chore(deps): update all non-major dependencies

[github-actions]

This PR contains the following updates:

Package Updates Summary

Type	Count
📦 NPM Packages	41
🔧 System Dependencies	4
Total	45

📦 npm Dependencies

41 packages will be updated

Package	Change	Age	Adoption	Passing	Confidence
@anthropic-ai/claude-agent-sdk (source)	0.2.141 -> 0.3.263
@stripe/stripe-js (source)	9.10.0 -> 9.15.0
@vscode/vsce (source)	3.7.2-12 -> 3.9.2
cz-git (source)	1.13.1 -> 1.14.0
meilisearch (source)	0.59.0 -> 0.60.0
stripe (source)	22.3.2 -> 22.6.1
@iconify-json/hugeicons	1.2.27 -> 1.2.34
@loghq/stacks (source)	0.2.3 -> 0.2.6
@stacksjs/bumpx (source)	0.2.6 -> 0.2.17
@stacksjs/bunpress (source)	0.2.8 -> 0.2.14
@stacksjs/clapp (source)	0.2.12 -> 0.2.15
@stacksjs/components (source)	0.2.246 -> 0.2.281
@stacksjs/desktop (source)	0.2.197 -> 0.2.281
@stacksjs/httx (source)	0.1.10 -> 0.1.11
@stacksjs/logsmith (source)	0.2.3 -> 0.2.11
@stacksjs/rpx (source)	0.11.42 -> 0.11.52
@stacksjs/sanitizer (source)	0.2.113 -> 0.2.281
@stacksjs/stx (source)	0.2.274 -> 0.2.281
@stacksjs/ts-auth (source)	0.4.4 -> 0.4.5
@stacksjs/ts-cache (source)	0.1.5 -> 0.1.7
@stacksjs/ts-faker (source)	0.1.7 -> 0.1.8
@stacksjs/ts-i18n (source)	0.1.9 -> 0.1.11
@stacksjs/ts-xml (source)	0.1.0 -> 0.1.2
@ts-audio/core (source)	0.1.1 -> 0.1.2
@ts-charts/format (source)	0.2.6 -> 0.2.7
@ts-charts/scale (source)	0.2.6 -> 0.2.7
@ts-charts/shape (source)	0.2.6 -> 0.2.7
better-dx (source)	0.2.24 -> 0.2.25
bun-plugin-stx (source)	0.2.279 -> 0.2.281
craft-native (source)	0.0.89 -> 0.0.90
dynamodb-tooling (source)	0.3.2 -> 0.3.6
filesize (source)	11.0.22 -> 11.0.23
pickier (source)	0.1.58 -> 0.1.65
ts-broadcasting (source)	0.0.9 -> 0.0.10
ts-error-handling (source)	0.1.1 -> 0.1.3
ts-images (source)	0.2.11 -> 0.2.17
ts-pantry (source)	0.11.35 -> 0.11.55
ts-rate-limiter (source)	0.4.2 -> 0.4.8
ts-slug (source)	0.1.0 -> 0.1.2
ts-spreadsheets (source)	0.2.0 -> 0.2.5
ts-syntax-highlighter (source)	0.2.1 -> 0.2.17

🔧 System Dependencies

4 packages will be updated across 1 file(s): deps.yml

Package	Change	Type	File
git	^2.47.0 → ^2.53.0	🟡 minor	deps.yml
gnu.org/gettext	^0.21 → ^0.26	🟡 minor	deps.yml
sqlite	^3.47.2 → ^3.53.4	🟡 minor	deps.yml
zlib.net	^1.2.11 → ^1.3.2	🟡 minor	deps.yml

---

Release Notes

anthropics/claude-agent-sdk-typescript (@anthropic-ai/claude-agent-sdk)

0.2.141 -> 0.3.263

v0.3.263

Compare Source

What's changed

• Updated to parity with Claude Code v2.1.263

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.263
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.263
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.263
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.263

Released by ashwin-ant on 9/6/2026

v0.3.261

Compare Source

What's changed

• Added pluginDelivery: 'initialize' to send plugins over stdin so the launch command line no longer grows with the plugin count (fixes Windows start failures with many plugins)
• Fixed query() throwing "Object not disposable" in runtimes without a native Symbol.dispose, such as Node ≤22 vm contexts (Jest's node environment, vitest vmThreads/vmForks) and Node <18.18
• Updated to parity with Claude Code v2.1.261

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.261
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.261
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.261
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.261

Released by ashwin-ant on 9/4/2026

v0.3.260

Compare Source

What's changed

• Added optional user_message_uuid to thinking_tokens system messages, linking thinking progress to the user message that triggered the turn
• Added optional first_content_frame_ms, first_stream_post_ms, first_stream_post_ack_ms and first_stream_post_wall_ms fields to the success result message for remote-session latency breakdowns
• Fixed managedSettings disableAutoMode: "disable" (either spelling) being dropped by the restrictive-only filter instead of turning auto mode off for the spawned session
• Fixed rewindFiles() reporting success when no files could be restored (for example when checkpoint backups are missing); it now fails
• Changed error_max_structured_output_retries results to append the last StructuredOutput tool error; validation errors now name the offending key, allowed values, and actual length or count
• Changed rate_limit_event to also re-emit during an exceeded window on repeat 429s (about once per 30 seconds per limit window...

[View full release notes]

Released by ashwin-ant on 9/3/2026

stripe/stripe-js (@stripe/stripe-js)

9.10.0 -> 9.15.0

v9.15.0

Compare Source

New features

• Add types for stripe.createConfirmationToken params.metadata (#963)
• Add buttonBoxShadow appearance variable type (#964)

Released by alaycock-stripe on 8/31/2026

v9.14.0

Compare Source

• CPM in ECE - Update API types (#959)
• Add types for new walletOptions top-level parameter for PE create/update (#952)
• Add deprecation tag to onShippingDetailsChange for Embedded Checkout (#960)
• Bump js-yaml from 3.15.0 to 3.15.1 (#958)

New features

Fixes

Changed

Released by cbala-stripe on 8/20/2026

v9.13.0

Compare Source

New features

• Add promo code config (#956)
• Add StripePaymentElementUpdateOptions (#955)

Released by tjliu-stripe on 8/4/2026

Microsoft/vsce (@vscode/vsce)

3.7.2-12 -> 3.9.2

v3.9.2

Compare Source

Changes:

• #1283: fix: skip APIScan
• #1282: chore: bump CI to Node 22 and fix build
• #1279: Bump the uuid test fixture version to 100.0.0
• #1278: Bump tmp from 0.2.4 to 0.2.6
• #1277: Bump qs from 6.14.2 to 6.15.2
• #1276: Bump uuid and azure/msal-node
• #1274: Run npm audit fix
• #1272: Bump fast-uri from 3.0.6 to 3.1.2
• #1267: Bump minimatch from 10.2.2 to 10.2.3
• #1247: Update minimatch dependency to v10

This list of changes was auto generated.

Released by joaomoreno on 6/3/2026

v3.9.2-4

Compare Source

Changes:

• #1283: fix: skip APIScan
• #1282: chore: bump CI to Node 22 and fix build
• #1279: Bump the uuid test fixture version to 100.0.0
• #1278: Bump tmp from 0.2.4 to 0.2.6
• #1277: Bump qs from 6.14.2 to 6.15.2
• #1276: Bump uuid and azure/msal-node

This list of changes was auto generated.

Released by joaomoreno on 6/3/2026

v3.9.2-3

Compare Source

Changes:

• #1274: Run npm audit fix

This list of changes was auto generated.

Released by joaomoreno on 5/14/2026

Zhengqbbb/cz-git (cz-git)

1.13.1 -> 1.14.0

v1.14.0

Compare Source

Please refer to CHANGELOG.md for details.

Released by github-actions[bot] on 8/22/2026

v1.13.2

Compare Source

Please refer to CHANGELOG.md for details.

Released by github-actions[bot] on 8/11/2026

meilisearch/meilisearch-js (meilisearch)

0.59.0 -> 0.60.0

v0.60.0

Compare Source

🚀 Enhancements

• Update dynamic search rules for Meilisearch v1.50 (#2209) Strift

⚙️ Maintenance/misc

• build(deps): bump brace-expansion from 1.1.15 to 1.1.16 (#2207) dependabot[bot]
• build(deps-dev): bump typedoc from 0.28.18 to 0.28.20 (#2182) dependabot[bot]

Thanks again to Strift and dependabot[bot]! 🎉

Released by meili-bot on 7/22/2026

stripe/stripe-node (stripe)

22.3.2 -> 22.6.1

v22.6.1

Compare Source

• #2831 Use cryptographically secure boundaries for multipart file uploads
• #2836 update OtherString docstring
• #2835 Fix request coercion for GET and DELETE parameters
  • Fixes serialization of schema-coerced values, including Decimal, in GET and DELETE query parameters.
• #2829 Harden API requestor code against malicious URLs

See the changelog for more details.

Released by zacchua-stripe on 9/1/2026

v22.6.0

Compare Source

This release changes the pinned API version to 2026-08-26.dahlia.

• #2801 Add discriminatedUnion kind to V2RuntimeSchema coercion

  • Adds runtime support for coercing int64/decimal fields within discriminated union variants in V2 API requests and responses.
  • ⚠️ Throws when serializing a discriminated union parameter whose discriminator is missing or is not a string. This avoids skipping coercion entirely which could silently truncate int64 fields above Number.MAX_SAFE_INTEGER.

• #2818 Add new EventNotificationHandler class for better thin event management

  • We've been putting a lot of time into rethinking the event handling experience in the SDKs. This new class is the culmination of that effort.
  • They're designed for a tight coupling with both StripeClient and the fully-typed nature of [thin events](https://docs.stripe.com/event-desti...

[View full release notes]

Released by xavdid on 8/27/2026

v22.6.0-alpha.2

Compare Source

• #2810 Update generated code for private-preview
  • Add support for new resources Billing.FeedbackOption and PaymentPlan
  • ⚠️ Remove support for resource Billing.FeedbackOptions
  • Add support for create, list, retrieve, and update methods on resource PaymentPlan
  • Add support for update method on resource V2.MoneyManagement.Transaction
  • Add support for wechat_pay_payments on Account.settings, AccountCreateParams.settings, and AccountUpdateParams.settings
  • ⚠️ Change type of BillingPortal.Configuration.features.subscription_cancel.cancellation_reason.feedback_options from Billing.FeedbackOptions to Billing.FeedbackOption
  • Change BillingPortal.Configuration.features.subscription_cancel.cancellation_reason.feedback_options to be required
  • Add support for subscription_pause on BillingPortal.Session.flow
  • Add support for new value subscription_pause on enum BillingPortal.Session.flow.type
  • Ad...

[View full release notes]

Released by xavdid on 8/19/2026

@iconify-json/hugeicons

1.2.27 -> 1.2.34

Huge Icons icon set in Iconify JSON format

📦 View on npm

loghqorg/loghq-stacks (@loghq/stacks)

0.2.3 -> 0.2.6

v0.2.6

Compare Source

Released by github-actions[bot] on 9/1/2026

v0.2.5

Compare Source

Released by github-actions[bot] on 8/31/2026

v0.2.4

Compare Source

Released by github-actions[bot] on 8/31/2026

stacksjs/bumpx (@stacksjs/bumpx)

0.2.6 -> 0.2.17

v0.2.17

Compare Source

Released by github-actions[bot] on 8/19/2026

v0.2.16

Compare Source

Released by github-actions[bot] on 8/7/2026

v0.2.15

Compare Source

Released by github-actions[bot] on 8/6/2026

stacksjs/bunpress (@stacksjs/bunpress)

0.2.8 -> 0.2.14

v0.2.14

Compare Source

Released by github-actions[bot] on 8/25/2026

v0.2.13

Compare Source

Released by github-actions[bot] on 8/19/2026

v0.2.12

Compare Source

Released by github-actions[bot] on 8/19/2026

stacksjs/clapp (@stacksjs/clapp)

0.2.12 -> 0.2.15

v0.2.15

Compare Source

Released by github-actions[bot] on 8/28/2026

v0.2.14

Compare Source

Released by github-actions[bot] on 8/28/2026

v0.2.13

Compare Source

Released by github-actions[bot] on 8/13/2026

---

Note: This PR body was truncated due to GitHub's character limit. View the full details in the individual commits.

This PR was generated by Buddy 🤖

[what-the-diff]

PR Summary

• Upgraded SQLite Version
  We have updated the version of SQLite (our database package) in deps.yml file for better stability and performance.

• Refined Dependencies in Numerous Packages
  We've altered numerous packages for improved compatibility and efficiency, like @stacksjs/config, @stacksjs/dns, @stacksjs/validation, @stacksjs/bumpx, @stacksjs/logsmith, @anthropic-ai/claude-agent-sdk, ts-pantry, @stacksjs/stx, and @stripe/stripe-js.

• Advanced devDependencies Across Packages
  We've upgraded several development dependencies across different packages. This helps our developers with their tasks and unifies them to use the same workspace:*0.70.229 version of dependencies.

• Updated better-dx Version Across Multiple Packages
  We made sure that better-dx, a package that improves developer experience, is updated across various packages.

• Fixed Latest Library Versions in Package.json Files
  We refreshed the versions of certain libraries like meilisearch, dotenv, bun-query-builder in package.json files which dictates the version of dependencies our project needs to run.

• Overall Improvement
  Taken together, this pull request is a significant step forward, focusing primarily on package version updates. This contributes to a more robust, efficient, and high performance codebase.