Skip to content

Bump the npm-minor-patch group across 1 directory with 3 updates - #50

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-patch-49d5fb8e32
Open

Bump the npm-minor-patch group across 1 directory with 3 updates#50
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-patch-49d5fb8e32

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 3, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-minor-patch group with 3 updates in the / directory: eve, zod and tsx.

Updates eve from 0.24.4 to 0.47.3

Release notes

Sourced from eve's releases.

eve@0.47.3

Patch Changes

  • 9d28f89: Identify requests from the eve dev terminal UI with an eve-tui/<version> User-Agent product token while preserving caller-supplied User-Agent values.
  • cace2c5: Add the internal versioned protocol and reducer used by channel activity renderers.
  • 76f1bbd: Show authored-source rebuild and load progress in the eve dev status bar, even when server logs are hidden.
  • 44c6af2: Report root, delegated work, action, and blocker lifecycle to activity collectors.
  • b8a635c: Generated Sign in with Vercel Web Chat starters now place the account control at the top-left, opposite the new-chat action, with a smaller profile image.
  • 05b12e3: Instrumentation-provider content delivery now depends only on each provider's capture declaration: providers that declare capture: "content" receive full event content regardless of channel audience or OpenTelemetry tracePolicy. Separately, a tracePolicy that drops the eve trace no longer disables AI SDK telemetry: metadata-only AI spans (model, tokens, and timing, without message content) are still emitted into the ambient Workflow trace, and agent.session is not emitted.
  • 17d2445: Keep earlier Slack approval cards visibly settled when several approvals share one message and are answered out of order.
  • 55649a5: Preserve normal follow-up messages while an approval with responder authorization remains pending.
  • 3c8f2fe: Collect and render activity independently from the root agent session.

eve@0.47.2

Patch Changes

  • c77faa5: Use openai/gpt-5.6-luna-fast as the default model for config-less agents, new projects, and the setup model picker.
  • edc6127: Large authored dependency graphs no longer crash eve dev or eve eval while preparing the final host. Dynamic capabilities are now transformed only while preparing the authored generation.

eve@0.47.1

Patch Changes

  • 624d07d: Show the agent card and an editing-only prompt while eve dev builds the local agent, and simplify the card to branding, agent name, and a Tip. Text typed during startup is preserved for the initialized terminal UI, while submission remains disabled until startup completes.

eve@0.47.0

Minor Changes

  • 52e89ef: Add delete() to the runtime sandbox handle for permanently deleting the current session sandbox and reprovisioning it on the next access. Docker handles stay bound to one physical container, and sandbox onSession callbacks now receive session metadata through ctx while using use() for sandbox access.

Patch Changes

  • a3b23c0: Eval contexts and sessions now expose a formatted transcript of observed user and assistant messages, which can be passed directly to an LLM judge for multi-turn conversation grading.
  • 56514d9: Models with slug ending in -thinking are now resolved to the correct model instead of failing with does not have known AI Gateway context window metadata error or silently using the base model's context window.
  • 41c8286: Restore Bash process substitution in Vercel sandboxes by providing the standard /dev/fd path whenever eve creates or resumes a sandbox session.
  • bdb3973: Preserve schedule provenance when a handler starts a session with user credentials. Scheduled background-task launches now stay silent instead of sending a launch acknowledgement, and schedule-created workflow runs expose $eve.schedule for attribution.
  • fccbf2b: Fix a TypeScript error in the generated Web Chat tool.tsx where trimEnd was called on string | number values returned by the tool output helper.

eve@0.46.1

Patch Changes

  • 16c8b63: Expose a replay-stable callId to MCP and OpenAPI providedArguments callbacks so connection tools can derive per-call idempotency keys.
  • e2d9162: Update the Linq channel adapter to preserve supported text decorations, including bold, italic, strikethrough, and underline, in outbound messages.
  • fbc3080: Add Shopify registry setup for searching products and building UCP carts and checkouts. Setup now generates an anonymous UCP profile that the connection advertises in production.
  • 2af4a4c: Tool inputs now stream through the durable event protocol as action.input.appended before the matching validated actions.requested event. Each event stores only its raw delta and UTF-16 offset, while the default message reducer exposes cumulative raw input on dynamic-tool.inputText in the input-streaming state. This advances the stream protocol to version 24; when assistant text precedes a tool call, message.completed now arrives before that call's streamed input events.
  • 122f565: Add a local dev TUI /info command that shows the same application, artifact, diagnostic, and messaging details as eve info. The human-readable report now begins directly with its application details instead of repeating an eve Info heading.

eve@0.46.0

Minor Changes

... (truncated)

Changelog

Sourced from eve's changelog.

0.47.3

Patch Changes

  • 9d28f89: Identify requests from the eve dev terminal UI with an eve-tui/<version> User-Agent product token while preserving caller-supplied User-Agent values.
  • cace2c5: Add the internal versioned protocol and reducer used by channel activity renderers.
  • 76f1bbd: Show authored-source rebuild and load progress in the eve dev status bar, even when server logs are hidden.
  • 44c6af2: Report root, delegated work, action, and blocker lifecycle to activity collectors.
  • b8a635c: Generated Sign in with Vercel Web Chat starters now place the account control at the top-left, opposite the new-chat action, with a smaller profile image.
  • 05b12e3: Instrumentation-provider content delivery now depends only on each provider's capture declaration: providers that declare capture: "content" receive full event content regardless of channel audience or OpenTelemetry tracePolicy. Separately, a tracePolicy that drops the eve trace no longer disables AI SDK telemetry: metadata-only AI spans (model, tokens, and timing, without message content) are still emitted into the ambient Workflow trace, and agent.session is not emitted.
  • 17d2445: Keep earlier Slack approval cards visibly settled when several approvals share one message and are answered out of order.
  • 55649a5: Preserve normal follow-up messages while an approval with responder authorization remains pending.
  • 3c8f2fe: Collect and render activity independently from the root agent session.

0.47.2

Patch Changes

  • c77faa5: Use openai/gpt-5.6-luna-fast as the default model for config-less agents, new projects, and the setup model picker.
  • edc6127: Large authored dependency graphs no longer crash eve dev or eve eval while preparing the final host. Dynamic capabilities are now transformed only while preparing the authored generation.

0.47.1

Patch Changes

  • 624d07d: Show the agent card and an editing-only prompt while eve dev builds the local agent, and simplify the card to branding, agent name, and a Tip. Text typed during startup is preserved for the initialized terminal UI, while submission remains disabled until startup completes.

0.47.0

Minor Changes

  • 52e89ef: Add delete() to the runtime sandbox handle for permanently deleting the current session sandbox and reprovisioning it on the next access. Docker handles stay bound to one physical container, and sandbox onSession callbacks now receive session metadata through ctx while using use() for sandbox access.

Patch Changes

  • a3b23c0: Eval contexts and sessions now expose a formatted transcript of observed user and assistant messages, which can be passed directly to an LLM judge for multi-turn conversation grading.
  • 56514d9: Models with slug ending in -thinking are now resolved to the correct model instead of failing with does not have known AI Gateway context window metadata error or silently using the base model's context window.
  • 41c8286: Restore Bash process substitution in Vercel sandboxes by providing the standard /dev/fd path whenever eve creates or resumes a sandbox session.
  • bdb3973: Preserve schedule provenance when a handler starts a session with user credentials. Scheduled background-task launches now stay silent instead of sending a launch acknowledgement, and schedule-created workflow runs expose $eve.schedule for attribution.
  • fccbf2b: Fix a TypeScript error in the generated Web Chat tool.tsx where trimEnd was called on string | number values returned by the tool output helper.

0.46.1

Patch Changes

  • 16c8b63: Expose a replay-stable callId to MCP and OpenAPI providedArguments callbacks so connection tools can derive per-call idempotency keys.
  • e2d9162: Update the Linq channel adapter to preserve supported text decorations, including bold, italic, strikethrough, and underline, in outbound messages.
  • fbc3080: Add Shopify registry setup for searching products and building UCP carts and checkouts. Setup now generates an anonymous UCP profile that the connection advertises in production.
  • 2af4a4c: Tool inputs now stream through the durable event protocol as action.input.appended before the matching validated actions.requested event. Each event stores only its raw delta and UTF-16 offset, while the default message reducer exposes cumulative raw input on dynamic-tool.inputText in the input-streaming state. This advances the stream protocol to version 24; when assistant text precedes a tool call, message.completed now arrives before that call's streamed input events.

... (truncated)

Commits

Updates zod from 4.4.3 to 4.5.4

Release notes

Sourced from zod's releases.

v4.5.4

Commits:

  • 84e416fbf4740527bbc8f319634f4e1b065bb42c fix(v4): stop the cycle walk from firing a default factory (#6500)
  • e8e206fa33ac5fe7ce20a2beb12d57b1cb3df653 4.5.4

v4.5.3

Commits:

  • e6b6ab347675cd2bd54b1bdbed16f98c59be82a9 docs(blog): widen the z.compile example to a 20-property schema
  • 87d6464418582bb96fc665a01f852ca6da324ad0 fix(docs): drop the OG description when the title wraps past two lines
  • 99fce394a026823e602b9c30d8d5d9f5f1932ce7 bench(v4): z.compile() against zod-compiler (#6499)
  • e3a695b6bf3f0d591ea682816e3cdaea04b0f967 docs(v4): record the email regex and container output-shape findings under Open
  • 7e24a24288183ce02554f1ded7775d0650a7b7e6 docs(blog): drop the reading time and put a GitHub link in the navbar
  • eab51ff3592b2d11d863f4ee4d5452f31a3de1b6 fix(v4): emit record numeric keys as strings in toJSONSchema (#6497)

v4.5.2

Commits:

  • a354314ac04fdd5484aa62dd5c3a4b553211a0e4 fix(docs): keep blog posts out of the docs collection (#6484)
  • d378c42aff6869f0929058a7923cd775880f5c4c ci: drop canary publishing from the release workflow (#6487)
  • 212b941791e7faae078e17645eb612824fd8f79a fix(v4): let a prototype method getter answer a bare call so vi.spyOn works (#6488)
  • e7576f542a7bc7ef3cc5eeec237714fd0e6b6e98 docs(blog): let the page show through the navbar in dark mode (#6489)
  • fedb06fafe33a66ce0b5c236ad2557e0a5a170fe fix(docs): match the blog TOC hover bar to the 2px active indicator
  • 6c932fcb2eea6eb671710ea058ca9fdc382ada89 chore: bump devcontainer image to Node 24 (#6470)
  • 6635d9dd367a664109de83c021995821f48efa29 docs(blog): soften the "method memoization" attribution
  • 019ae299cc75daa132bf1acf59086a520abf6b85 fix(docs): drop ISR on the docs route so the home page hydrates
  • 652bb438aa4c626c1cd7948c6849c4691239fca7 chore(docs): drop the scroll log from the route-change scroller
  • 571c8e8a3d73b4305f4abfdd6977773cc12f2bf5 fix(docs): render blog tabs with the stock fumadocs tab card
  • 9a193aa24b4efa3b315b91d4c56c8bc385b8513f 4.5.2

v4.5.1

Commits:

  • 2e862dbf89da2835e5206a8fd3d3be61afe3cf7f ci: gate the GitHub release and JSR publish on the version being live on npm
  • 8e03380510db36fa6fda979fc78a375fdea8021c 4.5.1

v4.5.0

Zod 4.5 is now available.

npm install zod@latest

At a glance:

... (truncated)

Commits
  • e8e206f 4.5.4
  • 84e416f fix(v4): stop the cycle walk from firing a default factory (#6500)
  • 1a16102 4.5.3
  • eab51ff fix(v4): emit record numeric keys as strings in toJSONSchema (#6497)
  • 7e24a24 docs(blog): drop the reading time and put a GitHub link in the navbar
  • e3a695b docs(v4): record the email regex and container output-shape findings under Open
  • 99fce39 bench(v4): z.compile() against zod-compiler (#6499)
  • 87d6464 fix(docs): drop the OG description when the title wraps past two lines
  • e6b6ab3 docs(blog): widen the z.compile example to a 20-property schema
  • 9a193aa 4.5.2
  • Additional commits viewable in compare view

Updates tsx from 4.23.1 to 4.23.13

Release notes

Sourced from tsx's releases.

v4.23.13

4.23.13 (2026-08-30)

Bug Fixes

  • cache: bound shared transform cache memory (#835) (28e1f12)

This release is also available on:

v4.23.12

4.23.12 (2026-08-10)

Bug Fixes

  • shim import.meta when tokens are split by comments or newlines (#829) (ed9d330), closes #828

This release is also available on:

v4.23.11

4.23.11 (2026-08-07)

Bug Fixes

  • preserve async ESM require fallback (55cbece)

This release is also available on:

v4.23.10

4.23.10 (2026-08-07)

Bug Fixes


This release is also available on:

v4.23.9

4.23.9 (2026-08-06)

... (truncated)

Commits
  • 28e1f12 fix(cache): bound shared transform cache memory (#835)
  • ed9d330 fix: shim import.meta when tokens are split by comments or newlines (#829)
  • 651f5be test: cover CommonJS TypeScript import.meta paths
  • bd3bc64 test: cover CommonJS loader source fallback
  • 55cbece fix: preserve async ESM require fallback
  • 6c5ba85 docs: document CommonJS default interop
  • ec1bcd5 fix: support nyc coverage discovery (#710)
  • b6e5b48 docs: clarify CommonJS default imports
  • 2f55884 fix: map Node test locations
  • de935d5 docs: document Node source-map stack formatting
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm-minor-patch group with 3 updates in the / directory: [eve](https://github.com/vercel/eve/tree/HEAD/packages/eve), [zod](https://github.com/colinhacks/zod) and [tsx](https://github.com/privatenumber/tsx).


Updates `eve` from 0.24.4 to 0.47.3
- [Release notes](https://github.com/vercel/eve/releases)
- [Changelog](https://github.com/vercel/eve/blob/main/packages/eve/CHANGELOG.md)
- [Commits](https://github.com/vercel/eve/commits/eve@0.47.3/packages/eve)

Updates `zod` from 4.4.3 to 4.5.4
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.4.3...v4.5.4)

Updates `tsx` from 4.23.1 to 4.23.13
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.1...v4.23.13)

---
updated-dependencies:
- dependency-name: eve
  dependency-version: 0.47.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: zod
  dependency-version: 4.5.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: tsx
  dependency-version: 4.23.13
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 3, 2026
@dependabot
dependabot Bot requested a review from paulieb89 as a code owner September 3, 2026 05:24
@vercel

vercel Bot commented Sep 3, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
evolve Error Error Sep 3, 2026 5:24am UTC

Request Review

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 3, 2026
@evolve-bch

evolve-bch Bot commented Sep 3, 2026

Copy link
Copy Markdown
Contributor

This session could not recover from an error (FatalError: Step "step//eve@0.24.4//turnStep" failed after 3 retries: Sandbox template "eve-sbx-tpl-vercel-fdd3dc5c57df45a2-5f60d2070db448f53eb4" is not provisioned for ba…).

Start a new comment to continue.

Error id: cdf262ba-8f5d-4e95-956d-897c469028da

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants