chore(deps)(deps): bump the production-dependencies group across 1 directory with 17 updates by dependabot[bot] · Pull Request #1223 · objectstack-ai/framework

dependabot · 2026-04-30T02:19:10Z

Bumps the production-dependencies group with 17 updates in the / directory:

Package	From	To
@ai-sdk/gateway	`3.0.104`	`3.0.105`
@oclif/core	`4.10.5`	`4.10.6`
zod	`4.3.6`	`4.4.1`
msw	`2.13.4`	`2.14.2`
ai	`6.0.168`	`6.0.170`
@libsql/client	`0.17.2`	`0.17.3`
hono	`4.12.14`	`4.12.16`
@ai-sdk/provider	`3.0.8`	`3.0.9`
@tanstack/react-router	`1.168.23`	`1.168.26`
lucide-react	`1.8.0`	`1.14.0`
fumadocs-core	`16.8.1`	`16.8.5`
fumadocs-mdx	`14.3.1`	`14.3.2`
fumadocs-ui	`16.8.1`	`16.8.5`
@ai-sdk/anthropic	`3.0.71`	`3.0.72`
@ai-sdk/google	`3.0.64`	`3.0.65`
@ai-sdk/openai	`3.0.53`	`3.0.54`
@ai-sdk/react	`3.0.170`	`3.0.172`

Updates @ai-sdk/gateway from 3.0.104 to 3.0.105

Release notes

Sourced from @ai-sdk/gateway's releases.

@ai-sdk/gateway@3.0.105

Patch Changes

a7f3c72: trigger release for all packages after provenance setup

4368079: Backport: chore(provider/gateway): update gateway model settings files

c71ad14: feat(provider/openai): add gpt-image-2 model support

Updated dependencies [a7f3c72]

@ai-sdk/provider@3.0.9

@ai-sdk/provider-utils@4.0.24

Changelog

Sourced from @ai-sdk/gateway's changelog.

3.0.105

Patch Changes

a7f3c72: trigger release for all packages after provenance setup

4368079: Backport: chore(provider/gateway): update gateway model settings files

c71ad14: feat(provider/openai): add gpt-image-2 model support

Updated dependencies [a7f3c72]

@ai-sdk/provider@3.0.9

@ai-sdk/provider-utils@4.0.24

Commits

77a4e05 Version Packages (#14802)
a7f3c72 Re-enable v6 releases (#14799)
c71ad14 Backport: feat(provider/openai): add gpt-image-2 model support (#14682)
4368079 Backport: chore(provider/gateway): update gateway model settings files v6 (#1...
See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @ai-sdk/gateway since your current version.

Updates @oclif/core from 4.10.5 to 4.10.6

Release notes

Sourced from @oclif/core's releases.

4.10.6

Bug Fixes

deps: bump postcss from 8.4.31 to 8.5.10 (9b29ad4)

Changelog

Sourced from @oclif/core's changelog.

4.10.6 (2026-04-25)

Bug Fixes

deps: bump postcss from 8.4.31 to 8.5.10 (9b29ad4)

Commits

1316e3a chore(release): 4.10.6 [skip ci]
4d2464f Merge pull request #1586 from oclif/dependabot-npm_and_yarn-postcss-8.5.10
9b29ad4 fix(deps): bump postcss from 8.4.31 to 8.5.10
507445a Merge pull request #1581 from oclif/dependabot-npm_and_yarn-oclif-plugin-help...
3821db3 Merge pull request #1582 from oclif/dependabot-npm_and_yarn-eslint-config-ocl...
4075594 Merge pull request #1583 from oclif/dependabot-npm_and_yarn-oclif-plugin-plug...
e8dcb6e Merge pull request #1584 from oclif/dependabot-npm_and_yarn-prettier-3.8.3
c8bc52b chore(dev-deps): bump prettier from 3.8.2 to 3.8.3
105e404 chore(dev-deps): bump @oclif/plugin-plugins from 5.4.60 to 5.4.61
0eafd76 chore(dev-deps): bump eslint-config-oclif from 6.0.156 to 6.0.157
Additional commits viewable in compare view

Updates zod from 4.3.6 to 4.4.1

Release notes

Sourced from zod's releases.

v4.4.1

Commits:

481f7be4238c83ed58183f921b2646f340a91c6a ci: gate release publishing on full test workflow

95ccab423aec720b2523c3a64cdc7e3204537cc7 test(v3): restore optional undefined expectations

cede2c63739a5823d6aa5093d291e9a111da943d fix(v4): reject tuple holes before required defaults (#5900)

edd0bf0f5ada4a8dc581c259407d7bbad0a71ea7 release: 4.4.1

180d83d1dbe6a59260710cc8637a3dea2281ee56 docs: remove Jazz featured sponsor

v4.4.0

4.4.0

This is a minor release with a wide set of correctness and soundness fixes. Some fixes intentionally make Zod stricter, so code that depended on previously accepted invalid or ambiguous inputs may need small updates.

Potentially breaking bug fixes

Tuple defaults now materialize output values correctly

Fixed in #5661. Tuple parsing now more accurately reflects defaults, optional tails, explicit undefined, and under-filled inputs. The headline behavior is that defaults in tuple positions now properly appear in parsed output.
const schema = z.tuple([
  z.string(),
  z.string().default("fallback"),
]);
schema.parse(["a"]);
// ["a", "fallback"]
Trailing optional elements that are absent still stay absent; they are not filled with undefined.
const schema = z.tuple([
  z.string(),
  z.string().optional(),
]);
schema.parse(["a"]);
// ["a"]
But explicit undefined values supplied by the caller are preserved.
schema.parse(["a", undefined]);
// ["a", undefined]
When optional elements appear before later defaults, the parsed tuple is now dense so array operations behave predictably.

... (truncated)

Commits

180d83d docs: remove Jazz featured sponsor
edd0bf0 release: 4.4.1
cede2c6 fix(v4): reject tuple holes before required defaults (#5900)
95ccab4 test(v3): restore optional undefined expectations
481f7be ci: gate release publishing on full test workflow
d05f026 release: 4.4.0
f778e02 build: bump zshy for JSR wildcard exports
6db607b fix(release): keep JSR manifest publishable
ad0b827 ci: update release workflow for trusted publishing
b6066b3 fix(v4): align object and tuple optionality handling (#5661)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for zod since your current version.

Updates msw from 2.13.4 to 2.14.2

Release notes

Sourced from msw's releases.

v2.14.2 (2026-04-29)

Bug Fixes

export the NetworkApi type (#2734) (f0c03214b59f906ca8e92e3f0bb5d08fdf7d6f5e) @kettanaito

v2.14.1 (2026-04-29)

Bug Fixes

export default handler controllers (#2733) (f8dc874a236a4bd376c23cce9dd55ed59b8279e2) @kettanaito

v2.14.0 (2026-04-29)

Features

support ws.onUpgrade for handling connection upgrades (#2732) (e00e4d693db34884a316f659b8dcfb507cd79dce) @kettanaito

Bug Fixes

do not clone user-provided responses (#2731) (6953307c8061626d31a3651e69d47c885c0e4b76) @kettanaito

HttpResponse: forward cookies only when response is used (#2728) (30668e68f403535636bfb8dc12c64299d9c1c6e6) @kettanaito

v2.13.6 (2026-04-24)

Bug Fixes

WebSocketHandler: add public test() method (#2727) (3da7048e05fae80fe3410e3af86f6c3dd3cfaead) @kettanaito

v2.13.5 (2026-04-23)

Bug Fixes

reset generator state on .resetHandlers()/.restoreHandlers() (#2725) (8d16801cacd89e5aff336c43e888df19fad04417) @kettanaito

Commits

4bc4a5c chore(release): v2.14.2
f0c0321 fix: export the NetworkApi type (#2734)
52dca1e chore(release): v2.14.1
f8dc874 fix: export default handler controllers (#2733)
7fd02bd chore(release): v2.14.0
e00e4d6 feat: support ws.onUpgrade for handling connection upgrades (#2732)
6953307 fix: do not clone user-provided responses (#2731)
30668e6 fix(HttpResponse): forward cookies only when response is used (#2728)
a680221 chore(release): v2.13.6
3da7048 fix(WebSocketHandler): add public test() method (#2727)
Additional commits viewable in compare view

Updates ai from 6.0.168 to 6.0.170

Release notes

Sourced from ai's releases.

ai@6.0.170

Patch Changes

19d587a: fix(ai): add allowSystemInMessages option and warn by default when system messages are found in prompt or messages

ai@6.0.169

Patch Changes

2662bb5: skip validation for tool parts in terminal states when tool schema is no longer registered

a7f3c72: trigger release for all packages after provenance setup

Updated dependencies [a7f3c72]

Updated dependencies [4368079]

Updated dependencies [c71ad14]

@ai-sdk/gateway@3.0.105

@ai-sdk/provider@3.0.9

@ai-sdk/provider-utils@4.0.24

Changelog

Sourced from ai's changelog.

6.0.170

Patch Changes

19d587a: fix(ai): add allowSystemInMessages option and warn by default when system messages are found in prompt or messages

6.0.169

Patch Changes

2662bb5: skip validation for tool parts in terminal states when tool schema is no longer registered

a7f3c72: trigger release for all packages after provenance setup

Updated dependencies [a7f3c72]

Updated dependencies [4368079]

Updated dependencies [c71ad14]

@ai-sdk/gateway@3.0.105

@ai-sdk/provider@3.0.9

@ai-sdk/provider-utils@4.0.24

Commits

7ab1e18 Version Packages (#14815)
19d587a v6: fix(ai): warn about system messages in messages or prompt (#14810)
77a4e05 Version Packages (#14802)
a7f3c72 Re-enable v6 releases (#14799)
2662bb5 Backport: fix(ai): skip tool validation for terminal states when schema is mi...
See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for ai since your current version.

Updates @libsql/client from 0.17.2 to 0.17.3

Commits

9d158a7 0.17.3
db72126 0.17.3-pre.2
e5d5841 Drop removed hrana-client re-exports from client test
82b63c0 0.17.3-pre.1
d377872 Update @libsql/hrana-client to 0.10.0
See full diff in compare view

Updates hono from 4.12.14 to 4.12.16

Release notes

Sourced from hono's releases.

v4.12.16

Security fixes

This release includes fixes for the following security issues:

Unvalidated JSX Tag Names in hono/jsx May Allow HTML Injection

Affects: hono/jsx. Fixes missing validation of JSX tag names when using jsx() or createElement(), which could allow HTML injection if untrusted input is used as the tag name. GHSA-69xw-7hcm-h432

bodyLimit() can be bypassed for chunked / unknown-length requests

Affects: Body Limit Middleware. Fixes late enforcement for request bodies without a reliable Content-Length (e.g. chunked requests), where oversized requests could reach handlers and return successful responses before being rejected. GHSA-9vqf-7f2p-gf9v

v4.12.15

What's Changed

fix(jwt): support single-line PEM keys by @hiendv in honojs/hono#4889

New Contributors

@hiendv made their first contribution in honojs/hono#4889

Full Changelog: honojs/hono@v4.12.14...v4.12.15

Commits

90d4182 4.12.16
db05b96 Merge commit from fork
614b834 Merge commit from fork
027e3df fix(method-override): handle Content-Type with charset parameter (#4894)
f774f8d 4.12.15
18fe604 fix(jwt): support single-line PEM keys (#4889)
See full diff in compare view

Updates @ai-sdk/provider from 3.0.8 to 3.0.9

Release notes

Sourced from @ai-sdk/provider's releases.

@ai-sdk/provider@3.0.9

Patch Changes

a7f3c72: trigger release for all packages after provenance setup

Changelog

Sourced from @ai-sdk/provider's changelog.

3.0.9

Patch Changes

a7f3c72: trigger release for all packages after provenance setup

Commits

77a4e05 Version Packages (#14802)
a7f3c72 Re-enable v6 releases (#14799)
9620650 chore: replace eslint + prettier with oxlint + oxfmt via ultracite (#13689)
See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @ai-sdk/provider since your current version.

Updates @tanstack/react-router from 1.168.23 to 1.168.26

Changelog

Sourced from @tanstack/react-router's changelog.

1.168.26

Patch Changes

Updated dependencies [b5c4183]:

@tanstack/router-core@1.168.18

1.168.25

Patch Changes

Updated dependencies [493148b]:

@tanstack/router-core@1.168.17

1.168.24

Patch Changes

Add TanStack Start inline CSS manifest support for SSR so route styles can be embedded in the HTML response and hydrated without duplicate stylesheet links. (#7253)

Updated dependencies [4d864ee]:

@tanstack/router-core@1.168.16

Commits

a730094 ci: changeset release
1285422 ci: changeset release
4c161c5 ci: changeset release
4d864ee inline css (#7253)
91a7089 rsbuild plugin (#7228)
See full diff in compare view

Updates lucide-react from 1.8.0 to 1.14.0

Release notes

Sourced from lucide-react's releases.

Version 1.14.0

What's Changed

feat(icons): added repeat-off icon by @jguddas in lucide-icons/lucide#3102

Full Changelog: lucide-icons/lucide@1.13.0...1.14.0

Version 1.13.0

What's Changed

fix(docs): sync URL params with UI state on categories page by @taimar in lucide-icons/lucide#4111

feat(icons): add waves-vertical icon by @jamiemlaw in lucide-icons/lucide#3867

Full Changelog: lucide-icons/lucide@1.12.0...1.13.0

Version 1.12.0

What's Changed

feat(icon): add folder-bookmark icon by @swastik7805 in lucide-icons/lucide#4262

docs(readme): Update readme files by @ericfennis in lucide-icons/lucide#4320

feat(icons): added astroid icon by @whoisBugsbunny in lucide-icons/lucide#4217

Full Changelog: lucide-icons/lucide@1.10.0...1.12.0

Version 1.11.0

What's Changed

docs: add missing period to TypeScript Support description by @jglu in lucide-icons/lucide#4309

fix(@lucide/svelte): proper doc comments for svelte components by @blt-r in lucide-icons/lucide#4267

chore(deps): bump svgo from 3.3.2 to 3.3.3 by @dependabot[bot] in lucide-icons/lucide#4119

chore(deps-dev): bump astro from 6.0.8 to 6.1.6 by @dependabot[bot] in lucide-icons/lucide#4310

feat(icons): add power and quick tags to zap and zap-off by @swastik7805 in lucide-icons/lucide#4268

test(build-font): added comprehensive unit tests on build-font tool by @karsa-mistmere in lucide-icons/lucide#4315

feat(docs): blur background of framework-select by @Spleefies in lucide-icons/lucide#4238

feat(icon): add heart-x icon by @swastik7805 in lucide-icons/lucide#4264

fix(icons): optimised rotate-3d icon by @jamiemlaw in lucide-icons/lucide#4299

feat(icons): added layers-minus icon by @Spleefies in lucide-icons/lucide#4005

feat(icons): added bell-check icon by @pettelau in lucide-icons/lucide#4152

New Contributors

@jglu made their first contribution in lucide-icons/lucide#4309

@pettelau made their first contribution in lucide-icons/lucide#4152

Full Changelog: lucide-icons/lucide@1.9.0...1.11.0

Version 1.10.0

What's Changed

docs: add missing period to TypeScript Support description by @jglu in lucide-icons/lucide#4309

fix(@lucide/svelte): proper doc comments for svelte components by @blt-r in lucide-icons/lucide#4267

chore(deps): bump svgo from 3.3.2 to 3.3.3 by @dependabot[bot] in lucide-icons/lucide#4119

chore(deps-dev): bump astro from 6.0.8 to 6.1.6 by @dependabot[bot] in lucide-icons/lucide#4310

... (truncated)

Commits

50d8af5 docs(readme): Update readme files (#4320)
653e44b feat(packages): use .mjs for ESM bundles (#4285)
See full diff in compare view

Updates fumadocs-core from 16.8.1 to 16.8.5

Release notes

Sourced from fumadocs-core's releases.

fumadocs-core@16.8.5

Patch Changes

79d3209: Narrow schema type for private OpenAPI properties

fumadocs-core@16.8.4

Patch Changes

61b15e9: fix Shiki languages not loaded under lazy mode

1a5433c: Support $ in locale for page tree generation

fumadocs-core@16.8.3

No release notes provided.

fumadocs-core@16.8.2

No release notes provided.

Commits

d6bf3e0 Merge pull request #3235 from fuma-nama/changeset-release/dev
af7ee2d CLI: fix layout preserve plugin
970b1bf OpenAPI: fix inconsistency in option names
2eff8e9 Chore: update showcases
fa781f1 fix jsdoc omitted from output
a83709f clean code
3e85c69 Docs: add more docs for MDX Remote
79d3209 Core: narrow schema types
387e659 UI: relocate toc width
e1f19c7 Version Packages (#3232)
Additional commits viewable in compare view

Updates fumadocs-mdx from 14.3.1 to 14.3.2

Release notes

Sourced from fumadocs-mdx's releases.

fumadocs-mdx@14.3.2

Patch Changes

79d3209: Deprecate forwarded schemas at fumadocs-mdx/config, recommend fumadocs-core/source/schema instead.

Updated dependencies [79d3209]

fumadocs-core@16.8.5

Commits

d6bf3e0 Merge pull request #3235 from fuma-nama/changeset-release/dev
af7ee2d CLI: fix layout preserve plugin
970b1bf OpenAPI: fix inconsistency in option names
2eff8e9 Chore: update showcases
fa781f1 fix jsdoc omitted from output
a83709f clean code
3e85c69 Docs: add more docs for MDX Remote
79d3209 Core: narrow schema types
387e659 UI: relocate toc width
e1f19c7 Version Packages (#3232)
Additional commits viewable in compare view

Updates fumadocs-ui from 16.8.1 to 16.8.5

Release notes

Sourced from fumadocs-ui's releases.

fumadocs-ui@16.8.5

Patch Changes

Updated dependencies [79d3209]

fumadocs-core@16.8.5

fumadocs-ui@16.8.4

Patch Changes

b5ff03b: Support new OG image design for Takumi

Updated dependencies [61b15e9]

Updated dependencies [1a5433c]

fumadocs-core@16.8.4

fumadocs-ui@16.8.3

Patch Changes

8082ef6: Add legacy/layout for versions prior to 16.2

8082ef6: Add css/preset-legacy.css for versions prior to 16.2

8082ef6: Add legacy/sidebar for versions prior to 16.2

fumadocs-core@16.8.3

fumadocs-ui@16.8.2

Patch Changes

0e8405a: Update default OG image

fumadocs-core@16.8.2

Commits

d6bf3e0 Merge pull request #3235 from fuma-nama/changeset-release/dev
af7ee2d CLI: fix layout preserve plugin
970b1bf OpenAPI: fix inconsistency in option names
2eff8e9 Chore: update showcases
fa781f1 fix jsdoc omitted from output
a83709f clean code
3e85c69 Docs: add more docs for MDX Remote
79d3209 Core: narrow schema types
387e659 UI: relocate toc width
e1f19c7 Version Packages (#3232)
Additional commits viewable in compare view

Updates @ai-sdk/anthropic from 3.0.71 to 3.0.72

Release notes

Sourced from @ai-sdk/anthropic's releases.

@ai-sdk/anthropic@3.0.72

Patch Changes

a7f3c72: trigger release for all packages after provenance setup

Updated dependencies [a7f3c72]

@ai-sdk/provider@3.0.9

@ai-sdk/provider-utils@4.0.24

Changelog

Sourced from @ai-sdk/anthropic's changelog.

3.0.72

Patch Changes

a7f3c72: trigger release for all packages after provenance setup

Updated dependencies [a7f3c72]

@ai-sdk/provider@3.0.9

@ai-sdk/provider-utils@4.0.24

Commits

77a4e05 Version Packages (#14802)
a7f3c72 Re-enable v6 releases (#14799)
See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @ai-sdk/anthropic since your current version.

Updates @ai-sdk/google from 3.0.64 to 3.0.65

Release notes

Sourced from @ai-sdk/google's releases.

@ai-sdk/google@3.0.65

Patch Changes

a7f3c72: trigger release for all packages after provenance setup

Updated dependencies [a7f3c72]

@ai-sdk/provider@3.0.9

@ai-sdk/provider-utils@4.0.24

Changelog

Sourced from @ai-sdk/google's changelog.

3.0.65

Patch Changes

a7f3c72: trigger release for all packages after provenance setup

Updated dependencies [a7f3c72]

@ai-sdk/provider@3.0.9

@ai-sdk/provider-utils@4.0.24

Commits

77a4e05 Version Packages (#14802)
a7f3c72 Re-enable v6 releases (#14799)
See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @ai-sdk/google since your current version.

Updates @ai-sdk/openai from 3.0.53 to 3.0.54

Release notes

Sourced from @ai-sdk/openai's releases.

@ai-sdk/openai@3.0.54

Patch Changes

a7f3c72: trigger release for all packages after provenance setup

408a2ad: patch - send content: null instead of empty string for tool-only assistant messages

c71ad14: feat(provider/openai): add gpt-image-2 model support

Updated dependencies [a7f3c72]

@ai-sdk/provider@3.0.9

@ai-sdk/provider-utils@4.0.24

Changelog

Sourced from @ai-sdk/openai's changelog.

3.0.54

Patch Changes

a7f3c72: trigger release for all packages after provenance setup

408a2ad: patch - send content: null instead of empty string for tool-only assistant messages

c71ad14: feat(provider/openai): add gpt-image-2 model support

Updated dependencies [a7f3c72]

@ai-sdk/provider@3.0.9

@ai-sdk/provider-utils@4.0.24

Commits

77a4e05 Version Packages (#14802)
a7f3c72 Re-enable v6 releases (#14799)
c71ad14 Backport: feat(provider/openai): add gpt-image-2 model support (#14682)
408a2ad Backport: fix(openai, openai-compatible): send null content for tool-only ass...
See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @ai-sdk/openai since your current version.

Updates @ai-sdk/react from 3.0.170 to 3.0.172

Release notes

Sourced from @ai-sdk/react's releases.

@ai-sdk/react@3.0.172

Patch Changes

Updated dependencies [19d587a]

ai@6.0.170

@ai-sdk/react@3.0.171

Patch Changes

a7f3c72: trigger release for all packages after provenance setup

Updated dependencies [2662bb5]

Updated dependencies [a7f3c72]

ai@6.0.169

@ai-sdk/provider-utils@4.0.24

Changelog

Sourced from @ai-sdk/react's changelog.

3.0.172

Patch Changes

Updated dependencies [19d587a]

ai@6.0.170

3.0.171

Patch Changes

a7f3c72: trigger release for all packages after provenance setup

Updated dependencies [2662bb5]

Updated dependencies [a7f3c72]

ai@6.0.169

@ai-sdk/provider-utils@4.0.24

Commits

7ab1e18 Version Packages (#14815)
77a4e05 Version Packages (#14802)
a7f3c72 Re-enable v6 releases (#14799)
See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @ai-sdk/react since your current version.

vercel · 2026-04-30T02:19:14Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
objectstack-cloud	Ready	Preview, Comment	Apr 30, 2026 1:48pm
objectstack-play	Error		Apr 30, 2026 1:48pm
spec	Ready	Preview, Comment	Apr 30, 2026 1:48pm

…rectory with 17 updates Bumps the production-dependencies group with 17 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@ai-sdk/gateway](https://github.com/vercel/ai/tree/HEAD/packages/gateway) | `3.0.104` | `3.0.105` | | [@oclif/core](https://github.com/oclif/core) | `4.10.5` | `4.10.6` | | [zod](https://github.com/colinhacks/zod) | `4.3.6` | `4.4.1` | | [msw](https://github.com/mswjs/msw) | `2.13.4` | `2.14.2` | | [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `6.0.168` | `6.0.170` | | [@libsql/client](https://github.com/tursodatabase/libsql-client-ts/tree/HEAD/packages/libsql-client) | `0.17.2` | `0.17.3` | | [hono](https://github.com/honojs/hono) | `4.12.14` | `4.12.16` | | [@ai-sdk/provider](https://github.com/vercel/ai/tree/HEAD/packages/provider) | `3.0.8` | `3.0.9` | | [@tanstack/react-router](https://github.com/TanStack/router/tree/HEAD/packages/react-router) | `1.168.23` | `1.168.26` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.8.0` | `1.14.0` | | [fumadocs-core](https://github.com/fuma-nama/fumadocs) | `16.8.1` | `16.8.5` | | [fumadocs-mdx](https://github.com/fuma-nama/fumadocs) | `14.3.1` | `14.3.2` | | [fumadocs-ui](https://github.com/fuma-nama/fumadocs) | `16.8.1` | `16.8.5` | | [@ai-sdk/anthropic](https://github.com/vercel/ai/tree/HEAD/packages/anthropic) | `3.0.71` | `3.0.72` | | [@ai-sdk/google](https://github.com/vercel/ai/tree/HEAD/packages/google) | `3.0.64` | `3.0.65` | | [@ai-sdk/openai](https://github.com/vercel/ai/tree/HEAD/packages/openai) | `3.0.53` | `3.0.54` | | [@ai-sdk/react](https://github.com/vercel/ai/tree/HEAD/packages/react) | `3.0.170` | `3.0.172` | Updates `@ai-sdk/gateway` from 3.0.104 to 3.0.105 - [Release notes](https://github.com/vercel/ai/releases) - [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/gateway@3.0.105/packages/gateway/CHANGELOG.md) - [Commits](https://github.com/vercel/ai/commits/@ai-sdk/gateway@3.0.105/packages/gateway) Updates `@oclif/core` from 4.10.5 to 4.10.6 - [Release notes](https://github.com/oclif/core/releases) - [Changelog](https://github.com/oclif/core/blob/main/CHANGELOG.md) - [Commits](oclif/core@4.10.5...4.10.6) Updates `zod` from 4.3.6 to 4.4.1 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.3.6...v4.4.1) Updates `msw` from 2.13.4 to 2.14.2 - [Release notes](https://github.com/mswjs/msw/releases) - [Changelog](https://github.com/mswjs/msw/blob/main/CHANGELOG.md) - [Commits](mswjs/msw@v2.13.4...v2.14.2) Updates `ai` from 6.0.168 to 6.0.170 - [Release notes](https://github.com/vercel/ai/releases) - [Changelog](https://github.com/vercel/ai/blob/ai@6.0.170/packages/ai/CHANGELOG.md) - [Commits](https://github.com/vercel/ai/commits/ai@6.0.170/packages/ai) Updates `@libsql/client` from 0.17.2 to 0.17.3 - [Release notes](https://github.com/tursodatabase/libsql-client-ts/releases) - [Changelog](https://github.com/tursodatabase/libsql-client-ts/blob/main/CHANGELOG.md) - [Commits](https://github.com/tursodatabase/libsql-client-ts/commits/v0.17.3/packages/libsql-client) Updates `hono` from 4.12.14 to 4.12.16 - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.12.14...v4.12.16) Updates `@ai-sdk/provider` from 3.0.8 to 3.0.9 - [Release notes](https://github.com/vercel/ai/releases) - [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/provider@3.0.9/packages/provider/CHANGELOG.md) - [Commits](https://github.com/vercel/ai/commits/@ai-sdk/provider@3.0.9/packages/provider) Updates `@tanstack/react-router` from 1.168.23 to 1.168.26 - [Release notes](https://github.com/TanStack/router/releases) - [Changelog](https://github.com/TanStack/router/blob/main/packages/react-router/CHANGELOG.md) - [Commits](https://github.com/TanStack/router/commits/@tanstack/react-router@1.168.26/packages/react-router) Updates `lucide-react` from 1.8.0 to 1.14.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.14.0/packages/lucide-react) Updates `fumadocs-core` from 16.8.1 to 16.8.5 - [Release notes](https://github.com/fuma-nama/fumadocs/releases) - [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs-core@16.8.1...fumadocs-core@16.8.5) Updates `fumadocs-mdx` from 14.3.1 to 14.3.2 - [Release notes](https://github.com/fuma-nama/fumadocs/releases) - [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs-ui@14.3.1...fumadocs-mdx@14.3.2) Updates `fumadocs-ui` from 16.8.1 to 16.8.5 - [Release notes](https://github.com/fuma-nama/fumadocs/releases) - [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs-ui@16.8.1...fumadocs-ui@16.8.5) Updates `@ai-sdk/anthropic` from 3.0.71 to 3.0.72 - [Release notes](https://github.com/vercel/ai/releases) - [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/anthropic@3.0.72/packages/anthropic/CHANGELOG.md) - [Commits](https://github.com/vercel/ai/commits/@ai-sdk/anthropic@3.0.72/packages/anthropic) Updates `@ai-sdk/google` from 3.0.64 to 3.0.65 - [Release notes](https://github.com/vercel/ai/releases) - [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/google@3.0.65/packages/google/CHANGELOG.md) - [Commits](https://github.com/vercel/ai/commits/@ai-sdk/google@3.0.65/packages/google) Updates `@ai-sdk/openai` from 3.0.53 to 3.0.54 - [Release notes](https://github.com/vercel/ai/releases) - [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/openai@3.0.54/packages/openai/CHANGELOG.md) - [Commits](https://github.com/vercel/ai/commits/@ai-sdk/openai@3.0.54/packages/openai) Updates `@ai-sdk/react` from 3.0.170 to 3.0.172 - [Release notes](https://github.com/vercel/ai/releases) - [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/react@3.0.172/packages/react/CHANGELOG.md) - [Commits](https://github.com/vercel/ai/commits/@ai-sdk/react@3.0.172/packages/react) --- updated-dependencies: - dependency-name: "@ai-sdk/anthropic" dependency-version: 3.0.72 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@ai-sdk/gateway" dependency-version: 3.0.105 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@ai-sdk/google" dependency-version: 3.0.65 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@ai-sdk/openai" dependency-version: 3.0.54 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@ai-sdk/provider" dependency-version: 3.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@ai-sdk/react" dependency-version: 3.0.172 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@libsql/client" dependency-version: 0.17.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@oclif/core" dependency-version: 4.10.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@tanstack/react-router" dependency-version: 1.168.26 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: ai dependency-version: 6.0.170 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: fumadocs-core dependency-version: 16.8.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: fumadocs-mdx dependency-version: 14.3.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: fumadocs-ui dependency-version: 16.8.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: hono dependency-version: 4.12.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: lucide-react dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: msw dependency-version: 2.14.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: zod dependency-version: 4.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 30, 2026

github-actions Bot added documentation Improvements or additions to documentation size/s labels Apr 30, 2026

vercel Bot had a problem deploying to Preview – objectstack-play April 30, 2026 02:21 Failure

vercel Bot deployed to Preview – spec April 30, 2026 02:22 View deployment

dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-9dd5fb7534 branch from 8a359f0 to c42a5f3 Compare April 30, 2026 05:42

vercel Bot had a problem deploying to Preview – objectstack-cloud April 30, 2026 05:43 Failure

vercel Bot deployed to Preview – spec April 30, 2026 05:45 View deployment

dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-9dd5fb7534 branch from c42a5f3 to 2fabf7c Compare April 30, 2026 13:46

vercel Bot deployed to Preview – objectstack-cloud April 30, 2026 13:48 View deployment

vercel Bot deployed to Preview – spec April 30, 2026 13:48 View deployment

hotlong merged commit fc3bc4a into main Apr 30, 2026
13 of 14 checks passed

dependabot Bot deleted the dependabot/npm_and_yarn/production-dependencies-9dd5fb7534 branch April 30, 2026 14:51

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps)(deps): bump the production-dependencies group across 1 directory with 17 updates#1223

chore(deps)(deps): bump the production-dependencies group across 1 directory with 17 updates#1223
hotlong merged 1 commit intomainfrom
dependabot/npm_and_yarn/production-dependencies-9dd5fb7534

dependabot Bot commented on behalf of github Apr 30, 2026 •

edited

Loading

Uh oh!

vercel Bot commented Apr 30, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Apr 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

@​ai-sdk/gateway@​3.0.105

Patch Changes

3.0.105

Patch Changes

4.10.6

Bug Fixes

4.10.6 (2026-04-25)

Bug Fixes

v4.4.1

Commits:

v4.4.0

4.4.0

Potentially breaking bug fixes

Tuple defaults now materialize output values correctly

v2.14.2 (2026-04-29)

Bug Fixes

v2.14.1 (2026-04-29)

Bug Fixes

v2.14.0 (2026-04-29)

Features

Bug Fixes

v2.13.6 (2026-04-24)

Bug Fixes

v2.13.5 (2026-04-23)

Bug Fixes

ai@6.0.170

Patch Changes

ai@6.0.169

Patch Changes

6.0.170

Patch Changes

6.0.169

Patch Changes

v4.12.16

Security fixes

Unvalidated JSX Tag Names in hono/jsx May Allow HTML Injection

bodyLimit() can be bypassed for chunked / unknown-length requests

v4.12.15

What's Changed

New Contributors

@​ai-sdk/provider@​3.0.9

Patch Changes

3.0.9

Patch Changes

1.168.26

Patch Changes

1.168.25

Patch Changes

1.168.24

Patch Changes

Version 1.14.0

What's Changed

Version 1.13.0

What's Changed

Version 1.12.0

What's Changed

Version 1.11.0

What's Changed

New Contributors

Version 1.10.0

What's Changed

fumadocs-core@16.8.5

Patch Changes

fumadocs-core@16.8.4

Patch Changes

fumadocs-core@16.8.3

fumadocs-core@16.8.2

fumadocs-mdx@14.3.2

Patch Changes

fumadocs-ui@16.8.5

Patch Changes

fumadocs-ui@16.8.4

Patch Changes

fumadocs-ui@16.8.3

Patch Changes

fumadocs-ui@16.8.2

Patch Changes

dependabot Bot commented on behalf of github Apr 30, 2026 •

edited

Loading

`@ai-sdk/gateway@3`.0.105

`@ai-sdk/provider@3`.0.9

`@ai-sdk/anthropic@3`.0.72

`@ai-sdk/google@3`.0.65

`@ai-sdk/openai@3`.0.54

`@ai-sdk/react@3`.0.172

`@ai-sdk/react@3`.0.171

vercel Bot commented Apr 30, 2026 •

edited

Loading