Skip to content

Bump the npm-minor-and-patch group across 1 directory with 6 updates - #129

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-and-patch-1d2b679c2f
Open

Bump the npm-minor-and-patch group across 1 directory with 6 updates#129
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-and-patch-1d2b679c2f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 7, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-minor-and-patch group with 6 updates in the / directory:

Package From To
tsx 4.23.12 4.23.13
@anthropic-ai/sdk 0.117.1 0.124.0
jose 6.2.8 6.2.11
@swc/core 1.16.0 1.16.2
next 15.5.23 15.5.25
@types/react-dom 19.2.4 19.2.7

Updates tsx from 4.23.12 to 4.23.13

Release notes

Sourced from tsx's releases.

v4.23.13

4.23.13 (2026-08-30)

Bug Fixes

  • cache: bound shared transform cache memory (#835) (28e1f12)

This release is also available on:

Commits

Updates @anthropic-ai/sdk from 0.117.1 to 0.124.0

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk: v0.124.0

0.124.0 (2026-09-04)

Full Changelog: sdk-v0.123.0...sdk-v0.124.0

Features

  • api: add Claude Tag category and user breakdowns to usage reports (669ff22)
  • api: add named types for organization compliance settings state (54be8da)
  • api: add support for sending a workspace ID on more endpoints (a11e6f1)

Bug Fixes

  • repair custom-code merge in messages resources (#455) (7ac43b9)
  • tools: create agent-toolset files and directories owner-only (#485) (a9c2298)

Chores

  • internal: bundle the mock server spec and update breaking-change detection (8752d02)
  • internal: codegen related update (a63afbc)
  • tests: reword the skip reason on the path-level query param tests (999bee5)

Documentation

  • api: update a few doc strings (2ef3d59)

sdk: v0.123.0

0.123.0 (2026-09-01)

Full Changelog: sdk-v0.122.0...sdk-v0.123.0

Features

  • api: beta user profiles: add external_user_onboarded_at, remove relationship in favor of access_type (3efb1a1)
  • api: manual updates (c6f0bda)
  • api: organization compliance settings, user-profile order_by, memory-store and toolset schema updates (8e2f0c2)

Bug Fixes

  • keep credential file access out of non-Node bundles (ab6a4b2)

Chores

  • internal: codegen related update (788ea8b)

... (truncated)

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.124.0 (2026-09-04)

Full Changelog: sdk-v0.123.0...sdk-v0.124.0

Features

  • api: add Claude Tag category and user breakdowns to usage reports (669ff22)
  • api: add named types for organization compliance settings state (54be8da)
  • api: add support for sending a workspace ID on more endpoints (a11e6f1)

Bug Fixes

  • repair custom-code merge in messages resources (#455) (7ac43b9)
  • tools: create agent-toolset files and directories owner-only (#485) (a9c2298)

Chores

  • internal: bundle the mock server spec and update breaking-change detection (8752d02)
  • internal: codegen related update (a63afbc)
  • tests: reword the skip reason on the path-level query param tests (999bee5)

Documentation

  • api: update a few doc strings (2ef3d59)

0.123.0 (2026-09-01)

Full Changelog: sdk-v0.122.0...sdk-v0.123.0

Features

  • api: beta user profiles: add external_user_onboarded_at, remove relationship in favor of access_type (3efb1a1)
  • api: manual updates (c6f0bda)
  • api: organization compliance settings, user-profile order_by, memory-store and toolset schema updates (8e2f0c2)

Bug Fixes

  • keep credential file access out of non-Node bundles (ab6a4b2)

Chores

  • internal: codegen related update (788ea8b)

Documentation

... (truncated)

Commits
  • ba14b1f Merge pull request #1177 from anthropics/release-please--branches--main--chan...
  • f99c1a7 chore: release main
  • 54be8da feat(api): add named types for organization compliance settings state
  • 999bee5 chore(tests): reword the skip reason on the path-level query param tests
  • a9c2298 fix(tools): create agent-toolset files and directories owner-only (#485)
  • 2637d11 chore(examples): refresh platform model IDs (#376)
  • 669ff22 feat(api): add Claude Tag category and user breakdowns to usage reports
  • a9090af Build SDK
  • 8752d02 chore(internal): bundle the mock server spec and update breaking-change detec...
  • a63afbc chore(internal): codegen related update
  • Additional commits viewable in compare view

Updates jose from 6.2.8 to 6.2.11

Release notes

Sourced from jose's releases.

v6.2.11

Documentation

  • render subpath indexes as tables (94589ee)
  • shorten API index descriptions (681482f)

Refactor

  • model JWE key management modes (e01dda6)
  • types: reduce declaration repetition (55b970f)

v6.2.10

Fixes

  • jose: consume serialization members once (9bee285)
  • jose: reject empty protected and JWE AAD members (8da4145)
  • jose: validate serialized header values (b711d8f)
  • jwe: conceal invalid decrypted CEK lengths (41fafe0)
  • jwe: enforce AES-GCM tag boundaries (9a5b744)
  • jwe: validate explicit encryption parameters (7a02697)
  • jwk: accept empty octet-sequence keys (3f871e7)
  • jwk: normalize key resolution inputs (f54ee7b)
  • jwks: enforce verification key metadata (f9ba510)
  • jwks: order overlapping remote reloads (9a1a913)
  • jwks: reject invalid remote duration values (7bdb9e5)
  • jwk: validate ext and key_ops parameters (4d91c37)
  • jws: reject mixed payload encoding modes (dc69713)
  • jws: validate unencoded payload strings (541f282)
  • jwt: enforce explicit verification policies (b347182)
  • jwt: prevent replacing protected headers (ae07d09)
  • jwt: reject invalid duration inputs (282f9aa)
  • jwt: validate builder claim values (ea03f83)
  • jwt: validate unsecured protected headers (230c14e)
  • key: validate generation and import options (15d880e)
  • reject mixed b64 modes for empty General JWS payloads (61a2ef7)
  • x509: reject DER truncated past its outer length (d8db9f6)

Documentation

  • jwks: correct cache timestamp units (01a44d9)

Refactor

  • jose: share binary input validation (eedb124)
  • jose: share compact token processing internals (85e30ed)
  • jwe: consolidate CBC decryption failures (1ee6f61)
  • jwe: specialize compact processing (a998927)
  • jwe: streamline single-recipient encryption (290aaa6)
  • jwks: compact JWK Set shape validation (930c7df), references Array#every
  • jwks: compact local key selection (4cb5ae5)

... (truncated)

Changelog

Sourced from jose's changelog.

6.2.11 (2026-09-04)

Documentation

  • render subpath indexes as tables (94589ee)
  • shorten API index descriptions (681482f)

Refactor

  • model JWE key management modes (e01dda6)
  • types: reduce declaration repetition (55b970f)

6.2.10 (2026-08-21)

Fixes

  • jose: consume serialization members once (9bee285)
  • jose: reject empty protected and JWE AAD members (8da4145)
  • jose: validate serialized header values (b711d8f)
  • jwe: conceal invalid decrypted CEK lengths (41fafe0)
  • jwe: enforce AES-GCM tag boundaries (9a5b744)
  • jwe: validate explicit encryption parameters (7a02697)
  • jwk: accept empty octet-sequence keys (3f871e7)
  • jwk: normalize key resolution inputs (f54ee7b)
  • jwks: enforce verification key metadata (f9ba510)
  • jwks: order overlapping remote reloads (9a1a913)
  • jwks: reject invalid remote duration values (7bdb9e5)
  • jwk: validate ext and key_ops parameters (4d91c37)
  • jws: reject mixed payload encoding modes (dc69713)
  • jws: validate unencoded payload strings (541f282)
  • jwt: enforce explicit verification policies (b347182)
  • jwt: prevent replacing protected headers (ae07d09)
  • jwt: reject invalid duration inputs (282f9aa)
  • jwt: validate builder claim values (ea03f83)
  • jwt: validate unsecured protected headers (230c14e)
  • key: validate generation and import options (15d880e)
  • reject mixed b64 modes for empty General JWS payloads (61a2ef7)
  • x509: reject DER truncated past its outer length (d8db9f6)

Documentation

  • jwks: correct cache timestamp units (01a44d9)

Refactor

  • jose: share binary input validation (eedb124)
  • jose: share compact token processing internals (85e30ed)
  • jwe: consolidate CBC decryption failures (1ee6f61)
  • jwe: specialize compact processing (a998927)
  • jwe: streamline single-recipient encryption (290aaa6)

... (truncated)

Commits
  • f5e5606 chore(release): 6.2.11
  • d60f1b4 chore: bump packages
  • 55b970f refactor(types): reduce declaration repetition
  • 681482f docs: shorten API index descriptions
  • 33c8817 build: verify published subpath contract
  • 542829d build: compact emitted ESM syntax
  • 94589ee docs: render subpath indexes as tables
  • a778a0b test: cover root exports and algorithm facades
  • e01dda6 refactor: model JWE key management modes
  • 920bc40 ci: test trigger-ci pushes
  • Additional commits viewable in compare view

Updates @swc/core from 1.16.0 to 1.16.2

Changelog

Sourced from @​swc/core's changelog.

[1.16.2] - 2026-09-04

Bug Fixes

  • (es/compat) Preserve for-of var binding scope (#12158) (f6d5bd1)

  • (es/decorators) Drop params from getter replacing decorated private method (#12161) (d56f594)

  • (es/flow) Preserve Flow component type semantics (#12090) (c8d5b49)

  • (es/minifier) Mark for update and test as executed multiple time (#12131) (1260e36)

  • (es/minifier) Report for loop var decl as assign (#12136) (783bbc2)

  • (es/minifier) Don't replace value-used console.*.bind() calls with undefined (#12138) (ed74223)

  • (es/minifier) Drop spans of cached globals values (#12129) (9a306b8)

  • (es/minifier) Preserve effects of returned value calls (#12140) (c37b5a9)

  • (es/minifier) Avoid JSX sequence inlining loop (#12149) (4e79b94)

  • (es/minifier) Preserve bindings in copied inline arrows (#12141) (cf7b5c9)

  • (es/minifier) Preserve do-while control-flow targets (#12160) (f62c437)

  • (es/minifier) Preserve pure annotation ownership (#12180) (ec780f9)

  • (es/parser) Retry ambiguous Program parsing (#12142) (141a320)

  • (es/parser) Preserve await grammar boundaries (#12156) (c732683)

  • (es/quote) Restore await parsing (#12163) (918f517)

... (truncated)

Commits
  • 5ae9149 chore: Publish 1.16.2 with swc_core v78.0.0
  • 5c24a37 chore: Publish 1.16.2-nightly-20260904.1 with swc_core v78.0.0
  • 490c7d8 chore: Publish 1.16.1 with swc_core v77.0.2
  • 7e4d782 chore: Publish 1.16.1-nightly-20260819.1 with swc_core v77.0.2
  • See full diff in compare view

Updates next from 15.5.23 to 15.5.25

Release notes

Sourced from next's releases.

v15.5.25

Follow-up release to v15.5.24 re-enabling AVIF Image Optimization when newer versions of sharp are installed (#97954).

v15.5.24

This release contains security fixes for the following advisories:

Critical:

Commits
  • 013ee1d v15.5.25
  • d64c0d1 [15.5.x] Re-enable AVIF image optimization with a runtime libheif version gua...
  • 7f6b400 [test] Fix 15.5.x deploy tests (#97977)
  • 1a80896 [15.5.x][ci] Run flake detection and new deploy tests when merged and on back...
  • 6d9b5d8 [15.5.x] ci: remove pull_request_stats workflow (#97976)
  • b6c45b4 v15.5.24
  • b0f3460 [15.5.x] Fix ISR misses with backslashes in segments when deployed on Windows
  • 409772e [15.5.x] [next/image]: disable avif image optimization
  • 9c44b88 [15.x] support sharp 0.34 and 0.35
  • 144fa5d [15.5.x] Remove generated error codes (#97783)
  • Additional commits viewable in compare view

Updates @types/react-dom from 19.2.4 to 19.2.7

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm-minor-and-patch group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.12` | `4.23.13` |
| [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.117.1` | `0.124.0` |
| [jose](https://github.com/panva/jose) | `6.2.8` | `6.2.11` |
| [@swc/core](https://github.com/swc-project/swc/tree/HEAD/packages/core) | `1.16.0` | `1.16.2` |
| [next](https://github.com/vercel/next.js) | `15.5.23` | `15.5.25` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.4` | `19.2.7` |



Updates `tsx` from 4.23.12 to 4.23.13
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.12...v4.23.13)

Updates `@anthropic-ai/sdk` from 0.117.1 to 0.124.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.117.1...sdk-v0.124.0)

Updates `jose` from 6.2.8 to 6.2.11
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](panva/jose@v6.2.8...v6.2.11)

Updates `@swc/core` from 1.16.0 to 1.16.2
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/commits/v1.16.2/packages/core)

Updates `next` from 15.5.23 to 15.5.25
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v15.5.23...v15.5.25)

Updates `@types/react-dom` from 19.2.4 to 19.2.7
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

---
updated-dependencies:
- dependency-name: tsx
  dependency-version: 4.23.13
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.124.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: jose
  dependency-version: 6.2.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@swc/core"
  dependency-version: 1.16.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: next
  dependency-version: 15.5.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants