[herber]

Part of the monorepo-wide dependency refresh (branch chore/deps-upgrade-2026-10 in metorial-platform and metorial-enterprise).

Versions respect the repo's 7-day minimum release age and this package's Node engine baseline.

Summary

• 38 manifests changed, 25 distinct dependencies updated
• 4 with a major upgrade, 21 minor/patch only

Major upgrades

Package	From	To	Manifests
jose	^5.9.6	^6.2.12	1
tsup	^7.1.0, ^8.5.0	^8.5.1	25
vitest	^0.34.6	^4.1.11	25
zod	^3.22.4	^4.6.7	2

Minor / patch upgrades

Package	From	To	Manifests
@ai-sdk/openai	^1, ^3.0.48	^1.3.24, ^3.0.125	3
@anthropic-ai/sdk	^0.30.0	^0.30.1	1
@changesets/cli	^2.29.7	^2.31.1	1
@google/genai	^1.13.0, ^1.4.0	^1.52.0	2
@langchain/anthropic	^1.4.0	^1.5.12	1
@langchain/core	^1.1.0	^1.2.17	2
@mistralai/mistralai	^1.0.0, ^1.7.2	^1.15.1	3
@modelcontextprotocol/sdk	^1.12.1	^1.32.1	1
@types/qs	^6.14.0	^6.15.1	1
@types/react	^19.1.8	^19.3.0	1
@types/ws	^8.5.13	^8.18.2	10
ai	^4, ^4.3.16, ^5.0.0, ^6.0.0	^4.3.19, ^5.0.274, ^6.0.304	5
esbuild	^0.25.12	^0.28.2	1
eventsource-parser	^3.0.0	3.0.6	1
langchain	^1.4.0, ^1.4.1	^1.5.16	2
openai	^4.75.0, ^5.3.0	^4.104.0, ^5.23.2	11
prettier	^3.5.3	^3.9.10	1
qs	^6.13.1	^6.16.0	1
turbo	^2.5.4	^2.11.7	1
typescript	5.8.2, ^5.1.6	5.9.3, ^5.9.3	26
ws	^8.18.2	^8.22.0	2

Verification

Fresh copy, bun install --frozen-lockfile, then build and tests on the CI Node/Bun versions.

AI SDK adapters/examples intentionally stay on the major they target; eventsource-parser is pinned to 3.0.6 because 3.0.7+ dropped the typesVersions entry for /stream.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​@​types/​bun@​1.3.14 ⏵ 1.4.3				+2
	npm/​metorial@​1.0.3 ⏵ 3.3.6	+3		+2	+3
	npm/​@​metorial/​ai-sdk@​1.1.2 ⏵ 3.0.9			-1	-1
	npm/​@​ai-sdk/​openai@​3.0.31 ⏵ 3.0.130	+8		+1
	npm/​openai@​5.10.1 ⏵ 5.23.2			+1	+2
	npm/​turbo@​2.5.5 ⏵ 2.11.9	+1	+3
	npm/​@​google/​genai@​1.13.0 ⏵ 1.52.0	-5			+1
	npm/​langchain@​1.4.1 ⏵ 1.5.18			+1	-2
	npm/​@​changesets/​cli@​2.29.7 ⏵ 2.31.1	+1			+1
	npm/​@​mistralai/​mistralai@​1.7.4 ⏵ 1.15.1	+1		+1	+2
	npm/​@​langchain/​core@​1.1.47 ⏵ 1.2.18			+1	-1
	npm/​prettier@​3.6.2 ⏵ 3.9.10	+1		+1
	npm/​@​langchain/​anthropic@​1.4.0 ⏵ 1.5.12	+1			+1
	npm/​ai@​5.0.75 ⏵ 6.0.309	+3

View full report