Skip to content

build(deps): bump the compatible-updates group across 1 directory with 9 updates - #18

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/code-review-bot/compatible-updates-4689f9fc36
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/code-review-bot/compatible-updates-4689f9fc36

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 13, 2026

Copy link
Copy Markdown

Bumps the compatible-updates group with 9 updates in the /code-review-bot directory:

Package From To
@ai-sdk/mcp 1.0.59 1.0.67
@ai-sdk/openai 3.0.81 3.0.91
ai 6.0.220 6.0.246
next 16.2.12 16.3.0
@types/node 24.10.0 24.13.3
@types/react 19.2.7 19.2.18
@types/react-dom 19.2.3 19.2.4
eslint 9.39.1 9.39.5
eslint-config-next 16.2.12 16.3.0

Updates @ai-sdk/mcp from 1.0.59 to 1.0.67

Release notes

Sourced from @​ai-sdk/mcp's releases.

@​ai-sdk/tui@​1.0.65

Patch Changes

  • ai@7.0.64

@​ai-sdk/otel@​1.0.64

Patch Changes

  • ai@7.0.64

@​ai-sdk/policy-opa@​1.0.64

Patch Changes

  • ai@7.0.64

@​ai-sdk/tui@​1.0.64

Patch Changes

  • Updated dependencies [d0a5807]
  • Updated dependencies [dcf33e8]
    • ai@7.0.63

@​ai-sdk/workflow@​1.0.64

Patch Changes

  • ai@7.0.64

@​ai-sdk/otel@​1.0.63

Patch Changes

  • Updated dependencies [d0a5807]
  • Updated dependencies [dcf33e8]
    • ai@7.0.63

@​ai-sdk/policy-opa@​1.0.63

Patch Changes

  • Updated dependencies [d0a5807]
  • Updated dependencies [dcf33e8]
    • ai@7.0.63

@​ai-sdk/workflow@​1.0.63

Patch Changes

  • Updated dependencies [d0a5807]
  • Updated dependencies [dcf33e8]
    • ai@7.0.63
Changelog

Sourced from @​ai-sdk/mcp's changelog.

1.0.67

Patch Changes

  • Updated dependencies [ee2bf30]
    • @​ai-sdk/provider-utils@​4.0.42

1.0.66

Patch Changes

  • e8d2654: Honor MCP request deadlines and support bounding or aborting client initialization.

1.0.65

Patch Changes

  • Updated dependencies [9ecdefe]
    • @​ai-sdk/provider-utils@​4.0.41

1.0.64

Patch Changes

  • a3bc948: fix(mcp): accept OAuth metadata without code challenge methods

1.0.63

Patch Changes

  • Updated dependencies [19093fd]
    • @​ai-sdk/provider-utils@​4.0.40

1.0.62

Patch Changes

  • Updated dependencies [06fb54c]
    • @​ai-sdk/provider-utils@​4.0.39

1.0.61

Patch Changes

  • Updated dependencies [e1af05f]
    • @​ai-sdk/provider@​3.0.14
    • @​ai-sdk/provider-utils@​4.0.38

1.0.60

... (truncated)

Commits

Updates @ai-sdk/openai from 3.0.81 to 3.0.91

Changelog

Sourced from @​ai-sdk/openai's changelog.

3.0.91

Patch Changes

  • Updated dependencies [ee2bf30]
    • @​ai-sdk/provider-utils@​4.0.42

3.0.90

Patch Changes

  • Updated dependencies [9ecdefe]
    • @​ai-sdk/provider-utils@​4.0.41

3.0.89

Patch Changes

  • 23632b1: Add blocked domain filters to the OpenAI and Azure Responses API web search tools.

3.0.88

Patch Changes

  • 8100830: Apply reasoning, service tier, and image defaults to recognizable future OpenAI model family versions.

3.0.87

Patch Changes

  • 2f11af1: Preserve stored tool search output item IDs from provider metadata.

3.0.86

Patch Changes

  • Updated dependencies [19093fd]
    • @​ai-sdk/provider-utils@​4.0.40

3.0.85

Patch Changes

  • Updated dependencies [06fb54c]
    • @​ai-sdk/provider-utils@​4.0.39

3.0.84

Patch Changes

... (truncated)

Commits

Updates ai from 6.0.220 to 6.0.246

Changelog

Sourced from ai's changelog.

6.0.246

Patch Changes

  • Updated dependencies [ee2bf30]
    • @​ai-sdk/provider-utils@​4.0.42
    • @​ai-sdk/gateway@​3.0.166

6.0.245

Patch Changes

  • 0de0715: Filter unresolved tool approval requests and tool parts without state when ignoring incomplete tool calls.

6.0.244

Patch Changes

  • 79e58aa: Preserve preceding assistant messages when regenerating a response.

6.0.243

Patch Changes

  • dd5d344: Skip re-validating tool input for terminal output-available UI message parts.
  • Updated dependencies [0cd92fa]
    • @​ai-sdk/gateway@​3.0.165

6.0.242

Patch Changes

  • Updated dependencies [f615718]
  • Updated dependencies [48d5dff]
    • @​ai-sdk/gateway@​3.0.164

6.0.241

Patch Changes

  • Updated dependencies [7e50c52]
    • @​ai-sdk/gateway@​3.0.163

6.0.240

Patch Changes

  • Updated dependencies [b28367e]
    • @​ai-sdk/gateway@​3.0.162

... (truncated)

Commits

Updates next from 16.2.12 to 16.3.0

Release notes

Sourced from next's releases.

v16.3.0

Core Changes

  • Update vendored lodash to 4.17.23 to fix CVE-2025-13465: #91558
  • Fix invalid HTML response for route-level RSC requests in deployment adapter: #91541
  • Normalize encoded dynamic placeholders in app routes: #91603
  • Fix(pages-router): restore Content-Length and ETag for /_next/data/ JSON responses: #90304
  • Update tokio from 1.43.0 to 1.47.3: #90945
  • [turbopack] Simplify snapshotting logic: #91178
  • Turbopack: enable server HMR for app route handlers: #91466
  • turbo-tasks-backend: batch find_and_schedule_dirty using for_each_task_meta: #91497
  • [turbopack] Use bail! instead of panic! for duplicate module ident error: #91636
  • Skip loadBindings() Lightning CSS check during next start: #91538
  • turbo-tasks-backend: batch schedule dirty tasks in aggregation_update: #91461
  • Turbopack: Add importModule() support to webpack loaders: #89630
  • turbo-persistence: fix mmap page alignment and improve error context in MetaFile::open_internal: #91640
  • turbopack-css: demote recoverable CSS parse warnings to Warning severity: #91524
  • feat(node-streams): add config flag, define-env, and env precedence test: #90427
  • Rename /_next/webpack-hmr to /_next/hmr: #91415
  • Add per-slot error attribution for instant validation using slot markers and config depth preference: #91610
  • Handle encoded params further: #91627
  • [turbopack] Respect {eval:true} in worker_threads constructors: #91666
  • Fix missing route in otel spans without base-server: #91665
  • [turbopack] Optimize compaction cpu usage: #91468
  • Fix layout segment optimization: move app-page imports to server-utility transition: #91701
  • Fix server actions in standalone mode with cacheComponents: #91711
  • turbo-persistence: remove Unmergeable mmap advice: #91713
  • turbopack: move "compact database" tracing span to backend layer: #91693
  • Turbopack: lazy require metadata and handle TLA: #91705
  • Fix adapter outputs for dynamic metadata routes: #91680
  • Turbopack: fix webpack loader runner layer: #91727
  • [turbopack] Remove incorrect debug_assert in try_read_task_cell: #91699
  • Add module count field to module graph tracing spans: #91697
  • turbopack-cli: add --persistent-caching flag for filesystem-backed cache: #91657
  • Turbopack: pull in updated vercel/nft tests: #91651
  • [turbopack] Improve regressed build speed on cross-compiled MUSL: #91477
  • [Segment Bundling] [Scaffolding] Ensure inlining hint correctness: #91320
  • [Segment Bundling] [Scaffolding] Track which segments can be omitted from prefetch: #91438
  • Avoid deprecated TS node10 moduleResolution defaults: #91847
  • [turbopack] Rebuild the docker build scripts: #91799
  • Fix TS6 baseUrl deprecation for extended tsconfig: #91855
  • Add next internal post-build CLI command for Turbopack database compaction: #91336
  • Turbopack: Define Effect as a trait instead of a closure: #89080
  • Turbopack: Implement TraceRawVcs and NonLocalValue correctly for Effects: #89133
  • turbo-tasks-backend: improve print_cache_item_size instrumentation: #91742
  • Turbopack: switch from base40 to base38 hash encoding (remove ~ and . from charset): #91832
  • Use charCodeAt for normalizePathTrailingSlash: #91380
  • Turbopack: Only patch lockfile when bindings fails to load: #91379
  • [create-next-app] Skip interactive prompts when CLI flags are provided: #91840
  • [devtools] Make instant navs panel draggable: #91914
  • [Segment Bundling] Bundle static prefetches based on size: #91439

... (truncated)

Commits

Updates @types/node from 24.10.0 to 24.13.3

Commits

Updates @types/react from 19.2.7 to 19.2.18

Commits

Updates @types/react-dom from 19.2.3 to 19.2.4

Commits

Updates eslint from 9.39.1 to 9.39.5

Release notes

Sourced from eslint's releases.

v9.39.5

Bug Fixes

Documentation

  • 74930ed docs: switch build to Node.js 24 (#20894) (Milos Djermanovic)
  • eaec8bb docs: Add ESLint v9.x EOL notice (#20828) (Milos Djermanovic)

Chores

  • 458205f chore: update @eslint/eslintrc and @eslint/js for v9.39.5 (#21077) (Francesco Trotta)
  • 202117b chore: package.json update for @​eslint/js release (Jenkins)
  • d9eb6ed test: disable warning for vm.constants.USE_MAIN_CONTEXT_DEFAULT_LOADER (#21074) (Francesco Trotta)
  • 7b431a7 chore: override re2 dependency for @metascraper/helpers (#21068) (Milos Djermanovic)
  • daf7791 chore: pin fflate@0.8.2 (#20895) (Milos Djermanovic)
  • daee8ba ci: use pnpm in eslint-flat-config-utils type integration test (#20829) (Milos Djermanovic)
  • 116d4be ci: unpin Node.js 25.x in CI (#20619) (Copilot)

v9.39.4

Bug Fixes

  • f18f6c8 fix: update dependency minimatch to ^3.1.5 (#20564) (Milos Djermanovic)
  • a3c868f fix: update dependency @​eslint/eslintrc to ^3.3.4 (#20554) (Milos Djermanovic)
  • 234d005 fix: minimatch security vulnerability patch for v9.x (#20549) (Andrej Beles)
  • b1b37ee fix: update ajv to 6.14.0 to address security vulnerabilities (#20538) (루밀LuMir)

Documentation

  • 4675152 docs: add deprecation notice partial (#20520) (Milos Djermanovic)

Chores

  • b8b4eb1 chore: update dependencies for ESLint v9.39.4 (#20596) (Francesco Trotta)
  • 71b2f6b chore: package.json update for @​eslint/js release (Jenkins)
  • 1d16c2f ci: pin Node.js 25.6.1 (#20563) (Milos Djermanovic)

v9.39.3

Bug Fixes

  • 791bf8d fix: restore TypeScript 4.0 compatibility in types (#20504) (sethamus)

Chores

  • 8594a43 chore: upgrade @​eslint/js@​9.39.3 (#20529) (Milos Djermanovic)
  • 9ceef92 chore: package.json update for @​eslint/js release (Jenkins)
  • af498c6 chore: ignore /docs/v9.x in link checker (#20453) (Milos Djermanovic)

v9.39.2

Bug Fixes

  • 5705833 fix: warn when eslint-env configuration comments are found (#20381) (sethamus)

Build Related

  • 506f154 build: add .scss files entry to knip (#20391) (Milos Djermanovic)

Chores

  • 7ca0af7 chore: upgrade to @eslint/js@9.39.2 (#20394) (Francesco Trotta)

... (truncated)

Commits

Updates eslint-config-next from 16.2.12 to 16.3.0

Release notes

Sourced from eslint-config-next's releases.

v16.3.0

Core Changes

  • Update vendored lodash to 4.17.23 to fix CVE-2025-13465: #91558
  • Fix invalid HTML response for route-level RSC requests in deployment adapter: #91541
  • Normalize encoded dynamic placeholders in app routes: #91603
  • Fix(pages-router): restore Content-Length and ETag for /_next/data/ JSON responses: #90304
  • Update tokio from 1.43.0 to 1.47.3: #90945
  • [turbopack] Simplify snapshotting logic: #91178
  • Turbopack: enable server HMR for app route handlers: #91466
  • turbo-tasks-backend: batch find_and_schedule_dirty using for_each_task_meta: #91497
  • [turbopack] Use bail! instead of panic! for duplicate module ident error: #91636
  • Skip loadBindings() Lightning CSS check during next start: #91538
  • turbo-tasks-backend: batch schedule dirty tasks in aggregation_update: #91461
  • Turbopack: Add importModule() support to webpack loaders: #89630
  • turbo-persistence: fix mmap page alignment and improve error context in MetaFile::open_internal: #91640
  • turbopack-css: demote recoverable CSS parse warnings to Warning severity: #91524
  • feat(node-streams): add config flag, define-env, and env precedence test: #90427
  • Rename /_next/webpack-hmr to /_next/hmr: #91415
  • Add per-slot error attribution for instant validation using slot markers and config depth preference: #91610
  • Handle encoded params further: #91627
  • [turbopack] Respect {eval:true} in worker_threads constructors: #91666
  • Fix missing route in otel spans without base-server: #91665
  • [turbopack] Optimize compaction cpu usage: #91468
  • Fix layout segment optimization: move app-page imports to server-utility transition: #91701
  • Fix server actions in standalone mode with cacheComponents: #91711
  • turbo-persistence: remove Unmergeable mmap advice: #91713
  • turbopack: move "compact database" tracing span to backend layer: #91693
  • Turbopack: lazy require metadata and handle TLA: #91705
  • Fix adapter outputs for dynamic metadata routes: #91680
  • Turbopack: fix webpack loader runner layer: #91727
  • [turbopack] Remove incorrect debug_assert in try_read_task_cell: #91699
  • Add module count field to module graph tracing spans: #91697
  • turbopack-cli: add --persistent-caching flag for filesystem-backed cache: #91657
  • Turbopack: pull in updated vercel/nft tests: #91651
  • [turbopack] Improve regressed build speed on cross-compiled MUSL: #91477
  • [Segment Bundling] [Scaffolding] Ensure inlining hint correctness: #91320
  • [Segment Bundling] [Scaffolding] Track which segments can be omitted from prefetch: #91438
  • Avoid deprecated TS node10 moduleResolution defaults: #91847
  • [turbopack] Rebuild the docker build scripts: #91799
  • Fix TS6 baseUrl deprecation for extended tsconfig: #91855
  • Add next internal post-build CLI command for Turbopack database compaction: #91336
  • Turbopack: Define Effect as a trait instead of a closure: #89080
  • Turbopack: Implement TraceRawVcs and NonLocalValue correctly for Effects: #89133
  • turbo-tasks-backend: improve print_cache_item_size instrumentation: #91742
  • Turbopack: switch from base40 to base38 hash encoding (remove ~ and . from charset): #91832
  • Use charCodeAt for normalizePathTrailingSlash: #91380
  • Turbopack: Only patch lockfile when bindings fails to load: #91379
  • [create-next-app] Skip interactive prompts when CLI flags are provided: #91840
  • [devtools] Make instant navs panel draggable: #91914
  • [Segment Bundling] Bundle static prefetches based on size: #91439

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

View with [code]smith Autofix with [code]smith
Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.

…h 9 updates

Bumps the compatible-updates group with 9 updates in the /code-review-bot directory:

| Package | From | To |
| --- | --- | --- |
| [@ai-sdk/mcp](https://github.com/vercel/ai/tree/HEAD/packages/mcp) | `1.0.59` | `1.0.67` |
| [@ai-sdk/openai](https://github.com/vercel/ai/tree/HEAD/packages/openai) | `3.0.81` | `3.0.91` |
| [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `6.0.220` | `6.0.246` |
| [next](https://github.com/vercel/next.js) | `16.2.12` | `16.3.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.10.0` | `24.13.3` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.7` | `19.2.18` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.3` | `19.2.4` |
| [eslint](https://github.com/eslint/eslint) | `9.39.1` | `9.39.5` |
| [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.2.12` | `16.3.0` |



Updates `@ai-sdk/mcp` from 1.0.59 to 1.0.67
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/mcp@1.0.67/packages/mcp/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/mcp@1.0.67/packages/mcp)

Updates `@ai-sdk/openai` from 3.0.81 to 3.0.91
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/openai@3.0.91/packages/openai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/openai@3.0.91/packages/openai)

Updates `ai` from 6.0.220 to 6.0.246
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/ai@6.0.246/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@6.0.246/packages/ai)

Updates `next` from 16.2.12 to 16.3.0
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.2.12...v16.3.0)

Updates `@types/node` from 24.10.0 to 24.13.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/react` from 19.2.7 to 19.2.18
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@types/react-dom` from 19.2.3 to 19.2.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `eslint` from 9.39.1 to 9.39.5
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v9.39.1...v9.39.5)

Updates `eslint-config-next` from 16.2.12 to 16.3.0
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](https://github.com/vercel/next.js/commits/v16.3.0/packages/eslint-config-next)

---
updated-dependencies:
- dependency-name: "@ai-sdk/mcp"
  dependency-version: 1.0.67
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: compatible-updates
- dependency-name: "@ai-sdk/openai"
  dependency-version: 3.0.91
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: compatible-updates
- dependency-name: ai
  dependency-version: 6.0.246
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: compatible-updates
- dependency-name: next
  dependency-version: 16.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: compatible-updates
- dependency-name: "@types/node"
  dependency-version: 24.13.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: compatible-updates
- dependency-name: "@types/react"
  dependency-version: 19.2.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: compatible-updates
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: compatible-updates
- dependency-name: eslint
  dependency-version: 9.39.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: compatible-updates
- dependency-name: eslint-config-next
  dependency-version: 16.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: compatible-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 13, 2026
@greptile-apps

greptile-apps Bot commented Aug 13, 2026

Copy link
Copy Markdown

Greptile Summary

This PR updates nine runtime, framework, type, and lint dependencies in code-review-bot, with a consistently regenerated pnpm lockfile.

  • Updates the Vercel AI SDK packages and their transitive provider dependencies.
  • Updates Next.js and eslint-config-next to 16.3.0.
  • Updates Node/React types and ESLint patch versions.

Confidence Score: 5/5

The dependency update appears safe to merge, with no concrete changed-code failure identified.

The manifest and lockfile remain aligned, the declared runtime and peer constraints are satisfied, and the repository’s current Next.js and AI SDK usage shows no established contract break.

Important Files Changed

Filename Overview
code-review-bot/package.json Updates nine exact dependency versions while retaining compatible Node, React, TypeScript, and peer-dependency constraints.
code-review-bot/pnpm-lock.yaml Regenerates resolved packages and transitive dependencies consistently with the manifest updates; no concrete incompatibility was identified.

Reviews (1): Last reviewed commit: "build(deps): bump the compatible-updates..." | Re-trigger Greptile

@dependabot @github

dependabot Bot commented on behalf of github Aug 27, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 27, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/code-review-bot/compatible-updates-4689f9fc36 branch August 27, 2026 17:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants