[dependabot]

Bumps the examples-npm group with 6 updates in the /examples directory:

Package	From	To
@ai-sdk/openai	4.0.96	4.0.101
@langchain/core	1.2.18	1.3.0
@langchain/langgraph	1.5.1	1.5.2
@langchain/openai	1.6.2	1.7.0
ai	7.0.143	7.0.150
openai	7.36.0	7.43.0

Bumps the examples-npm group with 1 update in the /examples/browser directory: vite.

Updates @ai-sdk/openai from 4.0.96 to 4.0.101

Changelog

Sourced from @​ai-sdk/openai's changelog.

4.0.101

Patch Changes

• Updated dependencies [8202f5b]
• Updated dependencies [85d84a1]
  • @​ai-sdk/provider-utils@​5.0.67
  • @​ai-sdk/provider@​4.0.33

4.0.100

Patch Changes

• 43ad966: Report interrupted when a stream ends cleanly without its provider completion signal, preserving partial output without emitting an error solely for the interruption.

  This applies to OpenAI (Chat, Responses, and Completions), Anthropic, Google (Generate Content and Interactions), Alibaba, Amazon Bedrock Converse, Cohere, DeepSeek, Groq, Hugging Face Responses, Mistral Chat, Moonshot AI, Open Responses, Perplexity, and xAI Responses. It also covers cutoffs in later Anthropic messages and Google automatic continuations.

  Compatibility notice: These streams previously fell back to other or omitted the finish part. Applications must now handle interrupted in finish-reason switches, mappings, and custom validation. Check finishReason === 'interrupted' to detect incomplete responses; interruption alone does not trigger error handling.

  Explicit unknown completion reasons still map to other. Actual provider, parsing, and transport errors retain their error paths; affected error paths that previously left the finish reason as other now report error. OpenAI-compatible remains unchanged.

• Updated dependencies [10026d1]

  • @​ai-sdk/provider@​4.0.32
  • @​ai-sdk/provider-utils@​5.0.66

4.0.99

Patch Changes

• 39a776b: Add a shared encodePathSegment helper and use it to encode provider-returned identifiers in credentialed follow-up request paths.
• c787919: Defer construction of provider validation schemas until first use to reduce package import time.
• 0257b47: feat(openai): support 12h prompt cache writes and cache prewarming
• Updated dependencies [b089ce8]
• Updated dependencies [39a776b]
  • @​ai-sdk/provider-utils@​5.0.65

4.0.98

Patch Changes

• 0c2a9de: Add maxOutputTokens and reasoning to experimental decision calls and forward them to language-model-backed decisions. Language-model adapters keep reasoning disabled when omitted. Native decision providers warn when either setting is unsupported.
• 8b728ec: fix(openai): preserve detected language codes in transcription responses
• 3cb1dae: fix(openai): forward shell_call timeout_ms and max_output_length to the shell tool and round-trip max_output_length
• Updated dependencies [0c2a9de]
• Updated dependencies [200c47f]
  • @​ai-sdk/provider@​4.0.31
  • @​ai-sdk/provider-utils@​5.0.64

4.0.97

... (truncated)

Commits

• 594495a Version Packages (#23857)
• 401cadc Version Packages (#23785)
• 43ad966 fix: report interrupted streams without completion signals (#23814)
• e6230e4 Version Packages (#23638)
• 0257b47 feat(openai): support 12h prompt cache writes and cache prewarming (#23635)
• c787919 perf(openai): defer schema construction until first use (#23667)
• 39a776b fix: share URL path segment encoding (#23679)
• 0a5c786 Version Packages (#23572)
• 0c2a9de feat: add maxOutputTokens and reasoning to decide (#23590)
• 8b728ec fix(openai): preserve detected language codes in transcription responses (#23...
• Additional commits viewable in compare view

Updates @langchain/core from 1.2.18 to 1.3.0

Release notes

Sourced from @​langchain/core's releases.

@​langchain/core@​1.3.0

Minor Changes

• #11986 2caf64d Thanks @​richardscarrott! - feat: stream tool-call args as tool-call-delta slices

  Tool-call and server-tool-call args now stream as tool-call-delta events, which carry only the new slice of the args, instead of block-delta snapshots of the args so far. A large tool call now costs about the same bytes on the wire as the same length of text.

  • This covers the compat bridge (any model that only implements _streamResponseChunks), the OpenAI-compatible converter (OpenAI Completions, Groq, Mistral, IBM, OpenRouter, Perplexity, DeepSeek, Fireworks, Together AI and xAI Completions), OpenAI and xAI Responses, Anthropic (client and server tool calls) and Bedrock Converse. Google and Ollama still send one complete snapshot per call.
  • A tool call's id, name and index go on content-block-start, which carries no args. An id or name that arrives later reaches consumers on content-block-finish.
  • If you read raw events and their block-delta fields.args mid-stream, or write agent stream transformers that do, read tool-call-delta instead. await stream, .toolCalls and the assembled message are unchanged.
  • Upgrade your clients first. Older clients mishandle tool-call-delta. You need @langchain/langgraph-sdk 1.12.6 or later; @langchain/react, @langchain/vue, @langchain/svelte or @langchain/angular 1.2.6 or later; and langchain-core 1.6.13 or later for Python clients.
  • To hold back, pin @langchain/core below 1.3.0. That also keeps you on @langchain/openai, @langchain/anthropic, @langchain/aws and @langchain/xai versions that send snapshots.

@​langchain/core@​1.2.20

Patch Changes

• #11922 d71c542 Thanks @​richardscarrott! - feat(core): add midConversationSystemMessages and midConversationTools to ModelProfile. They say whether a chat model sends a system message after the first turn in place, and whether it can add a tool through a message rather than the request's tool list. Either way the prompt prefix before it stays unchanged.

@​langchain/core@​1.2.19

Patch Changes

• #11982 5af4684 Thanks @​richardscarrott! - feat(core): read tool-call-delta in ChatModelStream

  • ChatModelStream appends tool-call-delta slices to a tool call's args, and still replaces them on block-delta
  • It ignores delta types it doesn't recognize instead of throwing Unknown delta type

Commits

• 38eb4d8 chore: version packages (#12018)
• dae3b1f chore(core): fill in client versions in tool-call-delta changeset (#12019)
• 2caf64d feat(core,openai,anthropic,aws,xai): stream tool-call args as `tool-call-delt...
• 8a008ea test(core): accept either order of a chunk's stream events in chat model chai...
• f65acc3 chore(deps): restore missing @modelcontextprotocol/core@2.3.0 lockfile entr...
• 6a0ab38 chore: version packages (#12008)
• 654c7c6 chore(deps-dev): bump @​modelcontextprotocol/server from 2.3.0 to 2.3.1 (#12005)
• f096a32 fix(langchain): deliver final answers after todo updates (#11989)
• c690992 fix: update Node.js to October 2026 security release (#12007)
• 0c5e7bc fix(langchain): avoid full-state copies in parallel tool tasks (#11990)
• Additional commits viewable in compare view

Updates @langchain/langgraph from 1.5.1 to 1.5.2

Release notes

Sourced from @​langchain/langgraph's releases.

@​langchain/langgraph-api@​1.5.2

Patch Changes

• Updated dependencies []:
  • @​langchain/langgraph-ui@​1.5.2

@​langchain/langgraph-cli@​1.5.2

Patch Changes

• #2887 8f8eaa8 Thanks @​syachamaneni-lc! - add --agent-id and --agent-environment flags
• Updated dependencies []:
  • @​langchain/langgraph-api@​1.5.2

@​langchain/langgraph-ui@​1.5.2

No changes in this release.

@​langchain/langgraph@​1.5.2

Patch Changes

• #3022 a17f609 Thanks @​richardscarrott! - Depend on @langchain/protocol 0.0.20, the version @langchain/langgraph-sdk uses, so installs resolve a single copy and the protocol event types stay compatible.
• Updated dependencies [6e84570, a17f609]:
  • @​langchain/langgraph-checkpoint@​1.2.1
  • @​langchain/langgraph-sdk@​1.12.6

@​langchain/langgraph-api@​1.5.2-dev.0

Patch Changes

• Updated dependencies []:
  • @​langchain/langgraph-ui@​1.5.2-dev.0

@​langchain/langgraph-cli@​1.5.2-dev.0

Patch Changes

• #2887 8f8eaa8 Thanks @​syachamaneni-lc! - add --agent-id and --agent-environment flags
• Updated dependencies []:
  • @​langchain/langgraph-api@​1.5.2-dev.0

@​langchain/langgraph-ui@​1.5.2-dev.0

No changes in this release.

Changelog

Sourced from @​langchain/langgraph's changelog.

1.5.2

Patch Changes

• #3022 a17f609 Thanks @​richardscarrott! - Depend on @langchain/protocol 0.0.20, the version @langchain/langgraph-sdk uses, so installs resolve a single copy and the protocol event types stay compatible.
• Updated dependencies [6e84570, a17f609]:
  • @​langchain/langgraph-checkpoint@​1.2.1
  • @​langchain/langgraph-sdk@​1.12.6

Commits

• 0c12d5c chore: version packages (#3059)
• a17f609 feat(sdk): read tool-call-delta and ignore unknown delta variants (#3022)
• See full diff in compare view

Updates @langchain/openai from 1.6.2 to 1.7.0

Release notes

Sourced from @​langchain/openai's releases.

@​langchain/openai@​1.7.0

Minor Changes

• #11986 2caf64d Thanks @​richardscarrott! - feat: stream tool-call args as tool-call-delta slices

  Tool-call and server-tool-call args now stream as tool-call-delta events, which carry only the new slice of the args, instead of block-delta snapshots of the args so far. A large tool call now costs about the same bytes on the wire as the same length of text.

  • This covers the compat bridge (any model that only implements _streamResponseChunks), the OpenAI-compatible converter (OpenAI Completions, Groq, Mistral, IBM, OpenRouter, Perplexity, DeepSeek, Fireworks, Together AI and xAI Completions), OpenAI and xAI Responses, Anthropic (client and server tool calls) and Bedrock Converse. Google and Ollama still send one complete snapshot per call.
  • A tool call's id, name and index go on content-block-start, which carries no args. An id or name that arrives later reaches consumers on content-block-finish.
  • If you read raw events and their block-delta fields.args mid-stream, or write agent stream transformers that do, read tool-call-delta instead. await stream, .toolCalls and the assembled message are unchanged.
  • Upgrade your clients first. Older clients mishandle tool-call-delta. You need @langchain/langgraph-sdk 1.12.6 or later; @langchain/react, @langchain/vue, @langchain/svelte or @langchain/angular 1.2.6 or later; and langchain-core 1.6.13 or later for Python clients.
  • To hold back, pin @langchain/core below 1.3.0. That also keeps you on @langchain/openai, @langchain/anthropic, @langchain/aws and @langchain/xai versions that send snapshots.

@​langchain/openai@​1.6.3

Patch Changes

• #11922 d71c542 Thanks @​richardscarrott! - feat(openai): declare mid-conversation support in model profiles. GPT-4.1, GPT-5.x, GPT-6.x and o3 set midConversationSystemMessages and midConversationTools. midConversationTools is false on Chat Completions, since only the Responses API carries an additional_tools input item, so ChatOpenAI reports it only when it routes to the Responses API. AzureChatOpenAI and AzureChatOpenAIResponses leave it unset, since it is unverified on Azure's API.

  Regenerating the profiles from models.dev also adds GPT-6 Sol, GPT-6 Luna and GPT-6.1 Sol.

Commits

• 38eb4d8 chore: version packages (#12018)
• dae3b1f chore(core): fill in client versions in tool-call-delta changeset (#12019)
• 2caf64d feat(core,openai,anthropic,aws,xai): stream tool-call args as `tool-call-delt...
• 8a008ea test(core): accept either order of a chunk's stream events in chat model chai...
• f65acc3 chore(deps): restore missing @modelcontextprotocol/core@2.3.0 lockfile entr...
• 6a0ab38 chore: version packages (#12008)
• 654c7c6 chore(deps-dev): bump @​modelcontextprotocol/server from 2.3.0 to 2.3.1 (#12005)
• f096a32 fix(langchain): deliver final answers after todo updates (#11989)
• c690992 fix: update Node.js to October 2026 security release (#12007)
• 0c5e7bc fix(langchain): avoid full-state copies in parallel tool tasks (#11990)
• Additional commits viewable in compare view

Updates ai from 7.0.143 to 7.0.150

Changelog

Sourced from ai's changelog.

7.0.150

Patch Changes

• 8e18d59: feat(ai): add experimental_streamSpeech

  Streams speech audio from a string, or an array, iterable, or stream of text deltas and/or text parts (each with an optional voice and providerOptions) using speech models that implement the experimental Experimental_StreamingSpeechModelV4 extension. Returns a single-consumer audioStream / fullStream plus usage, warnings, responses, and providerMetadata promises. Provider error parts are non-fatal and reported through onError (default console.error). A user abort or a cancel rejects the result promises immediately. Exports the Experimental_SpeechTextPart, Experimental_SpeechStreamPart, Experimental_SpeechStreamUsage, and Experimental_StreamSpeechResult types, adds an optional cause to NoSpeechGeneratedError, and adds Experimental_MockStreamingSpeechModelV4 to ai/test.

• Updated dependencies [8202f5b]

• Updated dependencies [85d84a1]

  • @​ai-sdk/gateway@​4.0.123
  • @​ai-sdk/provider-utils@​5.0.67
  • @​ai-sdk/provider@​4.0.33

7.0.149

Patch Changes

• 1727442: fix(ai): process only the first approval response per tool call, so repeated or conflicting responses in the final tool message no longer execute a tool twice or both execute and deny it

• 0a5d0e7: Fix toolChoice: 'none' by forwarding it to the Hugging Face Responses API and rejecting tool calls before local execution in generateText, streamText, and WorkflowAgent. Streamed tool parts are withheld so client-side tools cannot act on them, and repairToolCall and experimental_refineToolInput are not invoked for rejected tool calls.

• 10026d1: Add the interrupted finish reason for provider streams that end without a completion signal. Preserve partial output without introducing an error solely for interruption, and stop tool execution, agent continuation, and automatic UI follow-ups for interrupted responses, including late tool results and approvals. Provider detection and emission will be added separately.

  Compatibility notice: Adding interrupted to the public finish-reason types can break type checking after upgrading, even though this is a patch release. Exhaustive switches (for example, using an assertNever fallback) and mappings such as Record<FinishReason, string> must handle the new value. Update any custom validation or application logic that assumes the existing set of finish reasons is exhaustive.

  When providers begin emitting interrupted, a stream ending without a completion signal will preserve partial output and report this finish reason without emitting an error solely for the interruption. Applications that need to detect incomplete responses should check finishReason === 'interrupted' as well as their existing error handling.

• Updated dependencies [101ce42]

• Updated dependencies [e104368]

• Updated dependencies [eb1f056]

• Updated dependencies [10026d1]

• Updated dependencies [5893e99]

  • @​ai-sdk/gateway@​4.0.122
  • @​ai-sdk/provider@​4.0.32
  • @​ai-sdk/provider-utils@​5.0.66

7.0.148

Patch Changes

• Updated dependencies [b089ce8]
• Updated dependencies [39a776b]
• Updated dependencies [f1b550e]
  • @​ai-sdk/provider-utils@​5.0.65
  • @​ai-sdk/gateway@​4.0.121

7.0.147

Patch Changes

• 66e74dc: fix(ai): preserve repaired tool names in streamed UI message parts

... (truncated)

Commits

• 594495a Version Packages (#23857)
• 8202f5b feat(gateway): implement experimental streaming speech in the gateway provide...
• 8e18d59 feat(ai): add experimental_streamSpeech (#23794)
• 401cadc Version Packages (#23785)
• 0a5d0e7 fix: honor toolChoice none in core and Hugging Face (#23843)
• 10026d1 feat(ai): add support for interrupted finish reasons (#23778)
• 1727442 fix(ai): collect only one approval decision per tool call (#23791)
• e6230e4 Version Packages (#23638)
• bb40cf0 Version Packages (#23596)
• b727074 docs(ai): fix JSDoc typo in choice output spec (#15575)
• Additional commits viewable in compare view

Updates openai from 7.36.0 to 7.43.0

Release notes

Sourced from openai's releases.

v7.43.0

7.43.0 (2026-10-22)

Features

• api: Breaking change in a minor release. A Live response's Decisions question instructions can now be a string or an array of text, image, or JSON parts. Code such as question.instructions.trim() can fail when it receives an array; check typeof question.instructions === 'string' and handle the array case. Decisions request inputs also accept new message roles and tool-history items, so update code that assumes it knows every input type. DecisionInputMessage is now a union: code that extends or implements the old interface must use DecisionInputMessage.DecisionInputUserMessage instead. Existing string instructions and user-message inputs still work. (21a056d)

Bug Fixes

• deps-dev: bump follow-redirects from 1.16.0 to 1.16.1 in /ecosystem-tests/vercel-edge (#2998) (1c69ab8)
• deps-dev: bump launch-editor from 2.14.1 to 2.14.2 in /ecosystem-tests/ts-browser-webpack (#2997) (0e1bedc)
• deps: bump next from 15.5.27 to 15.5.28 in /ecosystem-tests/vercel-edge (#3021) (482f73e)

Chores

• api: preserve client and helper compatibility (#3016) (17e0f08)
• refresh trusted next policy tooling (#3017) (7a970a7)

v7.42.0

7.42.0 (2026-10-22)

Features

• api: add voice deletion (#3014) (2a88010)

Bug Fixes

• agents: avoid repeated ancestor-path hashing (#3010) (e352050)
• api: avoid excessive work when redacting long log values (#3012) (e310fe0)

Chores

• api: clarify service-account API key deletion (#3015) (ab6d626)
• api: preserve file helpers and resource exports (#3007) (94c0c1b)

v7.41.0

7.41.0 (2026-10-21)

Features

• add Vertex AI support for the Responses API (#3005) (04b1ac4)

v7.40.0

... (truncated)

Changelog

Sourced from openai's changelog.

7.43.0 (2026-10-22)

Features

• api: Breaking change in a minor release. A Live response's Decisions question instructions can now be a string or an array of text, image, or JSON parts. Code such as question.instructions.trim() can fail when it receives an array; check typeof question.instructions === 'string' and handle the array case. Decisions request inputs also accept new message roles and tool-history items, so update code that assumes it knows every input type. DecisionInputMessage is now a union: code that extends or implements the old interface must use DecisionInputMessage.DecisionInputUserMessage instead. Existing string instructions and user-message inputs still work. (21a056d)

Bug Fixes

• deps-dev: bump follow-redirects from 1.16.0 to 1.16.1 in /ecosystem-tests/vercel-edge (#2998) (1c69ab8)
• deps-dev: bump launch-editor from 2.14.1 to 2.14.2 in /ecosystem-tests/ts-browser-webpack (#2997) (0e1bedc)
• deps: bump next from 15.5.27 to 15.5.28 in /ecosystem-tests/vercel-edge (#3021) (482f73e)

Chores

• api: preserve client and helper compatibility (#3016) (17e0f08)
• refresh trusted next policy tooling (#3017) (7a970a7)

7.42.0 (2026-10-22)

Features

• api: add voice deletion (#3014) (2a88010)

Bug Fixes

• agents: avoid repeated ancestor-path hashing (#3010) (e352050)
• api: avoid excessive work when redacting long log values (#3012) (e310fe0)

Chores

• api: clarify service-account API key deletion (#3015) (ab6d626)
• api: preserve file helpers and resource exports (#3007) (94c0c1b)

7.41.0 (2026-10-21)

Features

• add Vertex AI support for the Responses API (#3005) (04b1ac4)

7.40.0 (2026-10-21)

Features

... (truncated)

Commits

• d02d4de release: 7.43.0 (#3020)
• e17e0d4 ci: retire unused next status bridge (#3023)
• 21a056d feat(api): expand Decisions input and question types (#3018)
• 482f73e fix(deps): bump next from 15.5.27 to 15.5.28 in /ecosystem-tests/vercel-edge ...
• 17e0f08 chore(api): preserve client and helper compatibility (#3016)
• f3403f4 ci: validate next candidates from trusted main (#2999)
• 0e1bedc fix(deps-dev): bump launch-editor from 2.14.1 to 2.14.2 in /ecosystem-tests/t...
• 1c69ab8 fix(deps-dev): bump follow-redirects from 1.16.0 to 1.16.1 in /ecosystem-test...
• 7a970a7 chore: refresh trusted next policy tooling (#3017)
• 802a323 release: 7.42.0 (#3008)
• Additional commits viewable in compare view

Updates vite from 8.3.4 to 8.3.5

Release notes

Sourced from vite's releases.

v8.3.5

Bug Fixes

• build: handle missing chunk import maps (#23777) (8d7623d)
• build: include preload dependencies to chunk import map hashing (#23793) (4d16e7c)
• bundled-dev: apply server.origin to asset URLs (#23683) (52ba877)
• bundled-dev: declare utf-8 charset in fallback page (#23846) (197daf6)
• bundled-dev: ignore build.chunkImportMap (#23685) (cfe917d)
• bundled-dev: include user import.meta.env.* defines in the import.meta.env object (#23713) (6019aa7)
• bundled-dev: map forwarded error stacks through the bundle source maps (#23741) (11fe1e4)
• bundled-dev: normalize served output files (#23684) (df4e02c)
• bundled-dev: stop hmr propagation at modules that are no longer imported (#23839) (7471e8c)
• css: don't fail on a literal % in url() (#23676) (50b382d)
• deps: update all non-major dependencies (#23731) (cf80aa5)
• deps: update all non-major dependencies (#23826) (77d8373)
• deps: update rolldown-related dependencies (#23733) (43f0d05)
• deps: update rolldown-related dependencies (#23827) (c2e0418)
• optimizer: fall back to yarn.lock for lockfile hash (#23667) (f206096)
• optimizer: scan oxc.jsxInject imports (#23758) (38f3cb4)
• optimizer: skip patches dir check for yarn.lock fallback (#23725) (8e890e1)
• optimizer: skip patches dir hash for nub lockfile (#23761) (a7d5696)
• resolve: support subpath imports with multiple # (#23631) (0d86b34)
• resolve: update resolve.exports to 2.0.4 (#23739) (4ea708a)
• server: handle socket errors on upgrade requests not taken by the HMR server (#23728) (c2c9ef4)
• server: only strip base when path matches a full segment (#23641) (3dfde87)

Performance Improvements

• ssr: extract inline source maps without a regexp (#23775) (6a02780)

Miscellaneous Chores

• migrate to Oxlint (#23746) (5b73935)

Code Refactoring

• deps: replace @vercel/detect-agent with std-env (#23744) (ce4293f)
• dev: consolidate moduleURL to file path utilities (#23828) (df7b40e)
• dev: separate import resolution from URL conversion (#23791) (6116689)
• dev: share ModuleURL and BrowserURL conversions (#23790) (446954c)
• dev: use ModuleURLs throughout HTML transforms (#23815) (a162990)

Changelog

Sourced from vite's changelog.

8.3.5 (2026-10-21)

Bug Fixes

• build: handle missing chunk import maps (#23777) (8d7623d)
• build: include preload dependencies to chunk import map hashing (#23793) (4d16e7c)
• bundled-dev: apply server.origin to asset URLs (#23683) (52ba877)
• bundled-dev: declare utf-8 charset in fallback page (#23846) (197daf6)
• bundled-dev: ignore build.chunkImportMap (#23685) (cfe917d)
• bundled-dev: include user import.meta.env.* defines in the import.meta.env object (#23713) (6019aa7)
• bundled-dev: map forwarded error stacks through the bundle source maps (#23741) (11fe1e4)
• bundled-dev: normalize served output files (#23684) (df4e02c)
• bundled-dev: stop hmr propagation at modules that are no longer imported (#23839) (7471e8c)
• css: don't fail on a literal % in url() (#23676) (50b382d)
• deps: update all non-major dependencies (#23731) (cf80aa5)
• deps: update all non-major dependencies (#23826) (77d8373)
• deps: update rolldown-related dependencies (#23733) (43f0d05)
• deps: update rolldown-related dependencies (#23827) (c2e0418)
• optimizer: fall back to yarn.lock for lockfile hash (#23667) (f206096)
• optimizer: scan oxc.jsxInject imports (#23758) (38f3cb4)
• optimizer: skip patches dir check for yarn.lock fallback (#23725) (8e890e1)
• optimizer: skip patches dir hash for nub lockfile (#23761) (a7d5696)
• resolve: support subpath imports with multiple # (#23631) (0d86b34)
• resolve: update resolve.exports to 2.0.4 (#23739) (4ea708a)
• server: handle socket errors on upgrade requests not taken by the HMR server (#23728) (c2c9ef4)
• server: only strip base when path matches a full segment (#23641) (3dfde87)

Performance Improvements

• ssr: extract inline source maps without a regexp (#23775) (6a02780)

Miscellaneous Chores

• migrate to Oxlint (#23746) (5b73935)

Code Refactoring

• deps: replace @vercel/detect-agent with std-env (#23744) (ce4293f)
• dev: consolidate moduleURL to file path utilities (#23828) (df7b40e)
• dev: separate import resolution from URL conversion (#23791) (6116689)
• dev: share ModuleURL and BrowserURL conversions (#23790) (446954c)
• dev: use ModuleURLs throughout HTML transforms (#23815) (a162990)

Commits

• 981f07f release: v8.3.5 (#23856)
• 0d86b34 fix(resolve): support subpath imports with multiple # (#23631)
• 6a02780 perf(ssr): extract inline source maps without a regexp (#23775)
• 8e890e1 fix(optimizer): skip patches dir check for yarn.lock fallback (#23725)
• 197daf6 fix(bundled-dev): declare utf-8 charset in fallback page (#23846)
• 4d16e7c fix(build): include preload dependencies to chunk import map hashing (#23793)
• df7b40e refactor(dev): consolidate moduleURL to file path utilities (#23828)
• a162990 refactor(dev): use ModuleURLs throughout HTML transforms (#23815)
• 6116689 refactor(dev): separate import resolution from URL conversion (#23791)
• 446954c refactor(dev): share ModuleURL and BrowserURL conversions (#23790)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• `@dependabot igno...

Description has been truncated

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	bashkit	e730826	Commit Preview URL Branch Preview URL	Oct 26 2026, 09:52 AM