Skip to content

chore(deps): bump the minor-and-patch group across 1 directory with 35 updates - #3516

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-6f94df8f26
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-6f94df8f26

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 22, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 35 updates in the / directory:

Package From To
@anthropic-ai/sdk 0.107.0 0.127.0
@sentry/nextjs 10.62.0 10.75.0
@supabase/ssr 0.12.0 0.12.7
@supabase/supabase-js 2.108.2 2.116.0
@upstash/redis 1.38.0 1.38.4
dompurify 3.4.13 3.4.15
driver.js 1.6.0 1.8.0
groq-sdk 1.3.0 1.6.0
idb-keyval 6.2.6 6.3.0
next-intl 4.13.0 4.14.5
sonner 2.0.7 2.0.8
swagger-ui-react 5.32.6 5.33.0
tailwind-merge 3.6.0 3.7.0
@emnapi/core 1.11.1 1.11.3
@emnapi/runtime 1.11.1 1.11.3
@next/env 16.2.9 16.3.5
@playwright/test 1.61.1 1.63.0
@testing-library/dom 10.4.1 10.4.2
@testing-library/react 16.3.2 16.3.3
@typescript-eslint/eslint-plugin 8.62.1 8.70.0
@typescript-eslint/parser 8.62.1 8.70.0
autoprefixer 10.5.2 10.6.1
lint-staged 17.2.0 17.5.1
postcss 8.5.26 8.5.28
prettier 3.9.6 3.9.8
tree-sitter 0.25.0 0.25.1
ts-jest 29.4.11 29.4.12
web-tree-sitter 0.26.10 0.27.0
@esbuild/linux-x64 0.28.1 0.28.2
@img/sharp-linux-x64 0.35.2 0.35.4
@parcel/watcher-darwin-arm64 2.5.6 2.6.0
@parcel/watcher-darwin-x64 2.5.6 2.6.0
@parcel/watcher-linux-x64-glibc 2.5.6 2.6.0
@parcel/watcher-linux-x64-musl 2.5.6 2.6.0
@swc/core-linux-x64-gnu 1.15.43 1.16.2

Updates @anthropic-ai/sdk from 0.107.0 to 0.127.0

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk: v0.127.0

0.127.0 (2026-09-18)

Full Changelog: sdk-v0.126.0...sdk-v0.127.0

Features

  • api: add group with display_name to rate limits, deprecate group_type (2575d97)
  • tools: add compactBeforeNextTurn() to the tool runner (#682) (9f75ca6)

Bug Fixes

  • BetaMessageStream: stop coercing a null compaction_delta content into "null" (#655) (dbd6845)
  • client: don't retry requests whose body is a stream or iterator (eebc1b9)
  • client: join multiple anthropic-beta values with a comma and no space (#638) (e0cb1ff)
  • client: make pagination exports on the client namespace type-only (5adea1f)
  • internal: drop jest from tsconfig types (60588af)
  • middleware: echo a streamed compaction summary in the fallback continuation (#657) (2e0f004)
  • tools: keep $defs when transformJSONSchema root is a $ref (#687) (57a9f30)

Performance Improvements

  • client: skip formatting request details when debug logging is off (2b29ed2)

Chores

  • ci: publish releases from Node 24 with its bundled npm (6b3c6f5)
  • docs: add descriptions for enum values and path parameters (cb254c4)
  • docs: clarify the compaction tool_changes and tool change descriptions (5a695eb)
  • internal: build the sub-packages with TypeScript 6.0.3 (8a69ff5)
  • internal: build with TypeScript 6.0.3 and typescript-eslint 8.58.0 (01f3ee6)
  • internal: keep lib/internal out of the published exports map (763fb43)
  • internal: re-export pagination classes with a plain export list (c77bdc3)
  • internal: share a single Simplify type util (31d5e75)
  • internal: switch unit tests from jest to vitest (110542d, 788c9c6)

sdk: v0.126.0

0.126.0 (2026-09-15)

Full Changelog: sdk-v0.125.0...sdk-v0.126.0

Features

  • api: add auto mode tool permissions for Managed Agents (7829b43)
  • api: add compaction parameter and signed compaction blocks (beta) (05fd878)
  • api: add enum types for workspace data-residency geo fields (89c5920)
  • api: add thinking_mismatch_allowed entries to input_transformations (beta) (1f32871)

... (truncated)

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.127.0 (2026-09-18)

Full Changelog: sdk-v0.126.0...sdk-v0.127.0

Features

  • api: add group with display_name to rate limits, deprecate group_type (2575d97)
  • tools: add compactBeforeNextTurn() to the tool runner (#682) (9f75ca6)

Bug Fixes

  • BetaMessageStream: stop coercing a null compaction_delta content into "null" (#655) (dbd6845)
  • client: don't retry requests whose body is a stream or iterator (eebc1b9)
  • client: join multiple anthropic-beta values with a comma and no space (#638) (e0cb1ff)
  • client: make pagination exports on the client namespace type-only (5adea1f)
  • internal: drop jest from tsconfig types (60588af)
  • middleware: echo a streamed compaction summary in the fallback continuation (#657) (2e0f004)
  • tools: keep $defs when transformJSONSchema root is a $ref (#687) (57a9f30)

Performance Improvements

  • client: skip formatting request details when debug logging is off (2b29ed2)

Chores

  • ci: publish releases from Node 24 with its bundled npm (6b3c6f5)
  • docs: add descriptions for enum values and path parameters (cb254c4)
  • docs: clarify the compaction tool_changes and tool change descriptions (5a695eb)
  • internal: build the sub-packages with TypeScript 6.0.3 (8a69ff5)
  • internal: build with TypeScript 6.0.3 and typescript-eslint 8.58.0 (01f3ee6)
  • internal: keep lib/internal out of the published exports map (763fb43)
  • internal: re-export pagination classes with a plain export list (c77bdc3)
  • internal: share a single Simplify type util (31d5e75)
  • internal: switch unit tests from jest to vitest (110542d, 788c9c6)

0.126.0 (2026-09-15)

Full Changelog: sdk-v0.125.0...sdk-v0.126.0

Features

  • api: add auto mode tool permissions for Managed Agents (7829b43)
  • api: add compaction parameter and signed compaction blocks (beta) (05fd878)
  • api: add enum types for workspace data-residency geo fields (89c5920)
  • api: add thinking_mismatch_allowed entries to input_transformations (beta) (1f32871)
  • api: add url_sources to the web fetch tool (ee23dd2)
  • api: add workspace_id parameter to user profiles methods (f5b9fb7)

... (truncated)

Commits
  • 3c5d9c0 Merge pull request #1203 from anthropics/release-please--branches--main--chan...
  • 7c57af8 docs(changelog): list the jest-to-vitest switch once in 0.127.0
  • 1b93f4e chore: release main
  • 2575d97 feat(api): add group with display_name to rate limits, deprecate group_type
  • 83fcfad codegen metadata
  • 64ca3d3 codegen metadata
  • cb254c4 chore(docs): add descriptions for enum values and path parameters
  • eebc1b9 fix(client): don't retry requests whose body is a stream or iterator
  • 518eda2 codegen metadata
  • 8a69ff5 chore(internal): build the sub-packages with TypeScript 6.0.3
  • Additional commits viewable in compare view

Updates @sentry/nextjs from 10.62.0 to 10.75.0

Release notes

Sourced from @​sentry/nextjs's releases.

10.75.0

Important Changes

  • feat(v10/effect): Capture errors through the Effect v4 ErrorReporter API (#24445)

    On Effect v4, Sentry.effectLayer now registers a Sentry ErrorReporter. Failures that pass through Effect.withErrorReporting, ErrorReporter.report or the built-in HTTP and RPC reporting boundaries are captured automatically, with ErrorReporter.ignore, ErrorReporter.severity and ErrorReporter.attributes annotations respected. Nothing changes on Effect v3.

Other Changes

  • feat(v10/core): Accept a CollectBehavior shorthand for dataCollection.httpHeaders (#24339)
  • fix(v10/browser): Release the XHR virtualError once the request completed (#24307)
  • fix(v10/browser-utils): Skip nullish LCP entries in vendored web-vitals (#24349)
  • fix(v10/bundler-plugins): Stamp debug IDs onto emitted source maps when disable-upload is set (#24332)
  • fix(v10/core): Don't instrument the SDK's own envelope requests (#24276)
  • fix(v10/nextjs): Only include emitted chunk directories in Turbopack sourcemap upload (#24295)
  • fix(v10/nitro): Import from nitro/h3 instead of h3 directly (#24444)
  • fix(v10/node-core): Don't recurse in logAndExitProcess on a broken stdio pipe (#24353)
  • fix(v10/nuxt): Detect Nitro version via the app's Nuxt dependency chain (#24025)
  • fix(v10/replay): Don't rewrite already-emitted nodes when syncing mirror attributes (#23588)

Bundle size 📦

Path Size
@​sentry/browser 27.18 KB
@​sentry/browser - with treeshaking flags 25.66 KB
@​sentry/browser (incl. Tracing) 45.6 KB
@​sentry/browser (incl. Tracing + Span Streaming) 47.34 KB
@​sentry/browser (incl. Tracing, Profiling) 50.24 KB
@​sentry/browser (incl. Tracing, Replay) 83.99 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 73.84 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 88.6 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 100.94 KB
@​sentry/browser (incl. Feedback) 43.94 KB
@​sentry/browser (incl. sendFeedback) 31.87 KB
@​sentry/browser (incl. FeedbackAsync) 36.88 KB
@​sentry/browser (incl. Metrics) 28.25 KB
@​sentry/browser (incl. Logs) 28.47 KB
@​sentry/browser (incl. Metrics & Logs) 29.15 KB
@​sentry/react 28.93 KB
@​sentry/react (incl. Tracing) 47.81 KB
@​sentry/vue 32.47 KB
@​sentry/vue (incl. Tracing) 47.55 KB
@​sentry/svelte 27.21 KB
CDN Bundle 29.53 KB
CDN Bundle (incl. Tracing) 47.52 KB
CDN Bundle (incl. Logs, Metrics) 31.07 KB
CDN Bundle (incl. Tracing, Logs, Metrics) 48.81 KB
CDN Bundle (incl. Replay, Logs, Metrics) 69.49 KB
CDN Bundle (incl. Tracing, Replay) 84.22 KB

... (truncated)

Changelog

Sourced from @​sentry/nextjs's changelog.

10.75.0

Important Changes

  • feat(v10/effect): Capture errors through the Effect v4 ErrorReporter API (#24445)

    On Effect v4, Sentry.effectLayer now registers a Sentry ErrorReporter. Failures that pass through Effect.withErrorReporting, ErrorReporter.report or the built-in HTTP and RPC reporting boundaries are captured automatically, with ErrorReporter.ignore, ErrorReporter.severity and ErrorReporter.attributes annotations respected. Nothing changes on Effect v3.

Other Changes

  • feat(v10/core): Accept a CollectBehavior shorthand for dataCollection.httpHeaders (#24339)
  • fix(v10/browser): Release the XHR virtualError once the request completed (#24307)
  • fix(v10/browser-utils): Skip nullish LCP entries in vendored web-vitals (#24349)
  • fix(v10/bundler-plugins): Stamp debug IDs onto emitted source maps when disable-upload is set (#24332)
  • fix(v10/core): Don't instrument the SDK's own envelope requests (#24276)
  • fix(v10/nextjs): Only include emitted chunk directories in Turbopack sourcemap upload (#24295)
  • fix(v10/nitro): Import from nitro/h3 instead of h3 directly (#24444)
  • fix(v10/node-core): Don't recurse in logAndExitProcess on a broken stdio pipe (#24353)
  • fix(v10/nuxt): Detect Nitro version via the app's Nuxt dependency chain (#24025)
  • fix(v10/replay): Don't rewrite already-emitted nodes when syncing mirror attributes (#23588)

10.74.0

  • feat(v10): Streamline isolation scope handling & reset in isolation scopes (#24152)
  • fix(server-utils): Include Gemini reasoning tokens in Vercel AI token usage (#23433)
  • fix(v10/browser): Set user_agent.original on all spans for consistent filtering (#24226)
  • fix(v10/cloudflare): Auto-instrument classes re-exported from the worker entry (#24181)
  • fix(v10/core): Guard loadModule default parameter against ESM scope (#24154)
  • fix(v10/core): Match wrapped Facebook Mobile browser errors in DEFAULT_IGNORE_ERRORS (#23877)
  • fix(v10/core): Resolve MCP capture policy per operation (#23796)
  • fix(v10/nextjs): Fix SDK import crashing under jsdom/happy-dom (#23906)
  • fix(v10/nextjs): Keep the Pages Router runtime out of App Router client bundles (#24223)
  • fix(v10/nextjs): Register Vercel AI span processors on Next.js (#23773)
  • fix(v10/nuxt): Windows file:// for import-in-the-middle hook and isAbsolute for C:\ (#24026)
  • fix(v10/profiling-node): Bump @​sentry/node-cpu-profiler to 2.4.4 (#24238)
  • fix(v10/sveltekit): Handle SvelteKit 3 error kinds in handleErrorWithSentry (#23995)
  • fix(v10/sveltekit): Read Cloudflare execution context from platform.ctx (#23994)
  • fix(v10/sveltekit): Read SvelteKit config from the Vite plugin (#23998)
  • test(e2e): Assert Next.js Cloudflare worker bundle stays free of orchestrion bundler plugins (#23910)

Work in this release was contributed by @​halillusion and @​zkasuran. Thank you for your contributions!

10.73.0

... (truncated)

Commits
  • 9ffb58c release: 10.75.0
  • 664c906 meta(changelog): Update changelog for 10.75.0 (#24446)
  • e3e7acc fix(v10/nitro): Import from nitro/h3 instead of h3 directly (#24444)
  • 4bb51d1 feat(v10/effect): Capture errors through the Effect v4 ErrorReporter API (#24...
  • 738f17e fix(v10/core): Don't instrument the SDK's own envelope requests (#24276)
  • f63c56a fix(v10/node-core): Don't recurse in logAndExitProcess on a broken stdio pipe...
  • 0e24355 fix(v10/browser-utils): Skip nullish LCP entries in vendored web-vitals (#24349)
  • ac3ea13 fix(v10/nuxt): Detect Nitro version via the app's Nuxt dependency chain (#24025)
  • 9235d43 fix(v10/nextjs): Only include emitted chunk directories in Turbopack sourcema...
  • e2deda0 feat(v10/core): Accept CollectBehavior shorthand for `dataCollection.httpHe...
  • Additional commits viewable in compare view

Updates @supabase/ssr from 0.12.0 to 0.12.7

Release notes

Sourced from @​supabase/ssr's releases.

v0.12.7

0.12.7 (2026-09-08)

Bug Fixes

  • apply non-browser defaults when cookies only sets encode (#294) (9d6e2a5)

v0.12.7-rc.162

What's Changed

Full Changelog: supabase/ssr@v0.12.6...v0.12.7-rc.162

v0.12.6

0.12.6 (2026-09-04)

Bug Fixes

  • avoid duplicate cache headers per server client (#283) (af750e2)

v0.12.6-rc.158

What's Changed

New Contributors

Full Changelog: supabase/ssr@v0.12.5...v0.12.6-rc.158

v0.12.5

0.12.5 (2026-08-24)

Bug Fixes

  • warn when auth.storage is ignored by createBrowserClient/createServerClient (#284) (c1700f2), closes #142

v0.12.5-rc.154

What's Changed

... (truncated)

Changelog

Sourced from @​supabase/ssr's changelog.

0.12.7 (2026-09-08)

Bug Fixes

  • apply non-browser defaults when cookies only sets encode (#294) (9d6e2a5)

0.12.6 (2026-09-04)

Bug Fixes

  • avoid duplicate cache headers per server client (#283) (af750e2)

0.12.5 (2026-08-24)

Bug Fixes

  • warn when auth.storage is ignored by createBrowserClient/createServerClient (#284) (c1700f2), closes #142

0.12.4 (2026-07-28)

Bug Fixes

  • flush PKCE verifier slot removals on the server (#275) (6df6f03)

0.12.3 (2026-07-14)

Bug Fixes

  • cookies: keep domain-scoped deletion in name-keyed cookie stores (#258) (d3a8a98), closes #256

0.12.2 (2026-07-14)

Bug Fixes

  • align parseCookieHeader return type with getAll cookie method (#239) (e8fe1d5), closes #115

0.12.1 (2026-07-13)

Bug Fixes

  • cookies: deduplicate server cookie writes (#246) (035eabe)
Commits
  • 9b28f49 chore(main): release 0.12.7 (#295)
  • 9d6e2a5 fix: apply non-browser defaults when cookies only sets encode (#294)
  • 4ed9f65 chore: add workflow for autoclosing stale issues (#292)
  • 71c33a7 chore(main): release 0.12.6 (#291)
  • c7c7e68 docs: fix typos in tsdoc and design doc (#288)
  • af750e2 fix: avoid duplicate cache headers per server client (#283)
  • 905c7c3 build(deps): bump actions/deploy-pages from 5.0.0 to 5.0.1 (#290)
  • 9e2564d chore: update @​supabase/supabase-js to v2.114.0 (#289)
  • c5310fd chore(main): release 0.12.5 (#286)
  • c1700f2 fix: warn when auth.storage is ignored by createBrowserClient/createServerCli...
  • Additional commits viewable in compare view

Updates @supabase/supabase-js from 2.108.2 to 2.116.0

Release notes

Sourced from @​supabase/supabase-js's releases.

v2.116.0

2.116.0 (2026-09-07)

🚀 Features

  • auth: add MFA recovery codes API (#2676)
  • storage: add bucket lifecycle configuration (#2659)
  • storage: topk 10k support (#2667)
  • storage: add versionId support to create URL methods (#2678)

🩹 Fixes

  • auth: silence commit-guard-discarded refresh in initial session (#2668)
  • storage: drop legacy prefix from lifecycles (#2674)
  • supabase: warn when schema is passed outside db options (#2663)

❤️ Thank You

  • fadymak
  • Ferhat Elmas
  • Katerina Skroumpelou @​mandarini
  • Tyler Hillery

v2.116.0-canary.3

2.116.0-canary.3 (2026-09-07)

🚀 Features

  • auth: add MFA recovery codes API (#2676)
  • storage: add versionId support to create URL methods (#2678)

❤️ Thank You

  • fadymak
  • Katerina Skroumpelou
  • Tyler Hillery

v2.116.0-canary.2

2.116.0-canary.2 (2026-09-07)

🚀 Features

  • storage: topk 10k support (#2667)

🩹 Fixes

  • storage: drop legacy prefix from lifecycles (#2674)

❤️ Thank You

... (truncated)

Changelog

Sourced from @​supabase/supabase-js's changelog.

2.116.0 (2026-09-07)

🚀 Features

  • auth: add MFA recovery codes API (#2676)

🩹 Fixes

  • supabase: warn when schema is passed outside db options (#2663)

❤️ Thank You

2.115.0 (2026-09-03)

🚀 Features

  • postgrest: add getOpenApiSpec() (#2651)

❤️ Thank You

2.114.0 (2026-09-02)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.113.0 (2026-09-02)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.112.4 (2026-08-24)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.112.3 (2026-08-11)

🩹 Fixes

  • supabase: improve trace propagation sampling and diagnostics (#2604)
  • supabase: add trace context headers to canonical CORS allow-list (#2603)

❤️ Thank You

2.112.2 (2026-08-06)

... (truncated)

Commits
  • 5aedaab feat(auth): add MFA recovery codes API (#2676)
  • e4f675a fix(supabase): warn when schema is passed outside db options (#2663)
  • dbe7679 chore(release): version 2.115.0 changelogs (#2664)
  • 3eb6193 docs(supabase): clarify db.schema needs the second generic (#2662)
  • 92fb8ba feat(postgrest): add getOpenApiSpec() (#2651)
  • aef432b chore(release): version 2.114.0 changelogs (#2653)
  • 67b07b0 chore(release): version 2.113.0 changelogs (#2650)
  • 062ae5e chore(release): version 2.112.4 changelogs (#2628)
  • c7397c1 chore(supabase): bump supabase cli to 2.113.0 (#2606)
  • bbc167c chore(release): version 2.112.3 changelogs (#2608)
  • Additional commits viewable in compare view

Updates @upstash/redis from 1.38.0 to 1.38.4

Release notes

Sourced from @​upstash/redis's releases.

@​upstash/redis@​1.38.4

Patch Changes

  • 7ac8182: Fix read-your-writes sending a stale upstash-sync-token

    A read issued straight after a write travelled with the token from before that write, so the server was under no obligation to serve the write and readYourWrites silently did not hold.

    HttpClient.request() snapshotted the outgoing headers with mergeHeaders(this.headers, ...) and only afterwards wrote the freshest token into this.headers, so the token learned from response N first shipped with request N+2. The assignment now happens before the merge.

    This regressed in 1.34.5. In 1.34.0–1.34.4 the request options held headers: this.headers by reference, so the late write was still picked up before fetch; 1.34.5 introduced per-request header merging, which turned that reference into a copy without moving the assignment.

@​upstash/redis@​1.38.3

Patch Changes

  • f020866: Send an Upstash-Telemetry-Retry header with the retry count on retried requests so retry rates are visible in server-side telemetry
  • 777dc30: Trim telemetry header values before deduplicating so whitespace around existing values does not defeat the dedup check

@​upstash/redis@​1.38.3-canary-20260807072941-777dc30585ae61e5826bb95f5a957e6dea277900

What's Changed

Full Changelog: https://github.com/upstash/redis-js/compare/@​upstash/redis@1.38.2...@​upstash/redis@1.38.3-canary-20260807072941-777dc30585ae61e5826bb95f5a957e6dea277900

@​upstash/redis@​1.38.2

Patch Changes

  • c0f5ad7: Deduplicate telemetry header values so repeated mergeTelemetry calls no longer append the same sdk, platform or runtime tag multiple times

@​upstash/redis@​1.38.1

Patch Changes

  • bd7a19f: Add a quick tip about creating a database via https://upstash.com/start-redis to the warnings shown when the Redis url or token is missing. On Cloudflare, the warning shown when both the url and the token are missing now names both wrangler secret put commands instead of only one.
Commits
  • 73fbe1a chore: version packages (#1448)
  • 7ac8182 DX-2995: fix read-your-writes sending a stale upstash-sync-token (#1447)
  • 1bec566 ci: poll npm for the ci version instead of a fixed sleep (#1444)
  • 74da1df chore: version packages (#1443)
  • f020866 DX-2960: send Upstash-Telemetry-Retry header with the attempt number (DX-2960...
  • 777dc30 fix: trim telemetry values before dedup and cover distinct-version case (#1442)
  • fc3089b chore: version packages (#1441)
  • c0f5ad7 fix: deduplicate telemetry header values in mergeTelemetry (#1440)
  • e45fb78 chore: version packages (#1439)
  • bd7a19f DX-2866: add start-redis tip to missing url/token warnings (#1438)
  • Additional commits viewable in compare view

Updates dompurify from 3.4.13 to 3.4.15

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.15

  • Added better clobbering hardening when XML content is involved, thanks @​gnyselcuk
  • Added several smaller hardening and edge-case improvements, thanks @​leechristensen
  • Bumped several dependencies where possible

DOMPurify 3.4.14

  • Fixed an issue with possible bypasses when risky tags are allow-listed, thanks @​AlirezaRouhbakhsh
  • Fixed a couple of edge cases with mixed document contexts, thanks @​fishjojo1
  • Added the SVG pointer-events and vector-effect presentation attributes to the allow-list, thanks @​Jaybhade
  • Conducted another refactoring run, removed dead branches and duplicated logic, flattened attribute validation
  • Updated the documentation in several spots, README, wiki, etc., thanks @​Akokonunes
  • Updated several development dependencies and CI workflow actions
Commits

Updates driver.js from 1.6.0 to 1.8.0

Release notes

Sourced from driver.js's releases.

1.8.0

Added

  • Hints: pulsing beacons that open a popover on click; overlay optional, the page stays interactive. driver.js/hints, ~5KB gzip. Guide. (#363)
  • advanceOnClick (driver and step level) to advance the tour by clicking the highlighted element itself. (#606)
  • waitForElement (driver and step level) to wait up to N ms for a step's element before treating it as missing. (#606)
  • sideEffects field in package.json for better tree-shaking.

Changed

  • Popover internals shared between tours and hints; tour behaviour verified unchanged against 1.7.0.
  • Build migrated from vite to tsdown; artifact names, exports map and CDN globals unchanged, sizes within ±2%.

Fixed

  • skipMissingElement: the last reachable step now shows Done and runs onDoneClick; step queries like isLastStep() account for skips. (#616)

1.7.0

Added

  • skipMissingElement option to skip a step whose target element is missing (#489, #395)
  • index on the options passed to every hook (#490)
  • --driver-popover-font-family CSS variable to set the popover font (#607)

Changed

  • The popover title and description now render in the default font stack. Set --driver-popover-font-family to use your own.

Fixed

  • Icon fonts placed inside a step description are no longer overridden (#510, #512)
  • Each driver() call keeps its own config, steps and state, (#571)
  • Popover no longer jumps when its content has images that load after render.
Commits
  • ccc94cb 1.8.0
  • b93a4fc Add advanceOnClick and waitForElement
  • ab56c56 Fix missing step and button texts #616
  • 3821035 Increase beacon indicator size
  • 8678291 Refactor tests
  • e2aa992 Reorganize internals and unify step popover
  • b4d221f Add onButtonClick to take over the hint button
  • 09484c7 Clean up the hints module
  • 95df19e Give the hint popover and its arrow one seamless shadow
  • 24763f9 Anchor overlay-mode hints to the element and enlarge the hint arrow
  • Additional commits viewable in compare view

Updates groq-sdk from 1.3.0 to 1.6.0

Release notes

Sourced from groq-sdk's releases.

v1.6.0

1.6.0 (2026-08-25)

Full Changelog: v1.5.0...v1.6.0

Features

  • chat: add Qwen3.8 reasoning guidance (c2b0264)

Chores

  • GitHub Terraform: Create/Update .github/workflows/code-freeze-bypass.yaml [skip ci] (99fc8ef)
  • GitHub Terraform: Create/Update .github/workflows/stale.yaml [skip ci] (8d224a0)
  • GitHub Terraform: Create/Update .github/workflows/stale.yaml [skip ci] (2c5b7aa)
  • internal: allow the mock server port to be set with STAINLESS_MOCK_PORT (90cec2d)

Styles

  • chat: format co...

    Description has been truncated

…5 updates

Bumps the minor-and-patch group with 35 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.107.0` | `0.127.0` |
| [@sentry/nextjs](https://github.com/getsentry/sentry-javascript) | `10.62.0` | `10.75.0` |
| [@supabase/ssr](https://github.com/supabase/ssr) | `0.12.0` | `0.12.7` |
| [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js) | `2.108.2` | `2.116.0` |
| [@upstash/redis](https://github.com/upstash/redis-js) | `1.38.0` | `1.38.4` |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.13` | `3.4.15` |
| [driver.js](https://github.com/nilbuild/driver.js/tree/HEAD/packages/driver) | `1.6.0` | `1.8.0` |
| [groq-sdk](https://github.com/groq/groq-typescript) | `1.3.0` | `1.6.0` |
| [idb-keyval](https://github.com/jakearchibald/idb-keyval) | `6.2.6` | `6.3.0` |
| [next-intl](https://github.com/amannn/next-intl) | `4.13.0` | `4.14.5` |
| [sonner](https://github.com/emilkowalski/sonner) | `2.0.7` | `2.0.8` |
| [swagger-ui-react](https://github.com/swagger-api/swagger-ui) | `5.32.6` | `5.33.0` |
| [tailwind-merge](https://github.com/dcastil/tailwind-merge/tree/HEAD/packages/tailwind-merge) | `3.6.0` | `3.7.0` |
| [@emnapi/core](https://github.com/toyobayashi/emnapi) | `1.11.1` | `1.11.3` |
| [@emnapi/runtime](https://github.com/toyobayashi/emnapi) | `1.11.1` | `1.11.3` |
| [@next/env](https://github.com/vercel/next.js/tree/HEAD/packages/next-env) | `16.2.9` | `16.3.5` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.61.1` | `1.63.0` |
| [@testing-library/dom](https://github.com/testing-library/dom-testing-library) | `10.4.1` | `10.4.2` |
| [@testing-library/react](https://github.com/testing-library/react-testing-library) | `16.3.2` | `16.3.3` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.62.1` | `8.70.0` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.62.1` | `8.70.0` |
| [autoprefixer](https://github.com/postcss/autoprefixer) | `10.5.2` | `10.6.1` |
| [lint-staged](https://github.com/lint-staged/lint-staged) | `17.2.0` | `17.5.1` |
| [postcss](https://github.com/postcss/postcss) | `8.5.26` | `8.5.28` |
| [prettier](https://github.com/prettier/prettier) | `3.9.6` | `3.9.8` |
| [tree-sitter](https://github.com/tree-sitter/node-tree-sitter) | `0.25.0` | `0.25.1` |
| [ts-jest](https://github.com/kulshekhar/ts-jest) | `29.4.11` | `29.4.12` |
| [web-tree-sitter](https://github.com/tree-sitter/tree-sitter/tree/HEAD/lib/binding_web) | `0.26.10` | `0.27.0` |
| [@esbuild/linux-x64](https://github.com/evanw/esbuild) | `0.28.1` | `0.28.2` |
| [@img/sharp-linux-x64](https://github.com/lovell/sharp/tree/HEAD/npm/linux-x64) | `0.35.2` | `0.35.4` |
| [@parcel/watcher-darwin-arm64](https://github.com/parcel-bundler/watcher) | `2.5.6` | `2.6.0` |
| [@parcel/watcher-darwin-x64](https://github.com/parcel-bundler/watcher) | `2.5.6` | `2.6.0` |
| [@parcel/watcher-linux-x64-glibc](https://github.com/parcel-bundler/watcher) | `2.5.6` | `2.6.0` |
| [@parcel/watcher-linux-x64-musl](https://github.com/parcel-bundler/watcher) | `2.5.6` | `2.6.0` |
| [@swc/core-linux-x64-gnu](https://github.com/swc-project/swc) | `1.15.43` | `1.16.2` |



Updates `@anthropic-ai/sdk` from 0.107.0 to 0.127.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.107.0...sdk-v0.127.0)

Updates `@sentry/nextjs` from 10.62.0 to 10.75.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.75.0/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.62.0...10.75.0)

Updates `@supabase/ssr` from 0.12.0 to 0.12.7
- [Release notes](https://github.com/supabase/ssr/releases)
- [Changelog](https://github.com/supabase/ssr/blob/main/CHANGELOG.md)
- [Commits](supabase/ssr@v0.12.0...v0.12.7)

Updates `@supabase/supabase-js` from 2.108.2 to 2.116.0
- [Release notes](https://github.com/supabase/supabase-js/releases)
- [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md)
- [Commits](https://github.com/supabase/supabase-js/commits/v2.116.0/packages/core/supabase-js)

Updates `@upstash/redis` from 1.38.0 to 1.38.4
- [Release notes](https://github.com/upstash/redis-js/releases)
- [Commits](https://github.com/upstash/redis-js/compare/@upstash/redis@1.38.0...@upstash/redis@1.38.4)

Updates `dompurify` from 3.4.13 to 3.4.15
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.13...3.4.15)

Updates `driver.js` from 1.6.0 to 1.8.0
- [Release notes](https://github.com/nilbuild/driver.js/releases)
- [Commits](https://github.com/nilbuild/driver.js/commits/1.8.0/packages/driver)

Updates `groq-sdk` from 1.3.0 to 1.6.0
- [Release notes](https://github.com/groq/groq-typescript/releases)
- [Changelog](https://github.com/groq/groq-typescript/blob/main/CHANGELOG.md)
- [Commits](groq/groq-typescript@v1.3.0...v1.6.0)

Updates `idb-keyval` from 6.2.6 to 6.3.0
- [Changelog](https://github.com/jakearchibald/idb-keyval/blob/main/CHANGELOG.md)
- [Commits](jakearchibald/idb-keyval@v6.2.6...v6.3.0)

Updates `next-intl` from 4.13.0 to 4.14.5
- [Release notes](https://github.com/amannn/next-intl/releases)
- [Changelog](https://github.com/amannn/next-intl/blob/main/CHANGELOG.md)
- [Commits](amannn/next-intl@v4.13.0...v4.14.5)

Updates `sonner` from 2.0.7 to 2.0.8
- [Release notes](https://github.com/emilkowalski/sonner/releases)
- [Commits](emilkowalski/sonner@v2.0.7...v2.0.8)

Updates `swagger-ui-react` from 5.32.6 to 5.33.0
- [Release notes](https://github.com/swagger-api/swagger-ui/releases)
- [Commits](swagger-api/swagger-ui@v5.32.6...v5.33.0)

Updates `tailwind-merge` from 3.6.0 to 3.7.0
- [Release notes](https://github.com/dcastil/tailwind-merge/releases)
- [Commits](https://github.com/dcastil/tailwind-merge/commits/tailwind-merge@3.7.0/packages/tailwind-merge)

Updates `@emnapi/core` from 1.11.1 to 1.11.3
- [Release notes](https://github.com/toyobayashi/emnapi/releases)
- [Commits](toyobayashi/emnapi@v1.11.1...v1.11.3)

Updates `@emnapi/runtime` from 1.11.1 to 1.11.3
- [Release notes](https://github.com/toyobayashi/emnapi/releases)
- [Commits](toyobayashi/emnapi@v1.11.1...v1.11.3)

Updates `@next/env` from 16.2.9 to 16.3.5
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](https://github.com/vercel/next.js/commits/v16.3.5/packages/next-env)

Updates `@playwright/test` from 1.61.1 to 1.63.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.61.1...v1.63.0)

Updates `@testing-library/dom` from 10.4.1 to 10.4.2
- [Release notes](https://github.com/testing-library/dom-testing-library/releases)
- [Changelog](https://github.com/testing-library/dom-testing-library/blob/main/CHANGELOG.md)
- [Commits](testing-library/dom-testing-library@v10.4.1...v10.4.2)

Updates `@testing-library/react` from 16.3.2 to 16.3.3
- [Release notes](https://github.com/testing-library/react-testing-library/releases)
- [Changelog](https://github.com/testing-library/react-testing-library/blob/main/CHANGELOG.md)
- [Commits](testing-library/react-testing-library@v16.3.2...v16.3.3)

Updates `@typescript-eslint/eslint-plugin` from 8.62.1 to 8.70.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.70.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.62.1 to 8.70.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.70.0/packages/parser)

Updates `autoprefixer` from 10.5.2 to 10.6.1
- [Release notes](https://github.com/postcss/autoprefixer/releases)
- [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md)
- [Commits](postcss/autoprefixer@10.5.2...10.6.1)

Updates `lint-staged` from 17.2.0 to 17.5.1
- [Release notes](https://github.com/lint-staged/lint-staged/releases)
- [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md)
- [Commits](lint-staged/lint-staged@v17.2.0...v17.5.1)

Updates `postcss` from 8.5.26 to 8.5.28
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.26...8.5.28)

Updates `prettier` from 3.9.6 to 3.9.8
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.6...3.9.8)

Updates `tree-sitter` from 0.25.0 to 0.25.1
- [Release notes](https://github.com/tree-sitter/node-tree-sitter/releases)
- [Commits](tree-sitter/node-tree-sitter@v0.25.0...v0.25.1)

Updates `ts-jest` from 29.4.11 to 29.4.12
- [Release notes](https://github.com/kulshekhar/ts-jest/releases)
- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md)
- [Commits](kulshekhar/ts-jest@v29.4.11...v29.4.12)

Updates `web-tree-sitter` from 0.26.10 to 0.27.0
- [Release notes](https://github.com/tree-sitter/tree-sitter/releases)
- [Commits](https://github.com/tree-sitter/tree-sitter/commits/v0.27.0/lib/binding_web)

Updates `@esbuild/linux-x64` from 0.28.1 to 0.28.2
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](evanw/esbuild@v0.28.1...v0.28.2)

Updates `@img/sharp-linux-x64` from 0.35.2 to 0.35.4
- [Release notes](https://github.com/lovell/sharp/releases)
- [Commits](https://github.com/lovell/sharp/commits/v0.35.4/npm/linux-x64)

Updates `@parcel/watcher-darwin-arm64` from 2.5.6 to 2.6.0
- [Release notes](https://github.com/parcel-bundler/watcher/releases)
- [Commits](parcel-bundler/watcher@v2.5.6...v2.6.0)

Updates `@parcel/watcher-darwin-x64` from 2.5.6 to 2.6.0
- [Release notes](https://github.com/parcel-bundler/watcher/releases)
- [Commits](parcel-bundler/watcher@v2.5.6...v2.6.0)

Updates `@parcel/watcher-linux-x64-glibc` from 2.5.6 to 2.6.0
- [Release notes](https://github.com/parcel-bundler/watcher/releases)
- [Commits](parcel-bundler/watcher@v2.5.6...v2.6.0)

Updates `@parcel/watcher-linux-x64-musl` from 2.5.6 to 2.6.0
- [Release notes](https://github.com/parcel-bundler/watcher/releases)
- [Commits](parcel-bundler/watcher@v2.5.6...v2.6.0)

Updates `@swc/core-linux-x64-gnu` from 1.15.43 to 1.16.2
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](swc-project/swc@v1.15.43...v1.16.2)

---
updated-dependencies:
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.127.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@sentry/nextjs"
  dependency-version: 10.75.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@supabase/ssr"
  dependency-version: 0.12.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@supabase/supabase-js"
  dependency-version: 2.116.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@upstash/redis"
  dependency-version: 1.38.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: dompurify
  dependency-version: 3.4.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: driver.js
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: groq-sdk
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: idb-keyval
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: next-intl
  dependency-version: 4.14.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: sonner
  dependency-version: 2.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: swagger-ui-react
  dependency-version: 5.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: tailwind-merge
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@emnapi/core"
  dependency-version: 1.11.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@emnapi/runtime"
  dependency-version: 1.11.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@next/env"
  dependency-version: 16.3.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@playwright/test"
  dependency-version: 1.63.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@testing-library/dom"
  dependency-version: 10.4.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@testing-library/react"
  dependency-version: 16.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.70.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.70.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: autoprefixer
  dependency-version: 10.6.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: lint-staged
  dependency-version: 17.5.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: postcss
  dependency-version: 8.5.28
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: prettier
  dependency-version: 3.9.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: tree-sitter
  dependency-version: 0.25.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: ts-jest
  dependency-version: 29.4.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: web-tree-sitter
  dependency-version: 0.27.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@esbuild/linux-x64"
  dependency-version: 0.28.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@img/sharp-linux-x64"
  dependency-version: 0.35.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@parcel/watcher-darwin-arm64"
  dependency-version: 2.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@parcel/watcher-darwin-x64"
  dependency-version: 2.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@parcel/watcher-linux-x64-glibc"
  dependency-version: 2.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@parcel/watcher-linux-x64-musl"
  dependency-version: 2.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@swc/core-linux-x64-gnu"
  dependency-version: 1.16.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the level:beginner GSSoC: Beginner difficulty (20 pts) label Sep 22, 2026
@dependabot dependabot Bot added type:devops GSSoC type bonus: devops (+15 pts) level:beginner GSSoC: Beginner difficulty (20 pts) labels Sep 22, 2026
@deepsource-io

deepsource-io Bot commented Sep 22, 2026

Copy link
Copy Markdown

DeepSource Code Review

We reviewed changes in a20e51d...621a09e on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade   Security  

Reliability  

Complexity  

Hygiene  

Code Review Summary

Analyzer Status Updated (UTC) Details
Secrets Sep 22, 2026 12:12a.m. Review ↗

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.

@sonarqubecloud

Copy link
Copy Markdown

@dependabot @github

dependabot Bot commented on behalf of github Sep 29, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 29, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/minor-and-patch-6f94df8f26 branch September 29, 2026 00:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

level:beginner GSSoC: Beginner difficulty (20 pts) type:devops GSSoC type bonus: devops (+15 pts)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants