deps: bump the minor-and-patch group with 5 updates by dependabot[bot] · Pull Request #145 · lex0c/forja

dependabot · 2026-07-18T07:23:02Z

Bumps the minor-and-patch group with 5 updates:

Package	From	To
@anthropic-ai/sdk	`0.91.1`	`0.112.3`
@google/genai	`2.11.0`	`2.12.0`
openai	`6.34.0`	`6.48.0`
web-tree-sitter	`0.26.10`	`0.26.11`
@biomejs/biome	`2.5.3`	`2.5.4`

Updates @anthropic-ai/sdk from 0.91.1 to 0.112.3

Release notes

Sourced from @anthropic-ai/sdk's releases.

sdk: v0.112.3

0.112.3 (2026-07-17)

Full Changelog: sdk-v0.112.2...sdk-v0.112.3

Chores

docs: small updates (79fd6c7)

sdk: v0.112.2

0.112.2 (2026-07-17)

Full Changelog: sdk-v0.112.1...sdk-v0.112.2

Chores

client: docs updates (fdb3a65)

sdk: v0.112.1

0.112.1 (2026-07-16)

Full Changelog: sdk-v0.112.0...sdk-v0.112.1

sdk: v0.112.0

0.112.0 (2026-07-16)

Full Changelog: sdk-v0.111.0...sdk-v0.112.0

Features

api: add support for MCP Tunnels (597ac41)

sdk: v0.111.0

0.111.0 (2026-07-10)

Full Changelog: sdk-v0.110.0...sdk-v0.111.0

Features

api: add support for dreaming (77b28a6)

tools: gate session tool calls on evaluated_permission; bound idle by server stop_reason (68a6d7b)

Chores

docs: small updates to field descriptions (e25b885)

docs: update model example (a33f3f0)

docs: updates to descriptions and examples (eac4bac)

sdk: v0.110.0

... (truncated)

Changelog

Sourced from @anthropic-ai/sdk's changelog.

0.112.3 (2026-07-17)

Full Changelog: sdk-v0.112.2...sdk-v0.112.3

Chores

docs: small updates (79fd6c7)

0.112.2 (2026-07-17)

Full Changelog: sdk-v0.112.1...sdk-v0.112.2

Chores

client: docs updates (fdb3a65)

0.112.1 (2026-07-16)

Full Changelog: sdk-v0.112.0...sdk-v0.112.1

0.112.0 (2026-07-16)

Full Changelog: sdk-v0.111.0...sdk-v0.112.0

Features

api: add support for MCP Tunnels (597ac41)

0.111.0 (2026-07-10)

Full Changelog: sdk-v0.110.0...sdk-v0.111.0

Features

api: add support for dreaming (77b28a6)

tools: gate session tool calls on evaluated_permission; bound idle by server stop_reason (68a6d7b)

Chores

docs: small updates to field descriptions (e25b885)

docs: update model example (a33f3f0)

docs: updates to descriptions and examples (eac4bac)

0.110.0 (2026-07-02)

Full Changelog: sdk-v0.109.1...sdk-v0.110.0

Features

... (truncated)

Commits

f84e863 chore: release main
373cf7e chore(docs): small updates
4d3022d chore(internal): tidy changelog
5019578 chore: release main
01e74ee fix(google-cloud): bump google-auth-library to ^10.2.0 (#230)
3c1a91e chore(client): docs updates
dd61964 chore: release main
b48ac4b ci: force version bump (#225)
4aac845 chore: release main
8db6f84 ci: Update readme to force release (#224)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @anthropic-ai/sdk since your current version.

Updates @google/genai from 2.11.0 to 2.12.0

Release notes

Sourced from @google/genai's releases.

v2.12.0

2.12.0 (2026-07-15)

Features

Add AntigravityAgentConfig to OpenAPI schema overlays and regenerate SDKs. (872aa26)

Add history config. (8666bc2)

Add support for preserve custom headers for gaos (f96662a)

add trigger resource (43e0137)

Add Triggers resource to GoogleGenAI client. (8d520cd)

interactions: add CodeMenderAgentConfig (4469a85)

Populate per-modality prompt token count in embedding responses for gemini-embedding-2 (163bf72)

Changelog

Sourced from @google/genai's changelog.

2.12.0 (2026-07-15)

Features

Add AntigravityAgentConfig to OpenAPI schema overlays and regenerate SDKs. (872aa26)

Add history config. (8666bc2)

Add support for preserve custom headers for gaos (f96662a)

add trigger resource (43e0137)

Add Triggers resource to GoogleGenAI client. (8d520cd)

interactions: add CodeMenderAgentConfig (4469a85)

Populate per-modality prompt token count in embedding responses for gemini-embedding-2 (163bf72)

Commits

4106e89 chore(main): release 2.12.0 (#1761)
aa2fd80 chore: internal change
c0b64fe feat: Add max_total_tokens for Interaction.
3b40b82 chore: Add basic trigger life cycle samples
8666bc2 feat: Add history config.
872aa26 feat: Add AntigravityAgentConfig to OpenAPI schema overlays and regenerate SDKs.
8d520cd feat: Add Triggers resource to GoogleGenAI client.
7b5a133 chore: refresh model list
c10c048 chore: Use trigger_id instead of id for run and list_execution method
7ff69c8 No public description
Additional commits viewable in compare view

Updates openai from 6.34.0 to 6.48.0

Release notes

Sourced from openai's releases.

v6.48.0

6.48.0 (2026-07-17)

Full Changelog: v6.47.0...v6.48.0

Features

api: /organization/projects/{project_id}/service_accounts/{service_account_id}/api_keys" endpoint (9133b54)

api: manual updates (34acd23)

api: manual updates (3188968)

Bug Fixes

normalize header names before appending (#1941) (18e8c29)

Chores

refresh ecosystem test dependencies (#2002) (8009491)

v6.47.0

6.47.0 (2026-07-14)

Full Changelog: v6.46.0...v6.47.0

Features

add async event iterators (#1977) (2ece8aa)

add fromReadableStream to ResponseStream (#1987) (5984f44)

api: add owner_project_access to APIKeyListParams (7bfce97)

pass context to runTools callbacks (#1973) (a6f01e5)

support streaming file uploads (#1970) (a86f1fd)

Bug Fixes

assistants: preserve readable stream deltas (#1994) (1cdc019)

avoid deep Deno Zod types (#1980) (ae17127), closes #984

ci: bump @arethetypeswrong/cli to ^0.18.0 and run CI workflows on Node 24 (baa0b2a)

emit stream finalization errors (#1972) (9555b71)

handle Azure filter stream chunks (#1982) (c1c5c28), closes #1015

zod: support zod v4 mini schemas (#1985) (2df10fc)

Documentation

clarify strict Zod function schemas (#1988) (373b08a)

v6.46.0

... (truncated)

Changelog

Sourced from openai's changelog.

6.48.0 (2026-07-17)

Full Changelog: v6.47.0...v6.48.0

Features

api: /organization/projects/{project_id}/service_accounts/{service_account_id}/api_keys" endpoint (9133b54)

api: manual updates (34acd23)

api: manual updates (3188968)

Bug Fixes

normalize header names before appending (#1941) (18e8c29)

Chores

refresh ecosystem test dependencies (#2002) (8009491)

6.47.0 (2026-07-14)

Full Changelog: v6.46.0...v6.47.0

Features

add async event iterators (#1977) (2ece8aa)

add fromReadableStream to ResponseStream (#1987) (5984f44)

api: add owner_project_access to APIKeyListParams (7bfce97)

pass context to runTools callbacks (#1973) (a6f01e5)

support streaming file uploads (#1970) (a86f1fd)

Bug Fixes

assistants: preserve readable stream deltas (#1994) (1cdc019)

avoid deep Deno Zod types (#1980) (ae17127), closes #984

ci: bump @arethetypeswrong/cli to ^0.18.0 and run CI workflows on Node 24 (baa0b2a)

emit stream finalization errors (#1972) (9555b71)

handle Azure filter stream chunks (#1982) (c1c5c28), closes #1015

zod: support zod v4 mini schemas (#1985) (2df10fc)

Documentation

clarify strict Zod function schemas (#1988) (373b08a)

6.46.0 (2026-07-09)

Full Changelog: v6.45.0...v6.46.0

... (truncated)

Commits

ee5bce8 release: 6.48.0 (#2000)
8009491 chore: refresh ecosystem test dependencies (#2002)
18e8c29 fix: normalize header names before appending (#1941)
6255405 release: 6.47.0 (#1989)
1cdc019 fix(assistants): preserve readable stream deltas (#1994)
ec2f57f Preserve snapshots when resuming response streams (#1984)
2df10fc fix(zod): support zod v4 mini schemas (#1985)
ebb6498 Fix runTools readable stream round trip tool results (#1986)
5984f44 feat: add fromReadableStream to ResponseStream (#1987)
373b08a docs: clarify strict Zod function schemas (#1988)
Additional commits viewable in compare view

Updates web-tree-sitter from 0.26.10 to 0.26.11

Release notes

Sourced from web-tree-sitter's releases.

v0.26.11

What's Changed

fix(deps): zig manifest for wasmtime is missing windows hashes by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5720

fix(xtask): eliminate silent errors in zig fetch by @WillLillis in tree-sitter/tree-sitter#5724

fix(query): short-circuit longest-match dedup for disjoint states by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5726

fix(query): various anchor fixes by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5727

Fix C++ compilation errors in array macros. by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5735

fix(rust): address new clippy lints by @WillLillis in tree-sitter/tree-sitter#5743

fix(generate): strip non-ASCII case folds by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5744

fix(ci): re-set executable permission on release artifacts before zipping by @clason in tree-sitter/tree-sitter#5746

release v0.26.11 by @clason in tree-sitter/tree-sitter#5748

Full Changelog: tree-sitter/tree-sitter@v0.26.10...v0.26.11

Commits

64402de release v0.26.11
See full diff in compare view

Updates @biomejs/biome from 2.5.3 to 2.5.4

Release notes

Sourced from @biomejs/biome's releases.

Biome CLI v2.5.4

2.5.4

Patch Changes
#10665 55ff995 Thanks @dyc3! - Improved the performance of the HTML parser slightly in our synthetic benchmarks.

#10894 f4fb10e Thanks @ematipico! - Fixed #6392: On-type formatting no longer moves comments before an if statement into its body.

#10939 f2799db Thanks @Netail! - Fixed #10930: noLabelWithoutControl now correctly detects text interpolation in Astro, Svelte & Vue as valid accessible content.

#10945 ae15d98 Thanks @Netail! - Fixed #10942: Svelte directives don't throw an accidental debug log anymore.

#10842 5e1abfe Thanks @JamBalaya56562! - Fixed #9196: biome check --write --unsafe no longer hangs forever when applying the noCommentText code fix.

The rule's fix now wraps the comment in a real JSX expression container ({/* comment */}) instead of re-inserting the braces as plain JSX text, so the fixed code is no longer reported again by the same rule.

#10891 ecca79e Thanks @ematipico! - Fixed [#10885](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome/issues/10885): prevented a module-inference regression introduced by a housekeeping change.
#10886 60c8043 Thanks @dyc3! - Fixed #10727: Biome now breaks the arguments of curried test.each, it.each, describe.each, and test.for calls when they exceed the configured line width.
- test.each([[1, 2]])("a description that is long enough to push the hugged opening line beyond the print width", (a, b) => {
-   expect(a).toBe(b);
- });
+ test.each([[1, 2]])(
+   "a description that is long enough to push the hugged opening line beyond the print width",
+   (a, b) => {
+     expect(a).toBe(b);
+   },
+ );
#10895 01a85f0 Thanks @ematipico! - Biome will now remove stale Unix daemon sockets from older Biome versions when starting a newer daemon.
What's Changed

feat(yml/fmt): basic block properties by @ematipico in biomejs/biome#10873

feat(useSortedClasses): sort important-suffix classes in sort_v4 by @johncarmack1984 in biomejs/biome#10880

fix(format/js): wrap curried test each calls by @dyc3 in biomejs/biome#10886

fix(markdown): parse whitespace after list markers by @tidefield in biomejs/biome#10869

fix(inference): use correct function when cloning data by @ematipico in biomejs/biome#10891

docs(noDuplicateProperties): note that @keyframes declarations are ignored by @dfedoryshchev in biomejs/biome#10893

fix(lint): prevent noCommentText fix from looping forever by @JamBalaya56562 in biomejs/biome#10842

fix(core): cleanup old sockets in Unix by @ematipico in biomejs/biome#10895

feat(inference): inference engine via salsa by @ematipico in biomejs/biome#10888

chore(deps): update dependency @types/node to v24.13.3 by @renovate[bot] in biomejs/biome#10920

chore(deps): update github-actions by @renovate[bot] in biomejs/biome#10921

... (truncated)

Changelog

Sourced from @biomejs/biome's changelog.

2.5.4

Patch Changes
#10665 55ff995 Thanks @dyc3! - Improved the performance of the HTML parser slightly in our synthetic benchmarks.

#10894 f4fb10e Thanks @ematipico! - Fixed #6392: On-type formatting no longer moves comments before an if statement into its body.

#10939 f2799db Thanks @Netail! - Fixed #10930: noLabelWithoutControl now correctly detects text interpolation in Astro, Svelte & Vue as valid accessible content.

#10945 ae15d98 Thanks @Netail! - Fixed #10942: Svelte directives don't throw an accidental debug log anymore.

#10842 5e1abfe Thanks @JamBalaya56562! - Fixed #9196: biome check --write --unsafe no longer hangs forever when applying the noCommentText code fix.

The rule's fix now wraps the comment in a real JSX expression container ({/* comment */}) instead of re-inserting the braces as plain JSX text, so the fixed code is no longer reported again by the same rule.

#10891 ecca79e Thanks @ematipico! - Fixed [#10885](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome/issues/10885): prevented a module-inference regression introduced by a housekeeping change.
#10886 60c8043 Thanks @dyc3! - Fixed #10727: Biome now breaks the arguments of curried test.each, it.each, describe.each, and test.for calls when they exceed the configured line width.
- test.each([[1, 2]])("a description that is long enough to push the hugged opening line beyond the print width", (a, b) => {
-   expect(a).toBe(b);
- });
+ test.each([[1, 2]])(
+   "a description that is long enough to push the hugged opening line beyond the print width",
+   (a, b) => {
+     expect(a).toBe(b);
+   },
+ );
#10895 01a85f0 Thanks @ematipico! - Biome will now remove stale Unix daemon sockets from older Biome versions when starting a newer daemon.

Commits

bfc3f3d ci: release (#10887)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-and-patch group with 5 updates: | Package | From | To | | --- | --- | --- | | [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.91.1` | `0.112.3` | | [@google/genai](https://github.com/googleapis/js-genai) | `2.11.0` | `2.12.0` | | [openai](https://github.com/openai/openai-node) | `6.34.0` | `6.48.0` | | [web-tree-sitter](https://github.com/tree-sitter/tree-sitter/tree/HEAD/lib/binding_web) | `0.26.10` | `0.26.11` | | [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.3` | `2.5.4` | Updates `@anthropic-ai/sdk` from 0.91.1 to 0.112.3 - [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases) - [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md) - [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.91.1...sdk-v0.112.3) Updates `@google/genai` from 2.11.0 to 2.12.0 - [Release notes](https://github.com/googleapis/js-genai/releases) - [Changelog](https://github.com/googleapis/js-genai/blob/main/CHANGELOG.md) - [Commits](googleapis/js-genai@v2.11.0...v2.12.0) Updates `openai` from 6.34.0 to 6.48.0 - [Release notes](https://github.com/openai/openai-node/releases) - [Changelog](https://github.com/openai/openai-node/blob/main/CHANGELOG.md) - [Commits](openai/openai-node@v6.34.0...v6.48.0) Updates `web-tree-sitter` from 0.26.10 to 0.26.11 - [Release notes](https://github.com/tree-sitter/tree-sitter/releases) - [Commits](https://github.com/tree-sitter/tree-sitter/commits/v0.26.11/lib/binding_web) Updates `@biomejs/biome` from 2.5.3 to 2.5.4 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.4/packages/@biomejs/biome) --- updated-dependencies: - dependency-name: "@anthropic-ai/sdk" dependency-version: 0.112.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@google/genai" dependency-version: 2.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: openai dependency-version: 6.48.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: web-tree-sitter dependency-version: 0.26.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@biomejs/biome" dependency-version: 2.5.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

socket-security · 2026-07-18T07:23:16Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
@anthropic-ai/sdk@0.91.1 ⏵ 0.112.3	^-18	⁺⁴	⁺¹
openai@6.34.0 ⏵ 6.48.0	⁺⁹	⁺¹	⁺¹
@google/genai@2.11.0 ⏵ 2.12.0	^-1
web-tree-sitter@0.26.10 ⏵ 0.26.11			⁺²
@biomejs/biome@2.5.3 ⏵ 2.5.4		⁺¹

View full report

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 18, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

deps: bump the minor-and-patch group with 5 updates - #145

deps: bump the minor-and-patch group with 5 updates#145
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/minor-and-patch-ed1f330ddc

dependabot Bot commented on behalf of github Jul 18, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jul 18, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jul 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

sdk: v0.112.3

0.112.3 (2026-07-17)

Chores

sdk: v0.112.2

0.112.2 (2026-07-17)

Chores

sdk: v0.112.1

0.112.1 (2026-07-16)

sdk: v0.112.0

0.112.0 (2026-07-16)

Features

sdk: v0.111.0

0.111.0 (2026-07-10)

Features

Chores

sdk: v0.110.0

0.112.3 (2026-07-17)

Chores

0.112.2 (2026-07-17)

Chores

0.112.1 (2026-07-16)

0.112.0 (2026-07-16)

Features

0.111.0 (2026-07-10)

Features

Chores

0.110.0 (2026-07-02)

Features

v2.12.0

2.12.0 (2026-07-15)

Features

2.12.0 (2026-07-15)

Features

v6.48.0

6.48.0 (2026-07-17)

Features

Bug Fixes

Chores

v6.47.0

6.47.0 (2026-07-14)

Features

Bug Fixes

Documentation

v6.46.0

6.48.0 (2026-07-17)

Features

Bug Fixes

Chores

6.47.0 (2026-07-14)

Features

Bug Fixes

Documentation

6.46.0 (2026-07-09)

v0.26.11

What's Changed

Biome CLI v2.5.4

2.5.4

Patch Changes

What's Changed

2.5.4

Patch Changes

Uh oh!

socket-security Bot commented Jul 18, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 18, 2026 •

edited

Loading