build(deps): bump the dependencies group across 1 directory with 51 updates

[dependabot]

Bumps the dependencies group with 51 updates in the / directory:

Package	From	To
@changesets/cli	2.28.1	2.29.7
@commitlint/cli	19.7.1	20.1.0
@commitlint/config-conventional	19.7.1	20.0.0
dotenv-cli	8.0.0	10.0.0
dotenv-mono	1.3.14	1.5.1
lint-staged	15.4.3	16.2.4
prettier	3.5.1	3.6.2
pretty-quick	4.0.0	4.2.2
turbo	2.4.2	2.5.8
typescript	5.7.3	5.9.3
vitest	3.0.7	3.2.4
@eslint/js	9.21.0	9.37.0
@next/eslint-plugin-next	15.2.1	15.5.4
eslint	9.21.0	9.37.0
@types/eslint	8.56.12	9.6.1
eslint-config-prettier	10.0.2	10.1.8
eslint-plugin-react	7.37.4	7.37.5
eslint-plugin-react-hooks	5.2.0	7.0.0
eslint-plugin-turbo	2.4.4	2.5.8
eslint-plugin-unused-imports	4.1.4	4.2.0
globals	15.15.0	16.4.0
typescript-eslint	8.26.0	8.46.0
zod	3.24.2	4.1.12
@hey-api/openapi-ts	0.77.0	0.85.1
@types/node	22.13.4	24.7.2
dotenv	16.4.7	17.2.3
@blaxel/core	0.2.0	0.2.44
@composio/mcp	1.0.7	1.0.9
@modelcontextprotocol/sdk	1.13.2	1.20.0
@smithery/sdk	1.5.2	1.6.8
cache-manager	6.4.3	7.2.4
cacheable	1.10.0	2.1.0
chalk	5.4.1	5.6.2
eventsource	3.0.7	4.0.0
keyv	5.3.4	5.5.3
uuid	11.1.0	13.0.0
yaml	2.8.0	2.8.1
@rollup/plugin-commonjs	28.0.2	28.0.6
@rollup/plugin-node-resolve	16.0.0	16.0.3
@rollup/plugin-typescript	12.1.2	12.1.4
rollup	4.34.9	4.52.4
rollup-plugin-dts	6.1.1	6.2.3
tsx	4.20.3	4.20.6
@blaxel/langgraph	0.2.0	0.2.44
@langchain/core	0.3.51	0.3.78
@langchain/langgraph	0.2.68	0.4.9
@opentelemetry/instrumentation-fastify	0.45.0	0.51.0
fastify	5.4.0	5.6.1
@langchain/openai	0.5.10	0.6.15
inquirer	12.6.3	12.9.6
ora	8.2.0	9.0.0

Updates @changesets/cli from 2.28.1 to 2.29.7

Release notes

Sourced from @​changesets/cli's releases.

@​changesets/cli@​2.29.7

Patch Changes

• Updated dependencies [957f24e]:
  • @​changesets/apply-release-plan@​7.0.13

@​changesets/cli@​2.29.6

Patch Changes

• #1712 a3563b0 Thanks @​benmccann! - Switch to maintained fork of external-editor

@​changesets/cli@​2.29.5

Patch Changes

• #1693 6352819 Thanks @​Andarist! - Fixed an issue with workspace:^ and workspace:~ dependency ranges not being semantically treated as, respectively, ^CURRENT_VERSION and ~CURRENT_VERSION. This led to dependent packages being, at times, bumped too often when their dependencies with those ranges were bumped.

• Updated dependencies [6352819]:

  • @​changesets/assemble-release-plan@​6.0.9
  • @​changesets/get-release-plan@​4.0.13

@​changesets/cli@​2.29.4

Patch Changes

• #1668 65d6632 Thanks @​Andarist! - Fixed a crash in pre mode when trying to version private packages when tagging for private package is disabled

• Updated dependencies [65d6632]:

  • @​changesets/assemble-release-plan@​6.0.8
  • @​changesets/get-release-plan@​4.0.12

@​changesets/cli@​2.29.3

Patch Changes

• #1589 de8bebc Thanks @​remorses, @​vzt7! - Fixed a crash in prerelease mode when a package misses the version field in its package.json

• #1619 c1e8a78 Thanks @​manucorporat! - Support ../ in publishConfig.directory when publishing packages

• Updated dependencies [de8bebc]:

  • @​changesets/assemble-release-plan@​6.0.7
  • @​changesets/get-release-plan@​4.0.11

@​changesets/cli@​2.29.2

Patch Changes

• #1636 f73f84a Thanks @​Netail! - Correctly resolve new changesets with since option when the .changeset directory is not directly in the git root

• Updated dependencies [f73f84a]:

  • @​changesets/read@​0.6.5
  • @​changesets/git@​3.0.4
  • @​changesets/get-release-plan@​4.0.10
  • @​changesets/apply-release-plan@​7.0.12

... (truncated)

Commits

• 8c065c4 Version Packages (#1726)
• 957f24e Fix an issue that caused an incorrect CHANGELOG to be generated when a chan...
• ca0be26 Version Packages (#1713)
• a3563b0 Switch to maintained fork of external-editor (#1712)
• 283f654 Document privatePackages option (#1644)
• c7b6832 docs(readme): updated leftover (#1701)
• b57c77f Version Packages (#1694)
• 6352819 Fixed an issue with workspace:^ and workspace:~ dependency ranges not bei...
• 9ce98a5 Align used function name with import in the docs (#1673)
• b962929 Version Packages (#1669)
• Additional commits viewable in compare view

Updates @commitlint/cli from 19.7.1 to 20.1.0

Release notes

Sourced from @​commitlint/cli's releases.

v20.1.0

20.1.0 (2025-09-30)

Features

• feat(config-pnpm-scopes): allow global scope by @​ya2s in conventional-changelog/commitlint#4553

Bug Fixes

• fix(resolve-extends): add import attribute for JSON config files by @​macieklamberski in conventional-changelog/commitlint#4551

New Contributors

• @​ya2s made their first contribution in conventional-changelog/commitlint#4553
• @​macieklamberski made their first contribution in conventional-changelog/commitlint#4551

Full Changelog: conventional-changelog/commitlint@v20.0.0...v20.1.0

v20.0.0

20.0.0 (2025-09-25)

Features

• feat(rules)!: make body-max-line-length ignore lines with URLs (#4486) (2f37a88), closes #4486 by @​aspiers

BREAKING CHANGES

• when lines contain URLs exceeding the maximum line length body-max-line-length will be ignored

Full Changelog: conventional-changelog/commitlint@v19.9.1...v20.0.0

v19.9.1

19.9.1 (2025-08-29)

... (truncated)

Changelog

Sourced from @​commitlint/cli's changelog.

20.1.0 (2025-09-30)

Note: Version bump only for package @​commitlint/cli

20.0.0 (2025-09-25)

Note: Version bump only for package @​commitlint/cli

19.8.1 (2025-05-08)

Bug Fixes

• update dependency tinyexec to v1 (#4332) (e49449f)

19.8.0 (2025-03-07)

Performance Improvements

• use node: prefix to bypass require.cache call for builtins (#4302) (0cd8f41)

Commits

• a8e86d2 v20.1.0
• 407be6c v20.0.0
• 3c30200 v19.8.1
• e49449f fix: update dependency tinyexec to v1 (#4332)
• e2e3b67 Chore/deps prettier v3 3 (#4320)
• b92f072 chore: update gitHead after failed publish (#4315)
• e82f05a v19.8.0
• e685618 chore: add missing 'use strict' directives (#4301)
• 0cd8f41 perf: use node: prefix to bypass require.cache call for builtins (#4302)
• See full diff in compare view

Updates @commitlint/config-conventional from 19.7.1 to 20.0.0

Release notes

Sourced from @​commitlint/config-conventional's releases.

v20.0.0

20.0.0 (2025-09-25)

Features

• feat(rules)!: make body-max-line-length ignore lines with URLs (#4486) (2f37a88), closes #4486 by @​aspiers

BREAKING CHANGES

• when lines contain URLs exceeding the maximum line length body-max-line-length will be ignored

Full Changelog: conventional-changelog/commitlint@v19.9.1...v20.0.0

v19.9.1

19.9.1 (2025-08-29)

Bug Fixes

• fix: add TypeScript support and configuration for pnpm scopes by @​alsmadi99 in conventional-changelog/commitlint#4544

Full Changelog: conventional-changelog/commitlint@v19.9.0...v19.9.1

v19.9.0

19.9.0 (2025-08-26)

Features

• bug(config-pnpm-scopes): migrate package to TypeScript by @​alsmadi99 in conventional-changelog/commitlint#4541 (type got messed up)

Chore, docs, etc.

• docs: add a note about configuration under node24 by @​sodle in conventional-changelog/commitlint#4406
• chore: add Ubuntu 24.04 and Windows 2025 to CI by @​Marukome0743 in conventional-changelog/commitlint#4435
• docs: refactor CI setup example of GitHub Actions by @​Marukome0743 in conventional-changelog/commitlint#4439
• ci: use tags for immutable github actions by @​Fdawgs in conventional-changelog/commitlint#4458
• chore: migrate eslint-plugin-import to eslint-plugin-import-x by @​JounQin in conventional-changelog/commitlint#4473
• ci: add commitlint GitHub Actions by @​Marukome0743 in conventional-changelog/commitlint#4440

... (truncated)

Changelog

Sourced from @​commitlint/config-conventional's changelog.

20.0.0 (2025-09-25)

Note: Version bump only for package @​commitlint/config-conventional

19.8.1 (2025-05-08)

Note: Version bump only for package @​commitlint/config-conventional

19.8.0 (2025-03-07)

Performance Improvements

• use node: prefix to bypass require.cache call for builtins (#4302) (0cd8f41)

Commits

• 407be6c v20.0.0
• 3c30200 v19.8.1
• e2e3b67 Chore/deps prettier v3 3 (#4320)
• b92f072 chore: update gitHead after failed publish (#4315)
• e82f05a v19.8.0
• 0cd8f41 perf: use node: prefix to bypass require.cache call for builtins (#4302)
• See full diff in compare view

Updates dotenv-cli from 8.0.0 to 10.0.0

Release notes

Sourced from dotenv-cli's releases.

v10.0.0: bump dotenv-expand

Fixes entropitor/dotenv-cli#121

v9.0.0 Bump dotenv and be quiet by default

entropitor/dotenv-cli#129

Commits

• 0bf0073 10.0.0
• d4a3509 chore: bump dotenv-expand
• 6c510a3 9.0.0
• 8d377b1 Add quiet flag to suppress dotenv debug output by default (#129)
• 0da11b9 Update LICENSE with copyright information
• See full diff in compare view

Updates dotenv-mono from 1.3.14 to 1.5.1

Release notes

Sourced from dotenv-mono's releases.

Release 1.5.0

Features

• add quiet mode option to suppress console output (693778c), closes #150

Release 1.4.0

Features

• CLI implementation and enhance command-line features (6e77d1d)

Release 1.3.17

• Changed license to BSD-2-Clause
• Improved tests for some edge cases

Changelog

Sourced from dotenv-mono's changelog.

1.5.1 (2025-09-02)

Bug Fixes

• add dotenv-mono to bin (aca630b), closes #152

1.5.0 (2025-08-03)

Features

• add quiet mode option to suppress console output (693778c), closes #150

1.4.0 (2025-07-17)

Features

• CLI implementation and enhance command-line features (6e77d1d)

1.3.17 (2025-07-16)

• Changed license to BSD-2-Clause
• Improved tests for some edge cases

Bug Fixes

• improve code structure for improved readability and maintainability (76e2de8)

Commits

• deeaf07 chore(release): 1.5.1
• aca630b fix: add dotenv-mono to bin
• d559d70 chore(release): 1.5.0
• 693778c feat: add quiet mode option to suppress console output
• a475d82 chore(release): 1.4.0
• 6e77d1d feat: CLI implementation and enhance command-line features
• 80cdf9a ci: update Node.js versions and upgrade setup-node action
• c731e90 ci: remove package-lock.json from clean install step
• 3aac4a6 ci: add step to clean install environment before installing dependencies
• 2d8d1fe refactor: replace yarn actions with npm commands for dependency management an...
• Additional commits viewable in compare view

Updates lint-staged from 15.4.3 to 16.2.4

Release notes

Sourced from lint-staged's releases.

v16.2.4

Patch Changes

• #1682 0176038 Thanks @​iiroj! - Update dependencies, including [email protected] with bug fixes.

• #1671 581a54e Thanks @​iiroj! - Speed up execution by only importing the yaml depedency if using YAML configuration files.

v16.2.3

Patch Changes

• #1669 27cd541 Thanks @​iiroj! - When using --fail-on-changes, automatically hidden (partially) unstaged changes are no longer counted to make lint-staged fail.

v16.2.2

Patch Changes

• #1667 699f95d Thanks @​iiroj! - The backup stash will not be dropped when using --fail-on-changes and there are errors. When reverting to original state is disabled (via --no-revert or --fail-on-changes), hidden (partially) unstaged changes are still restored automatically so that it's easier to resolve the situation manually.

  Additionally, the example for using the backup stash manually now uses the correct backup hash, if available:

  % npx lint-staged --fail-on-changes
  ✔ Backed up original state in git stash (c18d55a3)
  ✔ Running tasks for staged files...
  ✖ Tasks modified files and --fail-on-changes was used!
  ↓ Cleaning up temporary files...
  ✖ lint-staged failed because --fail-on-changes was used.
  Any lost modifications can be restored from a git stash:
  > git stash list --format="%h %s"
  c18d55a3 On main: lint-staged automatic backup
  > git apply --index c18d55a3

v16.2.1

Patch Changes

• #1664 8277b3b Thanks @​iiroj! - The built-in TypeScript types have been updated to more closely match the implementation. Notably, the list of staged files supplied to task functions is readonly string[] and can't be mutated. Thanks @​outslept!

  export default {
  ---  "*": (files: string[]) => void console.log('staged files', files)
  +++  "*": (files: readonly string[]) => void console.log('staged files', files)
  }

• #1654 70b9af3 Thanks @​iiroj! - This version has been published from GitHub Actions using Trusted Publishing for npm packages.

• #1659 4996817 Thanks @​iiroj! - Fix searching configuration files when the working directory is a subdirectory of a git repository, and there are package.json files in the working directory. This situation might happen when running lint-staged for a single package in a monorepo.

... (truncated)

Changelog

Sourced from lint-staged's changelog.

16.2.4

Patch Changes

• #1682 0176038 Thanks @​iiroj! - Update dependencies, including [email protected] with bug fixes.

• #1671 581a54e Thanks @​iiroj! - Speed up execution by only importing the yaml depedency if using YAML configuration files.

16.2.3

Patch Changes

• #1669 27cd541 Thanks @​iiroj! - When using --fail-on-changes, automatically hidden (partially) unstaged changes are no longer counted to make lint-staged fail.

16.2.2

Patch Changes

• #1667 699f95d Thanks @​iiroj! - The backup stash will not be dropped when using --fail-on-changes and there are errors. When reverting to original state is disabled (via --no-revert or --fail-on-changes), hidden (partially) unstaged changes are still restored automatically so that it's easier to resolve the situation manually.

  Additionally, the example for using the backup stash manually now uses the correct backup hash, if available:

  % npx lint-staged --fail-on-changes
  ✔ Backed up original state in git stash (c18d55a3)
  ✔ Running tasks for staged files...
  ✖ Tasks modified files and --fail-on-changes was used!
  ↓ Cleaning up temporary files...
  ✖ lint-staged failed because --fail-on-changes was used.
  Any lost modifications can be restored from a git stash:
  > git stash list --format="%h %s"
  c18d55a3 On main: lint-staged automatic backup
  > git apply --index c18d55a3

16.2.1

Patch Changes

• #1664 8277b3b Thanks @​iiroj! - The built-in TypeScript types have been updated to more closely match the implementation. Notably, the list of staged files supplied to task functions is readonly string[] and can't be mutated. Thanks @​outslept!

  export default {
  ---  "*": (files: string[]) => void console.log('staged files', files)
  +++  "*": (files: readonly string[]) => void console.log('staged files', files)
  }

... (truncated)

Commits

• 122580b chore(changeset): release
• 0176038 fix(deps): update dependencies
• 581a54e perf: only import yaml when loading YAML files
• bdcd03a chore(changeset): release
• 27cd541 fix: do not count hidden (partially) unstaged changes when using `--fail-on-c...
• ab2f42e fix: emit correct value to debug logs
• 3fc5832 refactor: make general error messages more clear they originate from lint-staged
• 409d79a chore(changeset): release
• 7edaee9 docs: fix typo in changeset
• 699f95d fix: backup stash example uses real hash if available
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for lint-staged since your current version.

Updates prettier from 3.5.1 to 3.6.2

Release notes

Sourced from prettier's releases.

3.6.2

What's Changed

• Add missing blank line around code block by @​fisker in prettier/prettier#17675

🔗 Changelog

3.6.1

• Fix "Warning: File descriptor 39 closed but not opened in unmanaged mode" error when running --experimental-cli

🔗 Changelog

3.6.0

diff

🔗 Release note "Prettier 3.6: Experimental fast CLI and new OXC and Hermes plugins!"

3.5.3

🔗 Changelog

3.5.2

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.6.2

diff

Markdown: Add missing blank line around code block (#17675 by @​fisker)

<!-- Input -->
1. Some text, and code block below, with newline after code block
---
foo: bar


Another
List

<!-- Prettier 3.6.1 -->


Some text, and code block below, with newline after code block
---
foo: bar


Another
List



<!-- Prettier 3.6.2 -->


Some text, and code block below, with newline after code block
---
foo: bar


Another
List

3.6.1

diff

TypeScript: Allow const without initializer (#17650, #17654 by @​fisker)

// Input
</tr></table> 

... (truncated)

Commits

• 7a8b05f Release 3.6.2
• 46526b4 Add missing blank line around code block (#17675)
• a04ec11 chore(deps): update babel to v7.27.7 (#17684)
• 32be5b6 chore(deps): update dependency flow-parser to v0.274.1 (#17676)
• b55e777 Update docs about "TypeScript Configuration Files" (#17677)
• b197c99 chore(deps): update dependency @​vitejs/plugin-react to v4.6.0 (#17674)
• 1185f83 chore(deps): update dependency @​angular/compiler to v20.0.5 (#17680)
• aa1316f chore(deps): update dependency browserslist to v4.25.1 (#17671)
• c468d33 chore(deps): update dependency oxc-parser to v0.75.0 (#17672)
• 3f46d91 chore(deps): update dependency vite to v7 (#17673)
• Additional commits viewable in compare view

Updates pretty-quick from 4.0.0 to 4.2.2

Release notes

Sourced from pretty-quick's releases.

v4.2.2

Patch Changes

• #214 25ff3be Thanks @​JounQin! - fix: v4 should use latest npm tag

Full Changelog: prettier/pretty-quick@v4.2.1...v4.2.2

v4.2.1

Patch Changes

• #212 827ac86 Thanks @​JounQin! - fix: tinyexec v1 is esm only, use 0.x instead

Full Changelog: prettier/pretty-quick@v4.2.0...v4.2.1

v4.2.0

Minor Changes

• #206 f52440e Thanks @​JounQin! - chore(deps): cleanup dependencies by migrating find-up to findUp from @pkgr/core

Full Changelog: prettier/pretty-quick@v4.1.1...v4.2.0

v4.1.1

Patch Changes

• #200 40b2e55 Thanks @​ConradHughes! - fix: directory symlink handling - close #196

New Contributors

• @​ConradHughes made their first contribution in prettier/pretty-quick#200

Full Changelog: prettier/pretty-quick@v4.1.0...v4.1.1

v4.1.0

Minor Changes

• #195 dcf5da4 Thanks @​pralkarz! - feat: replace execa with tinyexec

• #198 76c5371 Thanks @​JounQin! - chore: bump upgradable deps without breaking changes

New Contributors

• @​swwind made their first contribution in prettier/pretty-quick#191
• @​pralkarz made their first contribution in prettier/pretty-quick#195

Full Changelog: prettier/pretty-quick@v4.0.0...v4.1.0

Changelog

Sourced from pretty-quick's changelog.

4.2.2

Patch Changes

• #214 25ff3be Thanks @​JounQin! - fix: v4 should use latest npm tag

4.2.1

Patch Changes

• #212 827ac86 Thanks @​JounQin! - fix: tinyexec v1 is esm only, use 0.x instead

4.2.0

Minor Changes

• #206 f52440e Thanks @​JounQin! - chore(deps): cleanup dependencies by migrating find-up to findUp from @pkgr/core

4.1.1

Patch Changes

• #200 40b2e55 Thanks @​ConradHughes! - fix: directory symlink handling - close #196

4.1.0

Minor Changes

• #195 dcf5da4 Thanks @​pralkarz! - feat: replace execa with tinyexec

• #198 76c5371 Thanks @​JounQin! - chore: bump upgradable deps without breaking changes

Commits

• aa0165d chore: release pretty-quick (#215)
• 25ff3be fix: v4 should use latest npm tag (#214)
• 689ccf2 chore: release pretty-quick (#213)
• 827ac86 fix: tinyexec v1 is esm only, use 0.x instead (#212)
• 87771dd chore: release pretty-quick (#207)
• f52440e chore: bump all (dev)Dependencies and fix related usage issues (#206)
• f8b9eb8 chore: add renovate preset
• d74a71f chore: release pretty-quick (#201)
• 40b2e55 fix: directory symlink handling (#200)
• 5bc6618 chore: release pretty-quick (#199)
• Additional commits viewable in compare view

Updates turbo from 2.4.2 to 2.5.8

Release notes

Sourced from turbo's releases.

Turborepo v2.5.8

What's Changed

create-turbo

• fix: revert #10847 by @​anthonyshew in vercel/turborepo#10882

Changelog

• chore: add Cursor slash command by @​anthonyshew in vercel/turborepo#10881

Full Changelog: vercel/turborepo@v2.5.7...v2.5.8

Turborepo v2.5.8-canary.0

What's Changed

create-turbo

• fix: revert #10847 by @​anthonyshew in vercel/turborepo#10882

Changelog

• chore: add Cursor slash command by @​anthonyshew in vercel/turborepo#10881

Full Changelog: vercel/turborepo@v2.5.7...v2.5.8-canary.0

Turborepo v2.5.7

What's Changed

Docs

• docs: add TURBO_CONCURRENCY to options overview page by @​anthonyshew in vercel/turborepo#10772
• fix(docs): fix broken anchor links to --graph option by @​anthonyshew in vercel/turborepo#10773
• docs: clarify TURBO_TEAM secret usage by @​vikhyathdevadiga in vercel/turborepo#10795
• docs: add Buildkite example to CI Vendors documentation by @​AndrewDiMola in vercel/turborepo#10721
• docs: rework llms.txt and add .md responses by @​anthonyshew in vercel/turborepo#10811
• docs: add name field mention to migration page by @​anthonyshew in vercel/turborepo#10823
• docs: update configuration reference to use correct turbo.json title by @​xcfio in vercel/turborepo#10843
• docs: correct description of how ^ works by @​anthonyshew in vercel/turborepo#10865

create-turbo

• feat(create-turbo): --no-git flag by @​anthonyshew in vercel/turborepo#10720
• chore(create-turbo): fix lint by @​chris-olszewski in vercel/turborepo#10807
• fix(security): update dependencies to resolve warning for node-plop by @​anthonyshew in vercel/turborepo#10847

eslint

• docs: adjust typo on instructions for eslint-config-turbo legacy config by @​evsasse in vercel/turborepo#10717

@​turbo/repository

• chore: reformat code with 2024 edition by @​ognevny in vercel/turborepo#10775

Examples

• chore(deps-dev): bump the with-svelte group in /examples/with-svelte with 6 updates by @​dependabot[bot] in vercel/turborepo#10752
• chore(deps-dev): bump turbo from 2.5.5 to 2.5.6 in /examples/with-shell-commands by @​dependabot[bot] in vercel/turborepo#10781
• chore(deps-dev): bump Description has been truncated

[dependabot]

Labels

The following labels could not be found: dependencies, security. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.