Skip to content

chore(deps-dev): bump the development-dependencies group across 1 directory with 19 updates - #120

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/development-dependencies-d6ba062646
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/development-dependencies-d6ba062646

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026 •

Copy link
Copy Markdown

Bumps the development-dependencies group with 19 updates in the / directory:

Package From To
@capacitor/cli 8.5.1 8.5.2
@playwright/test 1.61.1 1.63.0
@tanstack/ai 0.53.0 0.63.0
@tanstack/ai-opencode 0.4.4 0.4.14
@tanstack/ai-sandbox 0.5.6 0.5.17
@tanstack/ai-sandbox-local-process 0.2.5 0.2.6
@tauri-apps/cli 2.11.4 2.12.0
@testing-library/jest-dom 7.0.0 7.0.1
@testing-library/react 16.3.2 16.3.3
@testing-library/user-event 14.6.1 14.6.7
@types/node 26.1.1 26.6.3
@vitejs/plugin-react 6.0.4 6.1.1
@vitest/coverage-v8 4.1.10 5.0.2
jsdom 29.1.1 30.1.1
oxfmt 0.60.0 0.71.0
oxlint 1.75.0 1.86.0
oxlint-tsgolint 7.0.2001 7.0.2003
vite 8.1.5 8.3.1
vitest 4.1.10 5.0.2

Updates @capacitor/cli from 8.5.1 to 8.5.2

Release notes

Sourced from @​capacitor/cli's releases.

8.5.2

8.5.2 (2026-09-11)

Bug Fixes

  • android: add null checks for plugin annotation when retrieving permissions (#8400) (035b16a)
  • ios: do not forward scene lifecycle events to the page before it has loaded (#8595) (c567328)
  • resolve issues with safe area / systembars plugin (#8535) (e37d9c6)
Changelog

Sourced from @​capacitor/cli's changelog.

8.5.2 (2026-09-11)

Bug Fixes

  • android: add null checks for plugin annotation when retrieving permissions (#8400) (035b16a)
  • ios: do not forward scene lifecycle events to the page before it has loaded (#8595) (c567328)
  • resolve issues with safe area / systembars plugin (#8535) (e37d9c6)
Commits
  • 5e0f678 Release 8.5.2
  • e37d9c6 fix: resolve issues with safe area / systembars plugin (#8535)
  • 035b16a fix(android): add null checks for plugin annotation when retrieving permissio...
  • c567328 fix(ios): do not forward scene lifecycle events to the page before it has loa...
  • See full diff in compare view

Updates @playwright/test from 1.61.1 to 1.63.0

Release notes

Sourced from @​playwright/test's releases.

v1.63.0

🔒 Test locks

Tests that access a shared resource — an external service, a global account setting — can now declare a named lock. Tests that share a lock name never run concurrently, across files, workers and projects, while everything else keeps running in parallel:

test('update user settings', { lock: 'user-settings' }, async ({ page }) => {
  // never runs at the same time as other tests holding 'user-settings'
});

A test can hold multiple locks, and test.describe() accepts a lock for the whole group. Learn more about test locks.

🪟 Locate across frames

page.frameLocator() and frame.frameLocator() called without a selector search in any frame of the subtree, so you no longer need to locate the iframe first:

// Finds the button in any frame on the page.
await page.frameLocator().getByRole('button').click();

The rest of the locator resolves inside a single frame, just like a regular locator, and an error is thrown when it matches elements in several frames.

👁️ Visible-only locators

New locator.visible() returns a locator that matches only visible elements. It is the recommended replacement for the :visible CSS pseudo-class:

await page.locator('button').visible().click();

🧾 Step params and subtitles

Steps now carry structured data for reporters. Playwright API steps report the target locator and call arguments, and test.step() accepts subtitle and params options for your own steps:

await test.step('Login', async () => {
  // ...
}, { subtitle: 'as admin', params: { user: 'admin' } });

Reporters receive them via testStep.subtitle and testStep.params. For Playwright API

... (truncated)

Commits
  • 1b025d7 chore: mark v1.63.0 (#42569)
  • 0b9956d cherry-pick(#42568): docs(test): mark test.step subtitle option as since v1.63
  • 13dbf10 cherry-pick(#42552): docs: release notes for v1.63
  • e93b64e cherry-pick(#42566): feat(test): add subtitle option to test.step (#42567)
  • 2b7a5f2 test: response.body() for content-encoding:identity (#42537)
  • 648a67c fix(mcp): create parent directories for explicitly named files (#42540)
  • 7894f56 docs(mcp): clarify how tool file names are resolved (#42538)
  • 52900a1 devops: restore npm publishing from GitHub Actions (#42550)
  • 8c47f59 docs(csharp): fix nonexistent method names in guide examples (#42507)
  • bd6e552 chore(video): emit frames with real timestamps, drop frame number quantizatio...
  • Additional commits viewable in compare view

Updates @tanstack/ai from 0.53.0 to 0.63.0

Release notes

Sourced from @​tanstack/ai's releases.

@​tanstack/ai@​0.63.0

Minor Changes

  • #1509 37b2826 - Add an optional inputSchema to defineAgent. The agent's tool shows the schema to the model, so the parent model writes the child's input, such as a short brief. run gets the checked input as a typed ctx.input. A bad input goes back to the model as a tool error, and the child does not start. inputSchema needs tool mode: chat() throws when subagents.router meets an agent that has one. Agents without inputSchema do not change.

  • #1401 c5c1996 - Preserve structured outcomes for cancelled and denied tool results. A tool-result part now carries outcome: 'cancelled' | 'denied' (new ToolResultOutcome type and isToolResultOutcome guard) across tool execution, streaming, persistence, and UI restoration, so callers can tell a user or middleware decision from an ordinary tool failure without matching error text. state stays 'error' for these results. The @tanstack/ai-client ToolResultPart type (used by useChat messages) now has the same outcome field.

  • #1452 0eb8f0b - @tanstack/ai-mcp can create an MCP server with createMCPServer and serveMCPStdio. The client package moves from @modelcontextprotocol/sdk to @modelcontextprotocol/client and @modelcontextprotocol/server. The client tries spec 2026-07-28 first, then the 2025 handshake. When an MCP server asks for input, chat() pauses with an mcp_input interrupt. Answer it with resolveInterrupt or cancel(), and the tool runs again with the answer in ctx.inputResponse. A tool can set execution: 'task' for a spec 2025 task handle. A tool reads requestInput and sample on ctx.context, typed by MCPToolContext. The server auth option takes the MCP SDK OAuthTokenVerifier shape. jwtVerifier and introspectionVerifier cover JWT and opaque tokens, and a tool reads the token as ctx.context.authInfo. createMCPClient<typeof server>({ transport }) types a remote client from a createMCPServer server, and createMCPClient({ server }) calls a server in the same process. server.handle(request, { authInfo, context }) takes a token your own middleware verified and values for ctx.context, typed with MCPToolContext<{ db: Db }>. A tool's metadata.title and metadata.annotations reach the host as the MCP title and annotations. A tool with no outputSchema can return a CallToolResult as is. sessions: 'reject' turns spec 2025 sessions off for hosts with many instances.

Patch Changes

  • #1233 8e8ee26 - Preserve failed client tool results across native interrupt resumes and await asynchronous client output validation

  • #1512 3e30cde - Keep a tool-call part at complete when its result arrives before the stream ends. If a stream had no TOOL_CALL_END, the end-of-stream safety net set a finished tool-call part back to input-complete. The final state then depended on async timing.

  • #1528 f44b6b2 - otelMiddleware({ captureContent: true }) now records content on media spans (generateImage, generateVideo, generateAudio, generateSpeech, generateTranscription, and the others). gen_ai.input.messages gets the prompt and input media. gen_ai.output.messages gets the output URLs or the transcript text. Inline data stays a placeholder. redact and maxContentLength apply to each text part.

  • #1527 d632d41 - otelMiddleware with captureContent: true now keeps multimodal parts structured in gen_ai.input.messages (OTel GenAI part shapes). URL media becomes a uri part and provider file handles become a file part, so traces show what the model looked at. Inline base64 data still records a [image]-style placeholder.

@​tanstack/ai@​0.61.0

Minor Changes

  • #1381 a0f7c14 - Add @tanstack/ai-worldlabs with worldlabsWorld() for Marble world generation through generateWorld(). World Labs jobs return a viewer URL and splat/mesh assets. WorldGenerationResult now has optional url, worldId, operationId, and assets so job adapters can omit a live-session token.

Patch Changes

  • #1469 54d39d3 - Keep Anthropic's signed thinking order when a provider-executed tool (web_search / web_fetch) runs inside the same response as thinking, and stop provider-executed calls from being classified as client tool interrupts.

    • uiMessagesToWire now splits an assistant message into ordered segments at every thinking part that follows a provider-executed tool call (the rule buildAssistantMessages already applies), instead of emitting all reasoning messages first and one anchor with the joined text and every tool call. Later anchors get ${id}-segment-${n} ids.
    • The run loop records the iteration's thinking, text and tool calls in arrival order and writes one assistant ModelMessage per segment, so the interrupt MESSAGES_SNAPSHOT and the server-side continuation history keep the order too.
    • getBoundaryActionableToolRequests and executeToolCalls skip provider-executed calls, so a run that mixes web search with a client tool no longer parks on "Client tool web_search is ready to run" interrupts.
    • A MESSAGES_SNAPSHOT and modelMessagesToUIMessages fold ${id}-segment-${n} messages back into their parent, so the UI still shows one assistant message per response.

    Without this, the turn after such a response fails with Anthropic's thinking or redacted_thinking blocks in the latest assistant message cannot be modified.

  • #1428 2d047c5 - Forward summarize maxLength through OpenAI-compatible adapters using the token-limit key for their API, regardless of the summarize wrapper name. Keep explicit caller limits unchanged.

  • #1471 74b5823 - Keep a failed tool call's error on the tool message chat() adds to its message history. Persisted threads now restore the call with state: 'error' instead of 'complete'.

  • #1366 abb0169 - Stop a mid-stream resume from duplicating the reasoning block. A hydrated message has no stepId on its thinking part — the stored form has nowhere to keep one — so the reasoning replayed on rejoin, which is keyed by stepId, matched nothing and was appended, leaving the turn as thinking, text, thinking. updateThinkingPart now falls back to the first thinking part that has no stepId and adopts it, carrying its signature over so the provider's encrypted reasoning is not lost. Parts that already belong to another step are never adopted, so separate reasoning steps still get separate parts.

  • #1427 ed87986 - Structured output now reports a response that was cut off at the output cap (finish_reason: "length") as a truncation error instead of a JSON parse error or a "no content" / "missing structured result" error. This covers chat({ outputSchema }) in native combined mode (error code max_tokens), structuredOutputStream() in openai-base and ai-openrouter (RUN_ERROR with code max_tokens), and their non-stream structuredOutput(). A truncated document used to read as a schema failure; the error now says the token limit was reached.

@​tanstack/ai@​0.59.0

Minor Changes

  • #1438 9ab4f76 - Add first-class subagents. chat({ subagents }) starts named child agents (router spawn, or a synthetic tool when there is no router). The stream emits AG-UI SUBAGENT_* events with subagentRunId. The client stores nested type: 'subagent' parts. useChat().subagents and part.subagent are the same live handle, including stop().

    In the React chat UI kit, pass the same agents to options.subagents that you pass to chat(). A subagent card can style its own child's parts: <Parts partsComponents={...} toolsComponents={...} />. Each entry replaces the root entry of the same key for that card and its nested children. Keys you do not set use the root widgets. The card's tool names, tool input and output, and approvals are typed from that agent's tools. The root interruptsComponents also accepts the children's approval tools and interrupts.

... (truncated)

Changelog

Sourced from @​tanstack/ai's changelog.

0.63.0

Minor Changes

  • #1509 37b2826 - Add an optional inputSchema to defineAgent. The agent's tool shows the schema to the model, so the parent model writes the child's input, such as a short brief. run gets the checked input as a typed ctx.input. A bad input goes back to the model as a tool error, and the child does not start. inputSchema needs tool mode: chat() throws when subagents.router meets an agent that has one. Agents without inputSchema do not change.

  • #1401 c5c1996 - Preserve structured outcomes for cancelled and denied tool results. A tool-result part now carries outcome: 'cancelled' | 'denied' (new ToolResultOutcome type and isToolResultOutcome guard) across tool execution, streaming, persistence, and UI restoration, so callers can tell a user or middleware decision from an ordinary tool failure without matching error text. state stays 'error' for these results. The @tanstack/ai-client ToolResultPart type (used by useChat messages) now has the same outcome field.

  • #1452 0eb8f0b - @tanstack/ai-mcp can create an MCP server with createMCPServer and serveMCPStdio. The client package moves from @modelcontextprotocol/sdk to @modelcontextprotocol/client and @modelcontextprotocol/server. The client tries spec 2026-07-28 first, then the 2025 handshake. When an MCP server asks for input, chat() pauses with an mcp_input interrupt. Answer it with resolveInterrupt or cancel(), and the tool runs again with the answer in ctx.inputResponse. A tool can set execution: 'task' for a spec 2025 task handle. A tool reads requestInput and sample on ctx.context, typed by MCPToolContext. The server auth option takes the MCP SDK OAuthTokenVerifier shape. jwtVerifier and introspectionVerifier cover JWT and opaque tokens, and a tool reads the token as ctx.context.authInfo. createMCPClient<typeof server>({ transport }) types a remote client from a createMCPServer server, and createMCPClient({ server }) calls a server in the same process. server.handle(request, { authInfo, context }) takes a token your own middleware verified and values for ctx.context, typed with MCPToolContext<{ db: Db }>. A tool's metadata.title and metadata.annotations reach the host as the MCP title and annotations. A tool with no outputSchema can return a CallToolResult as is. sessions: 'reject' turns spec 2025 sessions off for hosts with many instances.

Patch Changes

  • #1233 8e8ee26 - Preserve failed client tool results across native interrupt resumes and await asynchronous client output validation

  • #1512 3e30cde - Keep a tool-call part at complete when its result arrives before the stream ends. If a stream had no TOOL_CALL_END, the end-of-stream safety net set a finished tool-call part back to input-complete. The final state then depended on async timing.

  • #1528 f44b6b2 - otelMiddleware({ captureContent: true }) now records content on media spans (generateImage, generateVideo, generateAudio, generateSpeech, generateTranscription, and the others). gen_ai.input.messages gets the prompt and input media. gen_ai.output.messages gets the output URLs or the transcript text. Inline data stays a placeholder. redact and maxContentLength apply to each text part.

  • #1527 d632d41 - otelMiddleware with captureContent: true now keeps multimodal parts structured in gen_ai.input.messages (OTel GenAI part shapes). URL media becomes a uri part and provider file handles become a file part, so traces show what the model looked at. Inline base64 data still records a [image]-style placeholder.

0.62.0

Minor Changes

  • #1503 a450d00 - Add optional id and provider to decide() results (result.meta.id, result.meta.provider). Evaluate adapters return them on EvaluateAdapterResult. openRouterDecider fills them from the Decisions API response, so you can look a request up later with GET /api/v1/generation?id=.

  • #1376 740ae66 - Preserve source links for hosted web search calls. OpenAI Responses web_search_call items and Gemini Google Search grounding now surface as provider-executed tool calls with a normalized metadata.sources array (new ProviderExecutedToolSource type) and the raw provider data under metadata.openai / metadata.gemini. The OpenAI adapter requests web_search_call.action.sources when a branded web search tool is used, and both adapters replay the raw items on the next turn instead of treating them as function calls.

  • #1504 5099a32 - Show how long each turn took after a reload.

    • withPersistence records the run that produced each assistant message on metadata.tanstack.run.id.
    • reconstructChat(persistence, request, { includeRuns: true }) adds the finished run's startedAt and finishedAt to metadata.tanstack.run on those messages, and returns a top-level runs list. It needs a runs store that implements listByThread.
    • uiMessageToModelMessages and uiMessagesToWire keep metadata.tanstack.run.id, so the tag survives the round trip from the client.
    • runPersistenceConformance has a new checks option with two opt-in checks: 'messages.metadata' and 'runs.listByThread.state'. They are off by default, so an adapter that passed before still passes.
  • #1500 0abae97 - Put the full model text on the error that await chat({ outputSchema }) throws when the structured output fails to parse. Read it from error.rawText. The message still holds only a 200-character preview, so before this change a caller could not recover an answer that was valid JSON followed by extra text.

Patch Changes

  • #996 c54e20c - Finish middleware lifecycle hooks while waiting for client tools or approvals, and defer structured-output finalization until their results arrive in a later chat invocation.

  • #1284 a56192e - Keep multimodal (ContentPart[]) server tool results as arrays on the client. The next request now sends the image to the provider, not a JSON string of it.

  • #1481 820429f - fix: StreamProcessor writes TOOL_CALL_END.input into the tool-call part's arguments even when argument deltas were streamed, so arguments and input agree on the persisted part (a strict-mode OpenAI call no longer keeps the widened nulls the adapter already removed).

  • #1501 8c68c2d - Keep the provider's error body on the error that await chat({ outputSchema }) throws when the adapter streams structured output itself (for example OpenRouter). Read it from error.cause. Before, only a short message like Provider returned error reached the caller, so the real reason (for example a provider 400 body) was lost.

0.61.0

Minor Changes

... (truncated)

Commits
  • e44ba03 ci: Version Packages (#1514)
  • 37b2826 feat(ai): let the parent model write a subagent's input with defineAgent inpu...
  • f44b6b2 feat(ai): capture prompt, input media and output on otel media spans (#1528)
  • d632d41 fix(ai): keep multimodal parts structured in otel gen_ai.input.messages (#1527)
  • 0eb8f0b feat(ai-mcp): add an MCP server and speak spec 2026-07-28 (#1452)
  • 3e30cde fix(ai): keep a finished tool-call part at complete (#1512)
  • 1e066cb ci: Version Packages (#1493)
  • c5c1996 feat(ai, ai-client): add outcome to cancelled and denied tool results (#1401)
  • 8e8ee26 fix(ai-client): preserve client tool errors through interrupt resume (#1233)
  • c25567c feat(ci): coverage regression gate vs merge-base (#1036)
  • Additional commits viewable in compare view

Updates @tanstack/ai-opencode from 0.4.4 to 0.4.14

Release notes

Sourced from @​tanstack/ai-opencode's releases.

@​tanstack/ai-opencode@​0.4.14

Patch Changes

@​tanstack/ai-opencode@​0.4.12

Patch Changes

@​tanstack/ai-opencode@​0.4.10

Patch Changes

Changelog

Sourced from @​tanstack/ai-opencode's changelog.

0.4.14

Patch Changes

0.4.13

Patch Changes

0.4.12

Patch Changes

0.4.11

Patch Changes

  • Updated dependencies [ef0a00f]:
    • @​tanstack/ai@​0.60.0
    • @​tanstack/ai-sandbox@​0.5.14

0.4.10

Patch Changes

0.4.9

Patch Changes

  • Updated dependencies [796f2b5]:
    • @​tanstack/ai@​0.58.0
    • @​tanstack/ai-sandbox@​0.5.12

0.4.8

... (truncated)

Commits

Updates @tanstack/ai-sandbox from 0.5.6 to 0.5.17

Release notes

Sourced from @​tanstack/ai-sandbox's releases.

@​tanstack/ai-sandbox@​0.5.17

Patch Changes

@​tanstack/ai-sandbox@​0.5.15

Patch Changes

@​tanstack/ai-sandbox@​0.5.13

Patch Changes

  • #1438 9ab4f76 - The memory sandbox run store keeps parentRunId, subagentRunId, and name on a run record and adds listByParentRun, so reconstructChat can rebuild subagent cards from it.

  • Updated dependencies [9ab4f76, 9ab4f76, 9ab4f76]:

    • @​tanstack/ai@​0.59.0
    • @​tanstack/ai-persistence@​0.6.5
    • @​tanstack/ai-skills@​0.1.8
Changelog

Sourced from @​tanstack/ai-sandbox's changelog.

0.5.17

Patch Changes

0.5.16

Patch Changes

  • #1498 f8dbede - Keep the sandbox when a run pauses at an interrupt, a client-tool wait, or an approval wait. withSandbox no longer takes the after-run snapshot or runs destroyOnComplete at the pause. It does these when the run completes.

  • #1491 cd5aaaf - Leave the Git source token out of the workspace hash. A new token for gitSource({ auth: { token } }) (for example, an hourly GitHub App token) no longer changes the sandbox key, so reuse: 'thread' finds the same sandbox again. The URL, ref, depth, and username still change the key.

  • Updated dependencies [a450d00, c54e20c, a56192e, 740ae66, 5099a32, 820429f, 0abae97, 8c68c2d]:

    • @​tanstack/ai@​0.62.0
    • @​tanstack/ai-persistence@​0.7.0
    • @​tanstack/ai-skills@​0.1.12

0.5.15

Patch Changes

0.5.14

Patch Changes

  • Updated dependencies [ef0a00f]:
    • @​tanstack/ai@​0.60.0
    • @​tanstack/ai-persistence@​0.6.6
    • @​tanstack/ai-skills@​0.1.9

0.5.13

Patch Changes

  • #1438 9ab4f76 - The memory sandbox run store keeps parentRunId, subagentRunId, and name on a run record and adds listByParentRun, so reconstructChat can rebuild subagent cards from it.

  • Updated dependencies [9ab4f76, 9ab4f76, 9ab4f76]:

    • @​tanstack/ai@​0.59.0
    • @​tanstack/ai-persistence@​0.6.5
    • @​tanstack/ai-skills@​0.1.8

... (truncated)

Commits

Updates @tanstack/ai-sandbox-local-process from 0.2.5 to 0.2.6

Release notes

Sourced from @​tanstack/ai-sandbox-local-process's releases.

@​tanstack/ai-sandbox-local-process@​0.2.6

Patch Changes

  • #1484 61231d6 - Add a package README to each sandbox provider: what it isolates with, the factory call, the auth and snapshot/resume behaviour that differs between them, and links to the sandbox docs.
Changelog

Sourced from @​tanstack/ai-sandbox-local-process's changelog.

0.2.6

Patch Changes

  • #1484 61231d6 - Add a package README to each sandbox provider: what it isolates with, the factory call, the auth and snapshot/resume behaviour that differs between them, and links to the sandbox docs.
Commits

Updates @tauri-apps/cli from 2.11.4 to 2.12.0

Release notes

Sourced from @​tauri-apps/cli's releases.

@​tauri-apps/cli v2.12.0

[2.12.0]

New Features

  • f6c1eb253 (#15401) Added bundle.windows.bundleVCRuntime to copy the Visual C++ runtime DLLs into Windows MSI and NSIS installers. The bundler locates the runtime through VCTOOLS_REDIST_DIR or the bundled vswhere.exe.

  • f76b1d3ae (...

    Description has been truncated

…ectory with 19 updates

Bumps the development-dependencies group with 19 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@capacitor/cli](https://github.com/ionic-team/capacitor) | `8.5.1` | `8.5.2` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.61.1` | `1.63.0` |
| [@tanstack/ai](https://github.com/TanStack/ai/tree/HEAD/packages/ai) | `0.53.0` | `0.63.0` |
| [@tanstack/ai-opencode](https://github.com/TanStack/ai/tree/HEAD/packages/ai-opencode) | `0.4.4` | `0.4.14` |
| [@tanstack/ai-sandbox](https://github.com/TanStack/ai/tree/HEAD/packages/ai-sandbox) | `0.5.6` | `0.5.17` |
| [@tanstack/ai-sandbox-local-process](https://github.com/TanStack/ai/tree/HEAD/packages/ai-sandbox-local-process) | `0.2.5` | `0.2.6` |
| [@tauri-apps/cli](https://github.com/tauri-apps/tauri) | `2.11.4` | `2.12.0` |
| [@testing-library/jest-dom](https://github.com/testing-library/jest-dom) | `7.0.0` | `7.0.1` |
| [@testing-library/react](https://github.com/testing-library/react-testing-library) | `16.3.2` | `16.3.3` |
| [@testing-library/user-event](https://github.com/testing-library/user-event) | `14.6.1` | `14.6.7` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.1.1` | `26.6.3` |
| [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.0.4` | `6.1.1` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.10` | `5.0.2` |
| [jsdom](https://github.com/jsdom/jsdom) | `29.1.1` | `30.1.1` |
| [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt) | `0.60.0` | `0.71.0` |
| [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.75.0` | `1.86.0` |
| [oxlint-tsgolint](https://github.com/oxc-project/tsgolint) | `7.0.2001` | `7.0.2003` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.1.5` | `8.3.1` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.10` | `5.0.2` |



Updates `@capacitor/cli` from 8.5.1 to 8.5.2
- [Release notes](https://github.com/ionic-team/capacitor/releases)
- [Changelog](https://github.com/ionic-team/capacitor/blob/main/CHANGELOG.md)
- [Commits](ionic-team/capacitor@8.5.1...8.5.2)

Updates `@playwright/test` from 1.61.1 to 1.63.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.61.1...v1.63.0)

Updates `@tanstack/ai` from 0.53.0 to 0.63.0
- [Release notes](https://github.com/TanStack/ai/releases)
- [Changelog](https://github.com/TanStack/ai/blob/main/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/TanStack/ai/commits/@tanstack/ai@0.63.0/packages/ai)

Updates `@tanstack/ai-opencode` from 0.4.4 to 0.4.14
- [Release notes](https://github.com/TanStack/ai/releases)
- [Changelog](https://github.com/TanStack/ai/blob/main/packages/ai-opencode/CHANGELOG.md)
- [Commits](https://github.com/TanStack/ai/commits/@tanstack/ai-opencode@0.4.14/packages/ai-opencode)

Updates `@tanstack/ai-sandbox` from 0.5.6 to 0.5.17
- [Release notes](https://github.com/TanStack/ai/releases)
- [Changelog](https://github.com/TanStack/ai/blob/main/packages/ai-sandbox/CHANGELOG.md)
- [Commits](https://github.com/TanStack/ai/commits/@tanstack/ai-sandbox@0.5.17/packages/ai-sandbox)

Updates `@tanstack/ai-sandbox-local-process` from 0.2.5 to 0.2.6
- [Release notes](https://github.com/TanStack/ai/releases)
- [Changelog](https://github.com/TanStack/ai/blob/main/packages/ai-sandbox-local-process/CHANGELOG.md)
- [Commits](https://github.com/TanStack/ai/commits/@tanstack/ai-sandbox-local-process@0.2.6/packages/ai-sandbox-local-process)

Updates `@tauri-apps/cli` from 2.11.4 to 2.12.0
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](https://github.com/tauri-apps/tauri/compare/@tauri-apps/cli-v2.11.4...@tauri-apps/cli-v2.12.0)

Updates `@testing-library/jest-dom` from 7.0.0 to 7.0.1
- [Release notes](https://github.com/testing-library/jest-dom/releases)
- [Changelog](https://github.com/testing-library/jest-dom/blob/main/CHANGELOG.md)
- [Commits](testing-library/jest-dom@v7.0.0...v7.0.1)

Updates `@testing-library/react` from 16.3.2 to 16.3.3
- [Release notes](https://github.com/testing-library/react-testing-library/releases)
- [Changelog](https://github.com/testing-library/react-testing-library/blob/main/CHANGELOG.md)
- [Commits](testing-library/react-testing-library@v16.3.2...v16.3.3)

Updates `@testing-library/user-event` from 14.6.1 to 14.6.7
- [Release notes](https://github.com/testing-library/user-event/releases)
- [Changelog](https://github.com/testing-library/user-event/blob/main/CHANGELOG.md)
- [Commits](testing-library/user-event@v14.6.1...v14.6.7)

Updates `@types/node` from 26.1.1 to 26.6.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@vitejs/plugin-react` from 6.0.4 to 6.1.1
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.1.1/packages/plugin-react)

Updates `@vitest/coverage-v8` from 4.1.10 to 5.0.2
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.2/packages/coverage-v8)

Updates `jsdom` from 29.1.1 to 30.1.1
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Commits](jsdom/jsdom@v29.1.1...v30.1.1)

Updates `oxfmt` from 0.60.0 to 0.71.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.71.0/npm/oxfmt)

Updates `oxlint` from 1.75.0 to 1.86.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.86.0/npm/oxlint)

Updates `oxlint-tsgolint` from 7.0.2001 to 7.0.2003
- [Release notes](https://github.com/oxc-project/tsgolint/releases)
- [Commits](oxc-project/tsgolint@v7.0.2001...v7.0.2003)

Updates `vite` from 8.1.5 to 8.3.1
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.3.1/packages/vite)

Updates `vitest` from 4.1.10 to 5.0.2
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.2/packages/vitest)

---
updated-dependencies:
- dependency-name: "@capacitor/cli"
  dependency-version: 8.5.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: "@playwright/test"
  dependency-version: 1.63.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: "@tanstack/ai"
  dependency-version: 0.63.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: "@tanstack/ai-opencode"
  dependency-version: 0.4.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: "@tanstack/ai-sandbox"
  dependency-version: 0.5.17
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: "@tanstack/ai-sandbox-local-process"
  dependency-version: 0.2.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: "@tauri-apps/cli"
  dependency-version: 2.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: "@testing-library/jest-dom"
  dependency-version: 7.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: "@testing-library/react"
  dependency-version: 16.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: "@testing-library/user-event"
  dependency-version: 14.6.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: "@types/node"
  dependency-version: 26.6.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 5.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: jsdom
  dependency-version: 30.1.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: oxfmt
  dependency-version: 0.71.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: oxlint
  dependency-version: 1.86.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: oxlint-tsgolint
  dependency-version: 7.0.2003
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: vite
  dependency-version: 8.3.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: vitest
  dependency-version: 5.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 1, 2026
@coderabbitai

coderabbitai Bot commented Oct 1, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: fdabe3dc-3bbe-4ec4-9100-11bae6f8218d

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@dependabot @github

dependabot Bot commented on behalf of github Oct 22, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 22, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/development-dependencies-d6ba062646 branch October 22, 2026 12:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants