build(deps-dev): bump the dev group across 1 directory with 7 updates by dependabot[bot] · Pull Request #311 · yea-protocol/yea

dependabot · 2026-10-24T12:32:18Z

Bumps the dev group with 7 updates in the / directory:

Package	From	To
@biomejs/biome	`2.5.15`	`2.6.2`
lefthook	`2.2.1`	`2.2.2`
oxlint	`1.87.0`	`1.89.0`
vitest	`5.0.4`	`5.0.5`
@anthropic-ai/sdk	`0.133.0`	`0.137.0`
gpt-tokenizer	`4.0.0`	`4.1.0`
wrangler	`4.149.0`	`4.151.3`

Updates @biomejs/biome from 2.5.15 to 2.6.2

Release notes

Sourced from @biomejs/biome's releases.

Biome CLI v2.6.2

2.6.2

Minor Changes
#11479 5c60ba8 Thanks @nhedger! - Added a --git flag to biome init. The flag enables Git VCS integration and sets vcs.useIgnoreFile to true in the generated configuration, even when the command runs outside a Git repository.

#11742 3a1356d Thanks @Netail! - Added the biome migrate stylelint command. It imports a Stylelint configuration and its ignore settings into your Biome configuration, mapping Stylelint rules to their Biome equivalents. Pass --write to apply the changes, and --include-inspired or --include-nursery to migrate additional rules.
#12318 774b5b5 Thanks @Netail! - Added the new assist action useGraphqlSortedDefinitions, which sorts the named definitions of a GraphQL document, such as types, type extensions, directives, fragments, and operations.

Invalid:
type User {
  id: ID!
}
enum Role {
ADMIN
USER
}
directive @auth on FIELD_DEFINITION
#6886 3479d15 Thanks @christymcgrory! - biome rage now shows the resolved files.includes and files.ignoreUnknown configuration.

#11102 0874b7f Thanks @gameroman! - Added support for useTailwindSortedClasses rule in HTML-ish files.
#10711 40de5a0 Thanks @soconnor-seeq! - Adds a new resolutionKind option for object-syntax plugin entries.

This allows shared Biome configs in monorepos to load local Grit plugins from the package that declares them instead of resolving plugin paths from the consuming project.
{
  "plugins": [
    { "path": "./grit/no-debugger.grit", "resolutionKind": "config" },
    { "path": "local-plugin.grit", "resolutionKind": "project" },
    { "path": "local-plugin.grit" }
  ]
}
Use resolutionKind: "config" to resolve the plugin from the configuration file that declares it. Use resolutionKind: "project" to resolve the plugin from the consuming project. When omitted, resolutionKind defaults to project. This only affects plugin resolution; includes still apply to end-user project files as usual.
#11432 4befd08 Thanks @ematipico! - Added biome inspect config to show resolved configuration values and their origins as human-readable diagnostics, including matching overrides.

Configuration files can also extend other configurations up to ten levels deep. Repeated references to the same resolved file are ignored with an information diagnostic, while resolving multiple versions of one extended package produces an error.

... (truncated)

Changelog

Sourced from @biomejs/biome's changelog.

2.6.2

Minor Changes
#11479 5c60ba8 Thanks @nhedger! - Added a --git flag to biome init. The flag enables Git VCS integration and sets vcs.useIgnoreFile to true in the generated configuration, even when the command runs outside a Git repository.

#11742 3a1356d Thanks @Netail! - Added the biome migrate stylelint command. It imports a Stylelint configuration and its ignore settings into your Biome configuration, mapping Stylelint rules to their Biome equivalents. Pass --write to apply the changes, and --include-inspired or --include-nursery to migrate additional rules.
#12318 774b5b5 Thanks @Netail! - Added the new assist action useGraphqlSortedDefinitions, which sorts the named definitions of a GraphQL document, such as types, type extensions, directives, fragments, and operations.

Invalid:
type User {
  id: ID!
}
enum Role {
ADMIN
USER
}
directive @auth on FIELD_DEFINITION
#6886 3479d15 Thanks @christymcgrory! - biome rage now shows the resolved files.includes and files.ignoreUnknown configuration.

#11102 0874b7f Thanks @gameroman! - Added support for useTailwindSortedClasses rule in HTML-ish files.
#10711 40de5a0 Thanks @soconnor-seeq! - Adds a new resolutionKind option for object-syntax plugin entries.

This allows shared Biome configs in monorepos to load local Grit plugins from the package that declares them instead of resolving plugin paths from the consuming project.
{
  "plugins": [
    { "path": "./grit/no-debugger.grit", "resolutionKind": "config" },
    { "path": "local-plugin.grit", "resolutionKind": "project" },
    { "path": "local-plugin.grit" }
  ]
}
Use resolutionKind: "config" to resolve the plugin from the configuration file that declares it. Use resolutionKind: "project" to resolve the plugin from the consuming project. When omitted, resolutionKind defaults to project. This only affects plugin resolution; includes still apply to end-user project files as usual.
#11432 4befd08 Thanks @ematipico! - Added biome inspect config to show resolved configuration values and their origins as human-readable diagnostics, including matching overrides.

Configuration files can also extend other configurations up to ten levels deep. Repeated references to the same resolved file are ignored with an information diagnostic, while resolving multiple versions of one extended package produces an error.

#11477 ab05554 Thanks @nhedger! - Added automatic Git VCS integration when running biome init inside a Git repository, including from nested directories and Git worktrees. The generated configuration sets vcs.enabled and vcs.useIgnoreFile to true, with vcs.clientKind set to "git".

... (truncated)

Commits

0d9aef6 ci: release (#12495)
30ffad1 ci: release (#12493)
8c814e1 ci: release (#12065)
e51cec2 chore: update sponsors (#12428)
cb88f07 feat(lint): add noSvelteClassDirective (#12254)
774b5b5 feat: sorted GraphQL documents (#12318)
914dca7 feat(lint/js): add noUselessCall (#12082)
a3fa0d6 feat(graphql_analyze): implement useSortedArguments (#12282)
5f8ea6c feat(lint): add noVueLifecycleAfterAwait (#12229)
b92638b feat(lint): add noVueShadowNativeEvents (#12136)
Additional commits viewable in compare view

Updates lefthook from 2.2.1 to 2.2.2

Release notes

Sourced from lefthook's releases.

v2.2.2

Changelog

4aeffd72a6e3ea846c2054cffd6294c943fd7fbb fix: cleanup only current stash hash (#1597)

db62412c82ddac71cf536e60e50edb2826624870 packaging: add support for android (#1591)

e3fa81b1f01881829ef95e37211da7923a4fd6df refactor(filter): simplify mimetype matching (#1596)

Changelog

Sourced from lefthook's changelog.

2.2.2

fix: cleanup only current stash hash (#1597) by @mrexox

refactor: simplify mimetype matching (#1596) by @scop

packaging: add support for android (#1591) by @mrexox

Commits

eb4e504 2.2.2: keep backups for worktree flows and release android NPM package
4aeffd7 fix: cleanup only current stash hash (#1597)
e3fa81b refactor(filter): simplify mimetype matching (#1596)
db62412 packaging: add support for android (#1591)
See full diff in compare view

Attestation changes

This version has no provenance attestation, while the previous version (2.2.1) was attested. Review the package versions before updating.

Updates oxlint from 1.87.0 to 1.89.0

Release notes

Sourced from oxlint's releases.

oxlint v1.89.0

💥 BREAKING CHANGES

e3c1b11 ast: [BREAKING] Preserve lone surrogates in static property names (#27095) (Dunqing)

a0a987c ast: [BREAKING] Preserve lone surrogates in static member names (#26677) (Dunqing)

🚀 Features

770ada4 linter: Mark vue 3 rules as recommended (#27717) (Cam McHenry)

ba38c1d linter: Mark react/react-hooks rules as recommended (#27701) (Cam McHenry)

d85a3ba linter: Mark promise rules as recommended (#27693) (Cam McHenry)

e71c88a linter: Mark node rule as recommended (#27692) (Cam McHenry)

7213f61 linter: Mark nextjs rules as recommended (#27691) (Cam McHenry)

d7c6b26 linter: Mark jsx-a11y rules as recommended (#27690) (Cam McHenry)

199dfdc linter: Mark jsdoc rules as recommended (#27689) (Cam McHenry)

780bff3 linter: Mark jest/vitest rules as recommended (#27672) (Cam McHenry)

6ae6859 linter: Mark import rules as recommended (#27671) (Cam McHenry)

b7a1df3 linter: Mark unicorn rules as recommended (#27670) (Cam McHenry)

c44a355 linter: Mark typescript rules as recommended from upstream (#27634) (Cam McHenry)

6b49dba linter: Mark eslint rules as recommended from upstream (#27632) (Cam McHenry)

🐛 Bug Fixes

7c47246 linter: Check module specifiers and string values that contain lone surrogates (#26717) (Dunqing)

782ab6e linter: Search string values without UTF-8 conversion (#26716) (Dunqing)

326904f linter/unicorn/no-useless-undefined: Allow undefined in React.useRef (#25027) (Chris Dokurno)

f9cf165 linter/unicorn/prefer-spread: Ignore super method calls (#27868) (camc314)

00484e1 linter/eslint/prefer-const: Report destructuring assignments inside blocks (#27856) (camc314)

9c35461 linter/eslint/sort-vars: Report every out-of-order declaration (#27767) (camc314)

01e1c5e linter/unicorn/prefer-string-replace-all: Resolve regex variables (#27769) (camc314)

7f474d5 linter/eslint/no-loop-func: Detect writes after the loop (#27754) (camc314)

4b7fea6 linter/eslint/block-scoped-var: Ignore declarations without writes (#27760) (camc314)

2947917 linter/eslint/no-lonely-if: Check final else blocks in else-if chains (#27759) (camc314)

fc039b5 linter/eslint/sort-imports: Check imports after other statements (#27749) (camc314)

1acba97 linter/unicorn/prefer-at: Report slice index reads once (#27762) (camc314)

6190e26 linter/eslint/prefer-arrow-callback: Ignore functions used as conditional tests (#27533) (Anzal Husain Abidi)

b3cdaaf linter/eslint/sort-keys: Check computed identifier names (#27748) (camc314)

170e608 linter/unicorn/prefer-native-coercion-functions: Check object methods and function properties (#27750) (camc314)

9261df7 linter/unicorn/prefer-string-raw: Check object property values (#27758) (camc314)

ddea86b linter/eslint/prefer-template: Report separate nested concatenations (#27764) (camc314)

2c67197 linter/eslint/no-unused-vars: Count conditional calls in sequences as uses (#27755) (camc314)

7f22fa0 linter/unicorn/prefer-regexp-test: Check logical operands in boolean contexts (#27761) (camc314)

3c44398 linter/eslint/class-methods-use-this: Count this in parameter defaults (#27756) (camc314)

d85923f linter/eslint/no-param-reassign: Report rest parameter writes (#27765) (camc314)

8ea47bb linter/unicorn/prefer-type-error: Handle parenthesized type checks (#27766) (camc314)

e96856c linter/unicorn/catch-error-name: Check unused underscore-prefixed names (#27751) (camc314)

d8ca399 linter/unicorn/no-array-callback-reference: Ignore callback factory calls (#27763) (camc314)

1267ab8 linter/eslint/max-params: Count rest parameters (#27757) (camc314)

9ff25c3 linter/eslint/no-useless-assignment: Report dead stores to function parameters (#27735) (camc314)

ee5e730 linter/eslint/no-setter-return: Check setters in property descriptors (#27731) (camc314)

... (truncated)

Changelog

Sourced from oxlint's changelog.

[1.89.0] - 2026-10-19

🐛 Bug Fixes

9a424c2 oxlint,oxfmt: Correct Node.js TypeScript support range (#27699) (camc314)

[1.88.0] - 2026-10-13

🚀 Features

3c361a7 linter/unicorn/prefer-query-selector: Add allowWithVariables option (#27346) (Mikhail Baev)

[1.86.0] - 2026-09-28

🚀 Features

9d80eed linter/react/only-export-components: Support allowCompoundComponents (#27117) (Kuroda Kayn)

e05b155 linter: Add typescript/no-generated-empty-object-type (#26958) (camc314)

[1.82.0] - 2026-09-07

🚀 Features

6a0e19c linter/eslint/no-unmodified-loop-condition: Support checkConditionalExpressions option (#26249) (camc314)

[1.81.0] - 2026-08-31

📚 Documentation

d5be037 linter/typescript/switch-exhaustiveness-check: Clarify default case comment pattern (#26100) (camc314)

[1.79.0] - 2026-08-18

💥 BREAKING CHANGES

8c4552d linter: [BREAKING] Split react/react-compiler into per-category rules (#25500) (Boshen)

🐛 Bug Fixes

228e8e0 linter: Resolve inactive React compiler rules (#25830) (Boshen)

aa49d86 linter: Allow spread rule options in config types (#25675) (ch3rry)

36f8451 linter/eslint/no-eval: Align indirect default with ESLint (#25656) (camc314)

beb724d linter/eslint/no-unused-vars: Report bare underscore parameters (#25663) (camc314)

4004c10 linter/eslint/no-irregular-whitespace: Check comments by default (#25660) (camc314)

285820e linter/no-large-snapshots: Precompile and document allowed snapshot matchers (#25611) (Mikhail Baev)

4df5835 linter: Allow capitalized built-in calls (#25516) (Boshen)

[1.78.0] - 2026-08-10

🚀 Features

... (truncated)

Commits

07ed78f release(apps): oxlint v1.89.0 && oxfmt v0.74.0 (#27961)
9a424c2 fix(oxlint,oxfmt): correct Node.js TypeScript support range (#27699)
6941b4e release(apps): oxlint v1.88.0 && oxfmt v0.73.0 (#27643)
3c361a7 feat(linter/unicorn/prefer-query-selector): add allowWithVariables option (...
See full diff in compare view

Updates vitest from 5.0.4 to 5.0.5

Release notes

Sourced from vitest's releases.

v5.0.5

🐞 Bug Fixes

Keep vite default fs.deny with api token file - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in vitest-dev/vitest#11578 (28dc1)

Handle quoted file names in --changed - by @sheremet-va in vitest-dev/vitest#11583 (14921)

Add data to the import.meta.hot stub - by @sheremet-va in vitest-dev/vitest#11590 (3a828)

Set skip in skipIf, ignore undefined options - by @sheremet-va in vitest-dev/vitest#11591 (d523a)

Skip builtin loading in async leak detector - by @sheremet-va in vitest-dev/vitest#11598 (fe86a)

Keep the import frame in native loader errors - by @sheremet-va in vitest-dev/vitest#11599 (9697b)

Run hook cleanups when a later hook fails - by @sheremet-va in vitest-dev/vitest#11605 (6c5a4)

Release mocks of finished test files - by @sheremet-va in vitest-dev/vitest#11607 (e9c3d)

Abort all running tests on cancel - by @sheremet-va in vitest-dev/vitest#11606 (6621a)

browser:

Ignore synthetic pagehide events - by @sheremet-va in vitest-dev/vitest#11582 (ca081)

Run plugin buildStart on server creation - by @sheremet-va in vitest-dev/vitest#11593 (ea611)

Drop late connections of closed sessions - by @sheremet-va in vitest-dev/vitest#11600 (f161e)

Wait 30s for the browser to close - by @sheremet-va in vitest-dev/vitest#11601 (6498b)

Run global setup once with instances - by @sheremet-va in vitest-dev/vitest#11596 (8dd67)

reporter:

End reason &[#39](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/39);failed&[#39](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/39); on worker crash - by @AriPerkkio in vitest-dev/vitest#11568 (6ae8e)

View changes on GitHub

Commits

7a825db chore: release v5.0.5 (#11609)
6621a72 fix: abort all running tests on cancel (#11606)
e9c3d72 fix: release mocks of finished test files (#11607)
8dd67c2 fix(browser): run global setup once with instances (#11596)
6c5a447 fix: run hook cleanups when a later hook fails (#11605)
9697b38 fix: keep the import frame in native loader errors (#11599)
6498b66 fix(browser): wait 30s for the browser to close (#11601)
f161e6d fix(browser): drop late connections of closed sessions (#11600)
fe86a64 fix: skip builtin loading in async leak detector (#11598)
6ae8e89 fix(reporter): end reason 'failed' on worker crash (#11568)
Additional commits viewable in compare view

Updates @anthropic-ai/sdk from 0.133.0 to 0.137.0

Release notes

Sourced from @anthropic-ai/sdk's releases.

sdk-v0.137.0

Features

api: add org webhook endpoints and user profile enforcement events

Chores

ci: run the changelog check on a standard runner

tests: make credential tests independent of the caller's environment

sdk-v0.136.0

Features

api: add data_refreshed_at and has_more to analytics report pages

api: add workspace rate-limit updates to the Admin API

api: make User Profiles generally available

client: yield server-sent events with unrecognized event names

tools: accept every tool definition field in the tool helpers

Bug Fixes

client: treat x-amz-security-token as a sensitive header

tools: keep $ sequences literal in memory tool str_replace

Chores

ci: skip the changelog check on draft pull requests

docs: add credential expiry descriptions to the Managed Agents API reference

docs: add Messages API request descriptions

docs: correct plugin manifest_version and reach descriptions

docs: improve Managed Agents memory store descriptions

docs: improve Managed Agents vault and credential descriptions

internal: bump playwright-core in the browser ecosystem tests

tests: cover OpenTelemetry failures, propagation and environment variables

sdk-v0.135.0

Features

api: add between_tools to thinking types in model capabilities

api: add the speed parameter and usage.speed to Messages

api: return a Console organization's usage-tier spend cap as a read-only spend limit

Bug Fixes

client: close streams dropped without being read to the end

client: keep an unread JSONL response open while it is held

... (truncated)

Changelog

Sourced from @anthropic-ai/sdk's changelog.

0.137.0 (2026-10-20)

Features

api: add org webhook endpoints and user profile enforcement events

Chores

ci: run the changelog check on a standard runner

tests: make credential tests independent of the caller's environment

0.136.0 (2026-10-20)

Features

api: add data_refreshed_at and has_more to analytics report pages

api: add workspace rate-limit updates to the Admin API

api: make User Profiles generally available

client: yield server-sent events with unrecognized event names

tools: accept every tool definition field in the tool helpers

Bug Fixes

client: treat x-amz-security-token as a sensitive header

tools: keep $ sequences literal in memory tool str_replace

Chores

ci: skip the changelog check on draft pull requests

docs: add credential expiry descriptions to the Managed Agents API reference

docs: add Messages API request descriptions

docs: correct plugin manifest_version and reach descriptions

docs: improve Managed Agents memory store descriptions

docs: improve Managed Agents vault and credential descriptions

internal: bump playwright-core in the browser ecosystem tests

tests: cover OpenTelemetry failures, propagation and environment variables

0.135.0 (2026-10-15)

Features

api: add between_tools to thinking types in model capabilities

api: add the speed parameter and usage.speed to Messages

api: return a Console organization's usage-tier spend cap as a read-only spend limit

Bug Fixes

... (truncated)

Commits

9c65624 release: 0.137.0
04151db Merge pull request #970 from anthropics/synced/published
5aae8ce feat(api): add org webhook endpoints and user profile enforcement events
261ead0 codegen metadata
20d7c14 codegen metadata
a7736e6 chore(ci): run the changelog check on a standard runner
48ecaa4 Merge branch 'main'
accbdd8 release: packages/aws-sdk 0.9.0, packages/bedrock-sdk 0.36.0, packages/vertex...
b00aefc Merge pull request #968 from anthropics/synced/published
521ffc1 Merge branch 'main'
Additional commits viewable in compare view

Updates gpt-tokenizer from 4.0.0 to 4.1.0

Release notes

Sourced from gpt-tokenizer's releases.

4.1.0

4.1.0 (2026-10-18)

Features

add a tokenizer-integrated incremental token counter (19b369d)

4.0.4

4.0.4 (2026-10-18)

Performance Improvements

optimize BPE hot paths and preserve Unicode and streaming correctness (92671d2)

4.0.3

4.0.3 (2026-10-15)

Bug Fixes

recognise allowed special tokens anywhere in the text (#90) (08fb752)

4.0.2

4.0.2 (2026-10-15)

Bug Fixes

match tiktoken for U+0085 and U+FEFF when splitting and encoding (#91) (a3205e4)

4.0.1

4.0.1 (2026-10-15)

Performance Improvements

make the byte pair merge O(n log n) on long pieces (#92) (51df02d)

Commits

19b369d feat: add a tokenizer-integrated incremental token counter
78ab31a docs: restore scoped pure-JS speed and memory claims
340cfc1 docs: rank benchmark panels and clarify initialization wins
c219fe8 test: preserve single-read decode semantics and record rejected experiments
6cf6be4 bench: archive rejected Node-only Record experiment with anonymous metadata
5b31c49 bench: reject short string decoder with accessor evidence
825a6d3 bench: preserve rejected short array decoder experiment
8dc68fc bench: archive rejected ASCII regex and unconditional record experiments
b631cfd docs: compare all benchmark contenders and emphasize package adoption
bb3b244 chore: collapse generated measurement evidence in PR diffs
Additional commits viewable in compare view

Updates wrangler from 4.149.0 to 4.151.3

Release notes

Sourced from wrangler's releases.

wrangler@4.151.3

Patch Changes

#15611 4508172 Thanks @taylorlee! - Allow wrangler dev to start module Workers without a default export

Previously, wrangler dev failed to start module Workers that exported only named entrypoints, such as RPC services, unless an unused default export was added. These Workers now start normally in local development without that workaround.

#16370 61fc739 Thanks @WalshyDev! - Fetch the remote config diff from the configured compliance region

When a Worker was last deployed from the dashboard, wrangler deploy and wrangler versions upload download its remote configuration to compare with the local one. These requests ignored the compliance_region field in the Wrangler configuration file and only honoured the CLOUDFLARE_COMPLIANCE_REGION environment variable. A FedRAMP High Worker configured through the config file would send them to api.cloudflare.com instead of api.fed.cloudflare.com, and the deploy would fail with authentication errors. They now use the same compliance region as the rest of the deploy.

#15846 a88cac4 Thanks @oddharsh! - Fail with an error instead of hanging when local dev requests can't work under Bun

Bun's fetch() ignores the undici dispatcheroven-sh/bun#39247createTestHarness()'s server.fetch() and server.getWorker()'s fetch(), email() and scheduled() now throw a UserError, requests to the dev server URL get a 503 naming the cause, and starting remote bindings throws a UserError. Each of these used to hang with no error. server.getWorker().getEnv() and getExport() keep working under Bun.

#16359 262021d Thanks @tw4! - Stop --strict deploys and version uploads from aborting when the API omits optional binding fields

Previously, wrangler deploy --strict and wrangler versions upload --strict could report a destructive change for an unchanged configuration, for example an R2 bucket in the default jurisdiction, because a field the API left out was compared as removed. Missing and unset optional fields are now treated as equal, so these commands proceed when the local configuration matches the deployed Worker.

Updated dependencies [3464abc]:

miniflare@5.20261019.1-beta

wrangler@4.151.2

Patch Changes

#16307 37ab91c Thanks @dependabot! - Update dependencies of "miniflare", "wrangler"

The following dependency versions have been updated:

Dependency From To

@cloudflare/workers-types ^5.20261006.1 ^5.20261016.1

workerd 1.20261012.1 1.20261016.1

#16352 0ae7926 Thanks @dependabot! - Update dependencies of "miniflare", "wrangler"

The following dependency versions have been updated:

Dependency From To

@cloudflare/workers-types ^5.20261016.1 ^5.20261019.1

workerd 1.20261016.1 1.20261019.1

Updated dependencies [37ab91c, 0ae7926]:

miniflare@5.20261019.0-beta

wrangler@4.151.1

Patch Changes

#15541 e13d5cc Thanks @mack-erel! - Keep remote dev sessions alive through transient network failures

... (truncated)

Commits

7d57659 Version Packages (#16358)
017bf9b chore(vitest): migrate remaining workspace tests to v5 (#16259)
61fc739 [wrangler] Fetch the remote config diff from the configured compliance region...
a88cac4 [wrangler] Fail with an error instead of hanging under Bun (#15846)
4508172 [wrangler] Support named-only module Workers in dev (#15611)
601ca30 Version Packages (#16313)
89cc3c7 [wrangler] Fix deploy warning snapshots (#16353)
fc51b96 De-centralize CLI specific messaging (#16225)
e7f9e4e Version Packages (#16287)
4a5377f [wrangler] Hide unusable dev hotkeys under Turborepo (#13742)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dev group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.15` | `2.6.2` | | [lefthook](https://github.com/evilmartians/lefthook) | `2.2.1` | `2.2.2` | | [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.87.0` | `1.89.0` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.4` | `5.0.5` | | [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.133.0` | `0.137.0` | | [gpt-tokenizer](https://github.com/niieani/gpt-tokenizer) | `4.0.0` | `4.1.0` | | [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.149.0` | `4.151.3` | Updates `@biomejs/biome` from 2.5.15 to 2.6.2 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.6.2/packages/@biomejs/biome) Updates `lefthook` from 2.2.1 to 2.2.2 - [Release notes](https://github.com/evilmartians/lefthook/releases) - [Changelog](https://github.com/evilmartians/lefthook/blob/master/CHANGELOG.md) - [Commits](evilmartians/lefthook@v2.2.1...v2.2.2) Updates `oxlint` from 1.87.0 to 1.89.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.89.0/npm/oxlint) Updates `vitest` from 5.0.4 to 5.0.5 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/vitest) Updates `@anthropic-ai/sdk` from 0.133.0 to 0.137.0 - [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases) - [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md) - [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.133.0...sdk-v0.137.0) Updates `gpt-tokenizer` from 4.0.0 to 4.1.0 - [Release notes](https://github.com/niieani/gpt-tokenizer/releases) - [Commits](niieani/gpt-tokenizer@4.0.0...4.1.0) Updates `wrangler` from 4.149.0 to 4.151.3 - [Release notes](https://github.com/cloudflare/workers-sdk/releases) - [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.151.3/packages/wrangler) --- updated-dependencies: - dependency-name: "@biomejs/biome" dependency-version: 2.6.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev - dependency-name: lefthook dependency-version: 2.2.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev - dependency-name: oxlint dependency-version: 1.89.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev - dependency-name: vitest dependency-version: 5.0.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev - dependency-name: "@anthropic-ai/sdk" dependency-version: 0.137.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev - dependency-name: gpt-tokenizer dependency-version: 4.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev - dependency-name: wrangler dependency-version: 4.151.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 24, 2026

solomonjames merged commit 8719326 into main Oct 24, 2026
16 checks passed

solomonjames deleted the dependabot/npm_and_yarn/dev-2b2f1f9adb branch October 24, 2026 12:42

Navigation Menu

Repository navigation

build(deps-dev): bump the dev group across 1 directory with 7 updates - #311

build(deps-dev): bump the dev group across 1 directory with 7 updates#311
solomonjames merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-2b2f1f9adb

dependabot Bot commented on behalf of github Oct 24, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Dependency	From	To
`@cloudflare/workers-types`	^5.20261006.1	^5.20261016.1
workerd	1.20261012.1	1.20261016.1

Dependency	From	To
`@cloudflare/workers-types`	^5.20261016.1	^5.20261019.1
workerd	1.20261016.1	1.20261019.1

Conversation

dependabot Bot commented on behalf of github Oct 24, 2026

Biome CLI v2.6.2

2.6.2

Minor Changes

2.6.2

Minor Changes

v2.2.2

Changelog

2.2.2

oxlint v1.89.0

💥 BREAKING CHANGES

🚀 Features

🐛 Bug Fixes

[1.89.0] - 2026-10-19

🐛 Bug Fixes

[1.88.0] - 2026-10-13

🚀 Features

[1.86.0] - 2026-09-28

🚀 Features

[1.82.0] - 2026-09-07

🚀 Features

[1.81.0] - 2026-08-31

📚 Documentation

[1.79.0] - 2026-08-18

💥 BREAKING CHANGES

🐛 Bug Fixes

[1.78.0] - 2026-08-10

🚀 Features

v5.0.5

🐞 Bug Fixes

View changes on GitHub

sdk-v0.137.0

Features

Chores

sdk-v0.136.0

Features

Bug Fixes

Chores

sdk-v0.135.0

Features

Bug Fixes

0.137.0 (2026-10-20)

Features

Chores

0.136.0 (2026-10-20)

Features

Bug Fixes

Chores

0.135.0 (2026-10-15)

Features

Bug Fixes

4.1.0

4.1.0 (2026-10-18)

Features

4.0.4

4.0.4 (2026-10-18)

Performance Improvements

4.0.3

4.0.3 (2026-10-15)

Bug Fixes

4.0.2

4.0.2 (2026-10-15)

Bug Fixes

4.0.1

4.0.1 (2026-10-15)

Performance Improvements

wrangler@4.151.3

Patch Changes

wrangler@4.151.2

Patch Changes

wrangler@4.151.1

Patch Changes

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects