Skip to content

chore(deps): bump the js-npm group in /crates/bashkit-js with 4 updates - #2781

Merged
chaliy merged 1 commit into
mainfrom
dependabot/npm_and_yarn/crates/bashkit-js/js-npm-6e8281f0c4
Oct 26, 2026
Merged

chore(deps): bump the js-npm group in /crates/bashkit-js with 4 updates#2781
chaliy merged 1 commit into
mainfrom
dependabot/npm_and_yarn/crates/bashkit-js/js-npm-6e8281f0c4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 26, 2026

Copy link
Copy Markdown
Contributor

Bumps the js-npm group in /crates/bashkit-js with 4 updates: @langchain/core, @napi-rs/cli, ava and oxlint.

Updates @langchain/core from 1.2.18 to 1.3.0

Release notes

Sourced from @​langchain/core's releases.

@​langchain/core@​1.3.0

Minor Changes

  • #11986 2caf64d Thanks @​richardscarrott! - feat: stream tool-call args as tool-call-delta slices

    Tool-call and server-tool-call args now stream as tool-call-delta events, which carry only the new slice of the args, instead of block-delta snapshots of the args so far. A large tool call now costs about the same bytes on the wire as the same length of text.

    • This covers the compat bridge (any model that only implements _streamResponseChunks), the OpenAI-compatible converter (OpenAI Completions, Groq, Mistral, IBM, OpenRouter, Perplexity, DeepSeek, Fireworks, Together AI and xAI Completions), OpenAI and xAI Responses, Anthropic (client and server tool calls) and Bedrock Converse. Google and Ollama still send one complete snapshot per call.
    • A tool call's id, name and index go on content-block-start, which carries no args. An id or name that arrives later reaches consumers on content-block-finish.
    • If you read raw events and their block-delta fields.args mid-stream, or write agent stream transformers that do, read tool-call-delta instead. await stream, .toolCalls and the assembled message are unchanged.
    • Upgrade your clients first. Older clients mishandle tool-call-delta. You need @langchain/langgraph-sdk 1.12.6 or later; @langchain/react, @langchain/vue, @langchain/svelte or @langchain/angular 1.2.6 or later; and langchain-core 1.6.13 or later for Python clients.
    • To hold back, pin @langchain/core below 1.3.0. That also keeps you on @langchain/openai, @langchain/anthropic, @langchain/aws and @langchain/xai versions that send snapshots.

@​langchain/core@​1.2.20

Patch Changes

  • #11922 d71c542 Thanks @​richardscarrott! - feat(core): add midConversationSystemMessages and midConversationTools to ModelProfile. They say whether a chat model sends a system message after the first turn in place, and whether it can add a tool through a message rather than the request's tool list. Either way the prompt prefix before it stays unchanged.

@​langchain/core@​1.2.19

Patch Changes

  • #11982 5af4684 Thanks @​richardscarrott! - feat(core): read tool-call-delta in ChatModelStream

    • ChatModelStream appends tool-call-delta slices to a tool call's args, and still replaces them on block-delta
    • It ignores delta types it doesn't recognize instead of throwing Unknown delta type
Commits
  • 38eb4d8 chore: version packages (#12018)
  • dae3b1f chore(core): fill in client versions in tool-call-delta changeset (#12019)
  • 2caf64d feat(core,openai,anthropic,aws,xai): stream tool-call args as `tool-call-delt...
  • 8a008ea test(core): accept either order of a chunk's stream events in chat model chai...
  • f65acc3 chore(deps): restore missing @modelcontextprotocol/core@2.3.0 lockfile entr...
  • 6a0ab38 chore: version packages (#12008)
  • 654c7c6 chore(deps-dev): bump @​modelcontextprotocol/server from 2.3.0 to 2.3.1 (#12005)
  • f096a32 fix(langchain): deliver final answers after todo updates (#11989)
  • c690992 fix: update Node.js to October 2026 security release (#12007)
  • 0c5e7bc fix(langchain): avoid full-state copies in parallel tool tasks (#11990)
  • Additional commits viewable in compare view

Updates @napi-rs/cli from 3.10.8 to 3.10.9

Release notes

Sourced from @​napi-rs/cli's releases.

@​napi-rs/cli@​3.10.9

What's Changed

New Contributors

... (truncated)

Commits
  • bafc7db chore(release): publish
  • 8603be9 chore(deps): update dependency oxfmt to ^0.74.0 (#3629)
  • 3caf68e chore(deps): update dependency vite to v8.3.3 [security] (#3632)
  • 0ad70a7 fix(cli): take over the WASI flavor of a binding a postbuild fallback swaps i...
  • 5547cd4 fix(cli): resolve null when the incarnation probe's spawn throws synchronousl...
  • b3bb7a4 feat(napi): cancel a ReadableStream through its Reader, and fix ReadableStrea...
  • 55657a5 chore(deps): update dependency oxc-parser to ^0.155.0 (#3628)
  • 9699c60 chore(deps): update release-plz/action action to v0.5.143 (#3627)
  • f85954a fix(napi): set the custom GC aborted flag before Node closes its tsfn (#3626)
  • d03a856 test(cli): cover FreeBSD arm64 (#3620)
  • Additional commits viewable in compare view

Updates ava from 8.0.2 to 8.1.1

Release notes

Sourced from ava's releases.

v8.1.1

This is a patch release to fix some npm metadata. I've included a wider dependency update, but there's no changed functionality.

What's Changed

Full Changelog: avajs/ava@v8.1.0...v8.1.1

v8.1.0

Code block formatting for string snapshots

This release adds an overload for t.snapshot():

t.snapshot(expected, {formatAsCodeBlock}, message?)

The overload is only accepted when expected is a string. The string is stored verbatim and rendered as a fenced code block in the resulting .snap.md file. Set formatAsCodeBlock to true for a generic code block, or a non-empty language identifier string for syntax highlighting:

test('generates code', t => {
	const code = generate();
	t.snapshot(code, {formatAsCodeBlock: 'js'});
});

The resulting snapshots can only be read with AVA 8.1 or newer, but snapshots that do not contain code blocks are backwards compatible. And existing snapshots can still be read, of course.

Performance improvements

  • ~40% faster for many small test files (startup-bound)
  • ~30% faster for a single file with thousands of tests
  • ~50% faster for many files run concurrently

What's Changed

Full Changelog: avajs/ava@v8.0.2...v8.1.0

Commits

Updates oxlint from 1.88.0 to 1.89.0

Release notes

Sourced from oxlint's releases.

oxlint v1.89.0

💥 BREAKING CHANGES

  • e3c1b11 ast: [BREAKING] Preserve lone surrogates in static property names (#27095) (Dunqing)
  • a0a987c ast: [BREAKING] Preserve lone surrogates in static member names (#26677) (Dunqing)

🚀 Features

  • 770ada4 linter: Mark vue 3 rules as recommended (#27717) (Cam McHenry)
  • ba38c1d linter: Mark react/react-hooks rules as recommended (#27701) (Cam McHenry)
  • d85a3ba linter: Mark promise rules as recommended (#27693) (Cam McHenry)
  • e71c88a linter: Mark node rule as recommended (#27692) (Cam McHenry)
  • 7213f61 linter: Mark nextjs rules as recommended (#27691) (Cam McHenry)
  • d7c6b26 linter: Mark jsx-a11y rules as recommended (#27690) (Cam McHenry)
  • 199dfdc linter: Mark jsdoc rules as recommended (#27689) (Cam McHenry)
  • 780bff3 linter: Mark jest/vitest rules as recommended (#27672) (Cam McHenry)
  • 6ae6859 linter: Mark import rules as recommended (#27671) (Cam McHenry)
  • b7a1df3 linter: Mark unicorn rules as recommended (#27670) (Cam McHenry)
  • c44a355 linter: Mark typescript rules as recommended from upstream (#27634) (Cam McHenry)
  • 6b49dba linter: Mark eslint rules as recommended from upstream (#27632) (Cam McHenry)

🐛 Bug Fixes

  • 7c47246 linter: Check module specifiers and string values that contain lone surrogates (#26717) (Dunqing)
  • 782ab6e linter: Search string values without UTF-8 conversion (#26716) (Dunqing)
  • 326904f linter/unicorn/no-useless-undefined: Allow undefined in React.useRef (#25027) (Chris Dokurno)
  • f9cf165 linter/unicorn/prefer-spread: Ignore super method calls (#27868) (camc314)
  • 00484e1 linter/eslint/prefer-const: Report destructuring assignments inside blocks (#27856) (camc314)
  • 9c35461 linter/eslint/sort-vars: Report every out-of-order declaration (#27767) (camc314)
  • 01e1c5e linter/unicorn/prefer-string-replace-all: Resolve regex variables (#27769) (camc314)
  • 7f474d5 linter/eslint/no-loop-func: Detect writes after the loop (#27754) (camc314)
  • 4b7fea6 linter/eslint/block-scoped-var: Ignore declarations without writes (#27760) (camc314)
  • 2947917 linter/eslint/no-lonely-if: Check final else blocks in else-if chains (#27759) (camc314)
  • fc039b5 linter/eslint/sort-imports: Check imports after other statements (#27749) (camc314)
  • 1acba97 linter/unicorn/prefer-at: Report slice index reads once (#27762) (camc314)
  • 6190e26 linter/eslint/prefer-arrow-callback: Ignore functions used as conditional tests (#27533) (Anzal Husain Abidi)
  • b3cdaaf linter/eslint/sort-keys: Check computed identifier names (#27748) (camc314)
  • 170e608 linter/unicorn/prefer-native-coercion-functions: Check object methods and function properties (#27750) (camc314)
  • 9261df7 linter/unicorn/prefer-string-raw: Check object property values (#27758) (camc314)
  • ddea86b linter/eslint/prefer-template: Report separate nested concatenations (#27764) (camc314)
  • 2c67197 linter/eslint/no-unused-vars: Count conditional calls in sequences as uses (#27755) (camc314)
  • 7f22fa0 linter/unicorn/prefer-regexp-test: Check logical operands in boolean contexts (#27761) (camc314)
  • 3c44398 linter/eslint/class-methods-use-this: Count this in parameter defaults (#27756) (camc314)
  • d85923f linter/eslint/no-param-reassign: Report rest parameter writes (#27765) (camc314)
  • 8ea47bb linter/unicorn/prefer-type-error: Handle parenthesized type checks (#27766) (camc314)
  • e96856c linter/unicorn/catch-error-name: Check unused underscore-prefixed names (#27751) (camc314)
  • d8ca399 linter/unicorn/no-array-callback-reference: Ignore callback factory calls (#27763) (camc314)
  • 1267ab8 linter/eslint/max-params: Count rest parameters (#27757) (camc314)
  • 9ff25c3 linter/eslint/no-useless-assignment: Report dead stores to function parameters (#27735) (camc314)
  • ee5e730 linter/eslint/no-setter-return: Check setters in property descriptors (#27731) (camc314)

... (truncated)

Changelog

Sourced from oxlint's changelog.

[1.89.0] - 2026-10-19

🐛 Bug Fixes

  • 9a424c2 oxlint,oxfmt: Correct Node.js TypeScript support range (#27699) (camc314)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the js-npm group in /crates/bashkit-js with 4 updates
6c5142f 
Bumps the js-npm group in /crates/bashkit-js with 4 updates: [@langchain/core](https://github.com/langchain-ai/langchainjs), [@napi-rs/cli](https://github.com/napi-rs/napi-rs), [ava](https://github.com/avajs/ava) and [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint).


Updates `@langchain/core` from 1.2.18 to 1.3.0
- [Release notes](https://github.com/langchain-ai/langchainjs/releases)
- [Commits](https://github.com/langchain-ai/langchainjs/compare/@langchain/core@1.2.18...@langchain/core@1.3.0)

Updates `@napi-rs/cli` from 3.10.8 to 3.10.9
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](https://github.com/napi-rs/napi-rs/compare/@napi-rs/cli@3.10.8...@napi-rs/cli@3.10.9)

Updates `ava` from 8.0.2 to 8.1.1
- [Release notes](https://github.com/avajs/ava/releases)
- [Commits](avajs/ava@v8.0.2...v8.1.1)

Updates `oxlint` from 1.88.0 to 1.89.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.89.0/npm/oxlint)

---
updated-dependencies:
- dependency-name: "@langchain/core"
  dependency-version: 1.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: js-npm
- dependency-name: "@napi-rs/cli"
  dependency-version: 3.10.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: js-npm
- dependency-name: ava
  dependency-version: 8.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: js-npm
- dependency-name: oxlint
  dependency-version: 1.89.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: js-npm
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript labels Oct 26, 2026
@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Oct 26, 2026

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Preview URL Updated (UTC)
✅ Deployment successful!
View logs		 bashkit 6c5142f Commit Preview URL

Branch Preview URL		 Oct 26 2026, 09:48 AM

@chaliy
chaliy merged commit 247ce4d into main Oct 26, 2026
32 checks passed
@chaliy
chaliy deleted the dependabot/npm_and_yarn/crates/bashkit-js/js-npm-6e8281f0c4 branch October 26, 2026 10:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@chaliy