Skip to content

chore(deps): bump the all-npm group with 8 updates - #96

Merged
vreshch merged 1 commit into
masterfrom
dependabot/npm_and_yarn/all-npm-b194dd031a
Aug 21, 2026
Merged

chore(deps): bump the all-npm group with 8 updates#96
vreshch merged 1 commit into
masterfrom
dependabot/npm_and_yarn/all-npm-b194dd031a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 21, 2026

Copy link
Copy Markdown
Contributor

Bumps the all-npm group with 8 updates:

Package From To
@next/eslint-plugin-next 16.3.0 16.3.1
@vitest/coverage-v8 4.1.10 4.1.11
vitest 4.1.10 4.1.11
@agentage/design-system 0.13.0 0.14.0
@agentage/observability 0.12.1 0.16.0
jose 6.2.8 6.2.9
lucide-react 1.31.0 1.32.0
next 16.3.0 16.3.1

Updates @next/eslint-plugin-next from 16.3.0 to 16.3.1

Release notes

Sourced from @​next/eslint-plugin-next's releases.

v16.3.1

What's Changed

Full Changelog: vercel/next.js@v16.3.0...v16.3.1

v16.3.1-canary.26

Misc Changes

  • docs: document deploymentId build ID override and Pages Router skew in 16.2: #97645
  • Upgrade React from eb8feb71-20260814 to eafeac09-20260819: #97636
  • Turbopack: rename to use turbopack: no side effects: #94427
  • refactor: move useDynamic{Route,Search}Params to reduce snapshot churn: #97360
  • [PPF] unstable_navigation(): #96908
  • [PPF] Scaffold unstable_navigation(): #97236
  • docs: Explicit cache output description: #97548
  • Improve Cache Components sync IO migration guidance: #97572
  • [test] Use a non-native stub for the server externals list test: #97614
  • Avoid GitHub API rate limits for create-next-app examples: #97612
  • [test] Cover the prerender worker-thread backend with an addon we control: #97543
  • [test] Convert the prerender-native-module suite to local fixture packages: #97542
  • [test] Replace the turbopack-reports sqlite3 dependency with a local addon fixture: #97541
  • [test] Drop the dead sqlite3 build approval from the sharp-basic suite: #97540
  • [ci] Authenticate Turborepo remote caching with OIDC instead of a static PAT: #97590
  • Remove HmrTarget: #97253
  • Keep HMR instructions typed until serialization: #96569
  • Serialize frozen collections by value only: #96686

Credits

... (truncated)

Commits

Updates @vitest/coverage-v8 from 4.1.10 to 4.1.11

Release notes

Sourced from @​vitest/coverage-v8's releases.

v4.1.11

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates vitest from 4.1.10 to 4.1.11

Release notes

Sourced from vitest's releases.

v4.1.11

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • 9bd8d46 chore: release v4.1.11 (#10995)
  • 9851dbc fix(browser): trigger playwright/chromium gc on lower disk availability [back...
  • See full diff in compare view

Updates @agentage/design-system from 0.13.0 to 0.14.0

Commits
  • 748f90b chore(release): 0.14.0 (#56)
  • 79266e9 chore(deps-dev): bump the all-npm group with 5 updates (#54)
  • ddd0afb chore: tag internal callers with X-Client-Type: service (#55)
  • 676986e ci(deploy): fail-closed serves-this-commit assert in verify-deploy.sh (#53)
  • 62d5de1 feat(showcase): serve a real /health instead of the SPA fallback (#51)
  • d2f13d7 ci: align workflow filenames on the estate standard (#52)
  • See full diff in compare view

Updates @agentage/observability from 0.12.1 to 0.16.0

Changelog

Sourced from @​agentage/observability's changelog.

0.16.0 - 2026-08-14

  • user_type is now classified by the kit and lands on SPANS, not just the request log line. classifyClientType({ header, userAgent, path }) mirrors the estate rules 1:1 (the x-client-type header wins - service/test; then a playwright/headlesschrome/puppeteer UA; then bot UAs and scanner paths; else user), so test traffic is declared rather than guessed.
  • createRequestLog uses that classifier by default (an injected classify still wins, () => undefined drops the field), stamps user_type on the request span and puts it into OTel baggage. withSpan and setMcpTool stamp every span they touch from that context; stampUserType(span) and userTypeFromContext() are exported for spans you create yourself.
  • Note: classify now runs at request ENTRY instead of at finish, so the value exists while the request is still running.

0.15.1 - 2026-08-14

  • createRequestLog captures the request identity once at middleware entry (req.originalUrl, query stripped) instead of reading req.path at finish. Express rewrites req.path/req.baseUrl to be router-relative once a mounted router handles the request, so anything ending inside a router - a guard 401 on a router mounted at /api/admin - logged the truncated path: "/whoami", and the route fallback normalized the same truncated value.

0.14.0 - 2026-08-13

  • Error lines get two more flat fields, lifted in the same shared capture path, so every emitter gains them with no call-site change:
    • category - the root cause bucketed into timeout, connectivity, db (a SQLSTATE such as 23505/42P01) or logic. Classified from the ROOT cause, so a TypeError: fetch failed wrapper never hides the ENOTFOUND underneath. Always present: an unrecognised error is logic, our bug until proven otherwise.
    • target - what an outbound call was reaching for, POST api.test:8443/v1/x/:id: method, host with port, path templated by the same rule that names fetch spans. Query, hash and credentials never appear. Absent when unknown.
  • tracedFetch now also attaches a non-enumerable fetchTarget to a rejection, computed before the await; targetOf reads it through any wrapping cause chain.
  • categoryOf, targetOf and fetchTargetOf are exported for direct use.

0.13.0 - 2026-08-13

  • Error lines get two new flat fields, lifted in the shared capture path so every emitter (Express, Next, MCP tools) gains them with no call-site change:
    • cause - deepest .cause in the chain (depth cap 5, cycle-safe) summarized as Error: getaddrinfo ENOTFOUND agentage-web_backend. When the error carries no application code, that cause's system code becomes error_code.
    • frame - top in-app stack frame, src/provision.ts:42:11 in provisionMemory; node_modules, node:, internal/, webpack-internal and native frames skipped.
  • tracedFetch(input, init?) - fetch that captures the call site before awaiting and attaches it to a rejection as a non-enumerable callSite, so frame resolves

... (truncated)

Commits

Updates jose from 6.2.8 to 6.2.9

Release notes

Sourced from jose's releases.

v6.2.9

Fixes

  • reject a JWE whose generated Key Management Parameters collide (6ed19a6)
  • types: undeprecate PBES2 p2c parameter (33bf832)
Changelog

Sourced from jose's changelog.

6.2.9 (2026-08-15)

Fixes

  • reject a JWE whose generated Key Management Parameters collide (6ed19a6)
  • types: undeprecate PBES2 p2c parameter (33bf832)
Commits
  • f3a3c78 chore(release): 6.2.9
  • 33bf832 fix(types): undeprecate PBES2 p2c parameter
  • 6ed19a6 fix: reject a JWE whose generated Key Management Parameters collide
  • 944840d ci: use shared release workflows
  • 05bccf2 chore: bump packages
  • f7392d1 test: account for workerd nodejs_compat flag default changes
  • 4e944be ci: drop the wait-for-npm machinery
  • 4285b6f chore(deps-dev): bump undici
  • cb114ec chore: cleanup after release
  • See full diff in compare view

Updates lucide-react from 1.31.0 to 1.32.0

Release notes

Sourced from lucide-react's releases.

Version 1.32.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.31.0...1.32.0

Commits

Updates next from 16.3.0 to 16.3.1

Release notes

Sourced from next's releases.

v16.3.1

What's Changed

Full Changelog: vercel/next.js@v16.3.0...v16.3.1

v16.3.1-canary.26

Misc Changes

  • docs: document deploymentId build ID override and Pages Router skew in 16.2: #97645
  • Upgrade React from eb8feb71-20260814 to eafeac09-20260819: #97636
  • Turbopack: rename to use turbopack: no side effects: #94427
  • refactor: move useDynamic{Route,Search}Params to reduce snapshot churn: #97360
  • [PPF] unstable_navigation(): #96908
  • [PPF] Scaffold unstable_navigation(): #97236
  • docs: Explicit cache output description: #97548
  • Improve Cache Components sync IO migration guidance: #97572
  • [test] Use a non-native stub for the server externals list test: #97614
  • Avoid GitHub API rate limits for create-next-app examples: #97612
  • [test] Cover the prerender worker-thread backend with an addon we control: #97543
  • [test] Convert the prerender-native-module suite to local fixture packages: #97542
  • [test] Replace the turbopack-reports sqlite3 dependency with a local addon fixture: #97541
  • [test] Drop the dead sqlite3 build approval from the sharp-basic suite: #97540
  • [ci] Authenticate Turborepo remote caching with OIDC instead of a static PAT: #97590
  • Remove HmrTarget: #97253
  • Keep HMR instructions typed until serialization: #96569
  • Serialize frozen collections by value only: #96686

Credits

... (truncated)

Commits
  • 3d32eb8 v16.3.1
  • 2b4b1ec [backport] Revert i18n localization change for dynamic Pages API routes (#949...
  • 228df5f [backport] Retain fewer stale cache versions and use a TTL, plus the mtime fa...
  • 16eab3a [backport] Fix: Optimistic routing bugs leading to repeated prefetch loops (#...
  • 75548c9 [backport] Fix Nav Inspector request loop on repeat captures (#97326)
  • f6bd714 [backport] [test] Compile the middleware redirect routes up front in dev (#97...
  • 43c1c60 [16.3] [ci] Use OIDC tokens to read private preview builds (#97258)
  • 9dbb357 [backport] Encode the cache item name built by unstable_cache (#97313)
  • 323a17c [backport] Discard only cache entries that predate a tag revalidation, and re...
  • 6d67f46 [backport] Keep the dev validation worker alive across HMR updates (#97315)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the all-npm group with 8 updates
50056de 
Bumps the all-npm group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [@next/eslint-plugin-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-plugin-next) | `16.3.0` | `16.3.1` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.10` | `4.1.11` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.10` | `4.1.11` |
| [@agentage/design-system](https://github.com/agentage/design-system) | `0.13.0` | `0.14.0` |
| [@agentage/observability](https://github.com/agentage/observability) | `0.12.1` | `0.16.0` |
| [jose](https://github.com/panva/jose) | `6.2.8` | `6.2.9` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.31.0` | `1.32.0` |
| [next](https://github.com/vercel/next.js) | `16.3.0` | `16.3.1` |


Updates `@next/eslint-plugin-next` from 16.3.0 to 16.3.1
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](https://github.com/vercel/next.js/commits/v16.3.1/packages/eslint-plugin-next)

Updates `@vitest/coverage-v8` from 4.1.10 to 4.1.11
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/coverage-v8)

Updates `vitest` from 4.1.10 to 4.1.11
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/vitest)

Updates `@agentage/design-system` from 0.13.0 to 0.14.0
- [Commits](agentage/design-system@v0.13.0...v0.14.0)

Updates `@agentage/observability` from 0.12.1 to 0.16.0
- [Changelog](https://github.com/agentage/observability/blob/master/CHANGELOG.md)
- [Commits](agentage/observability@v0.12.1...v0.16.0)

Updates `jose` from 6.2.8 to 6.2.9
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](panva/jose@v6.2.8...v6.2.9)

Updates `lucide-react` from 1.31.0 to 1.32.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.32.0/packages/lucide-react)

Updates `next` from 16.3.0 to 16.3.1
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.3.0...v16.3.1)

---
updated-dependencies:
- dependency-name: "@next/eslint-plugin-next"
  dependency-version: 16.3.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-npm
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.1.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-npm
- dependency-name: vitest
  dependency-version: 4.1.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-npm
- dependency-name: "@agentage/design-system"
  dependency-version: 0.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm
- dependency-name: "@agentage/observability"
  dependency-version: 0.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm
- dependency-name: jose
  dependency-version: 6.2.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-npm
- dependency-name: lucide-react
  dependency-version: 1.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm
- dependency-name: next
  dependency-version: 16.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-npm
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 21, 2026
@github-actions

github-actions Bot commented Aug 21, 2026 •
edited
Loading

Copy link
Copy Markdown

✅ CI - Verify PASSED

Commit: 50056de4b4fa700dc93dc308a2fb29482171bb80 · Branch: dependabot/npm_and_yarn/all-npm-b194dd031a

  • ✅ Type check
  • ✅ Lint
  • ✅ Format check
  • ✅ Unit tests + coverage
  • ✅ Build
  • ✅ Landing e2e

🔗 View workflow run

@vreshch
vreshch merged commit 82f69fc into master Aug 21, 2026
1 check passed
@vreshch
vreshch deleted the dependabot/npm_and_yarn/all-npm-b194dd031a branch August 21, 2026 23:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@vreshch vreshch

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@vreshch