Skip to content

Bump @pinecone-database/pinecone from 6.1.4 to 7.1.0#62

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/pinecone-database/pinecone-7.1.0
Open

Bump @pinecone-database/pinecone from 6.1.4 to 7.1.0#62
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/pinecone-database/pinecone-7.1.0

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 25, 2026

Bumps @pinecone-database/pinecone from 6.1.4 to 7.1.0.

Release notes

Sourced from @​pinecone-database/pinecone's releases.

Release v7.1.0

This release adds support for creating and configuring index readCapacity for BYOC indexes.

// Create a BYOC index with dedicated read capacity
await pinecone.createIndex({
  name: 'my-byoc-index',
  dimension: 1536,
  metric: 'cosine',
  spec: {
    byoc: {
      environment: 'aws-us-east-1-b921',
      readCapacity: {
        mode: 'Dedicated',
        nodeType: 'b1',
        manual: { replicas: 1, shards: 1 },
      },
    },
  },
});

It also includes support for maxCandidates and scanFactor in the Index.query operation. This parameter is only supported for dedicated (DRN) dense indexes:

const results = await index.query({
  vector:[0.6, 0.2, 0.4, 0.7, 0.9],
  topK: 10,
  scanFactor: 2.0,
  maxCandidates: 500,
});

What's Changed

Full Changelog: pinecone-io/pinecone-ts-client@v7.0.0...v7.1.0

Release v7.0.0

This version of the Pinecone Node SDK depends on version 2025-10 of the Pinecone API. You can read more about versioning here. This v7 SDK release line should continue to receive fixes as long as the 2025-10 API version is in support.

Breaking Changes

Index Targeting

... (truncated)

Commits
  • 0f2e3c6 [skip ci] Publish release v7.1.0
  • 55fb10b Implement scan_factor and max_candidates (#379)
  • 1c6dd61 Implement readCapacity configuration support for BYOC indexes (#378)
  • 576fe90 pass git token with the create draft release with notes job (#377)
  • 193d1b3 [skip ci] Publish release v7.0.0
  • 4f3cbb2 Small tweak to top-level README (#376)
  • 4e4d3a8 Refactor README.md for 2025-10, fix build-and-publish-docs workflow (#375)
  • ead0109 [2025-10][Assistant] Expose evaluate, add multimodal support in `uploadFile...
  • 536ea7e Unify operations around object shaped arguments, allow operation-level namesp...
  • a2b3d16 Update to node v20.x / typescript v5.6.3 (#372)
  • Additional commits viewable in compare view
Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note

Medium Risk
Major-version SDK upgrade that may include breaking API changes, and the updated @pinecone-database/pinecone package now requires Node >=20 which could break installs/runs on Node 18/19 despite this repo still declaring node >=18.

Overview
Updates the Pinecone Node SDK dependency from @pinecone-database/pinecone@6.1.4 to 7.1.0 in package.json and refreshes package-lock.json accordingly.

Notably, the locked @pinecone-database/pinecone package now declares an engine requirement of Node >=20, which may require aligning this repo's supported Node versions or CI/runtime environments.

Written by Cursor Bugbot for commit b14fa2f. This will update automatically on new commits. Configure here.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Feb 25, 2026
"dependencies": {
"@modelcontextprotocol/sdk": "^1.25.3",
"@pinecone-database/pinecone": "^6.1.4",
"@pinecone-database/pinecone": "^7.1.0",
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Node version support now mismatches dependency

Medium Severity

Upgrading to @pinecone-database/pinecone@^7.1.0 pulls a package that declares node >=20, while this project still advertises engines.node as >=18. On Node 18/19, installs can fail under strict engine checks or runtime behavior can break despite the package claiming support.

Additional Locations (1)

Fix in Cursor Fix in Web

Triggered by project rule: Code Review Guidance

@jhamon
Copy link
Contributor

jhamon commented Mar 6, 2026

@dependabot rebase

Bumps [@pinecone-database/pinecone](https://github.com/pinecone-io/pinecone-ts-client) from 6.1.4 to 7.1.0.
- [Release notes](https://github.com/pinecone-io/pinecone-ts-client/releases)
- [Commits](pinecone-io/pinecone-ts-client@v6.1.4...v7.1.0)

---
updated-dependencies:
- dependency-name: "@pinecone-database/pinecone"
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/pinecone-database/pinecone-7.1.0 branch from ebd31ad to b14fa2f Compare March 6, 2026 12:17
Copy link

@cursor cursor bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 2 potential issues.

Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

"dependencies": {
"@modelcontextprotocol/sdk": "^1.25.3",
"@pinecone-database/pinecone": "^6.1.4",
"@pinecone-database/pinecone": "^7.1.0",
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Major version bump breaks all pc.index() calls

High Severity

Bumping @pinecone-database/pinecone from v6 to v7 introduces a breaking change: pc.index() no longer accepts a string argument and now requires an object like { name: 'my-index' }. The codebase calls pc.index(name) with a string in four files (upsert-records.ts, search-records.ts, describe-index-stats.ts, cascading-search.ts), which will fail at runtime since no source code was updated alongside this version bump.

Additional Locations (1)

Fix in Cursor Fix in Web

Triggered by project rule: Code Review Guidance

"dependencies": {
"@modelcontextprotocol/sdk": "^1.25.3",
"@pinecone-database/pinecone": "^6.1.4",
"@pinecone-database/pinecone": "^7.1.0",
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Major version bump breaks inference.rerank() call signature

High Severity

The v7 SDK changed inference.rerank() from positional arguments to a single RerankOptions object. The codebase calls pc.inference.rerank(model, query, documents, options) with positional args in rerank-documents.ts and cascading-search.ts, which will fail at runtime since v7 expects rerank({ model, query, documents, topN, rankFields, ... }).

Additional Locations (1)

Fix in Cursor Fix in Web

Triggered by project rule: Code Review Guidance

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant