Skip to content

Bump the npm-minor-and-patch group across 1 directory with 11 updates - #132

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-and-patch-61e2dbafdd
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-and-patch-61e2dbafdd

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 21, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the npm-minor-and-patch group with 11 updates in the / directory:

Package From To
@types/node 22.20.1 22.20.3
tsx 4.23.12 4.23.13
@anthropic-ai/sdk 0.117.1 0.127.0
jose 6.2.8 6.2.12
@swc/core 1.16.0 1.16.2
next 15.5.23 15.5.25
react 19.2.8 19.3.0
@types/react 19.2.18 19.3.0
react-dom 19.2.8 19.3.0
@types/react-dom 19.2.4 19.3.0
@types/react 19.2.18 19.3.0
@types/react-dom 19.2.4 19.3.0
jsdom 30.0.1 30.1.0

Updates @types/node from 22.20.1 to 22.20.3

Commits

Updates tsx from 4.23.12 to 4.23.13

Release notes

Sourced from tsx's releases.

v4.23.13

4.23.13 (2026-08-30)

Bug Fixes

  • cache: bound shared transform cache memory (#835) (28e1f12)

This release is also available on:

Commits

Updates @anthropic-ai/sdk from 0.117.1 to 0.127.0

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk: v0.127.0

0.127.0 (2026-09-18)

Full Changelog: sdk-v0.126.0...sdk-v0.127.0

Features

  • api: add group with display_name to rate limits, deprecate group_type (2575d97)
  • tools: add compactBeforeNextTurn() to the tool runner (#682) (9f75ca6)

Bug Fixes

  • BetaMessageStream: stop coercing a null compaction_delta content into "null" (#655) (dbd6845)
  • client: don't retry requests whose body is a stream or iterator (eebc1b9)
  • client: join multiple anthropic-beta values with a comma and no space (#638) (e0cb1ff)
  • client: make pagination exports on the client namespace type-only (5adea1f)
  • internal: drop jest from tsconfig types (60588af)
  • middleware: echo a streamed compaction summary in the fallback continuation (#657) (2e0f004)
  • tools: keep $defs when transformJSONSchema root is a $ref (#687) (57a9f30)

Performance Improvements

  • client: skip formatting request details when debug logging is off (2b29ed2)

Chores

  • ci: publish releases from Node 24 with its bundled npm (6b3c6f5)
  • docs: add descriptions for enum values and path parameters (cb254c4)
  • docs: clarify the compaction tool_changes and tool change descriptions (5a695eb)
  • internal: build the sub-packages with TypeScript 6.0.3 (8a69ff5)
  • internal: build with TypeScript 6.0.3 and typescript-eslint 8.58.0 (01f3ee6)
  • internal: keep lib/internal out of the published exports map (763fb43)
  • internal: re-export pagination classes with a plain export list (c77bdc3)
  • internal: share a single Simplify type util (31d5e75)
  • internal: switch unit tests from jest to vitest (110542d, 788c9c6)

sdk: v0.126.0

0.126.0 (2026-09-15)

Full Changelog: sdk-v0.125.0...sdk-v0.126.0

Features

  • api: add auto mode tool permissions for Managed Agents (7829b43)
  • api: add compaction parameter and signed compaction blocks (beta) (05fd878)
  • api: add enum types for workspace data-residency geo fields (89c5920)
  • api: add thinking_mismatch_allowed entries to input_transformations (beta) (1f32871)

... (truncated)

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.127.0 (2026-09-18)

Full Changelog: sdk-v0.126.0...sdk-v0.127.0

Features

  • api: add group with display_name to rate limits, deprecate group_type (2575d97)
  • tools: add compactBeforeNextTurn() to the tool runner (#682) (9f75ca6)

Bug Fixes

  • BetaMessageStream: stop coercing a null compaction_delta content into "null" (#655) (dbd6845)
  • client: don't retry requests whose body is a stream or iterator (eebc1b9)
  • client: join multiple anthropic-beta values with a comma and no space (#638) (e0cb1ff)
  • client: make pagination exports on the client namespace type-only (5adea1f)
  • internal: drop jest from tsconfig types (60588af)
  • middleware: echo a streamed compaction summary in the fallback continuation (#657) (2e0f004)
  • tools: keep $defs when transformJSONSchema root is a $ref (#687) (57a9f30)

Performance Improvements

  • client: skip formatting request details when debug logging is off (2b29ed2)

Chores

  • ci: publish releases from Node 24 with its bundled npm (6b3c6f5)
  • docs: add descriptions for enum values and path parameters (cb254c4)
  • docs: clarify the compaction tool_changes and tool change descriptions (5a695eb)
  • internal: build the sub-packages with TypeScript 6.0.3 (8a69ff5)
  • internal: build with TypeScript 6.0.3 and typescript-eslint 8.58.0 (01f3ee6)
  • internal: keep lib/internal out of the published exports map (763fb43)
  • internal: re-export pagination classes with a plain export list (c77bdc3)
  • internal: share a single Simplify type util (31d5e75)
  • internal: switch unit tests from jest to vitest (110542d, 788c9c6)

0.126.0 (2026-09-15)

Full Changelog: sdk-v0.125.0...sdk-v0.126.0

Features

  • api: add auto mode tool permissions for Managed Agents (7829b43)
  • api: add compaction parameter and signed compaction blocks (beta) (05fd878)
  • api: add enum types for workspace data-residency geo fields (89c5920)
  • api: add thinking_mismatch_allowed entries to input_transformations (beta) (1f32871)
  • api: add url_sources to the web fetch tool (ee23dd2)
  • api: add workspace_id parameter to user profiles methods (f5b9fb7)

... (truncated)

Commits
  • 3c5d9c0 Merge pull request #1203 from anthropics/release-please--branches--main--chan...
  • 7c57af8 docs(changelog): list the jest-to-vitest switch once in 0.127.0
  • 1b93f4e chore: release main
  • 2575d97 feat(api): add group with display_name to rate limits, deprecate group_type
  • 83fcfad codegen metadata
  • 64ca3d3 codegen metadata
  • cb254c4 chore(docs): add descriptions for enum values and path parameters
  • eebc1b9 fix(client): don't retry requests whose body is a stream or iterator
  • 518eda2 codegen metadata
  • 8a69ff5 chore(internal): build the sub-packages with TypeScript 6.0.3
  • Additional commits viewable in compare view

Updates jose from 6.2.8 to 6.2.12

Release notes

Sourced from jose's releases.

v6.2.12

Documentation

  • clarify and shorten public API guidance (be62530)

Refactor

  • simplify JWS and JWE operation cores (92e9640)

Performance

  • avoid copying AES-GCM output (6925d43)
  • deduplicate pending jwks key imports (bf5138b)
  • encode single-signature JWS input once (7bc9a33)
  • normalize General JWE shared headers once (78637bd)
  • normalize jwks selection metadata once (fd3ae3f)
  • use native encoding for larger ASCII strings (b23a6f3)

v6.2.11

Documentation

  • render subpath indexes as tables (94589ee)
  • shorten API index descriptions (681482f)

Refactor

  • model JWE key management modes (e01dda6)
  • types: reduce declaration repetition (55b970f)

v6.2.10

Fixes

  • jose: consume serialization members once (9bee285)
  • jose: reject empty protected and JWE AAD members (8da4145)
  • jose: validate serialized header values (b711d8f)
  • jwe: conceal invalid decrypted CEK lengths (41fafe0)
  • jwe: enforce AES-GCM tag boundaries (9a5b744)
  • jwe: validate explicit encryption parameters (7a02697)
  • jwk: accept empty octet-sequence keys (3f871e7)
  • jwk: normalize key resolution inputs (f54ee7b)
  • jwks: enforce verification key metadata (f9ba510)
  • jwks: order overlapping remote reloads (9a1a913)
  • jwks: reject invalid remote duration values (7bdb9e5)
  • jwk: validate ext and key_ops parameters (4d91c37)
  • jws: reject mixed payload encoding modes (dc69713)
  • jws: validate unencoded payload strings (541f282)
  • jwt: enforce explicit verification policies (b347182)
  • jwt: prevent replacing protected headers (ae07d09)
  • jwt: reject invalid duration inputs (282f9aa)
  • jwt: validate builder claim values (ea03f83)

... (truncated)

Changelog

Sourced from jose's changelog.

6.2.12 (2026-09-05)

Documentation

  • clarify and shorten public API guidance (be62530)

Refactor

  • simplify JWS and JWE operation cores (92e9640)

Performance

  • avoid copying AES-GCM output (6925d43)
  • deduplicate pending jwks key imports (bf5138b)
  • encode single-signature JWS input once (7bc9a33)
  • normalize General JWE shared headers once (78637bd)
  • normalize jwks selection metadata once (fd3ae3f)
  • use native encoding for larger ASCII strings (b23a6f3)

6.2.11 (2026-09-04)

Documentation

  • render subpath indexes as tables (94589ee)
  • shorten API index descriptions (681482f)

Refactor

  • model JWE key management modes (e01dda6)
  • types: reduce declaration repetition (55b970f)

6.2.10 (2026-08-21)

Fixes

  • jose: consume serialization members once (9bee285)
  • jose: reject empty protected and JWE AAD members (8da4145)
  • jose: validate serialized header values (b711d8f)
  • jwe: conceal invalid decrypted CEK lengths (41fafe0)
  • jwe: enforce AES-GCM tag boundaries (9a5b744)
  • jwe: validate explicit encryption parameters (7a02697)
  • jwk: accept empty octet-sequence keys (3f871e7)
  • jwk: normalize key resolution inputs (f54ee7b)
  • jwks: enforce verification key metadata (f9ba510)
  • jwks: order overlapping remote reloads (9a1a913)
  • jwks: reject invalid remote duration values (7bdb9e5)
  • jwk: validate ext and key_ops parameters (4d91c37)
  • jws: reject mixed payload encoding modes (dc69713)
  • jws: validate unencoded payload strings (541f282)
  • jwt: enforce explicit verification policies (b347182)

... (truncated)

Commits
  • 505a55b chore(release): 6.2.12
  • 7bc9a33 perf: encode single-signature JWS input once
  • 78637bd perf: normalize General JWE shared headers once
  • bf5138b perf: deduplicate pending jwks key imports
  • b23a6f3 perf: use native encoding for larger ASCII strings
  • fd3ae3f perf: normalize jwks selection metadata once
  • 6925d43 perf: avoid copying AES-GCM output
  • be62530 docs: clarify and shorten public API guidance
  • 1b41312 build: preserve README when generation fails
  • 0b51829 build: check tree-shaking for every public binding
  • Additional commits viewable in compare view

Updates @swc/core from 1.16.0 to 1.16.2

Changelog

Sourced from @​swc/core's changelog.

[1.16.2] - 2026-09-04

Bug Fixes

  • (es/compat) Preserve for-of var binding scope (#12158) (f6d5bd1)

  • (es/decorators) Drop params from getter replacing decorated private method (#12161) (d56f594)

  • (es/flow) Preserve Flow component type semantics (#12090) (c8d5b49)

  • (es/minifier) Mark for update and test as executed multiple time (#12131) (1260e36)

  • (es/minifier) Report for loop var decl as assign (#12136) (783bbc2)

  • (es/minifier) Don't replace value-used console.*.bind() calls with undefined (#12138) (ed74223)

  • (es/minifier) Drop spans of cached globals values (#12129) (9a306b8)

  • (es/minifier) Preserve effects of returned value calls (#12140) (c37b5a9)

  • (es/minifier) Avoid JSX sequence inlining loop (#12149) (4e79b94)

  • (es/minifier) Preserve bindings in copied inline arrows (#12141) (cf7b5c9)

  • (es/minifier) Preserve do-while control-flow targets (#12160) (f62c437)

  • (es/minifier) Preserve pure annotation ownership (#12180) (ec780f9)

  • (es/parser) Retry ambiguous Program parsing (#12142) (141a320)

  • (es/parser) Preserve await grammar boundaries (#12156) (c732683)

  • (es/quote) Restore await parsing (#12163) (918f517)

... (truncated)

Commits
  • 5ae9149 chore: Publish 1.16.2 with swc_core v78.0.0
  • 5c24a37 chore: Publish 1.16.2-nightly-20260904.1 with swc_core v78.0.0
  • 490c7d8 chore: Publish 1.16.1 with swc_core v77.0.2
  • 7e4d782 chore: Publish 1.16.1-nightly-20260819.1 with swc_core v77.0.2
  • See full diff in compare view

Updates next from 15.5.23 to 15.5.25

Release notes

Sourced from next's releases.

v15.5.25

Follow-up release to v15.5.24 re-enabling AVIF Image Optimization when newer versions of sharp are installed (#97954).

v15.5.24

This release contains security fixes for the following advisories:

Critical:

Commits
  • 013ee1d v15.5.25
  • d64c0d1 [15.5.x] Re-enable AVIF image optimization with a runtime libheif version gua...
  • 7f6b400 [test] Fix 15.5.x deploy tests (#97977)
  • 1a80896 [15.5.x][ci] Run flake detection and new deploy tests when merged and on back...
  • 6d9b5d8 [15.5.x] ci: remove pull_request_stats workflow (#97976)
  • b6c45b4 v15.5.24
  • b0f3460 [15.5.x] Fix ISR misses with backslashes in segments when deployed on Windows
  • 409772e [15.5.x] [next/image]: disable avif image optimization
  • 9c44b88 [15.x] support sharp 0.34 and 0.35
  • 144fa5d [15.5.x] Remove generated error codes (#97783)
  • Additional commits viewable in compare view

Updates react from 19.2.8 to 19.3.0

Release notes

Sourced from react's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

New React DOM Features

  • browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
    • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

All Changes

React

... (truncated)

Changelog

Sourced from react's changelog.

19.3.0 (September 9, 2026)

New React Features

Bumps the npm-minor-and-patch group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.20.1` | `22.20.3` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.12` | `4.23.13` |
| [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.117.1` | `0.127.0` |
| [jose](https://github.com/panva/jose) | `6.2.8` | `6.2.12` |
| [@swc/core](https://github.com/swc-project/swc/tree/HEAD/packages/core) | `1.16.0` | `1.16.2` |
| [next](https://github.com/vercel/next.js) | `15.5.23` | `15.5.25` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.0` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.4` | `19.3.0` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.4` | `19.3.0` |
| [jsdom](https://github.com/jsdom/jsdom) | `30.0.1` | `30.1.0` |



Updates `@types/node` from 22.20.1 to 22.20.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `tsx` from 4.23.12 to 4.23.13
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.12...v4.23.13)

Updates `@anthropic-ai/sdk` from 0.117.1 to 0.127.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.117.1...sdk-v0.127.0)

Updates `jose` from 6.2.8 to 6.2.12
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](panva/jose@v6.2.8...v6.2.12)

Updates `@swc/core` from 1.16.0 to 1.16.2
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/commits/v1.16.2/packages/core)

Updates `next` from 15.5.23 to 15.5.25
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v15.5.23...v15.5.25)

Updates `react` from 19.2.8 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react)

Updates `@types/react` from 19.2.18 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-dom` from 19.2.8 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom)

Updates `@types/react-dom` from 19.2.4 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `@types/react` from 19.2.18 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@types/react-dom` from 19.2.4 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `jsdom` from 30.0.1 to 30.1.0
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Commits](jsdom/jsdom@v30.0.1...v30.1.0)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 22.20.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: tsx
  dependency-version: 4.23.13
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.127.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: jose
  dependency-version: 6.2.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@swc/core"
  dependency-version: 1.16.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: next
  dependency-version: 15.5.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: react
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@types/react"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: react-dom
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@types/react-dom"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@types/react"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@types/react-dom"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: jsdom
  dependency-version: 30.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 21, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 28, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 28, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/npm-minor-and-patch-61e2dbafdd branch September 28, 2026 23:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants