chore(deps-dev): bump the development group across 1 directory with 19 updates by dependabot[bot] · Pull Request #53 · PunGrumpy/vecstore-sdk

dependabot · 2026-10-15T22:08:48Z

Bumps the development group with 19 updates in the / directory:

Package	From	To
@changesets/cli	`3.0.2`	`3.0.3`
eslint-plugin-sonarjs	`4.2.0`	`4.2.2`
oxfmt	`0.68.0`	`0.73.0`
oxlint	`1.82.0`	`1.88.0`
oxlint-plugin-react-doctor	`0.9.13`	`0.9.18`
pkg-pr-new	`0.0.88`	`0.0.91`
publint	`0.3.24`	`0.3.25`
turbo	`2.10.12`	`2.11.8`
@types/node	`26.5.1`	`26.6.5`
@webgpu/types	`0.1.72`	`0.1.74`
postcss	`8.5.28`	`8.5.30`
@electric-sql/pglite	`0.5.8`	`0.5.10`
@electric-sql/pglite-pgvector	`0.0.9`	`0.0.11`
@supabase/supabase-js	`2.116.0`	`2.117.3`
@types/bun	`1.4.2`	`1.4.3`
cloudflare	`7.1.0`	`7.3.0`
pg	`8.23.0`	`8.23.1`
redis	`6.2.1`	`6.3.0`
tsdown	`0.23.0`	`0.23.1`

Updates @changesets/cli from 3.0.2 to 3.0.3

Release notes

Sourced from @changesets/cli's releases.

@changesets/cli@3.0.3

Patch Changes

#2297 3f163da Thanks @Andarist! - Fixed semver ranges (such as >=1.0.0 <2.0.0) getting cut off (>=2.0.0) when updating internal dependencies.

#2276 ca9d110 Thanks @Andarist! - Fixed pnpm 10 compatibility with npm 12 when reading registry information, packing, and publishing packages.

Updated dependencies [3f163da, bfe9050, e522996]:

@changesets/apply-release-plan@8.1.1

@changesets/config@4.0.1

Changelog

Sourced from @changesets/cli's changelog.

3.0.3

Patch Changes

#2297 3f163da Thanks @Andarist! - Fixed semver ranges (such as >=1.0.0 <2.0.0) getting cut off (>=2.0.0) when updating internal dependencies.

#2276 ca9d110 Thanks @Andarist! - Fixed pnpm 10 compatibility with npm 12 when reading registry information, packing, and publishing packages.

Updated dependencies [3f163da, bfe9050, e522996]:

@changesets/apply-release-plan@8.1.1

@changesets/config@4.0.1

Commits

c9269c0 Version Packages (#2291)
ca9d110 Fix pnpm 10 publishing with npm 12 (#2276)
7be7fde Build(deps): Bump the production-dependencies group across 1 directory with 6...
b430ce0 Move e2e tests to an on-demand workspace (#2275)
93314a8 test: add happy path tests for add (#2289)
d13a39e test: use inline snapshots for publish plan tests (#2284)
See full diff in compare view

Updates eslint-plugin-sonarjs from 4.2.0 to 4.2.2

Commits

See full diff in compare view

Updates oxfmt from 0.68.0 to 0.73.0

Release notes

Sourced from oxfmt's releases.

oxfmt v0.73.0

💥 BREAKING CHANGES

1ef2888 oxfmt: [BREAKING] Improve --migrate prettier (#27444) (leaysgur)

c2e6d5f formatter_toml: [BREAKING] Add oxc_formatter_toml crate wrapping oxc-toml (#27365) (leaysgur)

🚀 Features

ce4e8dc oxfmt: Support overrides[].parser -> associations[].language migration (#27475) (leaysgur)

a495e82 oxfmt: Support associations config to specify language over filepath (#27437) (leaysgur)

77f8156 oxfmt/lsp: Show root config errors to LSP client (#26014) (Sysix)

c1adce3 oxfmt/lsp: Support astro language (#27388) (leaysgur)

4f024a1 oxfmt: Support astro plugin in --migrate prettier (#27387) (leaysgur)

5db28fa oxfmt: Support Astro via prettier-plugin-astro@1.x (#27386) (leaysgur)

🐛 Bug Fixes

76ec31b formatter_css: Support css-in-js placeholders in property names and conditions (#27640) (leaysgur)

99bb268 formatter_css: Keep css-in-js placeholder as media type (#27639) (leaysgur)

372849e formatter: Fix crash on css-in-js comment containing interpolation (#27638) (leaysgur)

da692b8 formatter: Wrap export default class|function consistently (#27628) (leaysgur)

21dee96 formatter: Keep parens around TSInstantiationExpression before ! and export (#27626) (leaysgur)

b6eb914 oxfmt: Normalize symlink targets in CLI snapshots (#27498) (camc314)

5dae56f oxfmt/lsp: Return error on config resolving error (#26003) (Sysix)

676cc60 formatter/jsdoc: Preserve paragraphs by checking @description tag width (#27439) (leaysgur)

2349a31 oxfmt: Follow symlinked configs in discovery (#27389) (leaysgur)

db360de oxfmt: Load svelte plugin for svelte-in-mdx-in-md (#27369) (leaysgur)

6e573f9 oxlint,oxfmt: Set stderr blocking (#27363) (leaysgur)

d730fdd formatter_core: Leave blank frontmatter without dispatcher (#27359) (leaysgur)

📚 Documentation

4a28c91 formatter_css: Clarify missed-semicolon-accepted divergence (#27433) (leaysgur)

408d87f oxfmt: Simplify oxfmtrc docs (#27432) (leaysgur)

902e188 oxfmt: Update how embeddedLanguageFormatting option works (#27362) (leaysgur)

37b3c48 formatter_markdown: Fix DIVERGENCES.md examples and slug to match behavior (#27358) (leaysgur)

oxfmt v0.72.0

💥 BREAKING CHANGES

e2c68b1 oxfmt: [BREAKING] Format parser:markdown files by oxc_formatter_markdown (#27256) (leaysgur)

🚀 Features

b538e3c formatter_css: Parse embedded CSS as a block's contents (#27284) (leaysgur)

🐛 Bug Fixes

71e400b formatter_markdown: Fixed remaining issues found by fuzz (#27334) (leaysgur)

7d0e54d formatter_markdown: Preserve line breaks around Chinese/Japanese characters in all proseWrap (#27331) (leaysgur)

... (truncated)

Changelog

Sourced from oxfmt's changelog.

[0.73.0] - 2026-10-13

🚀 Features

a495e82 oxfmt: Support associations config to specify language over filepath (#27437) (leaysgur)

5db28fa oxfmt: Support Astro via prettier-plugin-astro@1.x (#27386) (leaysgur)

📚 Documentation

408d87f oxfmt: Simplify oxfmtrc docs (#27432) (leaysgur)

902e188 oxfmt: Update how embeddedLanguageFormatting option works (#27362) (leaysgur)

[0.67.0] - 2026-09-07

🛡️ Security

9a612d5 deps: Update npm packages (#26178) (renovate[bot])

[0.64.0] - 2026-08-18

🚀 Features

c07fe7c oxfmt: Support experimentalOperatorPosition (#25643) (leaysgur)

📚 Documentation

fed6681 oxfmt: Skip expanding overrides options (#25572) (leaysgur)

[0.62.0] - 2026-08-03

🐛 Bug Fixes

e6e584b oxfmt: Type jsdoc. enum options (#25008) (leaysgur)

[0.59.0] - 2026-07-13

🐛 Bug Fixes

415fe1e oxfmt: Error on ignorePatterns that cannot match files outside the config directory (#24286) (leaysgur)

[0.55.0] - 2026-06-15

🚀 Features

9a2788b linter/unicorn: Implement prefer-export-from rule (#22935) (AliceLanniste)

[0.54.0] - 2026-06-08

📚 Documentation

... (truncated)

Commits

6941b4e release(apps): oxlint v1.88.0 && oxfmt v0.73.0 (#27643)
a495e82 feat(oxfmt): support associations config to specify language over filepath ...
408d87f docs(oxfmt): simplify oxfmtrc docs (#27432)
5db28fa feat(oxfmt): support Astro via prettier-plugin-astro@1.x (#27386)
902e188 docs(oxfmt): update how embeddedLanguageFormatting option works (#27362)
2bd08eb release(apps): oxlint v1.87.0 && oxfmt v0.72.0 (#27341)
2ae2939 release(apps): oxlint v1.86.0 && oxfmt v0.71.0 (#27132)
f158bff chore(deps): update npm packages (#26865)
288d8cc release(apps): oxlint v1.85.0 && oxfmt v0.70.0 (#26903)
f02a64a release(apps): oxlint v1.84.0 && oxfmt v0.69.0 (#26874)
See full diff in compare view

Updates oxlint from 1.82.0 to 1.88.0

Release notes

Sourced from oxlint's releases.

oxlint v1.88.0

💥 BREAKING CHANGES

7730e14 ast: [BREAKING] Refactor comment attachment storage (#27512) (camc314)

c904b61 ast: [BREAKING] Add comment attachment storage (#27393) (camc314)

🚀 Features

bde9f69 oxlint/lsp: Show config errors to LSP client (#25486) (Sysix)

3c361a7 linter/unicorn/prefer-query-selector: Add allowWithVariables option (#27346) (Mikhail Baev)

🐛 Bug Fixes

82ecc43 linter/sort-keys: Compare natural order like ESLint (#27579) (Dunqing)

598ac03 linter/unicorn/prefer-bigint-literals: Unwrap redundant constructor call; don't auto-fix for lost precision (#25690) (Jacob Bandes-Storch)

2512213 linter: Prevent conflicting type import fixes (#27409) (camc314)

2349a31 oxfmt: Follow symlinked configs in discovery (#27389) (leaysgur)

6e573f9 oxlint,oxfmt: Set stderr blocking (#27363) (leaysgur)

⚡ Performance

91b588c linter/oxc/bad-array-method-on-arguments: Check arguments references once (#26930) (camc314)

c5f47ed linter/plugins: Inline firstCommentAtOrAfter into call sites (#27539) (overlookmotel)

c5f9235 linter/plugins: Use shift over multiply for powers of 2 (#27536) (overlookmotel)

8c57c5e linter: Share one source per file across type-aware diagnostics (#27462) (Max Schwenk)

19c227d minifier: Use ident when checking specific id names (#27208) (Armano)

📚 Documentation

98cc2b4 linter/plugins: Improve documentation for firstCommentAtOrAfter (#27538) (overlookmotel)

3bb54f6 linter: Update stale comment (#27519) (overlookmotel)

848a4e7 linter: Update fix metadata for tsgolint rules that already provide fixes (#27408) (Mikhail Baev)

oxlint v1.87.0

🚀 Features

42dcfd2 linter/react/no-unescaped-entities: Implement suggestion (#27292) (Mikhail Baev)

cd4510d linter/unicorn/no-useless-switch-case: Implement suggestion (#27245) (Mikhail Baev)

1a7c902 linter/react/jsx-no-target-blank: Implement suggestion (#27181) (Mikhail Baev)

🐛 Bug Fixes

176b4b9 linter/jsx-a11y/label-has-associated-control: Validate label attribute values (#27302) (sama Pyb)

7d381c3 linter/jsx-a11y/mouse-events-have-key-events: Handle nullish event handlers (#27306) (sama Pyb)

4e09837 linter/jsx-a11y/lang: Validate lang expression strings (#27304) (sama Pyb)

7d28a66 linter/unicorn/numeric-separators-style: Report misgrouped BigInt literals (#27207) (breken)

e928322 linter/unicorn/no-zero-fractions: Parenthesize separator and large integers in fixer (#27206) (breken)

3d61a59 parser: Validate TypeScript type member separators (#27222) (camc314)

f08236b linter/eslint/prefer-exponentiation-operator: Preserve autofix precedence (#27150) (camc314)

7d60ae3 linter/valid-title: Continue checks after allowed words (#27146) (Cameron)

... (truncated)

Changelog

Sourced from oxlint's changelog.

[1.88.0] - 2026-10-13

🚀 Features

3c361a7 linter/unicorn/prefer-query-selector: Add allowWithVariables option (#27346) (Mikhail Baev)

[1.86.0] - 2026-09-28

🚀 Features

9d80eed linter/react/only-export-components: Support allowCompoundComponents (#27117) (Kuroda Kayn)

e05b155 linter: Add typescript/no-generated-empty-object-type (#26958) (camc314)

Commits

6941b4e release(apps): oxlint v1.88.0 && oxfmt v0.73.0 (#27643)
3c361a7 feat(linter/unicorn/prefer-query-selector): add allowWithVariables option (...
2bd08eb release(apps): oxlint v1.87.0 && oxfmt v0.72.0 (#27341)
2ae2939 release(apps): oxlint v1.86.0 && oxfmt v0.71.0 (#27132)
9d80eed feat(linter/react/only-export-components): support allowCompoundComponents ...
e05b155 feat(linter): add typescript/no-generated-empty-object-type (#26958)
88a0096 chore(oxlint): require tsgolint 7.0.2003 (#27021)
288d8cc release(apps): oxlint v1.85.0 && oxfmt v0.70.0 (#26903)
f02a64a release(apps): oxlint v1.84.0 && oxfmt v0.69.0 (#26874)
7bf68f7 release(apps): oxlint v1.83.0 && oxfmt v0.68.0 (#26631)
See full diff in compare view

Updates oxlint-plugin-react-doctor from 0.9.13 to 0.9.18

Release notes

Sourced from oxlint-plugin-react-doctor's releases.

oxlint-plugin-react-doctor@0.9.18

Patch Changes

#1943 6932e7d Thanks @aidenybai! - Match API Platform subscription IDs to the provider's resource-and-IDs unsubscribe contract.

#1920 0298eb8 Thanks @aidenybai! - Do not infer React hooks from relative helper imports in Angular component classes. Continue to check React and React ecosystem imports.

#1926 012e208 Thanks @aidenybai! - Do not classify a local state transition as a prop-driven adjustment when its only prop dependencies are called notifications. Keep checks for prop values used in guards, results, or reset dependencies.

#1911 bb00a27 Thanks @aidenybai! - Do not recommend lazy state initialization for cheap primitive toString calls, including numeric React Native Dimensions values. Keep warnings for unproven receivers and nested expensive calls.

#1919 1f6b98a Thanks @aidenybai! - Report inaccessible parent click actions when descendant handlers stop keyboard-generated clicks from reaching them.

#1928 a68f193 Thanks @aidenybai! - Match listener cleanup when both branches of conditional options have the same capture value. Keep warnings for differing capture values, changed options, and missing cleanup.

Recognize exhaustive listener-removal loops extracted into a synchronous helper when the cleanup only invokes that helper.

#1965 695e46e Thanks @aidenybai! - Add the opt-in --scope contextual reporting mode. Selected rules report existing findings when their owning function, JSX element, or file changes. Other rules retain line filtering. Support deletion-only edits, staged scans, untracked files, and separate result-cache entries while preserving existing scope defaults and diagnostic locations.

#1933 72fab66 Thanks @aidenybai! - Preserve count-based placeholder identity through a local array before mapping wrappers.

#1907 e2b047b Thanks @aidenybai! - Preserve numeric placeholder-loop identity through local key aliases, including constant-prefix keys. Continue reporting index aliases for loops over array data.

#1905 a1cff2e Thanks @aidenybai! - Keep browser reads in helpers defined inside React effects out of server-render diagnostics. Preserve warnings for render callbacks and shadowed effect functions.

#1924 89c6701 Thanks @aidenybai! - Do not classify zero-argument effect notifications as state payloads sent to a parent. Continue to report callbacks that pass local state.

#1863 e18d7da Thanks @skoshx! - ESLint adapter now respects rule requires gates. Rules that require capabilities the project doesn't have (like ssr or react-router:8) are now correctly skipped when capabilities are declared, matching the CLI behavior. Fixes false errors on dependency bumps when using the ESLint adapter with explicit capabilities.

#1896 f3f167e Thanks @skoshx! - Fix async-defer-await warnings on compound guards that compare function parameters with mutable state after an await. Keep these checks after the await so they can detect stale responses. Fixes #1895.

#1883 909b8e5 Thanks @skoshx! - fix(effect-needs-cleanup): accept Promise timer that resets its own handle in callback

Fixes #1882. The rule no longer flags a timer created in a Promise callback when the timer's own callback resets the handle to null or undefined. This is safe because the timer has already fired when the reset happens, so no live handle is lost.

#1859 281fdc9 Thanks @skoshx! - Recognize stable functions rendered as JSX components in the same file, including components that return imported exhaustive matchers. Preserve warnings for mixed utility exports, shadowed JSX names, and reassigned bindings.

#1898 a3cbae0 Thanks @aidenybai! - Accept observer cleanup after tuple loops and a single animation-frame retry chain when cleanup disconnects the observer and cancels the pending frame. Require observer cleanup on every path and keep target-specific unobserve() checks.

#1898 a3cbae0 Thanks @aidenybai! - Recognize JSX handlers passed to stable local dispatchers with an explicit React return type. Keep reporting callback registries with unknown or non-rendering return types.

#1869 7bebcfc Thanks @aidenybai! - Use constant Boolean initializers before treating numeric-looking JSX guard names as numbers. Preserve warnings for mutable bindings, destructuring defaults, and numeric values.

#1873 6790398 Thanks @aidenybai! - Require root route error boundaries only for data routers, since declarative useRoutes configurations do not use data-router error handling.

#1875 ad8bca6 Thanks @aidenybai! - Recognize legacy React.createClass components so render callbacks retain their instance this instead of being treated as function components.

#1874 c92fec1 Thanks @aidenybai! - Accept direct anchor children owned by an imported Next Link component, including the legacy Link child API.

#1872 2825dfd Thanks @aidenybai! - Allow state updater callbacks to reassign their local parameter while still reporting writes to prior-state properties and captured values.

... (truncated)

Changelog

Sourced from oxlint-plugin-react-doctor's changelog.

0.9.18

Patch Changes

#1943 6932e7d Thanks @aidenybai! - Match API Platform subscription IDs to the provider's resource-and-IDs unsubscribe contract.

#1920 0298eb8 Thanks @aidenybai! - Do not infer React hooks from relative helper imports in Angular component classes. Continue to check React and React ecosystem imports.

#1926 012e208 Thanks @aidenybai! - Do not classify a local state transition as a prop-driven adjustment when its only prop dependencies are called notifications. Keep checks for prop values used in guards, results, or reset dependencies.

#1911 bb00a27 Thanks @aidenybai! - Do not recommend lazy state initialization for cheap primitive toString calls, including numeric React Native Dimensions values. Keep warnings for unproven receivers and nested expensive calls.

#1919 1f6b98a Thanks @aidenybai! - Report inaccessible parent click actions when descendant handlers stop keyboard-generated clicks from reaching them.

#1928 a68f193 Thanks @aidenybai! - Match listener cleanup when both branches of conditional options have the same capture value. Keep warnings for differing capture values, changed options, and missing cleanup.

Recognize exhaustive listener-removal loops extracted into a synchronous helper when the cleanup only invokes that helper.

#1965 695e46e Thanks @aidenybai! - Add the opt-in --scope contextual reporting mode. Selected rules report existing findings when their owning function, JSX element, or file changes. Other rules retain line filtering. Support deletion-only edits, staged scans, untracked files, and separate result-cache entries while preserving existing scope defaults and diagnostic locations.

#1933 72fab66 Thanks @aidenybai! - Preserve count-based placeholder identity through a local array before mapping wrappers.

#1907 e2b047b Thanks @aidenybai! - Preserve numeric placeholder-loop identity through local key aliases, including constant-prefix keys. Continue reporting index aliases for loops over array data.

#1905 a1cff2e Thanks @aidenybai! - Keep browser reads in helpers defined inside React effects out of server-render diagnostics. Preserve warnings for render callbacks and shadowed effect functions.

#1924 89c6701 Thanks @aidenybai! - Do not classify zero-argument effect notifications as state payloads sent to a parent. Continue to report callbacks that pass local state.

#1863 e18d7da Thanks @skoshx! - ESLint adapter now respects rule requires gates. Rules that require capabilities the project doesn't have (like ssr or react-router:8) are now correctly skipped when capabilities are declared, matching the CLI behavior. Fixes false errors on dependency bumps when using the ESLint adapter with explicit capabilities.

#1896 f3f167e Thanks @skoshx! - Fix async-defer-await warnings on compound guards that compare function parameters with mutable state after an await. Keep these checks after the await so they can detect stale responses. Fixes #1895.

#1883 909b8e5 Thanks @skoshx! - fix(effect-needs-cleanup): accept Promise timer that resets its own handle in callback

Fixes #1882. The rule no longer flags a timer created in a Promise callback when the timer's own callback resets the handle to null or undefined. This is safe because the timer has already fired when the reset happens, so no live handle is lost.

#1859 281fdc9 Thanks @skoshx! - Recognize stable functions rendered as JSX components in the same file, including components that return imported exhaustive matchers. Preserve warnings for mixed utility exports, shadowed JSX names, and reassigned bindings.

#1898 a3cbae0 Thanks @aidenybai! - Accept observer cleanup after tuple loops and a single animation-frame retry chain when cleanup disconnects the observer and cancels the pending frame. Require observer cleanup on every path and keep target-specific unobserve() checks.

#1898 a3cbae0 Thanks @aidenybai! - Recognize JSX handlers passed to stable local dispatchers with an explicit React return type. Keep reporting callback registries with unknown or non-rendering return types.

#1869 7bebcfc Thanks @aidenybai! - Use constant Boolean initializers before treating numeric-looking JSX guard names as numbers. Preserve warnings for mutable bindings, destructuring defaults, and numeric values.

#1873 6790398 Thanks @aidenybai! - Require root route error boundaries only for data routers, since declarative useRoutes configurations do not use data-router error handling.

#1875 ad8bca6 Thanks @aidenybai! - Recognize legacy React.createClass components so render callbacks retain their instance this instead of being treated as function components.

#1874 c92fec1 Thanks @aidenybai! - Accept direct anchor children owned by an imported Next Link component, including the legacy Link child API.

... (truncated)

Commits

d1feed1 chore: version packages (#1881)
695e46e feat: add contextual diff scope (#1965)
5b301c9 FPFNFIXAPEX: fix: recognize owned request cancellation state (#1935)
72fab66 FPFNFIXAPEX: fix: preserve count-built placeholder array identity (#1933)
67531cc FPFNFIXAPEX: fix: recognize portal mount readiness state (#1929)
03b21c8 FPFNFIXAPEX: fix: distinguish layer lifecycle methods from React handlers (#1...
b880403 FPFNFIXAPEX: fix: recognize stable XState v1 service send dependencies (#1941)
8bfb598 FPFNFIXAPEX: fix: recognize primitive accumulator labels (#1930)
6bed9f6 FPFNFIXAPEX: fix: recognize clearing a revoked object URL handle (#1932)
0179427 FPFNFIXAPEX: fix: recognize complete ref-owned object URL lifetimes (#1939)
Additional commits viewable in compare view

Updates pkg-pr-new from 0.0.88 to 0.0.91

Commits

3cf47a1 release: v0.0.91
62357c7 release: v0.0.90
4ac7860 release: v0.0.89
See full diff in compare view

Updates publint from 0.3.24 to 0.3.25

Release notes

Sourced from publint's releases.

publint@0.3.25

Patch Changes

#260 54aebea - Fix FILE_INVALID_JSX_EXTENSION not detecting the .ctsx extension

#265 78604f3 - Skip file existence check for browser field values that point at another package

Changelog

Sourced from publint's changelog.

0.3.25

Patch Changes

#260 54aebea - Fix FILE_INVALID_JSX_EXTENSION not detecting the .ctsx extension

#265 78604f3 - Skip file existence check for browser field values that point at another package

Commits

b994a03 Release packages (#261)
247be99 Update dependencies (#266)
78604f3 Skip file check for browser field values that point at another package (#265)
54aebea Fix FILE_INVALID_JSX_EXTENSION not detecting the .ctsx extension (#260)
See full diff in compare view

Updates turbo from 2.10.12 to 2.11.8

Release notes

Sourced from turbo's releases.

Turborepo v2.11.8

What's Changed

Changelog

chore: Release Turborepo 2.11.7 by @github-actions[bot] in vercel/turborepo#14357

chore: Update with-vitest example by @vercel-gh-bot-3[bot] in vercel/turborepo#14355

feat: Add experimental setup future flag by @anthonyshew in vercel/turborepo#14361

fix: Remove Bash dependency from strict environment tests by @vercel-gh-bot-3[bot] in vercel/turborepo#14362

fix: Use repository package manager for automatic Turbo downloads by @vercel-gh-bot-3[bot] in vercel/turborepo#14360

chore: Improve Factory chat and model controls by @vercel-gh-bot-3[bot] in vercel/turborepo#14368

chore: Add Linear connector to Factory by @vercel-gh-bot-3[bot] in vercel/turborepo#14369

chore: Remove HarnessAgent from Factory by @vercel-gh-bot-3[bot] in vercel/turborepo#14370

chore: Remove Factory UI clutter by @vercel-gh-bot-2[bot] in vercel/turborepo#14371

feat: Add shared platform primitives for setup and shim by @anthonyshew in vercel/turborepo#14363

fix: Populate task graphs for affected and filtered listings by @sahyl in vercel/turborepo#14366

feat: Add bounded checksum-verifying downloads by @anthonyshew in vercel/turborepo#14374

feat: Validate setup npm version requests by @anthonyshew in vercel/turborepo#14375

fix: Prune unused pnpm catalog snapshots by @vercel-gh-bot-3[bot] in vercel/turborepo#14376

feat: Resolve Node versions from native declarations by @anthonyshew in vercel/turborepo#14378

feat: Honor tool-download proxy and certificate settings by @anthonyshew in vercel/turborepo#14379

feat: Check bounded setup version-request overlap by @anthonyshew in vercel/turborepo#14381

feat: Discover setup JavaScript package-manager declarations by @anthonyshew in vercel/turborepo#14382

feat: Verify local artifact bytes without HTTP by @anthonyshew in vercel/turborepo#14383

fix: Deflake concurrent agent guidance updates by @anthonyshew in vercel/turborepo#14388

chore: Remove Linear from factory by @anthonyshew in vercel/turborepo#14389

feat: Extract verified TAR archives into private staging by @anthonyshew in vercel/turborepo#14384

feat: Add experimental setup command surface by @anthonyshew in vercel/turborepo#14385

chore: Remove Factory branch naming restrictions by @vercel-gh-bot-4[bot] in vercel/turborepo#14391

chore: Consolidate CI into one required summary by @anthonyshew in vercel/turborepo#14390

docs: Clarify task graph filter traversal by @vercel-gh-bot-2[bot] in vercel/turborepo#14392

feat: Extract safe Node TAR symlinks by @anthonyshew in vercel/turborepo#14393

feat: Infer setup roots without package managers by @anthonyshew in vercel/turborepo#14395

feat: Add atomic managed tool installation inventory by @anthonyshew in vercel/turborepo#14398

fix: Invalidate managed repositories when turbo.lock changes by @anthonyshew in vercel/turborepo#14396

feat: Safely extract verified ZIP archives by @anthonyshew in vercel/turborepo#14394

test: Add installed-wrapper process launcher by @anthonyshew in vercel/turborepo#14401

fix: Avoid duplicate code CI on pull request reviews by <...
Description has been truncated

vercel · 2026-10-15T22:08:52Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
vecstore-sdk	Ready	Preview	Oct 18, 2026 9:55am UTC

changeset-bot · 2026-10-15T22:08:54Z

⚠️ No Changeset found

Latest commit: 9a8c5c1

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

coderabbitai · 2026-10-15T22:08:58Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI
Review profile: CHILL
Plan: Advanced
Run ID: 0fb28a79-8eac-47ca-986e-f92574f32ea2

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

socket-security · 2026-10-15T22:09:25Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
@types/bun@1.4.2 ⏵ 1.4.3
@electric-sql/pglite-pgvector@0.0.9 ⏵ 0.0.11
pkg-pr-new@0.0.88 ⏵ 0.0.91	⁺¹		⁺⁴
eslint-plugin-sonarjs@4.2.0 ⏵ 4.2.2		⁺¹	⁺⁷
@changesets/cli@3.0.2 ⏵ 3.0.3	⁺¹	⁺¹
cloudflare@7.1.0 ⏵ 7.3.0		⁺¹	^-1
@electric-sql/pglite@0.5.8 ⏵ 0.5.10	⁺⁷	⁺¹	⁺³
@types/node@26.5.1 ⏵ 26.6.5	⁺¹	⁺¹
publint@0.3.24 ⏵ 0.3.25	⁺¹	⁺¹
postcss@8.5.28 ⏵ 8.5.30	⁺¹	⁺¹
turbo@2.10.12 ⏵ 2.11.8	⁺¹	⁺¹	⁺¹
oxfmt@0.68.0 ⏵ 0.73.0	⁺⁸	⁺¹	⁺¹
tsdown@0.23.0 ⏵ 0.23.1	⁺¹	⁺¹	⁺¹
pg@8.23.0 ⏵ 8.23.1	⁺¹	⁺¹
@supabase/supabase-js@2.116.0 ⏵ 2.117.3	⁺¹		⁺²
oxlint@1.82.0 ⏵ 1.88.0	⁺¹	⁺¹
@webgpu/types@0.1.72 ⏵ 0.1.74		⁺¹	^-1
redis@6.2.1 ⏵ 6.3.0	⁺¹	⁺¹
oxlint-plugin-react-doctor@0.9.13 ⏵ 0.9.18

View full report

pkg-pr-new · 2026-10-15T22:09:27Z

Open in StackBlitz

npm i https://pkg.pr.new/vecstore-sdk@53

commit: 9a8c5c1

…9 updates Bumps the development group with 19 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@changesets/cli](https://github.com/changesets/changesets/tree/HEAD/packages/cli) | `3.0.2` | `3.0.3` | | [eslint-plugin-sonarjs](https://github.com/SonarSource/SonarJS) | `4.2.0` | `4.2.2` | | [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt) | `0.68.0` | `0.73.0` | | [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.82.0` | `1.88.0` | | [oxlint-plugin-react-doctor](https://github.com/millionco/react-doctor/tree/HEAD/packages/oxlint-plugin-react-doctor) | `0.9.13` | `0.9.18` | | [pkg-pr-new](https://github.com/stackblitz-labs/pkg.pr.new/tree/HEAD/packages/cli) | `0.0.88` | `0.0.91` | | [publint](https://github.com/publint/publint/tree/HEAD/packages/publint) | `0.3.24` | `0.3.25` | | [turbo](https://github.com/vercel/turborepo) | `2.10.12` | `2.11.8` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.5.1` | `26.6.5` | | [@webgpu/types](https://github.com/gpuweb/types) | `0.1.72` | `0.1.74` | | [postcss](https://github.com/postcss/postcss) | `8.5.28` | `8.5.30` | | [@electric-sql/pglite](https://github.com/electric-sql/pglite/tree/HEAD/packages/pglite) | `0.5.8` | `0.5.10` | | [@electric-sql/pglite-pgvector](https://github.com/electric-sql/pglite/tree/HEAD/packages/pglite-pgvector) | `0.0.9` | `0.0.11` | | [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js) | `2.116.0` | `2.117.3` | | [@types/bun](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/bun) | `1.4.2` | `1.4.3` | | [cloudflare](https://github.com/cloudflare/cloudflare-typescript) | `7.1.0` | `7.3.0` | | [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.23.0` | `8.23.1` | | [redis](https://github.com/redis/node-redis) | `6.2.1` | `6.3.0` | | [tsdown](https://github.com/rolldown/tsdown) | `0.23.0` | `0.23.1` | Updates `@changesets/cli` from 3.0.2 to 3.0.3 - [Release notes](https://github.com/changesets/changesets/releases) - [Changelog](https://github.com/changesets/changesets/blob/main/packages/cli/CHANGELOG.md) - [Commits](https://github.com/changesets/changesets/commits/@changesets/cli@3.0.3/packages/cli) Updates `eslint-plugin-sonarjs` from 4.2.0 to 4.2.2 - [Release notes](https://github.com/SonarSource/SonarJS/releases) - [Changelog](https://github.com/SonarSource/SonarJS/blob/master/docs/RELEASE.md) - [Commits](https://github.com/SonarSource/SonarJS/commits) Updates `oxfmt` from 0.68.0 to 0.73.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.73.0/npm/oxfmt) Updates `oxlint` from 1.82.0 to 1.88.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.88.0/npm/oxlint) Updates `oxlint-plugin-react-doctor` from 0.9.13 to 0.9.18 - [Release notes](https://github.com/millionco/react-doctor/releases) - [Changelog](https://github.com/millionco/react-doctor/blob/main/packages/oxlint-plugin-react-doctor/CHANGELOG.md) - [Commits](https://github.com/millionco/react-doctor/commits/oxlint-plugin-react-doctor@0.9.18/packages/oxlint-plugin-react-doctor) Updates `pkg-pr-new` from 0.0.88 to 0.0.91 - [Commits](https://github.com/stackblitz-labs/pkg.pr.new/commits/v0.0.91/packages/cli) Updates `publint` from 0.3.24 to 0.3.25 - [Release notes](https://github.com/publint/publint/releases) - [Changelog](https://github.com/publint/publint/blob/master/packages/publint/CHANGELOG.md) - [Commits](https://github.com/publint/publint/commits/publint@0.3.25/packages/publint) Updates `turbo` from 2.10.12 to 2.11.8 - [Release notes](https://github.com/vercel/turborepo/releases) - [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md) - [Commits](vercel/turborepo@v2.10.12...v2.11.8) Updates `@types/node` from 26.5.1 to 26.6.5 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@webgpu/types` from 0.1.72 to 0.1.74 - [Commits](gpuweb/types@v0.1.72...v0.1.74) Updates `postcss` from 8.5.28 to 8.5.30 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.28...8.5.30) Updates `@electric-sql/pglite` from 0.5.8 to 0.5.10 - [Release notes](https://github.com/electric-sql/pglite/releases) - [Changelog](https://github.com/electric-sql/pglite/blob/main/packages/pglite/CHANGELOG.md) - [Commits](https://github.com/electric-sql/pglite/commits/@electric-sql/pglite@0.5.10/packages/pglite) Updates `@electric-sql/pglite-pgvector` from 0.0.9 to 0.0.11 - [Release notes](https://github.com/electric-sql/pglite/releases) - [Changelog](https://github.com/electric-sql/pglite/blob/main/packages/pglite-pgvector/CHANGELOG.md) - [Commits](https://github.com/electric-sql/pglite/commits/@electric-sql/pglite-pgvector@0.0.11/packages/pglite-pgvector) Updates `@supabase/supabase-js` from 2.116.0 to 2.117.3 - [Release notes](https://github.com/supabase/supabase-js/releases) - [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md) - [Commits](https://github.com/supabase/supabase-js/commits/v2.117.3/packages/core/supabase-js) Updates `@types/bun` from 1.4.2 to 1.4.3 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/bun) Updates `cloudflare` from 7.1.0 to 7.3.0 - [Release notes](https://github.com/cloudflare/cloudflare-typescript/releases) - [Changelog](https://github.com/cloudflare/cloudflare-typescript/blob/main/CHANGELOG.md) - [Commits](cloudflare/cloudflare-typescript@v7.1.0...v7.3.0) Updates `pg` from 8.23.0 to 8.23.1 - [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md) - [Commits](https://github.com/brianc/node-postgres/commits/pg@8.23.1/packages/pg) Updates `redis` from 6.2.1 to 6.3.0 - [Release notes](https://github.com/redis/node-redis/releases) - [Changelog](https://github.com/redis/node-redis/blob/master/CHANGELOG.md) - [Commits](https://github.com/redis/node-redis/compare/redis@6.2.1...redis@6.3.0) Updates `tsdown` from 0.23.0 to 0.23.1 - [Release notes](https://github.com/rolldown/tsdown/releases) - [Commits](rolldown/tsdown@v0.23.0...v0.23.1) --- updated-dependencies: - dependency-name: "@changesets/cli" dependency-version: 3.0.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development - dependency-name: "@electric-sql/pglite" dependency-version: 0.5.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development - dependency-name: "@electric-sql/pglite-pgvector" dependency-version: 0.0.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development - dependency-name: "@supabase/supabase-js" dependency-version: 2.117.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development - dependency-name: "@types/bun" dependency-version: 1.4.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development - dependency-name: "@types/node" dependency-version: 26.6.5 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development - dependency-name: "@webgpu/types" dependency-version: 0.1.74 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development - dependency-name: cloudflare dependency-version: 7.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development - dependency-name: eslint-plugin-sonarjs dependency-version: 4.2.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development - dependency-name: oxfmt dependency-version: 0.72.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development - dependency-name: oxlint dependency-version: 1.87.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development - dependency-name: oxlint-plugin-react-doctor dependency-version: 0.9.17 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development - dependency-name: pg dependency-version: 8.23.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development - dependency-name: pkg-pr-new dependency-version: 0.0.91 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development - dependency-name: postcss dependency-version: 8.5.30 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development - dependency-name: publint dependency-version: 0.3.25 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development - dependency-name: redis dependency-version: 6.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development - dependency-name: tsdown dependency-version: 0.23.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development - dependency-name: turbo dependency-version: 2.11.7 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development ... Signed-off-by: dependabot[bot] <support@github.com>

…devDependencies (#62) Dependabot's development group bumps devDependencies in packages/vecstore-sdk/package.json, and Verify Changesets failed on it (#53) even though nothing published changes. A changed package.json now counts only when it differs from the base outside devDependencies. Source changes and every other package.json field still need a changeset. Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 15, 2026

vercel Bot deployed to Preview October 15, 2026 22:09

View deployment

dependabot Bot force-pushed the dependabot/bun/development-9f1ed3fb26 branch from 3dd1c13 to 2d33f24 Compare October 18, 2026 09:49

vercel Bot deployed to Preview October 18, 2026 09:50

View deployment

dependabot Bot force-pushed the dependabot/bun/development-9f1ed3fb26 branch from 2d33f24 to 9a8c5c1 Compare October 18, 2026 09:55

vercel Bot deployed to Preview October 18, 2026 09:55

View deployment

PunGrumpy added the skip-changeset The pull request needs no release note label Oct 20, 2026

PunGrumpy mentioned this pull request Oct 20, 2026

ci(changesets): skip the check when a package.json bump only touches devDependencies #62

Merged

PunGrumpy merged commit 77a4430 into main Oct 21, 2026
13 of 14 checks passed

dependabot Bot deleted the dependabot/bun/development-9f1ed3fb26 branch October 21, 2026 04:31

Navigation Menu

Repository navigation

chore(deps-dev): bump the development group across 1 directory with 19 updates - #53

chore(deps-dev): bump the development group across 1 directory with 19 updates#53
PunGrumpy merged 1 commit into
mainfrom
dependabot/bun/development-9f1ed3fb26

dependabot Bot commented on behalf of github Oct 15, 2026 •

edited

Loading

Uh oh!

vercel Bot commented Oct 15, 2026 •

edited

Loading

Uh oh!

changeset-bot Bot commented Oct 15, 2026 •

edited

Loading

Uh oh!

coderabbitai Bot commented Oct 15, 2026 •

edited

Loading

Review skipped

Uh oh!

socket-security Bot commented Oct 15, 2026 •

edited

Loading

Uh oh!

pkg-pr-new Bot commented Oct 15, 2026 •

edited

Loading

Uh oh!

Uh oh!

This branch was successfully deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

@​changesets/cli@​3.0.3

Patch Changes

3.0.3

Patch Changes

oxfmt v0.73.0

💥 BREAKING CHANGES

🚀 Features

🐛 Bug Fixes

📚 Documentation

oxfmt v0.72.0

💥 BREAKING CHANGES

🚀 Features

🐛 Bug Fixes

[0.73.0] - 2026-10-13

🚀 Features

📚 Documentation

[0.67.0] - 2026-09-07

🛡️ Security

[0.64.0] - 2026-08-18

🚀 Features

📚 Documentation

[0.62.0] - 2026-08-03

🐛 Bug Fixes

[0.59.0] - 2026-07-13

🐛 Bug Fixes

[0.55.0] - 2026-06-15

🚀 Features

[0.54.0] - 2026-06-08

📚 Documentation

oxlint v1.88.0

💥 BREAKING CHANGES

🚀 Features

🐛 Bug Fixes

⚡ Performance

📚 Documentation

oxlint v1.87.0

🚀 Features

🐛 Bug Fixes

[1.88.0] - 2026-10-13

🚀 Features

[1.86.0] - 2026-09-28

🚀 Features

oxlint-plugin-react-doctor@0.9.18

Patch Changes

0.9.18

Patch Changes

publint@0.3.25

Patch Changes

0.3.25

Patch Changes

Turborepo v2.11.8

What's Changed

Changelog

Uh oh!

vercel Bot commented Oct 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

changeset-bot Bot commented Oct 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ No Changeset found

Uh oh!

coderabbitai Bot commented Oct 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

socket-security Bot commented Oct 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

pkg-pr-new Bot commented Oct 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

This branch was successfully deployed

Reviewers

Uh oh!

Assignees

Labels

dependabot Bot commented on behalf of github Oct 15, 2026 •

edited

Loading

`@changesets/cli@3`.0.3

vercel Bot commented Oct 15, 2026 •

edited

Loading

changeset-bot Bot commented Oct 15, 2026 •

edited

Loading

coderabbitai Bot commented Oct 15, 2026 •

edited

Loading

socket-security Bot commented Oct 15, 2026 •

edited

Loading

pkg-pr-new Bot commented Oct 15, 2026 •

edited

Loading