.1.18, @radix-ui/react-primitive@2.1.6

2.1.17

  • Added repository.directory to all package.json files
  • Updated dependencies: @radix-ui/react-menu@2.1.17, @radix-ui/primitive@1.1.4, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.1.4, @radix-ui/react-id@1.1.2, @radix-ui/react-primitive@2.1.5, @radix-ui/react-use-controllable-state@1.2.3

2.1.16

  • Updated dependencies: @radix-ui/primitive@1.1.3, @radix-ui/react-context@1.1.3, @radix-ui/react-menu@2.1.16, @radix-ui/react-primitive@2.1.4

2.1.15

  • Replace deprecated 'ElementRef' with 'ComponentRef' (#3426)
  • Updated dependencies: @radix-ui/react-menu@2.1.15, @radix-ui/react-primitive@2.1.3

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​radix-ui/react-dropdown-menu since your current version.


Updates @radix-ui/react-hover-card from 1.1.6 to 1.1.23

Changelog

Sourced from @​radix-ui/react-hover-card's changelog.

1.1.23

  • Reverted breaking changes that caused compatibility issues with React Server Components.
  • Updated dependencies: @radix-ui/react-compose-refs@1.1.5, @radix-ui/react-context@1.2.2, @radix-ui/react-dismissable-layer@1.1.19, @radix-ui/react-popper@1.3.7, @radix-ui/react-portal@1.1.17, @radix...

    Description has been truncated


    [!NOTE]
    Medium Risk
    Wide patch surface on Next.js and the AI/MCP chat stack could change streaming or runtime behavior without code changes; scope is limited to semver patches and lockfile-only updates.

    Overview
    Dependency-only update in package.json: 27 packages move to newer patch (and caret) versions; there is no change to app source in this diff.

    The Vercel AI SDK stack is updated together (ai 7.0.16→7.0.48, @ai-sdk/mcp, @ai-sdk/openai, @ai-sdk/openai-compatible, @ai-sdk/react), which affects the docs chat API and QA chatbot paths that use streamText / MCP clients. Next.js goes from 16.2.6 to 16.2.12. UI primitives get a batch of Radix and @headlessui/react patches used across the docs site.

    Smaller bumps include jsonwebtoken (Metabase embed signing), langfuse JS client, @opentelemetry/api, @inkeep/cxkit-react, and dev @types/*.

    Reviewed by Cursor Bugbot for commit b2ffcdd9b9e644cd0bd8ed77697dba7f7581cc41. Bugbot is set up for automated code reviews on this repo. Configure here.

Bumps the patches group with 27 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@ai-sdk/mcp](https://github.com/vercel/ai/tree/HEAD/packages/mcp) | `2.0.7` | `2.0.22` |
| [@ai-sdk/openai](https://github.com/vercel/ai/tree/HEAD/packages/openai) | `4.0.8` | `4.0.27` |
| [@ai-sdk/openai-compatible](https://github.com/vercel/ai/tree/HEAD/packages/openai-compatible) | `3.0.5` | `3.0.20` |
| [@ai-sdk/react](https://github.com/vercel/ai/tree/HEAD/packages/react) | `4.0.17` | `4.0.51` |
| [@headlessui/react](https://github.com/tailwindlabs/headlessui/tree/HEAD/packages/@headlessui-react) | `2.2.0` | `2.2.10` |
| [@inkeep/cxkit-react](https://github.com/inkeep/widget/tree/HEAD/packages/react) | `0.5.117` | `0.5.119` |
| [@opentelemetry/api](https://github.com/open-telemetry/opentelemetry-js) | `1.9.0` | `1.9.1` |
| [@radix-ui/react-accordion](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/accordion) | `1.2.3` | `1.2.20` |
| [@radix-ui/react-collapsible](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/collapsible) | `1.1.11` | `1.1.20` |
| [@radix-ui/react-dialog](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dialog) | `1.1.6` | `1.1.23` |
| [@radix-ui/react-dropdown-menu](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dropdown-menu) | `2.1.6` | `2.1.24` |
| [@radix-ui/react-hover-card](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/hover-card) | `1.1.6` | `1.1.23` |
| [@radix-ui/react-label](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/label) | `2.1.2` | `2.1.15` |
| [@radix-ui/react-popover](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/popover) | `1.1.15` | `1.1.23` |
| [@radix-ui/react-presence](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/presence) | `1.1.5` | `1.1.10` |
| [@radix-ui/react-scroll-area](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/scroll-area) | `1.2.9` | `1.2.18` |
| [@radix-ui/react-separator](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/separator) | `1.1.2` | `1.1.15` |
| [@radix-ui/react-tabs](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/tabs) | `1.1.3` | `1.1.21` |
| [@radix-ui/react-use-controllable-state](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/use-controllable-state) | `1.2.2` | `1.2.6` |
| [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `7.0.16` | `7.0.48` |
| [jsonwebtoken](https://github.com/auth0/node-jsonwebtoken) | `9.0.2` | `9.0.3` |
| [langfuse](https://github.com/langfuse/langfuse-js/tree/HEAD/langfuse) | `3.38.4` | `3.38.20` |
| [next](https://github.com/vercel/next.js) | `16.2.6` | `16.2.12` |
| [openai-edge](https://github.com/dan-kwiat/openai-edge) | `1.2.2` | `1.2.3` |
| [use-stick-to-bottom](https://github.com/samdenty/use-stick-to-bottom) | `1.1.1` | `1.1.6` |
| [@types/hast](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/hast) | `3.0.4` | `3.0.5` |
| [@types/mdx](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/mdx) | `2.0.13` | `2.0.14` |



Updates `@ai-sdk/mcp` from 2.0.7 to 2.0.22
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/mcp/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/mcp@2.0.22/packages/mcp)

Updates `@ai-sdk/openai` from 4.0.8 to 4.0.27
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/openai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/openai@4.0.27/packages/openai)

Updates `@ai-sdk/openai-compatible` from 3.0.5 to 3.0.20
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/openai-compatible/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/openai-compatible@3.0.20/packages/openai-compatible)

Updates `@ai-sdk/react` from 4.0.17 to 4.0.51
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/react@4.0.51/packages/react)

Updates `@headlessui/react` from 2.2.0 to 2.2.10
- [Release notes](https://github.com/tailwindlabs/headlessui/releases)
- [Changelog](https://github.com/tailwindlabs/headlessui/blob/main/packages/@headlessui-react/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/headlessui/commits/@headlessui/react@v2.2.10/packages/@headlessui-react)

Updates `@inkeep/cxkit-react` from 0.5.117 to 0.5.119
- [Commits](https://github.com/inkeep/widget/commits/HEAD/packages/react)

Updates `@opentelemetry/api` from 1.9.0 to 1.9.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v1.9.0...v1.9.1)

Updates `@radix-ui/react-accordion` from 1.2.3 to 1.2.20
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/accordion/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/accordion)

Updates `@radix-ui/react-collapsible` from 1.1.11 to 1.1.20
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/collapsible/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/collapsible)

Updates `@radix-ui/react-dialog` from 1.1.6 to 1.1.23
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dialog/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dialog)

Updates `@radix-ui/react-dropdown-menu` from 2.1.6 to 2.1.24
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dropdown-menu/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dropdown-menu)

Updates `@radix-ui/react-hover-card` from 1.1.6 to 1.1.23
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/hover-card/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/hover-card)

Updates `@radix-ui/react-label` from 2.1.2 to 2.1.15
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/label/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/label)

Updates `@radix-ui/react-popover` from 1.1.15 to 1.1.23
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/popover/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/popover)

Updates `@radix-ui/react-presence` from 1.1.5 to 1.1.10
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/presence/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/presence)

Updates `@radix-ui/react-scroll-area` from 1.2.9 to 1.2.18
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/scroll-area/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/scroll-area)

Updates `@radix-ui/react-separator` from 1.1.2 to 1.1.15
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/separator/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/separator)

Updates `@radix-ui/react-tabs` from 1.1.3 to 1.1.21
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/tabs/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/tabs)

Updates `@radix-ui/react-use-controllable-state` from 1.2.2 to 1.2.6
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/use-controllable-state/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/use-controllable-state)

Updates `ai` from 7.0.16 to 7.0.48
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@7.0.48/packages/ai)

Updates `jsonwebtoken` from 9.0.2 to 9.0.3
- [Changelog](https://github.com/auth0/node-jsonwebtoken/blob/master/CHANGELOG.md)
- [Commits](auth0/node-jsonwebtoken@v9.0.2...v9.0.3)

Updates `langfuse` from 3.38.4 to 3.38.20
- [Release notes](https://github.com/langfuse/langfuse-js/releases)
- [Commits](https://github.com/langfuse/langfuse-js/commits/v3.38.20/langfuse)

Updates `next` from 16.2.6 to 16.2.12
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.2.6...v16.2.12)

Updates `openai-edge` from 1.2.2 to 1.2.3
- [Commits](https://github.com/dan-kwiat/openai-edge/commits)

Updates `use-stick-to-bottom` from 1.1.1 to 1.1.6
- [Changelog](https://github.com/stackblitz-labs/use-stick-to-bottom/blob/main/CHANGELOG.md)
- [Commits](https://github.com/samdenty/use-stick-to-bottom/commits)

Updates `@types/hast` from 3.0.4 to 3.0.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/hast)

Updates `@types/mdx` from 2.0.13 to 2.0.14
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/mdx)

---
updated-dependencies:
- dependency-name: "@ai-sdk/mcp"
  dependency-version: 2.0.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: "@ai-sdk/openai"
  dependency-version: 4.0.27
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: "@ai-sdk/openai-compatible"
  dependency-version: 3.0.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: "@ai-sdk/react"
  dependency-version: 4.0.51
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: "@headlessui/react"
  dependency-version: 2.2.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: "@inkeep/cxkit-react"
  dependency-version: 0.5.119
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: "@opentelemetry/api"
  dependency-version: 1.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: "@radix-ui/react-accordion"
  dependency-version: 1.2.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: "@radix-ui/react-collapsible"
  dependency-version: 1.1.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: "@radix-ui/react-dialog"
  dependency-version: 1.1.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: "@radix-ui/react-dropdown-menu"
  dependency-version: 2.1.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: "@radix-ui/react-hover-card"
  dependency-version: 1.1.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: "@radix-ui/react-label"
  dependency-version: 2.1.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: "@radix-ui/react-popover"
  dependency-version: 1.1.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: "@radix-ui/react-presence"
  dependency-version: 1.1.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: "@radix-ui/react-scroll-area"
  dependency-version: 1.2.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: "@radix-ui/react-separator"
  dependency-version: 1.1.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: "@radix-ui/react-tabs"
  dependency-version: 1.1.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: "@radix-ui/react-use-controllable-state"
  dependency-version: 1.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: ai
  dependency-version: 7.0.48
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: jsonwebtoken
  dependency-version: 9.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: langfuse
  dependency-version: 3.38.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: next
  dependency-version: 16.2.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: openai-edge
  dependency-version: 1.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: use-stick-to-bottom
  dependency-version: 1.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: "@types/hast"
  dependency-version: 3.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: "@types/mdx"
  dependency-version: 2.0.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patches
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 10, 2026
@vercel

vercel Bot commented Aug 10, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
langfuse-docs Ready Ready Preview Aug 10, 2026 10:36am

Request Review

@dosubot dosubot Bot added the size:XS This PR changes 0-9 lines, ignoring generated files. label Aug 10, 2026
@github-actions
github-actions Bot enabled auto-merge August 10, 2026 10:33
@dosubot dosubot Bot added the auto-merge This PR is set to be merged label Aug 10, 2026

@claude claude Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM — routine dependency patch bump, no bugs found.

Extended reasoning...

Overview

This PR only touches package.json and pnpm-lock.yaml, bumping 27 packages within a dependabot "patches" group (AI SDK packages, Radix UI primitives, Next.js, jsonwebtoken, langfuse, etc.). No application source code, content, or configuration files are changed.

Security risks

jsonwebtoken (9.0.2 → 9.0.3) is a security-relevant dependency, but this is a patch release from upstream and not something introduced by this PR's diff. No new attack surface is introduced by this change itself — it is purely a version bump with no code changes on the langfuse-docs side.

Level of scrutiny

This warrants light scrutiny: it's a mechanical, tool-generated lockfile/manifest update with no logic changes. The main risk in this class of PR is a transitive dependency resolution issue or a breaking change slipping in under a "patch" label, but all bumps here are within existing major/minor version lines and the lockfile is internally consistent.

Other factors

No CODEOWNERS-sensitive files are touched, no large-scale design decisions are involved, and the bug hunting system found no issues. This matches the standard profile of PRs that don't need human review before merging.

@github-actions
github-actions Bot added this pull request to the merge queue Aug 11, 2026
@github-merge-queue
github-merge-queue Bot removed this pull request from the merge queue due to no response for status checks Aug 11, 2026
@dosubot dosubot Bot removed the auto-merge This PR is set to be merged label Aug 11, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 11, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 11, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/patches-6c2763dab2 branch August 11, 2026 10:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code size:XS This PR changes 0-9 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants