Skip to content

chore(deps): Bump the runtime-minor-patch group across 1 directory with 6 updates - #50

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/runtime-minor-patch-ae970564bb
Closed

chore(deps): Bump the runtime-minor-patch group across 1 directory with 6 updates#50
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/runtime-minor-patch-ae970564bb

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 7, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the runtime-minor-patch group with 6 updates in the / directory:

Package From To
@isomorphic-git/lightning-fs 4.6.3 4.7.0
@langchain/core 1.2.3 1.2.9
@langchain/langgraph 1.4.8 1.4.13
isomorphic-git 1.38.10 1.41.9
mermaid 11.16.0 11.17.2
zod 4.4.3 4.5.4

Updates @isomorphic-git/lightning-fs from 4.6.3 to 4.7.0

Release notes

Sourced from @​isomorphic-git/lightning-fs's releases.

v4.7.0

4.7.0 (2026-07-25)

Features

Commits
  • 56e6e70 feat: add MemoryBackend — in-memory storage backend for edge runtimes (#144)
  • See full diff in compare view

Updates @langchain/core from 1.2.3 to 1.2.9

Release notes

Sourced from @​langchain/core's releases.

@​langchain/core@​1.2.9

Patch Changes

@​langchain/core@​1.2.8

Patch Changes

  • #11369 d6ad973 Thanks @​hntrl! - fix(langchain): use unified endpoint for gateway

  • #11342 3b0e4c4 Thanks @​thushanth-bengre-langchain! - feat(core): mark errors as retryable or not, and stop retrying the ones that aren't

    Retry middleware retried every failure up to maxRetries, including deterministic ones like a bad API key or an unknown model. Retries also nest, so a single such failure could cost dozens of API calls.

    @langchain/core/errors adds stampRetryable(error, retryable) and getRetryable(error). Marking an error leaves its class and shape untouched, so a provider SDK error can be classified without breaking instanceof. getRetryable returns undefined for errors nobody classified, and both are exported so tool authors can mark their own failures.

    modelRetryMiddleware and toolRetryMiddleware now respect the mark by default, and retries stop as soon as one is found rather than each layer spending its own budget. Aborted calls, context overflow, and oversized payloads are marked non-retryable out of the box. Models accept a per-call maxRetries so a surrounding retry loop can take over.

    Behavior change: errors marked non-retryable now fail on the first attempt. Unclassified errors — including any from third-party integrations or custom tools — retry exactly as before. Pass retryOn: () => true to restore the old default. A custom onFailedAttempt replaces the built-in handler and opts out of marking.

@​langchain/core@​1.2.7

Patch Changes

@​langchain/core@​1.2.6

Patch Changes

  • #11344 f08e0c6 Thanks @​hntrl! - fix: apply [Symbol.hasInstance] method to all comparable properties using .isInstance()

    We have some internal schemas that rely on z.instanceof(). This uses a strict instanceof check which can conflict if there are multiple versions of core installed. This overrides the Symbol.hasInstance method to use the same logic as .isInstance() to compare objects at runtime.

@​langchain/core@​1.2.5

Patch Changes

@​langchain/core@​1.2.4

Patch Changes

Commits
  • e493ed6 chore: version packages (#11393)
  • 8384848 fix(google-common): release endpoint routing fix as patch (#11413)
  • 8cfff4d feat(google): add gateway support for genai (#11405)
  • 7df258c chore(langchain): update langgraph deps (#11412)
  • 3ceef4b fix(anthropic): round-trip tool search server-tool result blocks (#11407)
  • fe8eec1 fix(openai): drop Gemini functionCall content blocks in Chat Completions mess...
  • 0e7c765 fix(google-genai): throw ContentBlockedError when Gemini candidate has no con...
  • 5c9fdf2 fix(openai): retain cache_write_tokens, update to v7 sdk (#11399)
  • 5ff9179 fix(google-genai): guard streaming chunks when candidate has no content (#10742)
  • 43e4396 fix(core): include tool_call blocks and skip empty text blocks in ChatVertexA...
  • Additional commits viewable in compare view

Updates @langchain/langgraph from 1.4.8 to 1.4.13

Release notes

Sourced from @​langchain/langgraph's releases.

@​langchain/langgraph@​1.4.13

Patch Changes

@​langchain/langgraph@​1.4.12

Patch Changes

  • #2714 a2a59ec Thanks @​hntrl! - Update checkpoint integrations to require the patched checkpoint serializer release.

  • Updated dependencies [a2a59ec]:

    • @​langchain/langgraph-checkpoint@​1.1.5

@​langchain/langgraph@​1.4.11

Patch Changes

  • #2706 eaa5472 Thanks @​zduric-langchain! - fix(langgraph): dedupe merged callback handlers by identity

    mergeCallbacks concatenated handlers and inheritableHandlers while deduping tags, so a handler inherited by both the ambient and the explicit config picked up an extra registration at every graph boundary. With tracing on, a nested streamMode: "messages" run delivered every token twice.

  • Updated dependencies [3ce9f8d, 51b4202, a86f813]:

    • @​langchain/langgraph-sdk@​1.9.30

@​langchain/langgraph@​1.4.10

Patch Changes

@​langchain/langgraph@​1.4.9

Patch Changes

  • #2653 7880055 Thanks @​christian-bromann! - fix(langgraph): checkpoint Topic as a flat values list

    Match Python Topic checkpoints so Host JS graphs no longer put __pregel_tasks: [[], []] through the Python checkpointer. Keep reading legacy [seen, values] checkpoints for restore compatibility.

Changelog

Sourced from @​langchain/langgraph's changelog.

1.4.13

Patch Changes

1.4.12

Patch Changes

  • #2714 a2a59ec Thanks @​hntrl! - Update checkpoint integrations to require the patched checkpoint serializer release.

  • Updated dependencies [a2a59ec]:

    • @​langchain/langgraph-checkpoint@​1.1.5

1.4.11

Patch Changes

  • #2706 eaa5472 Thanks @​zduric-langchain! - fix(langgraph): dedupe merged callback handlers by identity

    mergeCallbacks concatenated handlers and inheritableHandlers while deduping tags, so a handler inherited by both the ambient and the explicit config picked up an extra registration at every graph boundary. With tracing on, a nested streamMode: "messages" run delivered every token twice.

  • Updated dependencies [3ce9f8d, 51b4202, a86f813]:

    • @​langchain/langgraph-sdk@​1.9.30

1.4.10

Patch Changes

1.4.9

Patch Changes

  • #2653 7880055 Thanks @​christian-bromann! - fix(langgraph): checkpoint Topic as a flat values list

    Match Python Topic checkpoints so Host JS graphs no longer put __pregel_tasks: [[], []] through the Python checkpointer. Keep reading legacy [seen, values] checkpoints for restore compatibility.

Commits

Updates isomorphic-git from 1.38.10 to 1.41.9

Release notes

Sourced from isomorphic-git's releases.

v1.41.9

1.41.9 (2026-08-23)

Bug Fixes

  • match filepaths on path component boundaries (#2416) (89d641a)

v1.41.8

1.41.8 (2026-08-21)

Bug Fixes

  • throw when TREE is given a ref that cannot be resolved (#2407) (fe987eb)

v1.41.7

1.41.7 (2026-08-19)

Bug Fixes

  • return best merge bases for DAG histories (#2412) (a7f747f)

v1.41.5

1.41.5 (2026-08-17)

Bug Fixes

  • include file mode changes in filepath log (#2413) (07c6fe7)

v1.41.4

1.41.4 (2026-08-13)

Bug Fixes

  • restore checkout filepaths from the index (#2409) (25dc739)

v1.41.3

1.41.3 (2026-08-10)

Bug Fixes

  • don't split a CRLF that straddles two chunks in splitLines (#2397) (aa6812c)

v1.41.2

1.41.2 (2026-08-09)

... (truncated)

Commits
  • 89d641a fix: match filepaths on path component boundaries (#2416)
  • fe987eb fix: throw when TREE is given a ref that cannot be resolved (#2407)
  • 0730055 docs(readme): fix ES import example using unexported 'plugins' (#2408)
  • a7f747f fix: return best merge bases for DAG histories (#2412)
  • a760325 fix: validate readObject format consistently (#2406)
  • 07c6fe7 fix: include file mode changes in filepath log (#2413)
  • 25dc739 fix: restore checkout filepaths from the index (#2409)
  • aa6812c fix: don't split a CRLF that straddles two chunks in splitLines (#2397)
  • 39a3e22 chore: build docs (#2405)
  • 0d7c8e0 fix: expose internal git lock for tests (#2404)
  • Additional commits viewable in compare view

Updates mermaid from 11.16.0 to 11.17.2

Release notes

Sourced from mermaid's releases.

mermaid@11.17.2

Patch Changes

  • #8125 178d7c7 Thanks @​knsv-bot! - fix: restore the edgePaths class on the edge group in rendered SVG, and point the flowchart, block and user journey stylesheets at it

mermaid@11.17.1

Patch Changes

  • #8092 31ce60a Thanks @​pbrolin47! - fix(c4): wrap element labels to c4.width again

    C4 element labels (System, Container, Component, Person and their _Ext variants) stopped wrapping in 11.17.0, so long descriptions rendered on one unbroken line and the shape grew sideways well past the configured c4.width. The unified-shapes label helper gated wrapping on the root-level wrap option, which has no schema default and is therefore undefined; it now gates on c4.wrap (default true), which is what the legacy renderer used.

  • #8088 c66200b Thanks @​ashishjain0512! - fix: neo-look arrowheads and crow's-foot markers no longer fall back to default theme colours/stroke widths on the first render with layout: elk. State diagram arrowheads stayed dark on dark themes, and ER / requirement markers were drawn at the default stroke width, because markers were created from the layout package's own bundled copy of mermaid, whose config had not been initialized yet.

  • #8079 281cd7b Thanks @​ashishjain0512! - fix(class): class diagram relation markers (composition, aggregation, extension, dependency, lollipop) no longer scale with the edge stroke width, so they stay outside the class box boundary in themes that set strokeWidth: 2 (redux, redux-dark, redux-color, redux-dark-color, neo, neo-dark) with the default classic look.

mermaid@11.17.0

Minor Changes

Patch Changes

  • #7847 215fe89 Thanks @​filipsajdak! - fix(c4): named attributes such as $tags, $link and $sprite are no longer clobbered to undefined when they arrive in an earlier positional slot of Person/System/Container/Component/Boundary/Rel statements.

  • #7871 8d874c4 Thanks @​knsv-bot! - fix(flowchart): stop dagre layout from spamming warn-level logs on every node/edge/cluster

  • #8071 b3d1f63 Thanks @​pbrolin47! - fix(block): sibling blocks overlapping in block diagrams when one has a label wider than 200px

  • #7870 71b8843 Thanks @​knsv-bot! - fix: a RangeError: Invalid array length crash when rendering certain edges.

  • #7924 9cbef5d Thanks @​nightt5879! - fix(treeView): icons disappearing after strict security sanitization.

... (truncated)

Commits

Updates zod from 4.4.3 to 4.5.4

Release notes

Sourced from zod's releases.

v4.5.4

Commits:

  • 84e416fbf4740527bbc8f319634f4e1b065bb42c fix(v4): stop the cycle walk from firing a default factory (#6500)
  • e8e206fa33ac5fe7ce20a2beb12d57b1cb3df653 4.5.4

v4.5.3

Commits:

  • e6b6ab347675cd2bd54b1bdbed16f98c59be82a9 docs(blog): widen the z.compile example to a 20-property schema
  • 87d6464418582bb96fc665a01f852ca6da324ad0 fix(docs): drop the OG description when the title wraps past two lines
  • 99fce394a026823e602b9c30d8d5d9f5f1932ce7 bench(v4): z.compile() against zod-compiler (#6499)
  • e3a695b6bf3f0d591ea682816e3cdaea04b0f967 docs(v4): record the email regex and container output-shape findings under Open
  • 7e24a24288183ce02554f1ded7775d0650a7b7e6 docs(blog): drop the reading time and put a GitHub link in the navbar
  • eab51ff3592b2d11d863f4ee4d5452f31a3de1b6 fix(v4): emit record numeric keys as strings in toJSONSchema (#6497)

v4.5.2

Commits:

  • a354314ac04fdd5484aa62dd5c3a4b553211a0e4 fix(docs): keep blog posts out of the docs collection (#6484)
  • d378c42aff6869f0929058a7923cd775880f5c4c ci: drop canary publishing from the release workflow (#6487)
  • 212b941791e7faae078e17645eb612824fd8f79a fix(v4): let a prototype method getter answer a bare call so vi.spyOn works (#6488)
  • e7576f542a7bc7ef3cc5eeec237714fd0e6b6e98 docs(blog): let the page show through the navbar in dark mode (#6489)
  • fedb06fafe33a66ce0b5c236ad2557e0a5a170fe fix(docs): match the blog TOC hover bar to the 2px active indicator
  • 6c932fcb2eea6eb671710ea058ca9fdc382ada89 chore: bump devcontainer image to Node 24 (#6470)
  • 6635d9dd367a664109de83c021995821f48efa29 docs(blog): soften the "method memoization" attribution
  • 019ae299cc75daa132bf1acf59086a520abf6b85 fix(docs): drop ISR on the docs route so the home page hydrates
  • 652bb438aa4c626c1cd7948c6849c4691239fca7 chore(docs): drop the scroll log from the route-change scroller
  • 571c8e8a3d73b4305f4abfdd6977773cc12f2bf5 fix(docs): render blog tabs with the stock fumadocs tab card
  • 9a193aa24b4efa3b315b91d4c56c8bc385b8513f 4.5.2

v4.5.1

Commits:

  • 2e862dbf89da2835e5206a8fd3d3be61afe3cf7f ci: gate the GitHub release and JSR publish on the version being live on npm
  • 8e03380510db36fa6fda979fc78a375fdea8021c 4.5.1

v4.5.0

Zod 4.5 is now available.

npm install zod@latest

At a glance:

... (truncated)

Commits
  • e8e206f 4.5.4
  • 84e416f fix(v4): stop the cycle walk from firing a default factory (#6500)
  • 1a16102 4.5.3
  • eab51ff fix(v4): emit record numeric keys as strings in toJSONSchema (#6497)
  • 7e24a24 docs(blog): drop the reading time and put a GitHub link in the navbar
  • e3a695b docs(v4): record the email regex and container output-shape findings under Open
  • 99fce39 bench(v4): z.compile() against zod-compiler (#6499)
  • 87d6464 fix(docs): drop the OG description when the title wraps past two lines
  • e6b6ab3 docs(blog): widen the z.compile example to a 20-property schema
  • 9a193aa 4.5.2
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): Bump the runtime-minor-patch group across 1 directory wi…
4751969 
…th 6 updates

Bumps the runtime-minor-patch group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@isomorphic-git/lightning-fs](https://github.com/isomorphic-git/lightning-fs) | `4.6.3` | `4.7.0` |
| [@langchain/core](https://github.com/langchain-ai/langchainjs) | `1.2.3` | `1.2.9` |
| [@langchain/langgraph](https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/langgraph-core) | `1.4.8` | `1.4.13` |
| [isomorphic-git](https://github.com/isomorphic-git/isomorphic-git) | `1.38.10` | `1.41.9` |
| [mermaid](https://github.com/mermaid-js/mermaid) | `11.16.0` | `11.17.2` |
| [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.5.4` |



Updates `@isomorphic-git/lightning-fs` from 4.6.3 to 4.7.0
- [Release notes](https://github.com/isomorphic-git/lightning-fs/releases)
- [Commits](isomorphic-git/lightning-fs@v4.6.3...v4.7.0)

Updates `@langchain/core` from 1.2.3 to 1.2.9
- [Release notes](https://github.com/langchain-ai/langchainjs/releases)
- [Commits](https://github.com/langchain-ai/langchainjs/compare/@langchain/core@1.2.3...@langchain/core@1.2.9)

Updates `@langchain/langgraph` from 1.4.8 to 1.4.13
- [Release notes](https://github.com/langchain-ai/langgraphjs/releases)
- [Changelog](https://github.com/langchain-ai/langgraphjs/blob/main/libs/langgraph-core/CHANGELOG.md)
- [Commits](https://github.com/langchain-ai/langgraphjs/commits/@langchain/langgraph@1.4.13/libs/langgraph-core)

Updates `isomorphic-git` from 1.38.10 to 1.41.9
- [Release notes](https://github.com/isomorphic-git/isomorphic-git/releases)
- [Commits](isomorphic-git/isomorphic-git@v1.38.10...v1.41.9)

Updates `mermaid` from 11.16.0 to 11.17.2
- [Release notes](https://github.com/mermaid-js/mermaid/releases)
- [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@11.16.0...mermaid@11.17.2)

Updates `zod` from 4.4.3 to 4.5.4
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.4.3...v4.5.4)

---
updated-dependencies:
- dependency-name: "@isomorphic-git/lightning-fs"
  dependency-version: 4.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime-minor-patch
- dependency-name: "@langchain/core"
  dependency-version: 1.2.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-minor-patch
- dependency-name: "@langchain/langgraph"
  dependency-version: 1.4.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-minor-patch
- dependency-name: isomorphic-git
  dependency-version: 1.41.9
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime-minor-patch
- dependency-name: mermaid
  dependency-version: 11.17.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime-minor-patch
- dependency-name: zod
  dependency-version: 4.5.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Sep 7, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot @github

dependabot Bot commented on behalf of github Sep 14, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 14, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/runtime-minor-patch-ae970564bb branch September 14, 2026 05:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants