Skip to content

chore(deps): bump the production-minor-patch group across 1 directory with 14 updates#612

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-minor-patch-4357559166
Open

chore(deps): bump the production-minor-patch group across 1 directory with 14 updates#612
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-minor-patch-4357559166

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 9, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the production-minor-patch group with 14 updates in the / directory:

Package From To
pg 8.20.0 8.22.0
@clack/prompts 1.4.0 1.7.0
posthog-node 5.34.2 5.39.4
@rollup/rollup-linux-x64-gnu 4.60.4 4.62.2
arktype 2.2.0 2.2.2
@cipherstash/protect-ffi 0.23.0 0.27.0
@stricli/core 1.2.7 1.2.9
uuid 14.0.0 14.0.1
@anthropic-ai/claude-agent-sdk 0.3.143 0.3.201
@anthropic-ai/sdk 0.106.0 0.110.0
@clerk/nextjs 7.3.5 7.5.12
next 15.5.18 15.5.20
tsx 4.22.1 4.23.0
vite 8.0.13 8.1.3

Updates pg from 8.20.0 to 8.22.0

Changelog

Sourced from pg's changelog.

pg@8.22.0

pg@8.21.0

Commits

Updates @clack/prompts from 1.4.0 to 1.7.0

Release notes

Sourced from @​clack/prompts's releases.

@​clack/prompts@​1.7.0

Minor Changes

  • #574 8f1c380 Thanks @​dreyfus92! - Add showInstructions option to select, multiselect, and groupMultiselect. Keyboard hints remain shown by default; pass showInstructions: false to hide them.

Patch Changes

@​clack/prompts@​1.6.0

Minor Changes

  • #568 f87933f Thanks @​florian-lefebvre! - Updates default formatter of note() to note dim lines anymore

    If you want the old behavior, provide a format() function:

    import { note } from '@clack/prompts';
+import { styleText } from 'node:util';
note(
'You can edit the file src/index.jsx',
'Next steps.'

{ format: (text) => styleText('dim', text) }
);

  • #567 cc6aab5 Thanks @​dreyfus92! - Add keyboard instruction footers to select, multiselect, and groupMultiselect in the active state, matching autocomplete. No option — always shown.

    • Patch Changes

    @​clack/prompts@​1.5.1

    Patch Changes

    @​clack/prompts@​1.5.0

    Minor Changes

    ... (truncated)

    Changelog

    Sourced from @​clack/prompts's changelog.

    1.7.0

    Minor Changes

    • #574 8f1c380 Thanks @​dreyfus92! - Add showInstructions option to select, multiselect, and groupMultiselect. Keyboard hints remain shown by default; pass showInstructions: false to hide them.

    Patch Changes

    1.6.0

    Minor Changes

    • #568 f87933f Thanks @​florian-lefebvre! - Updates default formatter of note() to note dim lines anymore

      If you want the old behavior, provide a format() function:

      import { note } from '@clack/prompts';
+import { styleText } from 'node:util';
note(
'You can edit the file src/index.jsx',
'Next steps.'

{ format: (text) => styleText('dim', text) }
);

  • #567 cc6aab5 Thanks @​dreyfus92! - Add keyboard instruction footers to select, multiselect, and groupMultiselect in the active state, matching autocomplete. No option — always shown.

    • Patch Changes

    1.5.1

    Patch Changes

    ... (truncated)

    Commits

    Updates posthog-node from 5.34.2 to 5.39.4

    Release notes

    Sourced from posthog-node's releases.

    posthog-node@5.39.4

    5.39.4

    Patch Changes

    posthog-node@5.39.3

    5.39.3

    Patch Changes

    • #4055 64e04ba Thanks @​marandaneto! - Retry /flags requests that receive HTTP 502 or 504 responses across SDKs that use the shared core flags client. (2026-07-02)
    • Updated dependencies [64e04ba]:
      • @​posthog/core@​1.39.4

    posthog-node@5.39.2

    5.39.2

    Patch Changes

    • #4028 a664b81 Thanks @​marandaneto! - Make Node flush() wait for pending asynchronous SDK work before draining the event queue, so events produced by helpers like captureException() are not missed. Pending work rejections no longer prevent queued events from flushing. (2026-07-01)
    • Updated dependencies [a664b81]:
      • @​posthog/core@​1.39.3

    posthog-node@5.39.1

    5.39.1

    Patch Changes

    • #4029 b36b1cc Thanks @​marandaneto! - Call before_send for identify, group identify, and alias events. (2026-06-30)

    • #4027 ab118d2 Thanks @​marandaneto! - Safely serialize event batches with circular property references instead of crashing during flush. (2026-06-30)

    • Updated dependencies [ab118d2]:

      • @​posthog/core@​1.39.2

    posthog-node@5.39.0

    5.39.0

    Minor Changes

    • #4006 0063128 Thanks @​github-actions! - Add groupIdentifyImmediate() to await the network request when identifying a group, mirroring captureImmediate/identifyImmediate/aliasImmediate. Useful in edge/serverless environments where the background queue may not flush. The Convex integration now uses it directly instead of routing $groupidentify through captureImmediate. (2026-06-30)

    ... (truncated)

    Changelog

    Sourced from posthog-node's changelog.

    5.39.4

    Patch Changes

    5.39.3

    Patch Changes

    • #4055 64e04ba Thanks @​marandaneto! - Retry /flags requests that receive HTTP 502 or 504 responses across SDKs that use the shared core flags client. (2026-07-02)
    • Updated dependencies [64e04ba]:
      • @​posthog/core@​1.39.4

    5.39.2

    Patch Changes

    • #4028 a664b81 Thanks @​marandaneto! - Make Node flush() wait for pending asynchronous SDK work before draining the event queue, so events produced by helpers like captureException() are not missed. Pending work rejections no longer prevent queued events from flushing. (2026-07-01)
    • Updated dependencies [a664b81]:
      • @​posthog/core@​1.39.3

    5.39.1

    Patch Changes

    • #4029 b36b1cc Thanks @​marandaneto! - Call before_send for identify, group identify, and alias events. (2026-06-30)

    • #4027 ab118d2 Thanks @​marandaneto! - Safely serialize event batches with circular property references instead of crashing during flush. (2026-06-30)

    • Updated dependencies [ab118d2]:

      • @​posthog/core@​1.39.2

    5.39.0

    Minor Changes

    • #4006 0063128 Thanks @​github-actions! - Add groupIdentifyImmediate() to await the network request when identifying a group, mirroring captureImmediate/identifyImmediate/aliasImmediate. Useful in edge/serverless environments where the background queue may not flush. The Convex integration now uses it directly instead of routing $groupidentify through captureImmediate. (2026-06-30)

    Patch Changes

    • Updated dependencies [0063128]:
      • @​posthog/core@​1.39.0

    ... (truncated)

    Commits
    • 0ba87cb chore: update versions and lockfile [version bump]
    • 0c11747 fix: stop duplicating distinct_id in flags person properties (#4047)
    • 4eb8b21 chore: update versions and lockfile [version bump]
    • dd90e55 test(node): make local polling tests deterministic (#4043)
    • d1e6df8 chore: update versions and lockfile [version bump]
    • a664b81 fix: make flush wait for pending async work (#4028)
    • a5181ba chore: update versions and lockfile [version bump]
    • b36b1cc fix(node): run before_send for all captured events (#4029)
    • ab118d2 fix(node): handle circular event properties during flush (#4027)
    • 0c95bce fix: satisfy SDK compliance harness 0.8.0 (#3998)
    • Additional commits viewable in compare view

    Updates @rollup/rollup-linux-x64-gnu from 4.60.4 to 4.62.2

    Release notes

    Sourced from @​rollup/rollup-linux-x64-gnu's releases.

    v4.62.2

    4.62.2

    2026-06-19

    Bug Fixes

    • Do not add spurious side-effect-free external imports to chunks when using minChunkSize (#6411)

    Pull Requests

    v4.62.1

    4.62.1

    2026-06-19

    Bug Fixes

    • Preserve multipart file extensions when deconflicting output chunks (#6408)
    • Fix an issue where getLogFilter would match additional logs (#6415)

    Pull Requests

    v4.62.0

    4.62.0

    2026-06-13

    Features

    • Ensure that shared dependencies between manual chunks and entry points receive a serparate chunk (#6374)

    Pull Requests

    ... (truncated)

    Changelog

    Sourced from @​rollup/rollup-linux-x64-gnu's changelog.

    4.62.2

    2026-06-19

    Bug Fixes

    • Do not add spurious side-effect-free external imports to chunks when using minChunkSize (#6411)

    Pull Requests

    4.62.1

    2026-06-19

    Bug Fixes

    • Preserve multipart file extensions when deconflicting output chunks (#6408)
    • Fix an issue where getLogFilter would match additional logs (#6415)

    Pull Requests

    4.62.0

    2026-06-13

    Features

    • Ensure that shared dependencies between manual chunks and entry points receive a serparate chunk (#6374)

    Pull Requests

    ... (truncated)

    Commits
    • 8faa187 4.62.2
    • a38a795 refactor(rust/parser_ast): extract property AstConverter write buffer kind lo...
    • 6cc5c31 Skip side-effect-free external imports when hoisting is disabled (#6411)
    • caacf70 4.62.1
    • d1e8297 Add missing ignore
    • 1ba1fc2 fix: insert conflict numbers before first extension in multi-extension filena...
    • 532bd0a Use import attributes for importing JSON (#6393)
    • 2cd8194 fix: advance value past wildcard prefix before suffix check in getLogFilter (...
    • dfac590 fix(deps): update minor/patch updates (#6418)
    • 1d6db3d chore(deps): update dependency eslint-plugin-unicorn to v66 (#6419)
    • Additional commits viewable in compare view

    Updates arktype from 2.2.0 to 2.2.2

    Changelog

    Sourced from arktype's changelog.

    2.2.2

    Fix precompilation of private aliases

    A private alias referenced only within its own scope is no longer skipped during JIT precompilation, so its optimized traversal is bound correctly instead of falling back to the unbound reference.

    Harden ArkErrors JSON serialization

    ArkErrors doubles as a Standard Schema issues array, so JSON.stringify no longer assumes every indexed entry is an ArkError with a toJSON method (e.g. plain issue-shaped entries from other validators). Inherited array methods (map, filter, slice, …) now return a plain Array via Symbol.species, preventing callbacks that return primitives from producing a malformed ArkErrors.

    2.2.1

    Improve regex inference for zero-min quantifiers on numeric patterns

    // was: Regex<`${number}`>
// now: Regex<"" | `${number}`>
regex("^\\d*$")

    See arkregex CHANGELOG for full notes.

    Commits
    • ab66f64 release: arktype 2.2.2 + dependents (#1633)
    • 11e2e49 fix private alias precompilation (#1632)
    • d0c43a9 refactor(repo): drop tsx, rely on native Node type stripping (#1620)
    • 93cb501 release: arkregex 0.0.6 + dependents; publish @​ark/fast-check
    • See full diff in compare view

    Updates @cipherstash/protect-ffi from 0.23.0 to 0.27.0

    Release notes

    Sourced from @​cipherstash/protect-ffi's releases.

    v0.27.0

    No release notes provided.

    v0.26.1-0

    No release notes provided.

    v0.26.0

    No release notes provided.

    v0.25.0

    ⚠️ Breaking changes

    • Removed serviceToken from EncryptOptions, DecryptOptions, and the query option types.
    • Removed the CtsToken public type export.
    • Auth environment updated for stack-auth 0.36: CS_REGION is dropped in favour of CS_WORKSPACE_CRN.

    ✨ Added

    • newClient now accepts an optional opts.strategy (an AuthStrategy, @cipherstash/auth-shaped object) on both Node and WASM. When supplied, getToken() is invoked on every ZeroKMS request. On WASM the strategy is required (no env/filesystem fallback); on Node it is optional and falls back to the AutoStrategy built from credentials / profile.

    🔧 Fixed

    • Node: capture a per-isolate Neon Channel for the JS-backed strategy, and unref it so scripts can exit cleanly after a round trip.
    • Node: wrap the getToken JS call in Context::try_catch so a strategy that throws (or otherwise misbehaves) surfaces as a clean error instead of an unhandled rejection.

    🧱 Changed

    • Bumped cipherstash-client, cts-common, stack-auth, and stack-profile to 0.36.0.
    • Expanded integration coverage: JS-backed auth contract, event-loop-exit, and newClient guard tests.

    Upgrading: remove any serviceToken options and CtsToken imports; set CS_WORKSPACE_CRN instead of CS_REGION.

    Full changelog: https://github.com/cipherstash/protectjs-ffi/blob/main/CHANGELOG.md

    v0.24.0

    No release notes provided.

    Changelog

    Sourced from @​cipherstash/protect-ffi's changelog.

    Changelog

    All notable changes to this project are documented in this file.

    The format is based on Keep a Changelog, and this project adheres to Semantic Versioning. While the project is pre-1.0, breaking changes are released as minor version bumps and called out under a Breaking heading — an addition to the standard Keep a Changelog categories (Added/Changed/Deprecated/Removed/Fixed/Security).

    Add notes for unreleased work under the [Unreleased] heading below. On release, the version npm lifecycle hook promotes that section to a dated release entry (see scripts/changelog-release.mjs), and the release workflow uses the promoted section as the GitHub release notes.

    [Unreleased]

    [0.29.0] - 2026-07-09

    Added

    • EQL v3 scalar query-term encryption (CIP-3423). On an eqlVersion: 3 client, encryptQuery / encryptQueryBulk on a scalar index now return the term-only operand for the column domain's query twin — {v: 3, i, <terms>} with no c ciphertext — bindable as col = $1::jsonb::eql_v3.query_<name> (and the ordering / @> match operators). The operand always carries ALL the column domain's terms (text_search_ore → hm + ob + bf), whichever indexType was queried: the EQL v3 operators pair each column domain only with its same-name query twin, whose domain CHECK requires the full term set. Terms derive from the same conversion as storage encryption, so bounds behaviour (e.g. bigint i64 boundary rejection) is identical. This replaces the interim full-storage-envelope workaround — query operands no longer carry a decryptable ciphertext through query strings and SQL logs.
    • EQL v3 selector queries. queryOp: 'ste_vec_selector' on a v3 client returns the bare selector hash as a string (there is no encrypted-selector envelope in v3) — bind it as the text argument of the -> / ->> operators. It is the same Selector encoding SteVec entries carry in s.
    • The vendored EQL v3 TypeScript types now include the 38 scalar query-twin payload types (TextEqQuery, IntegerOrdOreQuery, …), exported alongside a new EncryptedV3ScalarQuery union.

    Changed

    • Bumped eql-bindings to 3.0.0 (from 3.0.0-alpha.3) and cipherstash-client (with cts-common, stack-auth, stack-profile) to 0.40.0 (from 0.39.1). The EQL v3 SQL snapshot and the vendored src/eql-v3-types/** TypeScript types were regenerated from the newly locked release (mise run eql:v3:build, scripts/sync-eql-v3-types.sh).

    ... (truncated)

    Commits
    • ca379eb v0.27.0
    • a427841 v0.26.1-0
    • 471bbac Merge pull request #118 from cipherstash/fix/zigbuild-glibc-target-flag
    • 1296016 ci: pass glibc-versioned target to cargo-zigbuild as a flag
    • 57ce453 Merge pull request #104 from cipherstash/feat/eql-v3-dual-format
    • f1cd4de ci: run the Test workflow for the eql_v3 staging branch
    • 298e466 chore(deps): bump eql-bindings to 0.4.2
    • 8ae3b36 test(integration): refresh the v3 SQL snapshot past the domain renames
    • 25dbfef refactor(eql-v3): carry QueryPayload in QueryOutput::V3 (eql-bindings 0.4.1)
    • aaf7dc7 chore(types): re-vendor EQL v3 TS types from eql-bindings 0.3.0 (SQL-standard...
    • Additional commits viewable in compare view
    Maintainer changes

    This version was pushed to npm by GitHub Actions, a new releaser for @​cipherstash/protect-ffi since your current version.


    Updates @stricli/core from 1.2.7 to 1.2.9

    Release notes

    Sourced from @​stricli/core's releases.

    v1.2.9

    1.2.9 (2026-07-02)

    🩹 Fixes

    • use correct ANSI code to reset bold mode for routes (18ed140)

    ❤️ Thank You

    • Michael Molisani

    v1.2.8

    1.2.8 (2026-06-18)

    🩹 Fixes

    • handle argument escape sequence in route scanner (87461d5)

    ❤️ Thank You

    • Michael Molisani
    Changelog

    Sourced from @​stricli/core's changelog.

    1.2.9 (2026-07-02)

    🩹 Fixes

    • use correct ANSI code to reset bold mode for routes (18ed140)

    ❤️ Thank You

    • Michael Molisani

    1.2.8 (2026-06-18)

    🩹 Fixes

    • handle argument escape sequence in route scanner (87461d5)

    ❤️ Thank You

    • Michael Molisani
    Commits
    • 467e572 chore(release): 1.2.9
    • 5acbbe1 ci: upgrade actions to deploy docs via pages
    • 18ed140 fix: use correct ANSI code to reset bold mode for routes
    • 5c5688e ci: clarify reason for each permission
    • 16b9cb2 ci(publish): add write contents permission for publish
    • 4ad6de6 ci(publish): use correct syntax for passing env vars between steps
    • 663fe16 chore(release): 1.2.8
    • 25f1312 ci(create_release): set origin as upstream of release branch
    • 87461d5 fix: handle argument escape sequence in route scanner
    • ed0d85e ci: skip publish if there is no pending release
    • Additional commits viewable in compare view

    Updates uuid from 14.0.0 to 14.0.1

    Release notes

    Sourced from uuid's releases.

    v14.0.1

    14.0.1 (2026-06-20)

    Bug Fixes

    • add types condition to node export for moduleResolution bundler (#961) (27ffae5)
    Changelog

    Sourced from uuid's changelog.

    14.0.1 (2026-06-20)

    Bug Fixes

    • add types condition to node export for moduleResolution bundler (#961) (27ffae5)
    Commits
    Install script changes

    This version modifies prepare script that runs during installation. Review the package contents before updating.


    Updates @anthropic-ai/claude-agent-sdk from 0.3.143 to 0.3.201

    Release notes

    Sourced from @​anthropic-ai/claude-agent-sdk's releases.

    v0.3.201

    What's changed

    • Updated to parity with Claude Code v2.1.201

    Update

    npm install @anthropic-ai/claude-agent-sdk@0.3.201
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.201
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.201
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.201

    v0.3.200

    What's changed

    • Added 'manual' as an accepted alias for the 'default' permission mode in SDK inputs
    • Fixed onSetPermissionMode callback not firing for SDK-hosted Remote Control sessions
    • Fixed set_model control request accepting unrecognized model strings; invalid models are now rejected before latching

    Update

    npm install @anthropic-ai/claude-agent-sdk@0.3.200
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.200
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.200
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.200

    v0.3.199

    What's changed

    • Added requestId to canUseTool callback options for correlating out-of-band permission responses, and support for returning null to suppress the SDK's automatic control response
    • Added blocked field to workflow_agent progress events indicating when an agent was blocked by the auto-mode safety classifier
    • Added mode:"mask" and per-credential injectHosts to sandbox.credentials settings types for injecting masked credentials into sandboxed commands

    Update

    npm install @anthropic-ai/claude-agent-sdk@0.3.199
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.199
# or
</tr></table>

    ... (truncated)

    Changelog

    Sourced from @​anthropic-ai/claude-agent-sdk's changelog.

    0.3.201

    • Updated to parity with Claude Code v2.1.201

    0.3.200

    • Added 'manual' as an accepted alias for the 'default' permission mode in SDK inputs
    • Fixed onSetPermissionMode callback not firing for SDK-hosted Remote Control sessions
    • Fixed set_model control request accepting unrecognized model strings; invalid models are now rejected before latching

    0.3.199

    • Added requestId to canUseTool callback options for correlating out-of-band permission responses, and support for returning null to suppress the SDK's automatic control response
    • Added blocked field to workflow_agent progress events indicating when an agent was blocked by the auto-mode safety classifier
    • Added mode:"mask" and per-credential injectHosts to sandbox.credentials settings types for injecting masked credentials into sandboxed commands

    0.3.198

    • Added a runtime warning when canUseTool is configured alongside allowedTools or bypassPermissions, which shadow the callback
    • Added per-server request_timeout_ms option to mcp_set_servers control request
    • Fixed SDKUserMessage.isSynthetic not being mapped to isMeta on ingestion, which could cause synthetic messages to be treated as real user messages
    • Fixed workflow progress events silently dropping earliest agents from the list while the phase counter remained correct

    0.3.197

    • Updated to parity with Claude Code v2.1.197

    0.3.196

    • Added prompt_id field to hook input payloads for correlating hook events with OpenTelemetry prompt-level events
    • Fixed control protocol deduplication dropping tool-use IDs after 1000 resolutions, which could cause duplicate tool_result deliveries in long-running sessions

    0.3.195

    • Added Query.reinitialize() to re-send the initialize control request and redeliver pending permission/dialog prompts after a transport gap
    • Fixed commands_changed event not being emitted for synced skills when the skill list resolves before the change-detector subscribes

    0.3.194

    • Updated to parity with Claude Code v2.1.194

    0.3.193

    • Added promptSuggestions option to Browser SDK query() to opt the remote CLI into emitting follow-up suggestions
    • Fixed brief console window flashes on Windows when spawning CLI subprocesses

    0.3.192

    • Updated to parity with Claude Code v2.1.192

    ... (truncated)

    Commits
    • 6809c4c chore: Update CHANGELOG.md
    • 8d7e23f chore: Update CHANGELOG.md
    • a0c02d6 chore: Upd...

      Description has been truncated

    @dependabot @github

    dependabot Bot commented on behalf of github Jul 9, 2026

    Copy link
    Copy Markdown
    Contributor Author

    Labels

    The following labels could not be found: supply-chain. Please create it before Dependabot can add it to a pull request.

    Please fix the above issues or remove invalid values from dependabot.yml.

    @dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 9, 2026
    @dependabot dependabot Bot requested a review from a team as a code owner July 9, 2026 14:39
    @dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 9, 2026
    @changeset-bot

    changeset-bot Bot commented Jul 9, 2026 •
    edited
    Loading

    Copy link
    Copy Markdown

    ⚠️ No Changeset found

    Latest commit: 4ff7fc3

    Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

    This PR includes no changesets

    When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

    Click here to learn what changesets are, and how to add one.

    Click here if you're a maintainer who wants to add a changeset to this PR

    @dependabot
    chore(deps): bump the production-minor-patch group across 1 directory…
    4ff7fc3 
    … with 14 updates

Bumps the production-minor-patch group with 14 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.20.0` | `8.22.0` |
| [@clack/prompts](https://github.com/bombshell-dev/clack/tree/HEAD/packages/prompts) | `1.4.0` | `1.7.0` |
| [posthog-node](https://github.com/PostHog/posthog-js/tree/HEAD/packages/node) | `5.34.2` | `5.39.4` |
| [@rollup/rollup-linux-x64-gnu](https://github.com/rollup/rollup) | `4.60.4` | `4.62.2` |
| [arktype](https://github.com/arktypeio/arktype/tree/HEAD/ark/type) | `2.2.0` | `2.2.2` |
| [@cipherstash/protect-ffi](https://github.com/cipherstash/protectjs-ffi) | `0.23.0` | `0.27.0` |
| [@stricli/core](https://github.com/bloomberg/stricli) | `1.2.7` | `1.2.9` |
| [uuid](https://github.com/uuidjs/uuid) | `14.0.0` | `14.0.1` |
| [@anthropic-ai/claude-agent-sdk](https://github.com/anthropics/claude-agent-sdk-typescript) | `0.3.143` | `0.3.201` |
| [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.106.0` | `0.110.0` |
| [@clerk/nextjs](https://github.com/clerk/javascript/tree/HEAD/packages/nextjs) | `7.3.5` | `7.5.12` |
| [next](https://github.com/vercel/next.js) | `15.5.18` | `15.5.20` |
| [tsx](https://github.com/privatenumber/tsx) | `4.22.1` | `4.23.0` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.0.13` | `8.1.3` |



Updates `pg` from 8.20.0 to 8.22.0
- [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md)
- [Commits](https://github.com/brianc/node-postgres/commits/pg@8.22.0/packages/pg)

Updates `@clack/prompts` from 1.4.0 to 1.7.0
- [Release notes](https://github.com/bombshell-dev/clack/releases)
- [Changelog](https://github.com/bombshell-dev/clack/blob/main/packages/prompts/CHANGELOG.md)
- [Commits](https://github.com/bombshell-dev/clack/commits/@clack/prompts@1.7.0/packages/prompts)

Updates `posthog-node` from 5.34.2 to 5.39.4
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/packages/node/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/commits/posthog-node@5.39.4/packages/node)

Updates `@rollup/rollup-linux-x64-gnu` from 4.60.4 to 4.62.2
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.60.4...v4.62.2)

Updates `arktype` from 2.2.0 to 2.2.2
- [Release notes](https://github.com/arktypeio/arktype/releases)
- [Changelog](https://github.com/arktypeio/arktype/blob/main/ark/type/CHANGELOG.md)
- [Commits](https://github.com/arktypeio/arktype/commits/arktype@2.2.2/ark/type)

Updates `@cipherstash/protect-ffi` from 0.23.0 to 0.27.0
- [Release notes](https://github.com/cipherstash/protectjs-ffi/releases)
- [Changelog](https://github.com/cipherstash/protectjs-ffi/blob/main/CHANGELOG.md)
- [Commits](cipherstash/protectjs-ffi@v0.23.0...v0.27.0)

Updates `@stricli/core` from 1.2.7 to 1.2.9
- [Release notes](https://github.com/bloomberg/stricli/releases)
- [Changelog](https://github.com/bloomberg/stricli/blob/main/CHANGELOG.md)
- [Commits](bloomberg/stricli@v1.2.7...v1.2.9)

Updates `uuid` from 14.0.0 to 14.0.1
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](uuidjs/uuid@v14.0.0...v14.0.1)

Updates `@anthropic-ai/claude-agent-sdk` from 0.3.143 to 0.3.201
- [Release notes](https://github.com/anthropics/claude-agent-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/claude-agent-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/claude-agent-sdk-typescript@v0.3.143...v0.3.201)

Updates `@anthropic-ai/sdk` from 0.106.0 to 0.110.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.106.0...sdk-v0.110.0)

Updates `@clerk/nextjs` from 7.3.5 to 7.5.12
- [Release notes](https://github.com/clerk/javascript/releases)
- [Changelog](https://github.com/clerk/javascript/blob/main/packages/nextjs/CHANGELOG.md)
- [Commits](https://github.com/clerk/javascript/commits/@clerk/nextjs@7.5.12/packages/nextjs)

Updates `next` from 15.5.18 to 15.5.20
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v15.5.18...v15.5.20)

Updates `tsx` from 4.22.1 to 4.23.0
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.22.1...v4.23.0)

Updates `vite` from 8.0.13 to 8.1.3
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.1.3/packages/vite)

---
updated-dependencies:
- dependency-name: "@anthropic-ai/claude-agent-sdk"
  dependency-version: 0.3.198
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.109.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@cipherstash/protect-ffi"
  dependency-version: 0.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@clack/prompts"
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@clerk/nextjs"
  dependency-version: 7.5.12
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@rollup/rollup-linux-x64-gnu"
  dependency-version: 4.62.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@stricli/core"
  dependency-version: 1.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: arktype
  dependency-version: 2.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: next
  dependency-version: 15.5.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: pg
  dependency-version: 8.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: posthog-node
  dependency-version: 5.39.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: tsx
  dependency-version: 4.22.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: uuid
  dependency-version: 14.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: vite
  dependency-version: 8.1.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/production-minor-patch-4357559166 branch from 00e9320 to 4ff7fc3 Compare July 12, 2026 14:06
    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

    Reviewers

    No reviews

    Assignees

    No one assigned

    Labels

    dependencies Pull requests that update a dependency file

    Projects

    None yet

    Milestone

    No milestone

    Development

    Successfully merging this pull request may close these issues.

    0 participants