Skip to content

chore(deps): bump the compatible-updates group across 1 directory with 10 updates - #20

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/code-review-bot/compatible-updates-528f5cf8e4
Closed

chore(deps): bump the compatible-updates group across 1 directory with 10 updates#20
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/code-review-bot/compatible-updates-528f5cf8e4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 3, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the compatible-updates group with 10 updates in the /code-review-bot directory:

Package From To
@ai-sdk/mcp 1.0.59 1.0.78
@ai-sdk/openai 3.0.81 3.0.109
ai 6.0.220 6.0.277
modal 0.9.0 0.10.0
next 16.2.12 16.3.4
zod 4.4.3 4.5.4
@types/node 24.10.0 24.13.3
@types/react 19.2.7 19.2.18
@types/react-dom 19.2.3 19.2.7
eslint-config-next 16.2.12 16.3.4

Updates @ai-sdk/mcp from 1.0.59 to 1.0.78

Changelog

Sourced from @​ai-sdk/mcp's changelog.

1.0.78

Patch Changes

  • 172d3c0: feat(mcp): surface server-provided tool annotations in tool metadata

1.0.77

Patch Changes

  • Updated dependencies [cc23556]
    • @​ai-sdk/provider-utils@​4.0.50

1.0.76

Patch Changes

  • Updated dependencies [9a521b9]
    • @​ai-sdk/provider-utils@​4.0.49

1.0.75

Patch Changes

  • 878bdb9: Apply MCP scope selection to dynamic client registration as well as authorization.
  • 204ce6c: fix(mcp): reject private OAuth endpoints before sending credentials

1.0.74

Patch Changes

  • e7d359e: Fetch all paginated tool definitions when creating an MCP tool set.
  • Updated dependencies [5642849]
    • @​ai-sdk/provider-utils@​4.0.48

1.0.73

Patch Changes

  • b8e4215: fix(mcp): support spawning command shims such as npx on Windows
  • Updated dependencies [2d172fb]
    • @​ai-sdk/provider-utils@​4.0.47

1.0.72

Patch Changes

  • 0075ed5: fix(mcp): reject SSE requests when POST responses are unsuccessful

1.0.71

... (truncated)

Commits

Updates @ai-sdk/openai from 3.0.81 to 3.0.109

Release notes

Sourced from @​ai-sdk/openai's releases.

@​ai-sdk/rsc@​3.0.97

Patch Changes

  • Updated dependencies [ef3bac4]
  • Updated dependencies [9942196]
    • ai@7.0.97
    • @​ai-sdk/provider@​4.0.13
    • @​ai-sdk/provider-utils@​5.0.39

@​ai-sdk/rsc@​3.0.96

Patch Changes

  • Updated dependencies [912fb01]
  • Updated dependencies [c595e6e]
    • @​ai-sdk/provider@​4.0.12
    • ai@7.0.96
    • @​ai-sdk/provider-utils@​5.0.38

@​ai-sdk/rsc@​3.0.95

Patch Changes

  • Updated dependencies [27f6d7a]
    • ai@7.0.95
Changelog

Sourced from @​ai-sdk/openai's changelog.

3.0.109

Patch Changes

  • 7f3b8f0: feat(openai): add GPT-6 reasoning configuration updates

3.0.108

Patch Changes

  • 019eec8: feat(openai): add support for the gpt-6-astra

3.0.107

Patch Changes

  • 8844beb: fix(openai): flatten mid-stream Responses error events
  • cf1ba03: fix(openai): preserve complete Responses API raw usage objects

3.0.106

Patch Changes

  • 85ba0b0: Preserve explicit prompt cache breakpoints on scalar Responses tool results.

3.0.105

Patch Changes

  • Updated dependencies [cc23556]
    • @​ai-sdk/provider-utils@​4.0.50

3.0.104

Patch Changes

  • 426c9b3: Normalize non-object replayed Chat Completions tool arguments to empty objects.
  • 34d045d: Fix Responses history serialization for regular functions named tool_search.

3.0.103

Patch Changes

  • 9a521b9: Split OpenAI and Azure OpenAI embedding requests by a conservative UTF-8 byte budget derived from their aggregate token limit, in addition to input count limits.
  • Updated dependencies [9a521b9]
    • @​ai-sdk/provider-utils@​4.0.49

3.0.102

Patch Changes

... (truncated)

Commits

Updates ai from 6.0.220 to 6.0.277

Changelog

Sourced from ai's changelog.

6.0.277

Patch Changes

  • Updated dependencies [8839d87]
    • @​ai-sdk/gateway@​3.0.189

6.0.276

Patch Changes

  • 760ac87: fix(ai): preserve provider metadata from empty smooth stream deltas
  • 5e43974: fix(ai): skip smoothStream delays while the document is hidden
  • Updated dependencies [13507cb]
  • Updated dependencies [7782fec]
  • Updated dependencies [978e084]
  • Updated dependencies [d0c255c]
    • @​ai-sdk/gateway@​3.0.188

6.0.275

Patch Changes

  • Updated dependencies [57d88f5]
    • @​ai-sdk/gateway@​3.0.187

6.0.274

Patch Changes

  • 0b790f3: fix(ai): preserve approval descriptors in UI message streams

6.0.273

Patch Changes

  • 6e632b8: Expose parsed structured output in streamText end callbacks.
  • Updated dependencies [5ab6f63]
    • @​ai-sdk/gateway@​3.0.186

6.0.272

Patch Changes

  • e822a1d: Reject generateText responses that do not satisfy a required or specifically selected tool choice, and expose the normalized response content on ToolChoiceViolationError for opt-in recovery.
  • 8c51a25: fix(ai): allow tool approval secrets in ToolLoopAgent settings and prepareCall
  • Updated dependencies [cc23556]
  • Updated dependencies [823cc03]
  • Updated dependencies [3f96cf8]
    • @​ai-sdk/provider-utils@​4.0.50

... (truncated)

Commits

Updates modal from 0.9.0 to 0.10.0

Commits
  • e98d535 Release v0.10.0 of JS / Go SDKs (#55749)
  • 87bab0e Hide inherited GRPCError properties and other methods on exception types (#55...
  • 05f435e [sdk] formally deprecate old public API (#55420)
  • a38e62b Add reference doc links in JS and Go changelogs (#55717)
  • f0ca081 [JS SDK] Logging API (#49177)
  • 8b6b0e4 [sdk] update more callsites to use private APIs instead of deprecated public ...
  • f5a65f5 proto for passing function through functionget (#54449)
  • b2a7662 [sdk] Make _Object._is_hydrated a @property decorated field (#55385)
  • 35c5b81 client: [typescript] Add snapshot on exit for v1/v2 sandboxes (#55178)
  • c87f989 client: [go] Add snapshot on exit for v1/v2 sandboxes (#55181)
  • Additional commits viewable in compare view

Updates next from 16.2.12 to 16.3.4

Release notes

Sourced from next's releases.

v16.3.4

Follow-up release to v16.3.3 re-enabling AVIF Image Optimization (#97949).

The following bug fixes have been backported. It does not include all pending features/changes on canary.

  • testmode: Fix infinite recursion in testmode passthrough fetch (#97691)
  • Fix build error when aliasing typescript to @​typescript/typescript6 (#97997)
  • Fix unset crossOrigin in Turbopack manifests (#97930)

Credits

Huge thanks to @​eps1lon, @​mischnic, and @​timneutkens for helping!

v16.3.3

This release contains security fixes for the following advisories:

Critical:

v16.3.2

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • [backport] Scope app-entry export validation to files inside the app directory (#97357)
  • [backport] Fix catch-all index page being served for every other slug (#97416)
  • [16.3] Turbopack: don't trace embedded WASM loader helpers (#97353) (#97463)
  • [16.3] Turbopack: retain conditions when replacing resolve request keys (#97453)
  • [16.3.x] Fix Turbopack worker chunk loading with asset prefix (#97419)
  • [16.3.x] Authenticate Turborepo remote caching with OIDC instead of a static PAT (#97603)

Credits

Huge thanks to @​lubieowoce, @​unstubbable, @​timneutkens, @​mischnic, and @​eps1lon for helping!

v16.3.1

What's Changed

... (truncated)

Commits
  • 299180d v16.3.4
  • 12e173d [16.3.x] Re-enable AVIF image optimization and require sharp 0.35.4 (#97949)
  • 5d9022e [backport] Fix unset crossOrigin in Turbopack manifests (#97930)
  • d8f4560 [16.3.x] Fix build error when aliasing typescript to @​typescript/typescript6 ...
  • 656aebf [16.3] testmode: Fix infinite recursion in testmode passthrough fetch (#97691)
  • f37c1d6 [16.3.x] ci: remove pull_request_stats workflow (#97975)
  • a9a1cb7 v16.3.3
  • 968b9fc [16.3.x] Fix ISR misses with backslashes in segments when deployed on Windows
  • 3a15b4a [16.3.x] [next/image]: disable avif image optimization
  • 7378b51 Backport/docs fixes 16.3 (#97649)
  • Additional commits viewable in compare view

Updates zod from 4.4.3 to 4.5.4

Release notes

Sourced from zod's releases.

v4.5.4

Commits:

  • 84e416fbf4740527bbc8f319634f4e1b065bb42c fix(v4): stop the cycle walk from firing a default factory (#6500)
  • e8e206fa33ac5fe7ce20a2beb12d57b1cb3df653 4.5.4

v4.5.3

Commits:

  • e6b6ab347675cd2bd54b1bdbed16f98c59be82a9 docs(blog): widen the z.compile example to a 20-property schema
  • 87d6464418582bb96fc665a01f852ca6da324ad0 fix(docs): drop the OG description when the title wraps past two lines
  • 99fce394a026823e602b9c30d8d5d9f5f1932ce7 bench(v4): z.compile() against zod-compiler (#6499)
  • e3a695b6bf3f0d591ea682816e3cdaea04b0f967 docs(v4): record the email regex and container output-shape findings under Open
  • 7e24a24288183ce02554f1ded7775d0650a7b7e6 docs(blog): drop the reading time and put a GitHub link in the navbar
  • eab51ff3592b2d11d863f4ee4d5452f31a3de1b6 fix(v4): emit record numeric keys as strings in toJSONSchema (#6497)

v4.5.2

Commits:

  • a354314ac04fdd5484aa62dd5c3a4b553211a0e4 fix(docs): keep blog posts out of the docs collection (#6484)
  • d378c42aff6869f0929058a7923cd775880f5c4c ci: drop canary publishing from the release workflow (#6487)
  • 212b941791e7faae078e17645eb612824fd8f79a fix(v4): let a prototype method getter answer a bare call so vi.spyOn works (#6488)
  • e7576f542a7bc7ef3cc5eeec237714fd0e6b6e98 docs(blog): let the page show through the navbar in dark mode (#6489)
  • fedb06fafe33a66ce0b5c236ad2557e0a5a170fe fix(docs): match the blog TOC hover bar to the 2px active indicator
  • 6c932fcb2eea6eb671710ea058ca9fdc382ada89 chore: bump devcontainer image to Node 24 (#6470)
  • 6635d9dd367a664109de83c021995821f48efa29 docs(blog): soften the "method memoization" attribution
  • 019ae299cc75daa132bf1acf59086a520abf6b85 fix(docs): drop ISR on the docs route so the home page hydrates
  • 652bb438aa4c626c1cd7948c6849c4691239fca7 chore(docs): drop the scroll log from the route-change scroller
  • 571c8e8a3d73b4305f4abfdd6977773cc12f2bf5 fix(docs): render blog tabs with the stock fumadocs tab card
  • 9a193aa24b4efa3b315b91d4c56c8bc385b8513f 4.5.2

v4.5.1

Commits:

  • 2e862dbf89da2835e5206a8fd3d3be61afe3cf7f ci: gate the GitHub release and JSR publish on the version being live on npm
  • 8e03380510db36fa6fda979fc78a375fdea8021c 4.5.1

v4.5.0

Zod 4.5 is now available.

npm install zod@latest

At a glance:

... (truncated)

Commits
  • e8e206f 4.5.4
  • 84e416f fix(v4): stop the cycle walk from firing a default factory (#6500)
  • 1a16102 4.5.3
  • eab51ff fix(v4): emit record numeric keys as strings in toJSONSchema (#6497)
  • 7e24a24 docs(blog): drop the reading time and put a GitHub link in the navbar
  • e3a695b docs(v4): record the email regex and container output-shape findings under Open
  • 99fce39 bench(v4): z.compile() against zod-compiler (#6499)
  • 87d6464 fix(docs): drop the OG description when the title wraps past two lines
  • e6b6ab3 docs(blog): widen the z.compile example to a 20-property schema
  • 9a193aa 4.5.2
  • Additional commits viewable in compare view

Updates @types/node from 24.10.0 to 24.13.3

Commits

Updates @types/react from 19.2.7 to 19.2.18

Commits

Updates @types/react-dom from 19.2.3 to 19.2.7

Commits

Updates eslint-config-next from 16.2.12 to 16.3.4

Release notes

Sourced from eslint-config-next's releases.

v16.3.4

Follow-up release to v16.3.3 re-enabling AVIF Image Optimization (#97949).

The following bug fixes have been backported. It does not include all pending features/changes on canary.

  • testmode: Fix infinite recursion in testmode passthrough fetch (#97691)
  • Fix build error when aliasing typescript to @​typescript/typescript6 (#97997)
  • Fix unset crossOrigin in Turbopack manifests (#97930)

Credits

Huge thanks to @​eps1lon, @​mischnic, and @​timneutkens for helping!

v16.3.3

This release contains security fixes for the following advisories:

Critical:

v16.3.2

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • [backport] Scope app-entry export validation to files inside the app directory (#97357)
  • [backport] Fix catch-all index page being served for every other slug (#97416)
  • [16.3] Turbopack: don't trace embedded WASM loader helpers (#97353) (#97463)
  • [16.3] Turbopack: retain conditions when replacing resolve request keys (#97453)
  • [16.3.x] Fix Turbopack worker chunk loading with asset prefix (#97419)
  • [16.3.x] Authenticate Turborepo remote caching with OIDC instead of a static PAT (#97603)

Credits

Huge thanks to @​lubieowoce, @​unstubbable, @​timneutkens, @​mischnic, and @​eps1lon for helping!

v16.3.1

What's Changed

... (truncated)

Commits

View with [code]smith Autofix with [code]smith
Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 3, 2026
@greptile-apps

greptile-apps Bot commented Sep 3, 2026

Copy link
Copy Markdown

Greptile Summary

This PR updates ten runtime and development dependencies in the code-review-bot example and refreshes the pnpm lockfile.

  • Updates the Vercel AI SDK, OpenAI provider, MCP client, Modal client, Next.js, and Zod.
  • Updates Node, React, and React DOM type packages plus the Next.js ESLint configuration.
  • Keeps the resolved dependency graph aligned with the updated manifest.

Confidence Score: 5/5

The PR appears safe to merge because no concrete dependency incompatibility or changed-code failure was identified.

The updated manifest and lockfile remain synchronized, and the resolved Node, React, TypeScript, ESLint, Zod, AI SDK, and harness peer constraints are compatible with the versions used by the application.

Important Files Changed
Filename Overview
code-review-bot/package.json Updates ten pinned dependencies; the resulting versions satisfy the repository's declared Node version and the relevant peer dependency ranges.
code-review-bot/pnpm-lock.yaml Regenerates direct and transitive resolutions consistently with the manifest updates, with no concrete incompatible resolution identified.

Reviews (1): Last reviewed commit: "build(deps): bump the compatible-updates..." | Re-trigger Greptile

@dependabot
chore(deps): bump the compatible-updates group across 1 directory wit…
204bdfb 
…h 10 updates

Bumps the compatible-updates group with 10 updates in the /code-review-bot directory:

| Package | From | To |
| --- | --- | --- |
| [@ai-sdk/mcp](https://github.com/vercel/ai/tree/HEAD/packages/mcp) | `1.0.59` | `1.0.78` |
| [@ai-sdk/openai](https://github.com/vercel/ai/tree/HEAD/packages/openai) | `3.0.81` | `3.0.109` |
| [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `6.0.220` | `6.0.277` |
| [modal](https://github.com/modal-labs/modal-client) | `0.9.0` | `0.10.0` |
| [next](https://github.com/vercel/next.js) | `16.2.12` | `16.3.4` |
| [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.5.4` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.10.0` | `24.13.3` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.7` | `19.2.18` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.3` | `19.2.7` |
| [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.2.12` | `16.3.4` |



Updates `@ai-sdk/mcp` from 1.0.59 to 1.0.78
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/mcp@1.0.78/packages/mcp/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/mcp@1.0.78/packages/mcp)

Updates `@ai-sdk/openai` from 3.0.81 to 3.0.109
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/openai@3.0.109/packages/openai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/openai@3.0.109/packages/openai)

Updates `ai` from 6.0.220 to 6.0.277
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/ai@6.0.277/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@6.0.277/packages/ai)

Updates `modal` from 0.9.0 to 0.10.0
- [Changelog](https://github.com/modal-labs/modal-client/blob/main/CHANGELOG_DEV.md)
- [Commits](modal-labs/modal-client@go/v0.9.0...go/v0.10.0)

Updates `next` from 16.2.12 to 16.3.4
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.2.12...v16.3.4)

Updates `zod` from 4.4.3 to 4.5.4
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.4.3...v4.5.4)

Updates `@types/node` from 24.10.0 to 24.13.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/react` from 19.2.7 to 19.2.18
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@types/react-dom` from 19.2.3 to 19.2.7
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `eslint-config-next` from 16.2.12 to 16.3.4
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](https://github.com/vercel/next.js/commits/v16.3.4/packages/eslint-config-next)

---
updated-dependencies:
- dependency-name: "@ai-sdk/mcp"
  dependency-version: 1.0.77
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: compatible-updates
- dependency-name: "@ai-sdk/openai"
  dependency-version: 3.0.105
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: compatible-updates
- dependency-name: "@types/node"
  dependency-version: 24.13.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: compatible-updates
- dependency-name: "@types/react"
  dependency-version: 19.2.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: compatible-updates
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: compatible-updates
- dependency-name: ai
  dependency-version: 6.0.272
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: compatible-updates
- dependency-name: eslint-config-next
  dependency-version: 16.3.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: compatible-updates
- dependency-name: modal
  dependency-version: 0.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: compatible-updates
- dependency-name: next
  dependency-version: 16.3.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: compatible-updates
- dependency-name: zod
  dependency-version: 4.5.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: compatible-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): bump the compatible-updates group across 1 directory with 10 updates chore(deps): bump the compatible-updates group across 1 directory with 10 updates Sep 10, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/code-review-bot/compatible-updates-528f5cf8e4 branch from 366a7cb to 204bdfb Compare September 10, 2026 17:10
@dependabot @github

dependabot Bot commented on behalf of github Sep 17, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 17, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/code-review-bot/compatible-updates-528f5cf8e4 branch September 17, 2026 17:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants