Skip to content

chore(deps): bump the prod-dependencies group across 1 directory with 18 updates#32

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/prod-dependencies-d25b8c8dbd
Open

chore(deps): bump the prod-dependencies group across 1 directory with 18 updates#32
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/prod-dependencies-d25b8c8dbd

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github May 5, 2026 •
edited
Loading

Bumps the prod-dependencies group with 18 updates in the / directory:

Package From To
@anthropic-ai/sdk 0.74.0 0.95.1
@aws-sdk/client-bedrock-runtime 3.1012.0 3.1045.0
@google/genai 1.40.0 2.0.0
@modelcontextprotocol/sdk 1.27.1 1.29.0
adm-zip 0.5.16 0.5.17
canvas 3.2.1 3.2.3
dotenv 17.2.4 17.4.2
groq-sdk 0.37.0 1.1.2
minimatch 10.2.4 10.2.5
oci-common 2.126.2 2.131.1
oci-generativeaiinference 2.126.2 2.131.1
openai 6.21.0 6.37.0
pdfkit 0.17.2 0.18.0
playwright 1.58.2 1.59.1
posthog-node 5.24.15 5.33.4
turndown 7.2.2 7.2.4
zod 4.3.6 4.4.3
zod-to-json-schema 3.25.1 3.25.2

Updates @anthropic-ai/sdk from 0.74.0 to 0.95.1

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk: v0.95.1

0.95.1 (2026-05-07)

Full Changelog: sdk-v0.95.0...sdk-v0.95.1

Chores

  • redact api-key headers in debug logs (fad8fee)

sdk: v0.95.0

0.95.0 (2026-05-06)

Full Changelog: sdk-v0.94.0...sdk-v0.95.0

Features

  • api: add support for Managed Agents multiagents and outcomes, webhooks, vault validation (e0c0e9b)

Bug Fixes

  • api: Adjust webhook configuration (deed3f6)

sdk: v0.94.0

0.94.0 (2026-05-05)

Full Changelog: sdk-v0.93.0...sdk-v0.94.0

Features

  • client: allow targeting a workspace for OIDC federation token exchange (bde6620)

sdk: v0.93.0

0.93.0 (2026-05-04)

Full Changelog: sdk-v0.92.0...sdk-v0.93.0

Features

  • client: add Workload Identity Federation, interactive OAuth, and auth profiles (d5d6abd)

sdk: v0.92.0

0.92.0 (2026-04-30)

Full Changelog: sdk-v0.91.1...sdk-v0.92.0

Features

  • api: improve Managed Agents APIs (ca1bf4a)
  • support setting headers via env (32f67d4)

... (truncated)

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.95.1 (2026-05-07)

Full Changelog: sdk-v0.95.0...sdk-v0.95.1

Chores

  • redact api-key headers in debug logs (fad8fee)

0.95.0 (2026-05-06)

Full Changelog: sdk-v0.94.0...sdk-v0.95.0

Features

  • api: add support for Managed Agents multiagents and outcomes, webhooks, vault validation (e0c0e9b)

Bug Fixes

  • api: Adjust webhook configuration (deed3f6)

0.94.0 (2026-05-05)

Full Changelog: sdk-v0.93.0...sdk-v0.94.0

Features

  • client: allow targeting a workspace for OIDC federation token exchange (bde6620)

0.93.0 (2026-05-04)

Full Changelog: sdk-v0.92.0...sdk-v0.93.0

Features

  • client: add Workload Identity Federation, interactive OAuth, and auth profiles (d5d6abd)

0.92.0 (2026-04-30)

Full Changelog: sdk-v0.91.1...sdk-v0.92.0

Features

  • api: improve Managed Agents APIs (ca1bf4a)
  • support setting headers via env (32f67d4)

Bug Fixes

  • bedrock: throw APIError for error events delivered in chunk frames (#1021) (3ae887b)

... (truncated)

Commits

Updates @aws-sdk/client-bedrock-runtime from 3.1012.0 to 3.1045.0

Release notes

Sourced from @​aws-sdk/client-bedrock-runtime's releases.

v3.1045.0

3.1045.0(2026-05-07)

Documentation Changes
  • client-guardduty: This is a documentation update (1484574c)
New Features
  • clients: update client endpoints as of 2026-05-07 (81310767)
  • client-bcm-data-exports: With this release, customers can configure their data exports to generate additional integration artifacts for Athena and Redshift. (238da2c1)
  • client-invoicing: Updated ListInvoiceSummaries API to add new ReceiverRole filter in Request and Response (60a448cb)
  • client-bedrock-agentcore: Launching AgentCore payments - a capability that provides secure, instant microtransaction payments for AI agents to access paid APIs, MCP servers, and content. It handles payment processing for x402 protocol, payment limits, and 3P wallet integrations with Coinbase CDP and Stripe (Privy). (1e1031a7)
  • client-ec2: DescribeInstanceTypes now accepts an IncludeUnsupportedInRegion parameter. When set, the response also lists instance types that are not available in the current Region. Each instance type includes a SupportedInRegion field indicating its regional availability. (70262433)
  • client-bedrock-agentcore-control: Launching AgentCore payments - a capability that provides secure, instant microtransaction payments for AI agents to access paid APIs, MCP servers, and content. It handles payment processing for x402 protocol, payment limits, and 3P wallet integrations with Coinbase CDP and Stripe (Privy). (fe5861ae)
  • client-route53resolver: Adds supports for DNS64 on inbound endpoints and IPv6 forwarding through the internet gateway (IGW) on outbound endpoints, making it easier to manage hybrid DNS across IPv4 and IPv6 networks. (8e6e18c6)

For list of updated packages, view updated-packages.md in assets-3.1045.0.zip

v3.1044.0

3.1044.0(2026-05-06)

New Features
  • client-securityhub: Release GenerateRecommendedPolicyV2 and GetRecommendedPolicyV2 APIs. This supports generating and retrieving policy recommendations to remediate unused permissions findings that are now being supported on Security Hub. (772b8629)
  • client-sagemaker: Amazon SageMaker HyperPod now returns ImageVersionStatus in DescribeCluster, DescribeClusterNode, and ListClusterNodes responses, indicating whether cluster instances are running the latest available image version. (2be7e6b4)
  • client-glue: Adds support for a CustomLogGroupPrefix parameter in StartDataQualityRulesetEvaluationRun to specify custom CloudWatch log group paths, and a RulesetName filter in ListDataQualityRulesetEvaluationRuns to filter evaluation runs by ruleset name. (b95d850b)
  • client-lex-models-v2: Amazon Lex V2 introduces audio filler support for speech-to-speech bots. Configure melody or typing sounds that play during backend processing to reduce perceived latency and maintain a natural conversational experience for callers. (01426f8e)
  • client-bedrock-agentcore-control: Adds support for bring-your-own file system in AgentCore Runtime. Developers can mount Amazon S3 Files and Amazon EFS access points directly into agent sessions using filesystemConfigurations. (e20f24d9)
  • client-s3: Validate outpost access point resource name (bee88a56)
  • client-mwaa: Amazon MWAA now supports a PublicAndPrivate webserver access mode. The Airflow web server is accessible over both public and private endpoints, enabling workers in VPCs without internet access to reach the Task API privately while retaining public access to the Airflow UI. (3a6054ef)
  • client-imagebuilder: The ImportDiskImage API now enforces a maximum character limit of 128 characters on the image name field. (7fc2565c)
Tests
  • scripts: include type symbols in api snapshot test (#7985) (02f86176)

For list of updated packages, view updated-packages.md in assets-3.1044.0.zip

v3.1043.0

3.1043.0(2026-05-05)

New Features

... (truncated)

Changelog

Sourced from @​aws-sdk/client-bedrock-runtime's changelog.

3.1045.0 (2026-05-07)

Note: Version bump only for package @​aws-sdk/client-bedrock-runtime

3.1044.0 (2026-05-06)

Note: Version bump only for package @​aws-sdk/client-bedrock-runtime

3.1043.0 (2026-05-05)

Note: Version bump only for package @​aws-sdk/client-bedrock-runtime

3.1042.0 (2026-05-04)

Note: Version bump only for package @​aws-sdk/client-bedrock-runtime

3.1041.0 (2026-05-01)

Note: Version bump only for package @​aws-sdk/client-bedrock-runtime

3.1040.0 (2026-04-30)

Note: Version bump only for package @​aws-sdk/client-bedrock-runtime

3.1039.0 (2026-04-29)

... (truncated)

Commits

Updates @google/genai from 1.40.0 to 2.0.0

Release notes

Sourced from @​google/genai's releases.

v2.0.0

2.0.0 (2026-05-07)

⚠ BREAKING CHANGES - Interactions Only

Note: The breaking changes are only in interactions. GenerateContent usage in unaffected. Refer to https://ai.google.dev/gemini-api/docs/interactions-breaking-changes-may-2026 for details

  • Add steps for interactions (c0814c4)
  • Deprecate legacy response_format and publish new polymorphic field. (68a6809)
  • Rename SSE events to interaction.created and interaction.completed (d1b836b)

Bug Fixes

  • timeout not functioning (850f680)

v1.52.0

1.52.0 (2026-05-04)

Features

  • [Python] Multimodal file search (e626bef)
  • Multimodal file search (54caf6b)

v1.51.0

1.51.0 (2026-04-29)

Features

  • [Interactions] Add FileCitation.{custom_metadata,media_id,page_number} (9e08ba9)
  • Add output_info to BatchJob (5327c60)
  • Add gemini-3.1-flash-tts-preview model to options (35c941b)
  • Add ImageResizeMode for GenerateVideos (faa1088)
  • Add new Gemini Deep Research agent models (6f83a05)
  • Add Vertex Dataset input and output options for batch jobs (6aa848e)
  • interaction-api: Add grounding tool usage breakdown to Interaction Usage. (e1c31ad)
  • introduce enterprise flag and GOOGLE_GENAI_USE_ENTERPRISE env var (cf7ad52)
  • Replace the more ambiguous rate field with sample_rate. (6c80464)

v1.50.1

1.50.1 (2026-04-14)

Bug Fixes

  • Refactor Webhook types in GenAI SDKs for easier useage (5100abc)
  • Rename webhooks.retrieve to webhooks.get. (db6e771)

... (truncated)

Changelog

Sourced from @​google/genai's changelog.

2.0.0 (2026-05-07)

⚠ BREAKING CHANGES - Interactions Only

Note: The breaking changes are only in interactions. GenerateContent usage in unaffected. Refer to https://ai.google.dev/gemini-api/docs/interactions-breaking-changes-may-2026 for details

  • Add steps for interactions (c0814c4)
  • Deprecate legacy response_format and publish new polymorphic field. (68a6809)
  • Rename SSE events to interaction.created and interaction.completed (d1b836b)

Bug Fixes

  • timeout not functioning (850f680)

1.52.0 (2026-05-04)

Features

  • [Python] Multimodal file search (e626bef)
  • Multimodal file search (54caf6b)

1.51.0 (2026-04-29)

Features

  • [Interactions] Add FileCitation.{custom_metadata,media_id,page_number} (9e08ba9)
  • Add output_info to BatchJob (5327c60)
  • Add gemini-3.1-flash-tts-preview model to options (35c941b)
  • Add ImageResizeMode for GenerateVideos (faa1088)
  • Add new Gemini Deep Research agent models (6f83a05)
  • Add Vertex Dataset input and output options for batch jobs (6aa848e)
  • interaction-api: Add grounding tool usage breakdown to Interaction Usage. (e1c31ad)
  • introduce enterprise flag and GOOGLE_GENAI_USE_ENTERPRISE env var (cf7ad52)
  • Replace the more ambiguous rate field with sample_rate. (6c80464)

1.50.1 (2026-04-14)

Bug Fixes

  • Refactor Webhook types in GenAI SDKs for easier useage (5100abc)
  • Rename webhooks.retrieve to webhooks.get. (db6e771)

1.50.0 (2026-04-13)

... (truncated)

Commits
  • 9ff16b3 chore(main): release 2.0.0 (#1556)
  • 5209ed7 chore: npm audit fix
  • d1b836b feat!: Rename SSE events to interaction.created and interaction.completed
  • 7100818 chore: Remove legacy streaming event types from InteractionSseEvent.
  • 5dd74d2 chore: Remove experimental warnings for interactions
  • 850f680 fix: timeout not functioning
  • 68a6809 feat: Deprecate legacy response_format and publish new polymorphic field.
  • c0814c4 feat: add steps for interactions
  • e8c8c44 chore(main): release 1.52.0 (#1546)
  • 50d81ca chore: [Multimodal FileSearch] Move embedding_model to body
  • Additional commits viewable in compare view
Install script changes

This version adds preinstall script that runs during installation. Review the package contents before updating.


Updates @modelcontextprotocol/sdk from 1.27.1 to 1.29.0

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

v1.29.0

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@v1.28.0...v1.29.0

v1.28.0

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@v1.27.1...v1.28.0

Commits

Updates adm-zip from 0.5.16 to 0.5.17

Release notes

Sourced from adm-zip's releases.

v0.5.17

What's Changed

New Contributors

Full Changelog: cthackers/adm-zip@v0.5.16...v0.5.17

Commits
  • 094d08c Incremented package version
  • 23c5e1d Added readUInt64LE test
  • 2818b03 Downgraded rimraf version to maintain node compatibility
  • 7c77752 Fixed readUInt64LE
  • 220f817 Updated vulnerable dependencies
  • c8c20fd Merge pull request #559 from kwolfy/master
  • 840bfdf Merge pull request #557 from DennisHill/DennisHill-patch-1
  • fdf64a4 fix issue with absolute paths
  • 6f0af5b Create only if the directory does not exist
  • 1cd32f7 Merge pull request #543 from issacgerges/master
  • Additional commits viewable in compare view

Updates canvas from 3.2.1 to 3.2.3

Release notes

Sourced from canvas's releases.

v3.2.3

Fixed

  • Fix building with gcc (#2559)

v3.2.2

Fixed

  • Fix dangling env pointer in image MIME data cleanup (#2550)
  • Fix ctx.direction not affected by ctx.save and ctx.restore
  • Preserve rest of PDF pages when changing width and height (#2538)
  • Several security fixes for untrusted inputs to getImageData and putImageData. Thanks to Ethan Kim for the report.
Changelog

Sourced from canvas's changelog.

3.2.3

Fixed

  • Fix building with gcc (#2559)

3.2.2

Fixed

  • Fix dangling env pointer in image MIME data cleanup (#2550)
  • Fix ctx.direction not affected by ctx.save and ctx.restore
  • Preserve rest of PDF pages when changing width and height (#2538)
  • Several security fixes for untrusted inputs to getImageData and putImageData. Thanks to Ethan Kim for the report.
Commits
  • f91598e v3.2.3
  • 1541544 PAGE_SIZE shouldn't be unsigned
  • ac82fa7 v3.2.2
  • 103a620 add the last flurry of commits to CHANGELOG
  • 7304c7a avoid integer overflow in getImageData
  • f9fcc5f avoid integer overflow in putImageData
  • 802a8ca avoid integer overflow in new ImageData
  • 9d1b478 wrap negative values passed to createImageData
  • 779483c bail early when setting zero-length image source
  • 22ed2b7 make canvas types unsigned
  • Additional commits viewable in compare view

Updates dotenv from 17.2.4 to 17.4.2

Changelog

Sourced from dotenv's changelog.

17.4.2 (2026-04-12)

Changed

  • Improved skill files - tightened up details (#1009)

17.4.1 (2026-04-05)

Changed

  • Change text injecting to injected (#1005)

17.4.0 (2026-04-01)

Added

  • Add skills/ folder with focused agent skills: skills/dotenv/SKILL.md (core usage) and skills/dotenvx/SKILL.md (encryption, multiple environments, variable expansion) for AI coding agent discovery via the skills.sh ecosystem (npx skills add motdotla/dotenv)

Changed

  • Tighten up logs: ◇ injecting env (14) from .env (#1003)

17.3.1 (2026-02-12)

Changed

  • Fix as2 example command in README and update spanish README

17.3.0 (2026-02-12)

Added

  • Add a new README section on dotenv’s approach to the agentic future.

Changed

  • Rewrite README to get humans started more quickly with less noise while simultaneously making more accessible for llms and agents to go deeper into details.
Commits

Updates groq-sdk from 0.37.0 to 1.1.2

Release notes

Sourced from groq-sdk's releases.

v1.1.2

1.1.2 (2026-03-25)

Full Changelog: v1.1.1...v1.1.2

Bug Fixes

Chores

  • ci: skip lint on metadata-only changes (5d1dcb6)
  • deps: bump flatted from 3.3.2 to 3.4.2 (#258) (3736cf7)
  • internal: tweak CI branches (117dcbe)
  • internal: update gitignore (ff61d7b)
  • tests: bump steady to v0.19.4 (e5e6afa)
  • tests: bump steady to v0.19.5 (be08c75)
  • tests: bump steady to v0.19.6 (13572c0)
  • tests: bump steady to v0.19.7 (de421b8)

Refactors

  • tests: switch from prism to steady (ae99475)

v1.1.1

1.1.1 (2026-03-11)

Full Changelog: v1.1.0...v1.1.1

Bug Fixes

  • client: avoid memory leak with abort signals (fd9418a)
  • client: avoid removing abort listener too early (ae8976f)
  • client: preserve URL params already embedded in path (6bae9aa)
  • docs/contributing: correct pnpm link command (ea938fe)
  • pin patched minimatch versions via yarn resolutions (CVE-2026-27… (#252) (fc17abe)
  • restore streaming support in defaultParseResponse (6795b8b)

Chores

  • break long lines in snippets into multiline (f13f15a)
  • ci: skip uploading artifacts on stainless-internal branches (1d3116d)
  • ci: upgrade actions/github-script (633ccf1)
  • client: do not parse responses with empty content-length (b48d017)
  • client: restructure abort controller binding (10a3479)
  • internal/client: fix form-urlencoded requests (17ef412)
  • internal: avoid type checking errors with ts-reset (2a6752e)

... (truncated)

Changelog

Sourced from groq-sdk's changelog.

1.1.2 (2026-03-25)

Full Changelog: v1.1.1...v1.1.2

Bug Fixes

Chores

  • ci: skip lint on metadata-only changes (5d1dcb6)
  • deps: bump flatted from 3.3.2 to 3.4.2 (#258) (3736cf7)
  • internal: tweak CI branches (117dcbe)
  • internal: update gitignore (ff61d7b)
  • tests: bump steady to v0.19.4 (e5e6afa)
  • tests: bump steady to v0.19.5 (be08c75)
  • tests: bump steady to v0.19.6 (13572c0)
  • tests: bump steady to v0.19.7 (de421b8)

Refactors

  • tests: switch from prism to steady (ae99475)

1.1.1 (2026-03-11)

Full Changelog: v1.1.0...v1.1.1

Bug Fixes

  • client: avoid memory leak with abort signals (fd9418a)
  • client: avoid removing abort listener too early (ae8976f)
  • client: preserve URL params already embedded in path (6bae9aa)
  • docs/contributing: correct pnpm link command (ea938fe)
  • pin patched minimatch versions via yarn resolutions (CVE-2026-27… (#252) (fc17abe)
  • restore streaming support in defaultParseResponse (6795b8b)

Chores

  • break long lines in snippets into multiline (f13f15a)
  • ci: skip uploading artifacts on stainless-internal branches (1d3116d)
  • ci: upgrade actions/github-script (633ccf1)
  • client: do not parse responses with empty content-length (b48d017)
  • client: restructure abort controller binding (10a3479)
  • internal/client: fix form-urlencoded requests (17ef412)
  • internal: avoid type checking errors with ts-reset (2a6752e)
  • internal: codegen related update (c9dad6d)
  • internal: codegen related update (6488bb3)

... (truncated)

Commits

@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github May 5, 2026

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot requested a review from unadlib as a code owner May 5, 2026 17:30
@dependabot
chore(deps): bump the prod-dependencies group across 1 directory with…
0e22f31 
… 18 updates

Bumps the prod-dependencies group with 18 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.74.0` | `0.95.1` |
| [@aws-sdk/client-bedrock-runtime](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-bedrock-runtime) | `3.1012.0` | `3.1045.0` |
| [@google/genai](https://github.com/googleapis/js-genai) | `1.40.0` | `2.0.0` |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.27.1` | `1.29.0` |
| [adm-zip](https://github.com/cthackers/adm-zip) | `0.5.16` | `0.5.17` |
| [canvas](https://github.com/Automattic/node-canvas) | `3.2.1` | `3.2.3` |
| [dotenv](https://github.com/motdotla/dotenv) | `17.2.4` | `17.4.2` |
| [groq-sdk](https://github.com/groq/groq-typescript) | `0.37.0` | `1.1.2` |
| [minimatch](https://github.com/isaacs/minimatch) | `10.2.4` | `10.2.5` |
| [oci-common](https://github.com/oracle/oci-typescript-sdk) | `2.126.2` | `2.131.1` |
| [oci-generativeaiinference](https://github.com/oracle/oci-typescript-sdk) | `2.126.2` | `2.131.1` |
| [openai](https://github.com/openai/openai-node) | `6.21.0` | `6.37.0` |
| [pdfkit](https://github.com/foliojs/pdfkit) | `0.17.2` | `0.18.0` |
| [playwright](https://github.com/microsoft/playwright) | `1.58.2` | `1.59.1` |
| [posthog-node](https://github.com/PostHog/posthog-js/tree/HEAD/packages/node) | `5.24.15` | `5.33.4` |
| [turndown](https://github.com/mixmark-io/turndown) | `7.2.2` | `7.2.4` |
| [zod](https://github.com/colinhacks/zod) | `4.3.6` | `4.4.3` |
| [zod-to-json-schema](https://github.com/StefanTerdell/zod-to-json-schema) | `3.25.1` | `3.25.2` |



Updates `@anthropic-ai/sdk` from 0.74.0 to 0.95.1
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.74.0...sdk-v0.95.1)

Updates `@aws-sdk/client-bedrock-runtime` from 3.1012.0 to 3.1045.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-bedrock-runtime/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1045.0/clients/client-bedrock-runtime)

Updates `@google/genai` from 1.40.0 to 2.0.0
- [Release notes](https://github.com/googleapis/js-genai/releases)
- [Changelog](https://github.com/googleapis/js-genai/blob/main/CHANGELOG.md)
- [Commits](googleapis/js-genai@v1.40.0...v2.0.0)

Updates `@modelcontextprotocol/sdk` from 1.27.1 to 1.29.0
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@v1.27.1...v1.29.0)

Updates `adm-zip` from 0.5.16 to 0.5.17
- [Release notes](https://github.com/cthackers/adm-zip/releases)
- [Changelog](https://github.com/cthackers/adm-zip/blob/master/history.md)
- [Commits](cthackers/adm-zip@v0.5.16...v0.5.17)

Updates `canvas` from 3.2.1 to 3.2.3
- [Release notes](https://github.com/Automattic/node-canvas/releases)
- [Changelog](https://github.com/Automattic/node-canvas/blob/master/CHANGELOG.md)
- [Commits](Automattic/node-canvas@v3.2.1...v3.2.3)

Updates `dotenv` from 17.2.4 to 17.4.2
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v17.2.4...v17.4.2)

Updates `groq-sdk` from 0.37.0 to 1.1.2
- [Release notes](https://github.com/groq/groq-typescript/releases)
- [Changelog](https://github.com/groq/groq-typescript/blob/main/CHANGELOG.md)
- [Commits](groq/groq-typescript@v0.37.0...v1.1.2)

Updates `minimatch` from 10.2.4 to 10.2.5
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v10.2.4...v10.2.5)

Updates `oci-common` from 2.126.2 to 2.131.1
- [Release notes](https://github.com/oracle/oci-typescript-sdk/releases)
- [Changelog](https://github.com/oracle/oci-typescript-sdk/blob/master/CHANGELOG.md)
- [Commits](oracle/oci-typescript-sdk@v2.126.2...v2.131.1)

Updates `oci-generativeaiinference` from 2.126.2 to 2.131.1
- [Release notes](https://github.com/oracle/oci-typescript-sdk/releases)
- [Changelog](https://github.com/oracle/oci-typescript-sdk/blob/master/CHANGELOG.md)
- [Commits](oracle/oci-typescript-sdk@v2.126.2...v2.131.1)

Updates `openai` from 6.21.0 to 6.37.0
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/master/CHANGELOG.md)
- [Commits](openai/openai-node@v6.21.0...v6.37.0)

Updates `pdfkit` from 0.17.2 to 0.18.0
- [Release notes](https://github.com/foliojs/pdfkit/releases)
- [Changelog](https://github.com/foliojs/pdfkit/blob/master/CHANGELOG.md)
- [Commits](foliojs/pdfkit@v0.17.2...v0.18.0)

Updates `playwright` from 1.58.2 to 1.59.1
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.58.2...v1.59.1)

Updates `posthog-node` from 5.24.15 to 5.33.4
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/packages/node/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/commits/posthog-node@5.33.4/packages/node)

Updates `turndown` from 7.2.2 to 7.2.4
- [Release notes](https://github.com/mixmark-io/turndown/releases)
- [Commits](mixmark-io/turndown@v7.2.2...v7.2.4)

Updates `zod` from 4.3.6 to 4.4.3
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.3.6...v4.4.3)

Updates `zod-to-json-schema` from 3.25.1 to 3.25.2
- [Release notes](https://github.com/StefanTerdell/zod-to-json-schema/releases)
- [Changelog](https://github.com/StefanTerdell/zod-to-json-schema/blob/master/changelog.md)
- [Commits](https://github.com/StefanTerdell/zod-to-json-schema/commits)

---
updated-dependencies:
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.94.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: "@aws-sdk/client-bedrock-runtime"
  dependency-version: 3.1042.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: "@google/genai"
  dependency-version: 1.52.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: adm-zip
  dependency-version: 0.5.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: canvas
  dependency-version: 3.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: dotenv
  dependency-version: 17.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: groq-sdk
  dependency-version: 1.1.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-dependencies
- dependency-name: minimatch
  dependency-version: 10.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: oci-common
  dependency-version: 2.131.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: oci-generativeaiinference
  dependency-version: 2.131.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: openai
  dependency-version: 6.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: pdfkit
  dependency-version: 0.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: playwright
  dependency-version: 1.59.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: posthog-node
  dependency-version: 5.33.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: turndown
  dependency-version: 7.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: zod
  dependency-version: 4.4.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: zod-to-json-schema
  dependency-version: 3.25.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/prod-dependencies-d25b8c8dbd branch from 9ab9527 to 0e22f31 Compare May 8, 2026 17:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@unadlib unadlib Awaiting requested review from unadlib unadlib is a code owner

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants