Skip to content

chore(deps): bump the minor-and-patch group across 1 directory with 11 updates#31

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/minor-and-patch-cb372e3f21
Open

chore(deps): bump the minor-and-patch group across 1 directory with 11 updates#31
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/minor-and-patch-cb372e3f21

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Apr 28, 2026 •
edited
Loading

Bumps the minor-and-patch group with 11 updates in the / directory:

Package From To
@anthropic-ai/sdk 0.72.1 0.91.1
@browserbasehq/stagehand 3.2.0 3.3.0
@daytonaio/sdk 0.152.1 0.169.0
jose 6.2.2 6.2.3
openai 6.33.0 6.34.0
redis 5.11.0 5.12.1
weave 0.11.1 0.13.1
autoprefixer 10.4.27 10.5.0
jsdom 29.0.2 29.1.0
postcss 8.5.9 8.5.12
prettier 3.8.1 3.8.3

Updates @anthropic-ai/sdk from 0.72.1 to 0.91.1

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk: v0.91.1

0.91.1 (2026-04-24)

Full Changelog: sdk-v0.91.0...sdk-v0.91.1

Bug Fixes

  • memory: use restrictive file mode for memory files (#901) (6db3b7e)

Chores

  • formatter: run prettier and eslint separately (974d22f)

sdk: v0.91.0

0.91.0 (2026-04-23)

Full Changelog: sdk-v0.90.0...sdk-v0.91.0

Features

  • api: CMA Memory public beta (ddf732f)
  • bedrock: use auth header for mantle client (#866) (aec801a)

Bug Fixes

  • api: fix errors in api spec (ae10768)
  • api: restore missing features (1a5b47b)

Chores

  • internal: more robust bootstrap script (7716e19)
  • tests: bump steady to v0.22.1 (219a971)

sdk: v0.90.0

0.90.0 (2026-04-16)

Full Changelog: sdk-v0.89.0...sdk-v0.90.0

Features

  • api: add claude-opus-4-7, token budgets and user_profiles (b26134b)

Chores

  • actually delete release-doctor.yml (0fe984d)
  • ci: remove release-doctor workflow (08e58bd)

... (truncated)

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.91.1 (2026-04-24)

Full Changelog: sdk-v0.91.0...sdk-v0.91.1

Bug Fixes

  • memory: use restrictive file mode for memory files (#901) (6db3b7e)

Chores

  • formatter: run prettier and eslint separately (974d22f)

0.91.0 (2026-04-23)

Full Changelog: sdk-v0.90.0...sdk-v0.91.0

Features

  • api: CMA Memory public beta (ddf732f)
  • bedrock: use auth header for mantle client (#866) (aec801a)

Bug Fixes

  • api: fix errors in api spec (ae10768)
  • api: restore missing features (1a5b47b)

Chores

  • internal: more robust bootstrap script (7716e19)
  • tests: bump steady to v0.22.1 (219a971)

0.90.0 (2026-04-16)

Full Changelog: sdk-v0.89.0...sdk-v0.90.0

Features

  • api: add claude-opus-4-7, token budgets and user_profiles (b26134b)

Chores

  • actually delete release-doctor.yml (0fe984d)
  • ci: remove release-doctor workflow (08e58bd)

0.89.0 (2026-04-14)

... (truncated)

Commits

Updates @browserbasehq/stagehand from 3.2.0 to 3.3.0

Changelog

Sourced from @​browserbasehq/stagehand's changelog.

3.3.0

Minor Changes

Patch Changes

3.2.1

Patch Changes

Commits

Updates @daytonaio/sdk from 0.152.1 to 0.169.0

Release notes

Sourced from @​daytonaio/sdk's releases.

v0.169.0

0.169.0 (2026-04-23)

🚀 Features

  • api: runtime sandbox network updates (#4538)
  • api: cap declarative build sandboxes per runner (#4548)
  • docs: add java sdk / refactor references and code snippets (#4389)
  • sdk-python: add optional WebSocket handshake concurrency limit (#4527)

🩹 Fixes

  • api: add sandbox service jobs locks (#4543)
  • docs: update guides list container hover (#4518)
  • docs: modify locale handling routes (#4537)

Chores

  • sync go.sum for v0.168.0 (#4524)
  • sdk-go: bump to v0.169.0 (#4550)
  • security: expand CODEOWNERS coverage for CI/CD and supply chain (#4535)
  • security: close P0 url parser bypass and P1 content gutting (#4534)

❤️ Thank You

v0.168.0

0.168.0 (2026-04-21)

🚀 Features

  • api,cli,dashboard,sdk,sdk: expose sandbox last activity timestamp (#4492)
  • api,dashboard: surface per-sandbox resource limits in region usage overview (#4514)
  • docs: add robots.txt (#4517)
  • runner: build resource limits (22187e79f)

🩹 Fixes

  • cli: surface actionable hint on 403 Forbidden for all API calls (#4506)
  • proxy: preserve raw encoded preview path across proxy hops (#4449, #4448)
  • sdk-python: fix unreachable error check in wait_for_resize/snapshot_complete() (#4473)

Refactor

  • dashboard: remove suspend-react (#4314)

... (truncated)

Commits
  • 7649a70 chore(sdk-go): bump to v0.169.0 (#4550)
  • beced19 feat(api): cap declarative build sandboxes per runner (#4548)
  • 18f9f6f fix(api): add sandbox service jobs locks (#4543)
  • 729e133 fix(docs): modify locale handling routes (#4537)
  • 9f40c3c feat(api): runtime sandbox network updates (#4538)
  • 1ebd009 feat(sdk-python): add optional WebSocket handshake concurrency limit (#4527)
  • c760d87 chore(security): close P0 url parser bypass and P1 content gutting (#4534)
  • 6d5fd5e chore(security): expand CODEOWNERS coverage for CI/CD and supply chain (#4535)
  • 3a4cab0 feat(docs): add java sdk / refactor references and code snippets (#4389)
  • 784ecae fix(docs): update guides list container hover (#4518)
  • Additional commits viewable in compare view

Updates jose from 6.2.2 to 6.2.3

Release notes

Sourced from jose's releases.

v6.2.3

Refactor

  • cleanly reject invalid PBES2 p2c (0cdb851)
Changelog

Sourced from jose's changelog.

6.2.3 (2026-04-27)

Refactor

  • cleanly reject invalid PBES2 p2c (0cdb851)
Commits
  • 41ad7e9 chore(release): 6.2.3
  • 988e90f chore: account for commit-and-tag-version instead of standard-version
  • 4b24656 chore: update CHANGELOG.md header
  • 0cdb851 refactor: cleanly reject invalid PBES2 p2c
  • a0b261e test: update Bun expectations
  • b39dc1a chore: use fs.globSync
  • 0675be1 build: replace rollup umd build with a custom esbuild iife wrap
  • 9b03323 chore: bump packages
  • 914b73d chore(deps-dev): bump lodash
  • 9dce817 chore: bump packages
  • Additional commits viewable in compare view

Updates openai from 6.33.0 to 6.34.0

Release notes

Sourced from openai's releases.

v6.34.0

6.34.0 (2026-04-08)

Full Changelog: v6.33.0...v6.34.0

Features

  • api: add phase field to Message in conversations (eb7cbc1)
  • client: add support for short-lived tokens (#839) (a72ebcf)

Bug Fixes

  • api: remove web_search_call.results from ResponseIncludable in responses (1f6968e)

Chores

  • internal: codegen related update (1081460)
  • internal: update multipart form array serialization (3faee8d)
  • tests: bump steady to v0.20.1 (b73cc6b)

Documentation

  • api: add multi-file ingestion recommendations to vector-stores files/file-batches (1bc32a3)
Changelog

Sourced from openai's changelog.

6.34.0 (2026-04-08)

Full Changelog: v6.33.0...v6.34.0

Features

  • api: add phase field to Message in conversations (eb7cbc1)
  • client: add support for short-lived tokens (#839) (a72ebcf)

Bug Fixes

  • api: remove web_search_call.results from ResponseIncludable in responses (1f6968e)

Chores

  • internal: codegen related update (1081460)
  • internal: update multipart form array serialization (3faee8d)
  • tests: bump steady to v0.20.1 (b73cc6b)

Documentation

  • api: add multi-file ingestion recommendations to vector-stores files/file-batches (1bc32a3)
Commits
  • 35feb53 Merge pull request #1797 from openai/release-please--branches--master--change...
  • 398e589 release: 6.34.0
  • a72ebcf feat(client): add support for short-lived tokens (#839)
  • b73cc6b chore(tests): bump steady to v0.20.1
  • eb7cbc1 feat(api): add phase field to Message in conversations
  • 1f6968e fix(api): remove web_search_call.results from ResponseIncludable in responses
  • 1081460 chore(internal): codegen related update
  • 1bc32a3 docs(api): add multi-file ingestion recommendations to vector-stores files/fi...
  • 3faee8d chore(internal): update multipart form array serialization
  • be64904 Merge pull request #1798 from openai/codex/pin-github-workflow-refs-20260326-...
  • Additional commits viewable in compare view

Updates redis from 5.11.0 to 5.12.1

Release notes

Sourced from redis's releases.

redis@5.12.0

✨ What's Changed

🚀 Features

🐛 Fixes

🔭 Observability (OTEL + Diagnostics)

Node Redis now ships with first-class observability via OpenTelemetry metrics and Node.js diagnostics_channel. Initialize OpenTelemetry before creating clients (OpenTelemetry.init({ metrics: { enabled: true } })) and you can plug Redis client telemetry into your existing OTel SDK/exporter pipeline.

This enables visibility into command latency, connection lifecycle, resiliency/errors, Pub/Sub traffic, streaming behavior, and client-side caching activity. On top of metrics, diagnostics channels provide a more abstract, higher-level way to track runtime behavior through low-overhead event streams (commands, batches, connection events, maintenance notifications, pub/sub, cache, and pool wait timing), so APM tools or custom subscribers can observe the system without changing application code.

🧪 Tests & CI

📚 Docs

🙌 New Contributors

Full Changelog: https://github.com/redis/node-redis/compare/redis@5.11.0...redis@5.12.0

Commits

Updates weave from 0.11.1 to 0.13.1

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for weave since your current version.


Updates autoprefixer from 10.4.27 to 10.5.0

Release notes

Sourced from autoprefixer's releases.

10.5.0 “Each Endeavouring, All Achieving”

  • Added mask-position-x and mask-position-y support (by @​toporek).
Changelog

Sourced from autoprefixer's changelog.

10.5.0 “Each Endeavouring, All Achieving”

  • Added mask-position-x and mask-position-y support (by @​toporek).
Commits

Updates jsdom from 29.0.2 to 29.1.0

Release notes

Sourced from jsdom's releases.

v29.1.0

  • Added basic support for the ratio CSS type. (@​asamuzaK)
  • Fixed getComputedStyle() sometimes returning outdated results after CSS was modified. (@​asamuzaK)
Commits

Updates postcss from 8.5.9 to 8.5.12

Release notes

Sourced from postcss's releases.

8.5.12

  • Fixed reading any file via user-generated CSS.
  • Added opts.unsafeMap to disable checks.

8.5.11

  • Fixed nested brackets parsing performance (by @​offset).

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).
Changelog

Sourced from postcss's changelog.

8.5.12

  • Fixed reading any file via user-generated CSS.
  • Added opts.unsafeMap to disable checks.

8.5.11

  • Fixed nested brackets parsing performance (by @​offset).

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).
Commits
  • 9bc81c4 Release 8.5.12 version
  • 85c4d7d Another try to fix coverage
  • 94484ca Try to fix coverage
  • c64b748 Load only .map source maps
  • aaec7b7 Avoid throwing JSON parsing errors for non-JSON source maps
  • 233fb26 Mention original author of the solution
  • 2502f75 Release 8.5.11 version
  • 5ca1901 Speed up parsing many nested brackets
  • 42b5337 Update dependencies
  • 7e36e15 Cache node.raws locally in Stringifier hot methods
  • Additional commits viewable in compare view

Updates prettier from 3.8.1 to 3.8.3

Release notes

Sourced from prettier's releases.

3.8.3

🔗 Changelog

3.8.2

  • Support Angular v21.2

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.8.3

diff

SCSS: Prevent trailing comma in if() function (#18471 by @​kovsu)

// Input
$value: if(sass(false): 1; else: -1);
// Prettier 3.8.2
$value: if(
sass(false): 1; else: -1,
);
// Prettier 3.8.3
$value: if(sass(false): 1; else: -1);

3.8.2

diff

Angular: Support Angular v21.2 (#18722, #19034 by @​fisker)

Exhaustive typechecking with @default never;

<!-- Input -->
@switch (foo) {
  @case (1) {}
  @default never;
}
<!-- Prettier 3.8.1 -->
SyntaxError: Incomplete block "default never". If you meant to write the @ character, you should use the "&#64;" HTML entity instead. (3:3)
<!-- Prettier 3.8.2 -->
@​switch (foo) {
@​case (1) {}
@​default never;
}

arrow function and instanceof expressions.

</tr></table>

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by cubic

Update 11 dependencies to the latest minor/patch versions to pick up security fixes and SDK improvements. Notable: postcss security fixes, redis OpenTelemetry/diagnostics, and new features in @anthropic-ai/sdk and openai.

  • Dependencies

    • LLM SDKs: @anthropic-ai/sdk → 0.91.1 (Memory beta, spec fixes); openai → 6.34.0 (short‑lived tokens).
    • Infra: redis → 5.12.1 (OpenTelemetry metrics, diagnostics channels).
    • CSS/tooling: postcss → 8.5.12 (security fixes); autoprefixer → 10.5.0; jsdom → 29.1.0; prettier → 3.8.3.
    • Other SDKs: @browserbasehq/stagehand → 3.3.0; @daytonaio/sdk → 0.169.0; jose → 6.2.3; weave → 0.13.1.

  • Migration

    • Reinstall and run tests; no code changes expected. Redis OTel/diagnostics are opt‑in and inactive unless initialized.

Written for commit 71db2d8. Summary will update on new commits. Review in cubic

@dependabot
chore(deps): bump the minor-and-patch group across 1 directory with 1…
71db2d8 
…1 updates

Bumps the minor-and-patch group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.72.1` | `0.91.1` |
| [@browserbasehq/stagehand](https://github.com/browserbase/stagehand/tree/HEAD/packages/core) | `3.2.0` | `3.3.0` |
| [@daytonaio/sdk](https://github.com/daytonaio/daytona) | `0.152.1` | `0.169.0` |
| [jose](https://github.com/panva/jose) | `6.2.2` | `6.2.3` |
| [openai](https://github.com/openai/openai-node) | `6.33.0` | `6.34.0` |
| [redis](https://github.com/redis/node-redis) | `5.11.0` | `5.12.1` |
| [weave](https://github.com/wandb/weave) | `0.11.1` | `0.13.1` |
| [autoprefixer](https://github.com/postcss/autoprefixer) | `10.4.27` | `10.5.0` |
| [jsdom](https://github.com/jsdom/jsdom) | `29.0.2` | `29.1.0` |
| [postcss](https://github.com/postcss/postcss) | `8.5.9` | `8.5.12` |
| [prettier](https://github.com/prettier/prettier) | `3.8.1` | `3.8.3` |



Updates `@anthropic-ai/sdk` from 0.72.1 to 0.91.1
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.72.1...sdk-v0.91.1)

Updates `@browserbasehq/stagehand` from 3.2.0 to 3.3.0
- [Release notes](https://github.com/browserbase/stagehand/releases)
- [Changelog](https://github.com/browserbase/stagehand/blob/main/packages/core/CHANGELOG.md)
- [Commits](https://github.com/browserbase/stagehand/commits/stagehand-server/v3.3.0/packages/core)

Updates `@daytonaio/sdk` from 0.152.1 to 0.169.0
- [Release notes](https://github.com/daytonaio/daytona/releases)
- [Commits](daytonaio/daytona@v0.152.1...v0.169.0)

Updates `jose` from 6.2.2 to 6.2.3
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](panva/jose@v6.2.2...v6.2.3)

Updates `openai` from 6.33.0 to 6.34.0
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/master/CHANGELOG.md)
- [Commits](openai/openai-node@v6.33.0...v6.34.0)

Updates `redis` from 5.11.0 to 5.12.1
- [Release notes](https://github.com/redis/node-redis/releases)
- [Changelog](https://github.com/redis/node-redis/blob/master/CHANGELOG.md)
- [Commits](https://github.com/redis/node-redis/compare/redis@5.11.0...redis@5.12.1)

Updates `weave` from 0.11.1 to 0.13.1
- [Release notes](https://github.com/wandb/weave/releases)
- [Changelog](https://github.com/wandb/weave/blob/master/dev_docs/RELEASE.md)
- [Commits](https://github.com/wandb/weave/commits)

Updates `autoprefixer` from 10.4.27 to 10.5.0
- [Release notes](https://github.com/postcss/autoprefixer/releases)
- [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md)
- [Commits](postcss/autoprefixer@10.4.27...10.5.0)

Updates `jsdom` from 29.0.2 to 29.1.0
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Commits](jsdom/jsdom@v29.0.2...v29.1.0)

Updates `postcss` from 8.5.9 to 8.5.12
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.9...8.5.12)

Updates `prettier` from 3.8.1 to 3.8.3
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.1...3.8.3)

---
updated-dependencies:
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.91.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@browserbasehq/stagehand"
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@daytonaio/sdk"
  dependency-version: 0.169.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: jose
  dependency-version: 6.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: openai
  dependency-version: 6.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: redis
  dependency-version: 5.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: weave
  dependency-version: 0.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: autoprefixer
  dependency-version: 10.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: jsdom
  dependency-version: 29.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: postcss
  dependency-version: 8.5.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: prettier
  dependency-version: 3.8.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Apr 28, 2026
cubic-dev-ai[bot]
cubic-dev-ai Bot reviewed Apr 28, 2026
View reviewed changes
Copy link
Copy Markdown

@cubic-dev-ai cubic-dev-ai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 2 files

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@cubic-dev-ai cubic-dev-ai[bot] cubic-dev-ai[bot] left review comments

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants