Skip to content

chore(deps): bump the npm-deps group across 1 directory with 11 updates - #161

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-deps-1ab78f3863
Open

chore(deps): bump the npm-deps group across 1 directory with 11 updates#161
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-deps-1ab78f3863

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 29, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-deps group with 11 updates in the / directory:

Package From To
@types/node 26.1.2 26.3.0
@anthropic-ai/sdk 0.115.0 0.121.0
openai 7.4.0 7.6.0
@google/genai 2.15.0 2.19.0
koffi 3.1.4 3.1.6
@eserstack/ajan-darwin-arm64 4.1.57 4.3.1
@eserstack/ajan-darwin-x64 4.1.57 4.3.1
rolldown 1.2.3 1.2.6
esbuild 0.28.1 0.28.2
sharp 0.35.3 0.35.4
@types/react-dom 19.2.4 19.2.5

Updates @types/node from 26.1.2 to 26.3.0

Commits

Updates @anthropic-ai/sdk from 0.115.0 to 0.121.0

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk: v0.121.0

0.121.0 (2026-08-26)

Full Changelog: sdk-v0.120.0...sdk-v0.121.0

Features

  • api: add updates thinking display mode (beta) (22274ea)
  • api: add missing anthropic-beta values (0779f02)
  • api: add support for Organization API endpoints (8b61e7a)
  • helpers: support Standard Schema for structured outputs and tools (7880078)

Bug Fixes

  • tools: keep the tool runner going on pause_turn (#288) (f040dc9)
  • types: don't reference NodeJS.ProcessEnv from published types (#367) (fd38dfd)

Chores

  • docs: clarify skill version latest support and memory version retention (7405a69)
  • examples: remove redundant main().catch boilerplate (154ace7)
  • internal: cancel superseded CI runs (0532c98)
  • internal: codegen related update (228ff1e)
  • internal: minor workflow reformat (41b6c31)
  • internal: tighten publint and attw lint checks (e3fbd62)

Documentation

  • api: clarify session thread agent and usage.iterations compaction descriptions (beta) (6e852a7)
  • examples: use adaptive thinking in thinking examples (3dd7699)

sdk: v0.120.0

0.120.0 (2026-08-19)

Full Changelog: sdk-v0.119.0...sdk-v0.120.0

Features

  • api: managed agents web search config and self hosted sandbox memory (ba8ec50)

Chores

  • internal: use a single pnpm workspace lockfile (#359) (3c32145)

sdk: v0.119.0

0.119.0 (2026-08-19)

... (truncated)

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.121.0 (2026-08-26)

Full Changelog: sdk-v0.120.0...sdk-v0.121.0

Features

  • api: add updates thinking display mode (beta) (22274ea)
  • api: add missing anthropic-beta values (0779f02)
  • api: add support for Organization API endpoints (8b61e7a)
  • helpers: support Standard Schema for structured outputs and tools (7880078)

Bug Fixes

  • tools: keep the tool runner going on pause_turn (#288) (f040dc9)
  • types: don't reference NodeJS.ProcessEnv from published types (#367) (fd38dfd)

Chores

  • docs: clarify skill version latest support and memory version retention (7405a69)
  • examples: remove redundant main().catch boilerplate (154ace7)
  • internal: cancel superseded CI runs (0532c98)
  • internal: codegen related update (228ff1e)
  • internal: minor workflow reformat (41b6c31)
  • internal: tighten publint and attw lint checks (e3fbd62)

Documentation

  • api: clarify session thread agent and usage.iterations compaction descriptions (beta) (6e852a7)
  • examples: use adaptive thinking in thinking examples (3dd7699)

0.120.0 (2026-08-19)

Full Changelog: sdk-v0.119.0...sdk-v0.120.0

Features

  • api: managed agents web search config and self hosted sandbox memory (ba8ec50)

Chores

  • internal: use a single pnpm workspace lockfile (#359) (3c32145)

0.119.0 (2026-08-19)

Full Changelog: sdk-v0.118.0...sdk-v0.119.0

... (truncated)

Commits
  • 7ba6a3f chore: release main
  • e84d141 codegen metadata
  • b181e5e codegen metadata
  • 5cc6c40 feat(api): add support for Organization API endpoints
  • f6a54d3 docs(api): clarify session thread agent and usage.iterations compaction descr...
  • eb2fb67 chore(examples): remove redundant main().catch boilerplate
  • 29c079a feat(api): add updates thinking display mode (beta)
  • 77248a1 chore(internal): tighten publint and attw lint checks
  • 36e1285 fix(tools): keep the tool runner going on pause_turn (#288)
  • 793ed45 Remove claude-code-action workflow (#402)
  • Additional commits viewable in compare view

Updates openai from 7.4.0 to 7.6.0

Release notes

Sourced from openai's releases.

v7.6.0

7.6.0 (2026-08-26)

Features

  • api: Add obfuscation field to ChatCompletionChunk (#2423) (39afa3a)
  • api: Add project residency and usage quantity_unit fields (#2461) (26d8158)
  • api: support backend-mediated Realtime WebRTC calls (#2469) (0d12ca8)
  • auth: add pinned X.509 workload token exchange (#2470) (9dd8648)
  • auth: attest cross-module X.509 transport capabilities (#2471) (c6769fa)
  • auth: harden X.509 token lifecycle and tenant isolation (#2473) (6992683)
  • auth: integrate attested X.509 workload identity into clients (#2472) (ee5229b)
  • support named data-residency endpoints (#2393) (62d98dd)

Bug Fixes

  • [responses] Avoid quadratic comparisons when accumulating long text (#2434) (95628ce)
  • assistants: reject run-step identity hijacking before tool callbacks (#2476) (63b1c75)
  • audio: preserve recording outcomes during cancellation and cleanup (#2482) (dafcac4)
  • auth: honor an explicit zero GCP metadata timeout (#2481) (7a9dec8)
  • auth: sanitize malformed Azure IMDS token responses (#2427) (bbfb792)
  • auth: sanitize malformed workload OAuth token responses (#2468) (cd5b2d8)
  • avoid double-counting logprobs in streamed chat completions (#2444) (ddf9922)
  • bedrock: honor cancellation during bearer credential resolution (#2478) (2dac2f4)
  • drain tee stream queues in linear time (#2379) (1f3ce07)
  • polling: honor cancellation during polling delays (#2477) (520d604)
  • preserve large streaming responses (#2433) (4e588c2)
  • preserve multipart upload array order (#2380) (f1a2b61)
  • publish Castiron checks for behind-main pull requests (#2486) (662bb37)
  • publish Castiron checks for external-fork pull requests (#2464) (a90581e)
  • security: abort streaming examples when clients disconnect (#2426) (b32a25b)
  • security: authenticate Cloudflare tests and restrict streaming proxies (#2413) (9286fdb)
  • security: authenticate Vercel ecosystem APIs and clean up uploaded files (#2412) (d58608a)
  • security: bound SDK event streams and validate streamed item identities (#2415) (7df29a9)
  • security: bound SSE frames and NDJSON lines before buffering (#2411) (0e250a4)
  • security: close rejected Azure managed-identity response streams (#2416) (387bbc8)
  • security: harden Bedrock regions, query merges, and upload errors (#2410) (ce45d0d)
  • security: harden Realtime WebSocket origins, worker guards, and Azure credentials (#2414) (5533f73)
  • security: preserve chat structured response-format integrity (#2402) (e69df93)
  • security: prevent AssistantStream deltas leaking sensitive data (#2392) (17cf54c)
  • security: prevent streaming upload filename path disclosure (#2386) (c88a024)
  • security: prevent structured-output format downgrade (#2394) (dd945e6)
  • security: redact built-in structured JSON parse errors (#2418) (a0d68cc)
  • security: redact chat completion finalization snapshots (#2400) (fb5d8e7)
  • security: redact GCP metadata authentication error bodies (#2399) (322840c)
  • security: redact invalid Bedrock bearer credentials (#2419) (39c06d1)
  • security: redact invalid workload identity access tokens (#2425) (0d28da3)
  • security: redact malformed NDJSON stream diagnostics (#2420) (dcc705c)

... (truncated)

Changelog

Sourced from openai's changelog.

7.6.0 (2026-08-26)

Features

  • api: Add obfuscation field to ChatCompletionChunk (#2423) (39afa3a)
  • api: Add project residency and usage quantity_unit fields (#2461) (26d8158)
  • api: support backend-mediated Realtime WebRTC calls (#2469) (0d12ca8)
  • auth: add pinned X.509 workload token exchange (#2470) (9dd8648)
  • auth: attest cross-module X.509 transport capabilities (#2471) (c6769fa)
  • auth: harden X.509 token lifecycle and tenant isolation (#2473) (6992683)
  • auth: integrate attested X.509 workload identity into clients (#2472) (ee5229b)
  • support named data-residency endpoints (#2393) (62d98dd)

Bug Fixes

  • [responses] Avoid quadratic comparisons when accumulating long text (#2434) (95628ce)
  • assistants: reject run-step identity hijacking before tool callbacks (#2476) (63b1c75)
  • audio: preserve recording outcomes during cancellation and cleanup (#2482) (dafcac4)
  • auth: honor an explicit zero GCP metadata timeout (#2481) (7a9dec8)
  • auth: sanitize malformed Azure IMDS token responses (#2427) (bbfb792)
  • auth: sanitize malformed workload OAuth token responses (#2468) (cd5b2d8)
  • avoid double-counting logprobs in streamed chat completions (#2444) (ddf9922)
  • bedrock: honor cancellation during bearer credential resolution (#2478) (2dac2f4)
  • drain tee stream queues in linear time (#2379) (1f3ce07)
  • polling: honor cancellation during polling delays (#2477) (520d604)
  • preserve large streaming responses (#2433) (4e588c2)
  • preserve multipart upload array order (#2380) (f1a2b61)
  • publish Castiron checks for behind-main pull requests (#2486) (662bb37)
  • publish Castiron checks for external-fork pull requests (#2464) (a90581e)
  • security: abort streaming examples when clients disconnect (#2426) (b32a25b)
  • security: authenticate Cloudflare tests and restrict streaming proxies (#2413) (9286fdb)
  • security: authenticate Vercel ecosystem APIs and clean up uploaded files (#2412) (d58608a)
  • security: bound SDK event streams and validate streamed item identities (#2415) (7df29a9)
  • security: bound SSE frames and NDJSON lines before buffering (#2411) (0e250a4)
  • security: close rejected Azure managed-identity response streams (#2416) (387bbc8)
  • security: harden Bedrock regions, query merges, and upload errors (#2410) (ce45d0d)
  • security: harden Realtime WebSocket origins, worker guards, and Azure credentials (#2414) (5533f73)
  • security: preserve chat structured response-format integrity (#2402) (e69df93)
  • security: prevent AssistantStream deltas leaking sensitive data (#2392) (17cf54c)
  • security: prevent streaming upload filename path disclosure (#2386) (c88a024)
  • security: prevent structured-output format downgrade (#2394) (dd945e6)
  • security: redact built-in structured JSON parse errors (#2418) (a0d68cc)
  • security: redact chat completion finalization snapshots (#2400) (fb5d8e7)
  • security: redact GCP metadata authentication error bodies (#2399) (322840c)
  • security: redact invalid Bedrock bearer credentials (#2419) (39c06d1)
  • security: redact invalid workload identity access tokens (#2425) (0d28da3)
  • security: redact malformed NDJSON stream diagnostics (#2420) (dcc705c)
  • security: redact malformed Realtime WebSocket error causes (#2408) (e7a1a44)

... (truncated)

Commits
  • 6d1d54a release: 7.6.0 (#2381)
  • cd5b2d8 fix(auth): sanitize malformed workload OAuth token responses (#2468)
  • 662bb37 fix: publish Castiron checks for behind-main pull requests (#2486)
  • 2dac2f4 fix(bedrock): honor cancellation during bearer credential resolution (#2478)
  • dafcac4 fix(audio): preserve recording outcomes during cancellation and cleanup (#2482)
  • 520d604 fix(polling): honor cancellation during polling delays (#2477)
  • 63b1c75 fix(assistants): reject run-step identity hijacking before tool callbacks (#2...
  • 05cf7ab fix(webhooks): bound signature verification work (#2475)
  • e4afdb7 fix(standard-schema): preserve validator bindings across helpers (#2483)
  • 60f5267 fix(tests): make credential-lifecycle held-inode scenarios portable to macOS ...
  • Additional commits viewable in compare view

Updates @google/genai from 2.15.0 to 2.19.0

Release notes

Sourced from @​google/genai's releases.

v2.19.0

2.19.0 (2026-08-25)

Features

  • Add AudioTranscriptionConfigMode (c0a37de)
  • add environment files support and scotty file download helper (0d6ee9d)
  • Add TYPE_JPEG2000 to VideoContent.MimeType enum (41da204)

Performance Improvements

  • Keep the Buffer in the Node tokenizer platform, ~2x faster model parse (11d804a)

v2.18.0

2.18.0 (2026-08-19)

Features

  • Add mode enum (VERBATIM, SMART) to AudioTranscriptionConfig and TranscriptionConfig. (4c5208b)
  • Add enable_data_retention to ToolParallelAiSearch, Add step_count to ReinforcementTuningHyperParameters, Add BidiGenerateContentSetup (f52c208)
  • Add IDLE state to live connection status enum and mark REQUIRES_ACTION as deprecated. (2f110f2)
  • add video resolution and extension task parameters (39b2a2d)

Bug Fixes

v2.17.1

2.17.1 (2026-08-13)

Bug Fixes

v2.17.0

2.17.0 (2026-08-12)

Features

  • Add interaction_status to LiveServerContent (4489991)
  • api: make the deferred service tier publicly available on Vertex (9dafee9)
  • Make speech_config a structured object. (9c90665)

v2.16.0

... (truncated)

Changelog

Sourced from @​google/genai's changelog.

2.19.0 (2026-08-25)

Features

  • Add AudioTranscriptionConfigMode (c0a37de)
  • add environment files support and scotty file download helper (0d6ee9d)
  • Add TYPE_JPEG2000 to VideoContent.MimeType enum (41da204)

Performance Improvements

  • Keep the Buffer in the Node tokenizer platform, ~2x faster model parse (11d804a)

2.18.0 (2026-08-19)

Features

  • Add mode enum (VERBATIM, SMART) to AudioTranscriptionConfig and TranscriptionConfig. (4c5208b)
  • Add enable_data_retention to ToolParallelAiSearch, Add step_count to ReinforcementTuningHyperParameters, Add BidiGenerateContentSetup (f52c208)
  • Add IDLE state to live connection status enum and mark REQUIRES_ACTION as deprecated. (2f110f2)
  • add video resolution and extension task parameters (39b2a2d)

Bug Fixes

2.17.1 (2026-08-13)

Bug Fixes

2.17.0 (2026-08-12)

Features

  • Add interaction_status to LiveServerContent (4489991)
  • api: make the deferred service tier publicly available on Vertex (9dafee9)
  • Make speech_config a structured object. (9c90665)

2.16.0 (2026-08-06)

Features

... (truncated)

Commits
  • ded792c chore(main): release 2.19.0 (#1876)
  • 4f37a10 build: Publish sourcemaps without sourcesContent, ~5.5 MB off the tarball
  • 11d804a perf: Keep the Buffer in the Node tokenizer platform, ~2x faster model parse
  • c0a37de feat: Add AudioTranscriptionConfigMode
  • 428cba4 chore: Part.media_processing
  • 2c0dc8f chore: internal change to resolve naming collision
  • 0d6ee9d feat: add environment files support and scotty file download helper
  • 6e9b35c No public description
  • a1dde90 chore: Move major release check to job level in block_major_releases workflow
  • 9ca6086 chore: Disable GenerateImages for Gemini API
  • Additional commits viewable in compare view

Updates koffi from 3.1.4 to 3.1.6

Commits
Install script changes

This version adds install script that runs during installation. Review the package contents before updating.


Updates @eserstack/ajan-darwin-arm64 from 4.1.57 to 4.3.1

Release notes

Sourced from @​eserstack/ajan-darwin-arm64's releases.

v4.1.60

Changelog

Features

  • f3062f1: feat(acp): migrate agent spawning to the Agent Client Protocol (@​eser)
  • fb72f36: feat(build): generate JSR manifests and fix P0 audit findings ( <>)
  • 2cd4825: feat(mux): add frontend-neutral terminal multiplexer with native PTY (@​eser)
  • 8f65ffe: feat(noskills): add decision-ledger instrumentation and read APIs (@​eser)
  • d09fa16: feat(noskills): add measurement-draft ledger projection and CI pnpm setup (@​eser)
  • 068c85b: feat(noskills): unified state layout (@​eser)
  • 20056c5: feat(noskills): update command structure and enhance documentation (@​eser)
  • c0ed308: feat(workflowfx): handle non-unix/windows targets in setupCancelKill (@​eser)
  • 2440198: feat(workflowfx): handle non-unix/windows targets in setupCancelKill (take II) (@​eser)
  • 7eae1b8: feat(workflowfx): handle non-unix/windows targets in setupCancelKill (take III) (@​eser)
  • bddc8fd: feat(workflowfx): handle non-unix/windows targets in setupCancelKill (take IV) (@​eser)
  • 9a44d09: feat: @​eser -> @​eserstack :( (@​eser)

Bug fixes

Other

Quick install (macOS/Linux)

curl -fsSL https://raw.githubusercontent.com/eser/stack/main/etc/scripts/install-noskills.sh | sh

Homebrew

brew install eserstack/tap/noskills-server
Changelog

Sourced from @​eserstack/ajan-darwin-arm64's changelog.

4.3.1 - 2026-08-09

Fixed

  • security: pin on resumed sessions, compare DataDir by identity (c06b36c)
  • security: harden path, TLS pinning, and regex guards (b4ffb79)

Changed

  • deps: bump the actions group with 3 updates (#155) (d78ce57)
  • deps: bump the npm-deps group with 2 updates (#154) (52a8645)
  • deps: bump the go-deps group with 15 updates (#153) (4a03973)

4.3.0 - 2026-08-08

Fixed

  • build: mark FFI packages external in all npm builds (1e3ddb3)
  • codebase: stage only tracked pathspecs during release (20b5c71)
  • codebase: report correct target version in dry-run release (77cdebf)

Changed

  • docs structure. (35889e5)
  • cli: make system handlers app-aware, share PATH lookup (168a99f)
  • cli: ship noskills and laroux as deno-compiled binaries (c58e6bc)

Unreleased

Added

  • codebase: validate-server-loc — generic per-directory LOC ceiling validator. Configurable via directory (required), maxLines, excludeSuffix, extension. Replaces scripts/noskills-server-loc-check.ts; now wired into precommit on pkg/ajan/noskillsserverfx.

  • codebase: validate-error-coverage — generic error-struct field-coverage validator. Configurable via file (required), errorObjects, requiredFields. Replaces scripts/noskills-error-coverage.ts; now wired into precommit on pkg/ajan/noskillsserverfx/errors.go.

  • kit: kit clone whole-repo mode — repos without recipe.json (or with an empty one) now copy the entire tree via tarball fetch instead of failing.

  • kit: --interactive/-i flag and TTY auto-detect — prompts for missing variables when stdin is a terminal, with regex retry on pattern.

  • kit: --no-post-install flag — skips post-install commands.

  • kit: GitHub subpath specifier gh:owner/repo/sub/path[#ref].

  • kit: stub providers for npm: and jsr: — parse accepted, fetch throws "not yet implemented" with a tracking URL.

  • kit: "Variables applied:" pretty-print to stderr before writing files.

  • kit: positional target dir — eser kit clone <specifier> [target-dir].

... (truncated)

Commits

Updates @eserstack/ajan-darwin-x64 from 4.1.57 to 4.3.1

Release notes

Sourced from @​eserstack/ajan-darwin-x64's releases.

v4.1.60

Changelog

Features

  • f3062f1: feat(acp): migrate agent spawning to the Agent Client Protocol (@​eser)
  • fb72f36: feat(build): generate JSR manifests and fix P0 audit findings ( <>)
  • 2cd4825: feat(mux): add frontend-neutral terminal multiplexer with native PTY (@​eser)
  • 8f65ffe: feat(noskills): add decision-ledger instrumentation and read APIs (@​eser)
  • d09fa16: feat(noskills): add measurement-draft ledger projection and CI pnpm setup (@​eser)
  • 068c85b: feat(noskills): unified state layout (@​eser)
  • 20056c5: feat(noskills): update command structure and enhance documentation (@​eser)
  • c0ed308: feat(workflowfx): handle non-unix/windows targets in setupCancelKill (@​eser)
  • 2440198: feat(workflowfx): handle non-unix/windows targets in setupCancelKill (take II) (@​eser)
  • 7eae1b8: feat(workflowfx): handle non-unix/windows targets in setupCancelKill (take III) (@​eser)
  • bddc8fd: feat(workflowfx): handle non-unix/windows targets in setupCancelKill (take IV) (@​eser)
  • 9a44d09: feat: @​eser -> @​eserstack :( (@​eser)

Bug fixes

Other

Quick install (macOS/Linux)

curl -fsSL https://raw.githubusercontent.com/eser/stack/main/etc/scripts/install-noskills.sh | sh

Homebrew

brew install eserstack/tap/noskills-server
Changelog

Sourced from @​eserstack/ajan-darwin-x64's changelog.

4.3.1 - 2026-08-09

Fixed

  • security: pin on resumed sessions, compare DataDir by identity (c06b36c)
  • security: harden path, TLS pinning, and regex guards (b4ffb79)

Changed

  • deps: bump the actions group with 3 updates (#155) (d78ce57)
  • deps: bump the npm-deps group with 2 updates (#154) (52a8645)
  • deps: bump the go-deps group with 15 updates (#153) (4a03973)

4.3.0 - 2026-08-08

Fixed

  • build: mark FFI packages external in all npm builds (1e3ddb3)
  • codebase: stage only tracked pathspecs during release (20b5c71)
  • codebase: report correct target version in dry-run release (77cdebf)

Changed

  • docs structure. (35889e5)
  • cli: make system handlers app-aware, share PATH lookup (168a99f)
  • cli: ship noskills and laroux as deno-compiled binaries (c58e6bc)

Unreleased

Added

  • codebase: validate-server-loc — generic per-directory LOC ceiling validator. Configurable via directory (required), maxLines, excludeSuffix, extension. Replaces scripts/noskills-server-loc-check.ts; now wired into precommit on pkg/ajan/noskillsserverfx.

  • codebase: validate-error-coverage — generic error-struct field-coverage validator. Configurable via file (required), errorObjects, requiredFields. Replaces scripts/noskills-error-coverage.ts; now wired into precommit on pkg/ajan/noskillsserverfx/errors.go.

  • kit: kit clone whole-repo mode — repos without recipe.json (or with an empty one) now copy the entire tree via tarball fetch instead of failing.

  • kit: --interactive/-i flag and TTY auto-detect — prompts for missing variables when stdin is a terminal, with regex retry on pattern.

  • kit: --no-post-install flag — skips post-install commands.

  • kit: GitHub subpath specifier gh:owner/repo/sub/path[#ref].

  • kit: stub providers for npm: and jsr: — parse accepted, fetch throws "not yet implemented" with a tracking URL.

  • kit: "Variables applied:" pretty-print to stderr before writing files.

  • kit: positional target dir — eser kit clone <specifier> [target-dir].

... (truncated)

Commits

Updates rolldown from 1.2.3 to 1.2.6

Release notes

Sourced from rolldown's releases.

v1.2.6

[1.2.6] - 2026-08-26

🚀 Features

  • minify: support property name mangling (#10374) by

Bumps the npm-deps group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.1.2` | `26.3.0` |
| [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.115.0` | `0.121.0` |
| [openai](https://github.com/openai/openai-node) | `7.4.0` | `7.6.0` |
| [@google/genai](https://github.com/googleapis/js-genai) | `2.15.0` | `2.19.0` |
| [koffi](https://github.com/Koromix/koffi) | `3.1.4` | `3.1.6` |
| [@eserstack/ajan-darwin-arm64](https://github.com/eser/stack/tree/HEAD/pkg/@eserstack/ajan) | `4.1.57` | `4.3.1` |
| [@eserstack/ajan-darwin-x64](https://github.com/eser/stack/tree/HEAD/pkg/@eserstack/ajan) | `4.1.57` | `4.3.1` |
| [rolldown](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.2.3` | `1.2.6` |
| [esbuild](https://github.com/evanw/esbuild) | `0.28.1` | `0.28.2` |
| [sharp](https://github.com/lovell/sharp) | `0.35.3` | `0.35.4` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.4` | `19.2.5` |



Updates `@types/node` from 26.1.2 to 26.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@anthropic-ai/sdk` from 0.115.0 to 0.121.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.115.0...sdk-v0.121.0)

Updates `openai` from 7.4.0 to 7.6.0
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/main/CHANGELOG.md)
- [Commits](openai/openai-node@v7.4.0...v7.6.0)

Updates `@google/genai` from 2.15.0 to 2.19.0
- [Release notes](https://github.com/googleapis/js-genai/releases)
- [Changelog](https://github.com/googleapis/js-genai/blob/main/CHANGELOG.md)
- [Commits](googleapis/js-genai@v2.15.0...v2.19.0)

Updates `koffi` from 3.1.4 to 3.1.6
- [Commits](https://github.com/Koromix/koffi/commits)

Updates `@eserstack/ajan-darwin-arm64` from 4.1.57 to 4.3.1
- [Release notes](https://github.com/eser/stack/releases)
- [Changelog](https://github.com/eser/stack/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eser/stack/commits/v4.3.1/pkg/@eserstack/ajan)

Updates `@eserstack/ajan-darwin-x64` from 4.1.57 to 4.3.1
- [Release notes](https://github.com/eser/stack/releases)
- [Changelog](https://github.com/eser/stack/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eser/stack/commits/v4.3.1/pkg/@eserstack/ajan)

Updates `rolldown` from 1.2.3 to 1.2.6
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.2.6/packages/rolldown)

Updates `esbuild` from 0.28.1 to 0.28.2
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](evanw/esbuild@v0.28.1...v0.28.2)

Updates `sharp` from 0.35.3 to 0.35.4
- [Release notes](https://github.com/lovell/sharp/releases)
- [Commits](lovell/sharp@v0.35.3...v0.35.4)

Updates `@types/react-dom` from 19.2.4 to 19.2.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 26.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.121.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: openai
  dependency-version: 7.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: "@google/genai"
  dependency-version: 2.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: koffi
  dependency-version: 3.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: "@eserstack/ajan-darwin-arm64"
  dependency-version: 4.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: "@eserstack/ajan-darwin-x64"
  dependency-version: 4.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: rolldown
  dependency-version: 1.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: esbuild
  dependency-version: 0.28.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: sharp
  dependency-version: 0.35.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Dependency updates label Aug 29, 2026
@dependabot
dependabot Bot requested a review from eser as a code owner August 29, 2026 23:55
@dependabot dependabot Bot added the dependencies Dependency updates label Aug 29, 2026
@github-actions github-actions Bot added pkg:bundler Changes to @eserstack/bundler pkg:cli Changes to @eserstack/cli pkg:laroux Changes to @eserstack/laroux and related packages labels Aug 29, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates pkg:bundler Changes to @eserstack/bundler pkg:cli Changes to @eserstack/cli pkg:laroux Changes to @eserstack/laroux and related packages

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants