Skip to content

chore(deps-dev): bump the dev-dependencies group across 1 directory with 4 updates - #125

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-c7858e779d
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-c7858e779d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 23, 2026

Copy link
Copy Markdown
Contributor

Bumps the dev-dependencies group with 4 updates in the / directory: @ai-sdk/provider, @opencode-ai/sdk, @types/node and vitest.

Updates @ai-sdk/provider from 3.0.15 to 3.0.16

Changelog

Sourced from @​ai-sdk/provider's changelog.

3.0.16

Patch Changes

  • 1a4dbb1: Retry unclassified empty image results, preserve retry-attempt accounting, add provider-independent result retryability classification, preserve it through the AI Gateway, and mark Google and Google Vertex content-filtered results as terminal.
Commits

Updates @opencode-ai/sdk from 1.18.30 to 1.18.31

Commits

Updates @types/node from 26.5.0 to 26.6.2

Commits

Updates vitest from 5.0.0 to 5.0.1

Release notes

Sourced from vitest's releases.

v5.0.1

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • 03630a5 chore: release v5.0.1 (#11275)
  • a47d790 fix(fakeTimers): force queueMicrotask and nextTick in toNotFake (#11261)
  • 2ce29d5 fix: warn when deprecated deps.optimizer.web is used (#11214)
  • ccd6d05 docs: fix typecheck exclude default in documentation (#11223)
  • 91ab158 fix(doctor): measure vm pools for custom environments (#11212)
  • 23dda73 fix: share the server on self-referencing extends (#11034)
  • 498fbe9 fix: resolve ResolvedConfig exactOptionalPropertyTypes errors (#11175)
  • 115c3f6 fix: correct typos in error message and comments (#11187)
  • 7361465 fix: keep metadata file when clearing the cache (#11199)
  • 972e24b fix(browser): avoid double quotes in config.define (#11198)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ith 4 updates

Bumps the dev-dependencies group with 4 updates in the / directory: [@ai-sdk/provider](https://github.com/vercel/ai/tree/HEAD/packages/provider), [@opencode-ai/sdk](https://github.com/sst/opencode-sdk-js), [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) and [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest).


Updates `@ai-sdk/provider` from 3.0.15 to 3.0.16
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/provider@3.0.16/packages/provider/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/provider@3.0.16/packages/provider)

Updates `@opencode-ai/sdk` from 1.18.30 to 1.18.31
- [Release notes](https://github.com/sst/opencode-sdk-js/releases)
- [Changelog](https://github.com/anomalyco/opencode-sdk-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sst/opencode-sdk-js/commits)

Updates `@types/node` from 26.5.0 to 26.6.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `vitest` from 5.0.0 to 5.0.1
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.1/packages/vitest)

---
updated-dependencies:
- dependency-name: "@ai-sdk/provider"
  dependency-version: 3.0.16
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@opencode-ai/sdk"
  dependency-version: 1.18.31
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@types/node"
  dependency-version: 26.6.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: vitest
  dependency-version: 5.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 23, 2026
@justin-carper

Copy link
Copy Markdown
Collaborator

Superseded by #132, which includes this bump (at newer versions where available), clears npm audit, and passed the full CI matrix. Closing so Dependabot does not keep rebasing it.

@dependabot @github

dependabot Bot commented on behalf of github Sep 29, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/dev-dependencies-c7858e779d branch September 29, 2026 17:36
justin-carper added a commit that referenced this pull request Sep 30, 2026
… param docs (#132)

* chore: consolidate dependency updates, clear npm audit, fix per-model param docs

Dependencies (supersedes #122, #124, #125):
- @connectrpc/connect-node 2.1.2 -> 2.2.0
- @cursor/sdk 1.0.31 -> 1.0.32
- @opencode-ai/plugin + sdk -> 1.18.33 (one sdk copy)
- @ai-sdk/provider 3.0.15 -> 3.0.18, @types/node -> 26.6.3, vitest -> 5.0.2
- overrides: undici ^6.28.1 (GHSA-3wwx-pv8p-q78v), new toml ^4.2.0
  (GHSA-82x6-q7mm-w9cf); npm audit reports 0 vulnerabilities
- @ai-sdk/provider v4 and TypeScript 7 stay blocked per dependabot.yml

Docs (#119): Cursor model param ids are per model, so `thinking` on a
model without that param (e.g. grok-4.6, which takes `effort`) is ignored.
Correct the README examples and the delegate/cloud-agent `thinking`
tool-arg descriptions. Comment-only changes in src/provider; no logic change.

* fix: point v2 install at @next, list model params in refresh tool, fix fallback param

- README (#126): the opencode v2 install snippet used @latest, which is
  0.9.0 (v1-only build, no { id, setup } default export) and reproduces
  "Plugin must export a default definition" on opencode 2.x. Point it at
  @next until 0.10.0 is promoted, with a note.
- cursor_refresh_models (#119): append each model's param ids and accepted
  values, e.g. `grok-4.6 [effort=low|medium|high|xhigh, fast=false|true]`,
  so users can tell effort from reasoning_effort. Add a test.
- fallback catalog: composer-2.5 exposes `fast`, not `thinking`; the stale
  entry produced a bogus `thinking` variant on the keyless path.
- CHANGELOG: limit the connect-node note to verified facts (nothing in the
  repo imports it; @cursor/sdk nests its own 1.7.0) and record the above.

* docs: give opencode v2 users the right plugin cache path

The troubleshooting entry and the manual-install snippet only described the
opencode v1 cache layout (~/.cache/opencode/packages/...). opencode v2 caches
plugin installs under ~/.cache/opencode/npm/<spec>/, so anyone following the
README on v2 cleared the wrong directory (#126). Cover both layouts, point v2
users at `opencode plugin update`, and note that an @latest install of 0.9.x
has no v2 entrypoint.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant