chore(deps): full dependency sweep + GH Actions bump

.changeset/deps-sweep-2026-05-14.md

@@ -0,0 +1,33 @@
+---
+"@agentskit/adapters": patch
+"@agentskit/angular": patch
+"@agentskit/cli": patch
+"@agentskit/core": patch
+"@agentskit/eval": patch
+"@agentskit/eval-braintrust": patch
+"@agentskit/ink": patch
+"@agentskit/memory": patch
+"@agentskit/observability": patch
+"@agentskit/observability-langfuse": patch
+"@agentskit/rag": patch
+"@agentskit/react": patch
+"@agentskit/react-native": patch
+"@agentskit/runtime": patch
+"@agentskit/sandbox": patch
+"@agentskit/skills": patch
+"@agentskit/solid": patch
+"@agentskit/svelte": patch
+"@agentskit/templates": patch
+"@agentskit/tools": patch
+"@agentskit/vue": patch
+---
+
+Dependency sweep — bumps third-party deps (and dev deps) to latest
+across all packages via `pnpm up -r --latest`. No public API changes.
+
+- Pins `packages/ink` → `marked@^15` so the `marked-terminal@7.3.0` peer
+  (`marked >=1 <16`) keeps resolving cleanly. Move to `marked@^18` once
+  `marked-terminal` releases a compatible major.
+- Bumps SHA-pinned GitHub Actions: `setup-node` v6.4.0, `upload-artifact`
+  v7.0.1, `cache` v5.0.5, `dependency-review-action` v5.0.0,
+  `codeql-action` v4.35.4.

.github/actions/agentskit-evals/action.yml

@@ -31,7 +31,7 @@ runs:
   using: 'composite'
   steps:
     - name: Setup Node
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@v6
       with:
         node-version: ${{ inputs.node-version }}
 
@@ -63,7 +63,7 @@ runs:
 
     - name: Upload report artifacts
       if: ${{ inputs.upload-artifact == 'true' && always() }}
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: agentskit-evals
         path: ${{ inputs.out-dir }}

.github/workflows/codeql.yml

@@ -27,15 +27,15 @@ jobs:
       # actions/checkout v4.2.2
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
 
-      # github/codeql-action/init v3.27.0
+      # github/codeql-action/init v4.35.4
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d
+        uses: github/codeql-action/init@68bde559dea0fdcac2102bfdf6230c5f70eb485e
         with:
           languages: ${{ matrix.language }}
           queries: security-and-quality
 
-      # github/codeql-action/analyze v3.27.0
+      # github/codeql-action/analyze v4.35.4
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d
+        uses: github/codeql-action/analyze@68bde559dea0fdcac2102bfdf6230c5f70eb485e
         with:
           category: '/language:${{ matrix.language }}'

.github/workflows/dependency-review.yml

@@ -15,7 +15,8 @@ jobs:
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
       - name: Dependency Review
-        uses: actions/dependency-review-action@4081bf99e2866ebe428fc0477b69eb4fcda7220a
+        # actions/dependency-review-action v5.0.0
+        uses: actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294
         with:
           fail-on-severity: high
           comment-summary-in-pr: on-failure
@@ -27,7 +28,8 @@ jobs:
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
       - uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda
-      - uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af
+      # actions/setup-node v6.4.0
+      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
         with:
           node-version: 22
           cache: pnpm

.github/workflows/link-check.yml

@@ -24,7 +24,7 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Restore lychee cache
-        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
+        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
         with:
           path: .lycheecache
           key: lychee-cache-${{ runner.os }}

.github/workflows/release.yml

@@ -47,7 +47,7 @@ jobs:
             --short-PURLs
       - name: Upload SBOM artifact
         if: steps.changesets.outputs.published == 'true'
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: sbom-cyclonedx
           path: sbom.cdx.json

.github/workflows/visual.yml

@@ -41,7 +41,7 @@ jobs:
       - run: pnpm install --frozen-lockfile
 
       - name: Cache Playwright browsers
-        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
+        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
         with:
           path: ~/.cache/ms-playwright
           key: ${{ runner.os }}-playwright-${{ hashFiles('pnpm-lock.yaml') }}
@@ -67,7 +67,7 @@ jobs:
 
       - name: Upload diffs on failure
         if: failure()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: visual-report
           path: |
@@ -77,7 +77,7 @@ jobs:
 
       - name: Upload baselines (when bootstrapping)
         if: env.UPDATE_BASELINES == 'true'
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: visual-baselines-linux
           path: apps/visual-react/tests/visual.spec.ts-snapshots

apps/docs-next/package.json

@@ -32,28 +32,28 @@
     "@agentskit/skills": "workspace:*",
     "@agentskit/tools": "workspace:*",
     "@codesandbox/sandpack-react": "^2.20.0",
-    "@tailwindcss/postcss": "^4.2.4",
+    "@tailwindcss/postcss": "^4.3.0",
     "@vercel/analytics": "^2.0.1",
     "@vercel/speed-insights": "^2.0.0",
-    "fumadocs-core": "^16.8.5",
-    "fumadocs-mdx": "^14.3.2",
-    "fumadocs-ui": "^16.8.5",
-    "mermaid": "^11.14.0",
+    "fumadocs-core": "^16.8.11",
+    "fumadocs-mdx": "^15.0.4",
+    "fumadocs-ui": "^16.8.11",
+    "mermaid": "^11.15.0",
     "motion": "^12.38.0",
-    "next": "^16.2.4",
-    "postcss": "^8.5.13",
-    "react": "^19.0.0",
-    "react-dom": "^19.0.0",
+    "next": "^16.2.6",
+    "postcss": "^8.5.14",
+    "react": "^19.2.6",
+    "react-dom": "^19.2.6",
     "react-markdown": "^10.1.0",
-    "remark-gfm": "^4.0.0",
-    "tailwindcss": "^4.2.4",
-    "zod": "^4.4.1"
+    "remark-gfm": "^4.0.1",
+    "tailwindcss": "^4.3.0",
+    "zod": "^4.4.3"
   },
   "devDependencies": {
     "@types/mdx": "^2.0.13",
-    "@types/node": "^25.6.0",
-    "@types/react": "^19.0.0",
-    "@types/react-dom": "^19.0.0",
+    "@types/node": "^25.8.0",
+    "@types/react": "^19.2.14",
+    "@types/react-dom": "^19.2.3",
     "typedoc": "^0.28.19",
     "typedoc-plugin-markdown": "^4.11.0",
     "typescript": "^6.0.3"

apps/example-discord-bot/package.json

@@ -15,9 +15,9 @@
     "@agentskit/runtime": "workspace:*"
   },
   "devDependencies": {
-    "@types/node": "^25.6.0",
-    "tsx": "^4.20.6",
+    "@types/node": "^25.8.0",
+    "tsx": "^4.22.0",
     "typescript": "^6.0.3",
-    "vitest": "^4.1.5"
+    "vitest": "^4.1.6"
   }
 }

apps/example-dspy/package.json

@@ -14,8 +14,8 @@
     "@agentskit/eval-braintrust": "workspace:*"
   },
   "devDependencies": {
-    "@types/node": "^25.6.0",
-    "tsx": "^4.21.0",
+    "@types/node": "^25.8.0",
+    "tsx": "^4.22.0",
     "typescript": "^6.0.3"
   }
 }

apps/example-edge/package.json

@@ -14,7 +14,7 @@
     "@agentskit/core": "workspace:*"
   },
   "devDependencies": {
-    "@cloudflare/workers-types": "^4.20240909.0",
+    "@cloudflare/workers-types": "^4.20260514.1",
     "typescript": "^6.0.3"
   }
 }

apps/example-embedded/package.json

@@ -15,8 +15,8 @@
     "@agentskit/runtime": "workspace:*"
   },
   "devDependencies": {
-    "@types/node": "^25.6.0",
-    "tsx": "^4.20.6",
+    "@types/node": "^25.8.0",
+    "tsx": "^4.22.0",
     "typescript": "^6.0.3"
   }
 }

apps/example-flow/package.json

@@ -11,11 +11,11 @@
   "dependencies": {
     "@agentskit/core": "workspace:*",
     "@agentskit/runtime": "workspace:*",
-    "yaml": "^2.6.0"
+    "yaml": "^2.9.0"
   },
   "devDependencies": {
-    "@types/node": "^25.6.0",
-    "tsx": "^4.20.6",
+    "@types/node": "^25.8.0",
+    "tsx": "^4.22.0",
     "typescript": "^6.0.3"
   }
 }

apps/example-ink/package.json

@@ -12,13 +12,13 @@
     "@agentskit/core": "workspace:*",
     "@agentskit/ink": "workspace:*",
     "@agentskit/memory": "workspace:*",
-    "ink": "^7.0.1",
-    "react": "^19.2.5"
+    "ink": "^7.0.3",
+    "react": "^19.2.6"
   },
   "devDependencies": {
-    "@types/node": "^25.6.0",
+    "@types/node": "^25.8.0",
     "@types/react": "^19.2.14",
-    "tsx": "^4.20.6",
+    "tsx": "^4.22.0",
     "typescript": "^6.0.3"
   }
 }

apps/example-multi-agent/package.json

@@ -11,14 +11,14 @@
   "dependencies": {
     "@agentskit/react": "workspace:*",
     "@agentskit/skills": "workspace:*",
-    "react": "^19.2.5",
-    "react-dom": "^19.2.5"
+    "react": "^19.2.6",
+    "react-dom": "^19.2.6"
   },
   "devDependencies": {
     "@types/react": "^19.2.14",
     "@types/react-dom": "^19.2.3",
-    "@vitejs/plugin-react": "^6.0.1",
+    "@vitejs/plugin-react": "^6.0.2",
     "typescript": "^6.0.3",
-    "vite": "^8.0.10"
+    "vite": "^8.0.13"
   }
 }

apps/example-react/package.json

@@ -12,14 +12,14 @@
     "@agentskit/adapters": "workspace:*",
     "@agentskit/core": "workspace:*",
     "@agentskit/react": "workspace:*",
-    "react": "^19.2.5",
-    "react-dom": "^19.2.5"
+    "react": "^19.2.6",
+    "react-dom": "^19.2.6"
   },
   "devDependencies": {
     "@types/react": "^19.2.14",
     "@types/react-dom": "^19.2.3",
-    "@vitejs/plugin-react": "^6.0.1",
+    "@vitejs/plugin-react": "^6.0.2",
     "typescript": "^6.0.3",
-    "vite": "^8.0.10"
+    "vite": "^8.0.13"
   }
 }

apps/example-runtime/package.json

@@ -17,8 +17,8 @@
     "@agentskit/skills": "workspace:*"
   },
   "devDependencies": {
-    "@types/node": "^25.6.0",
-    "tsx": "^4.20.6",
+    "@types/node": "^25.8.0",
+    "tsx": "^4.22.0",
     "typescript": "^6.0.3"
   }
 }

apps/example-slack-bot/package.json

@@ -15,9 +15,9 @@
     "@agentskit/runtime": "workspace:*"
   },
   "devDependencies": {
-    "@types/node": "^25.6.0",
-    "tsx": "^4.20.6",
+    "@types/node": "^25.8.0",
+    "tsx": "^4.22.0",
     "typescript": "^6.0.3",
-    "vitest": "^4.1.5"
+    "vitest": "^4.1.6"
   }
 }

apps/example-teams-bot/package.json

@@ -15,9 +15,9 @@
     "@agentskit/runtime": "workspace:*"
   },
   "devDependencies": {
-    "@types/node": "^25.6.0",
-    "tsx": "^4.20.6",
+    "@types/node": "^25.8.0",
+    "tsx": "^4.22.0",
     "typescript": "^6.0.3",
-    "vitest": "^4.1.5"
+    "vitest": "^4.1.6"
   }
 }

apps/example-webllm/package.json

@@ -13,15 +13,15 @@
     "@agentskit/adapters": "workspace:*",
     "@agentskit/core": "workspace:*",
     "@agentskit/react": "workspace:*",
-    "@mlc-ai/web-llm": "^0.2.79",
-    "react": "^19.2.5",
-    "react-dom": "^19.2.5"
+    "@mlc-ai/web-llm": "^0.2.83",
+    "react": "^19.2.6",
+    "react-dom": "^19.2.6"
   },
   "devDependencies": {
     "@types/react": "^19.2.14",
     "@types/react-dom": "^19.2.3",
-    "@vitejs/plugin-react": "^6.0.1",
+    "@vitejs/plugin-react": "^6.0.2",
     "typescript": "^6.0.3",
-    "vite": "^8.0.10"
+    "vite": "^8.0.13"
   }
 }

apps/landing/package.json

@@ -9,16 +9,16 @@
     "lint": "tsc --noEmit"
   },
   "dependencies": {
-    "next": "^16.2.4",
-    "react": "^19.2.5",
-    "react-dom": "^19.2.5"
+    "next": "^16.2.6",
+    "react": "^19.2.6",
+    "react-dom": "^19.2.6"
   },
   "devDependencies": {
-    "@tailwindcss/postcss": "^4.2.4",
-    "@types/node": "^25.6.0",
+    "@tailwindcss/postcss": "^4.3.0",
+    "@types/node": "^25.8.0",
     "@types/react": "^19.2.14",
     "@types/react-dom": "^19.2.3",
-    "tailwindcss": "^4.2.4",
+    "tailwindcss": "^4.3.0",
     "typescript": "^6.0.3"
   }
 }

apps/visual-react/package.json

@@ -15,15 +15,15 @@
   "dependencies": {
     "@agentskit/core": "workspace:*",
     "@agentskit/react": "workspace:*",
-    "react": "^19.2.5",
-    "react-dom": "^19.2.5"
+    "react": "^19.2.6",
+    "react-dom": "^19.2.6"
   },
   "devDependencies": {
-    "@playwright/test": "^1.50.0",
+    "@playwright/test": "^1.60.0",
     "@types/react": "^19.2.14",
     "@types/react-dom": "^19.2.3",
-    "@vitejs/plugin-react": "^6.0.1",
+    "@vitejs/plugin-react": "^6.0.2",
     "typescript": "^6.0.3",
-    "vite": "^8.0.10"
+    "vite": "^8.0.13"
   }
 }