build(deps): bump the dependencies group with 13 updates#223
Closed
dependabot[bot] wants to merge 1 commit into
Closed
build(deps): bump the dependencies group with 13 updates#223dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the dependencies group with 13 updates: | Package | From | To | | --- | --- | --- | | [@google/genai](https://github.com/googleapis/js-genai) | `2.3.0` | `2.6.0` | | [openai](https://github.com/openai/openai-node) | `6.38.0` | `6.39.0` | | [qs](https://github.com/ljharb/qs) | `6.15.1` | `6.15.2` | | [shiki](https://github.com/shikijs/shiki/tree/HEAD/packages/shiki) | `4.0.2` | `4.1.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.8.0` | `25.9.1` | | [@typescript/native-preview](https://github.com/microsoft/typescript-go) | `7.0.0-dev.20260516.1` | `7.0.0-dev.20260522.1` | | [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.6` | `4.1.7` | | [devtools-protocol](https://github.com/ChromeDevTools/devtools-protocol) | `0.0.1629771` | `0.0.1634055` | | [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt) | `0.50.0` | `0.51.0` | | [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.65.0` | `1.66.0` | | [puppeteer-core](https://github.com/puppeteer/puppeteer) | `25.0.2` | `25.0.4` | | [tsx](https://github.com/privatenumber/tsx) | `4.22.0` | `4.22.3` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.6` | `4.1.7` | Updates `@google/genai` from 2.3.0 to 2.6.0 - [Release notes](https://github.com/googleapis/js-genai/releases) - [Changelog](https://github.com/googleapis/js-genai/blob/main/CHANGELOG.md) - [Commits](googleapis/js-genai@v2.3.0...v2.6.0) Updates `openai` from 6.38.0 to 6.39.0 - [Release notes](https://github.com/openai/openai-node/releases) - [Changelog](https://github.com/openai/openai-node/blob/master/CHANGELOG.md) - [Commits](openai/openai-node@v6.38.0...v6.39.0) Updates `qs` from 6.15.1 to 6.15.2 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.15.1...v6.15.2) Updates `shiki` from 4.0.2 to 4.1.0 - [Release notes](https://github.com/shikijs/shiki/releases) - [Commits](https://github.com/shikijs/shiki/commits/v4.1.0/packages/shiki) Updates `@types/node` from 25.8.0 to 25.9.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@typescript/native-preview` from 7.0.0-dev.20260516.1 to 7.0.0-dev.20260522.1 - [Changelog](https://github.com/microsoft/typescript-go/blob/main/CHANGES.md) - [Commits](https://github.com/microsoft/typescript-go/commits) Updates `@vitest/coverage-v8` from 4.1.6 to 4.1.7 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.7/packages/coverage-v8) Updates `devtools-protocol` from 0.0.1629771 to 0.0.1634055 - [Commits](ChromeDevTools/devtools-protocol@v0.0.1629771...v0.0.1634055) Updates `oxfmt` from 0.50.0 to 0.51.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.51.0/npm/oxfmt) Updates `oxlint` from 1.65.0 to 1.66.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.66.0/npm/oxlint) Updates `puppeteer-core` from 25.0.2 to 25.0.4 - [Release notes](https://github.com/puppeteer/puppeteer/releases) - [Changelog](https://github.com/puppeteer/puppeteer/blob/main/CHANGELOG.md) - [Commits](puppeteer/puppeteer@puppeteer-core-v25.0.2...puppeteer-core-v25.0.4) Updates `tsx` from 4.22.0 to 4.22.3 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.22.0...v4.22.3) Updates `vitest` from 4.1.6 to 4.1.7 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.7/packages/vitest) --- updated-dependencies: - dependency-name: "@google/genai" dependency-version: 2.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: openai dependency-version: 6.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: qs dependency-version: 6.15.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: shiki dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@types/node" dependency-version: 25.9.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@typescript/native-preview" dependency-version: 7.0.0-dev.20260522.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@vitest/coverage-v8" dependency-version: 4.1.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: devtools-protocol dependency-version: 0.0.1634055 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: oxfmt dependency-version: 0.51.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: oxlint dependency-version: 1.66.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: puppeteer-core dependency-version: 25.0.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: tsx dependency-version: 4.22.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: vitest dependency-version: 4.1.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
|
Codex review: needs maintainer review before merge. Latest ClawSweeper review: 2026-05-22 20:32 UTC / May 22, 2026, 4:32 PM ET. Workflow note: Future ClawSweeper reviews update this same comment in place. How this review workflow works
Summary Reproducibility: not applicable. this is a dependency refresh PR, not a bug report with a reproduction path. PR rating Rank-up moves:
What the crustacean ranks mean
Shiny media proof means a screenshot, video, or linked artifact directly shows the changed behavior. Runtime, network, CSP, and security claims still need visible diagnostics. Real behavior proof Risk before merge
Maintainer options:
Next step before merge Security Review detailsBest possible solution: Merge the dependency refresh only after CI and targeted OpenAI, Gemini, and browser smoke coverage pass for the touched runtime packages. Do we have a high-confidence way to reproduce the issue? Not applicable: this is a dependency refresh PR, not a bug report with a reproduction path. Is this the best way to solve the issue? Yes, a Dependabot manifest and lockfile refresh is the normal solution for keeping these packages current; the safer merge path is to gate it with targeted provider and browser validation. Label changes:
Label justifications:
Acceptance criteria:
What I checked:
Likely related people:
Codex review notes: model gpt-5.5, reasoning high; reviewed against e0cfed0c449d. |
clawsweeper
Bot
added
rating: 🐚 platinum hermit
|
ClawSweeper PR egg ✨ Hatched: 🥚 common Brave Review Wisp Hatch commandComment Hatchability rules:
Rarity: 🥚 common. What is this egg doing here?
|
Contributor
Author
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
dependabot
Bot
deleted the
dependabot/npm_and_yarn/dependencies-9f31ab7582
branch
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the dependencies group with 13 updates:
2.3.02.6.06.38.06.39.06.15.16.15.24.0.24.1.025.8.025.9.17.0.0-dev.20260516.17.0.0-dev.20260522.14.1.64.1.70.0.16297710.0.16340550.50.00.51.01.65.01.66.025.0.225.0.44.22.04.22.34.1.64.1.7Updates
@google/genaifrom 2.3.0 to 2.6.0Release notes
Sourced from @google/genai's releases.
Changelog
Sourced from @google/genai's changelog.
Commits
a631549chore(main): release 2.6.0 (#1623)f780f3cfeat: addenable_prompt_injection_detectionfor Computer Use feature for th...b78eeeefeat: add new fields1e97bd0feat: Add budget_exceeded status2cb1814chore(main): release 2.5.0 (#1616)f06e3a2chore: update comment in BatchJobOutputInfo to unblock javadoc generationfcf26e3feat: Add Gemini 3.5 Flash model to optionsb252753chore: Cleanupdbe4484chore(main): release 2.4.0 (#1604)b0d9d2bfeat: support Agent and Environment APIs.Updates
openaifrom 6.38.0 to 6.39.0Release notes
Sourced from openai's releases.
Changelog
Sourced from openai's changelog.
Commits
2002111release: 6.39.0d6dc9b7feat(api): manual updates7444892feat(api): api updatef5db3f1fix(types): allow runtime fetch options33b391achore(api): docs updatesbfe3016fix(typescript): upgrade tsc-multi so that it works with Node 263320b20chore(tests): remove redundant File import3250890feat(api): manual updatesd9fbf39feat(api): update OpenAPI spec or Stainless config8a8436ecodegen metadataUpdates
qsfrom 6.15.1 to 6.15.2Changelog
Sourced from qs's changelog.
Commits
9aca407v6.15.25e33d33[Dev Deps] update@ljharb/eslint-config21f80b3[Fix]stringify: skip null/undefined entries inarrayFormat: 'comma'+ `e...a0a81ea[Fix]stringify: use configureddelimiteraftercharsetSentinele3062f7[Fix]stringify: applyformatterto encoded key understrictNullHandling0c180a4[Fix]stringify: skip null/undefined filter-array entries instead of crashi...3a8b94a[Tests] add regression tests for keys containing percent-encoded bracket text96755ab[readme] fix grammara419ce5[Fix]parse: handle nested bracket groups and add regression testsUpdates
shikifrom 4.0.2 to 4.1.0Release notes
Sourced from shiki's releases.
Commits
c809af9chore: release v4.1.095371cbchore: lintUpdates
@types/nodefrom 25.8.0 to 25.9.1Commits
Updates
@typescript/native-previewfrom 7.0.0-dev.20260516.1 to 7.0.0-dev.20260522.1Commits
Updates
@vitest/coverage-v8from 4.1.6 to 4.1.7Release notes
Sourced from @vitest/coverage-v8's releases.
Commits
a09d472chore: release v4.1.7Updates
devtools-protocolfrom 0.0.1629771 to 0.0.1634055Commits
e47d08cRoll protocol to r1634055357026fRoll protocol to r1632630Updates
oxfmtfrom 0.50.0 to 0.51.0Changelog
Sourced from oxfmt's changelog.
Commits
5570206release(apps): oxlint v1.66.0 && oxfmt v0.51.0 (#22528)Updates
oxlintfrom 1.65.0 to 1.66.0Release notes
Sourced from oxlint's releases.
... (truncated)
Changelog
Sourced from oxlint's changelog.
Commits
5570206release(apps): oxlint v1.66.0 && oxfmt v0.51.0 (#22528)0440b0ffeat(linter/eslint): implementid-matchrule (#22379)65bf119feat(linter): implement react no-object-type-as-default-prop (#22481)2a6ddcefeat(linter/eslint): implementno-implied-evalrule (#22391)625758afeat(linter/vitest): Implement padding-around-after-all-blocks rule (#21788)37680b0feat(linter): implement react no-unstable-nested-components (#22248)d8d9c74feat(linter): implement import/newline-after-import rule (#19142)Updates
puppeteer-corefrom 25.0.2 to 25.0.4Release notes
Sourced from puppeteer-core's releases.
Changelog
Sourced from puppeteer-core's changelog.
Commits
019b49bchore: release main (#15003)611abeffix: Throw TargetCloseError when session ID not found (#15002)272b850chore(webmcp): Update list tools test with fixed declarative behavior (#15000)acb4b9echore: release main (#14999)cce47defix: fix tar.exe invocation (#14997)2e315b9chore(deps): bump the all group with 2 updates (#14995)042838fchore(deps): bump node frome989123to050bf2bin /docker in the all grou...Updates
tsxfrom 4.22.0 to 4.22.3Release notes
Sourced from tsx's releases.
Commits
dce02fcfix: decode typed loader source68f72f3fix: preserve entrypoint with TypeScript preload hooks69455cftest: cover package exports for ambiguous ESM reexports35b700bfix: preserve CJS JSON require in ESM hooksef807dbchore: update testing dependencies3917090test: document compatibility test taxonomyde8113frefactor: centralize Node capability factsc1f62dbtest: consolidate tsconfig path edge coverage4e08174test: consolidate loader hook coverage674bb30test: consolidate tsImport commonjs mts coverageUpdates
vitestfrom 4.1.6 to 4.1.7Release notes
Sourced from vitest's releases.
Commits
a09d472chore: release v4.1.7Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions