Skip to content

chore(deps): bump the minor-and-patch group across 1 directory with 28 updates - #4673

Merged
Astro-Han merged 8 commits into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-b7a1f064a6
Sep 4, 2026
Merged

chore(deps): bump the minor-and-patch group across 1 directory with 28 updates#4673
Astro-Han merged 8 commits into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-b7a1f064a6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 3, 2026 •
edited by Astro-Han
Loading

Copy link
Copy Markdown
Contributor

Summary

  • Upgrade the 28 minor-and-patch dependency group updates.
  • Rebase the shipped @ai-sdk/provider-utils patch onto 5.0.34, reconcile the npm peer closure, and refresh release/legal dependency mirrors.
  • Regenerate the Astryx theme and keep the Website build on Astro's ESM cookie@2.0.1 runtime.
  • Accept Zod 4.5.4 draft-07 tuple additionalItems schemas at the Client Capability boundary.

Compatibility

The Client Capability schema change advances RUNTIME_HOST_COMPATIBILITY_EPOCH to 111 because older Hosts reject the new tuple keyword. There is no persisted-data migration; mixed-generation peers fail closed and reconnect after the Host is replaced.

Validation

  • All required GitHub checks pass on 1269bd726b.
  • Clean npm ci and full repository build.
  • Runtime Host: 1683 tests, 0 failures.
  • Desktop: 2116 tests, 0 failures.
  • Website: build and 10 tests pass.
  • Dependency audit, release packaging, third-party notices, formatting, lint, and protocol epoch guard pass.

AI use

  • No generative tool made a substantive contribution
  • Generative tooling made a substantive contribution

Tool(s) and scope: Codex diagnosed the dependency-update failures, rebased the provider patch, repaired npm peer and release/legal metadata, updated protocol compatibility coverage, and verified the final merge head.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript labels Sep 3, 2026
@github-actions github-actions Bot added the effort/S Under 100 readable lines label Sep 3, 2026
Astro-Han
Astro-Han reviewed Sep 3, 2026
View reviewed changes

@Astro-Han Astro-Han left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reviewed current head 9ad5eebb9e48e56a1a69b563c3cff958f18972fe (OPEN, MERGEABLE, hosted checks red — see below). Two P1, both blocking; no P0/P3. The diff touches only 10 package manifest/lockfile files.

P1 — full install fails at postinstall: patch was made for the old version

package.json:108 bumps @ai-sdk/provider-utils to 5.0.34, but the repo still carries patches/@ai-sdk+provider-utils+5.0.28.patch. scripts/apply-dependency-patches.mjs:21-31,48-60 applies existing patches with patch-package --error-on-fail. Hosted test, package, audit and several platform/packaging jobs fail with Patch was made for version: 5.0.28 / Installed version: 5.0.34. The patch is not empty — it changes StreamingToolCallTracker behavior — so it cannot just be deleted. Please regenerate the patch against 5.0.34 for the intended behavior, or pin back to 5.0.28, then re-run full CI.

P1 — the new lockfile resolves the Slack peer dependency into an invalid tree

packages/runtime/package.json:155 directly depends on undici ^8.10.1, while the new package-lock.json entry for @slack/socket-mode@3.0.1 still declares peer undici ^7.0.0. The old lockfile's nested @slack/socket-mode/node_modules/undici@7.29.0 copy is gone, so it now resolves to the runtime's undici@8.10.1. A clean npm ci --ignore-scripts followed by npm ls --workspace @maka/runtime undici @slack/socket-mode --all --json reproducibly returns ELSPROBLEMS, marking undici@8.10.1 invalid against ^7.0.0; hosted audit fails on the same invalid tree. Please keep a 7.x copy satisfying the Slack peer, or confirm a Slack release accepting 8.x before upgrading, then regenerate the lockfile and verify npm ls plus full CI.

Notes

The third-party notices check cannot proceed past the same invalid npm ls tree, so the compliance loop cannot be claimed green on this head either. git diff --check is clean. What I could not judge: whether any other peer ranges in the bumped group hide similar silent resolutions beyond these two.

Automated review notice: This comment was posted by an automated review agent operated by Astro-Han. It is not an independent human review and does not replace one.

简体中文

本条结论全部来自 @未开智选手 的审查。我自己没有读这份 diff；我核的是当前 head 有没有漂移、以及 exact-head 的 CI 状态。当前 head 是 9ad5eeb，多项检查失败。P1 一是补丁版本对不上导致全量安装失败，P1 二是新锁文件把 Slack 的 peer 依赖解析成无效树。修好并推新 head 后再审。

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/minor-and-patch-b7a1f064a6 branch from 9ad5eeb to 4653065 Compare September 3, 2026 18:19
@Astro-Han
Astro-Han force-pushed the dependabot/npm_and_yarn/minor-and-patch-b7a1f064a6 branch from 4653065 to 3ab460f Compare September 3, 2026 18:29
@github-actions github-actions Bot added effort/M Under 500 readable lines and removed effort/S Under 100 readable lines labels Sep 3, 2026
@Astro-Han
Astro-Han force-pushed the dependabot/npm_and_yarn/minor-and-patch-b7a1f064a6 branch 2 times, most recently from 9e85416 to fee4be0 Compare September 4, 2026 10:49
Astro-Han
Astro-Han reviewed Sep 4, 2026
View reviewed changes

@Astro-Han Astro-Han left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reviewed current head fee4be07a3632c374d4749810508e64fbd2e6ef6 (OPEN, CONFLICTING). The two P1s from the previous head are fixed; no new P0–P3. Gate stays NO-GO on conflicts plus red hosted test — details below.

Fixed since the previous head

  • The provider-utils patch now applies cleanly: npm ci in a clean worktree succeeds with the @ai-sdk/provider-utils@5.0.34 patch applied, and patch file, README, LICENSE and notices versions agree.
  • The Slack/undici tree resolves again: npm ls --workspace @maka/runtime undici @slack/socket-mode --all succeeds with nested undici@7.29.0 for Slack and undici@8.10.1 for runtime, no ELSPROBLEMS.

Still blocking

This head is CONFLICTING, so it cannot merge regardless. Hosted test fails (a workspace-packages test cancelled on an unconverged promise, then the desktop job overran); that red could not be reproduced in full local desktop and Vite runs, so it is recorded as a required-gate failure, not claimed fixed. Please resolve conflicts and re-run hosted test, then this gets re-reviewed on the new head.

What was checked on this head

Runtime-host additionalItems allowlist/recursive validation and compatibility epoch 110 with focused tests; npm run build, typecheck, check:release (194/194); Runtime 3209/3209, UI 364/364, website 10/10, Desktop 2115/2115; runtime-host suite 1675 pass with one pre-existing launcher-teardown flake (3/3 on isolated rerun, not attributed to this PR). What I could not judge: real provider/platform combinations for every bumped dependency, and credential-backed provider behavior.

Automated review notice: This comment was posted by an automated review agent operated by Astro-Han. It is not an independent human review and does not replace one.

简体中文

本条结论全部来自 @未开智选手 的审查。我自己没有读这份 diff；我核的是当前 head 有没有漂移、以及 exact-head 的 CI 状态。当前 head 是 fee4be0，冲突且检查红。之前两条 P1 修好了，无新增问题，但门禁仍红。解冲突重跑检查后再审。

dependabot Bot and others added 8 commits September 4, 2026 20:24
@dependabot @Astro-Han
chore(deps): bump the minor-and-patch group across 1 directory with 2…
7eb626a 
…8 updates

Bumps the minor-and-patch group with 28 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@ai-sdk/provider-utils](https://github.com/vercel/ai/tree/HEAD/packages/provider-utils) | `5.0.28` | `5.0.34` |
| [@astryxdesign/cli](https://github.com/facebook/astryx/tree/HEAD/packages/cli) | `0.4.5` | `0.5.2` |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.9` | `2.5.11` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.2.0` | `26.4.0` |
| [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) | `6.32.2` | `6.33.0` |
| [intl-messageformat](https://github.com/formatjs/formatjs) | `11.2.12` | `11.2.14` |
| [fs-native-extensions](https://github.com/holepunchto/fs-native-extensions) | `1.5.0` | `1.5.1` |
| [@ai-sdk/anthropic](https://github.com/vercel/ai/tree/HEAD/packages/anthropic) | `4.0.40` | `4.0.46` |
| [@ai-sdk/code-mode](https://github.com/vercel/ai/tree/HEAD/packages/code-mode) | `1.0.27` | `1.0.42` |
| [@ai-sdk/cohere](https://github.com/vercel/ai/tree/HEAD/packages/cohere) | `4.0.28` | `4.0.35` |
| [@ai-sdk/google](https://github.com/vercel/ai/tree/HEAD/packages/google) | `4.0.47` | `4.0.58` |
| [@ai-sdk/open-responses](https://github.com/vercel/ai/tree/HEAD/packages/open-responses) | `2.0.34` | `2.0.36` |
| [@ai-sdk/openai](https://github.com/vercel/ai/tree/HEAD/packages/openai) | `4.0.44` | `4.0.52` |
| [@ai-sdk/openai-compatible](https://github.com/vercel/ai/tree/HEAD/packages/openai-compatible) | `3.0.32` | `3.0.41` |
| [@slack/socket-mode](https://github.com/slackapi/node-slack-sdk) | `3.0.0` | `3.0.1` |
| [@slack/web-api](https://github.com/slackapi/node-slack-sdk) | `8.0.0` | `8.1.1` |
| [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `7.0.70` | `7.0.85` |
| [undici](https://github.com/nodejs/undici) | `8.10.0` | `8.10.1` |
| [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.5.4` |
| [@earendil-works/pi-tui](https://github.com/earendil-works/pi/tree/HEAD/packages/tui) | `0.84.2` | `0.84.4` |
| [katex](https://github.com/KaTeX/KaTeX) | `0.16.47` | `0.18.5` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.33.0` | `1.38.0` |
| [mermaid](https://github.com/mermaid-js/mermaid) | `11.17.0` | `11.17.2` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.4` | `19.2.5` |
| [@jackwener/opencli](https://github.com/jackwener/opencli) | `1.8.6` | `1.8.7` |
| [@ant-design/icons-svg](https://github.com/ant-design/ant-design-icons) | `4.5.0` | `4.6.0` |
| [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.1.0` | `6.1.1` |
| [simple-icons](https://github.com/simple-icons/simple-icons) | `16.28.0` | `16.29.0` |

Updates `@ai-sdk/provider-utils` from 5.0.28 to 5.0.34
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/provider-utils/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/provider-utils@5.0.34/packages/provider-utils)

Updates `@astryxdesign/cli` from 0.4.5 to 0.5.2
- [Release notes](https://github.com/facebook/astryx/releases)
- [Changelog](https://github.com/facebook/astryx/blob/main/packages/cli/CHANGELOG.md)
- [Commits](https://github.com/facebook/astryx/commits/v0.5.2/packages/cli)

Updates `@biomejs/biome` from 2.5.9 to 2.5.11
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.11/packages/@biomejs/biome)

Updates `@types/node` from 26.2.0 to 26.4.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `knip` from 6.32.2 to 6.33.0
- [Release notes](https://github.com/webpro-nl/knip/releases)
- [Commits](https://github.com/webpro-nl/knip/commits/knip@6.33.0/packages/knip)

Updates `intl-messageformat` from 11.2.12 to 11.2.14
- [Release notes](https://github.com/formatjs/formatjs/releases)
- [Commits](https://github.com/formatjs/formatjs/compare/intl-messageformat@11.2.12...intl-messageformat@11.2.14)

Updates `fs-native-extensions` from 1.5.0 to 1.5.1
- [Release notes](https://github.com/holepunchto/fs-native-extensions/releases)
- [Commits](holepunchto/fs-native-extensions@v1.5.0...v1.5.1)

Updates `@ai-sdk/anthropic` from 4.0.40 to 4.0.46
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/anthropic/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/anthropic@4.0.46/packages/anthropic)

Updates `@ai-sdk/code-mode` from 1.0.27 to 1.0.42
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/code-mode/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/code-mode@1.0.42/packages/code-mode)

Updates `@ai-sdk/cohere` from 4.0.28 to 4.0.35
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/cohere/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/cohere@4.0.35/packages/cohere)

Updates `@ai-sdk/google` from 4.0.47 to 4.0.58
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/google/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/google@4.0.58/packages/google)

Updates `@ai-sdk/open-responses` from 2.0.34 to 2.0.36
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/open-responses/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/open-responses@2.0.36/packages/open-responses)

Updates `@ai-sdk/openai` from 4.0.44 to 4.0.52
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/openai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/openai@4.0.52/packages/openai)

Updates `@ai-sdk/openai-compatible` from 3.0.32 to 3.0.41
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/openai-compatible/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/openai-compatible@3.0.41/packages/openai-compatible)

Updates `@slack/socket-mode` from 3.0.0 to 3.0.1
- [Release notes](https://github.com/slackapi/node-slack-sdk/releases)
- [Commits](https://github.com/slackapi/node-slack-sdk/compare/@slack/socket-mode@3.0.0...@slack/socket-mode@3.0.1)

Updates `@slack/web-api` from 8.0.0 to 8.1.1
- [Release notes](https://github.com/slackapi/node-slack-sdk/releases)
- [Commits](https://github.com/slackapi/node-slack-sdk/compare/@slack/web-api@8.0.0...@slack/web-api@8.1.1)

Updates `ai` from 7.0.70 to 7.0.85
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@7.0.85/packages/ai)

Updates `undici` from 8.10.0 to 8.10.1
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v8.10.0...v8.10.1)

Updates `zod` from 4.4.3 to 4.5.4
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.4.3...v4.5.4)

Updates `@earendil-works/pi-tui` from 0.84.2 to 0.84.4
- [Release notes](https://github.com/earendil-works/pi/releases)
- [Changelog](https://github.com/earendil-works/pi/blob/main/packages/tui/CHANGELOG.md)
- [Commits](https://github.com/earendil-works/pi/commits/v0.84.4/packages/tui)

Updates `katex` from 0.16.47 to 0.18.5
- [Release notes](https://github.com/KaTeX/KaTeX/releases)
- [Changelog](https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md)
- [Commits](KaTeX/KaTeX@v0.16.47...v0.18.5)

Updates `lucide-react` from 1.33.0 to 1.38.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.38.0/packages/lucide-react)

Updates `mermaid` from 11.17.0 to 11.17.2
- [Release notes](https://github.com/mermaid-js/mermaid/releases)
- [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@11.17.0...mermaid@11.17.2)

Updates `@types/react-dom` from 19.2.4 to 19.2.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `@jackwener/opencli` from 1.8.6 to 1.8.7
- [Release notes](https://github.com/jackwener/opencli/releases)
- [Changelog](https://github.com/jackwener/OpenCLI/blob/main/CHANGELOG.md)
- [Commits](jackwener/OpenCLI@v1.8.6...v1.8.7)

Updates `@ant-design/icons-svg` from 4.5.0 to 4.6.0
- [Commits](https://github.com/ant-design/ant-design-icons/commits)

Updates `@vitejs/plugin-react` from 6.1.0 to 6.1.1
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.1.1/packages/plugin-react)

Updates `simple-icons` from 16.28.0 to 16.29.0
- [Release notes](https://github.com/simple-icons/simple-icons/releases)
- [Commits](simple-icons/simple-icons@16.28.0...16.29.0)

---
updated-dependencies:
- dependency-name: "@ai-sdk/provider-utils"
  dependency-version: 5.0.34
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@astryxdesign/cli"
  dependency-version: 0.5.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@biomejs/biome"
  dependency-version: 2.5.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@types/node"
  dependency-version: 26.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: knip
  dependency-version: 6.33.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: intl-messageformat
  dependency-version: 11.2.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: fs-native-extensions
  dependency-version: 1.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@ai-sdk/anthropic"
  dependency-version: 4.0.46
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@ai-sdk/code-mode"
  dependency-version: 1.0.42
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@ai-sdk/cohere"
  dependency-version: 4.0.35
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@ai-sdk/google"
  dependency-version: 4.0.58
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@ai-sdk/open-responses"
  dependency-version: 2.0.36
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@ai-sdk/openai"
  dependency-version: 4.0.52
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@ai-sdk/openai-compatible"
  dependency-version: 3.0.41
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@slack/socket-mode"
  dependency-version: 3.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@slack/web-api"
  dependency-version: 8.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: ai
  dependency-version: 7.0.85
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: undici
  dependency-version: 8.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: zod
  dependency-version: 4.5.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@earendil-works/pi-tui"
  dependency-version: 0.84.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: katex
  dependency-version: 0.18.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: lucide-react
  dependency-version: 1.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: mermaid
  dependency-version: 11.17.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@jackwener/opencli"
  dependency-version: 1.8.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@ant-design/icons-svg"
  dependency-version: 4.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.1.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: simple-icons
  dependency-version: 16.29.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@Astro-Han
fix(deps): align dependency bump contracts
1e7787f 
Generated-by: Codex
@Astro-Han
fix(runtime): declare AI SDK provider dependency
2d2f266 
Generated-by: Codex
@Astro-Han
fix(release): update provider-utils patch inventory
2eb9ea0 
Generated-by: Codex
@Astro-Han
chore(deps): reconcile website workspace lockfile
868a0f3 
Generated-by: Codex
@Astro-Han
chore(desktop): refresh generated Astryx theme
191ceb6 
Generated-by: Codex
@Astro-Han
fix(runtime-host): accept tuple additionalItems schemas
602739e 
Generated-by: Codex
@Astro-Han
fix(website): resolve Astro cookie runtime
1269bd7 
Generated-by: Codex
@Astro-Han
Astro-Han force-pushed the dependabot/npm_and_yarn/minor-and-patch-b7a1f064a6 branch from fee4be0 to 1269bd7 Compare September 4, 2026 12:26
@Astro-Han
Astro-Han merged commit 3c9dbdc into main Sep 4, 2026
18 checks passed
@Astro-Han
Astro-Han deleted the dependabot/npm_and_yarn/minor-and-patch-b7a1f064a6 branch September 4, 2026 13:09
jackwener
jackwener approved these changes Sep 4, 2026
View reviewed changes

@jackwener jackwener left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approving at exact head 1269bd72. The existing approval is bound to 3ab460fd, which this head has moved past; this one covers the current tree.

All 17 required checks pass, with Validate installed CLI Eval skipping. That set includes the four direct-peer addon builds across darwin-arm64, linux-arm64, linux-x64 and win32-x64, the immutable tarball, and the installed/released CLI validations — so the platform matrix is covered rather than inferred.

The group name holds. Every version change in this diff is a minor or patch bump; nothing crosses a major.

One entry is worth a sentence because semver treats it differently from the rest: @astryxdesign/cli moves 0.4.5 → 0.5.2, and for a 0.x package the minor position is the breaking position. Two things make that benign here rather than an unflagged major:

  • it is a devDependency, so it does not enter the shipped artifact;
  • @astryxdesign/core was already at 0.5.2 on the base commit, so this aligns the CLI to the core it is meant to drive rather than introducing a skew.

The repository's own astryx:surface-inventory check is part of the passing set, which is the gate that would notice if the CLI's output shape had shifted underneath it.

Routine dependency maintenance; the merge decision remains a human's.

简体中文

在 1269bd72 上批准。现有的那次批准绑定在 3ab460fd,当前 head 已经越过它;这次批准覆盖当前代码树。

17 项必需检查全部通过,Validate installed CLI Eval 为 skipping。通过的集合里包含 darwin-arm64、linux-arm64、linux-x64、win32-x64 四个 direct-peer addon 构建、immutable tarball,以及 installed/released 两项 CLI 校验——所以平台矩阵是被覆盖的,不是推断的。

分组名称属实。 这次 diff 里的每一处版本变化都是 minor 或 patch,没有一项跨越 major。

有一项值得单独说一句,因为 semver 对它的处理与其余不同:@astryxdesign/cli 从 0.4.5 升到 0.5.2,而对一个 0.x 包来说,minor 位就是破坏性变更位。两点让它在这里是良性的,而不是一个未被标记的 major:

  • 它是 devDependency,不会进入发布产物;
  • @astryxdesign/core 在基线提交上本来就已经是 0.5.2,所以这次是把 CLI 对齐到它本应驱动的 core,而不是引入版本偏移。

仓库自己的 astryx:surface-inventory 检查也在通过的集合里,而那正是「CLI 输出形状若在脚下发生变化」时会发现的那道门。

例行依赖维护;合并与否仍由人决定。

Automated review notice: This comment was posted by an automated review agent operated by jackwener. It is not an independent human review and does not replace one.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Astro-Han Astro-Han Astro-Han approved these changes
@jackwener jackwener jackwener approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file effort/M Under 500 readable lines

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@jackwener @Astro-Han