chore(deps): Bump the production-minor-patch group across 1 directory with 14 updates by dependabot[bot] · Pull Request #162 · corespeed-io/lore

dependabot · 2026-10-21T22:38:20Z

Bumps the production-minor-patch group with 14 updates in the / directory:

Package	From	To
@ast-grep/napi	`0.45.3`	`0.51.0`
@google/genai	`2.27.0`	`2.30.0`
@opentelemetry/api-logs	`0.222.0`	`0.223.0`
@opentelemetry/instrumentation	`0.222.0`	`0.223.0`
@opentelemetry/sdk-logs	`0.222.0`	`0.223.0`
@opentelemetry/sdk-trace-base	`2.11.0`	`2.12.0`
hono	`4.13.12`	`4.13.13`
next	`16.3.8`	`16.4.2`
openai	`7.27.0`	`7.38.0`
react	`19.3.0`	`19.3.1`
react-dom	`19.3.0`	`19.3.1`
voyageai	`0.1.0`	`0.4.0`
zod	`4.6.5`	`4.6.7`
@modelcontextprotocol/server	`2.3.0`	`2.3.1`

Updates @ast-grep/napi from 0.45.3 to 0.51.0

Release notes

Sourced from @ast-grep/napi's releases.

0.51.0

fix(cli): use ast-grep name in project setup hint [#3001](https://github.com/ast-grep/ast-grep/issues/3001)

fix: replace deprecated serde_yaml with serde-saphyr [#2999](https://github.com/ast-grep/ast-grep/issues/2999)

fix(deps): update rust crate tree-sitter-haskell to 0.24.0 [#2988](https://github.com/ast-grep/ast-grep/issues/2988)

fix(cli): preserve files when update-all writes fail [#2995](https://github.com/ast-grep/ast-grep/issues/2995)

Revise security policy for clarity and updates a7d3f69

fix: update wasm linting ea55463

0.50.0

feat(outline): add Java annotation type and element rules [#2955](https://github.com/ast-grep/ast-grep/issues/2955)

fix(outline): report Java private/protected fields in the outline [#2950](https://github.com/ast-grep/ast-grep/issues/2950)

feat(outline): add Java enum member rule [#2954](https://github.com/ast-grep/ast-grep/issues/2954)

chore(deps): update dependency @types/node to v24.19.1 [#2983](https://github.com/ast-grep/ast-grep/issues/2983)

chore(deps): update dependency dprint to v0.60.1 [#2984](https://github.com/ast-grep/ast-grep/issues/2984)

feat(outline): add Java module declaration rule [#2956](https://github.com/ast-grep/ast-grep/issues/2956)

chore(deps): update rust crate termimad to v0.35.5 [#2925](https://github.com/ast-grep/ast-grep/issues/2925)

chore(deps): update rust crate napi-derive to v3.6.10 [#2936](https://github.com/ast-grep/ast-grep/issues/2936)

chore(deps): update dependency @napi-rs/cli to v3.10.6 [#2922](https://github.com/ast-grep/ast-grep/issues/2922)

chore(deps): update dependency chalk to v6.0.1 [#2979](https://github.com/ast-grep/ast-grep/issues/2979)

chore(deps): update rust crate tokio to v1.53.2 [#2981](https://github.com/ast-grep/ast-grep/issues/2981)

chore(deps): update rust crate thiserror to v2.0.21 [#2966](https://github.com/ast-grep/ast-grep/issues/2966)

chore(deps): update dependency oxlint to v1.86.0 [#2967](https://github.com/ast-grep/ast-grep/issues/2967)

chore(deps): update rust crate smallvec to v1.16.2 [#2968](https://github.com/ast-grep/ast-grep/issues/2968)

feat(outline): add Java wildcard-import outline rules [#2948](https://github.com/ast-grep/ast-grep/issues/2948)

fix(outline): capture C/C++ declarator identifier names [#2946](https://github.com/ast-grep/ast-grep/issues/2946)

feat(cli): add trust and revoke custom language policies [#2972](https://github.com/ast-grep/ast-grep/issues/2972)

refactor(cli): extract custom language policy [#2977](https://github.com/ast-grep/ast-grep/issues/2977)

feat(cli): add custom language loading policy [#2971](https://github.com/ast-grep/ast-grep/issues/2971)

fix(schema): reject null relation fields [#2969](https://github.com/ast-grep/ast-grep/issues/2969)

chore(deps): update rust crate clap_complete to v4.6.11 [#2965](https://github.com/ast-grep/ast-grep/issues/2965)

chore(deps): update rust crate clap to v4.6.7 [#2964](https://github.com/ast-grep/ast-grep/issues/2964)

chore(deps): update rust crate napi to v3.13.0 [#2932](https://github.com/ast-grep/ast-grep/issues/2932)

chore(deps): update dependency @types/node to v24.13.6 [#2941](https://github.com/ast-grep/ast-grep/issues/2941)

feat(language): add Zig support [#2942](https://github.com/ast-grep/ast-grep/issues/2942)

fix: require opt-in for custom language libraries [#2960](https://github.com/ast-grep/ast-grep/issues/2960)

refactor: parse default run through app [#2962](https://github.com/ast-grep/ast-grep/issues/2962)

feat(outline): add Java record_declaration rule [#2945](https://github.com/ast-grep/ast-grep/issues/2945)

chore(deps): update rust crate toml_edit to v0.25.15 [#2937](https://github.com/ast-grep/ast-grep/issues/2937)

chore(deps): update rust crate smallvec to v1.16.1 [#2920](https://github.com/ast-grep/ast-grep/issues/2920)

chore(deps): update dependency @types/node to v24.13.4 [#2931](https://github.com/ast-grep/ast-grep/issues/2931)

chore(deps): update dependency dprint to v0.57.4 [#2926](https://github.com/ast-grep/ast-grep/issues/2926)

chore(deps): update dependency oxlint to v1.82.0 [#2928](https://github.com/ast-grep/ast-grep/issues/2928)

chore(deps): update dependency oxlint to v1.81.0 [#2919](https://github.com/ast-grep/ast-grep/issues/2919)

chore(deps): update rust crate termimad to v0.35.3 [#2921](https://github.com/ast-grep/ast-grep/issues/2921)

chore(deps): update dependency dprint to v0.57.1 [#2923](https://github.com/ast-grep/ast-grep/issues/2923)

chore(deps): update dependency @ast-grep/napi to v0.45.3 [#2918](https://github.com/ast-grep/ast-grep/issues/2918)

feat(outline): add Java record_declaration rule (#2945) [#2944](https://github.com/ast-grep/ast-grep/issues/2944)

Changelog

Sourced from @ast-grep/napi's changelog.

0.51.0

fix(cli): use ast-grep name in project setup hint [#3001](https://github.com/ast-grep/ast-grep/issues/3001)

fix: replace deprecated serde_yaml with serde-saphyr [#2999](https://github.com/ast-grep/ast-grep/issues/2999)

fix(deps): update rust crate tree-sitter-haskell to 0.24.0 [#2988](https://github.com/ast-grep/ast-grep/issues/2988)

fix(cli): preserve files when update-all writes fail [#2995](https://github.com/ast-grep/ast-grep/issues/2995)

Revise security policy for clarity and updates a7d3f69

fix: update wasm linting ea55463

0.50.0

7 October 2026

feat(outline): add Java annotation type and element rules [#2955](https://github.com/ast-grep/ast-grep/issues/2955)

fix(outline): report Java private/protected fields in the outline [#2950](https://github.com/ast-grep/ast-grep/issues/2950)

feat(outline): add Java enum member rule [#2954](https://github.com/ast-grep/ast-grep/issues/2954)

chore(deps): update dependency @types/node to v24.19.1 [#2983](https://github.com/ast-grep/ast-grep/issues/2983)

chore(deps): update dependency dprint to v0.60.1 [#2984](https://github.com/ast-grep/ast-grep/issues/2984)

feat(outline): add Java module declaration rule [#2956](https://github.com/ast-grep/ast-grep/issues/2956)

chore(deps): update rust crate termimad to v0.35.5 [#2925](https://github.com/ast-grep/ast-grep/issues/2925)

chore(deps): update rust crate napi-derive to v3.6.10 [#2936](https://github.com/ast-grep/ast-grep/issues/2936)

chore(deps): update dependency @napi-rs/cli to v3.10.6 [#2922](https://github.com/ast-grep/ast-grep/issues/2922)

chore(deps): update dependency chalk to v6.0.1 [#2979](https://github.com/ast-grep/ast-grep/issues/2979)

chore(deps): update rust crate tokio to v1.53.2 [#2981](https://github.com/ast-grep/ast-grep/issues/2981)

chore(deps): update rust crate thiserror to v2.0.21 [#2966](https://github.com/ast-grep/ast-grep/issues/2966)

chore(deps): update dependency oxlint to v1.86.0 [#2967](https://github.com/ast-grep/ast-grep/issues/2967)

chore(deps): update rust crate smallvec to v1.16.2 [#2968](https://github.com/ast-grep/ast-grep/issues/2968)

feat(outline): add Java wildcard-import outline rules [#2948](https://github.com/ast-grep/ast-grep/issues/2948)

fix(outline): capture C/C++ declarator identifier names [#2946](https://github.com/ast-grep/ast-grep/issues/2946)

feat(cli): add trust and revoke custom language policies [#2972](https://github.com/ast-grep/ast-grep/issues/2972)

refactor(cli): extract custom language policy [#2977](https://github.com/ast-grep/ast-grep/issues/2977)

feat(cli): add custom language loading policy [#2971](https://github.com/ast-grep/ast-grep/issues/2971)

fix(schema): reject null relation fields [#2969](https://github.com/ast-grep/ast-grep/issues/2969)

chore(deps): update rust crate clap_complete to v4.6.11 [#2965](https://github.com/ast-grep/ast-grep/issues/2965)

chore(deps): update rust crate clap to v4.6.7 [#2964](https://github.com/ast-grep/ast-grep/issues/2964)

chore(deps): update rust crate napi to v3.13.0 [#2932](https://github.com/ast-grep/ast-grep/issues/2932)

chore(deps): update dependency @types/node to v24.13.6 [#2941](https://github.com/ast-grep/ast-grep/issues/2941)

feat(language): add Zig support [#2942](https://github.com/ast-grep/ast-grep/issues/2942)

fix: require opt-in for custom language libraries [#2960](https://github.com/ast-grep/ast-grep/issues/2960)

refactor: parse default run through app [#2962](https://github.com/ast-grep/ast-grep/issues/2962)

feat(outline): add Java record_declaration rule [#2945](https://github.com/ast-grep/ast-grep/issues/2945)

chore(deps): update rust crate toml_edit to v0.25.15 [#2937](https://github.com/ast-grep/ast-grep/issues/2937)

chore(deps): update rust crate smallvec to v1.16.1 [#2920](https://github.com/ast-grep/ast-grep/issues/2920)

chore(deps): update dependency @types/node to v24.13.4 [#2931](https://github.com/ast-grep/ast-grep/issues/2931)

chore(deps): update dependency dprint to v0.57.4 [#2926](https://github.com/ast-grep/ast-grep/issues/2926)

chore(deps): update dependency oxlint to v1.82.0 [#2928](https://github.com/ast-grep/ast-grep/issues/2928)

chore(deps): update dependency oxlint to v1.81.0 [#2919](https://github.com/ast-grep/ast-grep/issues/2919)

chore(deps): update rust crate termimad to v0.35.3 [#2921](https://github.com/ast-grep/ast-grep/issues/2921)

chore(deps): update dependency dprint to v0.57.1 [#2923](https://github.com/ast-grep/ast-grep/issues/2923)

chore(deps): update dependency @ast-grep/napi to v0.45.3 [#2918](https://github.com/ast-grep/ast-grep/issues/2918)

... (truncated)

Commits

48b54b3 0.51.0
e64de1a fix(cli): use ast-grep name in project setup hint (#3001)
a7d3f69 Revise security policy for clarity and updates
74f869c fix: replace deprecated serde_yaml with serde-saphyr (#2999)
0be5673 fix(deps): update rust crate tree-sitter-haskell to 0.24.0 (#2988)
dbc59f5 fix(cli): preserve files when update-all writes fail (#2995)
ea55463 fix: update wasm linting
4118186 0.50.0
6f59168 feat(outline): add Java annotation type and element rules (#2955)
029430e fix(outline): report Java private/protected fields in the outline (#2950)
Additional commits viewable in compare view

Updates @google/genai from 2.27.0 to 2.30.0

Release notes

Sourced from @google/genai's releases.

v2.30.0

2.30.0 (2026-10-14)

Features

interactions: add gemini-4-argon to Model enum (8a3c307)

Bug Fixes

clear continuation state and preserve prompt feedback when continuation hop returns no candidates (e63d1f1)

fix the grounding metadata merging for automatic continuation in generate content and generate content stream (6bfba87)

make continuation streams retry dropped hops, stop on prompt_feedback, and keep real errors in generate_content (6bdc0d9)

type GeminiNextGen signatures with public, importable names (ad3fb89)

v2.29.1

2.29.1 (2026-10-13)

Bug Fixes

concatenate output_text across multi-step model responses in a turn (567cc8a)

v2.29.0

2.29.0 (2026-10-13)

Features

accumulate streaming continuation usage metadata and expose initialPromptTokenCount (dbc961f)

Add continuation_token to the Interactions interaction.status_update event. (a93776c)

Add a CONTINUATION_REQUIRED Interaction status (754f71f)

add billable token counts fields (839ffc2)

Add startOffset/endOffset to Transcription and interimTranscriptTimestampEnabled to RealtimeInputConfig (bdbf156)

Add usage in InteractionStatusUpdate events (8892aea)

automatically consume the continuation token (98637d1)

cli: update Speakeasy generator to v2.948.0, bump CLI to v0.4.2, and apply CLI overlay fixes (22d53ec)

Bug Fixes

clear intermediate CONTINUATION finishReason in streaming continuation (22706af)

do not record incomplete continuation stream turns in curated chat history (81c3c49)

gemini-api-cli: remove unsupported 2.5 and 1.6 models from Interactions model options and CLI examples (1002720)

js: do not set initial prompt token count for requests that do not use automatic consumption of continuation token (0885fb9)

js: fix streaming continuation edge cases (stale token, AbortError, initialPromptTokenCount) (f3d10a6)

Raise default HTTP timeouts so long-running requests aren't killed client-side (10e850c)

resume streaming generation from the latest checkpoint continuation token on mid-stream errors or cutoffs (625ac2c)

Update EnvironmentConfig.env schema to map keys to EnvVar or string. (8478e12)

... (truncated)

Changelog

Sourced from @google/genai's changelog.

2.30.0 (2026-10-14)

Features

interactions: add gemini-4-argon to Model enum (8a3c307)

Bug Fixes

clear continuation state and preserve prompt feedback when continuation hop returns no candidates (e63d1f1)

fix the grounding metadata merging for automatic continuation in generate content and generate content stream (6bfba87)

make continuation streams retry dropped hops, stop on prompt_feedback, and keep real errors in generate_content (6bdc0d9)

type GeminiNextGen signatures with public, importable names (ad3fb89)

2.29.1 (2026-10-13)

Bug Fixes

concatenate output_text across multi-step model responses in a turn (567cc8a)

2.29.0 (2026-10-13)

Features

accumulate streaming continuation usage metadata and expose initialPromptTokenCount (dbc961f)

Add continuation_token to the Interactions interaction.status_update event. (a93776c)

Add a CONTINUATION_REQUIRED Interaction status (754f71f)

add billable token counts fields (839ffc2)

Add startOffset/endOffset to Transcription and interimTranscriptTimestampEnabled to RealtimeInputConfig (bdbf156)

Add usage in InteractionStatusUpdate events (8892aea)

automatically consume the continuation token (98637d1)

cli: update Speakeasy generator to v2.948.0, bump CLI to v0.4.2, and apply CLI overlay fixes (22d53ec)

Bug Fixes

clear intermediate CONTINUATION finishReason in streaming continuation (22706af)

do not record incomplete continuation stream turns in curated chat history (81c3c49)

gemini-api-cli: remove unsupported 2.5 and 1.6 models from Interactions model options and CLI examples (1002720)

js: do not set initial prompt token count for requests that do not use automatic consumption of continuation token (0885fb9)

js: fix streaming continuation edge cases (stale token, AbortError, initialPromptTokenCount) (f3d10a6)

Raise default HTTP timeouts so long-running requests aren't killed client-side (10e850c)

resume streaming generation from the latest checkpoint continuation token on mid-stream errors or cutoffs (625ac2c)

Update EnvironmentConfig.env schema to map keys to EnvVar or string. (8478e12)

2.28.0 (2026-10-07)

... (truncated)

Commits

1de87f8 chore(main): release 2.30.0 (#2058)
14086e6 chore(cli): update Speakeasy OpenAPI generator to v2.948.9
433a33a chore: internal change
6bdc0d9 fix: make continuation streams retry dropped hops, stop on prompt_feedback, a...
6bfba87 fix: fix the grounding metadata merging for automatic continuation in generat...
ad3fb89 fix: type GeminiNextGen signatures with public, importable names
8a3c307 feat(interactions): add gemini-4-argon to Model enum
f2ad2c1 chore: Skip the code coverage workflow on push/PR (manual trigger only).
e63d1f1 fix: clear continuation state and preserve prompt feedback when continuation ...
2e083a7 chore(main): release 2.29.1 (#2052)
Additional commits viewable in compare view

Updates @opentelemetry/api-logs from 0.222.0 to 0.223.0

Release notes

Sourced from @opentelemetry/api-logs's releases.

experimental/v0.223.0

0.223.0

💥 Breaking Changes

chore(web-common)!: clean up and deprecate network span utils #7114

These utilities were long planned for removal. They were moved from the sdk-trace-web package and are currently only used by the (deprecated) instrumentation-fetch and instrumentation-xml-http-request packages.

Drop the skipOldSemconvContentLengthAttrs vestigial option from addSpanNetworkEvents().

🏠 Internal

refactor(web-common, instrumentation-fetch, instrumentation-xml-http-request): move utils from @opentelemetry/sdk-trace-web into @opentelemetry/web-common and use them in @opentelemetry/instrumentation-fetch and @opentelemetry/instrumentation-xml-http-request. With this change the instrumentations do not depend on SDK packages and the utils are kept in a shared package so we avoid code duplication.

Commits

92b844e chore: prepare next v2.x release (#7151)
a859aff fix(web-common): export getElementXPath utility (#7124)
2bd5a73 chore(web-common)!: deprecate addSpanNetworkEvents() et al instrumentation-...
d60f05e doc(sdk-trace): add description for StackContextManager (#7089)
5bd476e chore: move context manager to sdk-trace (#7086)
554c0c6 chore: move sdk-trace-web utils to web-common (#7058)
788922c ci: support maintenance branch releases (#7036)
See full diff in compare view

Updates @opentelemetry/instrumentation from 0.222.0 to 0.223.0

Release notes

Sourced from @opentelemetry/instrumentation's releases.

experimental/v0.223.0

0.223.0

💥 Breaking Changes

chore(web-common)!: clean up and deprecate network span utils #7114

These utilities were long planned for removal. They were moved from the sdk-trace-web package and are currently only used by the (deprecated) instrumentation-fetch and instrumentation-xml-http-request packages.

Drop the skipOldSemconvContentLengthAttrs vestigial option from addSpanNetworkEvents().

🏠 Internal

refactor(web-common, instrumentation-fetch, instrumentation-xml-http-request): move utils from @opentelemetry/sdk-trace-web into @opentelemetry/web-common and use them in @opentelemetry/instrumentation-fetch and @opentelemetry/instrumentation-xml-http-request. With this change the instrumentations do not depend on SDK packages and the utils are kept in a shared package so we avoid code duplication.

Commits

92b844e chore: prepare next v2.x release (#7151)
a859aff fix(web-common): export getElementXPath utility (#7124)
2bd5a73 chore(web-common)!: deprecate addSpanNetworkEvents() et al instrumentation-...
d60f05e doc(sdk-trace): add description for StackContextManager (#7089)
5bd476e chore: move context manager to sdk-trace (#7086)
554c0c6 chore: move sdk-trace-web utils to web-common (#7058)
788922c ci: support maintenance branch releases (#7036)
See full diff in compare view

Updates @opentelemetry/sdk-logs from 0.222.0 to 0.223.0

Release notes

Sourced from @opentelemetry/sdk-logs's releases.

experimental/v0.223.0

0.223.0

💥 Breaking Changes

chore(web-common)!: clean up and deprecate network span utils #7114

These utilities were long planned for removal. They were moved from the sdk-trace-web package and are currently only used by the (deprecated) instrumentation-fetch and instrumentation-xml-http-request packages.

Drop the skipOldSemconvContentLengthAttrs vestigial option from addSpanNetworkEvents().

🏠 Internal

refactor(web-common, instrumentation-fetch, instrumentation-xml-http-request): move utils from @opentelemetry/sdk-trace-web into @opentelemetry/web-common and use them in @opentelemetry/instrumentation-fetch and @opentelemetry/instrumentation-xml-http-request. With this change the instrumentations do not depend on SDK packages and the utils are kept in a shared package so we avoid code duplication.

Commits

92b844e chore: prepare next v2.x release (#7151)
a859aff fix(web-common): export getElementXPath utility (#7124)
2bd5a73 chore(web-common)!: deprecate addSpanNetworkEvents() et al instrumentation-...
d60f05e doc(sdk-trace): add description for StackContextManager (#7089)
5bd476e chore: move context manager to sdk-trace (#7086)
554c0c6 chore: move sdk-trace-web utils to web-common (#7058)
788922c ci: support maintenance branch releases (#7036)
See full diff in compare view

Updates @opentelemetry/sdk-trace-base from 2.11.0 to 2.12.0

Release notes

Sourced from @opentelemetry/sdk-trace-base's releases.

v2.12.0

2.12.0

🚀 Features

chore(sdk-trace): add StackContextManager in @opentelemetry/sdk-trace package #7086

🏠 Internal

feat(ci): support releasing from maintenance branches #6767 @pichlermarc

The API documentation site is only redeployed for releases whose commit is reachable from main, so a maintenance release no longer overwrites it.

Changelog

Sourced from @opentelemetry/sdk-trace-base's changelog.

CHANGELOG

All notable changes to this project will be documented in this file.

For API changes, see the API CHANGELOG. For experimental package changes, see the experimental CHANGELOG. For semantic convention package changes, see the semconv CHANGELOG. For notes on migrating to 2.x / 0.200.x see the upgrade guide. For notes on migrating to 3.x see the 3.x migration guide.

Unreleased

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

📚 Documentation

🏠 Internal

3.0.0

💥 Breaking Changes

chore(sdk-trace-node)!: remove the @opentelemetry/sdk-trace-node package #7054

The sdk-trace-node package has been replaced by the @opentelemetry/sdk-trace package. See the 3.x migration guide for full migration instructions.

chore(shim-opentracing)!: remove the @opentelemetry/shim-opentracing package

In the OpenTelemetry Specification v1.56.0 the OpenTracing compatibility requirements were deprecated. The JavaScript OpenTracing shim package will not receive any more releases after the current 2.12.0 release (source code for last release).

chore(context-async-hooks)!: remove the unused class AsyncHooksContextManager #7078

feat!: migrate package builds from tsc to tsdown, emitting dual CJS/ESM output from a single dist/ directory and declaring an exports map on every package #6293 @overbalance

Importing a package by its name is unaffected in both CommonJS and ESM, as is every subpath listed in its exports map.

Deep imports into the build output no longer resolve. An exports map is an allowlist that Node.js and bundlers enforce, so specifiers such as @opentelemetry/core/build/src/... or @opentelemetry/core/build/esm/... now fail with ERR_PACKAGE_PATH_NOT_EXPORTED. Rewriting them to the new file layout does not help — unlisted subpaths are rejected whether or not the file exists.

The emitted files moved out of build/src (CJS), build/esm and build/esnext (ESM) into dist/, using .cjs/.mjs extensions with matching .d.cts/.d.mts declarations.

<package>/package.json is no longer importable for the same reason. Read a package's version from your own dependency metadata, or use SDK_INFO from @opentelemetry/core for the SDK version.

The non-standard esnext entry point has been removed; tools that preferred it fall back to module (ESM) or main (CJS).

If you depend on something that is only reachable through a deep import, please open an issue so it can be considered for the public API.

feat(core)!: remove deprecated getTimeOrigin, otperformance, _globalThis, and unrefTimer from @opentelemetry/core #7053

getTimeOrigin() — use performance.timeOrigin directly.

otperformance — use the global performance object directly.

_globalThis — use globalThis directly.

unrefTimer(timer) — call timer.unref() directly in your own code.

feat(sdk-trace)!: remove deprecated TracerProviderOptions.forceFlushTimeoutMillis #7057

Pass timeoutMillis to provider.forceFlush({ timeoutMillis }) instead. The default timeout is 30000ms.

feat(propagator-jaeger)!: remove @opentelemetry/propagator-jaeger package #7077

The Jaeger propagator is deprecated by the OpenTelemetry specification in favour of W3CTraceContextPropagator. Use W3CTraceContextPropagator from @opentelemetry/core instead.

See the 3.x migration guide for full instructions.

... (truncated)

Commits

92b844e chore: prepare next v2.x release (#7151)
a859aff fix(web-common): export getElementXPath utility (#7124)
2bd5a73 chore(web-common)!: deprecate addSpanNetworkEvents() et al instrumentation-...
d60f05e doc(sdk-trace): add description for StackContextManager (#7089)
5bd476e chore: move context manager to sdk-trace (#7086)
554c0c6 chore: move sdk-trace-web utils to web-common (#7058)
788922c ci: support maintenance branch releases (#7036)
See full diff in compare view

Updates hono from 4.13.12 to 4.13.13

Release notes

Sourced from hono's releases.

v4.13.13

Mount Middleware

app.mount() is now available as the Mount Middleware, hono/mount. It is just a handler, so you register it with app.all():
import { Router as IttyRouter } from 'itty-router'
import { Hono } from 'hono'
import { mount } from 'hono/mount'
const ittyRouter = IttyRouter()
ittyRouter.get('/hello', () => new Response('Hello from itty-router'))
const app = new Hono()
app.all('/itty-router/*', mount(ittyRouter.handle))
app.mount() still works in v4 but is deprecated and will be removed in v5. Migrating is a one-line change:
- app.mount('/itty-router', ittyRouter.handle)
+ app.all('/itty-router/*', mount(ittyRouter.handle))
What's Changed

test(client): simulate network error for undefined route in parseResponse test in honojs/hono#5439

docs(request): fix jsdoc comments for some getters in honojs/hono#5445

fix(jsx): allow JSXNode function component results in honojs/hono#5476

feat(mount): introduce Mount Middleware and deprecate app.mount in honojs/hono#5221

Full Changelog: honojs/hono@v4.13.12...v4.13.13

Commits

08a023c 4.13.13
ae595de feat(mount): introduce Mount Middleware and deprecate app.mount (#5221)
f23b146 fix(jsx): allow JSXNode function component results (#5476)
6d73a74 docs(request): fix jsdoc comments for some getters (#5445)
deff529 test(client): simulate network error for undefined route in parseResponse tes...
See full diff in compare view

Updates next from 16.3.8 to 16.4.2

Release notes

Sourced from next's releases.

v16.4.2

What's Changed

[lts-active] turbo-tasks snapshot consistency fixes (#99644, #99732, #99649) by @lukesandberg in vercel/next.js#100002

[lts-active] Turbopack: backport Pages Router dev module graph chaining (#98823, #99910, #100091) by @sokra in vercel/next.js#100008

[lts-active] fix(next-code-frame): snap visible window to char boundaries by @lukesandberg in vercel/next.js#100212

[lts-active] [turbopack] Fix two GC paths that leave half-torn-down dependency edges by @lukesandberg in vercel/next.js#100209

[lts-active] Turbopack: Ignore realpath errors during module resolution, matching node's behavior by @lukesandberg in vercel/next.js#100217

[lts-active] Backport docs fixes since v16.4.0 by @icyJoseph in vercel/next.js#100246

[lts-active] Fix Turbopack lazy dynamic-import chunk-list collisions by @lukesandberg in vercel/next.js#100211

[lts-active] Backport additional documentation fixes since v16.4.0 by @aurorascharff in vercel/next.js#100262

Full Changelog: vercel/next.js@v16.4.1...v16.4.2

v16.4.1

This release contains security fixes for the following advisories:

Critical:

Unauthenticated Remote Code Execution in use cache functions returning typed arrays

Unauthenticated Remote Code Execution in Image Optimization API when SVG files are used

High:

Denial of Service in App Router using Server Actions

v16.4.0

Check out the 16.4 announcement post to get an overview of the changes.

Core Changes

Show compiler plugin warning in more situations: #75682

fix(scripts): correct typo in rm.mjs error message: #87015

docs: improve clarity and punctuation in README: #86096

Fix debug build paths Pages Router support entries: #93529

bundle-analyzer: record historical snapshots on each analyze run: #93520

fix: detect proxy.ts correctly with compound pageExtensions: #93246

feat(turbopack): support false values for resolveAlias config: #93331

Misc Changes

docs: correction to dynamicParams migration: #96624

docs: proxy event argument: #96435

docs: remove experimental note from runtime prefetching: #96615

Preserve per-segment prefetching after dynamic navigation: #96583

Rename static generation stream option to waitForAllReady: #96564

Remove obsolete static generation plumbing: #96563

[turbopack] Drop dead writes to exports: #96381

[turbopack] Ignore writes to exports after a module.exports = {} writes: #96380

[turbopack] Add test for sideEffects with optimizePackageImports: #96549

[turbopack] Strip leading BOM before parsing CSS: #96678

Upgrade React from cbb046ab-20260731 to 7dfc7ccd-20260803: #96550

... (truncated)

Commits

2864b17 v16.4.2
a42cb59 Revert "[lts-active] Keep requests through middleware in a single OpenTelemet...
f0760ec [lts-active] Backport additional documentation fixes since v16.4.0 (#100262)

… with 14 updates Bumps the production-minor-patch group with 14 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@ast-grep/napi](https://github.com/ast-grep/ast-grep) | `0.45.3` | `0.51.0` | | [@google/genai](https://github.com/googleapis/js-genai) | `2.27.0` | `2.30.0` | | [@opentelemetry/api-logs](https://github.com/open-telemetry/opentelemetry-js) | `0.222.0` | `0.223.0` | | [@opentelemetry/instrumentation](https://github.com/open-telemetry/opentelemetry-js) | `0.222.0` | `0.223.0` | | [@opentelemetry/sdk-logs](https://github.com/open-telemetry/opentelemetry-js) | `0.222.0` | `0.223.0` | | [@opentelemetry/sdk-trace-base](https://github.com/open-telemetry/opentelemetry-js) | `2.11.0` | `2.12.0` | | [hono](https://github.com/honojs/hono) | `4.13.12` | `4.13.13` | | [next](https://github.com/vercel/next.js) | `16.3.8` | `16.4.2` | | [openai](https://github.com/openai/openai-node) | `7.27.0` | `7.38.0` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.3.0` | `19.3.1` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.3.0` | `19.3.1` | | [voyageai](https://github.com/voyage-ai/typescript-sdk) | `0.1.0` | `0.4.0` | | [zod](https://github.com/colinhacks/zod) | `4.6.5` | `4.6.7` | | [@modelcontextprotocol/server](https://github.com/modelcontextprotocol/typescript-sdk) | `2.3.0` | `2.3.1` | Updates `@ast-grep/napi` from 0.45.3 to 0.51.0 - [Release notes](https://github.com/ast-grep/ast-grep/releases) - [Changelog](https://github.com/ast-grep/ast-grep/blob/main/CHANGELOG.md) - [Commits](ast-grep/ast-grep@0.45.3...0.51.0) Updates `@google/genai` from 2.27.0 to 2.30.0 - [Release notes](https://github.com/googleapis/js-genai/releases) - [Changelog](https://github.com/googleapis/js-genai/blob/main/CHANGELOG.md) - [Commits](googleapis/js-genai@v2.27.0...v2.30.0) Updates `@opentelemetry/api-logs` from 0.222.0 to 0.223.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.222.0...experimental/v0.223.0) Updates `@opentelemetry/instrumentation` from 0.222.0 to 0.223.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.222.0...experimental/v0.223.0) Updates `@opentelemetry/sdk-logs` from 0.222.0 to 0.223.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.222.0...experimental/v0.223.0) Updates `@opentelemetry/sdk-trace-base` from 2.11.0 to 2.12.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.11.0...v2.12.0) Updates `hono` from 4.13.12 to 4.13.13 - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.13.12...v4.13.13) Updates `next` from 16.3.8 to 16.4.2 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.3.8...v16.4.2) Updates `openai` from 7.27.0 to 7.38.0 - [Release notes](https://github.com/openai/openai-node/releases) - [Changelog](https://github.com/openai/openai-node/blob/main/CHANGELOG.md) - [Commits](openai/openai-node@v7.27.0...v7.38.0) Updates `react` from 19.3.0 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react) Updates `react-dom` from 19.3.0 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom) Updates `voyageai` from 0.1.0 to 0.4.0 - [Release notes](https://github.com/voyage-ai/typescript-sdk/releases) - [Commits](voyage-ai/typescript-sdk@0.1.0...0.4.0) Updates `zod` from 4.6.5 to 4.6.7 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.6.5...v4.6.7) Updates `@modelcontextprotocol/server` from 2.3.0 to 2.3.1 - [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases) - [Commits](https://github.com/modelcontextprotocol/typescript-sdk/compare/@modelcontextprotocol/server@2.3.0...@modelcontextprotocol/server@2.3.1) --- updated-dependencies: - dependency-name: "@ast-grep/napi" dependency-version: 0.51.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: "@google/genai" dependency-version: 2.30.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: "@opentelemetry/api-logs" dependency-version: 0.223.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: "@opentelemetry/instrumentation" dependency-version: 0.223.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: "@opentelemetry/sdk-logs" dependency-version: 0.223.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: "@opentelemetry/sdk-trace-base" dependency-version: 2.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: hono dependency-version: 4.13.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: next dependency-version: 16.4.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: openai dependency-version: 7.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: react dependency-version: 19.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: react-dom dependency-version: 19.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: voyageai dependency-version: 0.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: zod dependency-version: 4.6.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: "@modelcontextprotocol/server" dependency-version: 2.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-10-23T21:46:00Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 21, 2026

dependabot Bot closed this Oct 23, 2026

dependabot Bot deleted the dependabot/bun/production-minor-patch-1d5ededeab branch October 23, 2026 21:46

Navigation Menu

Repository navigation

chore(deps): Bump the production-minor-patch group across 1 directory with 14 updates - #162

chore(deps): Bump the production-minor-patch group across 1 directory with 14 updates#162
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/production-minor-patch-1d5ededeab

dependabot Bot commented on behalf of github Oct 21, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Oct 23, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

0.51.0

0.50.0

0.51.0

0.50.0

v2.30.0

2.30.0 (2026-10-14)

Features

Bug Fixes

v2.29.1

2.29.1 (2026-10-13)

Bug Fixes

v2.29.0

2.29.0 (2026-10-13)

Features

Bug Fixes

2.30.0 (2026-10-14)

Features

Bug Fixes

2.29.1 (2026-10-13)

Bug Fixes

2.29.0 (2026-10-13)

Features

Bug Fixes

2.28.0 (2026-10-07)

experimental/v0.223.0

0.223.0

💥 Breaking Changes

🏠 Internal

experimental/v0.223.0

0.223.0

💥 Breaking Changes

🏠 Internal

experimental/v0.223.0

0.223.0

💥 Breaking Changes

🏠 Internal

v2.12.0

2.12.0

🚀 Features

🏠 Internal

CHANGELOG

Unreleased

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

📚 Documentation

🏠 Internal

3.0.0

💥 Breaking Changes

v4.13.13

Mount Middleware

What's Changed

v16.4.2

What's Changed

v16.4.1

v16.4.0

Core Changes

Misc Changes

Uh oh!

dependabot Bot commented on behalf of github Oct 23, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 21, 2026 •

edited

Loading