Skip to content

build(deps): bump the all group across 1 directory with 75 updates#5095

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/all-d28a03f1fa
Open

build(deps): bump the all group across 1 directory with 75 updates#5095
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/all-d28a03f1fa

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 1, 2026

Bumps the all group with 74 updates in the / directory:

Package From To
@anthropic-ai/claude-agent-sdk 0.2.92 0.2.126
@anthropic-ai/sdk 0.82.0 0.92.0
@github/copilot 1.0.17 1.0.40
@google/genai 1.25.0 1.51.0
@opentelemetry/api 1.9.0 1.9.1
@opentelemetry/api-logs 0.212.0 0.216.0
@opentelemetry/exporter-logs-otlp-grpc 0.212.0 0.216.0
@opentelemetry/exporter-logs-otlp-http 0.212.0 0.216.0
@opentelemetry/exporter-metrics-otlp-grpc 0.212.0 0.216.0
@opentelemetry/exporter-metrics-otlp-http 0.212.0 0.216.0
@opentelemetry/exporter-trace-otlp-grpc 0.212.0 0.216.0
@opentelemetry/exporter-trace-otlp-http 0.212.0 0.216.0
@opentelemetry/resources 2.5.1 2.7.1
@opentelemetry/sdk-logs 0.212.0 0.216.0
@opentelemetry/sdk-trace-node 2.5.1 2.7.1
@opentelemetry/semantic-conventions 1.39.0 1.40.0
@sinclair/typebox 0.34.41 0.34.49
@vscode/copilot-api 0.2.19 0.3.0
@vscode/tree-sitter-wasm 0.0.5-php.2 0.0.5
@xterm/headless 5.5.0 6.0.0
ajv 8.18.0 8.20.0
applicationinsights 2.9.7 2.9.8
best-effort-json-parser 1.2.1 1.4.0
diff 8.0.3 9.0.0
dompurify 3.3.2 3.4.2
isbinaryfile 5.0.4 6.0.0
lru-cache 11.1.0 11.3.5
minimatch 10.2.4 10.2.5
undici 7.24.1 8.1.0
vscode-tas-client 0.1.84 0.1.86
@azure/keyvault-secrets 4.10.0 4.11.1
@azure/msal-node 3.6.3 5.1.5
@fluentui/react-components 9.66.6 9.73.8
@fluentui/react-icons 2.0.305 2.0.325
@octokit/types 14.1.0 16.0.0
@parcel/watcher 2.5.1 2.5.6
@types/node 22.16.3 22.19.17
@types/picomatch 4.0.0 4.0.3
@typescript-eslint/eslint-plugin 8.36.0 8.59.1
@typescript-eslint/parser 8.36.0 8.59.1
@typescript-eslint/typescript-estree 8.36.0 8.59.1
@vitest/coverage-v8 3.2.4 4.1.5
@vscode/test-cli 0.0.11 0.0.12
@vscode/vsce 3.6.0 3.9.1
agent-browser 0.16.3 0.26.0
csv-parse 6.0.0 6.2.1
dotenv 17.2.0 17.4.2
electron 39.8.5 41.4.0
esbuild 0.25.6 0.28.0
eslint 9.30.1 9.39.4
eslint-plugin-jsdoc 51.3.4 62.9.0
eslint-plugin-no-only-tests 3.3.0 3.4.0
fastq 1.19.1 1.20.1
glob 11.1.0 13.0.6
mobx 6.13.7 6.15.0
mobx-react-lite 4.1.0 4.1.1
open 10.1.2 11.0.0
openai 6.7.0 6.35.0
playwright 1.58.2 1.59.1
prettier 3.6.2 3.8.3
rimraf 6.0.1 6.1.3
shiki 1.15.2 4.0.2
sinon 21.0.1 21.1.2
@types/sinon 17.0.4 21.0.1
tar 7.5.11 7.5.13
@types/tar 6.1.13 7.0.87
tsx 4.20.3 4.21.0
typescript 5.8.3 6.0.3
typescript-eslint 8.36.0 8.59.1
vite-plugin-top-level-await 1.5.0 1.6.0
vite-plugin-wasm 3.5.0 3.6.0
vitest 3.2.4 4.1.5
yargs 17.7.2 18.0.0
zod 3.25.76 4.4.1

Updates @anthropic-ai/claude-agent-sdk from 0.2.92 to 0.2.126

Release notes

Sourced from @​anthropic-ai/claude-agent-sdk's releases.

v0.2.126

What's changed

  • Added origin to result messages (SDKResultSuccess / SDKResultError) — forwards the triggering message's SDKMessageOrigin so consumers can distinguish user-prompted results from task-notification followups

Update

npm install @anthropic-ai/claude-agent-sdk@0.2.126
# or
yarn add @anthropic-ai/claude-agent-sdk@0.2.126
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.2.126
# or
bun add @anthropic-ai/claude-agent-sdk@0.2.126

v0.2.123

What's changed

  • Updated to parity with Claude Code v2.1.123

Update

npm install @anthropic-ai/claude-agent-sdk@0.2.123
# or
yarn add @anthropic-ai/claude-agent-sdk@0.2.123
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.2.123
# or
bun add @anthropic-ai/claude-agent-sdk@0.2.123

v0.2.122

What's changed

  • Updated to parity with Claude Code v2.1.122

Update

npm install @anthropic-ai/claude-agent-sdk@0.2.122
# or
yarn add @anthropic-ai/claude-agent-sdk@0.2.122
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.2.122
# or
bun add @anthropic-ai/claude-agent-sdk@0.2.122

... (truncated)

Changelog

Sourced from @​anthropic-ai/claude-agent-sdk's changelog.

0.2.126

  • Added origin to result messages (SDKResultSuccess / SDKResultError) — forwards the triggering message's SDKMessageOrigin so consumers can distinguish user-prompted results from task-notification followups

0.2.125

  • Updated to parity with Claude Code v2.1.125

0.2.124

  • Updated to parity with Claude Code v2.1.124

0.2.123

  • Updated to parity with Claude Code v2.1.123

0.2.122

  • Updated to parity with Claude Code v2.1.122

0.2.121

  • Added updatedToolOutput to PostToolUseHookSpecificOutput for replacing tool output on all tools. updatedMCPToolOutput is deprecated.

0.2.120

  • Added skills option (string[] | 'all') to control which Skills are loaded into the main session, matching the Python SDK

0.2.119

  • Added forwardSubagentText option to stream subagent text deltas to SDK consumers
  • excludeDynamicSections now keeps static auto-memory instructions in the cacheable system-prompt block; only the per-user memory directory path and per-machine environment values are relocated to the first user message
  • Long-running SDK sessions now reconnect claude.ai-proxied MCP servers after a transport-stream abort
  • SessionStore.append() failures are now retried up to 3 times with short backoff before the batch is dropped and mirror_error is emitted

0.2.118

  • Added Options.managedSettings for embedders to pass policy-tier settings to the spawned CLI in-memory, honored below IT-controlled managed sources

0.2.117

  • Updated to parity with Claude Code v2.1.117

0.2.116

  • Updated to parity with Claude Code v2.1.116

0.2.115

  • Updated to parity with Claude Code v2.1.115

... (truncated)

Commits

Updates @anthropic-ai/sdk from 0.82.0 to 0.92.0

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk: v0.92.0

0.92.0 (2026-04-30)

Full Changelog: sdk-v0.91.1...sdk-v0.92.0

Features

  • api: improve Managed Agents APIs (ca1bf4a)
  • support setting headers via env (32f67d4)

Bug Fixes

  • bedrock: throw APIError for error events delivered in chunk frames (#1021) (3ae887b)

Chores

  • format: run eslint and prettier separately (7ce257c)
  • internal: codegen related update (f08cc77)

sdk: v0.91.1

0.91.1 (2026-04-24)

Full Changelog: sdk-v0.91.0...sdk-v0.91.1

Bug Fixes

  • memory: use restrictive file mode for memory files (#901) (6db3b7e)

Chores

  • formatter: run prettier and eslint separately (974d22f)

sdk: v0.91.0

0.91.0 (2026-04-23)

Full Changelog: sdk-v0.90.0...sdk-v0.91.0

Features

  • api: CMA Memory public beta (ddf732f)
  • bedrock: use auth header for mantle client (#866) (aec801a)

Bug Fixes

  • api: fix errors in api spec (ae10768)
  • api: restore missing features (1a5b47b)

... (truncated)

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.92.0 (2026-04-30)

Full Changelog: sdk-v0.91.1...sdk-v0.92.0

Features

  • api: improve Managed Agents APIs (ca1bf4a)
  • support setting headers via env (32f67d4)

Bug Fixes

  • bedrock: throw APIError for error events delivered in chunk frames (#1021) (3ae887b)

Chores

  • format: run eslint and prettier separately (7ce257c)
  • internal: codegen related update (f08cc77)

0.91.1 (2026-04-24)

Full Changelog: sdk-v0.91.0...sdk-v0.91.1

Bug Fixes

  • memory: use restrictive file mode for memory files (#901) (6db3b7e)

Chores

  • formatter: run prettier and eslint separately (974d22f)

0.91.0 (2026-04-23)

Full Changelog: sdk-v0.90.0...sdk-v0.91.0

Features

  • api: CMA Memory public beta (ddf732f)
  • bedrock: use auth header for mantle client (#866) (aec801a)

Bug Fixes

  • api: fix errors in api spec (ae10768)
  • api: restore missing features (1a5b47b)

Chores

... (truncated)

Commits

Updates @github/copilot from 1.0.17 to 1.0.40

Release notes

Sourced from @​github/copilot's releases.

1.0.40

2026-05-01

  • PR branch decoration displays correctly in the footer regardless of model name length
  • /clear and /new reset the active custom agent selection
  • Assistant responses stream with smoother text output
  • copilot plugin list shows the correct version after running copilot plugin update
  • Add support for client_credentials OAuth grant type for MCP servers, enabling fully headless authentication without a browser
  • Subagents correctly evaluate tool search support for their own model instead of inheriting the parent session's settings
  • Switching sessions with /new or /resume no longer carries over pending messages to the new session
  • CLI no longer hangs at 100% CPU when sending a large file attachment
  • Resume session picker no longer shows duplicate entries for the same Mission Control-backed session
  • Session resume selector displays summaries on a single line, truncated to fit the column width
  • Print "Exiting…" to stderr immediately on Ctrl+C during prompt mode so shutdown progress is visible
  • /research uses an orchestrator/subagent model for more thorough and reliable deep research results
  • Autopilot mode now limits continuation messages to 5 by default (configurable with --max-autopilot-continues)
  • Automatically clean up old CLI package versions from disk during auto-update
  • Remote session statusline shows the remote working directory and branch instead of local context
  • /update no longer re-submits the original -i prompt after restarting
  • Detect Azure DevOps repositories and auto-disable the GitHub MCP server
  • Session history, file tracking, and the /chronicle command are now available to all users
  • Skills are available as slash commands in ACP clients, matching the CLI experience
  • Resuming a session no longer falsely reports it as in use after a previous CLI process exited unexpectedly
  • --config-dir now propagates correctly to plugin subcommands; --config-dir is deprecated in favor of COPILOT_HOME
  • Mouse selection works while the /ask response dialog is open, so its content can be highlighted and copied
  • Improve CLI startup speed by loading custom CA certificates asynchronously
  • Remote control link shows the full URL in the timeline instead of 'Open in browser'
  • ACP clients (e.g. Zed) now display the agent's live plan as it works through multi-step tasks
  • Add toggle for custom statusLine.command visibility in the statusline picker
  • ACP clients can now list and switch custom agents via the agent config option
  • MCP OAuth tokens cache correctly when multiple servers share the same URL but use different static OAuth client IDs
  • MCP tool names with dots or other invalid characters are now sanitized correctly
  • Ctrl+C and double-Esc remove pending queued messages one at a time instead of all at once
  • Slash command suggestions rank prefix matches above fuzzy matches
  • Prompt mode (-p) now gates repo hooks and workspace MCP behind opt-in env vars (GITHUB_COPILOT_PROMPT_MODE_REPO_HOOKS and GITHUB_COPILOT_PROMPT_MODE_WORKSPACE_MCP) for secure-by-default behavior

1.0.40-3

Added

  • Add support for client_credentials OAuth grant type for MCP servers, enabling fully headless authentication without a browser

Improved

  • Print "Exiting…" to stderr immediately on Ctrl+C during prompt mode so shutdown progress is visible
  • /research uses an orchestrator/subagent model for more thorough and reliable deep research results
  • Autopilot mode now limits continuation messages to 5 by default (configurable with --max-autopilot-continues)
  • Automatically clean up old CLI package versions from disk during auto-update
  • Remote session statusline shows the remote working directory and branch instead of local context

Fixed

  • Subagents correctly evaluate tool search support for their own model instead of inheriting the parent session's settings
  • Switching sessions with /new or /resume no longer carries over pending messages to the new session

... (truncated)

Changelog

Sourced from @​github/copilot's changelog.

1.0.40 - 2026-05-01

  • PR branch decoration displays correctly in the footer regardless of model name length
  • /clear and /new reset the active custom agent selection
  • Assistant responses stream with smoother text output
  • copilot plugin list shows the correct version after running copilot plugin update
  • Add support for client_credentials OAuth grant type for MCP servers, enabling fully headless authentication without a browser
  • Subagents correctly evaluate tool search support for their own model instead of inheriting the parent session's settings
  • Switching sessions with /new or /resume no longer carries over pending messages to the new session
  • CLI no longer hangs at 100% CPU when sending a large file attachment
  • Resume session picker no longer shows duplicate entries for the same Mission Control-backed session
  • Session resume selector displays summaries on a single line, truncated to fit the column width
  • Print "Exiting…" to stderr immediately on Ctrl+C during prompt mode so shutdown progress is visible
  • /research uses an orchestrator/subagent model for more thorough and reliable deep research results
  • Autopilot mode now limits continuation messages to 5 by default (configurable with --max-autopilot-continues)
  • Automatically clean up old CLI package versions from disk during auto-update
  • Remote session statusline shows the remote working directory and branch instead of local context
  • /update no longer re-submits the original -i prompt after restarting
  • Detect Azure DevOps repositories and auto-disable the GitHub MCP server
  • Session history, file tracking, and the /chronicle command are now available to all users
  • Skills are available as slash commands in ACP clients, matching the CLI experience
  • Resuming a session no longer falsely reports it as in use after a previous CLI process exited unexpectedly
  • --config-dir now propagates correctly to plugin subcommands; --config-dir is deprecated in favor of COPILOT_HOME
  • Mouse selection works while the /ask response dialog is open, so its content can be highlighted and copied
  • Improve CLI startup speed by loading custom CA certificates asynchronously
  • Remote control link shows the full URL in the timeline instead of 'Open in browser'
  • ACP clients (e.g. Zed) now display the agent's live plan as it works through multi-step tasks
  • Add toggle for custom statusLine.command visibility in the statusline picker
  • ACP clients can now list and switch custom agents via the agent config option
  • MCP OAuth tokens cache correctly when multiple servers share the same URL but use different static OAuth client IDs
  • MCP tool names with dots or other invalid characters are now sanitized correctly
  • Ctrl+C and double-Esc remove pending queued messages one at a time instead of all at once
  • Slash command suggestions rank prefix matches above fuzzy matches
  • Prompt mode (-p) now gates repo hooks and workspace MCP behind opt-in env vars (GITHUB_COPILOT_PROMPT_MODE_REPO_HOOKS and GITHUB_COPILOT_PROMPT_MODE_WORKSPACE_MCP) for secure-by-default behavior

1.0.39 - 2026-04-28

  • Allow ACP clients to toggle allow-all permission mode via session configuration
  • Add /compact, /context, /usage, and /env slash commands for ACP sessions
  • Press ctrl+x → b to move the current running task or shell command to the background
  • Transient pipe errors on child process stdio streams no longer cause crashes or trigger false crash reports
  • /remote status output now shows actionable hints for each connection state
  • Improve --resume session picker with better tab layout, status display, and progressive loading
  • Slash command argument picker opens immediately at exact command boundaries without requiring a trailing space

1.0.37 - 2026-04-27

  • Location-based permission persistence is now enabled by default, so approvals carry over across sessions for the same directory
  • Add copilot completion <bash|zsh|fish> subcommand to generate static shell completion scripts for subcommands, flags, and known choice values
  • Press s in the session picker to cycle sort order: relevance, last used, created, or name

... (truncated)

Commits
  • cb0ddf8 Update changelog.md for version 1.0.39
  • 4e5cb95 Update changelog.md for version 1.0.37
  • 6d1c577 Update changelog.md for version 1.0.36
  • d7a0581 Update changelog.md for version 1.0.35
  • 6594437 Update changelog.md for version 1.0.34
  • 75fbe0c Update changelog.md for version 1.0.33
  • 4e51f5a Update changelog.md for version 1.0.32
  • 3b72dea Update changelog.md for version 1.0.31
  • 2f883ed Update changelog.md for version 1.0.30
  • 709b59e Update changelog.md for version 1.0.29
  • Additional commits viewable in compare view

Updates @google/genai from 1.25.0 to 1.51.0

Release notes

Sourced from @​google/genai's releases.

v1.51.0

1.51.0 (2026-04-29)

Features

  • [Interactions] Add FileCitation.{custom_metadata,media_id,page_number} (9e08ba9)
  • Add output_info to BatchJob (5327c60)
  • Add gemini-3.1-flash-tts-preview model to options (35c941b)
  • Add ImageResizeMode for GenerateVideos (faa1088)
  • Add new Gemini Deep Research agent models (6f83a05)
  • Add Vertex Dataset input and output options for batch jobs (6aa848e)
  • interaction-api: Add grounding tool usage breakdown to Interaction Usage. (e1c31ad)
  • introduce enterprise flag and GOOGLE_GENAI_USE_ENTERPRISE env var (cf7ad52)
  • Replace the more ambiguous rate field with sample_rate. (6c80464)

v1.50.1

1.50.1 (2026-04-14)

Bug Fixes

  • Refactor Webhook types in GenAI SDKs for easier useage (5100abc)
  • Rename webhooks.retrieve to webhooks.get. (db6e771)

v1.50.0

1.50.0 (2026-04-13)

[!CAUTION] CRITICAL WARNING: Do not use this version if you are implementing or relying on webhooks. This release contains known issues regarding webhook sdk. Please use v1.50.1 or later.

Features

  • Add "eu" as a supported service location for Vertex AI platform. (2493f9c)
  • Add DeepResearchAgentConfig fields (3615ca2)
  • Add Live Avatar new fields (6a0ff96)
  • Add support for new audio MIME types: opus, alaw, and mulaw (7137f13)
  • add webhook and webhookConfig for js and python sdk (0f89605)
  • Add webhook_config to batches.create() and models.generate_videos() (894bc93)
  • Wire the webhook into python and js client. (b6c5d18)

v1.49.0

1.49.0 (2026-04-08)

Features

  • Introduce TYPE_L16 audio content and optional fields. (c62cb9a)

v1.48.0

... (truncated)

Changelog

Sourced from @​google/genai's changelog.

1.51.0 (2026-04-29)

Features

  • [Interactions] Add FileCitation.{custom_metadata,media_id,page_number} (9e08ba9)
  • Add output_info to BatchJob (5327c60)
  • Add gemini-3.1-flash-tts-preview model to options (35c941b)
  • Add ImageResizeMode for GenerateVideos (faa1088)
  • Add new Gemini Deep Research agent models (6f83a05)
  • Add Vertex Dataset input and output options for batch jobs (6aa848e)
  • interaction-api: Add grounding tool usage breakdown to Interaction Usage. (e1c31ad)
  • introduce enterprise flag and GOOGLE_GENAI_USE_ENTERPRISE env var (cf7ad52)
  • Replace the more ambiguous rate field with sample_rate. (6c80464)

1.50.1 (2026-04-14)

Bug Fixes

  • Refactor Webhook types in GenAI SDKs for easier useage (5100abc)
  • Rename webhooks.retrieve to webhooks.get. (db6e771)

1.50.0 (2026-04-13)

Features

  • Add "eu" as a supported service location for Vertex AI platform. (2493f9c)
  • Add DeepResearchAgentConfig fields (3615ca2)
  • Add Live Avatar new fields (6a0ff96)
  • Add support for new audio MIME types: opus, alaw, and mulaw (7137f13)
  • add webhook and webhookConfig for js and python sdk (0f89605)
  • Add webhook_config to batches.create() and models.generate_videos() (894bc93)
  • Wire the webhook into python and js client. (b6c5d18)

1.49.0 (2026-04-08)

Features

  • Introduce TYPE_L16 audio content and optional fields. (c62cb9a)

1.48.0 (2026-03-31)

Features

  • Support dedicated TextAnnotationDelta for streaming tool responses (89552ba)

... (truncated)

Commits
  • 61013d6 chore(main): release 1.51.0 (#1503)
  • 8137d23 chore: add the deprecation marker back
  • 734dab0 chore: no-op
  • 006286b chore: Add page number
  • 986bbed chore: Adjust Webhook update to better reflect modifiable fields
  • e1c31ad feat(interaction-api): Add grounding tool usage breakdown to Interaction Usage.
  • 26975d0 No public description
  • faa1088 feat: Add ImageResizeMode for GenerateVideos
  • 6c80464 feat: Replace the more ambiguous rate field with sample_rate.
  • 5327c60 feat: Add output_info to BatchJob
  • Additional commits viewable in compare view
Install script changes

This version adds preinstall script and modifies prepare script that run during installation. Review the package contents before updating.


Updates @opentelemetry/api from 1.9.0 to 1.9.1

Release notes

Sourced from @​opentelemetry/api's releases.

api/v1.9.1

1.9.1

🐛 (Bug Fix)

  • fix(api): prioritize esnext export condition as it is more specific #5458
  • fix(api): update diag consoleLogger to use original console methods to prevent infinite loop when a console instrumentation is present #6395
  • fix(api): use Attributes instead of deprecated SpanAttributes in SpanOptions #6478 @​overbalance
  • fix(diag): change types in DiagComponentLogger from any to unknown#5478 @​loganrosen
  • fix(api): re-introduce fallback chain for global utils #6523 @​pichlermarc

🏠 (Internal)

Changelog

Sourced from @​opentelemetry/api's changelog.

1.9.1

🐛 (Bug Fix)

🏠 (Internal)

  • chore: fix cross project links and missing implicitly exported types #3533 @​legendecas
  • feat(sdk-metrics): add exponential histogram mapping functions #3504 @​mwear
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​opentelemetry/api since your current version.


Updates @opentelemetry/api-logs from 0.212.0 to 0.216.0

Release notes

Sourced from @​opentelemetry/api-logs's releases.

experimental/v0.216.0

0.216.0

🚀 Features

🐛 Bug Fixes

  • fix(instrumentation-xml-http-request): avoid unwrapping XMLHttpRequest API when disabling #6611 @​david-luna
  • fix(instrumentation-fetch): tolerate non-writable globalThis.fetch and fix premature _isEnabled / _isFetchPatched flips in enable() @​brunorodmoreira
  • fix(instrumentation-xhr): resolve relative URLs before matching ignoreUrls #6551 @​Maximiliano-Zeballos
  • fix(sdk-node): fix setting of ViewOption#name from ConfigurationModel #6620 @​trentm
  • fix(web-common): add limit for timeout #6601 @​maryliag
  • fix(otlp-transformer): pin protobufjs@8.0.1 as protobufjs@8.0.3 is broken for browser use #6646

🏠 Internal

  • test(otlp-transformer): add metrics transform benchmark #6628 @​pichlermarc
  • refactor(opentelemetry-exporter-prometheus): do not call enforcePrometheusNamingConvention() multiple times per metric #6636 @​cjihrig

experimental/v0.215.0

0.215.0

💥 Breaking Changes

  • feat(sdk-logs)!: add required forceFlush() to LogRecordExporter interface #6356 @​pichlermarc
    • (user-facing): LogRecordExporter interface now requires a forceFlush() method to be implemented. Custom exporters will need to implement this method to continue working with the Logs SDK.
  • feat(api-logs, sdk-logs)!: add Logger#enabled() #6371 @​david-luna

🚀 Features

🐛 Bug Fixes

  • fix(instrumentation-fetch): preserve init overrides when input is a Request object #6421 @​akandic47
  • fix(otlp-exporter-base): limit Node.js HTTP transport response body to 4 MiB #6552 @​kartikgola
  • fix(instrumentation-fetch): avoid unwrapping fetch API when disabling #6575 @​david-luna
  • fix(web-common): add check for possible unsafe json parse #6589 @​maryliag
  • fix(otlp-transformer): add check for possible unsafe json parse #6588 @​maryliag

experimental/v0.214.0

0.214.0

💥 Breaking Changes

... (truncated)

Commits
  • 2400d83 chore: prepare next release (#6647)
  • f7a9b7c fix(otlp-transformer): pin protobufjs to 8.0.1 (#6646)
  • cb38d7f test(otlp-transformer): add metrics transfrom benchmark (#6628)
  • a28f12f fix(opentelemetry-core): defer tracestate vaidation (#6459)
  • b27c514 refactor(opentelemetry-exporter-prometheus): do not call `enforcePrometheusNa...
  • a2a8186 perf(sdk-trace-base): optimize TraceIdRatioBasedSampler hex parsing (#6284)
  • 4c0f3f1 feat(sdk-node): set TracerProvider in startNodeSDK() (#6607)
  • 417f2f1 fix(instr-xhr): do not unpatch XHR methods (#6611)
  • 47ac523 Revert "chore: allow browser maintainers to approve changelog edits" (#6627)
  • 86c621d fix(instrumentation-fetch): tolerate non-writable globalThis.fetch and fix pr...
  • Additional commits viewable in compare view

Updates @opentelemetry/exporter-logs-otlp-grpc from 0.212.0 to 0.216.0

Release notes

Sourced from @​opentelemetry/exporter-logs-otlp-grpc's releases.

experimental/v0.216.0

0.216.0

🚀 Features

🐛 Bug Fixes

  • fix(instrumentation-xml-http-request): avoid unwrapping XMLHttpRequest API when disabling #6611 @​david-luna
  • fix(instrumentation-fetch): tolerate non-writable globalThis.fetch and fix premature _isEnabled / _isFetchPatched flips in enable() @​brunorodmoreira
  • fix(instrumentation-xhr): resolve relative URLs before matching ignoreUrls #6551 @​Maximiliano-Zeballos
  • fix(sdk-node): fix setting of ViewOption#name from ConfigurationModel #6620 @​trentm
  • fix(web-common): add limit for timeout #6601 @​maryliag
  • fix(otlp-transformer): pin protobufjs@8.0.1 as protobufjs@8.0.3 is broken for browser use #6646

🏠 Internal

  • test(otlp-transformer): add metrics transform benchmark #6628 @​pichlermarc
  • refactor(opentelemetry-exporter-prometheus): do not call enforcePrometheusNamingConvention() multiple times per metric #6636 @​cjihrig

experimental/v0.215.0

0.215.0

💥 Breaking Changes

  • feat(sdk-logs)!: add required forceFlush() to LogRecordExporter in...

    Description has been truncated

@dependabot
build(deps): bump the all group across 1 directory with 75 updates
15587f0 
Bumps the all group with 74 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@anthropic-ai/claude-agent-sdk](https://github.com/anthropics/claude-agent-sdk-typescript) | `0.2.92` | `0.2.126` |
| [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.82.0` | `0.92.0` |
| [@github/copilot](https://github.com/github/copilot-cli) | `1.0.17` | `1.0.40` |
| [@google/genai](https://github.com/googleapis/js-genai) | `1.25.0` | `1.51.0` |
| [@opentelemetry/api](https://github.com/open-telemetry/opentelemetry-js) | `1.9.0` | `1.9.1` |
| [@opentelemetry/api-logs](https://github.com/open-telemetry/opentelemetry-js) | `0.212.0` | `0.216.0` |
| [@opentelemetry/exporter-logs-otlp-grpc](https://github.com/open-telemetry/opentelemetry-js) | `0.212.0` | `0.216.0` |
| [@opentelemetry/exporter-logs-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.212.0` | `0.216.0` |
| [@opentelemetry/exporter-metrics-otlp-grpc](https://github.com/open-telemetry/opentelemetry-js) | `0.212.0` | `0.216.0` |
| [@opentelemetry/exporter-metrics-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.212.0` | `0.216.0` |
| [@opentelemetry/exporter-trace-otlp-grpc](https://github.com/open-telemetry/opentelemetry-js) | `0.212.0` | `0.216.0` |
| [@opentelemetry/exporter-trace-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.212.0` | `0.216.0` |
| [@opentelemetry/resources](https://github.com/open-telemetry/opentelemetry-js) | `2.5.1` | `2.7.1` |
| [@opentelemetry/sdk-logs](https://github.com/open-telemetry/opentelemetry-js) | `0.212.0` | `0.216.0` |
| [@opentelemetry/sdk-trace-node](https://github.com/open-telemetry/opentelemetry-js) | `2.5.1` | `2.7.1` |
| [@opentelemetry/semantic-conventions](https://github.com/open-telemetry/opentelemetry-js) | `1.39.0` | `1.40.0` |
| [@sinclair/typebox](https://github.com/sinclairzx81/sinclair-typebox) | `0.34.41` | `0.34.49` |
| [@vscode/copilot-api](https://github.com/Microsoft/vscode-extension-telemetry) | `0.2.19` | `0.3.0` |
| [@vscode/tree-sitter-wasm](https://github.com/Microsoft/vscode-tree-sitter-wasm) | `0.0.5-php.2` | `0.0.5` |
| [@xterm/headless](https://github.com/xtermjs/xterm.js) | `5.5.0` | `6.0.0` |
| [ajv](https://github.com/ajv-validator/ajv) | `8.18.0` | `8.20.0` |
| [applicationinsights](https://github.com/microsoft/ApplicationInsights-node.js) | `2.9.7` | `2.9.8` |
| [best-effort-json-parser](https://github.com/beenotung/best-effort-json-parser) | `1.2.1` | `1.4.0` |
| [diff](https://github.com/kpdecker/jsdiff) | `8.0.3` | `9.0.0` |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.3.2` | `3.4.2` |
| [isbinaryfile](https://github.com/gjtorikian/isBinaryFile) | `5.0.4` | `6.0.0` |
| [lru-cache](https://github.com/isaacs/node-lru-cache) | `11.1.0` | `11.3.5` |
| [minimatch](https://github.com/isaacs/minimatch) | `10.2.4` | `10.2.5` |
| [undici](https://github.com/nodejs/undici) | `7.24.1` | `8.1.0` |
| vscode-tas-client | `0.1.84` | `0.1.86` |
| [@azure/keyvault-secrets](https://github.com/Azure/azure-sdk-for-js) | `4.10.0` | `4.11.1` |
| [@azure/msal-node](https://github.com/AzureAD/microsoft-authentication-library-for-js) | `3.6.3` | `5.1.5` |
| [@fluentui/react-components](https://github.com/microsoft/fluentui) | `9.66.6` | `9.73.8` |
| [@fluentui/react-icons](https://github.com/microsoft/fluentui-system-icons) | `2.0.305` | `2.0.325` |
| [@octokit/types](https://github.com/octokit/types.ts) | `14.1.0` | `16.0.0` |
| [@parcel/watcher](https://github.com/parcel-bundler/watcher) | `2.5.1` | `2.5.6` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.16.3` | `22.19.17` |
| [@types/picomatch](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/picomatch) | `4.0.0` | `4.0.3` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.36.0` | `8.59.1` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.36.0` | `8.59.1` |
| [@typescript-eslint/typescript-estree](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-estree) | `8.36.0` | `8.59.1` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `3.2.4` | `4.1.5` |
| [@vscode/test-cli](https://github.com/Microsoft/vscode-test-cli) | `0.0.11` | `0.0.12` |
| [@vscode/vsce](https://github.com/Microsoft/vsce) | `3.6.0` | `3.9.1` |
| [agent-browser](https://github.com/vercel-labs/agent-browser) | `0.16.3` | `0.26.0` |
| [csv-parse](https://github.com/adaltas/node-csv/tree/HEAD/packages/csv-parse) | `6.0.0` | `6.2.1` |
| [dotenv](https://github.com/motdotla/dotenv) | `17.2.0` | `17.4.2` |
| [electron](https://github.com/electron/electron) | `39.8.5` | `41.4.0` |
| [esbuild](https://github.com/evanw/esbuild) | `0.25.6` | `0.28.0` |
| [eslint](https://github.com/eslint/eslint) | `9.30.1` | `9.39.4` |
| [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc) | `51.3.4` | `62.9.0` |
| [eslint-plugin-no-only-tests](https://github.com/levibuzolic/eslint-plugin-no-only-tests) | `3.3.0` | `3.4.0` |
| [fastq](https://github.com/mcollina/fastq) | `1.19.1` | `1.20.1` |
| [glob](https://github.com/isaacs/node-glob) | `11.1.0` | `13.0.6` |
| [mobx](https://github.com/mobxjs/mobx) | `6.13.7` | `6.15.0` |
| [mobx-react-lite](https://github.com/mobxjs/mobx) | `4.1.0` | `4.1.1` |
| [open](https://github.com/sindresorhus/open) | `10.1.2` | `11.0.0` |
| [openai](https://github.com/openai/openai-node) | `6.7.0` | `6.35.0` |
| [playwright](https://github.com/microsoft/playwright) | `1.58.2` | `1.59.1` |
| [prettier](https://github.com/prettier/prettier) | `3.6.2` | `3.8.3` |
| [rimraf](https://github.com/isaacs/rimraf) | `6.0.1` | `6.1.3` |
| [shiki](https://github.com/shikijs/shiki/tree/HEAD/packages/shiki) | `1.15.2` | `4.0.2` |
| [sinon](https://github.com/sinonjs/sinon) | `21.0.1` | `21.1.2` |
| [@types/sinon](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/sinon) | `17.0.4` | `21.0.1` |
| [tar](https://github.com/isaacs/node-tar) | `7.5.11` | `7.5.13` |
| [@types/tar](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/tar) | `6.1.13` | `7.0.87` |
| [tsx](https://github.com/privatenumber/tsx) | `4.20.3` | `4.21.0` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.8.3` | `6.0.3` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.36.0` | `8.59.1` |
| [vite-plugin-top-level-await](https://github.com/Menci/vite-plugin-top-level-await) | `1.5.0` | `1.6.0` |
| [vite-plugin-wasm](https://github.com/Menci/vite-plugin-wasm) | `3.5.0` | `3.6.0` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `3.2.4` | `4.1.5` |
| [yargs](https://github.com/yargs/yargs) | `17.7.2` | `18.0.0` |
| [zod](https://github.com/colinhacks/zod) | `3.25.76` | `4.4.1` |



Updates `@anthropic-ai/claude-agent-sdk` from 0.2.92 to 0.2.126
- [Release notes](https://github.com/anthropics/claude-agent-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/claude-agent-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/claude-agent-sdk-typescript@v0.2.92...v0.2.126)

Updates `@anthropic-ai/sdk` from 0.82.0 to 0.92.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.82.0...sdk-v0.92.0)

Updates `@github/copilot` from 1.0.17 to 1.0.40
- [Release notes](https://github.com/github/copilot-cli/releases)
- [Changelog](https://github.com/github/copilot-cli/blob/main/changelog.md)
- [Commits](github/copilot-cli@v1.0.17...v1.0.40)

Updates `@google/genai` from 1.25.0 to 1.51.0
- [Release notes](https://github.com/googleapis/js-genai/releases)
- [Changelog](https://github.com/googleapis/js-genai/blob/main/CHANGELOG.md)
- [Commits](googleapis/js-genai@v1.25.0...v1.51.0)

Updates `@opentelemetry/api` from 1.9.0 to 1.9.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v1.9.0...v1.9.1)

Updates `@opentelemetry/api-logs` from 0.212.0 to 0.216.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.212.0...experimental/v0.216.0)

Updates `@opentelemetry/exporter-logs-otlp-grpc` from 0.212.0 to 0.216.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.212.0...experimental/v0.216.0)

Updates `@opentelemetry/exporter-logs-otlp-http` from 0.212.0 to 0.216.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.212.0...experimental/v0.216.0)

Updates `@opentelemetry/exporter-metrics-otlp-grpc` from 0.212.0 to 0.216.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.212.0...experimental/v0.216.0)

Updates `@opentelemetry/exporter-metrics-otlp-http` from 0.212.0 to 0.216.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.212.0...experimental/v0.216.0)

Updates `@opentelemetry/exporter-trace-otlp-grpc` from 0.212.0 to 0.216.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.212.0...experimental/v0.216.0)

Updates `@opentelemetry/exporter-trace-otlp-http` from 0.212.0 to 0.216.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.212.0...experimental/v0.216.0)

Updates `@opentelemetry/resources` from 2.5.1 to 2.7.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v2.5.1...v2.7.1)

Updates `@opentelemetry/sdk-logs` from 0.212.0 to 0.216.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.212.0...experimental/v0.216.0)

Updates `@opentelemetry/sdk-metrics` from 2.5.1 to 2.7.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v2.5.1...v2.7.1)

Updates `@opentelemetry/sdk-trace-node` from 2.5.1 to 2.7.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v2.5.1...v2.7.1)

Updates `@opentelemetry/semantic-conventions` from 1.39.0 to 1.40.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@semconv/v1.39.0...semconv/v1.40.0)

Updates `@sinclair/typebox` from 0.34.41 to 0.34.49
- [Commits](https://github.com/sinclairzx81/sinclair-typebox/commits/0.34.49)

Updates `@vscode/copilot-api` from 0.2.19 to 0.3.0
- [Release notes](https://github.com/Microsoft/vscode-extension-telemetry/releases)
- [Commits](https://github.com/Microsoft/vscode-extension-telemetry/commits/0.3)

Updates `@vscode/tree-sitter-wasm` from 0.0.5-php.2 to 0.0.5
- [Release notes](https://github.com/Microsoft/vscode-tree-sitter-wasm/releases)
- [Changelog](https://github.com/microsoft/vscode-tree-sitter-wasm/blob/main/CHANGELOG.md)
- [Commits](microsoft/vscode-tree-sitter-wasm@v0.0.5-php.2...v0.0.5)

Updates `@xterm/headless` from 5.5.0 to 6.0.0
- [Release notes](https://github.com/xtermjs/xterm.js/releases)
- [Commits](xtermjs/xterm.js@5.5.0...6.0.0)

Updates `ajv` from 8.18.0 to 8.20.0
- [Release notes](https://github.com/ajv-validator/ajv/releases)
- [Commits](ajv-validator/ajv@v8.18.0...v8.20.0)

Updates `applicationinsights` from 2.9.7 to 2.9.8
- [Release notes](https://github.com/microsoft/ApplicationInsights-node.js/releases)
- [Changelog](https://github.com/microsoft/ApplicationInsights-node.js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/microsoft/ApplicationInsights-node.js/commits)

Updates `best-effort-json-parser` from 1.2.1 to 1.4.0
- [Commits](beenotung/best-effort-json-parser@v1.2.1...v1.4.0)

Updates `diff` from 8.0.3 to 9.0.0
- [Changelog](https://github.com/kpdecker/jsdiff/blob/master/release-notes.md)
- [Commits](kpdecker/jsdiff@v8.0.3...v9.0.0)

Updates `dompurify` from 3.3.2 to 3.4.2
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.3.2...3.4.2)

Updates `isbinaryfile` from 5.0.4 to 6.0.0
- [Release notes](https://github.com/gjtorikian/isBinaryFile/releases)
- [Changelog](https://github.com/gjtorikian/isBinaryFile/blob/main/CHANGELOG.md)
- [Commits](gjtorikian/isBinaryFile@5.0.4...v6.0.0)

Updates `lru-cache` from 11.1.0 to 11.3.5
- [Changelog](https://github.com/isaacs/node-lru-cache/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-lru-cache@v11.1.0...v11.3.5)

Updates `minimatch` from 10.2.4 to 10.2.5
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v10.2.4...v10.2.5)

Updates `undici` from 7.24.1 to 8.1.0
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v7.24.1...v8.1.0)

Updates `vscode-tas-client` from 0.1.84 to 0.1.86

Updates `@azure/keyvault-secrets` from 4.10.0 to 4.11.1
- [Release notes](https://github.com/Azure/azure-sdk-for-js/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-js/blob/main/documentation/Changelog-for-next-generation.md)
- [Commits](https://github.com/Azure/azure-sdk-for-js/compare/@azure/keyvault-secrets_4.10.0...@azure/keyvault-secrets_4.11.1)

Updates `@azure/msal-node` from 3.6.3 to 5.1.5
- [Release notes](https://github.com/AzureAD/microsoft-authentication-library-for-js/releases)
- [Commits](AzureAD/microsoft-authentication-library-for-js@msal-node-v3.6.3...msal-node-v5.1.5)

Updates `@fluentui/react-components` from 9.66.6 to 9.73.8
- [Release notes](https://github.com/microsoft/fluentui/releases)
- [Commits](https://github.com/microsoft/fluentui/commits)

Updates `@fluentui/react-icons` from 2.0.305 to 2.0.325
- [Changelog](https://github.com/microsoft/fluentui-system-icons/blob/main/docs/releases.md)
- [Commits](https://github.com/microsoft/fluentui-system-icons/commits)

Updates `@octokit/types` from 14.1.0 to 16.0.0
- [Release notes](https://github.com/octokit/types.ts/releases)
- [Commits](octokit/types.ts@v14.1.0...v16.0.0)

Updates `@parcel/watcher` from 2.5.1 to 2.5.6
- [Release notes](https://github.com/parcel-bundler/watcher/releases)
- [Commits](parcel-bundler/watcher@v2.5.1...v2.5.6)

Updates `@types/node` from 22.16.3 to 22.19.17
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/picomatch` from 4.0.0 to 4.0.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/picomatch)

Updates `@typescript-eslint/eslint-plugin` from 8.36.0 to 8.59.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.59.1/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.36.0 to 8.59.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.59.1/packages/parser)

Updates `@typescript-eslint/typescript-estree` from 8.36.0 to 8.59.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-estree/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.59.1/packages/typescript-estree)

Updates `@vitest/coverage-v8` from 3.2.4 to 4.1.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.5/packages/coverage-v8)

Updates `@vscode/test-cli` from 0.0.11 to 0.0.12
- [Changelog](https://github.com/microsoft/vscode-test-cli/blob/main/CHANGELOG.md)
- [Commits](https://github.com/Microsoft/vscode-test-cli/commits)

Updates `@vscode/vsce` from 3.6.0 to 3.9.1
- [Release notes](https://github.com/Microsoft/vsce/releases)
- [Commits](microsoft/vscode-vsce@v3.6.0...v3.9.1)

Updates `agent-browser` from 0.16.3 to 0.26.0
- [Release notes](https://github.com/vercel-labs/agent-browser/releases)
- [Changelog](https://github.com/vercel-labs/agent-browser/blob/main/CHANGELOG.md)
- [Commits](vercel-labs/agent-browser@v0.16.3...v0.26.0)

Updates `csv-parse` from 6.0.0 to 6.2.1
- [Changelog](https://github.com/adaltas/node-csv/blob/master/packages/csv-parse/CHANGELOG.md)
- [Commits](https://github.com/adaltas/node-csv/commits/csv-parse@6.2.1/packages/csv-parse)

Updates `dotenv` from 17.2.0 to 17.4.2
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v17.2.0...v17.4.2)

Updates `electron` from 39.8.5 to 41.4.0
- [Release notes](https://github.com/electron/electron/releases)
- [Commits](electron/electron@v39.8.5...v41.4.0)

Updates `esbuild` from 0.25.6 to 0.28.0
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2025.md)
- [Commits](evanw/esbuild@v0.25.6...v0.28.0)

Updates `eslint` from 9.30.1 to 9.39.4
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v9.30.1...v9.39.4)

Updates `eslint-plugin-jsdoc` from 51.3.4 to 62.9.0
- [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases)
- [Commits](gajus/eslint-plugin-jsdoc@v51.3.4...v62.9.0)

Updates `eslint-plugin-no-only-tests` from 3.3.0 to 3.4.0
- [Release notes](https://github.com/levibuzolic/eslint-plugin-no-only-tests/releases)
- [Changelog](https://github.com/levibuzolic/eslint-plugin-no-only-tests/blob/main/CHANGELOG.md)
- [Commits](levibuzolic/eslint-plugin-no-only-tests@v3.3.0...v3.4.0)

Updates `fastq` from 1.19.1 to 1.20.1
- [Release notes](https://github.com/mcollina/fastq/releases)
- [Commits](mcollina/fastq@v1.19.1...v1.20.1)

Updates `glob` from 11.1.0 to 13.0.6
- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)
- [Commits](isaacs/node-glob@v11.1.0...v13.0.6)

Updates `mobx` from 6.13.7 to 6.15.0
- [Release notes](https://github.com/mobxjs/mobx/releases)
- [Commits](https://github.com/mobxjs/mobx/commits)

Updates `mobx-react-lite` from 4.1.0 to 4.1.1
- [Release notes](https://github.com/mobxjs/mobx/releases)
- [Commits](https://github.com/mobxjs/mobx/compare/mobx-react-lite@4.1.0...mobx-react-lite@4.1.1)

Updates `open` from 10.1.2 to 11.0.0
- [Release notes](https://github.com/sindresorhus/open/releases)
- [Commits](sindresorhus/open@v10.1.2...v11.0.0)

Updates `openai` from 6.7.0 to 6.35.0
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/master/CHANGELOG.md)
- [Commits](openai/openai-node@v6.7.0...v6.35.0)

Updates `playwright` from 1.58.2 to 1.59.1
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.58.2...v1.59.1)

Updates `prettier` from 3.6.2 to 3.8.3
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.6.2...3.8.3)

Updates `rimraf` from 6.0.1 to 6.1.3
- [Changelog](https://github.com/isaacs/rimraf/blob/main/CHANGELOG.md)
- [Commits](isaacs/rimraf@v6.0.1...v6.1.3)

Updates `shiki` from 1.15.2 to 4.0.2
- [Release notes](https://github.com/shikijs/shiki/releases)
- [Commits](https://github.com/shikijs/shiki/commits/v4.0.2/packages/shiki)

Updates `sinon` from 21.0.1 to 21.1.2
- [Release notes](https://github.com/sinonjs/sinon/releases)
- [Changelog](https://github.com/sinonjs/sinon/blob/main/docs/changelog.md)
- [Commits](sinonjs/sinon@v21.0.1...v21.1.2)

Updates `@types/sinon` from 17.0.4 to 21.0.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/sinon)

Updates `tar` from 7.5.11 to 7.5.13
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v7.5.11...v7.5.13)

Updates `@types/tar` from 6.1.13 to 7.0.87
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/tar)

Updates `tsx` from 4.20.3 to 4.21.0
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.20.3...v4.21.0)

Updates `typescript` from 5.8.3 to 6.0.3
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v5.8.3...v6.0.3)

Updates `typescript-eslint` from 8.36.0 to 8.59.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.59.1/packages/typescript-eslint)

Updates `vite-plugin-top-level-await` from 1.5.0 to 1.6.0
- [Commits](Menci/vite-plugin-top-level-await@v1.5.0...v1.6.0)

Updates `vite-plugin-wasm` from 3.5.0 to 3.6.0
- [Commits](Menci/vite-plugin-wasm@v3.5.0...v3.6.0)

Updates `vitest` from 3.2.4 to 4.1.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.5/packages/vitest)

Updates `yargs` from 17.7.2 to 18.0.0
- [Release notes](https://github.com/yargs/yargs/releases)
- [Changelog](https://github.com/yargs/yargs/blob/main/CHANGELOG.md)
- [Commits](yargs/yargs@v17.7.2...v18.0.0)

Updates `zod` from 3.25.76 to 4.4.1
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v3.25.76...v4.4.1)

---
updated-dependencies:
- dependency-name: "@anthropic-ai/claude-agent-sdk"
  dependency-version: 0.2.126
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.92.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@github/copilot"
  dependency-version: 1.0.40
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: "@google/genai"
  dependency-version: 1.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@opentelemetry/api"
  dependency-version: 1.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: "@opentelemetry/api-logs"
  dependency-version: 0.216.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@opentelemetry/exporter-logs-otlp-grpc"
  dependency-version: 0.216.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@opentelemetry/exporter-logs-otlp-http"
  dependency-version: 0.216.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@opentelemetry/exporter-metrics-otlp-grpc"
  dependency-version: 0.216.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@opentelemetry/exporter-metrics-otlp-http"
  dependency-version: 0.216.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@opentelemetry/exporter-trace-otlp-grpc"
  dependency-version: 0.216.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@opentelemetry/exporter-trace-otlp-http"
  dependency-version: 0.216.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@opentelemetry/resources"
  dependency-version: 2.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@opentelemetry/sdk-logs"
  dependency-version: 0.216.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@opentelemetry/sdk-metrics"
  dependency-version: 2.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@opentelemetry/sdk-trace-node"
  dependency-version: 2.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@opentelemetry/semantic-conventions"
  dependency-version: 1.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@sinclair/typebox"
  dependency-version: 0.34.49
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: "@vscode/copilot-api"
  dependency-version: 0.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@vscode/tree-sitter-wasm"
  dependency-version: 0.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: "@xterm/headless"
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: ajv
  dependency-version: 8.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: applicationinsights
  dependency-version: 2.9.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: best-effort-json-parser
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: diff
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: dompurify
  dependency-version: 3.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: isbinaryfile
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: lru-cache
  dependency-version: 11.3.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: minimatch
  dependency-version: 10.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: undici
  dependency-version: 8.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: vscode-tas-client
  dependency-version: 0.1.86
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: "@azure/keyvault-secrets"
  dependency-version: 4.11.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@azure/msal-node"
  dependency-version: 5.1.5
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: "@fluentui/react-components"
  dependency-version: 9.73.8
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@fluentui/react-icons"
  dependency-version: 2.0.325
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: "@octokit/types"
  dependency-version: 16.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: "@parcel/watcher"
  dependency-version: 2.5.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: "@types/node"
  dependency-version: 22.19.17
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@types/picomatch"
  dependency-version: 4.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.59.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.59.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@typescript-eslint/typescript-estree"
  dependency-version: 8.59.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.1.5
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: "@vscode/test-cli"
  dependency-version: 0.0.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: "@vscode/vsce"
  dependency-version: 3.9.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: agent-browser
  dependency-version: 0.26.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: csv-parse
  dependency-version: 6.2.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: dotenv
  dependency-version: 17.4.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: electron
  dependency-version: 41.4.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: esbuild
  dependency-version: 0.28.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: eslint
  dependency-version: 9.39.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: eslint-plugin-jsdoc
  dependency-version: 62.9.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: eslint-plugin-no-only-tests
  dependency-version: 3.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: fastq
  dependency-version: 1.20.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: glob
  dependency-version: 13.0.6
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: mobx
  dependency-version: 6.15.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: mobx-react-lite
  dependency-version: 4.1.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: open
  dependency-version: 11.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: openai
  dependency-version: 6.35.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: playwright
  dependency-version: 1.59.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: prettier
  dependency-version: 3.8.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: rimraf
  dependency-version: 6.1.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: shiki
  dependency-version: 4.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: sinon
  dependency-version: 21.1.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@types/sinon"
  dependency-version: 21.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: tar
  dependency-version: 7.5.13
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: "@types/tar"
  dependency-version: 7.0.87
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: tsx
  dependency-version: 4.21.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: typescript
  dependency-version: 6.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: typescript-eslint
  dependency-version: 8.59.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: vite-plugin-top-level-await
  dependency-version: 1.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: vite-plugin-wasm
  dependency-version: 3.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: vitest
  dependency-version: 4.1.5
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: yargs
  dependency-version: 18.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: zod
  dependency-version: 4.4.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 1, 2026
Copilot AI review requested due to automatic review settings May 1, 2026 19:10
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label May 1, 2026
@dependabot dependabot Bot review requested due to automatic review settings May 1, 2026 19:10
@dependabot dependabot Bot added the javascript Pull requests that update javascript code label May 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@rzhao271 rzhao271

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@rzhao271