Skip to content

build(deps): bump the all group across 1 directory with 73 updates#5084

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/all-1b5b3d9dbb
Closed

build(deps): bump the all group across 1 directory with 73 updates#5084
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/all-1b5b3d9dbb

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 24, 2026

Bumps the all group with 72 updates in the / directory:

Package From To
@anthropic-ai/claude-agent-sdk 0.2.92 0.2.119
@anthropic-ai/sdk 0.82.0 0.91.0
@github/copilot 1.0.17 1.0.35
@google/genai 1.25.0 1.50.1
@opentelemetry/api 1.9.0 1.9.1
@opentelemetry/api-logs 0.212.0 0.215.0
@opentelemetry/exporter-logs-otlp-grpc 0.212.0 0.215.0
@opentelemetry/exporter-logs-otlp-http 0.212.0 0.215.0
@opentelemetry/exporter-metrics-otlp-grpc 0.212.0 0.215.0
@opentelemetry/exporter-metrics-otlp-http 0.212.0 0.215.0
@opentelemetry/exporter-trace-otlp-grpc 0.212.0 0.215.0
@opentelemetry/exporter-trace-otlp-http 0.212.0 0.215.0
@opentelemetry/resources 2.5.1 2.7.0
@opentelemetry/sdk-logs 0.212.0 0.215.0
@opentelemetry/sdk-trace-node 2.5.1 2.7.0
@opentelemetry/semantic-conventions 1.39.0 1.40.0
@sinclair/typebox 0.34.41 0.34.49
@vscode/tree-sitter-wasm 0.0.5-php.2 0.0.5
@xterm/headless 5.5.0 6.0.0
ajv 8.18.0 8.20.0
applicationinsights 2.9.7 2.9.8
best-effort-json-parser 1.2.1 1.4.0
diff 8.0.3 9.0.0
dompurify 3.3.2 3.4.1
isbinaryfile 5.0.4 6.0.0
lru-cache 11.1.0 11.3.5
minimatch 10.2.4 10.2.5
undici 7.24.1 8.1.0
vscode-tas-client 0.1.84 0.1.86
@azure/keyvault-secrets 4.10.0 4.11.1
@azure/msal-node 3.6.3 5.1.4
@fluentui/react-components 9.66.6 9.73.8
@fluentui/react-icons 2.0.305 2.0.324
@octokit/types 14.1.0 16.0.0
@parcel/watcher 2.5.1 2.5.6
@types/node 22.16.3 22.19.17
@types/picomatch 4.0.0 4.0.3
@typescript-eslint/eslint-plugin 8.36.0 8.59.0
@typescript-eslint/parser 8.36.0 8.59.0
@typescript-eslint/typescript-estree 8.36.0 8.59.0
@vitest/coverage-v8 3.2.4 4.1.5
@vscode/test-cli 0.0.11 0.0.12
@vscode/vsce 3.6.0 3.9.1
agent-browser 0.16.3 0.26.0
csv-parse 6.0.0 6.2.1
dotenv 17.2.0 17.4.2
electron 39.8.5 41.3.0
esbuild 0.25.6 0.28.0
eslint 9.30.1 9.39.4
eslint-plugin-jsdoc 51.3.4 62.9.0
fastq 1.19.1 1.20.1
glob 11.1.0 13.0.6
mobx 6.13.7 6.15.0
mobx-react-lite 4.1.0 4.1.1
open 10.1.2 11.0.0
openai 6.7.0 6.34.0
playwright 1.58.2 1.59.1
prettier 3.6.2 3.8.3
rimraf 6.0.1 6.1.3
shiki 1.15.2 4.0.2
sinon 21.0.1 21.1.2
@types/sinon 17.0.4 21.0.1
tar 7.5.11 7.5.13
@types/tar 6.1.13 7.0.87
tsx 4.20.3 4.21.0
typescript 5.8.3 6.0.3
typescript-eslint 8.36.0 8.59.0
vite-plugin-top-level-await 1.5.0 1.6.0
vite-plugin-wasm 3.5.0 3.6.0
vitest 3.2.4 4.1.5
yargs 17.7.2 18.0.0
zod 3.25.76 4.3.6

Updates @anthropic-ai/claude-agent-sdk from 0.2.92 to 0.2.119

Release notes

Sourced from @​anthropic-ai/claude-agent-sdk's releases.

v0.2.119

What's changed

  • excludeDynamicSections now keeps static auto-memory instructions in the cacheable system-prompt block; only the per-user memory directory path and per-machine environment values are relocated to the first user message
  • Long-running SDK sessions now reconnect claude.ai-proxied MCP servers after a transport-stream abort
  • SessionStore.append() failures are now retried up to 3 times with short backoff before the batch is dropped and mirror_error is emitted

Update

npm install @anthropic-ai/claude-agent-sdk@0.2.119
# or
yarn add @anthropic-ai/claude-agent-sdk@0.2.119
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.2.119
# or
bun add @anthropic-ai/claude-agent-sdk@0.2.119

v0.2.118

What's changed

  • Added Options.managedSettings for embedders to pass policy-tier settings to the spawned CLI in-memory, honored below IT-controlled managed sources

Update

npm install @anthropic-ai/claude-agent-sdk@0.2.118
# or
yarn add @anthropic-ai/claude-agent-sdk@0.2.118
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.2.118
# or
bun add @anthropic-ai/claude-agent-sdk@0.2.118

v0.2.117

What's changed

  • Updated to parity with Claude Code v2.1.117

Update

npm install @anthropic-ai/claude-agent-sdk@0.2.117
# or
yarn add @anthropic-ai/claude-agent-sdk@0.2.117
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.2.117
# or
</tr></table> 

... (truncated)

Changelog

Sourced from @​anthropic-ai/claude-agent-sdk's changelog.

0.2.119

  • excludeDynamicSections now keeps static auto-memory instructions in the cacheable system-prompt block; only the per-user memory directory path and per-machine environment values are relocated to the first user message
  • Long-running SDK sessions now reconnect claude.ai-proxied MCP servers after a transport-stream abort
  • SessionStore.append() failures are now retried up to 3 times with short backoff before the batch is dropped and mirror_error is emitted

0.2.118

  • Added Options.managedSettings for embedders to pass policy-tier settings to the spawned CLI in-memory, honored below IT-controlled managed sources

0.2.117

  • Updated to parity with Claude Code v2.1.117

0.2.116

  • Updated to parity with Claude Code v2.1.116

0.2.115

  • Updated to parity with Claude Code v2.1.115

0.2.114

  • Updated to parity with Claude Code v2.1.114

0.2.113

  • Changed the SDK to spawn a native Claude Code binary (via a per-platform optional dependency) instead of bundled JavaScript
  • Added sessionStore option (alpha) to query() and session helpers for mirroring session transcripts to external storage, with SessionStore/SessionKey/SessionStoreEntry types, InMemorySessionStore reference implementation, and importSessionToStore() for migrating existing sessions
  • Added deleteSession() for removing a session from disk or a SessionStore
  • Added SDKMirrorErrorMessage (subtype: 'mirror_error') to the SDKMessage union — emitted when a sessionStore.append() batch fails
  • Breaking: options.env once again replaces process.env for the CLI subprocess instead of overlaying it. To add or override individual variables, pass env: { ...process.env, MY_VAR: "x" }
  • Added title option to query() — sets the session title and skips auto-generation
  • Added OpenTelemetry trace context propagation — the caller's active trace context is forwarded to the CLI subprocess so spans parent under your distributed trace

0.2.112

  • Updated to parity with Claude Code v2.1.112

0.2.111

  • Opus 4.7 is now available! This version of the SDK is required to use it.
  • mcp_set_servers control request: remote (http/sse) server entries can now carry per-tool permission_policy values, which are applied to the session's allow/deny rules
  • startup() and WarmQuery are now part of the public TypeScript API
  • Changed options.env to overlay the inherited process.env instead of replacing it

0.2.110

  • Fixed unstable_v2_createSession not respecting cwd, settingSources, and allowDangerouslySkipPermissions options

... (truncated)

Commits
  • 76d1dec chore: Update CHANGELOG.md
  • e1721a4 chore: Update CHANGELOG.md
  • b3623dc chore: Update CHANGELOG.md
  • b917684 chore: Update CHANGELOG.md
  • f9b4a29 chore: Update CHANGELOG.md
  • 0e9214d examples: add S3, Redis, Postgres SessionStore reference adapters (#288)
  • c338376 chore: Update CHANGELOG.md
  • c394ff5 chore: Update CHANGELOG.md
  • bf1a335 chore: Update CHANGELOG.md
  • 9ecc668 chore: Update CHANGELOG.md
  • Additional commits viewable in compare view

Updates @anthropic-ai/sdk from 0.82.0 to 0.91.0

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk: v0.91.0

0.91.0 (2026-04-23)

Full Changelog: sdk-v0.90.0...sdk-v0.91.0

Features

  • api: CMA Memory public beta (ddf732f)
  • bedrock: use auth header for mantle client (#866) (aec801a)

Bug Fixes

  • api: fix errors in api spec (ae10768)
  • api: restore missing features (1a5b47b)

Chores

  • internal: more robust bootstrap script (7716e19)
  • tests: bump steady to v0.22.1 (219a971)

sdk: v0.90.0

0.90.0 (2026-04-16)

Full Changelog: sdk-v0.89.0...sdk-v0.90.0

Features

  • api: add claude-opus-4-7, token budgets and user_profiles (b26134b)

Chores

  • actually delete release-doctor.yml (0fe984d)
  • ci: remove release-doctor workflow (08e58bd)

sdk: v0.89.0

0.89.0 (2026-04-14)

Full Changelog: sdk-v0.88.0...sdk-v0.89.0

Features

  • api: manual updates (57c2a11)
  • api: mark Sonnet and Opus 4 as deprecated (eff41b7)

Bug Fixes

... (truncated)

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.91.0 (2026-04-23)

Full Changelog: sdk-v0.90.0...sdk-v0.91.0

Features

  • api: CMA Memory public beta (ddf732f)
  • bedrock: use auth header for mantle client (#866) (aec801a)

Bug Fixes

  • api: fix errors in api spec (ae10768)
  • api: restore missing features (1a5b47b)

Chores

  • internal: more robust bootstrap script (7716e19)
  • tests: bump steady to v0.22.1 (219a971)

0.90.0 (2026-04-16)

Full Changelog: sdk-v0.89.0...sdk-v0.90.0

Features

  • api: add claude-opus-4-7, token budgets and user_profiles (b26134b)

Chores

  • actually delete release-doctor.yml (0fe984d)
  • ci: remove release-doctor workflow (08e58bd)

0.89.0 (2026-04-14)

Full Changelog: sdk-v0.88.0...sdk-v0.89.0

Features

  • api: manual updates (57c2a11)
  • api: mark Sonnet and Opus 4 as deprecated (eff41b7)

Bug Fixes

  • streaming: add missing events (4c52919)

0.88.0 (2026-04-10)

... (truncated)

Commits

Updates @github/copilot from 1.0.17 to 1.0.35

Release notes

Sourced from @​github/copilot's releases.

1.0.35

2026-04-23

  • Slash commands support tab-completion for arguments and subcommands
  • Shell escape commands (!) now use your $SHELL when set, instead of always invoking /bin/sh
  • Permission prompts appear correctly in remote sessions for the CLI TUI
  • Session selector shows branch names, idle/in-use status, and has improved search with cursor support
  • Model change notification shows both the previous and new model name
  • /update and /version commands now honor your configured update channel
  • Session sync prompt uses clearer labels and explains GitHub.com cross-device sync
  • Support COPILOT_GH_HOST environment variable for GitHub hostname, taking precedence over GH_HOST
  • Press Ctrl+Y (in addition to Tab) to accept the highlighted option in completion popups (@-mentions, path completions, slash commands)
  • Add /session delete, delete , and delete-all subcommands, and x-to-delete in the session picker
  • MCP server names with spaces and special characters are now supported
  • Skill slash commands (e.g. /skill-name) passed as the initial prompt via -i are recognized correctly on startup
  • Shell completion notifications are not duplicated when read_bash already returned the result
  • --continue prefers resuming sessions from the current working directory instead of the most recently touched session
  • Status line script now includes context window fields that match the model badge and /context output
  • User settings are now stored in ~/.copilot/settings.json, separate from internal state in config.json
  • Name sessions with --name and resume them by name with --resume=
  • Configure Copilot agent now has shell access on Windows
  • Show a helpful error message with install instructions when clipboard utilities (wl-clipboard or xclip) are missing on Linux
  • LSP server entries in lsp.json support configurable spawn, initialization, and warmup timeouts
  • Context window indicator in the statusline is now hidden by default
  • Move MCP OAuth into the shared runtime flow and clear associated OAuth state when removing an MCP server.
  • Added a GitHub-style contribution graph to /usage that adapts to terminal color mode and falls back to distinct glyphs in no-color terminals
  • Self-correcting custom tool calls in agentic loop
  • Cursor movement, deletion, and rendering work correctly for emoji and multi-codepoint characters in the text input
  • Tool availability detection works correctly on Windows
  • Session token expiry during a turn is handled automatically without requiring you to resend your message
  • Initial tab and arrow key navigation in /cwd and /add-dir path picker selects the correct item
  • Transient I/O errors no longer appear as red error entries in the timeline when an IDE or extension disconnects
  • Custom agents and skills in ~/.claude/ are no longer incorrectly loaded as Copilot project config
  • Login command restores interactive input correctly after authentication
  • Improve rendering performance when displaying large amounts of text in the timeline
  • Sync task calls block until completion under MULTI_TURN_AGENTS instead of auto-promoting to background after 60s; sync no longer returns a reusable agent_id, use mode: "background" for follow-ups
  • Tab navigation supports Home/End keys to jump to first and last tab
  • Plugins take effect immediately after install without requiring a restart
  • Add continueOnAutoMode config option to automatically switch to auto model on rate limit instead of pausing
  • Auto mode no longer fails with an error when switching to a model that doesn't support the configured reasoning effort
  • Pattern-specific instruction files (.github/instructions/*.instructions.md) no longer include their full body in the system prompt on every session
  • Extension shutdown errors no longer appear as error-level log noise on every session exit
  • LSP refactoring tools now register correctly on the first turn when LSP configs are present
  • Add HTTP hook support, allowing hooks to POST JSON payloads to a configured URL instead of running a local command
  • Hide subagent thinking from the timeline
  • Custom agent name is now visible in the statusline footer and can be toggled via /statusline
  • Pressing Escape on startup dialogs no longer causes race conditions
  • grep and glob tools now accept multiple search paths

1.0.35-6

... (truncated)

Changelog

Sourced from @​github/copilot's changelog.

1.0.35 - 2026-04-23

  • Slash commands support tab-completion for arguments and subcommands
  • Shell escape commands (!) now use your $SHELL when set, instead of always invoking /bin/sh
  • Permission prompts appear correctly in remote sessions for the CLI TUI
  • Session selector shows branch names, idle/in-use status, and has improved search with cursor support
  • Model change notification shows both the previous and new model name
  • /update and /version commands now honor your configured update channel
  • Session sync prompt uses clearer labels and explains GitHub.com cross-device sync
  • Support COPILOT_GH_HOST environment variable for GitHub hostname, taking precedence over GH_HOST
  • Press Ctrl+Y (in addition to Tab) to accept the highlighted option in completion popups (@-mentions, path completions, slash commands)
  • Add /session delete, delete , and delete-all subcommands, and x-to-delete in the session picker
  • MCP server names with spaces and special characters are now supported
  • Skill slash commands (e.g. /skill-name) passed as the initial prompt via -i are recognized correctly on startup
  • Shell completion notifications are not duplicated when read_bash already returned the result
  • --continue prefers resuming sessions from the current working directory instead of the most recently touched session
  • Status line script now includes context window fields that match the model badge and /context output
  • User settings are now stored in ~/.copilot/settings.json, separate from internal state in config.json
  • Name sessions with --name and resume them by name with --resume=
  • Configure Copilot agent now has shell access on Windows
  • Show a helpful error message with install instructions when clipboard utilities (wl-clipboard or xclip) are missing on Linux
  • LSP server entries in lsp.json support configurable spawn, initialization, and warmup timeouts
  • Context window indicator in the statusline is now hidden by default
  • Move MCP OAuth into the shared runtime flow and clear associated OAuth state when removing an MCP server.
  • Added a GitHub-style contribution graph to /usage that adapts to terminal color mode and falls back to distinct glyphs in no-color terminals
  • Self-correcting custom tool calls in agentic loop
  • Cursor movement, deletion, and rendering work correctly for emoji and multi-codepoint characters in the text input
  • Tool availability detection works correctly on Windows
  • Session token expiry during a turn is handled automatically without requiring you to resend your message
  • Initial tab and arrow key navigation in /cwd and /add-dir path picker selects the correct item
  • Transient I/O errors no longer appear as red error entries in the timeline when an IDE or extension disconnects
  • Custom agents and skills in ~/.claude/ are no longer incorrectly loaded as Copilot project config
  • Login command restores interactive input correctly after authentication
  • Improve rendering performance when displaying large amounts of text in the timeline
  • Sync task calls block until completion under MULTI_TURN_AGENTS instead of auto-promoting to background after 60s; sync no longer returns a reusable agent_id, use mode: "background" for follow-ups
  • Tab navigation supports Home/End keys to jump to first and last tab
  • Plugins take effect immediately after install without requiring a restart
  • Add continueOnAutoMode config option to automatically switch to auto model on rate limit instead of pausing
  • Auto mode no longer fails with an error when switching to a model that doesn't support the configured reasoning effort
  • Pattern-specific instruction files (.github/instructions/*.instructions.md) no longer include their full body in the system prompt on every session
  • Extension shutdown errors no longer appear as error-level log noise on every session exit
  • LSP refactoring tools now register correctly on the first turn when LSP configs are present
  • Add HTTP hook support, allowing hooks to POST JSON payloads to a configured URL instead of running a local command
  • Hide subagent thinking from the timeline
  • Custom agent name is now visible in the statusline footer and can be toggled via /statusline
  • Pressing Escape on startup dialogs no longer causes race conditions
  • grep and glob tools now accept multiple search paths

1.0.34 - 2026-04-20

... (truncated)

Commits
  • 6594437 Update changelog.md for version 1.0.34
  • 75fbe0c Update changelog.md for version 1.0.33
  • 4e51f5a Update changelog.md for version 1.0.32
  • 3b72dea Update changelog.md for version 1.0.31
  • 2f883ed Update changelog.md for version 1.0.30
  • 709b59e Update changelog.md for version 1.0.29
  • 8973042 Update changelog.md for version 1.0.28
  • ae7b374 Update changelog.md for version 1.0.27
  • 559a22a Update changelog.md for version 1.0.26
  • 89ee433 Update changelog.md for version 1.0.25
  • Additional commits viewable in compare view

Updates @google/genai from 1.25.0 to 1.50.1

Release notes

Sourced from @​google/genai's releases.

v1.50.1

1.50.1 (2026-04-14)

Bug Fixes

  • Refactor Webhook types in GenAI SDKs for easier useage (5100abc)
  • Rename webhooks.retrieve to webhooks.get. (db6e771)

v1.50.0

1.50.0 (2026-04-13)

[!CAUTION] CRITICAL WARNING: Do not use this version if you are implementing or relying on webhooks. This release contains known issues regarding webhook sdk. Please use v1.50.1 or later.

Features

  • Add "eu" as a supported service location for Vertex AI platform. (2493f9c)
  • Add DeepResearchAgentConfig fields (3615ca2)
  • Add Live Avatar new fields (6a0ff96)
  • Add support for new audio MIME types: opus, alaw, and mulaw (7137f13)
  • add webhook and webhookConfig for js and python sdk (0f89605)
  • Add webhook_config to batches.create() and models.generate_videos() (894bc93)
  • Wire the webhook into python and js client. (b6c5d18)

v1.49.0

1.49.0 (2026-04-08)

Features

  • Introduce TYPE_L16 audio content and optional fields. (c62cb9a)

v1.48.0

1.48.0 (2026-03-31)

Features

  • Support dedicated TextAnnotationDelta for streaming tool responses (89552ba)

Bug Fixes

  • Fix service_tier enums. (9bdc2ae)

v1.47.0

1.47.0 (2026-03-27)

... (truncated)

Changelog

Sourced from @​google/genai's changelog.

1.50.1 (2026-04-14)

Bug Fixes

  • Refactor Webhook types in GenAI SDKs for easier useage (5100abc)
  • Rename webhooks.retrieve to webhooks.get. (db6e771)

1.50.0 (2026-04-13)

Features

  • Add "eu" as a supported service location for Vertex AI platform. (2493f9c)
  • Add DeepResearchAgentConfig fields (3615ca2)
  • Add Live Avatar new fields (6a0ff96)
  • Add support for new audio MIME types: opus, alaw, and mulaw (7137f13)
  • add webhook and webhookConfig for js and python sdk (0f89605)
  • Add webhook_config to batches.create() and models.generate_videos() (894bc93)
  • Wire the webhook into python and js client. (b6c5d18)

1.49.0 (2026-04-08)

Features

  • Introduce TYPE_L16 audio content and optional fields. (c62cb9a)

1.48.0 (2026-03-31)

Features

  • Support dedicated TextAnnotationDelta for streaming tool responses (89552ba)

Bug Fixes

  • Fix service_tier enums. (9bdc2ae)

1.47.0 (2026-03-27)

Features

  • Add custom_metadata to FileSearchResult. (083a1e3)
  • Add labels field to Veo configs (930c9c3)
  • Add mime type for Audio content (1ad80c6)
  • Add model_status to GenerateContentResponse (Gemini API only) (5e1110d)
  • Add part_metadata in Part (Gemini API only) (5e1110d)

... (truncated)

Commits
  • aeb5cd3 chore(main): release 1.50.1 (#1497)
  • db6e771 fix: Rename webhooks.retrieve to webhooks.get.
  • 5100abc fix: Refactor Webhook types in GenAI SDKs for easier useage
  • 53829c4 chore(main): release 1.50.0 (#1481)
  • 4d5e949 chore: internal change
  • 894bc93 feat: Add webhook_config to batches.create() and models.generate_videos()
  • b6c5d18 feat: Wire the webhook into python and js client.
  • 0f89605 feat: add webhook and webhookConfig for js and python sdk
  • 70d8f53 chore: support new config mappings and fields for gemini-embedding-2 on GenAI...
  • 3615ca2 feat: Add DeepResearchAgentConfig fields
  • Additional commits viewable in compare view
Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates @opentelemetry/api from 1.9.0 to 1.9.1

Release notes

Sourced from @​opentelemetry/api's releases.

api/v1.9.1

1.9.1

🐛 (Bug Fix)

  • fix(api): prioritize esnext export condition as it is more specific #5458
  • fix(api): update diag consoleLogger to use original console methods to prevent infinite loop when a console instrumentation is present #6395
  • fix(api): use Attributes instead of deprecated SpanAttributes in SpanOptions #6478 @​overbalance
  • fix(diag): change types in DiagComponentLogger from any to unknown#5478 @​loganrosen
  • fix(api): re-introduce fallback chain for global utils #6523 @​pichlermarc

🏠 (Internal)

Changelog

Sourced from @​opentelemetry/api's changelog.

1.9.1

🐛 (Bug Fix)

🏠 (Internal)

  • chore: fix cross project links and missing implicitly exported types #3533 @​legendecas
  • feat(sdk-metrics): add exponential histogram mapping functions #3504 @​mwear
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​opentelemetry/api since your current version.


Updates @opentelemetry/api-logs from 0.212.0 to 0.215.0

Release notes

Sourced from @​opentelemetry/api-logs's releases.

experimental/v0.215.0

0.215.0

💥 Breaking Changes

  • feat(sdk-logs)!: add required forceFlush() to LogRecordExporter interface #6356 @​pichlermarc
    • (user-facing): LogRecordExporter interface now requires a forceFlush() method to be implemented. Custom exporters will need to implement this method to continue working with the Logs SDK.
  • feat(api-logs, sdk-logs)!: add Logger#enabled() #6371 @​david-luna

🚀 Features

🐛 Bug Fixes

  • fix(instrumentation-fetch): preserve init overrides when input is a Request object #6421 @​akandic47
  • fix(otlp-exporter-base): limit Node.js HTTP transport response body to 4 MiB #6552 @​kartikgola
  • fix(instrumentation-fetch): avoid unwrapping fetch API when disabling #6575 @​david-luna
  • fix(web-common): add check for possible unsafe json parse #6589 @​maryliag
  • fix(otlp-transformer): add check for possible unsafe json parse #6588 @​maryliag

experimental/v0.214.0

0.214.0

💥 Breaking Changes

  • feat(configuration)!: rename OTEL_EXPERIMENTAL_CONFIG_FILE to OTEL_CONFIG_FILE #6486 @​maryliag
  • refactor!(otlp-grpc-exporter-base): remove headers from gRPC exporter config type, passing headers now results in a compile-time error instead of being silently ignored #6487

🚀 Features

🐛 Bug Fixes

  • fix(opentelemetry-instrumentation): access require via globalThis to avoid webpack analysis #6481 @​overbalance
  • fix(sdk-logs): fix inflated droppedAttributesCount when updating existing attribute keys #6479 @​overbalance
  • fix(instrumentation-fetch): do not modify the returned type of fetch #6521 @​dyladan
  • fix(opentelemetry-sdk-node): add missing @opentelemetry/otlp-exporter-base dependency #6520 @​gotgenes

🏠 Internal

... (truncated)

Commits
  • a0476ee chore: prepare next release (#6603)
  • 6bc69c7 fix(instr-fetch): avoid unwrap fetch API (#6575)
  • 840f3d4 chore: re-arrange misplaced changelog entries (#6604)
  • 2da8d39 feat(configuration): refactoring config loader to print warning message for b...
  • 401af13 fix(deps): update dependency protobufjs to v8 (#6602)
  • 36e2a9a fix(opentelemetry-core): add extra checks on internal merge function for safe...
  • 8ee2a8b fix(web-common): add check for possible unsafe json parse (#6589)
  • f40fd24 fix(otlp-transformer): add check for possible unsafe json parse (#6588)
  • 394eeb0 chore: update changelog script (#6586)
  • 36ce569 feat(sdk-metrics): adds the cardinalitySelector argument to PeriodicExporting...
  • Additional commits viewable in compare view

Updates @opentelemetry/exporter-logs-otlp-grpc from 0.212.0 to 0.215.0

Release notes

Sourced from @​opentelemetry/exporter-logs-otlp-grpc's releases.

experimental/v0.215.0

0.215.0

💥 Breaking Changes

  • feat(sdk-logs)!: add required forceFlush() to LogRecordExporter interface #6356 @​pichlermarc
    • (user-facing): LogRecordExporter interface now requires a forceFlush() method to be implemented. Custom exporters will need to implement this method to continue working with the Logs SDK.
  • feat(api-logs, sdk-logs)!: add Logger#enabled() #6371 @​david-luna

🚀 Features

🐛 Bug Fixes

  • fix(instrumentation-fetch): preserve init overrides when input is a Request object #6421 @​akandic47
  • fix(otlp-exporter-base): limit Node.js HTTP transport response body to 4 MiB #6552 @​kartikgola
  • fix(instrumentation-fetch): avoid unwrapping fetch API when disabling #6575 @​david-luna
  • fix(web-common): add check for possible unsafe json parse #6589 @​maryliag
  • fix(otlp-transformer): add check for possible unsafe json parse

Bumps the all group with 72 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@anthropic-ai/claude-agent-sdk](https://github.com/anthropics/claude-agent-sdk-typescript) | `0.2.92` | `0.2.119` |
| [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.82.0` | `0.91.0` |
| [@github/copilot](https://github.com/github/copilot-cli) | `1.0.17` | `1.0.35` |
| [@google/genai](https://github.com/googleapis/js-genai) | `1.25.0` | `1.50.1` |
| [@opentelemetry/api](https://github.com/open-telemetry/opentelemetry-js) | `1.9.0` | `1.9.1` |
| [@opentelemetry/api-logs](https://github.com/open-telemetry/opentelemetry-js) | `0.212.0` | `0.215.0` |
| [@opentelemetry/exporter-logs-otlp-grpc](https://github.com/open-telemetry/opentelemetry-js) | `0.212.0` | `0.215.0` |
| [@opentelemetry/exporter-logs-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.212.0` | `0.215.0` |
| [@opentelemetry/exporter-metrics-otlp-grpc](https://github.com/open-telemetry/opentelemetry-js) | `0.212.0` | `0.215.0` |
| [@opentelemetry/exporter-metrics-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.212.0` | `0.215.0` |
| [@opentelemetry/exporter-trace-otlp-grpc](https://github.com/open-telemetry/opentelemetry-js) | `0.212.0` | `0.215.0` |
| [@opentelemetry/exporter-trace-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.212.0` | `0.215.0` |
| [@opentelemetry/resources](https://github.com/open-telemetry/opentelemetry-js) | `2.5.1` | `2.7.0` |
| [@opentelemetry/sdk-logs](https://github.com/open-telemetry/opentelemetry-js) | `0.212.0` | `0.215.0` |
| [@opentelemetry/sdk-trace-node](https://github.com/open-telemetry/opentelemetry-js) | `2.5.1` | `2.7.0` |
| [@opentelemetry/semantic-conventions](https://github.com/open-telemetry/opentelemetry-js) | `1.39.0` | `1.40.0` |
| [@sinclair/typebox](https://github.com/sinclairzx81/sinclair-typebox) | `0.34.41` | `0.34.49` |
| [@vscode/tree-sitter-wasm](https://github.com/Microsoft/vscode-tree-sitter-wasm) | `0.0.5-php.2` | `0.0.5` |
| [@xterm/headless](https://github.com/xtermjs/xterm.js) | `5.5.0` | `6.0.0` |
| [ajv](https://github.com/ajv-validator/ajv) | `8.18.0` | `8.20.0` |
| [applicationinsights](https://github.com/microsoft/ApplicationInsights-node.js) | `2.9.7` | `2.9.8` |
| [best-effort-json-parser](https://github.com/beenotung/best-effort-json-parser) | `1.2.1` | `1.4.0` |
| [diff](https://github.com/kpdecker/jsdiff) | `8.0.3` | `9.0.0` |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.3.2` | `3.4.1` |
| [isbinaryfile](https://github.com/gjtorikian/isBinaryFile) | `5.0.4` | `6.0.0` |
| [lru-cache](https://github.com/isaacs/node-lru-cache) | `11.1.0` | `11.3.5` |
| [minimatch](https://github.com/isaacs/minimatch) | `10.2.4` | `10.2.5` |
| [undici](https://github.com/nodejs/undici) | `7.24.1` | `8.1.0` |
| vscode-tas-client | `0.1.84` | `0.1.86` |
| [@azure/keyvault-secrets](https://github.com/Azure/azure-sdk-for-js) | `4.10.0` | `4.11.1` |
| [@azure/msal-node](https://github.com/AzureAD/microsoft-authentication-library-for-js) | `3.6.3` | `5.1.4` |
| [@fluentui/react-components](https://github.com/microsoft/fluentui) | `9.66.6` | `9.73.8` |
| [@fluentui/react-icons](https://github.com/microsoft/fluentui-system-icons) | `2.0.305` | `2.0.324` |
| [@octokit/types](https://github.com/octokit/types.ts) | `14.1.0` | `16.0.0` |
| [@parcel/watcher](https://github.com/parcel-bundler/watcher) | `2.5.1` | `2.5.6` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.16.3` | `22.19.17` |
| [@types/picomatch](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/picomatch) | `4.0.0` | `4.0.3` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.36.0` | `8.59.0` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.36.0` | `8.59.0` |
| [@typescript-eslint/typescript-estree](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-estree) | `8.36.0` | `8.59.0` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `3.2.4` | `4.1.5` |
| [@vscode/test-cli](https://github.com/Microsoft/vscode-test-cli) | `0.0.11` | `0.0.12` |
| [@vscode/vsce](https://github.com/Microsoft/vsce) | `3.6.0` | `3.9.1` |
| [agent-browser](https://github.com/vercel-labs/agent-browser) | `0.16.3` | `0.26.0` |
| [csv-parse](https://github.com/adaltas/node-csv/tree/HEAD/packages/csv-parse) | `6.0.0` | `6.2.1` |
| [dotenv](https://github.com/motdotla/dotenv) | `17.2.0` | `17.4.2` |
| [electron](https://github.com/electron/electron) | `39.8.5` | `41.3.0` |
| [esbuild](https://github.com/evanw/esbuild) | `0.25.6` | `0.28.0` |
| [eslint](https://github.com/eslint/eslint) | `9.30.1` | `9.39.4` |
| [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc) | `51.3.4` | `62.9.0` |
| [fastq](https://github.com/mcollina/fastq) | `1.19.1` | `1.20.1` |
| [glob](https://github.com/isaacs/node-glob) | `11.1.0` | `13.0.6` |
| [mobx](https://github.com/mobxjs/mobx) | `6.13.7` | `6.15.0` |
| [mobx-react-lite](https://github.com/mobxjs/mobx) | `4.1.0` | `4.1.1` |
| [open](https://github.com/sindresorhus/open) | `10.1.2` | `11.0.0` |
| [openai](https://github.com/openai/openai-node) | `6.7.0` | `6.34.0` |
| [playwright](https://github.com/microsoft/playwright) | `1.58.2` | `1.59.1` |
| [prettier](https://github.com/prettier/prettier) | `3.6.2` | `3.8.3` |
| [rimraf](https://github.com/isaacs/rimraf) | `6.0.1` | `6.1.3` |
| [shiki](https://github.com/shikijs/shiki/tree/HEAD/packages/shiki) | `1.15.2` | `4.0.2` |
| [sinon](https://github.com/sinonjs/sinon) | `21.0.1` | `21.1.2` |
| [@types/sinon](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/sinon) | `17.0.4` | `21.0.1` |
| [tar](https://github.com/isaacs/node-tar) | `7.5.11` | `7.5.13` |
| [@types/tar](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/tar) | `6.1.13` | `7.0.87` |
| [tsx](https://github.com/privatenumber/tsx) | `4.20.3` | `4.21.0` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.8.3` | `6.0.3` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.36.0` | `8.59.0` |
| [vite-plugin-top-level-await](https://github.com/Menci/vite-plugin-top-level-await) | `1.5.0` | `1.6.0` |
| [vite-plugin-wasm](https://github.com/Menci/vite-plugin-wasm) | `3.5.0` | `3.6.0` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `3.2.4` | `4.1.5` |
| [yargs](https://github.com/yargs/yargs) | `17.7.2` | `18.0.0` |
| [zod](https://github.com/colinhacks/zod) | `3.25.76` | `4.3.6` |



Updates `@anthropic-ai/claude-agent-sdk` from 0.2.92 to 0.2.119
- [Release notes](https://github.com/anthropics/claude-agent-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/claude-agent-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/claude-agent-sdk-typescript@v0.2.92...v0.2.119)

Updates `@anthropic-ai/sdk` from 0.82.0 to 0.91.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.82.0...sdk-v0.91.0)

Updates `@github/copilot` from 1.0.17 to 1.0.35
- [Release notes](https://github.com/github/copilot-cli/releases)
- [Changelog](https://github.com/github/copilot-cli/blob/main/changelog.md)
- [Commits](github/copilot-cli@v1.0.17...v1.0.35)

Updates `@google/genai` from 1.25.0 to 1.50.1
- [Release notes](https://github.com/googleapis/js-genai/releases)
- [Changelog](https://github.com/googleapis/js-genai/blob/main/CHANGELOG.md)
- [Commits](googleapis/js-genai@v1.25.0...v1.50.1)

Updates `@opentelemetry/api` from 1.9.0 to 1.9.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v1.9.0...v1.9.1)

Updates `@opentelemetry/api-logs` from 0.212.0 to 0.215.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.212.0...experimental/v0.215.0)

Updates `@opentelemetry/exporter-logs-otlp-grpc` from 0.212.0 to 0.215.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.212.0...experimental/v0.215.0)

Updates `@opentelemetry/exporter-logs-otlp-http` from 0.212.0 to 0.215.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.212.0...experimental/v0.215.0)

Updates `@opentelemetry/exporter-metrics-otlp-grpc` from 0.212.0 to 0.215.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.212.0...experimental/v0.215.0)

Updates `@opentelemetry/exporter-metrics-otlp-http` from 0.212.0 to 0.215.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.212.0...experimental/v0.215.0)

Updates `@opentelemetry/exporter-trace-otlp-grpc` from 0.212.0 to 0.215.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.212.0...experimental/v0.215.0)

Updates `@opentelemetry/exporter-trace-otlp-http` from 0.212.0 to 0.215.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.212.0...experimental/v0.215.0)

Updates `@opentelemetry/resources` from 2.5.1 to 2.7.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v2.5.1...v2.7.0)

Updates `@opentelemetry/sdk-logs` from 0.212.0 to 0.215.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.212.0...experimental/v0.215.0)

Updates `@opentelemetry/sdk-metrics` from 2.5.1 to 2.7.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v2.5.1...v2.7.0)

Updates `@opentelemetry/sdk-trace-node` from 2.5.1 to 2.7.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v2.5.1...v2.7.0)

Updates `@opentelemetry/semantic-conventions` from 1.39.0 to 1.40.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@semconv/v1.39.0...semconv/v1.40.0)

Updates `@sinclair/typebox` from 0.34.41 to 0.34.49
- [Commits](https://github.com/sinclairzx81/sinclair-typebox/commits/0.34.49)

Updates `@vscode/tree-sitter-wasm` from 0.0.5-php.2 to 0.0.5
- [Release notes](https://github.com/Microsoft/vscode-tree-sitter-wasm/releases)
- [Changelog](https://github.com/microsoft/vscode-tree-sitter-wasm/blob/main/CHANGELOG.md)
- [Commits](microsoft/vscode-tree-sitter-wasm@v0.0.5-php.2...v0.0.5)

Updates `@xterm/headless` from 5.5.0 to 6.0.0
- [Release notes](https://github.com/xtermjs/xterm.js/releases)
- [Commits](xtermjs/xterm.js@5.5.0...6.0.0)

Updates `ajv` from 8.18.0 to 8.20.0
- [Release notes](https://github.com/ajv-validator/ajv/releases)
- [Commits](ajv-validator/ajv@v8.18.0...v8.20.0)

Updates `applicationinsights` from 2.9.7 to 2.9.8
- [Release notes](https://github.com/microsoft/ApplicationInsights-node.js/releases)
- [Changelog](https://github.com/microsoft/ApplicationInsights-node.js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/microsoft/ApplicationInsights-node.js/commits)

Updates `best-effort-json-parser` from 1.2.1 to 1.4.0
- [Commits](beenotung/best-effort-json-parser@v1.2.1...v1.4.0)

Updates `diff` from 8.0.3 to 9.0.0
- [Changelog](https://github.com/kpdecker/jsdiff/blob/master/release-notes.md)
- [Commits](kpdecker/jsdiff@v8.0.3...v9.0.0)

Updates `dompurify` from 3.3.2 to 3.4.1
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.3.2...3.4.1)

Updates `isbinaryfile` from 5.0.4 to 6.0.0
- [Release notes](https://github.com/gjtorikian/isBinaryFile/releases)
- [Changelog](https://github.com/gjtorikian/isBinaryFile/blob/main/CHANGELOG.md)
- [Commits](gjtorikian/isBinaryFile@5.0.4...v6.0.0)

Updates `lru-cache` from 11.1.0 to 11.3.5
- [Changelog](https://github.com/isaacs/node-lru-cache/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-lru-cache@v11.1.0...v11.3.5)

Updates `minimatch` from 10.2.4 to 10.2.5
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v10.2.4...v10.2.5)

Updates `undici` from 7.24.1 to 8.1.0
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v7.24.1...v8.1.0)

Updates `vscode-tas-client` from 0.1.84 to 0.1.86

Updates `@azure/keyvault-secrets` from 4.10.0 to 4.11.1
- [Release notes](https://github.com/Azure/azure-sdk-for-js/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-js/blob/main/documentation/Changelog-for-next-generation.md)
- [Commits](https://github.com/Azure/azure-sdk-for-js/compare/@azure/keyvault-secrets_4.10.0...@azure/keyvault-secrets_4.11.1)

Updates `@azure/msal-node` from 3.6.3 to 5.1.4
- [Release notes](https://github.com/AzureAD/microsoft-authentication-library-for-js/releases)
- [Commits](AzureAD/microsoft-authentication-library-for-js@msal-node-v3.6.3...msal-node-v5.1.4)

Updates `@fluentui/react-components` from 9.66.6 to 9.73.8
- [Release notes](https://github.com/microsoft/fluentui/releases)
- [Commits](https://github.com/microsoft/fluentui/commits)

Updates `@fluentui/react-icons` from 2.0.305 to 2.0.324
- [Changelog](https://github.com/microsoft/fluentui-system-icons/blob/main/docs/releases.md)
- [Commits](https://github.com/microsoft/fluentui-system-icons/commits)

Updates `@octokit/types` from 14.1.0 to 16.0.0
- [Release notes](https://github.com/octokit/types.ts/releases)
- [Commits](octokit/types.ts@v14.1.0...v16.0.0)

Updates `@parcel/watcher` from 2.5.1 to 2.5.6
- [Release notes](https://github.com/parcel-bundler/watcher/releases)
- [Commits](parcel-bundler/watcher@v2.5.1...v2.5.6)

Updates `@types/node` from 22.16.3 to 22.19.17
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/picomatch` from 4.0.0 to 4.0.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/picomatch)

Updates `@typescript-eslint/eslint-plugin` from 8.36.0 to 8.59.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.59.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.36.0 to 8.59.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.59.0/packages/parser)

Updates `@typescript-eslint/typescript-estree` from 8.36.0 to 8.59.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-estree/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.59.0/packages/typescript-estree)

Updates `@vitest/coverage-v8` from 3.2.4 to 4.1.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.5/packages/coverage-v8)

Updates `@vscode/test-cli` from 0.0.11 to 0.0.12
- [Changelog](https://github.com/microsoft/vscode-test-cli/blob/main/CHANGELOG.md)
- [Commits](https://github.com/Microsoft/vscode-test-cli/commits)

Updates `@vscode/vsce` from 3.6.0 to 3.9.1
- [Release notes](https://github.com/Microsoft/vsce/releases)
- [Commits](microsoft/vscode-vsce@v3.6.0...v3.9.1)

Updates `agent-browser` from 0.16.3 to 0.26.0
- [Release notes](https://github.com/vercel-labs/agent-browser/releases)
- [Changelog](https://github.com/vercel-labs/agent-browser/blob/main/CHANGELOG.md)
- [Commits](vercel-labs/agent-browser@v0.16.3...v0.26.0)

Updates `csv-parse` from 6.0.0 to 6.2.1
- [Changelog](https://github.com/adaltas/node-csv/blob/master/packages/csv-parse/CHANGELOG.md)
- [Commits](https://github.com/adaltas/node-csv/commits/csv-parse@6.2.1/packages/csv-parse)

Updates `dotenv` from 17.2.0 to 17.4.2
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v17.2.0...v17.4.2)

Updates `electron` from 39.8.5 to 41.3.0
- [Release notes](https://github.com/electron/electron/releases)
- [Commits](electron/electron@v39.8.5...v41.3.0)

Updates `esbuild` from 0.25.6 to 0.28.0
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2025.md)
- [Commits](evanw/esbuild@v0.25.6...v0.28.0)

Updates `eslint` from 9.30.1 to 9.39.4
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v9.30.1...v9.39.4)

Updates `eslint-plugin-jsdoc` from 51.3.4 to 62.9.0
- [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases)
- [Commits](gajus/eslint-plugin-jsdoc@v51.3.4...v62.9.0)

Updates `fastq` from 1.19.1 to 1.20.1
- [Release notes](https://github.com/mcollina/fastq/releases)
- [Commits](mcollina/fastq@v1.19.1...v1.20.1)

Updates `glob` from 11.1.0 to 13.0.6
- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)
- [Commits](isaacs/node-glob@v11.1.0...v13.0.6)

Updates `mobx` from 6.13.7 to 6.15.0
- [Release notes](https://github.com/mobxjs/mobx/releases)
- [Commits](https://github.com/mobxjs/mobx/commits)

Updates `mobx-react-lite` from 4.1.0 to 4.1.1
- [Release notes](https://github.com/mobxjs/mobx/releases)
- [Commits](https://github.com/mobxjs/mobx/compare/mobx-react-lite@4.1.0...mobx-react-lite@4.1.1)

Updates `open` from 10.1.2 to 11.0.0
- [Release notes](https://github.com/sindresorhus/open/releases)
- [Commits](sindresorhus/open@v10.1.2...v11.0.0)

Updates `openai` from 6.7.0 to 6.34.0
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/master/CHANGELOG.md)
- [Commits](openai/openai-node@v6.7.0...v6.34.0)

Updates `playwright` from 1.58.2 to 1.59.1
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.58.2...v1.59.1)

Updates `prettier` from 3.6.2 to 3.8.3
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.6.2...3.8.3)

Updates `rimraf` from 6.0.1 to 6.1.3
- [Changelog](https://github.com/isaacs/rimraf/blob/main/CHANGELOG.md)
- [Commits](isaacs/rimraf@v6.0.1...v6.1.3)

Updates `shiki` from 1.15.2 to 4.0.2
- [Release notes](https://github.com/shikijs/shiki/releases)
- [Commits](https://github.com/shikijs/shiki/commits/v4.0.2/packages/shiki)

Updates `sinon` from 21.0.1 to 21.1.2
- [Release notes](https://github.com/sinonjs/sinon/releases)
- [Changelog](https://github.com/sinonjs/sinon/blob/main/docs/changelog.md)
- [Commits](sinonjs/sinon@v21.0.1...v21.1.2)

Updates `@types/sinon` from 17.0.4 to 21.0.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/sinon)

Updates `tar` from 7.5.11 to 7.5.13
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v7.5.11...v7.5.13)

Updates `@types/tar` from 6.1.13 to 7.0.87
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/tar)

Updates `tsx` from 4.20.3 to 4.21.0
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.20.3...v4.21.0)

Updates `typescript` from 5.8.3 to 6.0.3
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v5.8.3...v6.0.3)

Updates `typescript-eslint` from 8.36.0 to 8.59.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.59.0/packages/typescript-eslint)

Updates `vite-plugin-top-level-await` from 1.5.0 to 1.6.0
- [Commits](Menci/vite-plugin-top-level-await@v1.5.0...v1.6.0)

Updates `vite-plugin-wasm` from 3.5.0 to 3.6.0
- [Commits](Menci/vite-plugin-wasm@v3.5.0...v3.6.0)

Updates `vitest` from 3.2.4 to 4.1.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.5/packages/vitest)

Updates `yargs` from 17.7.2 to 18.0.0
- [Release notes](https://github.com/yargs/yargs/releases)
- [Changelog](https://github.com/yargs/yargs/blob/main/CHANGELOG.md)
- [Commits](yargs/yargs@v17.7.2...v18.0.0)

Updates `zod` from 3.25.76 to 4.3.6
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v3.25.76...v4.3.6)

---
updated-dependencies:
- dependency-name: "@anthropic-ai/claude-agent-sdk"
  dependency-version: 0.2.119
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.91.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@github/copilot"
  dependency-version: 1.0.35
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: "@google/genai"
  dependency-version: 1.50.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@opentelemetry/api"
  dependency-version: 1.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: "@opentelemetry/api-logs"
  dependency-version: 0.215.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@opentelemetry/exporter-logs-otlp-grpc"
  dependency-version: 0.215.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@opentelemetry/exporter-logs-otlp-http"
  dependency-version: 0.215.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@opentelemetry/exporter-metrics-otlp-grpc"
  dependency-version: 0.215.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@opentelemetry/exporter-metrics-otlp-http"
  dependency-version: 0.215.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@opentelemetry/exporter-trace-otlp-grpc"
  dependency-version: 0.215.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@opentelemetry/exporter-trace-otlp-http"
  dependency-version: 0.215.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@opentelemetry/resources"
  dependency-version: 2.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@opentelemetry/sdk-logs"
  dependency-version: 0.215.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@opentelemetry/sdk-metrics"
  dependency-version: 2.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@opentelemetry/sdk-trace-node"
  dependency-version: 2.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@opentelemetry/semantic-conventions"
  dependency-version: 1.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@sinclair/typebox"
  dependency-version: 0.34.49
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: "@vscode/tree-sitter-wasm"
  dependency-version: 0.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: "@xterm/headless"
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: ajv
  dependency-version: 8.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: applicationinsights
  dependency-version: 2.9.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: best-effort-json-parser
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: diff
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: dompurify
  dependency-version: 3.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: isbinaryfile
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: lru-cache
  dependency-version: 11.3.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: minimatch
  dependency-version: 10.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: undici
  dependency-version: 8.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: vscode-tas-client
  dependency-version: 0.1.86
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: "@azure/keyvault-secrets"
  dependency-version: 4.11.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@azure/msal-node"
  dependency-version: 5.1.4
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: "@fluentui/react-components"
  dependency-version: 9.73.8
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@fluentui/react-icons"
  dependency-version: 2.0.324
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: "@octokit/types"
  dependency-version: 16.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: "@parcel/watcher"
  dependency-version: 2.5.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: "@types/node"
  dependency-version: 22.19.17
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@types/picomatch"
  dependency-version: 4.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.59.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.59.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@typescript-eslint/typescript-estree"
  dependency-version: 8.59.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.1.5
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: "@vscode/test-cli"
  dependency-version: 0.0.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: "@vscode/vsce"
  dependency-version: 3.9.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: agent-browser
  dependency-version: 0.26.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: csv-parse
  dependency-version: 6.2.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: dotenv
  dependency-version: 17.4.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: electron
  dependency-version: 41.3.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: esbuild
  dependency-version: 0.28.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: eslint
  dependency-version: 9.39.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: eslint-plugin-jsdoc
  dependency-version: 62.9.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: fastq
  dependency-version: 1.20.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: glob
  dependency-version: 13.0.6
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: mobx
  dependency-version: 6.15.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: mobx-react-lite
  dependency-version: 4.1.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: open
  dependency-version: 11.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: openai
  dependency-version: 6.34.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: playwright
  dependency-version: 1.59.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: prettier
  dependency-version: 3.8.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: rimraf
  dependency-version: 6.1.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: shiki
  dependency-version: 4.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: sinon
  dependency-version: 21.1.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@types/sinon"
  dependency-version: 21.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: tar
  dependency-version: 7.5.13
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: "@types/tar"
  dependency-version: 7.0.87
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: tsx
  dependency-version: 4.21.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: typescript
  dependency-version: 6.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: typescript-eslint
  dependency-version: 8.59.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: vite-plugin-top-level-await
  dependency-version: 1.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: vite-plugin-wasm
  dependency-version: 3.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: vitest
  dependency-version: 4.1.5
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: yargs
  dependency-version: 18.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: zod
  dependency-version: 4.3.6
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 24, 2026
@rzhao271
Copy link
Copy Markdown
Collaborator

Closing. Bumping TypeScript like that is too risky.

@rzhao271 rzhao271 closed this Apr 24, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 24, 2026

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/all-1b5b3d9dbb branch April 24, 2026 17:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant