Skip to content

chore(deps): bump the minor-and-patch group across 1 directory with 29 updates#102

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/bun/minor-and-patch-94b0c9af16
Open

chore(deps): bump the minor-and-patch group across 1 directory with 29 updates#102
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/bun/minor-and-patch-94b0c9af16

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 16, 2026 •
edited
Loading

Bumps the minor-and-patch group with 29 updates in the / directory:

Package From To
@modelcontextprotocol/sdk 1.27.1 1.29.0
ai 6.0.68 6.0.164
markitdown-ts 0.0.9 0.0.10
minimatch 10.1.1 10.2.5
nanoid 5.1.6 5.1.9
node-llama-cpp 3.17.1 3.18.1
officeparser 6.0.4 6.1.0
react 19.2.4 19.2.5
react-dom 19.2.4 19.2.5
react-force-graph-2d 1.29.0 1.29.1
sqlite-vec 0.1.7-alpha.2 0.1.9
streamdown 2.1.0 2.5.0
tailwind-merge 3.4.0 3.5.0
tailwindcss 4.1.18 4.2.2
use-stick-to-bottom 1.1.2 1.1.3
@ai-sdk/openai 3.0.25 3.0.53
@biomejs/biome 2.3.14 2.4.12
@tailwindcss/cli 4.1.18 4.2.2
@types/bun 1.3.8 1.3.12
ajv 8.17.1 8.18.0
docx 9.5.1 9.6.1
happy-dom 20.8.9 20.9.0
lefthook 2.1.4 2.1.6
oxfmt 0.28.0 0.45.0
oxlint 1.43.0 1.60.0
oxlint-tsgolint 0.11.5 0.21.1
playwright 1.58.2 1.59.1
ultracite 7.1.5 7.5.9
vitest 4.0.18 4.1.4

Updates @modelcontextprotocol/sdk from 1.27.1 to 1.29.0

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

v1.29.0

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@v1.28.0...v1.29.0

v1.28.0

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@v1.27.1...v1.28.0

Commits

Updates ai from 6.0.68 to 6.0.164

Release notes

Sourced from ai's releases.

ai@6.0.164

Patch Changes

  • Updated dependencies [83434a9]
    • @​ai-sdk/gateway@​3.0.101

ai@6.0.163

Patch Changes

  • Updated dependencies [a27a631]
    • @​ai-sdk/gateway@​3.0.100
Commits
  • e662efd Version Packages (#14510)
  • 83434a9 Backport: feat (provider/gateway): add provider routing sort options (#14508)
  • 3aa3a68 Version Packages (#14507)
  • a27a631 Backport: feat (provider/gateway): make model list resilient to unknown model...
  • a2d619a Version Packages (#14502)
  • b937f3e Backport: fix(xai): support encrypted reasoning round-trip for ZDR (#14497)
  • b0e5ab3 Version Packages (#14494)
  • 8c4abaf Backport: chore(provider/gateway): update gateway model settings files v6 (#1...
  • 536433f Version Packages (#14469)
  • 9031f26 Backport: fix(gateway): add 'reranking' to modelType validation schema and ty...
  • Additional commits viewable in compare view

Updates markitdown-ts from 0.0.9 to 0.0.10

Release notes

Sourced from markitdown-ts's releases.

v0.0.10

No significant changes

    View changes on GitHub
Commits

Updates minimatch from 10.1.1 to 10.2.5

Changelog

Sourced from minimatch's changelog.

change log

10.2

  • Add braceExpandMax option

10.1

  • Add magicalBraces option for escape
  • Fix makeRe when partial: true is set.
  • Fix makeRe when pattern ends in a final ** path part.

10.0

  • Require node 20 or 22 and higher

9.0

  • No default export, only named exports.

8.0

  • Recursive descent parser for extglob, allowing correct support for arbitrarily nested extglob expressions
  • Bump required Node.js version

7.4

  • Add escape() method
  • Add unescape() method
  • Add Minimatch.hasMagic() method

7.3

  • Add support for posix character classes in a unicode-aware way.

7.2

  • Add windowsNoMagicRoot option

7.1

  • Add optimizationLevel configuration option, and revert the default back to the 6.2 style minimal optimizations, making the advanced transforms introduced in 7.0 opt-in. Also, process provided file paths in the same way in optimizationLevel:2 mode, so most things that matched with optimizationLevel 1 or 0 should match with level 2 as well. However, level 1 is the default, out of an abundance of caution.

... (truncated)

Commits

Updates nanoid from 5.1.6 to 5.1.9

Release notes

Sourced from nanoid's releases.

5.1.9

  • Fixed npm package size regression.

5.1.8

5.1.7

Changelog

Sourced from nanoid's changelog.

5.1.9

  • Fixed npm package size regression.

5.1.8

5.1.7

Commits

Updates node-llama-cpp from 3.17.1 to 3.18.1

Release notes

Sourced from node-llama-cpp's releases.

v3.18.1

3.18.1 (2026-03-17)

Features

Shipped with llama.cpp release b8390

To use the latest llama.cpp release available, run npx -n node-llama-cpp source download --release latest. (learn more)

v3.18.0

3.18.0 (2026-03-15)

Features

  • automatic checkpoints for models that need it (#573) (c641959)
  • QwenChatWrapper: Qwen 3.5 support (#573) (c641959)
  • inspect gpu command: detect and report missing prebuilt binary modules and custom npm registry (#573) (c641959)

Bug Fixes

  • resolveModelFile: deduplicate concurrent downloads (#570) (cc105b9)
  • correct Vulkan URL casing in documentation links (#568) (5a44506)
  • Qwen 3.5 memory estimation (#573) (c641959)
  • grammar use with HarmonyChatWrapper (#573) (c641959)
  • add mistral think segment detection (#573) (c641959)
  • compress excessively long segments from the current response on context shift instead of throwing an error (#573) (c641959)
  • default thinking budget to 75% of the context size to prevent low-quality responses (#573) (c641959)

Shipped with llama.cpp release b8352

To use the latest llama.cpp release available, run npx -n node-llama-cpp source download --release latest. (learn more)

Commits
  • 57bea3d feat(minor): customize postinstall behavior (#582)
  • c641959 feat: automatic checkpoints for models that need it (#573)
  • cc105b9 fix(resolveModelFile): deduplicate concurrent downloads (#570)
  • 5a44506 fix: correct Vulkan URL casing in documentation links (#568)
  • See full diff in compare view

Updates officeparser from 6.0.4 to 6.1.0

Release notes

Sourced from officeparser's releases.

v6.1.0: Infrastructure Stability & Smart OCR Scheduling

Changes: v6.0.7..v6.1.0

This release marks a major milestone in the technical maturity of officeParser, moving from a monolithic parser to a robust, resource-aware infrastructure. v6.1.0 focuses on stability, performance, and developer experience without breaking core backward compatibility.

🔥 Major Highlights

📦 Modern Module System & Nomenclature Change

Since v6.0.7, we have standardized our browser distribution to support modern development workflows. This includes a major change in bundle naming:

  • Nomenclature Change: officeparser.browser.js or officeParserBundle@${VERSION}.js has been renamed to officeparser.browser.iife.js to explicitly indicate its format.
  • Dual-Bundle System: We now ship two distinct browser packages (add @${VERSION} after officeparser if using release asset):
    1. officeparser.browser.iife.js: Standard IIFE bundle for direct <script> tag usage (Global officeParser namespace).
    2. officeparser.browser.mjs: A native ESM bundle for modern browsers, Vite, and Webpack 5.
  • Node.js: Full native ESM support with Node16 resolution.

🧠 Smart OCR Worker Pool

We’ve completely rewritten the OCR engine to handle internal resource management intelligently.

  • Lazy Initialization: OCR workers and tesseract.js are now lazy-loaded. Simply require or import the library at the top-level no longer spawns any background processes, resolving the long-standing "process leak" issue.
  • Worker Pooling: Workers are now pooled and reused across parallel parsing requests, providing up to 3x faster processing for documents with multiple images.
  • Auto-Termination: A new idle-timer automatically cleans up worker processes after 10 seconds of inactivity (configurable via ocrConfig.autoTerminateTimeout).
  • Manual Control: Exported a new terminateOcr() function for snappy CLI script exits.

📦 Infrastructure Migration

  • Fflate Integration: Replaced legacy yauzl with fflate for zero-memory-buffer zip extraction, significantly improving performance on massive spreadsheets and low-memory environments like Edge Functions.
  • PDF.js v5: Upgraded the internal PDF engine to the latest stable release (v5.6.205) with improved text-layer coordinate alignment.

🏷️ Custom Property Extraction

You can now extract user-defined custom metadata (e.g., custom tags, proprietary fields) across almost all formats:

  • OOXML: Standard custom document properties (docProps/custom.xml).
  • ODF: User-defined fields in OpenOffice/LibreOffice metadata.
  • PDF: Custom key-value pairs from the PDF Info dictionary.

📄 Documentation & Branding Overhaul

  • Premium SPA Docs: A completely redesigned live documentation site with persistent fragments.
  • Interactive Visualizer: Test any file in-browser to see the hierarchical AST and real-time preview.
  • Troubleshooting Guide: A new, comprehensive debugging guide covering everything from process hangs to PDF worker resolution.
  • Metric Verification: Standardized all download metrics to 260k+ weekly installs with dynamic Shields.io badges and live verification links via npm-stat.com.

🛠️ API & Configuration Changes

New Configuration Options (OfficeParserConfig)

  • ocrConfig: New object for fine-grained OCR control.
  • ocrConfig.autoTerminateTimeout: Duration (ms) to keep workers alive before cleanup.
  • ocrConfig.workerPath, ocrConfig.corePath, ocrConfig.langPath: Full support for air-gapped/offline local Tesseract hosting.

Deprecations

... (truncated)

Changelog

Sourced from officeparser's changelog.

[6.1.0] - 2026-04-14

Added

  • OCR Scheduler: Intelligent worker pool that optimizes Tesseract lifecycle across parallel requests.
  • Custom Properties: Support for extracting document metadata across OOXML, ODF, and PDF formats.
  • Sponsorship: Integrated funding.json manifest and GitHub Sponsors support.
  • Governance: Added .editorconfig, .gitattributes, and SUPPORT.md.

Changed

  • Core Engine: Replaced legacy zip extraction with fflate for significant performance gains and robust browser/edge compatibility.
  • Module System: Full native ESM support with Node16 resolution and verified browser bundles (Vite/Angular compatible).
  • Format Refinements: Hierarchical PDF coordinate alignment and ODT/RTF list parsing stability.

[6.0.0] - 2025-12-29

Added

  • Major Overhaul: Transitioned from simple text extraction to a rich Abstract Syntax Tree (AST) output.
  • Structured Output: Access hierarchical document structure (paragraphs, headings, tables, lists, etc.).
  • Rich Metadata: Extracted document properties (author, title, creation date).
  • Enhanced Formatting: Support for bold, italic, colors, fonts, alignment, etc.
  • Attachment Handling: Extract images, charts, and embedded files as Base64.
  • OCR Integration: Optional OCR for images using Tesseract.js.
  • RTF Support: Added full support for Rich Text Format files.
  • TypeScript: Full TypeScript support with detailed interfaces and improved type definitions.

Changed

  • Simplified API: Transitioned to the unified parseOffice for all parsing needs (returns a Promise).

[5.1.1] - 2024-11-12

Added

  • Added ArrayBuffer as a type of file input.
  • Introduced browser bundle generation, exposing the officeParser namespace for direct browser usage.

[5.0.0] - 2024-10-21

Added

  • Replaced decompress with yauzl for zip extraction.
  • Migrated to in-memory extraction (no longer writing to disk).
  • Removed config flags related to extracted files and added flags for CLI execution.

[4.2.0] - 2024-10-15

Added

  • Fixed race conditions when deleting temp files during parallel execution.
  • Resolved errors occurring when multiple executions were made without waiting for the previous one to finish.
  • Upgraded project dependencies.

[4.1.2] - 2024-10-13

Fixed

  • Fixed text parsing from XLSX files containing no shared strings file or using inlineStr based strings.

[4.1.1] - 2024-05-06

Changed

  • Replaced pdf-parse with a native pdf.js implementation for more robust PDF analysis.

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for officeparser since your current version.


Updates react from 19.2.4 to 19.2.5

Release notes

Sourced from react's releases.

19.2.5 (April 8th, 2026)

React Server Components

Commits

Updates react-dom from 19.2.4 to 19.2.5

Release notes

Sourced from react-dom's releases.

19.2.5 (April 8th, 2026)

React Server Components

Commits

Updates react-force-graph-2d from 1.29.0 to 1.29.1

Commits

Updates sqlite-vec from 0.1.7-alpha.2 to 0.1.9

Release notes

Sourced from sqlite-vec's releases.

v0.1.9 Bug fix for DELETE operations

Fixes #274, which discovered that DELETE operations on vec0 tables with metadata text columns that are long (>12chars) would erronuously report a SQLItE_DONE error.

v0.1.9-alpha.1

Attempted fix of broken DELETEs on vec0 rows with large metdata text column values, as reported in #274

v0.1.8

Minor fix to the sqlite-vec NPM package, fixing #272. If youv'e ever had a problem npm install'ing sqlite-vec, now 's a great time to try again!

v0.1.8-alpha.1

Attempt to fix Node.js package distribution by bumping sqlite-dist in the release process.

sqlite-vec is back: v0.1.7

sqlite-vec is back! After a long hiatus, I am now working again on making sqlite-vec as fast and easy-to-use as possible.

I'd like to especially thank Mozilla for graciously supporting me in improving sqlite-vec!

This v0.1.7 release fixes some long-standing bugs and introduces a few small new features, namely:

  • Proper DELETE support: Deleting vectors will now clear up space (if you DELETE enough to clear out a chunk, ~1024 vectors).
  • Constraint support on constraint column in KNN queries: You can now use >/>=/</<= constraints on the distance column in vec0 KNN queries, which allows you to "paginate" through KNN queries. This isn't "real" pagination, but if you ever wanted to scroll through vector search results without a giant k value and doing it manually, this may help!

But overall, this release is about reviving old workflows, updating runners, fixing tests, and other housekeeping tasks. I now have proper fuzz testing on sqlite-vec, which has caught a few memory related, rare bugs.

There's still much to do: the documentation site is stale, docs are out-of-date, some old Go/ncruces bindings are paused. Feel free to file issues as you see fit, I'm finding it hard to see which bugs are still oustanding.

But the biggest update coming soon: ANN support. Look for the first release of DiskANN in sqlite-vec coming very soon!

And to end this: a big thanks to everyone who have used and continue to use sqlite-vec. I do apologize greatly for the long time between releases. This project got quite large very fast, and I do appreicate though who offered support and patched (big shoutout to @​vlasky who's maintained a fork!).

v0.1.7-alpha.13

No release notes provided.

v0.1.7-alpha.12

No release notes provided.

v0.1.7-alpha.11

No release notes provided.

v0.1.7-alpha.10

No release notes provided.

v0.1.7-alpha.9

No release notes provided.

v0.1.7-alpha.8

No release notes provided.

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for sqlite-vec since your current version.


Updates streamdown from 2.1.0 to 2.5.0

Release notes

Sourced from streamdown's releases.

streamdown@2.5.0

Minor Changes

  • d6666b6: Add lineNumbers prop to disable line numbers in code blocks
  • d4ec6c0: Add meta prop to CustomRendererProps. Custom renderers now receive the raw metastring from the code fence (everything after the language identifier, e.g. ```rust {1} title="foo" → meta = '{1} title="foo"'). The prop is optional (meta?: string) and is undefined when no metastring is present. Existing custom renderers are unaffected.

Patch Changes

  • ac8d839: Add staggered animation-delay to streaming word/character animations so new content cascades in sequentially instead of all animating simultaneously. Configurable via the new stagger option (default 40ms). Set stagger: 0 to restore the previous behavior.

  • add5374: Enable horizontal scrolling on code blocks so long lines are accessible instead of being clipped by overflow-hidden.

  • 75845c0: Fix unnecessary re-renders of code blocks during streaming updates.

    Problem: In streaming mode, when new content arrives (e.g. a paragraph is appended), completed code blocks that haven't changed were still re-rendering. This happened because the Streamdown component used inline object literals as default parameter values for linkSafety ({ enabled: true }). Every time children changed and Streamdown re-rendered, these inline defaults created new references, which caused the contextValue useMemo to recompute a new StreamdownContext object. Since React propagates context changes through memo boundaries, any context consumer inside a memoized Block (such as CodeBlock) would re-render even though the block's own props were unchanged.

    Fix: Extract the inline default values for linkSafety into module-level constants (defaultLinkSafetyConfig). This ensures referential stability across renders, so contextValue only recomputes when the actual values change — not just because children updated.

  • 8b1c262: fix: prepend UTF-8 BOM to CSV downloads for Excel compatibility

    • save() now prepends \uFEFF for text/csv string content so Excel on Windows detects UTF-8 encoding instead of falling back to ANSI.
    • TableDownloadButton refactored to use save() instead of inline Blob creation, ensuring the public API also gets the BOM fix.

  • b105c64: Fix custom tag content being prematurely split when content follows the opening tag on the same line and contains double newlines (\n\n). The preprocessor now ensures proper HTML block structure so the parser treats the entire tag as a single unit.

  • 9e6f991: Increase dropdown z-index for table copy and download menus to prevent clipping by surrounding elements.

  • 9c18748: docs: document required CSS custom properties (shadcn/ui design tokens) in README

  • 7b62e9a: Replace Tailwind v4-only *:last: and *:first: variant syntax with [&>*:last-child]: and [&>*:first-child]: arbitrary variants for compatibility with both Tailwind CSS v3 and v4. Fixes caret rendering on every line instead of only the last child in v3.

  • Updated dependencies [e50b0c4]

  • Updated dependencies [716a5f0]

    • remend@1.3.0

streamdown@2.4.0

Minor Changes

  • 5edff75: Clarified Tailwind @source configuration for Streamdown and optional plugins. Updated documentation to keep the global @source for core streamdown only, move plugin @source guidance to plugin docs with examples, and add a caveat to include plugin entries only if installed.

  • 57cd3b5: Add support for custom starting line numbers in code blocks via the startLine meta option.

    Code blocks can now specify a starting line number in the meta string:

    ```js startLine=10

... (truncated)

Changelog

Sourced from streamdown's changelog.

2.5.0

Minor Changes

  • d6666b6: Add lineNumbers prop to disable line numbers in code blocks
  • d4ec6c0: Add meta prop to CustomRendererProps. Custom renderers now receive the raw metastring from the code fence (everything after the language identifier, e.g. ```rust {1} title="foo" → meta = '{1} title="foo"'). The prop is optional (meta?: string) and is undefined when no metastring is present. Existing custom renderers are unaffected.

Patch Changes

  • ac8d839: Add staggered animation-delay to streaming word/character animations so new content cascades in sequentially instead of all animating simultaneously. Configurable via the new stagger option (default 40ms). Set stagger: 0 to restore the previous behavior.

  • add5374: Enable horizontal scrolling on code blocks so long lines are accessible instead of being clipped by overflow-hidden.

  • 75845c0: Fix unnecessary re-renders of code blocks during streaming updates.

    Problem: In streaming mode, when new content arrives (e.g. a paragraph is appended), completed code blocks that haven't changed were still re-rendering. This happened because the Streamdown component used inline object literals as default parameter values for linkSafety ({ enabled: true }). Every time children changed and Streamdown re-rendered, these inline defaults created new references, which caused the contextValue useMemo to recompute a new StreamdownContext object. Since React propagates context changes through memo boundaries, any context consumer inside a memoized Block (such as CodeBlock) would re-render even though the block's own props were unchanged.

    Fix: Extract the inline default values for linkSafety into module-level constants (defaultLinkSafetyConfig). This ensures referential stability across renders, so contextValue only recomputes when the actual values change — not just because children updated.

  • 8b1c262: fix: prepend UTF-8 BOM to CSV downloads for Excel compatibility

    • save() now prepends \uFEFF for text/csv string content so Excel on Windows detects UTF-8 encoding instead of falling back to ANSI.
    • TableDownloadButton refactored to use save() instead of inline Blob creation, ensuring the public API also gets the BOM fix.

  • b105c64: Fix custom tag content being prematurely split when content follows the opening tag on the same line and contains double newlines (\n\n). The preprocessor now ensures proper HTML block structure so the parser treats the entire tag as a single unit.

  • 9e6f991: Increase dropdown z-index for table copy and download menus to prevent clipping by surrounding elements.

  • 9c18748: docs: document required CSS custom properties (shadcn/ui design tokens) in README

  • 7b62e9a: Replace Tailwind v4-only *:last: and *:first: variant syntax with [&>*:last-child]: and [&>*:first-child]: arbitrary variants for compatibility with both Tailwind CSS v3 and v4. Fixes caret rendering on every line instead of only the last child in v3.

  • Updated dependencies [e50b0c4]

  • Updated dependencies [716a5f0]

    • remend@1.3.0

2.4.0

Minor Changes

  • 5edff75: Clarified Tailwind @source configuration for Streamdown and optional plugins. Updated documentation to keep the global @source for core streamdown only, move plugin @source guidance to plugin docs with examples, and add a caveat to include plugin entries only if installed.

  • 57cd3b5: Add support for custom starting line numbers in code blocks via the startLine meta option.

    Code blocks can now specify a starting line number in the meta string:

    ```js startLine=10
const x = 1;
```

    This renders line numbers beginning at 10 instead of the default 1. The feature works by parsing the startLine=N value from the fenced-code meta string and applying counter-reset: line N-1 to the <code> element.

... (truncated)

Commits
  • 15ba1ae Version Packages (#457)
  • b752b44 fix(streamdown): move mermaid from devDependencies to dependencies (#466)
  • 90a7b58 Run fix
  • 9e6f991 fix(streamdown): increase dropdown z-index (#463)
  • d6666b6 feat: add lineNumbers prop to disable line numbers in code blocks (#460)
  • 6a79e04 fix(streamdown): preserve double newlines in literalTagContent tags (#459)
  • b9796c8 Improve test coverage
  • 6b49db1 Fix polynomial regular expression issue
  • 6d4100a Update utils.test.ts
  • 9f8ed4c Lint fixes
  • Additional commits viewable in compare view

Updates tailwind-merge from 3.4.0 to 3.5.0

Release notes

Sourced from tailwind-merge's releases.

v3.5.0

New Features

Full Changelog: dcastil/tailwind-merge@v3.4.1...v3.5.0

Thanks to @​brandonmcconnell, @​manavm1990, @​langy, @​roboflow, @​syntaxfm, @​getsentry, @​codecov, a private sponsor, @​block, @​openclaw, @​sourcegraph and more via @​thnxdev for sponsoring tailwind-merge! ❤️

v3.4.1

Bug Fixes

Full Changelog: dcastil/tailwind-merge@v3.4.0...v3.4.1

Thanks to @​brandonmcconnell, @​manavm1990, @​langy, @​roboflow, @​syntaxfm, @​getsentry, @​codecov, a private sponsor, @​block, @​openclaw, @​sourcegraph and more via @​thnxdev for sponsoring tailwind-merge! ❤️

Commits
  • 270ac79 v3.5.0
  • 86f772e add changelog for 3.5.0
  • 6c1f77c Merge pull request #651 from dcastil/feature/add-support-for-tailwind-css-v4.2
  • 7a4cacf Add support for decimal fraction values
  • 9ef0f79 fix incorrectly escaped characters
  • f4938b0 update README with v4.2 support
  • b02a572 Add Tailwind v4.2 font-features utilities support
  • 5bd25ec Add Tailwind v4.2 logical sizing utilities
  • 697c920 Add Tailwind v4.2 logical border block utilities
  • 6656a47 Improve JSDoc comments for logical insets
  • Additional commits viewable in compare view

Updates tailwindcss from 4.1.18 to 4.2.2

Release notes

Sourced from tailwindcss's releases.

v4.2.2

Added

  • Support Vite 8 in @tailwindcss/vite (#19790)

Fixed

  • Don't crash when candidates contain prototype properties like row-constructor (#19725)
  • Canonicalize calc(var(--spacing)*…)Description has been truncated

@dependabot dependabot bot added the dependencies Dependency updates label Apr 16, 2026
@vercel
Copy link
Copy Markdown

vercel bot commented Apr 16, 2026 •
edited
Loading

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
gno Ready Ready Preview, Comment Apr 16, 2026 2:00pm

Request Review

@greptile-apps
Copy link
Copy Markdown

greptile-apps bot commented Apr 16, 2026

Greptile Summary

Routine Dependabot bump updating 29 packages across package.json and bun.lock. No source code changes are included. Key highlights: sqlite-vec exits alpha (0.1.7-alpha.2 → 0.1.9) with an important DELETE bug fix for vec0 tables with long text metadata columns, which directly affects gno's vector-search data path; streamdown (2.1.0 → 2.5.0) contains a polynomial-regex (ReDoS) fix; and tailwindcss (4.1 → 4.2) and tailwind-merge (3.5.0) are updated in tandem, which is correct. Tooling upgrades for oxlint (1.43 → 1.60), oxfmt (0.28 → 0.45), @biomejs/biome (2.3 → 2.4), and ultracite (7.1 → 7.5) represent significant jumps that may introduce new lint rules — running bun run lint:check before merging is advisable.

Confidence Score: 5/5

Safe to merge — all changes are in bun.lock and package.json only, with no source modifications. All bumps are minor or patch releases.

Only finding is a P2 suggestion to verify lint:check with the updated tooling versions. The notable runtime update (sqlite-vec DELETE bug fix) is a positive correctness improvement. No breaking changes identified across any of the 29 packages.

No files require special attention beyond confirming CI passed lint:check with the new oxlint/oxfmt/ultracite versions.

Important Files Changed

Filename Overview
package.json Version ranges updated for markitdown-ts, biomejs/biome, oxfmt, oxlint-tsgolint, and ultracite; remaining bumps land in bun.lock via lockfile resolution within existing ranges
bun.lock Lockfile updated with resolved hashes for all 29 upgraded packages; reflects consistent resolution of both direct and transitive dependencies

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[29 Package Updates] --> B[Runtime Dependencies]
    A --> C[Dev / Tooling]

    B --> D[Core: sqlite-vec 0.1.7-alpha.2→0.1.9\nDELETE bug fix for vec0 tables]
    B --> E[MCP SDK 1.27.1→1.29.0\nnull TTL fix + size field added]
    B --> F[AI SDK: ai 6.0.68→6.0.164\n@ai-sdk/openai 3.0.25→3.0.53]
    B --> G[UI: react/react-dom 19.2.4→19.2.5\nstreamdown 2.1→2.5 ReDoS fix\ntailwindcss 4.1→4.2]
    B --> H[LLM: node-llama-cpp 3.17→3.18\nofficeparser 6.0→6.1]

    C --> I[Linters: oxlint 1.43→1.60\noxfmt 0.28→0.45\nbiome 2.3→2.4\nultracite 7.1→7.5]
    C --> J[Test: vitest 4.0→4.1\nplaywright 1.58→1.59\nhappy-dom 20.8→20.9]
    C --> K[Build: @tailwindcss/cli 4.1→4.2\ntailwind-merge 3.4→3.5]
Loading

Reviews (1): Last reviewed commit: "chore(deps): bump the minor-and-patch gr..." | Re-trigger Greptile

greptile-apps[bot]
greptile-apps bot reviewed Apr 16, 2026
View reviewed changes
Comment thread package.json
Comment on lines +195 to +197
"oxfmt": "^0.45.0",
"oxlint": "^1.42.0",
"oxlint-tsgolint": "^0.11.5",
"oxlint-tsgolint": "^0.21.1",
Copy link
Copy Markdown

@greptile-apps greptile-apps bot Apr 16, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Significant linting toolchain jumps — verify lint:check passes

oxlint goes from 1.43.0 to 1.60.0 (17 minor versions), oxfmt from 0.28.0 to 0.45.0, and ultracite from 7.1.5 to 7.5.9. Each of these can introduce new enforced rules or formatting changes. Since bun run prerelease runs lint:check, any new violations would block the release workflow. Worth running bun run lint:check locally (or confirming CI ran it) before merging.

@dependabot
chore(deps): bump the minor-and-patch group across 1 directory with 2…
b142d36 
…9 updates

Bumps the minor-and-patch group with 29 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.27.1` | `1.29.0` |
| [ai](https://github.com/vercel/ai) | `6.0.68` | `6.0.164` |
| [markitdown-ts](https://github.com/dead8309/markitdown-ts) | `0.0.9` | `0.0.10` |
| [minimatch](https://github.com/isaacs/minimatch) | `10.1.1` | `10.2.5` |
| [nanoid](https://github.com/ai/nanoid) | `5.1.6` | `5.1.9` |
| [node-llama-cpp](https://github.com/withcatai/node-llama-cpp) | `3.17.1` | `3.18.1` |
| [officeparser](https://github.com/harshankur/officeParser) | `6.0.4` | `6.1.0` |
| [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.4` | `19.2.5` |
| [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.4` | `19.2.5` |
| [react-force-graph-2d](https://github.com/vasturiano/react-force-graph) | `1.29.0` | `1.29.1` |
| [sqlite-vec](https://github.com/asg017/sqlite-vec) | `0.1.7-alpha.2` | `0.1.9` |
| [streamdown](https://github.com/vercel/streamdown/tree/HEAD/packages/streamdown) | `2.1.0` | `2.5.0` |
| [tailwind-merge](https://github.com/dcastil/tailwind-merge) | `3.4.0` | `3.5.0` |
| [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.1.18` | `4.2.2` |
| [use-stick-to-bottom](https://github.com/stackblitz/use-stick-to-bottom) | `1.1.2` | `1.1.3` |
| [@ai-sdk/openai](https://github.com/vercel/ai) | `3.0.25` | `3.0.53` |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.3.14` | `2.4.12` |
| [@tailwindcss/cli](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-cli) | `4.1.18` | `4.2.2` |
| [@types/bun](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/bun) | `1.3.8` | `1.3.12` |
| [ajv](https://github.com/ajv-validator/ajv) | `8.17.1` | `8.18.0` |
| [docx](https://github.com/dolanmiu/docx) | `9.5.1` | `9.6.1` |
| [happy-dom](https://github.com/capricorn86/happy-dom) | `20.8.9` | `20.9.0` |
| [lefthook](https://github.com/evilmartians/lefthook) | `2.1.4` | `2.1.6` |
| [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt) | `0.28.0` | `0.45.0` |
| [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.43.0` | `1.60.0` |
| [oxlint-tsgolint](https://github.com/oxc-project/tsgolint) | `0.11.5` | `0.21.1` |
| [playwright](https://github.com/microsoft/playwright) | `1.58.2` | `1.59.1` |
| [ultracite](https://github.com/haydenbleasel/ultracite) | `7.1.5` | `7.5.9` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.0.18` | `4.1.4` |



Updates `@modelcontextprotocol/sdk` from 1.27.1 to 1.29.0
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@v1.27.1...v1.29.0)

Updates `ai` from 6.0.68 to 6.0.164
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/compare/ai@6.0.68...ai@6.0.164)

Updates `markitdown-ts` from 0.0.9 to 0.0.10
- [Release notes](https://github.com/dead8309/markitdown-ts/releases)
- [Commits](dead8309/markitdown-ts@v0.0.9...v0.0.10)

Updates `minimatch` from 10.1.1 to 10.2.5
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v10.1.1...v10.2.5)

Updates `nanoid` from 5.1.6 to 5.1.9
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](ai/nanoid@5.1.6...5.1.9)

Updates `node-llama-cpp` from 3.17.1 to 3.18.1
- [Release notes](https://github.com/withcatai/node-llama-cpp/releases)
- [Commits](withcatai/node-llama-cpp@v3.17.1...v3.18.1)

Updates `officeparser` from 6.0.4 to 6.1.0
- [Release notes](https://github.com/harshankur/officeParser/releases)
- [Changelog](https://github.com/harshankur/officeParser/blob/master/CHANGELOG.md)
- [Commits](https://github.com/harshankur/officeParser/commits/v6.1.0)

Updates `react` from 19.2.4 to 19.2.5
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.5/packages/react)

Updates `react-dom` from 19.2.4 to 19.2.5
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.5/packages/react-dom)

Updates `react-force-graph-2d` from 1.29.0 to 1.29.1
- [Commits](vasturiano/react-force-graph@v1.29.0...v1.29.1)

Updates `sqlite-vec` from 0.1.7-alpha.2 to 0.1.9
- [Release notes](https://github.com/asg017/sqlite-vec/releases)
- [Commits](asg017/sqlite-vec@v0.1.7-alpha.2...v0.1.9)

Updates `streamdown` from 2.1.0 to 2.5.0
- [Release notes](https://github.com/vercel/streamdown/releases)
- [Changelog](https://github.com/vercel/streamdown/blob/main/packages/streamdown/CHANGELOG.md)
- [Commits](https://github.com/vercel/streamdown/commits/streamdown@2.5.0/packages/streamdown)

Updates `tailwind-merge` from 3.4.0 to 3.5.0
- [Release notes](https://github.com/dcastil/tailwind-merge/releases)
- [Commits](dcastil/tailwind-merge@v3.4.0...v3.5.0)

Updates `tailwindcss` from 4.1.18 to 4.2.2
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.2.2/packages/tailwindcss)

Updates `use-stick-to-bottom` from 1.1.2 to 1.1.3
- [Changelog](https://github.com/stackblitz-labs/use-stick-to-bottom/blob/main/CHANGELOG.md)
- [Commits](https://github.com/stackblitz/use-stick-to-bottom/commits)

Updates `@ai-sdk/openai` from 3.0.25 to 3.0.53
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/compare/@ai-sdk/openai@3.0.25...@ai-sdk/openai@3.0.53)

Updates `@biomejs/biome` from 2.3.14 to 2.4.12
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.4.12/packages/@biomejs/biome)

Updates `@tailwindcss/cli` from 4.1.18 to 4.2.2
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.2.2/packages/@tailwindcss-cli)

Updates `@types/bun` from 1.3.8 to 1.3.12
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/bun)

Updates `ajv` from 8.17.1 to 8.18.0
- [Release notes](https://github.com/ajv-validator/ajv/releases)
- [Commits](ajv-validator/ajv@v8.17.1...v8.18.0)

Updates `docx` from 9.5.1 to 9.6.1
- [Release notes](https://github.com/dolanmiu/docx/releases)
- [Commits](dolanmiu/docx@9.5.1...9.6.1)

Updates `happy-dom` from 20.8.9 to 20.9.0
- [Release notes](https://github.com/capricorn86/happy-dom/releases)
- [Commits](capricorn86/happy-dom@v20.8.9...v20.9.0)

Updates `lefthook` from 2.1.4 to 2.1.6
- [Release notes](https://github.com/evilmartians/lefthook/releases)
- [Changelog](https://github.com/evilmartians/lefthook/blob/master/CHANGELOG.md)
- [Commits](evilmartians/lefthook@v2.1.4...v2.1.6)

Updates `oxfmt` from 0.28.0 to 0.45.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.45.0/npm/oxfmt)

Updates `oxlint` from 1.43.0 to 1.60.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.60.0/npm/oxlint)

Updates `oxlint-tsgolint` from 0.11.5 to 0.21.1
- [Release notes](https://github.com/oxc-project/tsgolint/releases)
- [Commits](oxc-project/tsgolint@v0.11.5...v0.21.1)

Updates `playwright` from 1.58.2 to 1.59.1
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.58.2...v1.59.1)

Updates `ultracite` from 7.1.5 to 7.5.9
- [Release notes](https://github.com/haydenbleasel/ultracite/releases)
- [Commits](https://github.com/haydenbleasel/ultracite/compare/ultracite@7.1.5...ultracite@7.5.9)

Updates `vitest` from 4.0.18 to 4.1.4
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.4/packages/vitest)

---
updated-dependencies:
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: ai
  dependency-version: 6.0.164
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: markitdown-ts
  dependency-version: 0.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: minimatch
  dependency-version: 10.2.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: nanoid
  dependency-version: 5.1.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: node-llama-cpp
  dependency-version: 3.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: officeparser
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: react
  dependency-version: 19.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: react-dom
  dependency-version: 19.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: react-force-graph-2d
  dependency-version: 1.29.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: sqlite-vec
  dependency-version: 0.1.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: streamdown
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: tailwind-merge
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: tailwindcss
  dependency-version: 4.2.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: use-stick-to-bottom
  dependency-version: 1.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@ai-sdk/openai"
  dependency-version: 3.0.53
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@biomejs/biome"
  dependency-version: 2.4.12
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@tailwindcss/cli"
  dependency-version: 4.2.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/bun"
  dependency-version: 1.3.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: ajv
  dependency-version: 8.18.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: docx
  dependency-version: 9.6.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: happy-dom
  dependency-version: 20.9.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: lefthook
  dependency-version: 2.1.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: oxfmt
  dependency-version: 0.45.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: oxlint
  dependency-version: 1.60.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: oxlint-tsgolint
  dependency-version: 0.21.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: playwright
  dependency-version: 1.59.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: ultracite
  dependency-version: 7.5.9
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: vitest
  dependency-version: 4.1.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/bun/minor-and-patch-94b0c9af16 branch from 77979ae to b142d36 Compare April 16, 2026 14:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

1 more reviewer

@greptile-apps greptile-apps[bot] greptile-apps[bot] left review comments

Reviewers whose approvals may not affect merge requirements

Assignees

@gmickel gmickel

Labels

dependencies Dependency updates

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@gmickel