CodeIssuesPull RequestsActionsSecurityInsights
✨ AI
More
Settings

deps: bump the minor-and-patch group across 1 directory with 11 updates #3886

ClosedXSccantynz wants to mergedependabot/npm_and_yarn/minor-and-patch-4f93b38a3fmainopened May 7, 2026
ccantynzcommented May 7, 2026

Originally written by @dependabot[bot] on GitHub.
Imported from https://github.com/ccantynz-alt/MarcoReid.com/pull/57


Bumps the minor-and-patch group with 11 updates in the / directory:

Package From To
@anthropic-ai/sdk 0.91.1 0.95.1
next 16.2.4 16.2.5
openai 6.34.0 6.37.0
react 19.2.5 19.2.6
react-dom 19.2.5 19.2.6
stripe 22.1.0 22.1.1
@next/bundle-analyzer 16.2.4 16.2.5
@types/node 25.6.0 25.6.1
eslint 10.2.1 10.3.0
eslint-config-next 16.2.4 16.2.5
postcss 8.5.12 8.5.14

Updates @anthropic-ai/sdk from 0.91.1 to 0.95.1

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk: v0.95.1

0.95.1 (2026-05-07)

Full Changelog: sdk-v0.95.0...sdk-v0.95.1

Chores

  • redact api-key headers in debug logs (fad8fee)

sdk: v0.95.0

0.95.0 (2026-05-06)

Full Changelog: sdk-v0.94.0...sdk-v0.95.0

Features

  • api: add support for Managed Agents multiagents and outcomes, webhooks, vault validation (e0c0e9b)

Bug Fixes

  • api: Adjust webhook configuration (deed3f6)

sdk: v0.94.0

0.94.0 (2026-05-05)

Full Changelog: sdk-v0.93.0...sdk-v0.94.0

Features

  • client: allow targeting a workspace for OIDC federation token exchange (bde6620)

sdk: v0.93.0

0.93.0 (2026-05-04)

Full Changelog: sdk-v0.92.0...sdk-v0.93.0

Features

  • client: add Workload Identity Federation, interactive OAuth, and auth profiles (d5d6abd)

sdk: v0.92.0

0.92.0 (2026-04-30)

Full Changelog: sdk-v0.91.1...sdk-v0.92.0

Features

  • api: improve Managed Agents APIs (ca1bf4a)
  • support setting headers via env (32f67d4)

... (truncated)

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.95.1 (2026-05-07)

Full Changelog: sdk-v0.95.0...sdk-v0.95.1

Chores

  • redact api-key headers in debug logs (fad8fee)

0.95.0 (2026-05-06)

Full Changelog: sdk-v0.94.0...sdk-v0.95.0

Features

  • api: add support for Managed Agents multiagents and outcomes, webhooks, vault validation (e0c0e9b)

Bug Fixes

  • api: Adjust webhook configuration (deed3f6)

0.94.0 (2026-05-05)

Full Changelog: sdk-v0.93.0...sdk-v0.94.0

Features

  • client: allow targeting a workspace for OIDC federation token exchange (bde6620)

0.93.0 (2026-05-04)

Full Changelog: sdk-v0.92.0...sdk-v0.93.0

Features

  • client: add Workload Identity Federation, interactive OAuth, and auth profiles (d5d6abd)

0.92.0 (2026-04-30)

Full Changelog: sdk-v0.91.1...sdk-v0.92.0

Features

  • api: improve Managed Agents APIs (ca1bf4a)
  • support setting headers via env (32f67d4)

Bug Fixes

  • bedrock: throw APIError for error events delivered in chunk frames (#1021) (3ae887b)

... (truncated)

Commits

Updates next from 16.2.4 to 16.2.5

Release notes

Sourced from next's releases.

v16.2.5

This release contains security fixes for the following advisories:

High:

Moderate:

Low:

Commits
  • 766148f v16.2.5
  • 0dd9483 fix: add explicit checks for RSC header (#83) (#98)
  • d166096 fix proxy matching for segment prefetch URLs (#89) (#96)
  • 9d50c0b Strip next-resume header from incoming requests (#92)
  • df7ab5a fix: skip internal param normalization in unsupported environments
  • ed41d1d Move htmlescape to shared/lib (#91)
  • b4c6705 Ignore malformed CSP nonce headers
  • 5b194ee router-server: guard upgrade proxy against absolute-url SSRF (#77)
  • cb171d7 Fix i18n middleware matching for default-locale data routes (#82)
  • 89e9954 [16.x] Type hardening and performance improvements (#80)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for next since your current version.


Updates openai from 6.34.0 to 6.37.0

Release notes

Sourced from openai's releases.

v6.37.0

6.37.0 (2026-05-07)

Full Changelog: v6.36.0...v6.37.0

Features

  • api: add quantity field to admin organization usage responses (273a8f7)
  • api: add web_search_call.results output option to responses (91c75e0)
  • api: launch realtime translate + update image 2 (a296b66)
  • api: manual updates (794b905)
  • api: manual updates (6963729)
  • api: realtime 2 (f4b7177)

Bug Fixes

  • api: fix imagegen size enum regression (4fe8469)

Chores

  • redact api-key headers in debug logs (99c9c80)

v6.36.0

6.36.0 (2026-05-01)

Full Changelog: v6.35.0...v6.36.0

Features

  • api: add group_type/user metadata fields, update types across admin resources (cc52f97)
  • api: add support for Admin API Keys per endpoint (770d187)
  • api: admin API updates (ee2bd2d)
  • api: manual updates (6af2b6d)
  • api: manual updates (f2dceda)

Bug Fixes

  • api: support admin api key auth (e3862a3)
  • api: tighten auth header selection (f1203bd)

Chores

  • format: run eslint and prettier separately (104543a)
  • internal: codegen related update (05d86da)
  • internal: codegen related update (f184586)

... (truncated)

Changelog

Sourced from openai's changelog.

6.37.0 (2026-05-07)

Full Changelog: v6.36.0...v6.37.0

Features

  • api: add quantity field to admin organization usage responses (273a8f7)
  • api: add web_search_call.results output option to responses (91c75e0)
  • api: launch realtime translate + update image 2 (a296b66)
  • api: manual updates (794b905)
  • api: manual updates (6963729)
  • api: realtime 2 (f4b7177)

Bug Fixes

  • api: fix imagegen size enum regression (4fe8469)

Chores

  • redact api-key headers in debug logs (99c9c80)

6.36.0 (2026-05-01)

Full Changelog: v6.35.0...v6.36.0

Features

  • api: add group_type/user metadata fields, update types across admin resources (cc52f97)
  • api: add support for Admin API Keys per endpoint (770d187)
  • api: admin API updates (ee2bd2d)
  • api: manual updates (6af2b6d)
  • api: manual updates (f2dceda)

Bug Fixes

  • api: support admin api key auth (e3862a3)
  • api: tighten auth header selection (f1203bd)

Chores

  • format: run eslint and prettier separately (104543a)
  • internal: codegen related update (05d86da)
  • internal: codegen related update (f184586)

6.35.0 (2026-04-28)

... (truncated)

Commits
  • b0e89cd release: 6.37.0
  • 2151063 feat(api): realtime 2
  • a5c4184 feat(api): manual updates
  • 17c79fb chore: redact api-key headers in debug logs
  • 36f69f6 codegen metadata
  • 5cd49e4 codegen metadata
  • a1b2c9c codegen metadata
  • badc738 fix(api): fix imagegen size enum regression
  • 15d48e0 codegen metadata
  • 0ff2cda feat(api): add quantity field to admin organization usage responses
  • Additional commits viewable in compare view

Updates react from 19.2.5 to 19.2.6

Release notes

Sourced from react's releases.

19.2.6 (May 6th, 2026)

React Server Components

Commits

Updates react-dom from 19.2.5 to 19.2.6

Release notes

Sourced from react-dom's releases.

19.2.6 (May 6th, 2026)

React Server Components

Commits

Updates stripe from 22.1.0 to 22.1.1

Release notes

Sourced from stripe's releases.

v22.1.1

  • #2703 Export Decimal type from Stripe namespace

    • Added Stripe.Decimal as a usable type in the Stripe namespace, enabling type annotations like function takesDecimal(d: Stripe.Decimal).
  • #2704 Fix file upload regression: restore multipart request data processor

    • Fixed file uploads failing with StripeInvalidRequestError on the /v1/files endpoint since v22.

See the changelog for more details.

Changelog

Sourced from stripe's changelog.

22.1.1 - 2026-05-06

  • #2703 Export Decimal type from Stripe namespace

    • Added Stripe.Decimal as a usable type in the Stripe namespace, enabling type annotations like function takesDecimal(d: Stripe.Decimal).
  • #2704 Fix file upload regression: restore multipart request data processor

    • Fixed file uploads failing with StripeInvalidRequestError on the /v1/files endpoint since v22.
Commits

Updates @next/bundle-analyzer from 16.2.4 to 16.2.5

Release notes

Sourced from @​next/bundle-analyzer's releases.

v16.2.5

This release contains security fixes for the following advisories:

High:

Moderate:

Low:

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​next/bundle-analyzer since your current version.


Updates @types/node from 25.6.0 to 25.6.1

Commits

Updates eslint from 10.2.1 to 10.3.0

Release notes

Sourced from eslint's releases.

v10.3.0

Features

  • 379571a feat: add suggestions for no-unused-private-class-members (#20773) (sethamus)

Bug Fixes

  • b6ae5cf fix: handle unavailable require cache (#20812) (Simon Podlipsky)
  • 6fb3685 fix: rule suggestions cause continuation in class body (#20787) (Milos Djermanovic)

Documentation

  • 32cc7ab docs: fix typos in docs and comments (#20809) (Tanuj Kanti)
  • 7f47937 docs: Update README (GitHub Actions Bot)

Chores

  • d32235e ci: use pnpm in eslint-flat-config-utils type integration test (#20826) (Francesco Trotta)
  • 3ffb14e chore: clean up typos in comments and JSDoc (#20821) (Pixel998)
  • 22eb58a chore: add missing continue-on-error to ecosystem-tests.yml (#20818) (Josh Goldberg ✨)
  • 88bf002 ci: bump pnpm/action-setup from 6.0.1 to 6.0.3 (#20815) (dependabot[bot])
  • 97c8c33 chore: update ilshidur/action-discord action to v0.4.0 (#20811) (renovate[bot])
  • 2f58136 chore: pin peter-evans/create-pull-request action to 5f6978f (#20810) (renovate[bot])
  • 77add7f chore: add initial ecosystem plugin tests workflow (#19643) (Josh Goldberg ✨)
  • 4023b55 test: Add unit tests for SuppressionsService.prune() (#20797) (kuldeep kumar)
  • 54080da test: add unit tests for ForkContext (#20778) (kuldeep kumar)
  • f0e2bcc test: add unit tests for SuppressionsService.suppress() method (#20765) (kuldeep kumar)
  • a7f0b94 chore: update dependency prettier to v3.8.3 (#20782) (renovate[bot])
  • 7bf93d9 chore: update TypeScript to v6 (#20677) (sethamus)
  • b42dd72 ci: bump pnpm/action-setup from 6.0.0 to 6.0.1 (#20781) (dependabot[bot])
  • 2b252be test: add unit tests for IdGenerator (#20775) (kuldeep kumar)
Commits
  • 7889204 10.3.0
  • 5b69b4f Build: changelog update for 10.3.0
  • d32235e ci: use pnpm in eslint-flat-config-utils type integration test (#20826)
  • b6ae5cf fix: handle unavailable require cache (#20812)
  • 3ffb14e chore: clean up typos in comments and JSDoc (#20821)
  • 6fb3685 fix: rule suggestions cause continuation in class body (#20787)
  • 22eb58a chore: add missing continue-on-error to ecosystem-tests.yml (#20818)
  • 88bf002 ci: bump pnpm/action-setup from 6.0.1 to 6.0.3 (#20815)
  • 379571a feat: add suggestions for no-unused-private-class-members (#20773)
  • 97c8c33 chore: update ilshidur/action-discord action to v0.4.0 (#20811)
  • Additional commits viewable in compare view

Updates eslint-config-next from 16.2.4 to 16.2.5

Release notes

Sourced from eslint-config-next's releases.

v16.2.5

This release contains security fixes for the following advisories:

High:

Moderate:

Low:

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for eslint-config-next since your current version.


Updates postcss from 8.5.12 to 8.5.14

Release notes

Sourced from postcss's releases.

8.5.14

8.5.13

  • Fixed postcss-scss commend regression.
Changelog

Sourced from postcss's changelog.

8.5.14

8.5.13

  • Fixed postcss-scss commend regression.
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
ccantynzcommented May 7, 2026

Originally written by @dependabot[bot] on GitHub.


Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

ccantynzcommented May 7, 2026

Originally written by @vercel[bot] on GitHub.


The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
marco-reid-com Ready Ready Preview, Comment May 7, 2026 6:15pm

Request Review

ccantynzcommented May 10, 2026

Originally written by @dependabot[bot] on GitHub.


Looks like these dependencies are updatable in another way, so this is no longer needed.

Files changed

Side-by-side diff for dependabot/npm_and_yarn/minor-and-patch-4f93b38a3f → main.

View diff →

Cross-repo impact

See what breaks downstream if this PR merges.

Analyze →
✕ Closed without merging

This pull request was closed and not merged.

c comment · e edit title · m merge · a approve · r request changes · ? shortcuts