Bump the npm-minor-patch group with 2 updates

[dependabot]

Bumps the npm-minor-patch group with 2 updates: @vercel/connect and eve.

Updates @vercel/connect from 0.2.2 to 0.3.3

Release notes

Sourced from @​vercel/connect's releases.

@​vercel/connect@​0.3.3

Patch Changes

• 0cc0e8d: Expose and document the per-issuance tokenId on ConnectTokenResponse (returned by getToken/getTokenResponse). It's a stable identifier for the issued token — new on each issuance/refresh — for correlating a token with its usage in Vercel observability/billing data.

@​vercel/connect@​0.3.2

Patch Changes

• 2f8d81f: Surface the connector's human-readable name through authorization challenges. startAuthorization now exposes the optional connector object returned by POST /v1/connect/authorize/:connector (matching the connector object on the token response), and the Eve connect() adapter stamps the service display name (connector.serviceName, eg. "Salesforce", falling back to the connector's own connector.name for unknown services) onto the ConnectionAuthorizationChallenge as displayName so channels can render "Sign in with Salesforce" instead of a title-cased file name. Connection authors can override the server-reported name via the new displayName option on connect(). No behavior change until the Vercel API starts returning connector.

@​vercel/connect@​0.3.1

Patch Changes

• Updated dependencies [d29a8f9]
  • @​vercel/oidc@​3.8.0

@​vercel/connect@​0.3.0

Minor Changes

• aa64ac7: Add the @vercel/connect/chat subpath with adapter helpers for the Chat SDK (chat). connectSlackAdapter, connectGitHubAdapter, and connectLinearAdapter each return a config fragment you spread into the matching create*Adapter factory, wiring a Connect connector for both outbound app-scoped tokens (getToken with subject: { type: 'app' }) and inbound trigger-forwarded webhooks (Vercel OIDC verification via the exported createConnectWebhookVerifier). The subpath has no runtime dependency on @chat-adapter/* — it returns structural config types.

Changelog

Sourced from @​vercel/connect's changelog.

0.3.3

Patch Changes

• 0cc0e8d: Expose and document the per-issuance tokenId on ConnectTokenResponse (returned by getToken/getTokenResponse). It's a stable identifier for the issued token — new on each issuance/refresh — for correlating a token with its usage in Vercel observability/billing data.

0.3.2

Patch Changes

• 2f8d81f: Surface the connector's human-readable name through authorization challenges. startAuthorization now exposes the optional connector object returned by POST /v1/connect/authorize/:connector (matching the connector object on the token response), and the Eve connect() adapter stamps the service display name (connector.serviceName, eg. "Salesforce", falling back to the connector's own connector.name for unknown services) onto the ConnectionAuthorizationChallenge as displayName so channels can render "Sign in with Salesforce" instead of a title-cased file name. Connection authors can override the server-reported name via the new displayName option on connect(). No behavior change until the Vercel API starts returning connector.

0.3.1

Patch Changes

• Updated dependencies [d29a8f9]
  • @​vercel/oidc@​3.8.0

0.3.0

Minor Changes

• aa64ac7: Add the @vercel/connect/chat subpath with adapter helpers for the Chat SDK (chat). connectSlackAdapter, connectGitHubAdapter, and connectLinearAdapter each return a config fragment you spread into the matching create*Adapter factory, wiring a Connect connector for both outbound app-scoped tokens (getToken with subject: { type: 'app' }) and inbound trigger-forwarded webhooks (Vercel OIDC verification via the exported createConnectWebhookVerifier). The subpath has no runtime dependency on @chat-adapter/* — it returns structural config types.

0.2.10

Patch Changes

• 0a3bbd7: Pass eve authorization webhooks through to Vercel Connect so OAuth failures can resume the eve session.
• f2475bd: Add default-on first-use connector provisioning to connect() from @vercel/connect/eve. When the helper runs inside a Vercel deployment, it now posts the eve connection URL and connector UID to the managed OAuth create/link endpoint before token or consent calls, so Connect can create a missing connector or link an existing one to the OIDC project and eligible environments. Pass autoProvision: false to keep managing the connector link manually.
• Updated dependencies [fb93ff6]
  • @​vercel/oidc@​3.7.1

0.2.9

Patch Changes

• dd77402: Bump the optional eve peer dependency for @vercel/connect/eve to the next eve patch release that accepts the auth.evict hook emitted by Vercel Connect helpers.

0.2.8

Patch Changes

• 64e3219: Allow local Connect authorization callbacks to use http://*.localhost URLs.

0.2.7

Patch Changes

... (truncated)

Commits

• 72de62c Version Packages (#17091)
• 0cc0e8d [connect] Document per-issuance tokenId on ConnectTokenResponse (#17089)
• 0d7ddb1 Version Packages (#16893)
• 2f8d81f [@​vercel/connect] thread connectorName into Eve authorization challenges as d...
• 908ddc0 Version Packages (#16877)
• b58e9f5 Version Packages (#16840)
• aa64ac7 [connect] Add @​vercel/connect/chat subpath for Chat SDK adapters (#16826)
• 86be1b3 Version Packages (#16811)
• 0a3bbd7 Post Connect authorization completions back to Eve (#16814)
• f2475bd [connect] Auto-provision eve connectors (#16797)
• Additional commits viewable in compare view

Updates eve from 0.24.3 to 0.24.4

Release notes

Sourced from eve's releases.

eve@0.24.4

Patch Changes

• d5db876: Session teardown now disposes authorization hooks without waiting on pending durable iterator reads, preventing cancelled sessions from hanging during cleanup.
• 0dbea62: Store local Workflow World data under .eve/.workflow-data for both eve dev and eve start.
• 9058962: Keep an active eve dev REPL session across successful authored-source reloads, so its next turn continues the durable conversation on the latest generation.
• 4531a3d: Route all of eve's single-file bundles through a shared Rolldown helper that always disables code splitting. This closes a remaining gap where a dynamic import reachable from a final workflow bundle could still fail with "Expected one bundled ..." during builds.
• b6e5923: Include the current continuation token in session.waiting events, and allow negative stream start indexes such as -1 to read relative to the current tail.
• 159d674: Turns are now cancellable: resuming a session's durable cancel hook ({sessionId}:cancel, with an optional turnId guard) aborts in-flight work and settles the turn as a new turn.cancelled stream event followed by session.waiting — never as a failure. Channels and stream-event hooks can handle turn.cancelled, and eve/client finalizes partially streamed messages. The HTTP cancellation API ships in a following release.

Changelog

Sourced from eve's changelog.

0.24.4

Patch Changes

• d5db876: Session teardown now disposes authorization hooks without waiting on pending durable iterator reads, preventing cancelled sessions from hanging during cleanup.
• 0dbea62: Store local Workflow World data under .eve/.workflow-data for both eve dev and eve start.
• 9058962: Keep an active eve dev REPL session across successful authored-source reloads, so its next turn continues the durable conversation on the latest generation.
• 4531a3d: Route all of eve's single-file bundles through a shared Rolldown helper that always disables code splitting. This closes a remaining gap where a dynamic import reachable from a final workflow bundle could still fail with "Expected one bundled ..." during builds.
• b6e5923: Include the current continuation token in session.waiting events, and allow negative stream start indexes such as -1 to read relative to the current tail.
• 159d674: Turns are now cancellable: resuming a session's durable cancel hook ({sessionId}:cancel, with an optional turnId guard) aborts in-flight work and settles the turn as a new turn.cancelled stream event followed by session.waiting — never as a failure. Channels and stream-event hooks can handle turn.cancelled, and eve/client finalizes partially streamed messages. The HTTP cancellation API ships in a following release.

Commits

• 2000096 Version Packages (#813)
• d5db876 fix(eve): cancellation - avoid auth teardown stalls (#816)
• b6e5923 fix(eve): streaming - expose waiting continuation tokens (#794)
• 159d674 feat(eve): cancellation - settle cancelled turns through the turn workflow (#...
• 9058962 fix(eve): preserve REPL sessions across HMR (#807)
• 4531a3d refactor: route single-file bundles through one Rolldown helper (#804)
• 0dbea62 fix(eve): store local Workflow data under .eve (#806)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
evolve	Ready	Preview, Comment	Jul 16, 2026 12:59pm