Skip to content

chore: bump the npm-dependencies group with 15 updates - #58

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-11566b1224
Open

chore: bump the npm-dependencies group with 15 updates#58
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-11566b1224

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-dependencies group with 15 updates:

Package From To
@ai-sdk/devtools 0.0.24 1.0.11
@ai-sdk/anthropic 3.0.96 4.0.34
@ai-sdk/google 3.0.91 4.0.37
@ai-sdk/openai 3.0.84 4.0.34
@biomejs/biome 2.5.3 2.5.7
@nx/js 22.7.7 23.1.1
@swc-node/register 1.11.1 1.12.1
@swc/core 1.15.43 1.15.47
@tanstack/intent 0.0.44 0.3.6
@types/node 25.9.5 26.1.2
ai 6.0.224 7.0.56
nx 22.7.7 23.1.1
tsx 4.23.0 4.23.11
typescript 6.0.3 7.0.2
vite 6.4.3 8.2.1

Updates @ai-sdk/devtools from 0.0.24 to 1.0.11

Changelog

Sourced from @​ai-sdk/devtools's changelog.

1.0.11

Patch Changes

  • Updated dependencies [3469d0c]
    • @​ai-sdk/provider@​4.0.6

1.0.10

Patch Changes

  • Updated dependencies [79e133c]
    • @​ai-sdk/provider@​4.0.5

1.0.9

Patch Changes

  • d09a5fd: Add safe image, audio, and video previews for media parts in DevTools prompts and tool inputs and outputs.

1.0.8

Patch Changes

  • Updated dependencies [1e2f324]
    • @​ai-sdk/provider@​4.0.4

1.0.7

Patch Changes

  • 1c53b40: feat(devtools): add a persistent light theme to the viewer

1.0.6

Patch Changes

  • 5be55f1: Use an explicit latest tag in the DevTools viewer command so it starts from monorepo workspaces where DevTools is only installed transitively.

1.0.5

Patch Changes

  • 27d294d: feat(ai): group orphaned tool calls after tool approvals under parent span

1.0.4

Patch Changes

  • c29e0d7: chore (devtools): remove leftover module field from package.json (dual CJS/ESM publishing was removed in AI SDK 7)

... (truncated)

Commits

Updates @ai-sdk/anthropic from 3.0.96 to 4.0.34

Release notes

Sourced from @​ai-sdk/anthropic's releases.

@​ai-sdk/openai@​4.0.34

Patch Changes

  • 73d48d0: fix(provider/openai): correlate rotating Responses API item IDs by output index
  • bbd9b31: chore: rename *TranslationModel and its related types to *SpeechTranslationModel for consistency

@​ai-sdk/xai@​4.0.33

Patch Changes

  • Updated dependencies [ad6a650]
  • Updated dependencies [81cd026]
    • @​ai-sdk/provider@​4.0.7
    • @​ai-sdk/provider-utils@​5.0.25

@​ai-sdk/xai@​4.0.32

Patch Changes

  • Updated dependencies [1937bef]
    • @​ai-sdk/provider-utils@​5.0.24

@​ai-sdk/xai@​4.0.31

Patch Changes

  • 2b1068f: chore(xai): drop the unused @ai-sdk/openai-compatible dependency

    This provider was originally built on the shared openai-compatible model and has since been rewritten to implement its own, with its own tool preparation, finish-reason mapping and response metadata helpers. Nothing in the package imports @ai-sdk/openai-compatible any more, but the dependency and the TypeScript project reference to it were both left behind. No runtime change.

@​ai-sdk/perplexity@​4.0.27

Patch Changes

  • Updated dependencies [ad6a650]
  • Updated dependencies [81cd026]
    • @​ai-sdk/provider@​4.0.7
    • @​ai-sdk/provider-utils@​5.0.25

@​ai-sdk/perplexity@​4.0.26

Patch Changes

  • Updated dependencies [1937bef]
    • @​ai-sdk/provider-utils@​5.0.24

@​ai-sdk/provider@​4.0.7

Patch Changes

  • ad6a650: feat(video): allow aspectRatio: 'adaptive' on generateVideo

... (truncated)

Changelog

Sourced from @​ai-sdk/anthropic's changelog.

4.0.34

Patch Changes

  • e6415bd: feat(anthropic): add text batch support

4.0.33

Patch Changes

  • Updated dependencies [3469d0c]
    • @​ai-sdk/provider@​4.0.6
    • @​ai-sdk/provider-utils@​5.0.23

4.0.32

Patch Changes

  • 8b96941: Reject spliced Anthropic generations while allowing duplicate message start events for the active message.

4.0.31

Patch Changes

  • 7a9da75: Add maxTokens to the advisor_20260301 tool, forward it as max_tokens to cap each advisor sub-inference independently of executor output, and preserve advisor stopReason metadata for truncation detection and multi-turn replay.
  • Updated dependencies [2b60826]
    • @​ai-sdk/provider-utils@​5.0.22

4.0.30

Patch Changes

  • Updated dependencies [1bec07d]
    • @​ai-sdk/provider-utils@​5.0.21

4.0.29

Patch Changes

  • Updated dependencies [160ccdb]
    • @​ai-sdk/provider-utils@​5.0.20

4.0.28

Patch Changes

  • 9337ecd: Preserve Anthropic prompt-cache matches by replaying complete code-execution transcripts in their original wire shape.
  • Updated dependencies [79e133c]
    • @​ai-sdk/provider@​4.0.5
    • @​ai-sdk/provider-utils@​5.0.19

... (truncated)

Commits

Updates @ai-sdk/google from 3.0.91 to 4.0.37

Changelog

Sourced from @​ai-sdk/google's changelog.

4.0.37

Patch Changes

  • bbd9b31: chore: rename *TranslationModel and its related types to *SpeechTranslationModel for consistency

4.0.36

Patch Changes

  • Updated dependencies [3469d0c]
    • @​ai-sdk/provider@​4.0.6
    • @​ai-sdk/provider-utils@​5.0.23

4.0.35

Patch Changes

  • Updated dependencies [2b60826]
    • @​ai-sdk/provider-utils@​5.0.22

4.0.34

Patch Changes

  • Updated dependencies [1bec07d]
    • @​ai-sdk/provider-utils@​5.0.21

4.0.33

Patch Changes

  • Updated dependencies [160ccdb]
    • @​ai-sdk/provider-utils@​5.0.20

4.0.32

Patch Changes

  • 79e133c: async APIs for generateVideo (poll, webhook)

    Adds an asynchronous start/status flow to the experimental video model interface (VideoModelV4): models may now implement doStart, doStatus, and handleWebhookOption instead of (or in addition to) doGenerate, and experimental_generateVideo accepts poll and webhook options to orchestrate completion via polling or webhooks. Polling configuration can use a custom delay implementation for durable workflow compatibility.

  • Updated dependencies [79e133c]

    • @​ai-sdk/provider@​4.0.5

... (truncated)

Commits

Updates @ai-sdk/openai from 3.0.84 to 4.0.34

Release notes

Sourced from @​ai-sdk/openai's releases.

@​ai-sdk/openai@​4.0.34

Patch Changes

  • 73d48d0: fix(provider/openai): correlate rotating Responses API item IDs by output index
  • bbd9b31: chore: rename *TranslationModel and its related types to *SpeechTranslationModel for consistency

@​ai-sdk/openai@​3.0.91

Patch Changes

  • Updated dependencies [ee2bf30]
    • @​ai-sdk/provider-utils@​4.0.42
Changelog

Sourced from @​ai-sdk/openai's changelog.

4.0.34

Patch Changes

  • 73d48d0: fix(provider/openai): correlate rotating Responses API item IDs by output index
  • bbd9b31: chore: rename *TranslationModel and its related types to *SpeechTranslationModel for consistency

4.0.33

Patch Changes

  • e6a93c4: feat(openai): support batch APIs with experimental_startTextBatch

4.0.32

Patch Changes

  • Updated dependencies [3469d0c]
    • @​ai-sdk/provider@​4.0.6
    • @​ai-sdk/provider-utils@​5.0.23

4.0.31

Patch Changes

  • Updated dependencies [2b60826]
    • @​ai-sdk/provider-utils@​5.0.22

4.0.30

Patch Changes

  • 1bec07d: Fix streamed tool calls with non-zero, non-contiguous, reused, or missing indexes.
  • Updated dependencies [1bec07d]
    • @​ai-sdk/provider-utils@​5.0.21

4.0.29

Patch Changes

  • Updated dependencies [160ccdb]
    • @​ai-sdk/provider-utils@​5.0.20

4.0.28

Patch Changes

  • Updated dependencies [79e133c]
    • @​ai-sdk/provider@​4.0.5
    • @​ai-sdk/provider-utils@​5.0.19

... (truncated)

Commits

Updates @biomejs/biome from 2.5.3 to 2.5.7

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.7

2.5.7

Patch Changes

  • #10822 c171b3b Thanks @​pkallos! - Added the option ignoreIfStatements to useNullishCoalescing. Biome now flags if statements that only assign to a nullish variable (such as if (!a) { a = b }) and can rewrite them to ??=. When enabled, Biome ignores those if statements.

  • #11136 e63354c Thanks @​AkashNaickar! - Added a new nursery rule noExtendNative, which reports extending the prototype of a built-in object.

  • #10094 e007143 Thanks @​THEjacob1000! - Added the nursery rule noTailwindArbitraryValue. Biome now reports Tailwind CSS arbitrary values such as w-[400px], including in HTML/JSX class attributes, configured utility functions, and tagged templates.

  • #11184 135f476 Thanks @​subotac! - Fixed #11176: noUnknownPseudoClass now recognizes Vue's :deep() pseudo-class inside .vue style blocks.

  • #8239 a519f9d Thanks @​cormacrelf! - Fixed #8233, where Biome CLI in stdin mode didn't work correctly when handling files in projects with nested configurations. For example, with the following structure, --stdin-file-path=subdirectory/... would not use the nested configuration in subdirectory/biome.json:

    ├── biome.json
└── subdirectory
    ├── biome.json
    └── lib.js

    biome format --write --stdin-file-path=subdirectory/lib.js < subdirectory/lib.js

    Now, the nested configuration is correctly picked up and applied.

    In addition, Biome now shows a warning if --stdin-file-path is provided but that path is ignored and therefore not formatted or fixed.

  • #11138 8c2c6bd Thanks @​ematipico! - Fixed noUnnecessaryConditions: Biome now chooses the same function overload as TypeScript when an argument is a callback, so conditions that were previously missed are reported.

    The following code is now invalid, because a parameter typed () => void accepts an async callback and schedule therefore returns string:

    declare function schedule(handler: () => void): string;
declare function schedule(handler: () => Promise<void>): string | undefined;
schedule(async () => {}) ?? "fallback";

    The following code is also now invalid, because map(() => 42) returns 42:

    

    • 






... (truncated)





Changelog

Sourced from @​biomejs/biome's changelog.




2.5.7


Patch Changes


    

  • 

    #10822 c171b3b Thanks @​pkallos! - Added the option ignoreIfStatements to useNullishCoalescing. Biome now flags if statements that only assign to a nullish variable (such as if (!a) { a = b }) and can rewrite them to ??=. When enabled, Biome ignores those if statements.
    

    • 

  • 

    #11136 e63354c Thanks @​AkashNaickar! - Added a new nursery rule noExtendNative, which reports extending the prototype of a built-in object.
    

    • 

  • 

    #10094 e007143 Thanks @​THEjacob1000! - Added the nursery rule noTailwindArbitraryValue. Biome now reports Tailwind CSS arbitrary values such as w-[400px], including in HTML/JSX class attributes, configured utility functions, and tagged templates.
    

    • 

  • 

    #11184 135f476 Thanks @​subotac! - Fixed #11176: noUnknownPseudoClass now recognizes Vue's :deep() pseudo-class inside .vue style blocks.
    

    • 

  • 

    #8239 a519f9d Thanks @​cormacrelf! - Fixed #8233, where Biome CLI in
stdin mode didn't work correctly when handling files in projects with nested
configurations. For example, with the following structure,
--stdin-file-path=subdirectory/... would not use the nested configuration in
subdirectory/biome.json:
    

    ├── biome.json
└── subdirectory
    ├── biome.json
    └── lib.js

    

    biome format --write --stdin-file-path=subdirectory/lib.js < subdirectory/lib.js
    

    Now, the nested configuration is correctly picked up and applied.
    

    In addition, Biome now shows a warning if --stdin-file-path is provided but
that path is ignored and therefore not formatted or fixed.
    

    • 

  • 

    #11138 8c2c6bd Thanks @​ematipico! - Fixed noUnnecessaryConditions: Biome now chooses the same function overload as TypeScript when an argument is a callback, so conditions that were previously missed are reported.
    

    The following code is now invalid, because a parameter typed () => void accepts an async callback and schedule therefore returns string:
    

    declare function schedule(handler: () => void): string;
declare function schedule(handler: () => Promise<void>): string | undefined;
schedule(async () => {}) ?? "fallback";
    

    The following code is also now invalid, because map(() => 42) returns 42:
    

    type Mapper<T> = () => T;
declare function map<T>(mapper: Mapper<T>): T;
    

    • 






... (truncated)





Commits






Updates @nx/js from 22.7.7 to 23.1.1



Release notes

Sourced from @​nx/js's releases.




23.1.1 (2026-07-30)


🚀 Features


    

  • core: derive stable repo key from normalized remote and relative path (#36439)
    • 

  • repo: add react + vite + vitest + playwright example (#35921)
    • 



🩹 Fixes


    

  • angular-rspack: speed up builds and align behavior with the esbuild application builder (#36268, #34936)
    • 

  • bundling: support TypeScript esbuildConfig files in the esbuild executor (#36352, #36349)
    • 

  • bundling: acknowledge @​swc/core build scripts when configuring rollup (#36412)
    • 

  • core: speed up npm lockfile parsing (#36216)
    • 

  • core: speed up lockfile parsing and catalog resolution (#36223)
    • 

  • core: show performance report recommendations only when actionable (#36344)
    • 

  • core: close daemon log descriptors after spawn to avoid Node 26 crash (#36280)
    • 

  • core: prevent shell injection in nx import (#36348)
    • 

  • core: correct the 22.6.0 gitignore and analytics migration wiring (#36356)
    • 

  • core: support npm 12 and pnpm in the package provenance check (#36354, #36338)
    • 

  • core: honor pnpm minimumReleaseAge config on pnpm 11 (#36335, #36330)
    • 

  • core: support pnpm 11 patched dependency hashes (#36360)
    • 

  • core: resolve name refs copied into pattern-matched target arrays (#36359)
    • 

  • core: resolve source-loaded plugin transitive workspace imports (#36296)
    • 

  • core: unbreak pnpm 11 installs by acknowledging build-script deps from generators (#36302)
    • 

  • core: include continuous and default-config dependencies in show target (#36374)
    • 

  • core: make unit tests pass locally regardless of invoking package manager (#35994)
    • 

  • core: respect --aiAgents none to skip AI agent file generation (#34944, #34692)
    • 

  • core: use --config.frozen-lockfile=false for pnpm add during migrate (#36337)
    • 

  • core: run selected projects with --exclude-task-dependencies (#35562)
    • 

  • core: stop passing git revisions through a shell in affected commands (#36379)
    • 

  • core: collect trickling watcher bursts fully on daemon force-flush (#36391)
    • 

  • core: report tasks running in another Nx process in the inline TUI (#36341)
    • 

  • core: stop ratatui cursor queries from racing the TUI event stream (#36318)
    • 

  • core: render critical-path tasks as a nested list in the job summary (#36394)
    • 

  • core: keep pnpm-workspace.yaml comments and read package.json as jsonc (#36411)
    • 

  • core: support multiple brace groups in workspace glob matching (#36395)
    • 

  • core: handle CRLF line endings in pnpm multi-document lockfiles (#36419, #35828, #35840)
    • 

  • core: correct glob pattern expansion for ZeroOrOne groups (#31857)
    • 

  • core: stop re-querying confirmed cache misses in task orchestrator (#36301, #35632)
    • 

  • core: sample project graph perf span telemetry per session at 10% (#36420)
    • 

  • core: strip terminal query sequences when replaying task output (#36432)
    • 

  • core: preserve FORCE_COLOR=0 intent for forked child tasks (#35293)
    • 

  • core: handle colons in target name when resolving inputs to generate graph (#36429, #33710)
    • 

  • core: merge default plugins through the source-map-aware merge path (#36257)
    • 

  • core: keep nx migrate on the requested version when release-age gates interfere (#36444)
    • 

  • core: avoid bogus duplicate project name errors when generating nested apps (#36458)
    • 

  • core: pin typescript in preset dependencies so npm cannot hoist typescript 7 (#36497)
    • 

  • core: bump pinned axios and brace-expansion past vulnerable versions (#36507, #36474)
    • 

  • core: parse pnpm lockfiles that omit the packages block (#36512)
    • 

  • core: keep real dependencies when omitting peers from npm temp installs (#36518)
    • 






... (truncated)





Commits

    

  • 82f3693 fix(js): resolve package and extension-less tsconfig extends read from the tr...
    • 

  • d86441d fix(js): resolve the verdaccio bin through its package.json (#36479)
    • 

  • df40b73 fix(linter): use projectService for typed linting in flat configs (#35727)
    • 

  • 5b6abe1 fix(core): unbreak pnpm 11 installs by acknowledging build-script deps from g...
    • 

  • b045079 fix(js): parse pnpm/npm publish JSON containing braces in file paths (#36241)
    • 

  • 57e661b fix(js): support private methods and static blocks in babel preset (#36218)
    • 

  • a88e494 chore(repo): migrate to nx 23.1.0-rc.2 (#36269)
    • 

  • ba1d651 fix(js): bump @​swc/cli to 0.8.1 to patch critical decompress advisory (#36294)
    • 

  • 03483ea fix(js): pin rootDir on composite tsconfigs for ts6 (ts-jest strips composite...
    • 

  • 60ac6f3 fix(js): pin tsconfig root dir even when it matches the config directory (#36...
    • 

  • Additional commits viewable in compare view
    • 







Updates @swc-node/register from 1.11.1 to 1.12.1



Commits

    

  • 8fdebc5 chore(release): publish
    • 

  • b2663d0 chore(deps): update pnpm to v11.14.0 (#1061)
    • 

  • 986094d fix(register): always inline source maps in auto mode so debuggers work (#1062)
    • 

  • eec0e8c chore(register): replace json-stable-stringify (#1060)
    • 

  • f3462b2 chore(release): publish
    • 

  • 0ee7282 chore: migrate to workspace versions
    • 

  • fd2a91f chore: remove useless npm version script
    • 

  • 9729f75 chore(deps): update dependency ava to v8 (#1033)
    • 

  • 1f1c80b chore(deps): update pnpm to v11.13.1 (#1058)
    • 

  • e249b6d fix(@​swc-node/register): import of dynamically loaded files; fixes #883 (#965)
    • 

  • Additional commits viewable in compare view
    • 







Updates @swc/core from 1.15.43 to 1.15.47



Changelog

Sourced from @​swc/core's changelog.




[1.15.47] - 2026-07-29


Bug Fixes


    

  • 

    (es) Preserve numeric property key identity (#12050) (46900a3)
    

    • 

  • 

    (es/ast) Support hashing non-finite numbers (#12043) (f4b85a6)
    

    • 

  • 

    (es/codegen) Emit non-finite numeric literals (#12047) (883abc4)
    

    • 

  • 

    (es/decorators) Avoid class state leakage for nested undecorated classes (#12076) (4c9d277)
    

    • 

  • 

    (es/minifier) Apply ToInt32 when folding bitwise NOT (#12058) (550e2f7)
    

    • 

  • 

    (es/minifier) Avoid inexact number radix folding (#12057) (506a0ea)
    

    • 

  • 

    (es/minifier) Preserve invalid Array lengths (#12056) (3ce9e16)
    

    • 

  • 

    (es/minifier) Preserve non-canonical arguments access (#12052) (850230b)
    

    • 

  • 

    (es/minifier) Apply ToUint16 in fromCharCode (#12055) (9ae7b92)
    

    • 

  • 

    (es/minifier) Index strings by UTF-16 code unit (#12054) (bc263d2)
    

    • 

  • 

    (es/minifier) Use numeric literals for non-finite values (#12048) (b830786)
    

    • 

  • 

    (es/minifier) Preserve top-level declarations referenced only by direct eval (#12029) (ad0e3b4)
    

    • 

  • 

    (es/optimization) Preserve JSON numeric values (#12051) (667af8c)
    

    • 

  • 

    (es/transforms) Use numeric literals for non-finite enum values (#12049) (1e3ed5c)
    

    • 

  • 

    (es/typescript) Evaluate cooked enum templates (#12059) (49d0b0f)
    

    • 






... (truncated)





Commits

    

  • 0febbba chore: Publish 1.15.47 with swc_core v75.0.0
    • 

  • 68abe42 chore: Publish 1.15.47-nightly-20260729.1 with swc_core v75.0.0
    • 

  • 9383162 chore: Publish 1.15.46 with swc_core v74.0.1
    • 

  • 035084a chore: Publish 1.15.46-nightly-20260719.1 with swc_core v74.0.1
    • 

  • 42d599f chore: Publish 1.15.45-nightly-20260719.1 with swc_core v74.0.1
    • 

  • 715eab8 chore: Publish 1.15.44-nightly-20260718.1 with swc_core v74.0.0
    • 

  • d6833cc refactor(es/lexer): remove smartstring dependency (#12013)
    • 

  • 5761a2b refactor: remove direct rkyv dependencies (#12010)
    • 

  • f36e4b6 refactor(es/helpers): Generate inline helpers from canonical ESM sources (#12...
    • 

  • 2f47530 fix(es/module): Rewrite SystemJS transform (#11996)
    • 

  • Additional commits viewable in compare view
    • 







Updates @tanstack/intent from 0.0.44 to 0.3.6



Release notes

Sourced from @​tanstack/intent's releases.




@​tanstack/intent@​0.3.6


Patch Changes


    

  • #201 ca0c761 - Support * package patterns such as @tanstack/* in intent.skills allowlists.
    • 



@​tanstack/intent@​0.3.5


Patch Changes


    

  • 

    #194 e885566 - Fix setup, setup-github-actions, meta, and scaffold failing with "No templates directory found" / "Meta-skills directory not found" in the published package. getMetaDir hardcoded ../../meta, which is correct for the src/commands/ source layout but overshoots to @tanstack/meta from the flat dist/ layout the build ships. Walk up to the first meta/ directory instead so resolution works in both layouts (and symlinked installs).
    

    • 

  • 

    #191 3620cca - Tighten skill-source identity to (kind, id) instead of name alone: workspace:foo no longer authorizes an npm-installed foo (and vice versa) in intent.skills, the "declared but not discovered" notice, and skill loading via intent load.
    

    • 



@​tanstack/intent@​0.3.4


Patch Changes


    

  • 

    #190 45c863d - Improve the maintainer skill-authoring workflow:
    

    - Add `validate --set-version <version>`, which stamps `metadata.library_version` across matched skills via YAML surgery (preserving comments, line endings, and body) and then re-validates.
- Correct the `generate-skill` meta-skill so it no longer emits slash-path `name` values that fail validation, and the `skill-staleness-check` meta-skill so it points at the real `intent stale` command instead of a non-existent script.

    

    • 

  • 

    #188 2a25b36 - Refuse to load a Yarn PnP runtime resolved from within node_modules; only a project root or ancestor .pnp.cjs is trusted.
    

    • 



@​tanstack/intent@​0.3.3


Patch Changes


    

  • 

    #185 b7920e9 - Fix intent list suppressing the allow-all risk warning.
    

    When intent.skills is set to allow-all ("*"), intent list --no-notices and INTENT_NO_NOTICES=1 no longer hide the warning that all skill sources are permitted. This banner is a security-relevant signal, not a migration tip, so it's now excluded from suppression while other notices remain suppressible as before.
    

    • 

  • 

    #187 fb3c08b - Fix potential hangs on slow or large environments:
    

      

    • Bound the npm registry staleness check with a request timeout so intent list and other staleness checks can't hang indefinitely on a slow or unreachable registry.
      • 

    • Bound global package-manager detection with a command timeout so it can't hang indefinitely when the environment's global node_modules is slow to resolve.
      • 

    • Avoid enumerating a workspace package's entire skill tree just to check whether it has any skills, reducing filesystem work in large monorepos.
      • 

    

    • 



@​tanstack/intent@​0.3.2


Patch Changes


    

  • 

    #180 d67a5d6 - Add proactive skill catalogs to installed Intent hooks.
    

    intent hooks install now installs session-start catalog hooks for supported agents alongside the existing edit gate. Agents see the allowed local Intent skills at session start, resume, clear, and compact where the agent supports those lifecycle events, then still need to run intent load before editing.
    

    The generated hook loads the catalog through the Intent CLI with agent audience redaction instead of importing package code from the target repository.
    

    • 



@​tanstack/intent@​0.3.1


Patch Changes


    

  • 

    #176 5419b02 - Add agent-safe hidden skill source handling to intent list.
    

    intent list now detects agent sessions with std-env and redacts unlisted allowlist candidates from agent-facing output. Agents see allowed skills plus a count-only hidden-source notice, while intent list --show-hidden reveals hidden source names only outside agent sessions.
    

    • 






... (truncated)





Commits


    

  
  



      


          

          
  
  

    
  
    
    

  

  

  



                    

          
        





  





    



      

  
        

  

      

  
  

  
          

  

    

      


  

        
          @dependabot
  




      

        
          chore: bump the npm-dependencies group with 15 updates
        

          
                        
      


      

        

    
    
    

  

    


      


      

        

          

    
    
    

  

  

    
  



        

      


      

        
          f978e36
        
      

    

  

    

      
Bumps the npm-dependencies group with 15 updates:

| Package | From | To |
| --- | --- | --- |
| [@ai-sdk/devtools](https://github.com/vercel/ai/tree/HEAD/packages/devtools) | `0.0.24` | `1.0.11` |
| [@ai-sdk/anthropic](https://github.com/vercel/ai/tree/HEAD/packages/anthropic) | `3.0.96` | `4.0.34` |
| [@ai-sdk/google](https://github.com/vercel/ai/tree/HEAD/packages/google) | `3.0.91` | `4.0.37` |
| [@ai-sdk/openai](https://github.com/vercel/ai/tree/HEAD/packages/openai) | `3.0.84` | `4.0.34` |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.3` | `2.5.7` |
| [@nx/js](https://github.com/nrwl/nx/tree/HEAD/packages/js) | `22.7.7` | `23.1.1` |
| [@swc-node/register](https://github.com/swc-project/swc-node) | `1.11.1` | `1.12.1` |
| [@swc/core](https://github.com/swc-project/swc/tree/HEAD/packages/core) | `1.15.43` | `1.15.47` |
| [@tanstack/intent](https://github.com/TanStack/intent) | `0.0.44` | `0.3.6` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.9.5` | `26.1.2` |
| [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `6.0.224` | `7.0.56` |
| [nx](https://github.com/nrwl/nx/tree/HEAD/packages/nx) | `22.7.7` | `23.1.1` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.0` | `4.23.11` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `6.4.3` | `8.2.1` |


Updates `@ai-sdk/devtools` from 0.0.24 to 1.0.11
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/devtools/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/devtools@1.0.11/packages/devtools)

Updates `@ai-sdk/anthropic` from 3.0.96 to 4.0.34
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/anthropic/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/anthropic@4.0.34/packages/anthropic)

Updates `@ai-sdk/google` from 3.0.91 to 4.0.37
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/google/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/google@4.0.37/packages/google)

Updates `@ai-sdk/openai` from 3.0.84 to 4.0.34
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/openai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/openai@4.0.34/packages/openai)

Updates `@biomejs/biome` from 2.5.3 to 2.5.7
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.7/packages/@biomejs/biome)

Updates `@nx/js` from 22.7.7 to 23.1.1
- [Release notes](https://github.com/nrwl/nx/releases)
- [Commits](https://github.com/nrwl/nx/commits/23.1.1/packages/js)

Updates `@swc-node/register` from 1.11.1 to 1.12.1
- [Release notes](https://github.com/swc-project/swc-node/releases)
- [Commits](https://github.com/swc-project/swc-node/compare/@swc-node/register@1.11.1...@swc-node/register@1.12.1)

Updates `@swc/core` from 1.15.43 to 1.15.47
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/commits/v1.15.47/packages/core)

Updates `@tanstack/intent` from 0.0.44 to 0.3.6
- [Release notes](https://github.com/TanStack/intent/releases)
- [Commits](https://github.com/TanStack/intent/compare/@tanstack/intent@0.0.44...@tanstack/intent@0.3.6)

Updates `@types/node` from 25.9.5 to 26.1.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `ai` from 6.0.224 to 7.0.56
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@7.0.56/packages/ai)

Updates `nx` from 22.7.7 to 23.1.1
- [Release notes](https://github.com/nrwl/nx/releases)
- [Commits](https://github.com/nrwl/nx/commits/23.1.1/packages/nx)

Updates `tsx` from 4.23.0 to 4.23.11
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.0...v4.23.11)

Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](https://github.com/microsoft/TypeScript/commits)

Updates `vite` from 6.4.3 to 8.2.1
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.2.1/packages/vite)

---
updated-dependencies:
- dependency-name: "@ai-sdk/devtools"
  dependency-version: 1.0.11
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: "@ai-sdk/anthropic"
  dependency-version: 4.0.34
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: "@ai-sdk/google"
  dependency-version: 4.0.37
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: "@ai-sdk/openai"
  dependency-version: 4.0.34
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: "@biomejs/biome"
  dependency-version: 2.5.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@nx/js"
  dependency-version: 23.1.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: "@swc-node/register"
  dependency-version: 1.12.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@swc/core"
  dependency-version: 1.15.47
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@tanstack/intent"
  dependency-version: 0.3.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@types/node"
  dependency-version: 26.1.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: ai
  dependency-version: 7.0.56
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: nx
  dependency-version: 23.1.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: tsx
  dependency-version: 4.23.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: vite
  dependency-version: 8.2.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>

    







  








      

  
            

    

      
    

    


      


          @dependabot
dependabot
Bot



          added
  the 

  dependencies

  Pull requests that update a dependency file
 label


      Aug 10, 2026

    

  








      

  
      



  

  @socket-security






  



    

      

  

    

      
          
      

      
            socket-security
    Bot

      

      

      commented


        Aug 10, 2026



      
    


  


  

    

      

          
    
    

  


        
            
  
      
              Copy link

  

            
  
      
              Copy Markdown

  

        
      

    


    

        



        

    

  





      


        



  
    

      
          
Review the following changes in direct dependencies. Learn more about Socket for GitHub.






Diff
Package
Supply Chain
Security		
Vulnerability
Quality
Maintenance
License





Addednx@​23.1.15810093100100


Added@​ai-sdk/​google@​4.0.37721008898100


Added@​ai-sdk/​openai@​4.0.34721008898100


Added@​nx/​js@​23.1.1761009299100


Added@​tanstack/​intent@​0.3.6781009996100


Added@​ai-sdk/​anthropic@​4.0.34781008898100


Added@​types/​node@​26.1.21001008196100


Addedtsx@​4.23.111001008195100


Addedvite@​8.2.1991008298100


Updatedtypescript@​6.0.3 ⏵ 7.0.29910089 -1100100 +10


Added@​swc-node/​register@​1.12.19810010090100


Added@​swc/​core@​1.15.479210010096100


Added@​ai-sdk/​devtools@​1.0.119910010098100


Addedai@​7.0.569910010099100


Added@​biomejs/​biome@​2.5.710010010099100





View full report



      		
    

  





        

            

            

              
            

        

      


      

            
  
  

    
  
    
    

  

  

  


    
















  
  

    

      

  










  








  
      

  
    Sign up for free
    to join this conversation on GitHub.
    Already have an account?
    Sign in to comment


  










      

  

    
    

    

  

    Reviewers
  


    

    No reviews







    

  


      
  

    Assignees
  



        


    No one assigned







      


  


  

    Labels
  



    

      

    dependencies

  Pull requests that update a dependency file








      

  

    

        

    Projects
  


        




    None yet




  



      


  

    
  

    Milestone
  


      No milestone





    
      
          


  

    

      
        

          
  

    Development
  



            


Successfully merging this pull request may close these issues.





  
  



      
    

  




      

    

  
        

  

    

      0 participants