Skip to content

fix(deps): update all non-major dependencies - #119

Closed
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch
Closed

fix(deps): update all non-major dependencies#119
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Feb 28, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
@ai-sdk/openai (source) 4.0.114.0.16 age confidence
@ai-sdk/react (source) 4.0.304.0.34 age confidence
@auth/core (source) 0.41.10.41.2 age confidence
@aws-sdk/client-s3 (source) 3.1085.03.1090.0 age confidence
@aws-sdk/s3-request-presigner (source) 3.1085.03.1090.0 age confidence
@tailwindcss/postcss (source) 4.3.24.3.3 age confidence
ai (source) 7.0.287.0.31 age confidence
autoprefixer 10.5.310.5.4 age confidence
cva 1.0.0-beta.41.0.0-beta.8 age confidence
discord-api-types (source) 0.38.490.38.50 age confidence
immer 11.1.1111.1.15 age confidence
next-auth (source) 5.0.0-beta.305.0.0-beta.31 age confidence
tailwindcss (source) 4.3.24.3.3 age confidence
wrangler (source) 4.110.04.112.0 age confidence

Release Notes

vercel/ai (@​ai-sdk/openai)

v4.0.16

Compare Source

Patch Changes
  • 75f86f4: fix(provider/openai, provider/open-responses): throw a descriptive error when the Responses API returns a 200 with no output

    A successful (200) Responses body missing the output array previously threw an opaque output is not iterable TypeError from doGenerate. Both providers now surface a clear APICallError ("Responses API returned no output …"), including the incomplete-details reason (and status, for open-responses) when present. When the body includes a response.error, its message is surfaced first so upstream error details aren't masked by the generic fallback. This makes malformed/incomplete upstream responses actionable instead of a cryptic crash.

  • Updated dependencies [cd06458]

v4.0.15

Compare Source

Patch Changes
  • 0063c2d: Add the client-executed OpenAI Responses API computer tool with batched actions and screenshot outputs.

v4.0.14

Compare Source

Patch Changes

v4.0.13

Compare Source

Patch Changes
  • 7805e4a: Fix realtime transcription auth header handling: per-call authorization headers now override configuration headers regardless of header-key casing (last case-variant wins), and the Bearer scheme is matched case-insensitively.
  • cd12954: Reject empty OpenAI, Anthropic, and Replicate base URLs with a helpful AI SDK
    invalid argument error.
  • Updated dependencies [4be62c1]
  • Updated dependencies [7805e4a]
  • Updated dependencies [cd12954]
vercel/ai (@​ai-sdk/react)

v4.0.34

Compare Source

Patch Changes

v4.0.33

Compare Source

Patch Changes
  • ai@​7.0.30

v4.0.32

Compare Source

Patch Changes
  • ai@​7.0.29

v4.0.31

Compare Source

Patch Changes
  • 48e7e78: Harden MCP Apps handling of server-supplied resource metadata and the host/iframe bridge:

    • Runtime-validate _meta.ui and drop malformed or non-string fields.
    • Gate iframe permissions deny-by-default via a new sandbox.allowedPermissions allowlist.
    • Derive a concrete postMessage target origin and validate inbound message origins.
    • Validate inbound bridge params: limit resources/read to ui:// resources and allow only https/http/mailto in ui/open-link.
    • Add fingerprintMCPAppResource / detectMCPAppResourceDrift for pinning and comparing app resources.
  • Updated dependencies [48e7e78]

nextauthjs/next-auth (@​auth/core)

v0.41.2

Compare Source

Bugfixes

  • providers: add issuer to GitHub provider for RFC 9207 compliance (#​13410)

Other

  • sync package versions with npm registry (#​13414)
aws/aws-sdk-js-v3 (@​aws-sdk/client-s3)

v3.1090.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-s3

v3.1089.0

Compare Source

3.1089.0(2026-07-16)
Chores
Documentation Changes
  • client-s3: Documentation update for removing the 30 day minimum restriction for transition to Standard-IA or OneZone-IA storage classes (91723d24)
  • client-redshift: Amazon Redshift - Added support for rg.large and rg.12xlarge node types in CreateCluster, ModifyCluster, and ResizeCluster API operations. (50989cf0)
New Features
  • clients: update client endpoints as of 2026-07-16 (c9150fe6)
  • client-chime-sdk-voice: Marked CreateProxySession, DeleteProxySession, GetProxySession, ListProxySessions, UpdateProxySession, PutVoiceConnectorProxy, DeleteVoiceConnectorProxy, and GetVoiceConnectorProxy as deprecated. (d706c456)
  • client-emr: Amazon EMR updates the Session object returned by GetSession API (863234ad)
  • client-omics: Adds support for returning the task UUID (universally unique identifier) in GetRunTask and ListRunTasks responses (bafd66dd)
  • client-sagemaker: Release support for g7 instance type for SageMaker inference endpoints. (668f46cb)
  • client-sustainability: Adds support for retrieving estimated water allocation data. (432031b6)
Bug Fixes
Tests

For list of updated packages, view updated-packages.md in assets-3.1089.0.zip

v3.1088.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-s3

v3.1087.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-s3

v3.1086.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-s3

aws/aws-sdk-js-v3 (@​aws-sdk/s3-request-presigner)

v3.1090.0

Compare Source

Note: Version bump only for package @​aws-sdk/s3-request-presigner

v3.1089.0

Compare Source

Note: Version bump only for package @​aws-sdk/s3-request-presigner

v3.1088.0

Compare Source

Note: Version bump only for package @​aws-sdk/s3-request-presigner

v3.1087.0

Compare Source

Note: Version bump only for package @​aws-sdk/s3-request-presigner

v3.1086.0

Compare Source

Note: Version bump only for package @​aws-sdk/s3-request-presigner

tailwindlabs/tailwindcss (@​tailwindcss/postcss)

v4.3.3

Compare Source

Fixed
  • Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#​20297)
  • Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF]bg-white) (#​20298)
  • Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#​20292)
  • Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#​20299)
  • Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#​20302)
  • Parse selectors like [data-foo]div as two selectors instead of one (#​20303)
  • Ensure @tailwindcss/postcss rebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#​20310)
  • Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in @tailwindcss/browser and Tailwind Play (#​20124)
  • Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like oklch (#​20314)
  • Ensure --spacing(0) is optimized to 0px instead of 0 so it remains a <length> when used in calc(…) (#​20319)
  • Load @parcel/watcher only when needed in @tailwindcss/cli --watch mode, so one-off builds and --watch --poll work when @parcel/watcher can't be loaded (#​20325)
  • Use explicit platform fonts instead of system-ui and ui-sans-serif so CJK text respects the page's lang attribute on Windows (#​20318)
  • Prevent @tailwindcss/upgrade from rewriting ignored files when run from a subdirectory (#​20329)
  • Ensure earlier @source rules pointing to nested files are scanned when later @source rules point to files in parent folders (#​20335)
  • Prevent @tailwindcss/vite from triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#​20336)
vercel/ai (ai)

v7.0.31

Compare Source

Patch Changes

v7.0.30

Compare Source

Patch Changes

v7.0.29

Compare Source

Patch Changes
postcss/autoprefixer (autoprefixer)

v10.5.4

Compare Source

discordjs/discord-api-types (discord-api-types)

v0.38.50

Compare Source

Features
immerjs/immer (immer)

v11.1.15

Compare Source

Bug Fixes

v11.1.14

Compare Source

Bug Fixes
  • throw proper immer error when applyPatches path traverses null (#​1251) (e38ad71)

v11.1.13

Compare Source

Bug Fixes
  • draft relocated base refs after reverse/sort in array-methods plugin (#​1255) (a73672a)

v11.1.12

Compare Source

Bug Fixes
tailwindlabs/tailwindcss (tailwindcss)

v4.3.3

Compare Source

Fixed
  • Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#​20297)
  • Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF]bg-white) (#​20298)
  • Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#​20292)
  • Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#​20299)
  • Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#​20302)
  • Parse selectors like [data-foo]div as two selectors instead of one (#​20303)
  • Ensure @tailwindcss/postcss rebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#​20310)
  • Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in @tailwindcss/browser and Tailwind Play (#​20124)
  • Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like oklch (#​20314)
  • Ensure --spacing(0) is optimized to 0px instead of 0 so it remains a <length> when used in calc(…) (#​20319)
  • Load @parcel/watcher only when needed in @tailwindcss/cli --watch mode, so one-off builds and --watch --poll work when @parcel/watcher can't be loaded (#​20325)
  • Use explicit platform fonts instead of system-ui and ui-sans-serif so CJK text respects the page's lang attribute on Windows (#​20318)
  • Prevent @tailwindcss/upgrade from rewriting ignored files when run from a subdirectory (#​20329)
  • Ensure earlier @source rules pointing to nested files are scanned when later @source rules point to files in parent folders (#​20335)
  • Prevent @tailwindcss/vite from triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#​20336)
cloudflare/workers-sdk (wrangler)

v4.112.0

Compare Source

Minor Changes
  • #​14470 3de70df Thanks @​DiogoSantoss! - Add a top-level addresses field to Wrangler configuration for Email Routing

    You can now declare the inbound email addresses handled by your Worker directly in wrangler.json:

    {
      "name": "my-worker",
      "main": "src/index.ts",
      "compatibility_date": "2026-05-21",
      "addresses": ["support@example.com", "*@&#8203;example.com"]
    }
  • #​14706 cb6c3f9 Thanks @​edmundhung! - Add Durable Object storage access to createTestHarness()

    You can now execute SQL against a SQLite-backed Durable Object to seed or assert the storage state.

    const server = createTestHarness({
      workers: [{ configPath: "./wrangler.json" }],
    });
    await server.listen();
    
    const worker = server.getWorker();
    const storage = await worker.getDurableObjectStorage("COUNTER", {
      name: "user-123",
    });
    
    await worker.fetch("/counter/user-123");
    
    const rows = await storage.exec(
      "SELECT value FROM counters WHERE id = ?",
      "user-123"
    );
    expect(rows).toEqual([{ value: 1 }]);
  • #​14562 9f04a7e Thanks @​martijnwalraven! - Emit a typed runtimeError event on the unstable_startWorker DevEnv for uncaught Worker exceptions

    Uncaught Worker exceptions were only source-mapped and printed, so programmatic consumers had to scrape terminal output to observe them. The DevEnv now re-emits a RuntimeErrorEvent (like reloadComplete) carrying the exception text and source-mapped stack — fed from Miniflare's pretty-error seam via the new handleUncaughtError option for exceptions the runtime catches, and from the inspector for those it does not.

Patch Changes
  • #​14682 d39ae01 Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

    The following dependency versions have been updated:

    Dependency From To
    @​cloudflare/workers-types ^5.20260710.1 ^5.20260714.1
    workerd 1.20260710.1 1.20260714.1
  • #​14725 c79504f Thanks @​edmundhung! - Support containers in createTestHarness()

    Workers configured with containers can now be tested using createTestHarness(). The harness builds configured images and makes container-backed Durable Objects available during integration tests.

  • #​14696 c7dbe1a Thanks @​martijnwalraven! - Type unstable_startWorker, DevEnv.startWorker, and ConfigController.set/patch against WranglerStartDevWorkerInput, so the wrangler-specific dev.structuredLogsHandler field the runtime already honors is expressible through the public API. Previously the public signatures took the base StartDevWorkerInput, and callers passing the handler needed a cast while internal callers (the test harness) routed the wider type around the signature.

  • #​14494 4e1a7a7 Thanks @​petebacondarwin! - Register a workers.dev subdomain before uploading a new Worker

    Deploying a Worker for the first time on an account that has no workers.dev subdomain failed with an opaque API error raised by the upload request itself (code 10063, "You need a workers.dev subdomain in order to proceed"). Wrangler now checks for a workers.dev subdomain before uploading a brand-new Worker that publishes to workers.dev and prompts you to register one, so you get a clear, actionable message instead of a cryptic API failure. The check is skipped for deploys that don't target workers.dev (routes-only deploys, or workers_dev: false) and for existing Workers, since their account already has a subdomain.

  • Updated dependencies [34e696d, d39ae01, 9f04a7e, 9f04a7e, cb30df3, cb6c3f9, 3f3afbb, e6fbc4e]:

    • miniflare@​4.20260714.0

v4.111.0

Compare Source

Minor Changes
  • #​14602 7692a61 Thanks @​edmundhung! - Add Durable Object eviction support to createTestHarness

    You can now gracefully evict a running Durable Object by class name or binding name to verify how it recovers after its instance is torn down:

    const worker = server.getWorker();
    await worker.evictDurableObject("Counter", { name: "user-123" });
  • #​14620 899c297 Thanks @​penalosa! - Remove support for service environments and the legacy_env configuration field

    Service environments have been removed. Wrangler now always deploys each environment as its own Worker named <name>-<environment>, which matches the behaviour of the previous default (legacy_env = true). The --legacy-env CLI flag has been removed, and the legacy_env configuration field is no longer supported — including it in your configuration file will now raise an error.

    Because legacy_env = true was already the default, removing the field will not change how your Worker is deployed. If you were relying on service environments (legacy_env = false), each environment will now be deployed as a standalone Worker instead of as an environment of a single Worker. See https://developers.cloudflare.com/workers/wrangler/environments/ for more information.

  • #​14652 317ce1f Thanks @​jamesopstad! - Append Workers runtime types to the generated types under --x-new-config, with a new dev.types.includeRuntime option

    When running wrangler dev --x-new-config, the runtime types generated from your compatibility date and flags are now appended to worker-configuration.d.ts, alongside the types inferred from cloudflare.config.ts. This is controlled by a new dev.types.includeRuntime option in wrangler.config.ts, which defaults to true.

    This applies to the experimental new config path only and does not change type generation for existing wrangler.jsonc/wrangler.toml projects.

Patch Changes
  • #​14627 ed33326 Thanks @​tpmmorris! - Add convenient logging for worker emails in the project directory. In addition to the system's temp directory, logs for emails sent by workers are also written to a local temp directory defined by the calling process, e.g for an simple text email sent via Wrangler this is .wrangler/tmp/email/<session>/email-text/<message-uuid>.txt (and related files) in the project root. Callers of Miniflare can control this location via the new defaultProjectTmpPath option, which Wrangler and Vite plugin now set automatically.

  • #​14642 018574b Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

    The following dependency versions have been updated:

    Dependency From To
    @​cloudflare/workers-types ^5.20260708.1 ^5.20260710.1
    workerd 1.20260708.1 1.20260710.1
  • #​14588 eb99ab1 Thanks @​emily-shen! - fix: Respect auth profiles when using remote bindings in the Vite plugin

    Auth profiles (configured via wrangler auth create and wrangler auth activate) were previously being ignored when using remote bindings with the Vite plugin. This is now fixed.

    Note that the profile directory is resolved based on the Vite project root.

  • #​14658 cdf3148 Thanks @​ATKasem! - Fix wrangler dev corrupting external hostnames in proxied response headers

    When a Worker was run with routes configured, wrangler dev's proxy rewrote the host inside URL-valued headers (such as Location) using a boundary-less substring replace. Any host that merely contained the route host as a substring was corrupted — e.g. with an example.com route, a Location: https://books.example.com/read/ch01 header became https://books.127.0.0.1:8788/read/ch01, and https://myexample.com/path became https://my127.0.0.1:8788/path.

    The proxy now only rewrites absolute URLs whose host is exactly the proxied host, swapping the scheme and host together (which also fixes a related case where an https: scheme survived on a plain-HTTP dev address). Unrelated hosts and subdomains pass through untouched.

  • #​14601 3015320 Thanks @​MattieTK! - Improve the agent-facing --force guidance for Pages-to-Workers delegation

    When an AI agent opts out of the Pages-to-Workers delegation by passing --force to wrangler pages deploy or wrangler pages project create, Wrangler now prints a notice at the end of a successful command explaining that --force only needs to be passed once: the project then exists, so subsequent commands are no longer delegated and do not need the flag.

  • #​14569 9da77ac Thanks @​dario-piotrowicz! - Suggest similar commands when a typo is detected

    When an unknown command or subcommand is entered, wrangler now suggests the closest matching command if one exists within a reasonable edit distance. For example, running wrangler whoamio will display Did you mean "wrangler whoami"?, and running wrangler kv namespase will display Did you mean "wrangler kv namespace"?.

  • Updated dependencies [7692a61, ed33326, 018574b, 7692a61]:

    • miniflare@​4.20260710.0

Configuration

📅 Schedule: (in timezone Asia/Singapore)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, on day 1 of the month (* 0-3 1 * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@vercel

vercel Bot commented Feb 28, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
website Ready Ready Preview, Comment Jul 18, 2026 12:14pm

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from e9c74cd to 603e19e Compare March 2, 2026 14:50
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 603e19e to f6fca5c Compare March 2, 2026 17:18
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from f6fca5c to 7862edc Compare March 2, 2026 21:57
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 7862edc to f145af9 Compare March 3, 2026 01:03
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from f145af9 to dfffa75 Compare March 3, 2026 04:57
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from dfffa75 to 368afd0 Compare March 3, 2026 21:56
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 368afd0 to b4b40d1 Compare March 4, 2026 01:51
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from b4b40d1 to 8996532 Compare March 4, 2026 10:35
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 8996532 to 4ef246e Compare March 4, 2026 21:26
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 4ef246e to be8539a Compare March 5, 2026 01:03
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from be8539a to e94cc10 Compare March 5, 2026 04:50
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from e94cc10 to 633c46d Compare March 5, 2026 19:44
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 633c46d to 8655aa9 Compare March 5, 2026 23:57
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 8655aa9 to 2407f4c Compare March 6, 2026 00:41
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 7be769a to b61f9e6 Compare March 10, 2026 20:40
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from b61f9e6 to b70c649 Compare March 11, 2026 18:10
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from b70c649 to 3dcafe2 Compare March 11, 2026 20:48
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 3dcafe2 to 158462e Compare March 12, 2026 13:50
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 158462e to 2cb8203 Compare March 12, 2026 21:42
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 2cb8203 to aa92a23 Compare March 13, 2026 10:51
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from aa92a23 to 18c57fc Compare March 13, 2026 22:36
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 18c57fc to 700db4e Compare March 16, 2026 14:17
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 700db4e to d75b722 Compare March 16, 2026 21:48
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from d75b722 to e056928 Compare March 17, 2026 01:21
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from e056928 to e2fcddc Compare March 17, 2026 09:23
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from e2fcddc to 7c18a42 Compare March 17, 2026 12:35
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 7c18a42 to e892507 Compare March 17, 2026 21:08
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from e892507 to 1085560 Compare March 18, 2026 01:39
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 1085560 to 6b43672 Compare March 18, 2026 16:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant