Skip to content

build(deps-dev): bump vercel from 57.0.0 to 58.11.0 - #908

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/vercel-58.4.4
Open

build(deps-dev): bump vercel from 57.0.0 to 58.11.0#908
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/vercel-58.4.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor

Bumps vercel from 57.0.0 to 58.11.0.

Release notes

Sourced from vercel's releases.

vercel@58.4.4

Patch Changes

  • dcadcad: Trigger a new release to publish versions that were skipped by the failed release run.

vercel@58.4.0

Minor Changes

  • a928d5a: Add vercel ai-gateway budgets defaults (list/set/remove) to manage per-scope AI Gateway budget defaults (project and api-key), each with its own limit and refresh period

Patch Changes

  • Updated dependencies [2c75803]
  • Updated dependencies [57dec92]
    • @​vercel/build-utils@​13.36.2
    • @​vercel/backends@​0.8.29
    • @​vercel/container@​0.1.0
    • @​vercel/elysia@​0.1.106
    • @​vercel/express@​0.1.120
    • @​vercel/fastify@​0.1.109
    • @​vercel/go@​3.10.2
    • @​vercel/h3@​0.1.115
    • @​vercel/hono@​0.2.109
    • @​vercel/hydrogen@​1.4.0
    • @​vercel/koa@​0.1.89
    • @​vercel/nestjs@​0.2.110
    • @​vercel/next@​4.20.4
    • @​vercel/node@​5.9.2
    • @​vercel/python@​6.54.0
    • @​vercel/redwood@​2.5.0
    • @​vercel/remix-builder@​5.9.1
    • @​vercel/ruby@​2.5.1
    • @​vercel/rust@​1.4.0
    • @​vercel/static-build@​2.11.12

vercel@58.3.0

Minor Changes

  • 0f04613: Add vercel vcr permissions subcommands for managing which teams can pull images from a VCR repository: vcr permissions <repository> ls lists teams with access (by team slug), add and rm grant or revoke access for one or more teams (comma-separated team ids or slugs), and clear removes access for every team.

  • 17ee736: Replace the vercel-workers integration for Python queue subscribers and workflows with the new vercel-queue SDK:

    • [[tool.vercel.subscribers]] entrypoints are introspected at build time via vercel.queue.get_subscriptions() and served through generated vercel.queue.asgi_app() handler modules, with queue/v2beta triggers carrying the SDK-registered consumer groups and per-subscription tuning.
    • Celery and Dramatiq projects get the matching vercel-celery/vercel-dramatiq integration package injected automatically (bundled variant unless vercel-queue is an explicit dependency), in builds and in vercel dev.
    • [[tool.vercel.workflows]] entrypoints follow the SDK generation: projects on vercel >= 0.8.0 are served through vercel-queue like subscribers; older or undeterminable versions keep the legacy vercel-workers serving (worker env markers, injected pinned vercel-workers).
    • Projects that depend on vercel-workers directly keep the legacy integration wholesale: legacy subscriber schema, direct entrypoint serving, worker env markers.
    • vercel dev serves queue sidecars through vercel.queue.asgi_app() for new-SDK projects, and its queue broker delivers with the SDK-registered consumer groups introspected at sidecar startup (matching production trigger behavior); legacy projects keep the vercel-workers bootstrap.
    • The CLI no longer injects config.hasWorkerServices; the Python builder makes all queue-serving decisions from project metadata.
  • 5fc4930: Rename the vc edge-config command to vc global-config, keeping edge-config working as an alias for backwards compatibility.

... (truncated)

Changelog

Sourced from vercel's changelog.

vercel

58.4.4

Patch Changes

  • dcadcad: Trigger a new release to publish versions that were skipped by the failed release run.

58.4.3

Patch Changes

  • 5f49021: Add --protection-password to vercel project protection enable so deployment protection passwords can be set from the CLI when used with --password.
  • 230fe53: Made non-interactive project inspection fail instead of linking when project context is unresolved, and corrected Vercel CLI skill guidance for project resolution, pull outputs, and browser authentication flows.

58.4.2

Patch Changes

  • a69c714: Propagate per-function maxConcurrency configuration into build outputs and keep every configured Next.js route in its own Lambda group, including routes with the same limit.
  • 2d84055: Skip legacy Sensitive Environment Variables Policy in vercel env add and vercel env update when VERCEL_ENV_VAR_CONFIG_SECRET_UI is set, and send visibility (config/secret) on create and update requests when not explicitly set via --visibility (omitted for public-prefixed keys that cannot use secret visibility). Development still disallows secrets.
  • 682bf8b: Fix login device-flow unit tests under CI: clear CI when asserting browser open, and read already-flushed stderr via getFullOutput.
  • c006a5f: Fix pagination for the vercel teams members command.
  • 654e898: Type shared function settings in container image build outputs.
  • ae08009: Remove auto-opt-in of vercel team members to the native CLI binary.
  • 8b8a729: Added support for adding and removing variants with vercel flags update. For example, use vercel flags update checkout-flow --add-variant treatment="Treatment" to add a variant, or vercel flags update checkout-flow --remove-variant legacy --yes to remove one.
  • Updated dependencies [a69c714]
  • Updated dependencies [654e898]
    • @​vercel/build-utils@​13.36.3
    • @​vercel/next@​4.20.5
    • @​vercel/static-build@​2.11.13
    • @​vercel/backends@​0.8.30
    • @​vercel/container@​0.1.0
    • @​vercel/elysia@​0.1.107
    • @​vercel/express@​0.1.121
    • @​vercel/fastify@​0.1.110
    • @​vercel/go@​3.10.2
    • @​vercel/h3@​0.1.116
    • @​vercel/hono@​0.2.110
    • @​vercel/hydrogen@​1.4.0
    • @​vercel/koa@​0.1.90
    • @​vercel/nestjs@​0.2.111
    • @​vercel/node@​5.9.3
    • @​vercel/python@​6.54.1
    • @​vercel/redwood@​2.5.0

... (truncated)

Commits
Attestation changes

This version has no provenance attestation, while the previous version (57.0.0) was attested. Review the package versions before updating.


Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 1, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 1, 2026 23:39
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 1, 2026
@vercel

vercel Bot commented Aug 1, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
clippy-storybook Ready Ready Preview Aug 14, 2026 9:14am
theme-wizard Ready Ready Preview Aug 14, 2026 9:14am
theme-wizard-server Ready Ready Preview Aug 14, 2026 9:14am

Request Review

@codecov-commenter

codecov-commenter commented Aug 1, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 85.50%. Comparing base (fad3537) to head (7bacc6f).
⚠️ Report is 121 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff             @@
##             main     #908      +/-   ##
==========================================
- Coverage   85.83%   85.50%   -0.34%     
==========================================
  Files          79       98      +19     
  Lines        2408     2988     +580     
  Branches      539      685     +146     
==========================================
+ Hits         2067     2555     +488     
- Misses        282      355      +73     
- Partials       59       78      +19     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Bumps [vercel](https://github.com/vercel/vercel/tree/HEAD/packages/cli) from 57.0.0 to 58.11.0.
- [Release notes](https://github.com/vercel/vercel/releases)
- [Changelog](https://github.com/vercel/vercel/blob/main/packages/cli/CHANGELOG.md)
- [Commits](https://github.com/vercel/vercel/commits/HEAD/packages/cli)

---
updated-dependencies:
- dependency-name: vercel
  dependency-version: 58.4.4
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps-dev): bump vercel from 57.0.0 to 58.5.1 build(deps-dev): bump vercel from 57.0.0 to 58.11.0 Aug 14, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/vercel-58.4.4 branch from 71f891a to 7bacc6f Compare August 14, 2026 08:58
@sonarqubecloud

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant