build(deps): bump the compatible-updates group across 1 directory with 8 updates by dependabot[bot] · Pull Request #19 · trytilde/examples

dependabot · 2026-08-27T17:08:48Z

Bumps the compatible-updates group with 8 updates in the /code-review-bot directory:

Package	From	To
@ai-sdk/mcp	`1.0.59`	`1.0.72`
@ai-sdk/openai	`3.0.81`	`3.0.99`
ai	`6.0.220`	`6.0.264`
next	`16.2.12`	`16.3.2`
@types/node	`24.10.0`	`24.13.3`
@types/react	`19.2.7`	`19.2.18`
@types/react-dom	`19.2.3`	`19.2.5`
eslint-config-next	`16.2.12`	`16.3.2`

Updates @ai-sdk/mcp from 1.0.59 to 1.0.72

Changelog

Sourced from @ai-sdk/mcp's changelog.

1.0.72

Patch Changes

0075ed5: fix(mcp): reject SSE requests when POST responses are unsuccessful

1.0.71

Patch Changes

b0e77c0: Select MCP OAuth authorization scopes from WWW-Authenticate challenges or Protected Resource Metadata.

Updated dependencies [31205a4]

@ai-sdk/provider-utils@4.0.46

1.0.70

Patch Changes

Updated dependencies [b2a4d5a]

@ai-sdk/provider-utils@4.0.45

1.0.69

Patch Changes

Updated dependencies [2171d15]

@ai-sdk/provider@3.0.15

@ai-sdk/provider-utils@4.0.44

1.0.68

Patch Changes

Updated dependencies [dab0a08]

@ai-sdk/provider-utils@4.0.43

1.0.67

Patch Changes

Updated dependencies [ee2bf30]

@ai-sdk/provider-utils@4.0.42

1.0.66

Patch Changes

e8d2654: Honor MCP request deadlines and support bounding or aborting client initialization.

1.0.65

... (truncated)

Commits

526e8a5 Version Packages (#19270)
0075ed5 [v6.0] fix: reject MCP SSE requests after unsuccessful POST responses (#19267)
85464f4 Version Packages (#18920)
b0e77c0 [v6.0] fix: MCP OAuth authorization requests omit server-advertised scopes (#...
2d10c35 Version Packages (#18694)
1ea9ae3 Version Packages (#18654)
f0f779a Version Packages (#18651)
e038ca4 Version Packages (#18565)
c6f3cfa Version Packages (#18165)
e8d2654 Backport: fix: MCP requests and client initialization can hang past configure...
Additional commits viewable in compare view

Updates @ai-sdk/openai from 3.0.81 to 3.0.99

Changelog

Sourced from @ai-sdk/openai's changelog.

3.0.99

Patch Changes

f40afcf: fix(openai): expand internal parallel tool call wrappers from the Responses API while preserving stateful continuation and streaming fallbacks

3.0.98

Patch Changes

91880b9: fix(openai): support built-in and provider-defined tools in the Responses allowedTools option

allowedTools emitted every allow-list entry as { type: 'function', name }, but OpenAI identifies built-in tools by type. Allow-listing a declared provider-defined tool (web search, image generation, MCP, custom, ...) therefore failed with Tool choice '<name>' not found in 'tools' parameter. Entries are now derived from the declared tool, including the MCP server label and custom tool name.

Tools that OpenAI cannot allow-list (the tool search tool, deferred tools, and namespaced tools) are dropped from the allow-list with a warning, and an error is thrown if that would leave the allow-list empty rather than silently sending an unrestricted request.

Ambiguous names are now reported instead of resolved silently. A name that matches both a declared tool and another tool's provider tool name resolves to the declared tool and warns; a provider tool name shared by several tools in the same request (two MCP servers, for example) is dropped with a warning. A name that matches no declared tool keeps its existing behavior and is now warned about.

3.0.97

Patch Changes

Updated dependencies [31205a4]

@ai-sdk/provider-utils@4.0.46

3.0.96

Patch Changes

64facff: Reconstruct provider-executed shell calls when continuing OpenAI Responses with storage disabled.

3.0.95

Patch Changes

bdb46fe: Avoid duplicate MCP approval request references when continuing stored OpenAI Responses.

3.0.94

Patch Changes

d3247d7: Keep client-executed function calls paired with their outputs when chaining OpenAI Responses with a previous response ID.

... (truncated)

Commits

d3f6cc9 Version Packages (#19191)
f40afcf [v6.0] fix(openai): expand Responses API parallel tool call wrappers (#19197)
8155151 Version Packages (#19079)
91880b9 [v6.0] fix(openai): support built-in and provider-defined tools in Responses ...
85464f4 Version Packages (#18920)
f8cf14d Version Packages (#18786)
64facff [v6.0] fix: allow provider-executed shell follow-ups with response storage di...
1b0361c Version Packages (#18745)
bdb46fe Backport: fix: prevent duplicate MCP approval items when continuing stored Op...
2d10c35 Version Packages (#18694)
Additional commits viewable in compare view

Updates ai from 6.0.220 to 6.0.264

Changelog

Sourced from ai's changelog.

6.0.264

Patch Changes

6a7e701: fix(ai): prevent duplicate text and reasoning part ids

6.0.263

Patch Changes

Updated dependencies [1e70580]

@ai-sdk/gateway@3.0.179

6.0.262

Patch Changes

30526e9: Prevent exceptions in streaming onChunk and onError callbacks from terminating the stream or masking provider errors.

Updated dependencies [7de3226]

Updated dependencies [504da15]

@ai-sdk/gateway@3.0.178

6.0.261

Patch Changes

f1afbf9: Fix array-backed language model mocks to return configured results in order from the first call.

6.0.260

Patch Changes

98c656f: fix: reject streamObject result promises and report failed completion when the provider stream errors

b253d52: Filter preliminary tool outputs when ignoreIncompleteToolCalls is enabled.

9e15cb4: Prevent automatic tool execution when a model call ends with an unsafe finish reason.

6.0.259

Patch Changes

Updated dependencies [def7999]

@ai-sdk/gateway@3.0.177

6.0.258

Patch Changes

Updated dependencies [96304fc]

@ai-sdk/gateway@3.0.176

... (truncated)

Commits

526e8a5 Version Packages (#19270)
6a7e701 Backport: fix(ai): prevent duplicate text and reasoning part ids (#19272)
23e4c50 Version Packages (#19261)
b55c2a9 Version Packages (#19212)
30526e9 [v6.0] fix: contain streaming callback exceptions without interrupting consum...
d3f6cc9 Version Packages (#19191)
f1afbf9 [v6.0] fix: return array-backed mock language model results in configured ord...
bb5526f Version Packages (#19131)
9e15cb4 [v6.0] fix: automatic tools executing after unsafe model finish reasons (#19120)
b253d52 [v6.0] fix: omit preliminary tool outputs when ignoring incomplete tool calls...
Additional commits viewable in compare view

Updates next from 16.2.12 to 16.3.2

Release notes

Sourced from next's releases.

v16.3.2

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

[backport] Scope app-entry export validation to files inside the app directory (#97357)

[backport] Fix catch-all index page being served for every other slug (#97416)

[16.3] Turbopack: don't trace embedded WASM loader helpers (#97353) (#97463)

[16.3] Turbopack: retain conditions when replacing resolve request keys (#97453)

[16.3.x] Fix Turbopack worker chunk loading with asset prefix (#97419)

[16.3.x] Authenticate Turborepo remote caching with OIDC instead of a static PAT (#97603)

Credits

Huge thanks to @lubieowoce, @unstubbable, @timneutkens, @mischnic, and @eps1lon for helping!

v16.3.1

What's Changed

[16.x] Turbopack: don't strip async-module runtime from shared runtime chunks by @lukesandberg in vercel/next.js#96653

[16.x] [turbopack] Add turbopack_ecmascript and turbopack_wasm's embeded FS to internal_assets_conditions by @lukesandberg in vercel/next.js#96655

[16.x] [turbopack] Collapse nested promises in the analyzer by @sampoder in vercel/next.js#96675

[16.x] fix(next/image): preserve image response after optimization by @styfle in vercel/next.js#96733

[16.3.x] Default deploy e2e tests to the repo next version by @eps1lon in vercel/next.js#96900

[backport] Bump @swc/helpers by @mischnic in vercel/next.js#96885

[backport] [turbopack] Raise registration calls in hoisted modules to the top by @lukesandberg in vercel/next.js#97308

[backport] Fix missing styled-jsx styles in Pages Router SSR on adapter builds by @lukesandberg in vercel/next.js#97302

[backport] [turbopack] Fix HMR for dynamic imports evaluated from layouts by @lukesandberg in vercel/next.js#97317

[backport] Restore the live headers() view of the incoming request by @unstubbable in vercel/next.js#97311

[backport] Allow literal exports in 'use cache' files by @unstubbable in vercel/next.js#97312

[backport] Keep the dev validation worker alive across HMR updates by @unstubbable in vercel/next.js#97315

[backport] Discard only cache entries that predate a tag revalidation, and reuse completed entries by @unstubbable in vercel/next.js#97314

[backport] Encode the cache item name built by unstable_cache by @unstubbable in vercel/next.js#97313

[16.3] [ci] Use OIDC tokens to read private preview builds by @eps1lon in vercel/next.js#97258

[backport] [test] Compile the middleware redirect routes up front in dev by @lukesandberg in vercel/next.js#97328

[backport] Fix Nav Inspector request loop on repeat captures by @acdlite in vercel/next.js#97326

[backport] Fix: Optimistic routing bugs leading to repeated prefetch loops by @acdlite in vercel/next.js#97325

[backport] Retain fewer stale cache versions and use a TTL, plus the mtime fallback by @lukesandberg in vercel/next.js#97304

[backport] Revert i18n localization change for dynamic Pages API routes (#94905) by @gaojude in vercel/next.js#97330

Full Changelog: vercel/next.js@v16.3.0...v16.3.1

v16.3.1-canary.26

Misc Changes

docs: document deploymentId build ID override and Pages Router skew in 16.2: #97645

Upgrade React from eb8feb71-20260814 to eafeac09-20260819: #97636

Turbopack: rename to use turbopack: no side effects: #94427

refactor: move useDynamic{Route,Search}Params to reduce snapshot churn: #97360

... (truncated)

Commits

d0ac882 v16.3.2
81deb92 [16.3.x] Authenticate Turborepo remote caching with OIDC instead of a static ...
cd714d9 [16.3.x] Fix Turbopack worker chunk loading with asset prefix (#97419)
5ac2327 [16.3] Turbopack: retain conditions when replacing resolve request keys (#97453)
0ccb3e7 [16.3] Turbopack: don't trace embedded WASM loader helpers (#97353) (#97463)
f4dc7c8 [backport] Fix catch-all index page being served for every other slug (#97416)
eba236b [backport] Scope app-entry export validation to files inside the app director...
3d32eb8 v16.3.1
2b4b1ec [backport] Revert i18n localization change for dynamic Pages API routes (#949...
228df5f [backport] Retain fewer stale cache versions and use a TTL, plus the mtime fa...
Additional commits viewable in compare view

Updates @types/node from 24.10.0 to 24.13.3

Commits

See full diff in compare view

Updates @types/react from 19.2.7 to 19.2.18

Commits

See full diff in compare view

Updates @types/react-dom from 19.2.3 to 19.2.5

Commits

See full diff in compare view

Updates eslint-config-next from 16.2.12 to 16.3.2

Release notes

Sourced from eslint-config-next's releases.

v16.3.2

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

[backport] Scope app-entry export validation to files inside the app directory (#97357)

[backport] Fix catch-all index page being served for every other slug (#97416)

[16.3] Turbopack: don't trace embedded WASM loader helpers (#97353) (#97463)

[16.3] Turbopack: retain conditions when replacing resolve request keys (#97453)

[16.3.x] Fix Turbopack worker chunk loading with asset prefix (#97419)

[16.3.x] Authenticate Turborepo remote caching with OIDC instead of a static PAT (#97603)

Credits

Huge thanks to @lubieowoce, @unstubbable, @timneutkens, @mischnic, and @eps1lon for helping!

v16.3.1

What's Changed

[16.x] Turbopack: don't strip async-module runtime from shared runtime chunks by @lukesandberg in vercel/next.js#96653

[16.x] [turbopack] Add turbopack_ecmascript and turbopack_wasm's embeded FS to internal_assets_conditions by @lukesandberg in vercel/next.js#96655

[16.x] [turbopack] Collapse nested promises in the analyzer by @sampoder in vercel/next.js#96675

[16.x] fix(next/image): preserve image response after optimization by @styfle in vercel/next.js#96733

[16.3.x] Default deploy e2e tests to the repo next version by @eps1lon in vercel/next.js#96900

[backport] Bump @swc/helpers by @mischnic in vercel/next.js#96885

[backport] [turbopack] Raise registration calls in hoisted modules to the top by @lukesandberg in vercel/next.js#97308

[backport] Fix missing styled-jsx styles in Pages Router SSR on adapter builds by @lukesandberg in vercel/next.js#97302

[backport] [turbopack] Fix HMR for dynamic imports evaluated from layouts by @lukesandberg in vercel/next.js#97317

[backport] Restore the live headers() view of the incoming request by @unstubbable in vercel/next.js#97311

[backport] Allow literal exports in 'use cache' files by @unstubbable in vercel/next.js#97312

[backport] Keep the dev validation worker alive across HMR updates by @unstubbable in vercel/next.js#97315

[backport] Discard only cache entries that predate a tag revalidation, and reuse completed entries by @unstubbable in vercel/next.js#97314

[backport] Encode the cache item name built by unstable_cache by @unstubbable in vercel/next.js#97313

[16.3] [ci] Use OIDC tokens to read private preview builds by @eps1lon in vercel/next.js#97258

[backport] [test] Compile the middleware redirect routes up front in dev by @lukesandberg in vercel/next.js#97328

[backport] Fix Nav Inspector request loop on repeat captures by @acdlite in vercel/next.js#97326

[backport] Fix: Optimistic routing bugs leading to repeated prefetch loops by @acdlite in vercel/next.js#97325

[backport] Retain fewer stale cache versions and use a TTL, plus the mtime fallback by @lukesandberg in vercel/next.js#97304

[backport] Revert i18n localization change for dynamic Pages API routes (#94905) by @gaojude in vercel/next.js#97330

Full Changelog: vercel/next.js@v16.3.0...v16.3.1

v16.3.1-canary.26

Misc Changes

docs: document deploymentId build ID override and Pages Router skew in 16.2: #97645

Upgrade React from eb8feb71-20260814 to eafeac09-20260819: #97636

Turbopack: rename to use turbopack: no side effects: #94427

refactor: move useDynamic{Route,Search}Params to reduce snapshot churn: #97360

... (truncated)

Commits

d0ac882 v16.3.2
3d32eb8 v16.3.1
d73f562 v16.3.0
4fd843f v16.3.0-canary.107
9480f7f v16.3.0-canary.106
a8dcd25 v16.3.0-canary.105
38f0cde v16.3.0-canary.104
f3edea1 v16.3.0-canary.103
0d5ff0d v16.3.0-canary.102
cf1e001 v16.3.0-canary.101
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}

…h 8 updates Bumps the compatible-updates group with 8 updates in the /code-review-bot directory: | Package | From | To | | --- | --- | --- | | [@ai-sdk/mcp](https://github.com/vercel/ai/tree/HEAD/packages/mcp) | `1.0.59` | `1.0.72` | | [@ai-sdk/openai](https://github.com/vercel/ai/tree/HEAD/packages/openai) | `3.0.81` | `3.0.99` | | [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `6.0.220` | `6.0.264` | | [next](https://github.com/vercel/next.js) | `16.2.12` | `16.3.2` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.10.0` | `24.13.3` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.7` | `19.2.18` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.3` | `19.2.5` | | [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.2.12` | `16.3.2` | Updates `@ai-sdk/mcp` from 1.0.59 to 1.0.72 - [Release notes](https://github.com/vercel/ai/releases) - [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/mcp@1.0.72/packages/mcp/CHANGELOG.md) - [Commits](https://github.com/vercel/ai/commits/@ai-sdk/mcp@1.0.72/packages/mcp) Updates `@ai-sdk/openai` from 3.0.81 to 3.0.99 - [Release notes](https://github.com/vercel/ai/releases) - [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/openai@3.0.99/packages/openai/CHANGELOG.md) - [Commits](https://github.com/vercel/ai/commits/@ai-sdk/openai@3.0.99/packages/openai) Updates `ai` from 6.0.220 to 6.0.264 - [Release notes](https://github.com/vercel/ai/releases) - [Changelog](https://github.com/vercel/ai/blob/ai@6.0.264/packages/ai/CHANGELOG.md) - [Commits](https://github.com/vercel/ai/commits/ai@6.0.264/packages/ai) Updates `next` from 16.2.12 to 16.3.2 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.2.12...v16.3.2) Updates `@types/node` from 24.10.0 to 24.13.3 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@types/react` from 19.2.7 to 19.2.18 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `@types/react-dom` from 19.2.3 to 19.2.5 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `eslint-config-next` from 16.2.12 to 16.3.2 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](https://github.com/vercel/next.js/commits/v16.3.2/packages/eslint-config-next) --- updated-dependencies: - dependency-name: "@ai-sdk/mcp" dependency-version: 1.0.72 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: compatible-updates - dependency-name: "@ai-sdk/openai" dependency-version: 3.0.99 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: compatible-updates - dependency-name: ai dependency-version: 6.0.264 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: compatible-updates - dependency-name: next dependency-version: 16.3.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: compatible-updates - dependency-name: "@types/node" dependency-version: 24.13.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: compatible-updates - dependency-name: "@types/react" dependency-version: 19.2.18 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: compatible-updates - dependency-name: "@types/react-dom" dependency-version: 19.2.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: compatible-updates - dependency-name: eslint-config-next dependency-version: 16.3.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: compatible-updates ... Signed-off-by: dependabot[bot] <support@github.com>

greptile-apps · 2026-08-27T17:10:44Z

Greptile Summary

Updates eight compatible dependencies in the code-review bot and regenerates its pnpm lockfile.

Upgrades the AI SDK, OpenAI provider, and MCP client packages.
Upgrades Next.js and its matching ESLint configuration.
Refreshes Node, React, and React DOM type declarations and associated transitive dependencies.

Confidence Score: 5/5

The dependency update appears safe to merge, with no concrete compatibility, build, runtime, or security defect identified.

The manifest and lockfile remain synchronized, the declared Node runtime satisfies the upgraded packages, and the investigated application and tooling integrations revealed no actionable incompatibility.

Important Files Changed

Filename	Overview
code-review-bot/package.json	Updates eight pinned runtime and development dependencies while preserving aligned Next.js and ESLint configuration versions.
code-review-bot/pnpm-lock.yaml	Regenerates resolved packages and transitive dependencies consistently with the manifest updates.

_{Reviews (1): Last reviewed commit: "build(deps): bump the compatible-updates..." | Re-trigger Greptile}

dependabot · 2026-09-03T17:07:03Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 27, 2026

dependabot Bot closed this Sep 3, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/code-review-bot/compatible-updates-7ec8a22e79 branch September 3, 2026 17:07

Navigation Menu

build(deps): bump the compatible-updates group across 1 directory with 8 updates - #19

build(deps): bump the compatible-updates group across 1 directory with 8 updates#19
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/code-review-bot/compatible-updates-7ec8a22e79

dependabot Bot commented on behalf of github Aug 27, 2026 •

edited

Loading

Uh oh!

greptile-apps Bot commented Aug 27, 2026

Important Files Changed

Uh oh!

dependabot Bot commented on behalf of github Sep 3, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Aug 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

1.0.72

Patch Changes

1.0.71

Patch Changes

1.0.70

Patch Changes

1.0.69

Patch Changes

1.0.68

Patch Changes

1.0.67

Patch Changes

1.0.66

Patch Changes

1.0.65

3.0.99

Patch Changes

3.0.98

Patch Changes

3.0.97

Patch Changes

3.0.96

Patch Changes

3.0.95

Patch Changes

3.0.94

Patch Changes

6.0.264

Patch Changes

6.0.263

Patch Changes

6.0.262

Patch Changes

6.0.261

Patch Changes

6.0.260

Patch Changes

6.0.259

Patch Changes

6.0.258

Patch Changes

v16.3.2

Core Changes

Credits

v16.3.1

What's Changed

v16.3.1-canary.26

Misc Changes

v16.3.2

Core Changes

Credits

v16.3.1

What's Changed

v16.3.1-canary.26

Misc Changes

Uh oh!

greptile-apps Bot commented Aug 27, 2026

Greptile Summary

Confidence Score: 5/5

Important Files Changed

Uh oh!

dependabot Bot commented on behalf of github Sep 3, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Aug 27, 2026 •

edited

Loading