Skip to content

fix(deps): bump the npm-major group with 7 updates#5850

Merged
supabase-cli-releaser[bot] merged 1 commit into
developfrom
dependabot/npm_and_yarn/npm-major-7935576420
Jul 10, 2026
Merged

fix(deps): bump the npm-major group with 7 updates#5850
supabase-cli-releaser[bot] merged 1 commit into
developfrom
dependabot/npm_and_yarn/npm-major-7935576420

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 10, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-major group with 7 updates:

Package From To
undici 8.5.0 8.6.0
@anthropic-ai/claude-agent-sdk 0.3.198 0.3.199
@anthropic-ai/sdk 0.109.1 0.110.0
posthog-node 5.39.2 5.39.4
@typescript/native-preview 7.0.0-dev.20260701.1 7.0.0-dev.20260702.3
knip 6.23.0 6.24.0
tldts 6.1.86 7.4.6

Updates undici from 8.5.0 to 8.6.0

Release notes

Sourced from undici's releases.

v8.6.0

What's Changed

New Contributors

Full Changelog: nodejs/undici@v8.5.0...v8.6.0

Commits
  • 6f86196 Bumped v8.6.0 (#5491)
  • 61ddd8e fix: requeue h2 requests after goaway (#5473)
  • c5085ef feat: support HTTP QUERY method (RFC 10008) (#5459)
  • c144fd6 build(deps): bump github/codeql-action/analyze from 4.36.1 to 4.36.2 (#5477)
  • 782ad38 build(deps): bump github/codeql-action from 4.36.1 to 4.36.2 (#5484)
  • c4e045a build(deps): bump actions/checkout from 6.0.3 to 7.0.0 (#5482)
  • de960db build(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0 (#5478)
  • 1132de8 build(deps): bump fastify/github-action-merge-dependabot (#5480)
  • 3acb7ba build(deps): bump github/codeql-action/upload-sarif (#5481)
  • 88c4254 build(deps): bump github/codeql-action/init from 4.36.1 to 4.36.2 (#5476)
  • Additional commits viewable in compare view

Updates @anthropic-ai/claude-agent-sdk from 0.3.198 to 0.3.199

Release notes

Sourced from @​anthropic-ai/claude-agent-sdk's releases.

v0.3.199

What's changed

  • Added requestId to canUseTool callback options for correlating out-of-band permission responses, and support for returning null to suppress the SDK's automatic control response
  • Added blocked field to workflow_agent progress events indicating when an agent was blocked by the auto-mode safety classifier
  • Added mode:"mask" and per-credential injectHosts to sandbox.credentials settings types for injecting masked credentials into sandboxed commands

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.199
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.199
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.199
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.199
Changelog

Sourced from @​anthropic-ai/claude-agent-sdk's changelog.

0.3.199

  • Added requestId to canUseTool callback options for correlating out-of-band permission responses, and support for returning null to suppress the SDK's automatic control response
  • Added blocked field to workflow_agent progress events indicating when an agent was blocked by the auto-mode safety classifier
  • Added mode:"mask" and per-credential injectHosts to sandbox.credentials settings types for injecting masked credentials into sandboxed commands
Commits

Updates @anthropic-ai/sdk from 0.109.1 to 0.110.0

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk: v0.110.0

0.110.0 (2026-07-02)

Full Changelog: sdk-v0.109.1...sdk-v0.110.0

Features

  • api: add agent-memory-2026-07-22 beta header (a470e10)
Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.110.0 (2026-07-02)

Full Changelog: sdk-v0.109.1...sdk-v0.110.0

Features

  • api: add agent-memory-2026-07-22 beta header (a470e10)
Commits

Updates posthog-node from 5.39.2 to 5.39.4

Release notes

Sourced from posthog-node's releases.

posthog-node@5.39.4

5.39.4

Patch Changes

posthog-node@5.39.3

5.39.3

Patch Changes

  • #4055 64e04ba Thanks @​marandaneto! - Retry /flags requests that receive HTTP 502 or 504 responses across SDKs that use the shared core flags client. (2026-07-02)
  • Updated dependencies [64e04ba]:
    • @​posthog/core@​1.39.4
Changelog

Sourced from posthog-node's changelog.

5.39.4

Patch Changes

5.39.3

Patch Changes

  • #4055 64e04ba Thanks @​marandaneto! - Retry /flags requests that receive HTTP 502 or 504 responses across SDKs that use the shared core flags client. (2026-07-02)
  • Updated dependencies [64e04ba]:
    • @​posthog/core@​1.39.4
Commits
  • 0ba87cb chore: update versions and lockfile [version bump]
  • 0c11747 fix: stop duplicating distinct_id in flags person properties (#4047)
  • 4eb8b21 chore: update versions and lockfile [version bump]
  • dd90e55 test(node): make local polling tests deterministic (#4043)
  • See full diff in compare view

Updates @typescript/native-preview from 7.0.0-dev.20260701.1 to 7.0.0-dev.20260702.3

Commits

Updates knip from 6.23.0 to 6.24.0

Release notes

Sourced from knip's releases.

Release 6.24.0

  • chore: update year in license (#1833) (32bc844dfd3895884b11fea5ef94bf3fa1974946) - thanks @​trueberryless!
  • ci: pin github actions (#1835) (82a8d0913105a637e9eeccfe3b785be90c873e2a) - thanks @​trueberryless!
  • Assume Node 24+/Bun and remove compilation step (d9ef038429bec06c37fdb520e5c7353c8cae6ce7)
  • Don't report working-directory scripts as unlisted binaries (resolve #1834) (aea7923438f0a8f459458578526f358b02497f77)
  • Add pnpm run lint to CI workflow (ec9aa1cabb58c97b8ecc4815e6cdd6421fe2a89e)
  • feat: add settings for Zed editor to use oxlint and oxfmt (#1836) (111f2e0a17999e3ffdf4c097cd42ba08acd48508) - thanks @​trueberryless!
  • fix: remove format_on_save: true settings from Zed settings to respect user settings (#1838) (dc2a64043035d426eb99a9d1e0eb873d02a09e7d) - thanks @​trueberryless!
  • feat: add Renovate for GitHub actions only (#1839) (ffce88c86f95822ee2a7cf8407e987a3ec79b097) - thanks @​trueberryless!
  • Ignore import() in JSDoc examples (#1844) (6f090f90f04e8202700ed68977faa1dc626ff235) - thanks @​cyphercodes!
  • Don't report types used only in module augmentations as unused (resolve #1843) (7901abd3c4b496f212445bff9768efc9548ded61)
  • Restore CI intent (0d739beab2e224385f449d62d6cc7d904107946e)
  • feat: add less, stylus compilers and astro, svelte, vue import resolution (#1845) (5525759f33a5664e4882aebe239e9c17eeb29f92) - thanks @​trueberryless!
  • Don't report built-in compiler dependencies as unused (3c9d4adf369f0064399d9da7b4f11f0467180bf5)
  • feat: add scss handling to stencil plugin (#1846) (acba6b85ab05f70385228872fafea2b08290d0f6) - thanks @​johnjenkins!
  • fix(reporters): always print the issue-type title for a single group (#1848) (cf997b2408cc0814c2d310d1e8c8680340153fa1) - thanks @​morgan-coded!
  • Export Issue, IssueRecords and IssueType types (resolve #1840) (260f19230f42c9dceaac97d55bf34d17902c5b38)
  • Squeeze every bit of perf out around compilers (bb0eeb6e33d050dab736134b5b692a3d6413f358)
Commits
  • 2979803 Release knip@6.24.0
  • bb0eeb6 Squeeze every bit of perf out around compilers
  • 260f192 Export Issue, IssueRecords and IssueType types (resolve #1840)
  • cf997b2 fix(reporters): always print the issue-type title for a single group (#1848)
  • acba6b8 feat: add scss handling to stencil plugin (#1846)
  • 3c9d4ad Don't report built-in compiler dependencies as unused
  • 5525759 feat: add less, stylus compilers and astro, svelte, vue import resolution (#1...
  • 7901abd Don't report types used only in module augmentations as unused (resolve #1843)
  • 6f090f9 Ignore import() in JSDoc examples (#1844)
  • aea7923 Don't report working-directory scripts as unlisted binaries (resolve #1834)
  • See full diff in compare view

Updates tldts from 6.1.86 to 7.4.6

Release notes

Sourced from tldts's releases.

v7.4.6

📜 Update Public Suffix List

  • tldts-experimental, tldts

🔩 Dependencies

Authors: 2

v7.4.5

📜 Update Public Suffix List

  • tldts-experimental, tldts

Authors: 1

v7.4.4

📜 Update Public Suffix List

  • tldts-experimental, tldts

Authors: 1

v7.4.3

📜 Update Public Suffix List

  • tldts-experimental, tldts

... (truncated)

Changelog

Sourced from tldts's changelog.

v7.4.6 (Thu Jul 02 2026)

📜 Update Public Suffix List

  • tldts-experimental, tldts

🔩 Dependencies

Authors: 2


v7.4.5 (Sun Jun 28 2026)

📜 Update Public Suffix List

  • tldts-experimental, tldts

Authors: 1


v7.4.4 (Tue Jun 23 2026)

📜 Update Public Suffix List

  • tldts-experimental, tldts

Authors: 1

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for tldts since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm-major group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [undici](https://github.com/nodejs/undici) | `8.5.0` | `8.6.0` |
| [@anthropic-ai/claude-agent-sdk](https://github.com/anthropics/claude-agent-sdk-typescript) | `0.3.198` | `0.3.199` |
| [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.109.1` | `0.110.0` |
| [posthog-node](https://github.com/PostHog/posthog-js/tree/HEAD/packages/node) | `5.39.2` | `5.39.4` |
| [@typescript/native-preview](https://github.com/microsoft/typescript-go) | `7.0.0-dev.20260701.1` | `7.0.0-dev.20260702.3` |
| [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) | `6.23.0` | `6.24.0` |
| [tldts](https://github.com/remusao/tldts) | `6.1.86` | `7.4.6` |


Updates `undici` from 8.5.0 to 8.6.0
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v8.5.0...v8.6.0)

Updates `@anthropic-ai/claude-agent-sdk` from 0.3.198 to 0.3.199
- [Release notes](https://github.com/anthropics/claude-agent-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/claude-agent-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/claude-agent-sdk-typescript@v0.3.198...v0.3.199)

Updates `@anthropic-ai/sdk` from 0.109.1 to 0.110.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.109.1...sdk-v0.110.0)

Updates `posthog-node` from 5.39.2 to 5.39.4
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/packages/node/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/commits/posthog-node@5.39.4/packages/node)

Updates `@typescript/native-preview` from 7.0.0-dev.20260701.1 to 7.0.0-dev.20260702.3
- [Release notes](https://github.com/microsoft/typescript-go/releases)
- [Changelog](https://github.com/microsoft/typescript-go/blob/main/CHANGES.md)
- [Commits](https://github.com/microsoft/typescript-go/commits)

Updates `knip` from 6.23.0 to 6.24.0
- [Release notes](https://github.com/webpro-nl/knip/releases)
- [Commits](https://github.com/webpro-nl/knip/commits/knip@6.24.0/packages/knip)

Updates `tldts` from 6.1.86 to 7.4.6
- [Release notes](https://github.com/remusao/tldts/releases)
- [Changelog](https://github.com/remusao/tldts/blob/master/CHANGELOG.md)
- [Commits](remusao/tldts@v6.1.86...v7.4.6)

---
updated-dependencies:
- dependency-name: undici
  dependency-version: 8.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-major
- dependency-name: "@anthropic-ai/claude-agent-sdk"
  dependency-version: 0.3.199
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-major
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.110.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-major
- dependency-name: posthog-node
  dependency-version: 5.39.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-major
- dependency-name: "@typescript/native-preview"
  dependency-version: 7.0.0-dev.20260702.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-major
- dependency-name: knip
  dependency-version: 6.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-major
- dependency-name: tldts
  dependency-version: 7.4.6
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 10, 2026
@supabase-cli-releaser supabase-cli-releaser Bot added this pull request to the merge queue Jul 10, 2026
@github-actions

Copy link
Copy Markdown
Contributor

Supabase CLI preview

npx --yes https://pkg.pr.new/supabase/cli/supabase@aa53da4e99d7f8d191960553e5d8c372f5f040e7

Preview package for commit aa53da4.

Merged via the queue into develop with commit 1415b2f Jul 10, 2026
25 checks passed
@supabase-cli-releaser supabase-cli-releaser Bot deleted the dependabot/npm_and_yarn/npm-major-7935576420 branch July 10, 2026 00:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants