fix(deps): bump the npm-major group with 4 updates (#5529)

Bumps the npm-major group with 4 updates:
[@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js),
[@anthropic-ai/claude-agent-sdk](https://github.com/anthropics/claude-agent-sdk-typescript),
[posthog-node](https://github.com/PostHog/posthog-js/tree/HEAD/packages/node)
and
[@typescript/native-preview](https://github.com/microsoft/typescript-go).

Updates `@supabase/supabase-js` from 2.106.2 to 2.107.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/supabase/supabase-js/releases">@​supabase/supabase-js's
releases</a>.</em></p>
<blockquote>
<h2>v2.107.0</h2>
<h2>2.107.0 (2026-06-02)</h2>
<h3>🚀 Features</h3>
<ul>
<li><strong>auth:</strong> remove navigator.locks-based mutex; introduce
commit guard + dispose() (<a
href="https://redirect.github.com/supabase/supabase-js/pull/2392">#2392</a>)</li>
<li><strong>realtime:</strong> allow httpSend to send binary payload (<a
href="https://redirect.github.com/supabase/supabase-js/pull/2400">#2400</a>)</li>
<li><strong>supabase:</strong> update X-Client-Info to structured
metadata format (<a
href="https://redirect.github.com/supabase/supabase-js/pull/2359">#2359</a>)</li>
</ul>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>auth:</strong> return AuthInvalidJwtError from getClaims for
expired JWT (<a
href="https://redirect.github.com/supabase/supabase-js/pull/2395">#2395</a>)</li>
<li><strong>auth:</strong> recognize ?error= redirects in implicit grant
gate (<a
href="https://redirect.github.com/supabase/supabase-js/pull/2407">#2407</a>)</li>
<li><strong>auth): revert fix(auth:</strong> encode client-id in oauth
requests (<a
href="https://redirect.github.com/supabase/supabase-js/pull/2383">#2383</a>,
<a
href="https://redirect.github.com/supabase/supabase-js/pull/2417">#2417</a>)</li>
<li><strong>postgrest:</strong> return a structured error for non-JSON
body on successful responses (<a
href="https://redirect.github.com/supabase/supabase-js/pull/2398">#2398</a>)</li>
<li><strong>release:</strong> pin workspace:* sibling deps before JSR
publish (<a
href="https://redirect.github.com/supabase/supabase-js/pull/2418">#2418</a>)</li>
<li><strong>release:</strong> publish gotrue-js legacy mirror via pnpm
(<a
href="https://redirect.github.com/supabase/supabase-js/pull/2419">#2419</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Claude Opus 4.7 (1M context)</li>
<li>Claude Sonnet 4.6</li>
<li>Eduardo Gurgel</li>
<li>Guilherme Souza</li>
<li>Katerina Skroumpelou <a
href="https://github.com/mandarini"><code>@​mandarini</code></a></li>
<li>Omar Al Matar <a
href="https://github.com/Bewinxed"><code>@​Bewinxed</code></a></li>
<li>youcef zr <a
href="https://github.com/youcefzemmar"><code>@​youcefzemmar</code></a></li>
<li>youcefzemmar</li>
</ul>
<h2>v2.107.0-canary.6</h2>
<h2>2.107.0-canary.6 (2026-06-02)</h2>
<p>This was a version bump only, there were no code changes.</p>
<h2>v2.107.0-canary.5</h2>
<h2>2.107.0-canary.5 (2026-06-02)</h2>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>release:</strong> publish gotrue-js legacy mirror via pnpm
(<a
href="https://redirect.github.com/supabase/supabase-js/pull/2419">#2419</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Katerina Skroumpelou <a
href="https://github.com/mandarini"><code>@​mandarini</code></a></li>
</ul>
<h2>v2.107.0-canary.4</h2>
<h2>2.107.0-canary.4 (2026-06-02)</h2>
<h3>🩹 Fixes</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md">@​supabase/supabase-js's
changelog</a>.</em></p>
<blockquote>
<h2>2.107.0 (2026-06-02)</h2>
<h3>🚀 Features</h3>
<ul>
<li><strong>auth:</strong> remove navigator.locks-based mutex; introduce
commit guard + dispose() (<a
href="https://redirect.github.com/supabase/supabase-js/pull/2392">#2392</a>)</li>
<li><strong>supabase:</strong> update X-Client-Info to structured
metadata format (<a
href="https://redirect.github.com/supabase/supabase-js/pull/2359">#2359</a>)</li>
<li><strong>realtime:</strong> allow httpSend to send binary payload (<a
href="https://redirect.github.com/supabase/supabase-js/pull/2400">#2400</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Claude Sonnet 4.6</li>
<li>Eduardo Gurgel</li>
<li>Guilherme Souza</li>
<li>Katerina Skroumpelou <a
href="https://github.com/mandarini"><code>@​mandarini</code></a></li>
<li>Omar Al Matar <a
href="https://github.com/Bewinxed"><code>@​Bewinxed</code></a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/supabase/supabase-js/commit/54ec2b6955be26836e249e1fbe5f98c6f25a99a9"><code>54ec2b6</code></a>
feat(auth): remove navigator.locks-based mutex; introduce commit guard +
disp...</li>
<li><a
href="https://github.com/supabase/supabase-js/commit/3397c9235712ae71333c5ded7b3cccc491124382"><code>3397c92</code></a>
feat(supabase): update X-Client-Info to structured metadata format (<a
href="https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js/issues/2359">#2359</a>)</li>
<li><a
href="https://github.com/supabase/supabase-js/commit/335207f8738ef059e0aec85b18529a1902fc2317"><code>335207f</code></a>
feat(realtime): allow httpSend to send binary payload (<a
href="https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js/issues/2400">#2400</a>)</li>
<li><a
href="https://github.com/supabase/supabase-js/commit/42f12dd9e6dac89252e739558e9b1dec4bcf09e3"><code>42f12dd</code></a>
docs(repo): ship per-package AGENTS.md and migrations via npm (<a
href="https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js/issues/2397">#2397</a>)</li>
<li><a
href="https://github.com/supabase/supabase-js/commit/b200b74136b3305c5fa07af3492ec56fbfaa1392"><code>b200b74</code></a>
chore(release): version 2.106.2 changelogs (<a
href="https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js/issues/2396">#2396</a>)</li>
<li>See full diff in <a
href="https://github.com/supabase/supabase-js/commits/v2.107.0/packages/core/supabase-js">compare
view</a></li>
</ul>
</details>
<br />

Updates `@anthropic-ai/claude-agent-sdk` from 0.3.160 to 0.3.161
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/anthropics/claude-agent-sdk-typescript/releases">@​anthropic-ai/claude-agent-sdk's
releases</a>.</em></p>
<blockquote>
<h2>v0.3.161</h2>
<h2>What's changed</h2>
<ul>
<li>The <code>initialize</code> control request is now idempotent: a
second <code>initialize</code> returns the same success payload instead
of an <code>Already initialized</code> error.
<code>ControlResponse</code> gains an optional
<code>pending_permission_requests</code> field, mirroring
<code>ControlErrorResponse</code></li>
<li><code>applyFlagSettings</code> now live-applies <code>agent</code>
changes: switching the active agent (or passing <code>null</code> to
reset) takes effect on the next turn in a running session</li>
</ul>
<h2>Update</h2>
<pre lang="sh"><code>npm install @anthropic-ai/claude-agent-sdk@0.3.161
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.161
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.161
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.161
</code></pre>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/anthropics/claude-agent-sdk-typescript/blob/main/CHANGELOG.md">@​anthropic-ai/claude-agent-sdk's
changelog</a>.</em></p>
<blockquote>
<h2>0.3.161</h2>
<ul>
<li>The <code>initialize</code> control request is now idempotent: a
second <code>initialize</code> returns the same success payload instead
of an <code>Already initialized</code> error.
<code>ControlResponse</code> gains an optional
<code>pending_permission_requests</code> field, mirroring
<code>ControlErrorResponse</code></li>
<li><code>applyFlagSettings</code> now live-applies <code>agent</code>
changes: switching the active agent (or passing <code>null</code> to
reset) takes effect on the next turn in a running session</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/anthropics/claude-agent-sdk-typescript/commit/2f67c511504b44c15a1c63ace7382752bc9f0646"><code>2f67c51</code></a>
chore: Update CHANGELOG.md</li>
<li>See full diff in <a
href="https://github.com/anthropics/claude-agent-sdk-typescript/compare/v0.3.160...v0.3.161">compare
view</a></li>
</ul>
</details>
<br />

Updates `posthog-node` from 5.35.11 to 5.35.12
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/PostHog/posthog-js/blob/main/packages/node/CHANGELOG.md">posthog-node's
changelog</a>.</em></p>
<blockquote>
<h2>5.35.12</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies []:
<ul>
<li><code>@​posthog/core</code><a
href="https://github.com/1"><code>@​1</code></a>.30.3</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/PostHog/posthog-js/commit/f052bd78cd8bfac5b7a28a7bb94a714b6da651f7"><code>f052bd7</code></a>
chore: update versions and lockfile [version bump]</li>
<li>See full diff in <a
href="https://github.com/PostHog/posthog-js/commits/posthog-node@5.35.12/packages/node">compare
view</a></li>
</ul>
</details>
<br />

Updates `@typescript/native-preview` from 7.0.0-dev.20260601.1 to
7.0.0-dev.20260602.1
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/microsoft/typescript-go/commits">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

apps/cli/package.json

@@ -38,7 +38,7 @@
     "fix:all": "nx run-many -t lint:fix fmt:fix knip:fix --projects=$npm_package_name"
   },
   "devDependencies": {
-    "@anthropic-ai/claude-agent-sdk": "^0.3.160",
+    "@anthropic-ai/claude-agent-sdk": "^0.3.161",
     "@anthropic-ai/sdk": "^0.100.1",
     "@clack/prompts": "^1.5.0",
     "@effect/atom-react": "catalog:",
@@ -65,7 +65,7 @@
     "oxfmt": "catalog:",
     "oxlint": "catalog:",
     "oxlint-tsgolint": "catalog:",
-    "posthog-node": "^5.35.11",
+    "posthog-node": "^5.35.12",
     "react": "^19.2.7",
     "react-devtools-core": "^7.0.1",
     "semantic-release": "^25.0.3",

packages/stack/package.json

@@ -27,7 +27,7 @@
   },
   "devDependencies": {
     "@effect/vitest": "catalog:",
-    "@supabase/supabase-js": "^2.106.2",
+    "@supabase/supabase-js": "^2.107.0",
     "@tsconfig/bun": "catalog:",
     "@types/bun": "catalog:",
     "@typescript/native-preview": "catalog:",