deps: bump the development group with 12 updates

[dependabot]

Bumps the development group with 12 updates:

Package	From	To
@testing-library/react	16.3.2	16.3.3
@types/node	26.2.0	26.4.0
@types/react-dom	19.2.4	19.2.5
@vitejs/plugin-react	6.1.0	6.1.1
eslint-config-next	16.3.2	16.3.3
eslint-plugin-react-hooks	7.0.1	7.1.1
fumadocs-mdx	15.3.1	15.4.0
knip	6.32.2	6.33.0
lint-staged	17.3.0	17.4.1
opencode-ai	1.18.21	1.18.25
promptfoo	0.122.0	0.122.2
typescript-eslint	8.67.0	8.68.0

Updates @testing-library/react from 16.3.2 to 16.3.3

Release notes

Sourced from @​testing-library/react's releases.

v16.3.3

16.3.3 (2026-08-27)

Bug Fixes

• Avoid act() re-entrant when dispatching events (#1468) (20ce75f)

Commits

• 20ce75f fix: Avoid act() re-entrant when dispatching events (#1468)
• be9d81d docs: fix typos in comments and types (#1446)
• See full diff in compare view

Updates @types/node from 26.2.0 to 26.4.0

Commits

• See full diff in compare view

Updates @types/react-dom from 19.2.4 to 19.2.5

Commits

• See full diff in compare view

Updates @vitejs/plugin-react from 6.1.0 to 6.1.1

Release notes

Sourced from @​vitejs/plugin-react's releases.

plugin-react@6.1.1

Add compiler.logDiagnostics option

Recoverable React Compiler diagnostics are no longer logged by default. Set compiler.logDiagnostics to true to log them through Vite. Fatal diagnostics are always logged and fail the transform.

Respect environment sourcemap option for React Compiler transform when builder.sharedPlugins is enabled (#1439)

The React Compiler transform was using the top-level sourcemap option instead of the environment sourcemap option. This caused a problem when the experimental builder.sharedPlugins was enabled.

Changelog

Sourced from @​vitejs/plugin-react's changelog.

6.1.1 (2026-08-28)

Add compiler.logDiagnostics option

Recoverable React Compiler diagnostics are no longer logged by default. Set compiler.logDiagnostics to true to log them through Vite. Fatal diagnostics are always logged and fail the transform.

Respect environment sourcemap option for React Compiler transform when builder.sharedPlugins is enabled (#1439)

The React Compiler transform was using the top-level sourcemap option instead of the environment sourcemap option. This caused a problem when the experimental builder.sharedPlugins was enabled.

Commits

• 04cac50 release: plugin-react@6.1.1 (#1440)
• 82d35ab fix(react): respect environment sourcemap option when builder.sharedPlugins...
• 397e847 fix(react): make logging diagnostics an opt-in for React Compiler (#1431)
• 61006e6 fix(deps): update all non-major dependencies (#1433)
• e2a649c chore: use deps.neverBundle instead of external in tsdown config (#1430)
• fb2d6f3 fix(deps): update all non-major dependencies (#1427)
• See full diff in compare view

Updates eslint-config-next from 16.3.2 to 16.3.3

Release notes

Sourced from eslint-config-next's releases.

v16.3.3

This release contains security fixes for the following advisories:

Critical:

• Unauthenticated Remote Code Execution on windows-hosted servers
• Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used

Commits

• a9a1cb7 v16.3.3
• See full diff in compare view

Updates eslint-plugin-react-hooks from 7.0.1 to 7.1.1

Release notes

Sourced from eslint-plugin-react-hooks's releases.

eslint-plugin-react-hooks@7.1.1 (April 17, 2026)

Note: 7.1.0 accidentally removed the component-hook-factories rule, causing errors for users who referenced it in their ESLint config. This is now fixed.

• Add deprecated no-op component-hook-factories rule for backwards compatibility. (@​mofeiZ in #36307)

eslint-plugin-react-hooks@7.1.0 (April 16, 2026)

This release adds ESLint v10 support, improves performance by skipping compilation for non-React files, and includes compiler lint improvements including better set-state-in-effect detection, improved ref validation, and more helpful error reporting.

• Add ESLint v10 support. (@​azat-io in #35720)
• Skip compilation for non-React files to improve performance. (@​josephsavona in #35589)
• Fix exhaustive deps bug with Flow type casting. (@​jorge-cab in #35691)
• Fix useEffectEvent checks in component syntax. (@​jbrown215 in #35041)
• Improved set-state-in-effect validation with fewer false negatives. (@​jorge-cab in #35134, @​josephsavona in #35147, @​jackpope in #35214, @​chesnokov-tony in #35419, @​jsleitor in #36107)
• Improved ref validation for non-mutating functions and event handler props. (@​josephsavona in #35893, @​kolvian in #35062)
• Compiler now reports all errors instead of stopping at the first. (@​josephsavona in #35873–#35884)
• Improved source locations and error display in compiler diagnostics. (@​nathanmarks in #35348, @​josephsavona in #34963)

Changelog

Sourced from eslint-plugin-react-hooks's changelog.

7.1.1

Note: 7.1.0 accidentally removed the component-hook-factories rule, causing errors for users who referenced it in their ESLint config. This is now fixed.

• Add deprecated no-op component-hook-factories rule for backwards compatibility. (@​mofeiZ in #36307)

7.1.0

This release adds ESLint v10 support, improves performance by skipping compilation for non-React files, and includes compiler lint improvements including better set-state-in-effect detection, improved ref validation, and more helpful error reporting.

• Add ESLint v10 support. (@​azat-io in #35720)
• Skip compilation for non-React files to improve performance. (@​josephsavona in #35589)
• Fix exhaustive deps bug with Flow type casting. (@​jorge-cab in #35691)
• Fix useEffectEvent checks in component syntax. (@​jbrown215 in #35041)
• Improved set-state-in-effect validation with fewer false negatives. (@​jorge-cab in #35134, @​josephsavona in #35147, @​jackpope in #35214, @​chesnokov-tony in #35419, @​jsleitor in #36107)
• Improved ref validation for non-mutating functions and event handler props. (@​josephsavona in #35893, @​kolvian in #35062)
• Compiler now reports all errors instead of stopping at the first. (@​josephsavona in #35873–#35884)
• Improved source locations and error display in compiler diagnostics. (@​nathanmarks in #35348, @​josephsavona in #34963)

Commits

• See full diff in compare view

Updates fumadocs-mdx from 15.3.1 to 15.4.0

Release notes

Sourced from fumadocs-mdx's releases.

fumadocs-mdx@15.4.0

Remark LLMs: export a component with output: "function"

With output: "function", _markdown becomes a component instead of a string: Markdown content is still stringified at compile time, while JSX elements stay as JSX, receiving their original props.

// fumadocs-mdx collection config
postprocess: {
  includeProcessedMarkdown: { output: 'function' },
},

Render it with renderToMarkdown from fumadocs-core/server. Elements resolve from props.components: a component can call asMarkdown() to output its own Markdown form, other components (including missing ones) are serialized as JSX syntax.

import { renderToMarkdown } from 'fumadocs-core/server';
const { _markdown: Content } = await page.data.load();
const text = await renderToMarkdown(<Content components={getMDXComponents()} />);

getText('processed') keeps working: it renders the component for you, with an optional components map:

const text = await page.data.getText('processed', { components: getMDXComponents() });

Supported in bundler collections with both compilers, and in dynamic: true collections & @fumadocs/satteri/local-md with the Sätteri compiler.

Commits

• 5cd7b69 Merge pull request #3510 from fuma-nama/tegami/version-packages
• 814559b docs: introduce React Markdown Components
• b4d689d refactor(core(: rename options
• eefd3e0 feat(satteri): show the type table as a table in markdown form
• 49afb7d docs: support .md apart from .mdx suffix
• 399bea9 feat(mdx,satteri): support dynamic markdown renderer on remark-llms plugin
• 7eef0d8 feat(core): React Markdown Component
• 3d07ef5 fix(core): duplicated record when indexing
• 0687a8b Version Packages (#3507)
• cc53d34 internal(core): drop negotiator
• Additional commits viewable in compare view

Updates knip from 6.32.2 to 6.33.0

Release notes

Sourced from knip's releases.

Release 6.33.0

• Support package manifest resolution under Yarn PnP (#1946) (a82efb62b290e004bdabee40bcb337baf3701a1b) - thanks @​WooWan!
• Resolve oxlint jsPlugins from .oxlintrc.jsonc (#1973) (d055023182789555a574eaefde80dac997190437) - thanks @​DreierF!
• Update dependency bun to v1.4.0 (#1964) (937ab38ad514a00edafecff4ca04603b015bf921) - thanks @​renovate[bot]!
• Expose defineConfig on a ./config entrypoint (#1960) (17f7a6051d9781860f248cc2a745dbe837713cd9) - thanks @​theRizwan!
• Preserve all environment variables in exec.ts (#1979) (c0a9ecf8d1c0cdd7789c1e1bea893706c060239d) - thanks @​DreamLongYT!
• Add support for TypeScript content mappers (#1978) (db67f9bd8cebf0ea3c298690d462c154827aa462) - thanks @​remcohaszing!
• fix(vitest): resolve array entries and root-relative setup dependencies (#1982) (0ecf48538c339437e6f9dfe9a6013d307783cbd3) - thanks @​DreamLongYT!
• Fix type annotation in dynamic configuration function example (ada88c7f01563b73643af34a147a71fd9ab9d2dc)
• Format docs with remark (7764c2a4ebecdbf226c19494d255d9cb14550822)
• Throw on configuration that is not an object (d7ac0cf1de8f79be6ec53412cac9f7edf8f35ba7)
• Clarify dependency inputs, isTypeOnly and toConfig in plugin docs (2bd367961554ad1addb520bdfad5e31125885969)
• Resolve content mapper process from package.json#typescript.contentMapper.exec (74640c03e450624409692f4cc17699775108fd7e)
• Encode argv arrays before parsing them as shell commands (b79234c15153fbf592e82c94e4e4e9f41b4479e0)
• Update dependencies (28510146c2b97d88f7188f1239b9307aac7dbf0c)
• Replace non-breaking space in module graph comment (4e22bfcd09deccc92ed158f5554fe3e03f3a2c51)
• Update fix format test for oxfmt package.json key sorting (65011bf6054d03fb5580f3381867b07d1b8a9a0c)
• fix(webpack): resolve entry descriptors using import field (#1981) (cad8910e7fb89c2510fc9f5885289335dd4e60da) - thanks @​DreamLongYT!
• fix: count enum element access as a whole-object read (#1958) (5a47d603aa23b388ae7ce4fe301656f1abc43b14) - thanks @​addielaruee!
• Resolve oxlint/vite-plus import resolvers from settings (#1983) (c1165b70efe27398b86fa50bcea7d85c253d3ee7) - thanks @​DreierF!
• fix(nuxt): resolve string extends configs (#1984) (4a5d7068d6264ea45c78c832abe7ba052763517e) - thanks @​DreamLongYT!
• Wrap up webpack entry resolution (505decdb821f9b76d194742cee7e98c75ef7d8e9)
• Keep element access precise for number-like enum member names (bcbac3a8b8283da3b32256584b3cc6569ae5c02f)
• Resolve Object.* enum enumeration through import aliases (347967daaed817ca20e1ad6148388a66ec8b421b)
• Resolve named string-key access on namespace-qualified enums (2ac1fbc1e92f3dae662ca4d4701cf010346be49a)
• Normalize line endings in nuxt-config-string fixture (9fe2b2b2db8690685ec7c6cf8b3d39b9ed7b3fdc)
• Resolve nuxt layer sources from all extends entry shapes (db136151d9f98801837b33646ef7b02ae7b5a86d)
• Report unused exports behind Vitest module promise mocks (resolve #1966) (74954c219367ca1577184cca08c30dbb3fb6222e)
• Check line endings against .gitattributes in pnpm run ci (ddc9fd0cc3328260665203c8573702bb6c9d0dd6)

Release 6.32.3

• Update sentry production snapshot (9f18cba93c91de8554636b13692d6e7a937b7697)
• Pin TypeScript ecosystem test (de5162952d223050f3135afb02d4e8de6d46f381)
• Update query snapshot (f6964dd577d8f7967f9be6778f5c3953632e3c96)
• fix(tsup): match config files with .cts and .mts extensions (#1938) (68d6f52f7913cfa1e36618e6b03f90734da34149) - thanks @​codeAnqiang-ma!
• fix(lefthook): match all config file names and extensions (#1940) (4015ae0330c78e97360a2c8f697d17f82c5c24ae) - thanks @​codeAnqiang-ma!
• fix(binaries): resolve missing pnpm subcommands (#1945) (deedbf69dcbd6a59d6705a72cadb4e40ad9c8029) - thanks @​marcalexiei!
• Fix nested gitignore negation inside ignored dot-directories (#1913) (#1942) (0201641af48f52edfbe72076118944ee6273718e) - thanks @​DSeaStar!
• fix(webdriver-io): match all supported config file extensions (#1948) (dc7aca5a865d1762a41dd97493b73398ec3abc19) - thanks @​solomonaustin!
• Resolve vitest include patterns relative to test.dir (#1929) (ee555d227208dd6a34e002318bd6710dedb4d5ca) - thanks @​kirthi-b!
• Change GitHub stars badge style to flat (#1967) (ff0d791e8130430524dc88c4df73ad87f82879f7) - thanks @​DreamLongYT!
• Ignore printf as global binary (#1972) (a0c0b0805a8a26a6efdedfe2561b168da2a22b68) - thanks @​taracutie!
• fix: add bun 1.4 dedupe subcommand (#1969) (d1d5d4276ece6daf2215f5ff3f4224b5b50dcac3) - thanks @​NimmLor!
• Resolve Vitest mocks from test root (e655b0ba0192546a2688d702323c8e7c58fecde1)
• Resolve local Vitest reporters from test root (resolve #1953) (f4ff31ad0385c5955627ec1b3bed2bc0000b14fe)

Commits

• fb25ece Release knip@6.33.0
• 74954c2 Report unused exports behind Vitest module promise mocks (resolve #1966)
• db13615 Resolve nuxt layer sources from all extends entry shapes
• 9fe2b2b Normalize line endings in nuxt-config-string fixture
• 2ac1fbc Resolve named string-key access on namespace-qualified enums
• 347967d Resolve Object.* enum enumeration through import aliases
• bcbac3a Keep element access precise for number-like enum member names
• 505decd Wrap up webpack entry resolution
• 4a5d706 fix(nuxt): resolve string extends configs (#1984)
• c1165b7 Resolve oxlint/vite-plus import resolvers from settings (#1983)
• Additional commits viewable in compare view

Updates lint-staged from 17.3.0 to 17.4.1

Release notes

Sourced from lint-staged's releases.

v17.4.1

17.4.1

Patch Changes

• #1840 efe5b63 - This is a version-bump-only release because the previous version 17.4.0 was not published to npmjs.com due to problems with GitHub Actions and Changesets.

17.4.0

Minor Changes

• #1836 90ec282 - Added a new defineConfig helper for type-checking the lint-staged configuration:

  // lint-staged.config.ts
  import { defineConfig } from 'lint-staged/config'
  export default defineConfig({
  '*.js': ['prettier --check', 'eslint'],
  })

• #1832 510a27c - Added a new flag --all to make lint-staged include all files tracked by Git, instead of only staged.

  By default lint-staged only runs tasks on files that include staged changes (hence the name). Use this flag to include all files tracked in Git version control (standard exclusions apply). Using this flag implies the --no-stash flag, disabling the automatic backup, and the --allow-empty flag so that lint-staged doesn't fail when there are no changes after running. This makes it easier to run npx lint-staged --all on a clean state, for example in CI.

Patch Changes

• #1838 69bec99 - The behavior of the automatic backup stash has been improved when running lint-staged in multiple worktrees in parallel. You should still avoid running multiple instances of lint-staged in parallel in the same tree, because some of the Git operations are locking and might lead to data loss.

• #1839 5e5bdd2 - Parsing of lint-staged CLI flags and Node.js API options has been rewritten to avoid inconsistent behavior between the two.

Changelog

Sourced from lint-staged's changelog.

17.4.1

Patch Changes

• #1840 efe5b63 - This is a version-bump-only release because the previous version 17.4.0 was not published to npmjs.com due to problems with GitHub Actions and Changesets.

17.4.0

Minor Changes

• #1836 90ec282 - Added a new defineConfig helper for type-checking the lint-staged configuration:

  // lint-staged.config.ts
  import { defineConfig } from 'lint-staged/config'
  export default defineConfig({
  '*.js': ['prettier --check', 'eslint'],
  })

• #1832 510a27c - Added a new flag --all to make lint-staged include all files tracked by Git, instead of only staged.

  By default lint-staged only runs tasks on files that include staged changes (hence the name). Use this flag to include all files tracked in Git version control (standard exclusions apply). Using this flag implies the --no-stash flag, disabling the automatic backup, and the --allow-empty flag so that lint-staged doesn't fail when there are no changes after running. This makes it easier to run npx lint-staged --all on a clean state, for example in CI.

Patch Changes

• #1838 69bec99 - The behavior of the automatic backup stash has been improved when running lint-staged in multiple worktrees in parallel. You should still avoid running multiple instances of lint-staged in parallel in the same tree, because some of the Git operations are locking and might lead to data loss.

• #1839 5e5bdd2 - Parsing of lint-staged CLI flags and Node.js API options has been rewritten to avoid inconsistent behavior between the two.

Commits

• d0c1517 Merge pull request #1841 from lint-staged/changeset-release/main
• f061335 chore(changeset): release
• d2721af Merge pull request #1840 from lint-staged/updates
• efe5b63 ci: update Changesets action because it failed to publish
• cd76ce3 build: update dependencies
• ea195e1 Merge pull request #1837 from lint-staged/changeset-release/main
• a6a0d61 chore(changeset): release
• 0a09098 Merge pull request #1832 from lint-staged/add-all-flag
• 7fd685b fix: further fix parsing options logic
• 510a27c feat: add --all flag for including all files tracked by Git instead of just...
• Additional commits viewable in compare view

Updates opencode-ai from 1.18.21 to 1.18.25

Release notes

Sourced from opencode-ai's releases.

v1.18.25

Core

Bugfixes

• Fixed Azure authentication so Azure CLI sign-in works without requiring Bun.

v1.18.24

Core

Bugfixes

• Bedrock reasoning responses no longer get cached into unreplayable empty messages.

Improvements

• Azure providers can now sign in with Microsoft Entra ID through the Azure CLI instead of requiring an API key.
• V1 now reads supported V2 config fields so newer config files keep working in more mixed setups.

Desktop

Bugfixes

• Archived sessions disappear from the Home list immediately. (@​NathanTCode)

Thank you to 3 community contributors:

• @​NathanTCode:
  • fix(app): drop archived sessions from home list right away (#44905)
• @​OpeOginni:
  • fix(ui): restore focus in stacked dialogs (#44928)
• @​dondetir:
  • docs: mention Exa and Parallel as web search backends (#38395)

v1.18.23

Core

Bugfixes

• Fixed Cloudflare AI Gateway routing for third-party providers so non-Workers models work through the gateway's REST API. (@​superhighfives)
• Fixed Anthropic models through Cloudflare AI Gateway by converting dotted model IDs like claude-haiku-4.5 to the dashed slug Anthropic expects. (@​superhighfives)
• Fixed parent session IDs being sent in request headers for session-aware providers.

TUI

Bugfixes

• Fixed GitHub auth for immutable OIDC subject tokens.

Thank you to 1 community contributor:

• @​superhighfives:
  • fix(provider): send Anthropic's dashed native slug through the AI Gateway (#44281)
  • fix(provider): route non-native Cloudflare AI Gateway providers via the REST API (#44828)

... (truncated)

Commits

• cb7d8b2 release: v1.18.25
• 733562e fix(opencode): remove Bun dependency from Azure authentication (#45845)
• 8a7cc0c docs(go): add Qwen3.8 Flash (#45836)
• 19db518 sync release versions for v1.18.24
• 15537a4 fix(opencode): compare config snapshots as JSON (#45784)
• 790fb5b feat(opencode): support Azure CLI authentication (#45079)
• 517ee73 fix(provider): filter unreplayable Bedrock reasoning before caching (#45769)
• c77100a chore: generate
• 03afae5 feat(opencode): load supported v2 config in v1 (#45421)
• 05ea507 fix(console): improve Go comparison chart on mobile (#45044)
• Additional commits viewable in compare view

Updates promptfoo from 0.122.0 to 0.122.2

Release notes

Sourced from promptfoo's releases.

0.122.2

0.122.2 (2026-08-28)

Features

• auth: support configurable Cloud auth header name (#10375) (997cb56)
• providers: add Codex Security SDK provider (#10467) (df8a5ab)

0.122.1

0.122.1 (2026-08-26)

Features

• eval: distinguish scan footprint from incurred token usage (#10497) (8df8ef0)
• providers: add Gemini 3.7 Flash and Flash-Lite (#10389) (bc6b189)
• redteam: account for multi-turn attacker and grading tokens (#10407) (33cc8bc)
• redteam: report generation, target, attacker, and grading tokens (#10408) (0891e4e)
• tracing: add test-case roots and universal target spans (#10328) (334586e)
• tracing: align spans with OpenTelemetry GenAI conventions (#10361) (e6f44f8)
• tracing: fetch external spans from Grafana Tempo (#10327) (1b445b0)
• tracing: fetch external traces from Braintrust (#10329) (f372318)
• tracing: fetch external traces from Langfuse (#10372) (f7809f6)
• tracing: harden trace span persistence (#10326) (d9d0e82)
• tracing: instrument grading and red-team execution (#10362) (a53ba32)
• tracing: integrate OpenAI Agents and Vercel SDK telemetry (#10364) (8f89002)
• tracing: standardize tool execution across providers (#10363) (b54ccbd)
• tracing: support Claude and Codex subprocess telemetry (#10365) (84c518f)

Bug Fixes

• app: clarify red team grading actions (#10366) (84a5cf2)
• assertions: avoid regex backtracking in GLEU and SQL parsing (#10373) (57243cf)
• assertions: correct inverse JSON failure messages (#9824) (d1d8de3)
• assertions: reject out-of-range trace-span-duration percentile (#10089) (49c0f6d)
• assertions: score tokenless GLEU inputs as zero (#9850) (cc8c0c6)
• deps: align Chevrotain CST generator with parser (#10360) (6ae80cd)
• deps: block install scripts in Docker builds (#10330) (c4454c4)
• deps: bundle the runtime cache dependency (#10302) (b5f8ea3)
• deps: enforce npm release age during lockfile maintenance (#10396) (42c1076)
• deps: hold jsdom below the release our Node floor cannot install (#10351) (2dcb128)
• deps: hold tanstack table below incompatible v9 (#10388) (fded938)
• deps: keep Renovate on the supported npm major (#10393) (f5034c1)
• deps: limit pnpm install scripts and new releases (#10331) (0dbf6c8)
• deps: patch vulnerable transitive js-yaml releases (#10356) (2626fd0)
• deps: prevent incompatible Chevrotain parser updates (#10306) (77c08d5)
• deps: prevent incompatible chevrotain-allstar upgrades (#10399) (5357d06)
• deps: restore standard cache dependency resolution (#10314) (ca65846)

... (truncated)

Changelog

Sourced from promptfoo's changelog.

0.122.2 (2026-08-28)

Features

• auth: support configurable Cloud auth header name (#10375) (997cb56)
• providers: add Codex Security SDK provider (#10467) (df8a5ab)

0.122.1 (2026-08-26)

Features

• eval: distinguish scan footprint from incurred token usage (#10497) (8df8ef0)
• providers: add Gemini 3.7 Flash and Flash-Lite (#10389) (bc6b189)
• redteam: account for multi-turn attacker and grading tokens (#10407) (33cc8bc)
• redteam: report generation, target, attacker, and grading tokens (#10408) (0891e4e)
• tracing: add test-case roots and universal target spans (#10328) (334586e)
• tracing: align spans with OpenTelemetry GenAI conventions (#10361) (e6f44f8)
• tracing: fetch external spans from Grafana Tempo (#10327) (1b445b0)
• tracing: fetch external traces from Braintrust (#10329) (f372318)
• tracing: fetch external traces from Langfuse (#10372) (f7809f6)
• tracing: harden trace span persistence (#10326) (d9d0e82)
• tracing: instrument grading and red-team execution (#10362) (a53ba32)
• tracing: integrate OpenAI Agents and Vercel SDK telemetry (#10364) (8f89002)
• tracing: standardize tool execution across providers (#10363) (b54ccbd)
• tracing: support Claude and Codex subprocess telemetry (#10365) (84c518f)

Bug Fixes

• app: clarify red team grading actions (#10366) (84a5cf2)
• assertions: avoid regex backtracking in GLEU and SQL parsing (#10373) (57243cf)
• assertions: correct inverse JSON failure messages (#9824) (d1d8de3)
• assertions: reject out-of-range trace-span-duration percentile (#10089) (49c0f6d)
• assertions: score tokenless GLEU inputs as zero (#9850) (cc8c0c6)
• deps: align Chevrotain CST generator with parser (#10360) (6ae80cd)
• deps: block install scripts in Docker builds (#10330) (c4454c4)
• deps: bundle the runtime cache dependency (#10302) (b5f8ea3)
• deps: enforce npm release age during lockfile maintenance (#10396) (42c1076)
• deps: hold jsdom below the release our Node floor cannot install (#10351) (2dcb128)
• deps: hold tanstack table below incompatible v9 (#10388) (fded938)
• deps: keep Renovate on the supported npm major (#10393) (f5034c1)
• deps: limit pnpm install scripts and new releases (#10331) (0dbf6c8)
• deps: patch vulnerable transitive js-yaml releases (#10356) (2626fd0)
• deps: prevent incompatible Chevrotain parser updates (#10306) (77c08d5)
• deps: prevent incompatible chevrotain-allstar upgrades (#10399) (5357d06)
• deps: restore standard cache dependency resolution (#10314) (ca65846)
• deps: update anthropic packages (#10426) (ef4cd6b)
• deps: update anthropic packages (#10471) (ed5bae3)
• deps: update dependency @​apidevtools/json-schema-ref-parser to v16 (#10474) (7600c55)
• deps: update dependency @​hono/node-server to v2.1.0 (#10385) (af026d0)
• deps: update dependency @​hono/node-server to v2.1.1 (#10472) (24ef223)

... (truncated)

Commits

• 8905230 chore(main): release 0.122.2 (

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.

[diegosouzapw]

@dependabot recreate

[dependabot]

Looks like this PR is closed. If the branch still exists, you can re-open the PR and then use @dependabot rebase or @dependabot recreate. If the branch was deleted, Dependabot will create a new PR on the next scheduled run, or you can trigger an update from the Dependency graph page.