build(deps): bump the prod-minor-patch group with 6 updates by dependabot[bot] · Pull Request #102 · evalops/kestrel

dependabot · 2026-05-20T00:14:08Z

Bumps the prod-minor-patch group with 6 updates:

Package	From	To
@ax-llm/ax	`21.0.0`	`21.0.9`
@tanstack/react-router	`1.169.2`	`1.170.4`
date-fns	`4.1.0`	`4.2.1`
framer-motion	`12.38.0`	`12.39.0`
lucide-react	`1.14.0`	`1.16.0`
shiki	`4.0.2`	`4.1.0`

Updates @ax-llm/ax from 21.0.0 to 21.0.9

Release notes

Sourced from @ax-llm/ax's releases.

Release 21.0.9

Update structured output handling and Gemini models 8ae13ba2

Release 21.0.8

chore: release v21.0.7 c76f9caa

Update agent discovery and usage callbacks 20e7512e

Improve AxAgent context reliability evals (#519) d6417ea9

Release 21.0.7

No release notes provided.

Release 21.0.6

fix: package fixes e7e260b3

feat: improve ax agent context management 7b974ade

Release 21.0.5

feat(ai): add new models, xhigh reasoning effort, and Anthropic structured output fix ec008b77

fix(ai): record streaming token usage as deltas, not cumulative (#516) 4f7f4178

fix(anthropic): emit cache_control on content blocks, not envelopes (#517) c12a3a83

Release 21.0.4

Keep distiller prompt tool-neutral 7e94bb9b

Clarify agent stage capability boundaries 82d742d6

Release 21.0.3

Add date ranges and usage normalization 1d5e3e5c

Release 21.0.2

Add audio chat example test fixes a4aaf3c2

Add missing audio provider modules eba75e10

fix(ai): expose includeRequestBodyInErrors on AxAIServiceOptions (#514) a22531c4

Release 21.0.1

Fix RLM example type checks 922f11c3

Fix AI catalog baseline compatibility 93ca012e

Add AI model catalog API 9b3b720e

docs: overhaul README and fix stale skill docs for v21 62fed5b6

Changelog

Sourced from @ax-llm/ax's changelog.

21.0.9 (2026-05-19)

21.0.8 (2026-05-17)

21.0.8 (2026-05-17)

21.0.7 (2026-05-17)

21.0.6 (2026-05-16)

Features

improve ax agent context management (7b974ad)

Bug Fixes

package fixes (e7e260b)

21.0.5 (2026-05-15)

Features

ai: add new models, xhigh reasoning effort, and Anthropic structured output fix (ec008b7)

Bug Fixes

ai: record streaming token usage as deltas, not cumulative (#516) (4f7f417)

anthropic: emit cache_control on content blocks, not envelopes (#517) (c12a3a8)

21.0.5 (2026-05-15)

Features

ai: add new models, xhigh reasoning effort, and Anthropic structured output fix ec008b7

Bug Fixes

ai: record streaming token usage as deltas, not cumulative (#516) 4f7f417

anthropic: emit cache_control on content blocks, not envelopes (#517) c12a3a8

21.0.4 (2026-05-14)

21.0.4 (2026-05-14)

21.0.3 (2026-05-13)

21.0.3 (2026-05-13)

21.0.2 (2026-05-12)

Bug Fixes

ai: expose includeRequestBodyInErrors on AxAIServiceOptions (#514) a22531c

... (truncated)

Commits

1834fbb chore: release v21.0.9
8ae13ba Update structured output handling and Gemini models
77dfa64 chore: release v21.0.8
c76f9ca chore: release v21.0.7
20e7512 Update agent discovery and usage callbacks
d6417ea Improve AxAgent context reliability evals (#519)
568002c chore: release v21.0.6
e7e260b fix: package fixes
7b974ad feat: improve ax agent context management
cd434c3 chore: release v21.0.5
Additional commits viewable in compare view

Updates @tanstack/react-router from 1.169.2 to 1.170.4

Release notes

Sourced from @tanstack/react-router's releases.

@tanstack/react-router@1.170.4

Patch Changes

Updated dependencies [b60eb36]:

@tanstack/router-core@1.171.2

@tanstack/react-router@1.170.3

Patch Changes

Updated dependencies [d9cf933]:

@tanstack/router-core@1.171.1

@tanstack/react-router@1.170.2

Patch Changes

Updated dependencies [d533f87]:

@tanstack/router-core@1.171.0

Changelog

Sourced from @tanstack/react-router's changelog.

1.170.4

Patch Changes

Updated dependencies [b60eb36]:

@tanstack/router-core@1.171.2

1.170.3

Patch Changes

Updated dependencies [d9cf933]:

@tanstack/router-core@1.171.1

1.170.2

Patch Changes

Updated dependencies [d533f87]:

@tanstack/router-core@1.171.0

1.170.1

Patch Changes

Updated dependencies [2387a2e]:

@tanstack/router-core@1.170.1

1.170.0

Minor Changes

Clean minor bump, fresh start (#7395)

Patch Changes

Updated dependencies [b1c061a, 201e150]:

@tanstack/router-core@1.170.0

@tanstack/history@1.162.0

Commits

ee8a675 ci: Version Packages (#7423)
d1dc4ae ci: Version Packages (#7417)
4e42422 ci: Version Packages (#7413)
13432ad ci: Version Packages (#7407)
ae64839 ci: Version Packages (#7405)
See full diff in compare view

Updates date-fns from 4.1.0 to 4.2.1

Release notes

Sourced from date-fns's releases.

v4.2.1

Fixed

Fixed type definitions missing in v4.2.0 due to TypeScript misconfiguration.

v4.2.0

This is a minor release in all senses, it only includes documentation updates (first of many) that points to the new You Don't Need date-fns* page.

* Not really

Changed

Added Temporal API references to the JSDoc annotations of add, addBusinessDays, and addDays.

Changelog

Sourced from date-fns's changelog.

v4.2.1 - 2026-05-19

Fixed

Fixed type definitions missing in v4.2.0 due to TypeScript misconfiguration.

v4.2.0 - 2026-05-18

This is a minor release in all senses, it only includes documentation updates (first of many) that points to the new You Don't Need date-fns* page.

* Not really

Changed

Added Temporal API references to the JSDoc annotations of add, addBusinessDays, and addDays.

Commits

87635a8 Fix missing type definitions, promote to v4.2.1 (closed #4190)
3d4ca4b Update browserslist
562c485 Promote to v4.2.0
3709c02 Make steps into the Temporal-first future
07592b9 Upgrade Node.js types, upgrade TypeScript
09ece22 Upgrade Vitest
c37c22e Set up Oxfmt as the default formatter
d40bb80 Upgrade mise setup
dd66398 Fix tz tests workflow
ef962f8 Adjust smoke tests
Additional commits viewable in compare view

Updates framer-motion from 12.38.0 to 12.39.0

Changelog

Sourced from framer-motion's changelog.

[12.39.0] 2026-05-18

Added

Support for repeatType and repeatDelay in animation sequences.

Fixed

Variants: Re-run keyframe animations when switching between variant labels even when they share identical keyframe arrays.

Drag: Preserve in-flight motion value animations across React 19 reorder unmount/remount so dragSnapToOrigin no longer leaves the drag transform stranded after a layout swap.

LazyMotion: Share React contexts between the framer-motion and framer-motion/m (and therefore motion/react and motion/react-m) CJS bundles so that <m.div> from the /m subpath picks up features loaded by <LazyMotion> from the main entry point.

useScroll: Support hydrating target and container refs from anywhere in the tree.

Drag: Gesture no longer starts from incorrect start point when rendered inside <AnimatePresence initial={false} />.

Drag: dragConstraints, when set as viewport-relative ref, no longer break on scroll.§

Updated visualElement hydration order.

useAnimate: Now respects skipAnimations.

AnimatePresence: Fix object-form initial values not applied on re-entry after exit completes.

scroll: Fixed callback progress when tracking an element.

useScroll: Fix hardware acceleration when tracking an element.

Commits

b607391 v12.39.0
cd53178 Updating changelog
bd07642 Merge pull request #3716 from motiondivision/worktree-fix-issue-3315
3f053b6 Merge branch 'main' into worktree-fix-issue-3315
f434c42 Merge pull request #3718 from motiondivision/dependabot/npm_and_yarn/next-15....
5973dfb Merge pull request #3722 from motiondivision/worktree-fix-issue-2829
cfccb03 fix(drag): Refresh root scroll before measuring ref constraints
16aa417 Updating changelog
5d627a4 Merge pull request #3720 from motiondivision/worktree-fix-issue-2831
63cf0d0 Merge pull request #3721 from motiondivision/worktree-fix-issue-2833
Additional commits viewable in compare view

Updates lucide-react from 1.14.0 to 1.16.0

Release notes

Sourced from lucide-react's releases.

Version 1.16.0

What's Changed

feat(icons): added blender icon by @rrod497 in lucide-icons/lucide#3884

Full Changelog: lucide-icons/lucide@1.15.0...1.16.0

Version 1.15.0

What's Changed

fix: remove 'less' from brand stopwords by @jguddas in lucide-icons/lucide#4331

fix(@lucide/vue): Clone slots before passing to icon by @axtho in lucide-icons/lucide#4339

fix(icons): changed text-cursor icon by @jamiemlaw in lucide-icons/lucide#4340

fix(icons): changed landmark icon by @jamiemlaw in lucide-icons/lucide#4334

chore(deps-dev): bump nitropack from 2.13.1 to 2.13.4 by @dependabot[bot] in lucide-icons/lucide#4352

chore(deps-dev): bump simple-git from 3.33.0 to 3.36.0 by @dependabot[bot] in lucide-icons/lucide#4349

fix(icons): changed candy-cane icon by @jguddas in lucide-icons/lucide#4148

fix(icons): changed volleyball icon by @jamiemlaw in lucide-icons/lucide#4338

fix(icons): changed chart-no-axes-combined icon by @jguddas in lucide-icons/lucide#3567

feat(icon): added broccoli icon by @swastik7805 in lucide-icons/lucide#4263

chore(site): Updates to site and updated carbon ads by @ericfennis in lucide-icons/lucide#4359

feat(icons): added sticky note variants by @Barakudum in lucide-icons/lucide#4348

chore(deps-dev): bump astro from 6.1.6 to 6.1.10 by @dependabot[bot] in lucide-icons/lucide#4361

New Contributors

@axtho made their first contribution in lucide-icons/lucide#4339

@Barakudum made their first contribution in lucide-icons/lucide#4348

Full Changelog: lucide-icons/lucide@1.14.0...1.15.0

Commits

07c885e fix(docs): fix zephyr-cloud URL in readmes
See full diff in compare view

Updates shiki from 4.0.2 to 4.1.0

Release notes

Sourced from shiki's releases.

v4.1.0

🐞 Bug Fixes

twoslash: Forward tsModule to createTwoslasher - by @arthurfiorette in shikijs/shiki#1271 (be89a)

View changes on GitHub

Commits

c809af9 chore: release v4.1.0
95371cb chore: lint
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the prod-minor-patch group with 6 updates: | Package | From | To | | --- | --- | --- | | [@ax-llm/ax](https://github.com/ax-llm/ax) | `21.0.0` | `21.0.9` | | [@tanstack/react-router](https://github.com/TanStack/router/tree/HEAD/packages/react-router) | `1.169.2` | `1.170.4` | | [date-fns](https://github.com/date-fns/date-fns) | `4.1.0` | `4.2.1` | | [framer-motion](https://github.com/motiondivision/motion) | `12.38.0` | `12.39.0` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.14.0` | `1.16.0` | | [shiki](https://github.com/shikijs/shiki/tree/HEAD/packages/shiki) | `4.0.2` | `4.1.0` | Updates `@ax-llm/ax` from 21.0.0 to 21.0.9 - [Release notes](https://github.com/ax-llm/ax/releases) - [Changelog](https://github.com/ax-llm/ax/blob/main/CHANGELOG.md) - [Commits](ax-llm/ax@21.0.0...21.0.9) Updates `@tanstack/react-router` from 1.169.2 to 1.170.4 - [Release notes](https://github.com/TanStack/router/releases) - [Changelog](https://github.com/TanStack/router/blob/main/packages/react-router/CHANGELOG.md) - [Commits](https://github.com/TanStack/router/commits/@tanstack/react-router@1.170.4/packages/react-router) Updates `date-fns` from 4.1.0 to 4.2.1 - [Release notes](https://github.com/date-fns/date-fns/releases) - [Changelog](https://github.com/date-fns/date-fns/blob/main/CHANGELOG.md) - [Commits](date-fns/date-fns@v4.1.0...v4.2.1) Updates `framer-motion` from 12.38.0 to 12.39.0 - [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md) - [Commits](motiondivision/motion@v12.38.0...v12.39.0) Updates `lucide-react` from 1.14.0 to 1.16.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.16.0/packages/lucide-react) Updates `shiki` from 4.0.2 to 4.1.0 - [Release notes](https://github.com/shikijs/shiki/releases) - [Commits](https://github.com/shikijs/shiki/commits/v4.1.0/packages/shiki) --- updated-dependencies: - dependency-name: "@ax-llm/ax" dependency-version: 21.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-minor-patch - dependency-name: "@tanstack/react-router" dependency-version: 1.170.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-minor-patch - dependency-name: date-fns dependency-version: 4.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-minor-patch - dependency-name: framer-motion dependency-version: 12.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-minor-patch - dependency-name: lucide-react dependency-version: 1.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-minor-patch - dependency-name: shiki dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

socket-security · 2026-05-20T00:15:23Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
@ax-llm/ax@21.0.0 ⏵ 21.0.9	⁺¹	⁺¹	⁺¹
@tanstack/react-router@1.169.2 ⏵ 1.170.4	⁺¹	⁺¹
shiki@4.0.2 ⏵ 4.1.0			^-4
lucide-react@1.14.0 ⏵ 1.16.0	⁺¹	⁺¹
date-fns@4.1.0 ⏵ 4.2.1		⁺¹
framer-motion@12.38.0 ⏵ 12.39.0

View full report

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update JavaScript code labels May 20, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump the prod-minor-patch group with 6 updates#102

build(deps): bump the prod-minor-patch group with 6 updates#102
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/prod-minor-patch-c011e4e0e0

dependabot Bot commented on behalf of github May 20, 2026

Uh oh!

socket-security Bot commented May 20, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github May 20, 2026

Release 21.0.9

Release 21.0.8

Release 21.0.7

Release 21.0.6

Release 21.0.5

Release 21.0.4

Release 21.0.3

Release 21.0.2

Release 21.0.1

21.0.9 (2026-05-19)

21.0.8 (2026-05-17)

21.0.8 (2026-05-17)

21.0.7 (2026-05-17)

21.0.6 (2026-05-16)

Features

Bug Fixes

21.0.5 (2026-05-15)

Features

Bug Fixes

21.0.5 (2026-05-15)

Features

Bug Fixes

21.0.4 (2026-05-14)

21.0.4 (2026-05-14)

21.0.3 (2026-05-13)

21.0.3 (2026-05-13)

21.0.2 (2026-05-12)

Bug Fixes

@​tanstack/react-router@​1.170.4

Patch Changes

@​tanstack/react-router@​1.170.3

Patch Changes

@​tanstack/react-router@​1.170.2

Patch Changes

1.170.4

Patch Changes

1.170.3

Patch Changes

1.170.2

Patch Changes

1.170.1

Patch Changes

1.170.0

Minor Changes

Patch Changes

v4.2.1

Fixed

v4.2.0

Changed

v4.2.1 - 2026-05-19

Fixed

v4.2.0 - 2026-05-18

Changed

[12.39.0] 2026-05-18

Added

Fixed

Version 1.16.0

What's Changed

Version 1.15.0

What's Changed

New Contributors

v4.1.0

🐞 Bug Fixes

View changes on GitHub

Uh oh!

socket-security Bot commented May 20, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`@tanstack/react-router@1`.170.4

`@tanstack/react-router@1`.170.3

`@tanstack/react-router@1`.170.2