Skip to content

build(deps): bump the production-dependencies group across 1 directory with 5 updates - #26

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-2077aafa03
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-2077aafa03

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 8, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 5 updates in the / directory:

Package From To
@anthropic-ai/sdk 0.111.0 0.124.0
@lancedb/lancedb 0.31.0 0.38.0
execa 9.6.1 10.0.1
ignore 7.0.6 7.0.8
zod 4.4.3 4.5.4

Updates @anthropic-ai/sdk from 0.111.0 to 0.124.0

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk: v0.124.0

0.124.0 (2026-09-04)

Full Changelog: sdk-v0.123.0...sdk-v0.124.0

Features

  • api: add Claude Tag category and user breakdowns to usage reports (669ff22)
  • api: add named types for organization compliance settings state (54be8da)
  • api: add support for sending a workspace ID on more endpoints (a11e6f1)

Bug Fixes

  • repair custom-code merge in messages resources (#455) (7ac43b9)
  • tools: create agent-toolset files and directories owner-only (#485) (a9c2298)

Chores

  • internal: bundle the mock server spec and update breaking-change detection (8752d02)
  • internal: codegen related update (a63afbc)
  • tests: reword the skip reason on the path-level query param tests (999bee5)

Documentation

  • api: update a few doc strings (2ef3d59)

sdk: v0.123.0

0.123.0 (2026-09-01)

Full Changelog: sdk-v0.122.0...sdk-v0.123.0

Features

  • api: beta user profiles: add external_user_onboarded_at, remove relationship in favor of access_type (3efb1a1)
  • api: manual updates (c6f0bda)
  • api: organization compliance settings, user-profile order_by, memory-store and toolset schema updates (8e2f0c2)

Bug Fixes

  • keep credential file access out of non-Node bundles (ab6a4b2)

Chores

  • internal: codegen related update (788ea8b)

... (truncated)

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.124.0 (2026-09-04)

Full Changelog: sdk-v0.123.0...sdk-v0.124.0

Features

  • api: add Claude Tag category and user breakdowns to usage reports (669ff22)
  • api: add named types for organization compliance settings state (54be8da)
  • api: add support for sending a workspace ID on more endpoints (a11e6f1)

Bug Fixes

  • repair custom-code merge in messages resources (#455) (7ac43b9)
  • tools: create agent-toolset files and directories owner-only (#485) (a9c2298)

Chores

  • internal: bundle the mock server spec and update breaking-change detection (8752d02)
  • internal: codegen related update (a63afbc)
  • tests: reword the skip reason on the path-level query param tests (999bee5)

Documentation

  • api: update a few doc strings (2ef3d59)

0.123.0 (2026-09-01)

Full Changelog: sdk-v0.122.0...sdk-v0.123.0

Features

  • api: beta user profiles: add external_user_onboarded_at, remove relationship in favor of access_type (3efb1a1)
  • api: manual updates (c6f0bda)
  • api: organization compliance settings, user-profile order_by, memory-store and toolset schema updates (8e2f0c2)

Bug Fixes

  • keep credential file access out of non-Node bundles (ab6a4b2)

Chores

  • internal: codegen related update (788ea8b)

Documentation

... (truncated)

Commits
  • ba14b1f Merge pull request #1177 from anthropics/release-please--branches--main--chan...
  • f99c1a7 chore: release main
  • 54be8da feat(api): add named types for organization compliance settings state
  • 999bee5 chore(tests): reword the skip reason on the path-level query param tests
  • a9c2298 fix(tools): create agent-toolset files and directories owner-only (#485)
  • 2637d11 chore(examples): refresh platform model IDs (#376)
  • 669ff22 feat(api): add Claude Tag category and user breakdowns to usage reports
  • a9090af Build SDK
  • 8752d02 chore(internal): bundle the mock server spec and update breaking-change detec...
  • a63afbc chore(internal): codegen related update
  • Additional commits viewable in compare view

Updates @lancedb/lancedb from 0.31.0 to 0.38.0

Release notes

Sourced from @​lancedb/lancedb's releases.

LanceDB v0.38.0

🛠 Breaking Changes

🎉 New Features

... (truncated)

Commits
  • 8c68e0c Bump version: 0.38.0-beta.16 → 0.38.0
  • 1a9414c Bump version: 0.38.0-beta.15 → 0.38.0-beta.16
  • c4ee8ae feat: update lance dependency to v11.0.0 (#4093)
  • 57b8d3b Bump version: 0.38.0-beta.14 → 0.38.0-beta.15
  • c6dfe83 feat(python): support large_utf8 function signatures (#4092)
  • d5dac65 feat: support Blob v2 UDF signatures (#4091)
  • 1b0fc2c Bump version: 0.38.0-beta.13 → 0.38.0-beta.14
  • a417e46 feat(functions): support GPU resource requirements (#4085)
  • fcdc3f9 fix: allow multiple function bindings per table (#4090)
  • 0c4e066 Bump version: 0.38.0-beta.12 → 0.38.0-beta.13
  • Additional commits viewable in compare view

Updates execa from 9.6.1 to 10.0.1

Release notes

Sourced from execa's releases.

v10.0.1

  • Fix preferLocal argument escaping edge-case on Windows (#1259) e771733

sindresorhus/execa@v10.0.0...v10.0.1

v10.0.0

Breaking

  • Require Node.js 22. (#1243) 04b4454

  • The subprocess is now a normal promise, instead of a ChildProcess instance augmented with promise methods. All the methods and properties documented by Execa are unchanged. Node.js-specific ChildProcess APIs (such as .on(), .send(), .ref() and .unref()) must now be accessed through the new subprocess.nodeChildProcess property. (#1255) ade74bf

const subprocess = execa('node', ['file.js']);
- subprocess.on('spawn', onSpawn);
+ subprocess.nodeChildProcess.on('spawn', onSpawn);
- await execaCommand('npm run build');
+ await execa`npm run build`;

await execaCommand(commandString);


await execa${parseCommandString(commandString)};
  • Removed the old undocumented stdio: [..., 'ipc'] syntax. Use the ipc: true option instead. (#1245) dcf611c
- await execa('node', ['file.js'], {stdio: ['pipe', 'pipe', 'pipe', 'ipc']});
+ await execa('node', ['file.js'], {ipc: true});
  • When the input or inputFile option is combined with an inherited stdin (for example stdio: 'inherit'), the explicit input is now used, instead of being ignored. To combine multiple inputs, pass an array like stdin: ['inherit', {string: 'input'}]. (#1232) 3ed0544

Improvements

await execa('npm', ['run', 'build'], {killDescendants: true, timeout: 5000});
</tr></table> 

... (truncated)

Commits
  • 8017b27 10.0.1
  • e771733 Fix preferLocal argument escaping edge-case on Windows (#1259)
  • 499fe80 Meta tweaks
  • e389369 10.0.0
  • 3d9d820 Improve taskkill usage (#1258)
  • 5944b2d Update dev dependencies (#1257)
  • 84fa0ec Add killDescendants option to also terminate descendant processes (#1256)
  • ade74bf Add nodeChildProcess to subprocess promises and make the subprocess a norma...
  • 29d9cfc Add .readableStream(), .writableStream() and .transformStream() methods...
  • 522654a Fix flaky test
  • Additional commits viewable in compare view

Updates ignore from 7.0.6 to 7.0.8

Release notes

Sourced from ignore's releases.

7.0.8

PATCH Brings pattern matching closer to git:

  • PATCH A backslash now makes the next character a literal, exactly as git does: \* matches a literal * rather than acting as a wildcard, \? matches a literal ?, and \d, \b, \/ and the like are the plain characters instead of regular-expression escapes.
  • PATCH Only a trailing run of spaces is stripped from a pattern — never tabs or other whitespace — and a line of only tabs is treated as a pattern rather than a blank line, matching git.

An upgrade is recommended for all dependents.

Commits
  • 20b802a bump version 7.0.8
  • 0414358 build: require 100% coverage of index.js as an explicit gate
  • 968aee6 compat: check compatibility by running old versions' test suites
  • 8e46220 build: run the compatibility gate as part of npm test
  • 6e81fb2 tidy up how wildcards compile
  • ea3d5eb fix: a backslash quotes the next character, and only spaces are trimmed
  • 01cfbbb docs: document the known, deliberate differences from git
  • 994237c test: four RED cases, one per confirmed incompatibility with git
  • d69a727 compat: restore the promise to 7.0.7, the release actually covered
  • 042a387 compat: declare compat target 7.0.6
  • Additional commits viewable in compare view

Updates zod from 4.4.3 to 4.5.4

Release notes

Sourced from zod's releases.

v4.5.4

Commits:

  • 84e416fbf4740527bbc8f319634f4e1b065bb42c fix(v4): stop the cycle walk from firing a default factory (#6500)
  • e8e206fa33ac5fe7ce20a2beb12d57b1cb3df653 4.5.4

v4.5.3

Commits:

  • e6b6ab347675cd2bd54b1bdbed16f98c59be82a9 docs(blog): widen the z.compile example to a 20-property schema
  • 87d6464418582bb96fc665a01f852ca6da324ad0 fix(docs): drop the OG description when the title wraps past two lines
  • 99fce394a026823e602b9c30d8d5d9f5f1932ce7 bench(v4): z.compile() against zod-compiler (#6499)
  • e3a695b6bf3f0d591ea682816e3cdaea04b0f967 docs(v4): record the email regex and container output-shape findings under Open
  • 7e24a24288183ce02554f1ded7775d0650a7b7e6 docs(blog): drop the reading time and put a GitHub link in the navbar<...

    Description has been truncated

…y with 5 updates

Bumps the production-dependencies group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.111.0` | `0.124.0` |
| [@lancedb/lancedb](https://github.com/lancedb/lancedb) | `0.31.0` | `0.38.0` |
| [execa](https://github.com/sindresorhus/execa) | `9.6.1` | `10.0.1` |
| [ignore](https://github.com/kaelzhang/node-ignore) | `7.0.6` | `7.0.8` |
| [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.5.4` |



Updates `@anthropic-ai/sdk` from 0.111.0 to 0.124.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.111.0...sdk-v0.124.0)

Updates `@lancedb/lancedb` from 0.31.0 to 0.38.0
- [Release notes](https://github.com/lancedb/lancedb/releases)
- [Changelog](https://github.com/lancedb/lancedb/blob/main/release_process.md)
- [Commits](lancedb/lancedb@v0.31.0...v0.38.0)

Updates `execa` from 9.6.1 to 10.0.1
- [Release notes](https://github.com/sindresorhus/execa/releases)
- [Commits](sindresorhus/execa@v9.6.1...v10.0.1)

Updates `ignore` from 7.0.6 to 7.0.8
- [Release notes](https://github.com/kaelzhang/node-ignore/releases)
- [Commits](kaelzhang/node-ignore@7.0.6...7.0.8)

Updates `zod` from 4.4.3 to 4.5.4
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.4.3...v4.5.4)

---
updated-dependencies:
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.124.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@lancedb/lancedb"
  dependency-version: 0.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: execa
  dependency-version: 10.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: ignore
  dependency-version: 7.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: zod
  dependency-version: 4.5.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 8, 2026
@dependabot
dependabot Bot requested a review from Gerijacki as a code owner September 8, 2026 00:07
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 8, 2026
@github-actions

github-actions Bot commented Sep 8, 2026

Copy link
Copy Markdown

🚧 This is a major version update (@anthropic-ai/sdk, @lancedb/lancedb, execa, ignore, zod). Auto-merge is intentionally disabled for majors — a maintainer will review and merge it manually.

@dependabot @github

dependabot Bot commented on behalf of github Sep 29, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 29, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/production-dependencies-2077aafa03 branch September 29, 2026 00:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants