fix(deps-dev): bump the tooling group across 1 directory with 6 updates

[dependabot]

Bumps the tooling group with 6 updates in the / directory:

Package	From	To
@ai-sdk/openai	4.0.83	4.0.86
@types/node	26.6.1	26.6.4
ai	7.0.126	7.0.130
eslint	10.10.0	10.12.0
knip	6.36.0	6.40.0
prettier	3.9.7	3.9.9

Updates @ai-sdk/openai from 4.0.83 to 4.0.86

Changelog

Sourced from @​ai-sdk/openai's changelog.

4.0.86

Patch Changes

• d3bcad9: feat(provider): report decision refusals as refusal answers
• Updated dependencies [d3bcad9]
  • @​ai-sdk/provider@​4.0.24
  • @​ai-sdk/provider-utils@​5.0.56

4.0.85

Patch Changes

• fc1e19e: fix: limit jsonl rows to 64mb during batch result downloads

• 99bdcd2: Replace the OpenAI structured-output wrapper for decide with the native Decisions API. Only gpt-6-luna is currently supported by this endpoint; other Responses models no longer work with openai.decisionModel() or its deprecated evaluationModel() alias.

  Responses API options, such as reasoningEffort, are no longer applied and produce unsupported-option warnings. The Decisions API supports providerOptions.openai.safetyIdentifier. Native token usage and confidence values are preserved, and per-question refusals fail the decision call.

• 268225c: feat(provider): add a portable max reasoning level with native provider mappings, compatibility coercions, and budget-based fallback support.

  Compatibility notes:

  • TypeScript source compatibility: Adding max widens LanguageModelV4CallOptions['reasoning'] and the derived ReasoningLevel type. Third-party providers and consumers with exhaustive switches or Record<ReasoningLevel, ...> mappings must handle max before upgrading. Ordinary calls using existing reasoning levels remain accepted.
  • Amazon Bedrock: Existing Nova 2 calls using portable reasoning: 'xhigh' now send maxReasoningEffort: 'high' instead of the unsupported 'max', and return a compatibility warning. Anthropic and OpenAI Bedrock effort mappings retain their existing xhigh behavior. Partial Bedrock reasoning configurations continue to preserve explicit values and derive missing fields; explicit effort/budget overrides and disabled thinking no longer emit warnings for portable mappings that are not sent.
  • Fireworks: Existing portable minimal and xhigh calls keep their request mappings to low and high, respectively, and now return compatibility warnings in generation and streaming results. Portable max maps to high with the same warning behavior.

  Release classification: This remains a patch changeset under the repository's explicit release policy, which uses patch releases for both fixes and features. The TypeScript source-compatibility caveat for exhaustive consumers is disclosed above. Maintainers can override this classification with a major label if they decide to align the provider-spec addition with a future AI SDK major release.

• 0af2f7c: chore: upgrade to TypeScript 6

• Updated dependencies [fc1e19e]

• Updated dependencies [5094ebd]

• Updated dependencies [268225c]

• Updated dependencies [0af2f7c]

  • @​ai-sdk/provider-utils@​5.0.55
  • @​ai-sdk/provider@​4.0.23

4.0.84

Patch Changes

• 2959d35: feat: rename evaluate to decide
• 5b8e63b: feat(openai): warn when reasoningSummary is used with chat models
• Updated dependencies [2959d35]
• Updated dependencies [59116e6]
  • @​ai-sdk/provider@​4.0.22
  • @​ai-sdk/provider-utils@​5.0.54

Commits

• e7f55a4 Version Packages (#22198)
• d3bcad9 feat(provider): report decision refusals as refusal answers (#22203)
• 8f4eb0d Version Packages (#22124)
• 99bdcd2 feat(openai): use Decisions API for decide (#22192)
• fc1e19e fix(provider-utils): add option to limit jsonl rows in batch downloads (#22096)
• 268225c feat: add a portable max reasoning level across supported providers (#22045)
• 0af2f7c chore: upgrade to TypeScript 6 (#21786)
• 92e2a4b Version Packages (#21938)
• 2959d35 refactor(ai): rename experimental_evaluate to experimental_decide (#21935)
• 5b8e63b fix(openai): warn when reasoningSummary is used with chat models (#21178)
• See full diff in compare view

Updates @types/node from 26.6.1 to 26.6.4

Commits

• See full diff in compare view

Updates ai from 7.0.126 to 7.0.130

Changelog

Sourced from ai's changelog.

7.0.130

Patch Changes

• 6f6b9c0: fix(ai): reject pending result promises and cancel the pending stream when the abort signal fires
• d3bcad9: feat(provider): report decision refusals as refusal answers
• Updated dependencies [d3bcad9]
  • @​ai-sdk/provider@​4.0.24
  • @​ai-sdk/gateway@​4.0.106
  • @​ai-sdk/provider-utils@​5.0.56

7.0.129

Patch Changes

• e37d213: feat(ai): emit deprecation warnings with stable codes and deduplicate them

• 73d8343: fix(ai): preserve V2 provider-reported total tokens in raw usage

• 268225c: feat(provider): add a portable max reasoning level with native provider mappings, compatibility coercions, and budget-based fallback support.

  Compatibility notes:

  • TypeScript source compatibility: Adding max widens LanguageModelV4CallOptions['reasoning'] and the derived ReasoningLevel type. Third-party providers and consumers with exhaustive switches or Record<ReasoningLevel, ...> mappings must handle max before upgrading. Ordinary calls using existing reasoning levels remain accepted.
  • Amazon Bedrock: Existing Nova 2 calls using portable reasoning: 'xhigh' now send maxReasoningEffort: 'high' instead of the unsupported 'max', and return a compatibility warning. Anthropic and OpenAI Bedrock effort mappings retain their existing xhigh behavior. Partial Bedrock reasoning configurations continue to preserve explicit values and derive missing fields; explicit effort/budget overrides and disabled thinking no longer emit warnings for portable mappings that are not sent.
  • Fireworks: Existing portable minimal and xhigh calls keep their request mappings to low and high, respectively, and now return compatibility warnings in generation and streaming results. Portable max maps to high with the same warning behavior.

  Release classification: This remains a patch changeset under the repository's explicit release policy, which uses patch releases for both fixes and features. The TypeScript source-compatibility caveat for exhaustive consumers is disclosed above. Maintainers can override this classification with a major label if they decide to align the provider-spec addition with a future AI SDK major release.

• d83366e: fix(ai): publish the latest error after repeated failed stream resume attempts

• 34905a2: fix(ai): preserve provider options from approval-only tool messages

• 16ab882: fix(ai): recognize WebKit network errors

• f810ea3: fix(ai): prevent unavailable tools from exposing persisted output to models

• 19a127b: fix(ai): avoid duplicate slashes in chat reconnect URLs

• 0af2f7c: chore: upgrade to TypeScript 6

• 4c6979c: fix(harness): preserve adapter warnings in agent stream results and declare their compatibility warning shapes

• Updated dependencies [fc1e19e]

• Updated dependencies [5094ebd]

• Updated dependencies [753f2e1]

• Updated dependencies [268225c]

• Updated dependencies [0af2f7c]

• Updated dependencies [ad64697]

• Updated dependencies [0c82824]

  • @​ai-sdk/provider-utils@​5.0.55
  • @​ai-sdk/gateway@​4.0.105
  • @​ai-sdk/provider@​4.0.23

7.0.128

Patch Changes

... (truncated)

Commits

• e7f55a4 Version Packages (#22198)
• d3bcad9 feat(provider): report decision refusals as refusal answers (#22203)
• 6f6b9c0 fix(ai): cancel the pending stream when abort signal fires (#22184)
• 8f4eb0d Version Packages (#22124)
• 99bdcd2 feat(openai): use Decisions API for decide (#22192)
• 68cf615 chore(deps-dev): bump esbuild from 0.28.1 to 0.28.2 (#20229)
• 4c6979c fix: preserve type-safe harness adapter warnings in agent stream results (#22...
• 34905a2 fix: preserve provider options after approved local tool execution (#22178)
• e37d213 feat(ai): emit deprecation warnings with stable codes and deduplicate them (#...
• 16ab882 fix(ai): recognize WebKit network errors (#22100)
• Additional commits viewable in compare view

Updates eslint from 10.10.0 to 10.12.0

Release notes

Sourced from eslint's releases.

v10.12.0

Features

• 4618052 feat: handle astral letters in new-cap (#21357) (sary)
• 4ec5168 feat: allow SourceCode#getText() to accept tokens and comments (#21340) (electrohyun)

Bug Fixes

• bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373) (Daniel Pinto)
• bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332) (xbinaryx)
• efc4d6b fix: astral letters in consistent-return, no-eval, no-invalid-this (#21360) (lumir)
• 93de066 fix: prefer-exponentiation-operator autofix for async function base (#21322) (Vladimir Babin)
• 02e34ff fix: add missing space after else in curly autofix (#21355) (Pixel)
• b14b8bc fix: correct id-length message for long private names (#21348) (Pixel)
• 69aac01 fix: support TSFunctionType in getFunctionHeadLoc (#21335) (xbinaryx)
• 686630e fix: no-loss-of-precision false positive with 0.e5 (#21337) (sethamus)

Documentation

• 67eb586 docs: Update README (GitHub Actions Bot)
• 5370d7e docs: clarify one-var separateRequires matches any require() call (#21192) (sethamus)
• 8816c1d docs: Update README (GitHub Actions Bot)
• 3d2e7ce docs: fix typo in no-unused-expressions documentation (#21346) (bytedoe)

Chores

• 152067f chore: update ecosystem plugins (#21362) (ESLint Bot)
• b56d58e chore: update github/codeql-action action to v4.38.2 (#21376) (renovate[bot])
• bfaea12 perf: cache normalized config globals per languageOptions (#21364) (James Ross)
• 322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369) (Francesco Trotta)
• d166567 chore: update dependency prettier to v3.9.9 (#21371) (renovate[bot])
• 29585ce chore: update dependency eslint-plugin-expect-type to ^0.7.0 (#21359) (renovate[bot])
• 39d79ba chore: update github/codeql-action action to v4.38.1 (#21354) (renovate[bot])
• 182a6e9 chore: update dependency prettier to v3.9.8 (#21352) (renovate[bot])
• f995127 chore: remove CLAUDE.md in favor of AGENTS.md (#21339) (Jarren)
• b95fb6c chore: update dependency prettier to v3.9.7 (#21347) (renovate[bot])
• 3782dd4 chore: update ecosystem plugins (#21342) (ESLint Bot)

v10.11.0

Features

• d136fa4 feat: object-shorthand handle quoted properties for ignoreConstructors (#21271) (Pavel)
• 397b3b8 feat: report unsafe labeled continue in no-unsafe-finally rule (#21316) (electrohyun)
• d3dd47f feat: only exempt new-cap built-ins that reference the global (#21290) (sethamus)

Bug Fixes

• 22b09f5 fix: ignore __proto__ properties in prefer-object-spread (#21311) (xbinaryx)
• b684bb1 fix: make TimePass.parse optional in types and docs (#21313) (ntnyq)
• 26d11bc fix: don't report __proto__ properties in object-shorthand (#21310) (xbinaryx)

Documentation

• 9ecfdc5 docs: note that --cache can serve stale results for cross-file rules (#21312) (bytedoe)
• 6c789ff docs: Update README (GitHub Actions Bot)
• 5997825 docs: clarify preserve-caught-error known limitation (#21294) (Akinyemi Toluwalase)

... (truncated)

Commits

• a438ec3 10.12.0
• 32a73f1 Build: changelog update for 10.12.0
• bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373)
• bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332)
• 152067f chore: update ecosystem plugins (#21362)
• b56d58e chore: update github/codeql-action action to v4.38.2 (#21376)
• 67eb586 docs: Update README
• bfaea12 perf: cache normalized config globals per languageOptions (#21364)
• 322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369)
• d166567 chore: update dependency prettier to v3.9.9 (#21371)
• Additional commits viewable in compare view

Updates knip from 6.36.0 to 6.40.0

Release notes

Sourced from knip's releases.

Release 6.40.0

• Resolve local and scope-only extends in commitlint plugin (#2079) (e667552d4e7122094565d3ad9ae407acfc0ac684) - thanks @​giaBaoJS!
• Clarify worktree guides and plugin review preparation (dd02baf020d23af1d47c44c1a726a61014b270bd)
• Document stale cache results and workarounds (#2078) (3573749a5d5bbee6305f207cc7d1b72c200c8c9b)
• Exclude test files from package entries in production mode (resolve #2082) (b86f45f9d38d4b83baad98e43983e08910e00c78) - thanks @​jonathanong!
• Resolve Serverless file variables in plugins and functions (resolve #2074) (99cac789694ea8d76cd38184d2d7c95f34315224) - thanks @​SwastikTripathi!
• Preserve locally referenced namespace members (resolve #2070) (f0f36df766cd74ad7ae03fbf8940bdeb792439be) - thanks @​MFA-G!
• fix: add the commitlint-plugin prefix to Commitlint plugin names (#2096) (3decd35ff0a4220c7cd2c9142dc69c89794b3927) - thanks @​devYRPauli!
• fix: match .mjs config files in the simple-git-hooks plugin (#2097) (79a87d92396c2444ae4ef3c780c0d2e18cd73e4c) - thanks @​devYRPauli!
• fix: match capacitor.config.js in the Capacitor plugin (#2098) (4a5ec96d818117a7f2eafa027e3b707bc97573a8) - thanks @​devYRPauli!
• fix(typescript): ArrayExpression (#2099) (#2100) (87fea9f201c2fd864eafa31bdad68910a8a177ba) - thanks @​DreamLongYT!
• Preserve development entry pattern groups (7c229f4e1918075d801ed3b046fa022b1d3bcc41)
• Resolve null package exports to the files they hide (resolve #2084, close #2085) (5bd46260feb60b957c2631bc72375ef192e441e0)
• Pin InvokeAI ecosystem test (4e0a3432eb35e3f628f6d3b7fcd14b942de343d0)
• fix(utils): add jsx extension to source mapping (#2087) (eaa353b5fc30c2f12cdf2c29e6dd68e0d0950062) - thanks @​DreamLongYT!
• fix(serverless-framework): handle explicit extensions in handler paths (#2091) (e9393965be7563640921e3f20c946fcb9132e1cb) - thanks @​DreamLongYT!
• Annotate published manifest return type (d95a8310a0d0dca8f23d8dd3f83e7b0a1909d038)
• Add Jasmine plugin (#2105) (9ed14911d5c5752aef36878ab3d515c35d1ac6bc) - thanks @​SulimanAbdulrazzaq!
• fix: resolve workspace exports with fallback arrays (#2088) (49c2aaeaba4544f25cc02c19d5da5152a8ef68c3) - thanks @​DreamLongYT!
• fix(postcss): ignore disabled plugins in object configs (#2092) (b84fdf8a8ee676ee45f4313009ebfe969d034a88) - thanks @​DreamLongYT!
• Resolve webServer commands in Playwright plugin (#2110) (1af96bce36b0d0d07791de100c7f2ea5672a478c) - thanks @​everton-dgn!
• Cache config file inputs per plugin (#2109) (01cb43267ca5dc03a2cbcba0a19fd891d4ed1f37) - thanks @​everton-dgn!
• fix: include custom compiler extensions in source path mapping (#2090) (dc3a47e2d810808314454b8f5c23070f136d15d3) - thanks @​DreamLongYT!
• Don't let a self-closing swallow the next (#2113) (989fdadde0a068d1d1c52e26a8327b99c5de0668) - thanks @​maniflopi!
• fix(oxlint): resolve lint from loaded Vite config (#2108) (6d44e532ed6320cdf4f4c3253b26e155c4d26ba7) - thanks @​everton-dgn!
• fix: resolve Jest module names without the jest-* prefix (#2095) (a5f4cfbff7f263a0ea8d5461a3f9216cbef38602) - thanks @​devYRPauli!
• Resolve Vitest paths from the top-level root (resolve #2114) (#2119) (8a495d424cf60cab502c5c5ea476a3c761a9da6d) - thanks @​SwastikTripathi!
• fix(rsbuild): detect config from tools.rspack inside rsbuild config (#2077) (c4ed619d5352b1d7b9ffaacc8c75d247eef39517) - thanks @​TkDodo!
• Add osls plugin (#2104) (a8bf4bfaeba2ee0aaf756b343789de9fff75a1fa) - thanks @​bytedoe!
• Explain why types in signatures of used exports are not reported (61f5cc02e6b4e895dbd8507ab845ae30f073211b)
• Update sponsors page (7ea33fa2c116c29e2c131bda900aaf7b9073a3ff)
• Edit docs (b459d7c3ad6d5535fd7646d93022a2974641ccd9)

Release 6.39.0

• Add Railway plugin (#2026) (6da55767eb419701dd32f93789a00e8bdc915276) - thanks @​jonahsnider!
• Update query snapshot (8877d3cf35943e17a617e1197fa46c5a43342479)
• Fix excluded tags on entry re-exports (#2062) (b22e27543cb8dd4ba7ec97c70ccfd06bc8f16614) - thanks @​devYRPauli!
• Update rolldown snapshot (3a45c806e1c1b7ceb078903652c8631566400096)
• Skip synthetic self-imports in Vue and Nuxt auto-import compilers (#2067) (d912d807e41f140bbc79bafce6882b3c05dec6ff) - thanks @​bytedoe!
• fix(angular): keep other projects' inputs when one has no architect (#2064) (af3f42e9772e9937fd71b7557d3b54aee1db339a) - thanks @​Cayan!
• fix(vite): resolve nested HTML entry points in multi-page apps (#1988) (4648aefe56e7bac521bb6f17189473b46f8ff00f) - thanks @​DreamLongYT!
• Improve Rstest plugin support (#2068) (add87992e9dfe2f3c22e4c6ba7fa257d7f0151cf) - thanks @​fi3ework!
• Handle profiles, formatters and require paths in Cucumber plugin (#2065) (2ad39fcf02e067b4bdfc06a658bf4bf5abeea764) - thanks @​giaBaoJS!
• fix(playwright): resolve globalSetup/globalTeardown from config dir (#2076) (7060bb968339680d694275413aba2833e4521ed9) - thanks @​alokn!
• fix: read entry export tags under the re-exported names (#2069) (1698683df95a96b3515795eb664aacf030042d7b) - thanks @​devYRPauli!

Release 6.38.0

• Include co-authors in docs contributor list (0c334100df59d89a512ad598ec50e7f62f6da0c3)
• Filter bots and agents from docs contributors (617f70d8179c6b8668ca41fe5df77ced5e2b37c0)
• Update Eve plugin conventions (#2049) (260dbb91a85f3a3bc2727e8f255d73df3737552c) - thanks @​matchai!

... (truncated)

Commits

• dd6d422 Release knip@6.40.0
• a8bf4bf Add osls plugin (#2104)
• c4ed619 fix(rsbuild): detect config from tools.rspack inside rsbuild config (#2077)
• 8a495d4 Resolve Vitest paths from the top-level root (resolve #2114) (#2119)
• a5f4cfb fix: resolve Jest module names without the jest-* prefix (#2095)
• 6d44e53 fix(oxlint): resolve lint from loaded Vite config (#2108)
• 989fdad Don't let a self-closing <script /> swallow the next <script> (#2113)
• dc3a47e fix: include custom compiler extensions in source path mapping (#2090)
• 01cb432 Cache config file inputs per plugin (#2109)
• 1af96bc Resolve webServer commands in Playwright plugin (#2110)
• Additional commits viewable in compare view

Updates prettier from 3.9.7 to 3.9.9

Release notes

Sourced from prettier's releases.

3.9.9

• Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

🔗 Changelog

3.9.8

• Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @​seiyab)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.9

diff

Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

<!-- Input -->
**Uses $FOO** from `a.sh` and `b.sh`, plus `$BAR` from `c.sh`, before anything else runs here.
<!-- Prettier 3.9.8 -->
Uses $FOO from a.sh and b.sh, plus $BARfromc.sh, before anything else runs here.
<!-- Prettier 3.9.9 -->
Uses $FOO from a.sh and b.sh, plus $BAR from c.sh, before anything else runs here.

3.9.8

diff

Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @​seiyab)

<!-- Input -->
If `module` is not a [`WebAssembly.Module`](https://github.com/prettier/prettier/blob/main/en-US/docs/WebAssembly/Reference/JavaScript_interface/Module) object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.7 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.8 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.

Commits

• cdd17f2 Release 3.9.9
• dc7b896 Disable singleDollarTextMath in mdast-util-math (#20140)
• f9be58f Git blame ignore 3.9.8
• 88470cb Bump Prettier dependency to 3.9.8
• 9559cab Clean changelog_unreleased
• 4fc8ee8 Update dependents count
• 4f2ab67 Release 3.9.8
• 3d82af8 Update Regex related dependencies (#20082)
• 5ec8db1 [3.9.x] Markdown: Don't let Liquid objects interrupt paragraphs (#20087)
• 5b142ed Release Release @​prettier/plugin-hermes@​0.2.3, @​prettier/plugin-oxc@​0.2.3, an...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions