Skip to content

chore(deps)(deps): bump the minor-and-patch group across 1 directory with 24 updates - #104

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-c7f0db428b
Closed

chore(deps)(deps): bump the minor-and-patch group across 1 directory with 24 updates#104
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-c7f0db428b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 21, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 24 updates in the / directory:

Package From To
turbo 2.10.12 2.11.2
@langchain/core 1.2.9 1.2.11
@langchain/openai 1.5.11 1.5.13
better-auth 1.7.3 1.7.5
deepagents 1.13.3 1.14.0
hono 4.13.7 4.13.8
mongoose 9.9.5 9.10.1
zod 4.5.4 4.6.5
@types/node 26.5.0 26.6.2
@astrojs/starlight 0.42.0 0.42.2
astro 7.3.2 7.3.3
@tanstack/react-query 5.102.8 5.103.1
@tanstack/react-router 1.170.33 1.170.38
lucide-react 1.43.0 1.47.0
react 19.2.8 19.3.0
@types/react 19.2.18 19.3.0
react-dom 19.2.8 19.3.0
@types/react-dom 19.2.7 19.3.0
@tanstack/router-plugin 1.168.36 1.168.40
@types/react 19.2.18 19.3.0
@types/react-dom 19.2.7 19.3.0
vite 8.2.2 8.3.0
@langchain/anthropic 1.5.9 1.5.10
isomorphic-git 1.41.9 1.42.2
langchain 1.5.10 1.5.11
tailwind-merge 3.6.0 3.7.0

Updates turbo from 2.10.12 to 2.11.2

Release notes

Sourced from turbo's releases.

Turborepo v2.11.2

What's Changed

Changelog

Full Changelog: vercel/turborepo@v2.11.1...v2.11.2

Turborepo v2.11.1

What's Changed

Changelog

Full Changelog: vercel/turborepo@v2.11.0...v2.11.1

Turborepo v2.11.0

What's Changed

Changelog

... (truncated)

Commits

Updates @langchain/core from 1.2.9 to 1.2.11

Release notes

Sourced from @​langchain/core's releases.

@​langchain/core@​1.2.11

Patch Changes

  • #11603 fec9cd8 Thanks @​thushanth-bengre-langchain! - fix(core): build streaming llmOutput.tokenUsage from the fully-accumulated chunk instead of whichever individual chunk's usage_metadata arrived last

    Affects both core streaming paths — .stream()/.streamEvents() (_streamIterator) and .invoke()/.generate() when a streaming-preferring callback is attached (_generateWithCache's hasStreamingHandler branch). Previously, llmOutput.tokenUsage was overwritten by each chunk in turn, so only the last chunk carrying usage_metadata won — correct for providers that emit one cumulative total on a final chunk, but wrong for providers (e.g. @langchain/google, @langchain/anthropic) that emit usage_metadata as a per-chunk delta across multiple chunks, where the values must be summed.

    Note for provider authors: this assumes each streamed chunk's usage_metadata is either a per-chunk delta or appears only on a single final chunk. A provider that instead repeats a cumulative total on every chunk will now see it summed (and inflated) in llmOutput.tokenUsage, matching the existing behavior of the correctly-working message.usage_metadata field.

    Also fixes @langchain/google's invoke({streaming: true}) path (no streaming-preferring callback attached), where llmOutput was never populated at all.

  • #11590 ffebdc2 Thanks @​thushanth-bengre-langchain! - Fix OpenAI Responses API replay under Zero Data Retention when a response contains more than one reasoning item, for both v0 and v1. In v0, the default replay path now reuses response_metadata.output directly, preserving every reasoning item's id/encrypted_content in original order. In v1, AIMessage.contentBlocks (outputVersion: "v1") is fixed the same way. additional_kwargs.reasoning is unchanged.

@​langchain/core@​1.2.10

Patch Changes

Commits
  • 778566e chore: version packages (#11607)
  • 18b71af feat(google-genai): add outputDimensionality parameter to GoogleGenerativeAIE...
  • 35368db fix(google): surface groundingMetadata/citationMetadata on streaming path (#1...
  • 78b2923 fix(google): preserve tool call id and thoughtSignature in native streaming (...
  • ffebdc2 fix(openai): correctly handle multiple reasoning items in v1 content blocks (...
  • c9ae847 fix(google): set includeServerSideToolInvocations when mixing tools (#11611)
  • bc88b75 fix(google): route Vertex multi-region endpoints (#11433)
  • fec9cd8 fix(core): build streaming llmOutput.tokenUsage from accumulated usage (#11603)
  • 194a063 fix(google): allowlist JSON Schema keywords for Gemini schemas (#11606)
  • b0a0d3f fix(deps): upgrade Vitest to address GHSA-82fw-gwwq-j7x9 (#11599)
  • Additional commits viewable in compare view

Updates @langchain/openai from 1.5.11 to 1.5.13

Release notes

Sourced from @​langchain/openai's releases.

@​langchain/openai@​1.5.13

Patch Changes

  • #11590 ffebdc2 Thanks @​thushanth-bengre-langchain! - Fix OpenAI Responses API replay under Zero Data Retention when a response contains more than one reasoning item, for both v0 and v1. In v0, the default replay path now reuses response_metadata.output directly, preserving every reasoning item's id/encrypted_content in original order. In v1, AIMessage.contentBlocks (outputVersion: "v1") is fixed the same way. additional_kwargs.reasoning is unchanged.

@​langchain/openai@​1.5.12

Patch Changes

@​langchain/openai@​1.5.12-rc.0

Patch Changes

Commits
  • 778566e chore: version packages (#11607)
  • 18b71af feat(google-genai): add outputDimensionality parameter to GoogleGenerativeAIE...
  • 35368db fix(google): surface groundingMetadata/citationMetadata on streaming path (#1...
  • 78b2923 fix(google): preserve tool call id and thoughtSignature in native streaming (...
  • ffebdc2 fix(openai): correctly handle multiple reasoning items in v1 content blocks (...
  • c9ae847 fix(google): set includeServerSideToolInvocations when mixing tools (#11611)
  • bc88b75 fix(google): route Vertex multi-region endpoints (#11433)
  • fec9cd8 fix(core): build streaming llmOutput.tokenUsage from accumulated usage (#11603)
  • 194a063 fix(google): allowlist JSON Schema keywords for Gemini schemas (#11606)
  • b0a0d3f fix(deps): upgrade Vitest to address GHSA-82fw-gwwq-j7x9 (#11599)
  • Additional commits viewable in compare view

Updates better-auth from 1.7.3 to 1.7.5

Release notes

Sourced from better-auth's releases.

v1.7.5

better-auth

Features

  • Added database.schemaName support for direct PostgreSQL connections. (#11203)

Bug Fixes

  • Improved server-side logging for Cloudflare Turnstile verification failures. (#11283)
  • Fixed PostgreSQL migrations incorrectly identifying tables and views across schemas. (#11270)
  • Fixed MySQL index validation for existing string columns. (#11272)
  • Removed the unused optional better-sqlite3 peer dependency to prevent installation conflicts. (#11209)

For detailed changes, see CHANGELOG

@better-auth/core

Features

  • Added database.schemaName support for direct PostgreSQL connections. (#11203)

Bug Fixes

  • Fixed database option type inference outside Cloudflare Workers. (#11290)

For detailed changes, see CHANGELOG

@better-auth/cimd

Bug Fixes

  • Fixed unnecessary pacing of consecutive CIMD OAuth requests when metadata cannot be cached. (#11161)

For detailed changes, see CHANGELOG

@better-auth/drizzle-adapter

Bug Fixes

  • Fixed lazy database initialization when using Drizzle relations. (#11263)

For detailed changes, see CHANGELOG

@better-auth/kysely-adapter

Features

  • Added database.schemaName support for direct PostgreSQL connections. (#11203)

... (truncated)

Changelog

Sourced from better-auth's changelog.

1.7.5

Patch Changes

  • #11283 e56c45b Thanks @​bytaesu! - Log Cloudflare Turnstile error codes and binding mismatches on the server so CAPTCHA verification failures can be diagnosed.

  • #11209 8d37cc3 Thanks @​siam923! - Remove the unused optional better-sqlite3 peer dependency to prevent installation conflicts.

  • #11272 348fc26 Thanks @​bytaesu! - Use MySQL's reported byte lengths when validating indexes on existing string columns.

  • #11203 cb627eb Thanks @​dshukertjr! - Add a database.schemaName option for direct PostgreSQL connections. When set, the adapter and the CLI qualify every statement with that schema, so auth generate writes a schema-qualified migration that creates the schema before its tables instead of relying on the connection's search_path.

  • #11270 133f6a2 Thanks @​bytaesu! - Prevent PostgreSQL migrations from treating tables in other schemas or views in the active schema as Better Auth tables.

  • Updated dependencies [e18bc83, cb627eb, dae97ed]:

    • @​better-auth/drizzle-adapter@​1.7.5
    • @​better-auth/kysely-adapter@​1.7.5
    • @​better-auth/core@​1.7.5
    • @​better-auth/memory-adapter@​1.7.5
    • @​better-auth/mongo-adapter@​1.7.5
    • @​better-auth/prisma-adapter@​1.7.5
    • @​better-auth/telemetry@​1.7.5

1.7.4

Patch Changes

  • #11205 3f890eb Thanks @​bytaesu! - Support Vitest 5 in the testing utilities while retaining support for previously supported Vitest versions.

  • #11224 c1756a2 Thanks @​bytaesu! - Add experimental.instrumentation.enabled to disable Better Auth OpenTelemetry span creation per auth instance. Instrumentation remains enabled by default and independent of usage reporting.

  • #11217 9b9638e Thanks @​onmax! - Allow testUtils auth helpers to accept additional session fields through the session option, including required fields without defaults and per-session overrides of configured defaults.

  • Updated dependencies [3ff842a, b905bfe, c1756a2]:

    • @​better-auth/core@​1.7.4
    • @​better-auth/drizzle-adapter@​1.7.4
    • @​better-auth/kysely-adapter@​1.7.4
    • @​better-auth/memory-adapter@​1.7.4
    • @​better-auth/mongo-adapter@​1.7.4
    • @​better-auth/prisma-adapter@​1.7.4
    • @​better-auth/telemetry@​1.7.4
Commits
  • 5468e6b chore: release v1.7.5 (#11245)
  • e56c45b fix(captcha): log Turnstile verification failures (#11283)
  • cb627eb feat(postgres): add support for custom schema name in PostgreSQL connections ...
  • 348fc26 fix(db): use reported MySQL index byte bounds (#11272)
  • b93f73d refactor(db): model migration targets by dialect (#11271)
  • 133f6a2 fix(db): use Kysely metadata for PostgreSQL schema introspection (#11270)
  • 34ad3be refactor(cookies): centralize cookie cache version validation (#11254)
  • 8d37cc3 fix(deps): remove unused better-sqlite3 peer dependency (#11209)
  • 735008f chore: release v1.7.4 (#11216)
  • 80b1d64 chore(deps): bump next (#11226)
  • Additional commits viewable in compare view

Updates deepagents from 1.13.3 to 1.14.0

Release notes

Sourced from deepagents's releases.

deepagents@1.14.0

Minor Changes

  • #862 6e6b036 Thanks @​richardscarrott! - feat(deepagents): reload skills when skillsMetadata is set to null

    Skills are loaded once per thread and kept in state, so a long-lived thread never saw skills added, edited or deleted after its first run. Setting skillsMetadata to null now makes the next model call re-read every source and replace the stored list. A thread whose sources hold no skills also counts as loaded, so it stops listing the backend on every run — including threads checkpointed by earlier versions, which store [] and need an explicit null to reload.

    Loading moved from beforeAgent to beforeModel, so a reload is served by the next model call rather than the next run. Two consequences:

    • A middleware of your own can invalidate mid-run, from afterModel, and the following model call sees the fresh list.
    • With a StateBackend, a load now sees files written during the run, so a SKILL.md the agent just wrote is picked up.

    A fork inherits a pending invalidation: a fork spawned in the same iteration that set skillsMetadata to null reloads from its own sources rather than inheriting the parent's last loaded list.

    skillsMetadata is also part of the agent's state type now when skills is passed to createDeepAgent, which previously meant mounting createSkillsMiddleware by hand to reach it. Inference mirrors the runtime condition, so an omitted option or an empty literal contributes no state, while a non-literal string[] does.

    A middleware of your own can reach the field too: skillsMetadataValue is exported for declaring skillsMetadata on a custom middleware's state schema, since a middleware can only read and write the fields its own schema declares. Treat the value as opaque — it exists to be passed to StateSchema, and its concrete type may change.

deepagents@1.13.5

Patch Changes

  • #861 7f8d150 Thanks @​thushanth-bengre-langchain! - feat(filesystem): replace read_file's line-number gutter with a status header

    Before:

         1	hello
     2	world

    After:

    @@ lines 1-2 of 2 @@
hello
world

    read_file now states its line range once, in a @@ lines A-B[ of T] | ... @@ header above unmodified source, instead of a per-line prefix. Truncation and a clamped negative offset are now disclosed as terse header fields instead of prose.

    The quickjs provider's stripLineNumbers is updated to strip the new header (with a fallback to the legacy format) so sandboxed code still gets clean file content.

  • #847 9be2581 Thanks @​richardscarrott! - fix(deepagents): pin skills metadata on per-thread basis

    createSkillsMiddleware stored loaded skills in a loadedSkills closure, created once per middleware instance and reused for every invocation that instance serves. A single agent commonly serves many threads, so the first thread to load won for all of them: later threads were given the first thread's skills metadata and never saw their own. Skills are now loaded per invocation from graph state.

deepagents@1.13.4

Patch Changes

  • #842 eb859e8 Thanks @​byhow! - fix(subagents): stop forwarding call-count bookkeeping across the subagent boundary

... (truncated)

Commits
  • 39b8502 chore: version packages (#863)
  • 6e6b036 feat(deepagents): reload skills when skillsMetadata is set to null (#862)
  • 280f573 chore: version packages (#854)
  • 7f8d150 feat(deepagents,quickjs): update read_file output formatting (#861)
  • eb288dd chore: fixup changeset (#855)
  • 9be2581 fix(deepagents): align skills middleware with Python's per-thread state loadi...
  • 5c316fb fix(deps): patch YAML and TOML denial-of-service vulnerabilities (#853)
  • 5d7fab9 build(deps): bump hono from 4.12.34 to 4.13.5 (#849)
  • 0b01add build(deps): bump vitest from 4.1.10 to 5.0.0 (#850)
  • 157c3ed fix(infra): pin npm 11 for Changesets publishing (#851)
  • Additional commits viewable in compare view

Updates hono from 4.13.7 to 4.13.8

Release notes

Sourced from hono's releases.

v4.13.8

What's Changed

Full Changelog: honojs/hono@v4.13.7...v4.13.8

Commits
  • 098e119 4.13.8
  • e8c8c21 perf(jsx/dom): optimize matching-head child lookup during reconciliation (#5329)
  • 8755b17 docs(combine): fix except() JSDoc param and add missing @​returns (#5346)
  • edd138e fix(request): keep the request media type when reusing a cached body (#5366)
  • 9b4e9c2 fix(accept): clamp a negative q to 0, not 1 (#5357)
  • 65cff90 fix(accept): treat the q parameter name as case-insensitive (#5349)
  • f147de5 fix(accepts, language): skip accept entries with quality 0 when matching (#5311)
  • 90e1b94 fix(aws-lambda): respect backpressure when streaming the response body (#5351)
  • 7792f5d perf(jsx/dom): reduce lookup work for large keyed updates (#5340)
  • e7b38ee docs: fix typos in code comments and link third-party middleware section (#5343)
  • See full diff in compare view

Updates mongoose from 9.9.5 to 9.10.1

Release notes

Sourced from mongoose's releases.

9.10.1 / 2026-09-14

  • types: relax populate Model generics to allow typed virtuals to be passed to populate in TypeScript 7 with skipLibCheck #16503

9.10.0 / 2026-09-10

  • feat: upgrade mongodb driver -> 7.6.0
  • feat(model): add Model.findAndCount() wrapper for limit+skip based pagination with countDocuments #16460 #16454
  • feat(schema): add Schema.prototype.queryHelper() to make it easier to define query helpers in TypeScript #16464 #16410
  • feat: support middleware skip option for cursors and custom hooks #16350 #15883 #8768 AbdelrahmanHafez
  • fix: apply defaults to undefined array elements #16542 #9232
  • types: support for type narrowing when using projection in find and findOne #16500 #15545
  • types: make Schema.prototype.static() return type with new static #16464
Changelog

Sourced from mongoose's changelog.

9.10.1 / 2026-09-14

  • types: relax populate Model generics to allow typed virtuals to be passed to populate in TypeScript 7 with skipLibCheck #16503

9.10.0 / 2026-09-10

  • feat: upgrade mongodb driver -> 7.6.0
  • feat(model): add Model.findAndCount() wrapper for limit+skip based pagination with countDocuments #16460 #16454
  • feat(schema): add Schema.prototype.queryHelper() to make it easier to define query helpers in TypeScript #16464 #16410
  • feat: support middleware skip option for cursors and custom hooks #16350 #15883 #8768 AbdelrahmanHafez
  • fix: apply defaults to undefined array elements #16542 #9232
  • types: support for type narrowing when using projection in find and findOne #16500 #15545
  • types: make Schema.prototype.static() return type with new static #16464
Commits
  • ee7575a chore: release 9.10.1
  • 59fae86 Merge pull request #16505 from Automattic/vkarpov15/gh-16503
  • 889f18d types: relax populate Model generics to allow typed virtuals to be passed to ...
  • 396a2a6 chore: add 9.10 changelog
  • 7b28d7a chore: release 9.10.0
  • bbc3fd1 Merge pull request #16455 from Automattic/9.10
  • f9cef50 Update error handling in findAndCount method
  • 0dd4091 Initialize options with an empty object if undefined
  • b10301d Merge pull request #16488 from Automattic/dependabot/npm_and_yarn/master/moch...
  • a23f167 Merge pull request #16500 from Automattic/vkarpov15/gh-15545
  • Additional commits viewable in compare view

Updates zod from 4.5.4 to 4.6.5

Release notes

Sourced from zod's releases.

v4.6.5

Commits:

  • d2b135cfb7a3582b9eb515756b9166bcb9521f4a docs: add the 4.6.x patch highlights to the 4.6 post
  • f1448f7cee00df9fe1e9ad84a000aa1828cc8bc1 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections
  • de65a5cb39ed22a507fac935788f718fa88d104f docs: lead the properties section with the check and add a Zod Mini tab (#6598)
  • 56222cd1532c07bcb91b67df529cab4c0a215330 feat(instanceof): key the .properties() shape off the instance type (#6600)
  • ca0229a404818290e6cdcfefcd7eb2d04bcbb543 Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)"
  • cc4cd4ee9c52fcaa10964e48cc144541e41a5ed9 Revert "Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)""
  • 0f3f5ee3ca56c7574bf849e54f79e9a6e02562ee 4.6.5
  • 59bbc03e10c636b9eb3c393dfeb552819774ec21 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump

v4.6.4

A patch on top of 4.6.3.

  • d6bc1e30 feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)
  • ad32d751 perf: z.url() rejects an invalid URL with URL.canParse() instead of a throwing constructor, about 50x faster; fewer allocations on the validation path (#6588)
  • 2bb08717 chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump
  • f6e1701a chore(deps): bump next to 15.5.25 and vite to 7.3.6 (#6153)

v4.6.3

A patch on top of 4.6.2.

  • 413cce9a fix(v4): make z.properties() a check again (#6594) — removes the standalone z.properties() schema from 4.6.0; z.instanceof().properties() and .check(...z.properties()) are unchanged
  • 75d63ee1 docs: show only the .properties() method form in the 4.6 post
  • 46da9572 docs: match the error-message examples to what the parsers emit

v4.6.2

A patch on top of 4.6.1.

v4.6.1

A patch on top of 4.6.0.

v4.6.0

Zod 4.6 is now available.

npm install zod@latest

At a glance:

... (truncated)

Commits
  • 59bbc03 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump
  • 0f3f5ee 4.6.5
  • cc4cd4e Revert "Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, ref...
  • ca0229a Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed w...
  • 56222cd feat(instanceof): key the .properties() shape off the instance type (#6600)
  • de65a5c docs: lead the properties section with the check and add a Zod Mini tab (#6598)
  • f1448f7 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections
  • d2b135c docs: add the 4.6.x patch highlights to the 4.6 post
  • 2bb0871 chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump
  • 743aedb 4.6.4
  • Additional commits viewable in compare view

Updates @types/node from 26.5.0 to 26.6.2

Commits

Updates @astrojs/starlight from 0.42.0 to 0.42.2

Release notes

Sourced from @​astrojs/starlight's releases.

@​astrojs/starlight@​0.42.2

Patch Changes

@​astrojs/starlight

@dependabot @github

dependabot Bot commented on behalf of github Sep 21, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@github-actions

github-actions Bot commented Sep 21, 2026

Copy link
Copy Markdown

Docker image ready

docker pull ghcr.io/archmax-ai/semantics:pr-104

@dependabot
chore(deps)(deps): bump the minor-and-patch group across 1 directory …
7fc04da 
…with 24 updates

Bumps the minor-and-patch group with 24 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [turbo](https://github.com/vercel/turborepo) | `2.10.12` | `2.11.2` |
| [@langchain/core](https://github.com/langchain-ai/langchainjs) | `1.2.9` | `1.2.11` |
| [@langchain/openai](https://github.com/langchain-ai/langchainjs) | `1.5.11` | `1.5.13` |
| [better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth) | `1.7.3` | `1.7.5` |
| [deepagents](https://github.com/langchain-ai/deepagentsjs) | `1.13.3` | `1.14.0` |
| [hono](https://github.com/honojs/hono) | `4.13.7` | `4.13.8` |
| [mongoose](https://github.com/Automattic/mongoose) | `9.9.5` | `9.10.1` |
| [zod](https://github.com/colinhacks/zod) | `4.5.4` | `4.6.5` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.5.0` | `26.6.2` |
| [@astrojs/starlight](https://github.com/withastro/starlight/tree/HEAD/packages/starlight) | `0.42.0` | `0.42.2` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.3.2` | `7.3.3` |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.102.8` | `5.103.1` |
| [@tanstack/react-router](https://github.com/TanStack/router/tree/HEAD/packages/react-router) | `1.170.33` | `1.170.38` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.43.0` | `1.47.0` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.0` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.7` | `19.3.0` |
| [@tanstack/router-plugin](https://github.com/TanStack/router/tree/HEAD/packages/router-plugin) | `1.168.36` | `1.168.40` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.7` | `19.3.0` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.2.2` | `8.3.0` |
| [@langchain/anthropic](https://github.com/langchain-ai/langchainjs) | `1.5.9` | `1.5.10` |
| [isomorphic-git](https://github.com/isomorphic-git/isomorphic-git) | `1.41.9` | `1.42.2` |
| [langchain](https://github.com/langchain-ai/langchainjs) | `1.5.10` | `1.5.11` |
| [tailwind-merge](https://github.com/dcastil/tailwind-merge/tree/HEAD/packages/tailwind-merge) | `3.6.0` | `3.7.0` |



Updates `turbo` from 2.10.12 to 2.11.2
- [Release notes](https://github.com/vercel/turborepo/releases)
- [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md)
- [Commits](vercel/turborepo@v2.10.12...v2.11.2)

Updates `@langchain/core` from 1.2.9 to 1.2.11
- [Release notes](https://github.com/langchain-ai/langchainjs/releases)
- [Commits](https://github.com/langchain-ai/langchainjs/compare/@langchain/core@1.2.9...@langchain/core@1.2.11)

Updates `@langchain/openai` from 1.5.11 to 1.5.13
- [Release notes](https://github.com/langchain-ai/langchainjs/releases)
- [Commits](https://github.com/langchain-ai/langchainjs/compare/@langchain/openai@1.5.11...@langchain/openai@1.5.13)

Updates `better-auth` from 1.7.3 to 1.7.5
- [Release notes](https://github.com/better-auth/better-auth/releases)
- [Changelog](https://github.com/better-auth/better-auth/blob/main/packages/better-auth/CHANGELOG.md)
- [Commits](https://github.com/better-auth/better-auth/commits/v1.7.5/packages/better-auth)

Updates `deepagents` from 1.13.3 to 1.14.0
- [Release notes](https://github.com/langchain-ai/deepagentsjs/releases)
- [Commits](https://github.com/langchain-ai/deepagentsjs/compare/deepagents@1.13.3...deepagents@1.14.0)

Updates `hono` from 4.13.7 to 4.13.8
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.13.7...v4.13.8)

Updates `mongoose` from 9.9.5 to 9.10.1
- [Release notes](https://github.com/Automattic/mongoose/releases)
- [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md)
- [Commits](Automattic/mongoose@9.9.5...9.10.1)

Updates `zod` from 4.5.4 to 4.6.5
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.5.4...v4.6.5)

Updates `@types/node` from 26.5.0 to 26.6.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@astrojs/starlight` from 0.42.0 to 0.42.2
- [Release notes](https://github.com/withastro/starlight/releases)
- [Changelog](https://github.com/withastro/starlight/blob/main/packages/starlight/CHANGELOG.md)
- [Commits](https://github.com/withastro/starlight/commits/@astrojs/starlight@0.42.2/packages/starlight)

Updates `astro` from 7.3.2 to 7.3.3
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.3.3/packages/astro)

Updates `@tanstack/react-query` from 5.102.8 to 5.103.1
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.103.1/packages/react-query)

Updates `@tanstack/react-router` from 1.170.33 to 1.170.38
- [Release notes](https://github.com/TanStack/router/releases)
- [Changelog](https://github.com/TanStack/router/blob/main/packages/react-router/CHANGELOG.md)
- [Commits](https://github.com/TanStack/router/commits/@tanstack/react-router@1.170.38/packages/react-router)

Updates `lucide-react` from 1.43.0 to 1.47.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.47.0/packages/lucide-react)

Updates `react` from 19.2.8 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react)

Updates `@types/react` from 19.2.18 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-dom` from 19.2.8 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom)

Updates `@types/react-dom` from 19.2.7 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `@tanstack/router-plugin` from 1.168.36 to 1.168.40
- [Release notes](https://github.com/TanStack/router/releases)
- [Changelog](https://github.com/TanStack/router/blob/main/packages/router-plugin/CHANGELOG.md)
- [Commits](https://github.com/TanStack/router/commits/@tanstack/router-plugin@1.168.40/packages/router-plugin)

Updates `@types/react` from 19.2.18 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@types/react-dom` from 19.2.7 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `vite` from 8.2.2 to 8.3.0
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/create-vite@8.3.0/packages/vite)

Updates `@langchain/anthropic` from 1.5.9 to 1.5.10
- [Release notes](https://github.com/langchain-ai/langchainjs/releases)
- [Commits](https://github.com/langchain-ai/langchainjs/compare/@langchain/anthropic@1.5.9...@langchain/anthropic@1.5.10)

Updates `isomorphic-git` from 1.41.9 to 1.42.2
- [Release notes](https://github.com/isomorphic-git/isomorphic-git/releases)
- [Commits](isomorphic-git/isomorphic-git@v1.41.9...v1.42.2)

Updates `langchain` from 1.5.10 to 1.5.11
- [Release notes](https://github.com/langchain-ai/langchainjs/releases)
- [Commits](https://github.com/langchain-ai/langchainjs/compare/langchain@1.5.10...langchain@1.5.11)

Updates `tailwind-merge` from 3.6.0 to 3.7.0
- [Release notes](https://github.com/dcastil/tailwind-merge/releases)
- [Commits](https://github.com/dcastil/tailwind-merge/commits/tailwind-merge@3.7.0/packages/tailwind-merge)

---
updated-dependencies:
- dependency-name: "@astrojs/starlight"
  dependency-version: 0.42.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@langchain/anthropic"
  dependency-version: 1.5.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@langchain/core"
  dependency-version: 1.2.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@langchain/openai"
  dependency-version: 1.5.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.103.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@tanstack/react-router"
  dependency-version: 1.170.38
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@tanstack/router-plugin"
  dependency-version: 1.168.40
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@types/node"
  dependency-version: 26.6.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/react"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/react"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/react-dom"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/react-dom"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: astro
  dependency-version: 7.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: better-auth
  dependency-version: 1.7.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: deepagents
  dependency-version: 1.13.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: hono
  dependency-version: 4.13.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: isomorphic-git
  dependency-version: 1.42.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: langchain
  dependency-version: 1.5.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: lucide-react
  dependency-version: 1.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: mongoose
  dependency-version: 9.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: react
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: react-dom
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: tailwind-merge
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: turbo
  dependency-version: 2.10.13
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: vite
  dependency-version: 8.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: zod
  dependency-version: 4.6.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/minor-and-patch-c7f0db428b branch from 141d8ec to 7fc04da Compare September 22, 2026 17:50
@dependabot @github

dependabot Bot commented on behalf of github Sep 28, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 28, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/minor-and-patch-c7f0db428b branch September 28, 2026 04:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants