chore(deps): bump the production-minor-patch group across 1 directory with 9 updates#48
Closed
dependabot[bot] wants to merge 1 commit into
Closed
Conversation
… with 9 updates Bumps the production-minor-patch group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.80.0` | `0.96.0` | | [firebase](https://github.com/firebase/firebase-js-sdk) | `12.11.0` | `12.13.0` | | [firebase-admin](https://github.com/firebase/firebase-admin-node) | `13.7.0` | `13.10.0` | | [nanoid](https://github.com/ai/nanoid) | `5.1.7` | `5.1.11` | | [openai](https://github.com/openai/openai-node) | `6.33.0` | `6.38.0` | | [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.4` | `19.2.6` | | [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.4` | `19.2.6` | | [tailwind-merge](https://github.com/dcastil/tailwind-merge) | `3.5.0` | `3.6.0` | | [zustand](https://github.com/pmndrs/zustand) | `5.0.12` | `5.0.13` | Updates `@anthropic-ai/sdk` from 0.80.0 to 0.96.0 - [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases) - [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md) - [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.80.0...sdk-v0.96.0) Updates `firebase` from 12.11.0 to 12.13.0 - [Release notes](https://github.com/firebase/firebase-js-sdk/releases) - [Changelog](https://github.com/firebase/firebase-js-sdk/blob/main/CHANGELOG.md) - [Commits](https://github.com/firebase/firebase-js-sdk/compare/firebase@12.11.0...firebase@12.13.0) Updates `firebase-admin` from 13.7.0 to 13.10.0 - [Release notes](https://github.com/firebase/firebase-admin-node/releases) - [Changelog](https://github.com/firebase/firebase-admin-node/blob/main/CHANGELOG.md) - [Commits](firebase/firebase-admin-node@v13.7.0...v13.10.0) Updates `nanoid` from 5.1.7 to 5.1.11 - [Release notes](https://github.com/ai/nanoid/releases) - [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md) - [Commits](ai/nanoid@5.1.7...5.1.11) Updates `openai` from 6.33.0 to 6.38.0 - [Release notes](https://github.com/openai/openai-node/releases) - [Changelog](https://github.com/openai/openai-node/blob/master/CHANGELOG.md) - [Commits](openai/openai-node@v6.33.0...v6.38.0) Updates `react` from 19.2.4 to 19.2.6 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.6/packages/react) Updates `react-dom` from 19.2.4 to 19.2.6 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.6/packages/react-dom) Updates `tailwind-merge` from 3.5.0 to 3.6.0 - [Release notes](https://github.com/dcastil/tailwind-merge/releases) - [Commits](dcastil/tailwind-merge@v3.5.0...v3.6.0) Updates `zustand` from 5.0.12 to 5.0.13 - [Release notes](https://github.com/pmndrs/zustand/releases) - [Commits](pmndrs/zustand@v5.0.12...v5.0.13) --- updated-dependencies: - dependency-name: "@anthropic-ai/sdk" dependency-version: 0.96.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: firebase dependency-version: 12.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: firebase-admin dependency-version: 13.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: nanoid dependency-version: 5.1.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: openai dependency-version: 6.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: react dependency-version: 19.2.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: react-dom dependency-version: 19.2.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: tailwind-merge dependency-version: 3.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: zustand dependency-version: 5.0.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Contributor
Author
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
Contributor
|
Warning Rate limit exceeded
You’ve run out of usage credits. Purchase more in the billing tab. ⌛ How to resolve this issue?After the wait time has elapsed, a review can be triggered using the We recommend that you space out your commits to avoid hitting the rate limit. 🚦 How do rate limits work?CodeRabbit enforces hourly rate limits for each developer per organization. Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout. Please see our FAQ for further information. ℹ️ Review info⚙️ Run configurationConfiguration used: defaults Review profile: CHILL Plan: Pro Plus Run ID: ⛔ Files ignored due to path filters (1)
📒 Files selected for processing (1)
✨ Finishing Touches🧪 Generate unit tests (beta)
Comment |
Contributor
Author
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
dependabot
Bot
deleted the
dependabot/npm_and_yarn/production-minor-patch-7c4179cf5b
branch
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the production-minor-patch group with 9 updates in the / directory:
0.80.00.96.012.11.012.13.013.7.013.10.05.1.75.1.116.33.06.38.019.2.419.2.619.2.419.2.63.5.03.6.05.0.125.0.13Updates
@anthropic-ai/sdkfrom 0.80.0 to 0.96.0Release notes
Sourced from @anthropic-ai/sdk's releases.
... (truncated)
Changelog
Sourced from @anthropic-ai/sdk's changelog.
... (truncated)
Commits
a53f60dchore: release maind1b8d04feat(api): Add support for cache diagnostics beta8e43bf8chore(api): spec updates697e4d5codegen metadatacd5801cfeat(api): Add BetaManagedAgentsSearchResultBlock typesdce6bc7ci: pin GitHub Actions to commit SHAs4eee523fix(zod): ensure only zod/v4 types are used (#992)e3bcdd4chore: release main08943f1feat(aws): Add AWS client for Claude Platform on AWS7834cebci(release-please): exclude subpackages from root changelog (#991)Updates
firebasefrom 12.11.0 to 12.13.0Release notes
Sourced from firebase's releases.
... (truncated)
Commits
1adfd64Version Packages (#9923)50d5b6aMerge main into release714b41dfeat(data-connect): add de-duplication, resume, and intelligent reconnection ...f80895fMerge main into release330a387chore: migrate test functions to v2 (#9910)3b87134build(deps): bump axios from 1.13.5 to 1.15.2 (#9860)402b1f0fix(firestore): Assertion ID: ca9 (pendingResponses less than 0) caused by ta...86dc0dbfeat(ai): ImageConfig and FinishReasons (#9819)62ae2e2chore: Update picomatch and rollup-plugin-typescript2 (#9892)96e81fffeat(firestore): Added search stage support for languageCode, offset, limit, ...Updates
firebase-adminfrom 13.7.0 to 13.10.0Release notes
Sourced from firebase-admin's releases.
... (truncated)
Commits
e0a2177[chore] Release 13.10.0 (#3146)67d6d82add node prefix to crypto imports (#3144)2c8d215chore: removeuuiddependency (#3130)da2141abuild(deps): bump fast-xml-builder from 1.1.5 to 1.2.0 (#3134)fcedf6bfeat(appcheck): Add support for minting limited-use tokens and custom JTI (#3...48d5212build(deps): bump protobufjs from 7.5.5 to 7.5.8 (#3141)16e6c33fix: Replace node-forge with native crypto for private key validation (#3051)6c81c7ebuild(deps): bump fast-uri from 3.1.0 to 3.1.2 (#3135)0efb21f[chore] Release 13.9.0 (#3129)363a302chore: Deprecate support for Node.js 20 (#3128)Updates
nanoidfrom 5.1.7 to 5.1.11Release notes
Sourced from nanoid's releases.
Changelog
Sourced from nanoid's changelog.
Commits
5423cf5Release 5.1.11 version2183894Backport 3.3.12 changelog7087969Limit ID even more013517bTemporary add pnpm-workspace.yaml to npm ignore5db09eeRelease 5.1.10 versionbe7901aFix random pool break974f73bStructure tests with describe() instead of prefixfe3e7ecUpdate dependencies043a7c1Move to pnpm 11e52d946Release 5.1.9 versionUpdates
openaifrom 6.33.0 to 6.38.0Release notes
Sourced from openai's releases.
... (truncated)
Changelog
Sourced from openai's changelog.
... (truncated)
Commits
87f3b04Merge pull request #1870 from openai/release-please--branches--master--change...9d91776release: 6.38.0427ae2bMerge pull request #1127 from stainless-sdks/dev/jtian/remove-unnecessary-params255142e[feat] Remove unnecessary params client id during init423e838feat(api): add service_tier parameter to responses compact methodb0e89cdrelease: 6.37.02151063feat(api): realtime 2a5c4184feat(api): manual updates17c79fbchore: redact api-key headers in debug logs36f69f6codegen metadataUpdates
reactfrom 19.2.4 to 19.2.6Release notes
Sourced from react's releases.
Commits
eaf3e95Version 19.2.623f4f9f19.2.5Updates
react-domfrom 19.2.4 to 19.2.6Release notes
Sourced from react-dom's releases.
Commits
eaf3e95Version 19.2.623f4f9f19.2.5Updates
tailwind-mergefrom 3.5.0 to 3.6.0Release notes
Sourced from tailwind-merge's releases.
Commits
d54f7e5v3.6.0638871aUpdate README to add info about Tailwind CSS v4.3 support39fc7b5Revert "v3.6.0"bd8390fv3.6.0802877cadd v3.6.0 changeloga35fedaMerge pull request #665 from dcastil/renovate/rollup-plugin-babel-7.x940389cMerge pull request #667 from dcastil/renovate/release-drafter-release-drafter...005af6dpin to specific version5816cedimplement breaking changes17041e1Merge pull request #676 from dcastil/dependabot/npm_and_yarn/babel/plugin-tra...Updates
zustandfrom 5.0.12 to 5.0.13Release notes
Sourced from zustand's releases.
Commits
6bc451e5.0.138ec2169chore(deps): update dev dependencies (#3486)4e9bcf0fix(devtools): support Firefox/Safari stack format in findCallerName (#3469)4b96f4efix(docs): correct react-dom test utils import path (#3474)c7516c1fix(tests): change parameters for 'expect' in test (#3483)1b04af1docs(persist): fix signature to require persistOptions (#3477)95d3f33test(middleware/immer): add runtime tests for immer middleware (#3471)3201328Update TypeScript guide links in README.md (#3466)00f96a3chore(deps): bump actions/deploy-pages from 4.0.5 to 5.0.0 (#3447)6330044test: expand React subscribe test coverage (#3442)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions**Disclaimer This is AxiomID Review Agent.
Greptile Summary
This is a Dependabot-generated grouped dependency bump updating 9 production packages to their latest minor/patch releases. All updates stay within their existing semver ranges in
package.json.@anthropic-ai/sdkmakes the largest jump (0.80.0 → 0.96.0, 16 minor versions), gaining a new transitive dependencystandardwebhooks; usage in the repo is limited toAnthropicclient instantiation andmessages.create(), both of which are unchanged API surface.nanoidpicks up an important bug fix (5.1.11 fixes ID generation breaking when a large ID size is requested), andfirebase-adminreplacesnode-forgewith native crypto for private key validation.package-lock.jsonsilently removes three packages (@hookform/resolvers,react-hook-form,minimatch) that were listed as direct root dependencies in the old lock file but were never declared inpackage.json; none of these are imported anywhere in source, so the cleanup is safe.Confidence Score: 5/5
Safe to merge; all updates are minor/patch within declared ranges and the one notable side-effect (removal of phantom lock-file entries) is benign.
All nine packages receive minor or patch bumps. The largest jump (@anthropic-ai/sdk 0.80 → 0.96) touches only stable, additive API surface; the two files that consume it use only Anthropic client construction and messages.create(), which are unchanged. Bug fixes in nanoid and security-relevant improvements in firebase-admin (native crypto, removed uuid) are net positives. The lock-file cleanup of three undeclared phantom dependencies is safe since none appear in source. No migration steps or code changes are required.
No files require special attention beyond confirming CI passes against the updated @anthropic-ai/sdk.
Important Files Changed
Comments Outside Diff (1)
package-lock.json, line 8-40 (link)The regenerated lock file drops
@hookform/resolvers(^5.2.1),react-hook-form(^7.71.2), andminimatch(^10.2.4) from the rootpackages[""].dependenciessection, even though none of them are declared inpackage.json. This confirms the old lock file was out-of-sync withpackage.json— those three entries were phantom direct-dependency records. A search across all source files confirms none of the three are imported anywhere, so the cleanup is safe. It is worth noting this divergence existed so the team can ensurepackage-lock.jsonis regenerated (npm install) wheneverpackage.jsonis edited going forward.Reviews (1): Last reviewed commit: "chore(deps): bump the production-minor-p..." | Re-trigger Greptile