Skip to content

build(deps): bump the prod-minor-patch group across 1 directory with 5 updates - #158

Merged
haasonsaas merged 1 commit into
mainfrom
dependabot/npm_and_yarn/prod-minor-patch-eeeb25e88c
Aug 11, 2026
Merged

build(deps): bump the prod-minor-patch group across 1 directory with 5 updates#158
haasonsaas merged 1 commit into
mainfrom
dependabot/npm_and_yarn/prod-minor-patch-eeeb25e88c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 11, 2026

Copy link
Copy Markdown
Contributor

Bumps the prod-minor-patch group with 5 updates in the / directory:

Package From To
@ax-llm/ax 23.0.5 23.0.11
@tanstack/react-router 1.170.18 1.170.23
better-sqlite3 13.0.1 13.0.3
lucide-react 1.27.0 1.30.0
shiki 4.3.1 4.4.2

Updates @ax-llm/ax from 23.0.5 to 23.0.11

Release notes

Sourced from @​ax-llm/ax's releases.

Release 23.0.11

  • chore(axir): close completed backlog entries d842a571
  • feat(axir): clear portable provider backlog 486d7fbe

Release 23.0.10

  • feat(openai): cache breakpoints on GPT-5.6+ and cache write tokens (#573) c05b3e8c
  • fix(util): browser SSE streams end with a spurious network error (#571) ae0dceed
  • fix(agent): preserve usage after failed runs d67fced2
  • fix(ai): route Vertex multi-region endpoints 5d56a887

Release 23.0.9

  • chore(axir): reconcile backlog after main update 55f9a0ba
  • fix(axir): split GPT-5.6 reasoning surfaces f76a950d
  • fix(axir): publish cleared backlog capabilities 87ef028c
  • chore(axir): close portable behavior backlog 31f3ca70
  • feat(axir): port URL arrays and structured stream deltas 65b14323
  • feat(axir): map GPT-5.6 reasoning effort f9d6ae3a
  • feat(axir): port MCP inbound requests and task input 09a14add

Release 23.0.8

  • fix(openai): stop sending max reasoning effort on the chat path (#569) d749bdd3

Release 23.0.7

  • fix: stop duplicating object array items when streaming structured output (#565) f414c6d7
  • fix: validate url arrays per-item instead of on the whole array (#567) 87a67208
  • feat(openai): add GPT-5.6 model family support (#568) 0bbccdac
  • docs(mcp): record production interop evidence bb80bb5a
  • docs(axir): close OAuth port tranche 97492f2e
  • feat(mcp): port OAuth discovery and grants ca861922
  • docs(axir): close MRTR elicitation tranche 9e4f3ed1
  • feat(mcp): port MRTR elicitation f053c737
  • test(mcp): prove foreign server interop 4f0d018f
  • docs(website): rewrite event runtime concept pages 229acfd4
  • test(event): expect mrtr_roots_round in demo server tools be42efa2
  • chore(axir): close context cache recovery backlog f95ec2db
  • feat(axir): port managed Gemini context caching e8434104
  • chore(axir): close modern MCP umbrella backlog f1ca5055
  • docs(axir): record modern MCP language parity c32c41a8
  • chore(axir): close subscriptions listen backlog 8db8e318
  • feat(axir): verify modern MCP round trips c6253f57
  • chore(axir): close OAuth issuer backlog 7911e271
  • feat(axir): port MCP OAuth issuer validation 82272c59
  • feat(axir): port MCP subscriptions listen 400092a2
  • chore(axir): close roots-first MRTR backlog fe8baf8d
  • feat(axir): port roots-first MCP MRTR 09354114
  • chore(axir): close Tasks v2 backlog 16c21190
  • feat(axir): port MCP Tasks v2 bfe2f5ab
  • chore(axir): close cache metadata backlog 9087a015
  • feat(axir): port MCP cacheable results 2067e579
  • chore(axir): close dual-era MCP client backlog e7835572

... (truncated)

Changelog

Sourced from @​ax-llm/ax's changelog.

23.0.11 (2026-08-07)

Features

  • axir: clear portable provider backlog (486d7fb)

23.0.10 (2026-08-05)

Features

  • openai: cache breakpoints on GPT-5.6+ and cache write tokens (#573) (c05b3e8)

Bug Fixes

  • agent: preserve usage after failed runs (d67fced)
  • ai: route Vertex multi-region endpoints (5d56a88)
  • util: browser SSE streams end with a spurious network error (#571) (ae0dcee)

23.0.10 (2026-08-05)

Features

  • openai: cache breakpoints on GPT-5.6+ and cache write tokens (#573) (c05b3e8)

Bug Fixes

  • agent: preserve usage after failed runs (d67fced)
  • ai: route Vertex multi-region endpoints (5d56a88)
  • util: browser SSE streams end with a spurious network error (#571) (ae0dcee)

23.0.9 (2026-07-31)

Features

  • axir: map GPT-5.6 reasoning effort (f9d6ae3)
  • axir: port MCP inbound requests and task input (09a14ad)
  • axir: port URL arrays and structured stream deltas (65b1432)

Bug Fixes

  • axir: publish cleared backlog capabilities (87ef028)
  • axir: split GPT-5.6 reasoning surfaces (f76a950)

23.0.9 (2026-07-31)

Features

  • axir: map GPT-5.6 reasoning effort (f9d6ae3)
  • axir: port MCP inbound requests and task input (09a14ad)
  • axir: port URL arrays and structured stream deltas (65b1432)

... (truncated)

Commits
  • c21f9f1 chore: release v23.0.11
  • d842a57 chore(axir): close completed backlog entries
  • 486d7fb feat(axir): clear portable provider backlog
  • d49db21 chore: release v23.0.10
  • c05b3e8 feat(openai): cache breakpoints on GPT-5.6+ and cache write tokens (#573)
  • ae0dcee fix(util): browser SSE streams end with a spurious network error (#571)
  • d67fced fix(agent): preserve usage after failed runs
  • 5d56a88 fix(ai): route Vertex multi-region endpoints
  • fd1b967 chore: release v23.0.9
  • 55f9a0b chore(axir): reconcile backlog after main update
  • Additional commits viewable in compare view

Updates @tanstack/react-router from 1.170.18 to 1.170.23

Release notes

Sourced from @​tanstack/react-router's releases.

@​tanstack/react-router@​1.170.23

Patch Changes

  • #7952 95dec51 - bail out of Link re-renders when the resolved href and active state are unchanged

@​tanstack/react-router@​1.170.22

Patch Changes

  • #7992 ea3a665 - retain mounted UI during revalidation

  • Updated dependencies [ea3a665]:

    • @​tanstack/router-core@​1.171.19
Changelog

Sourced from @​tanstack/react-router's changelog.

1.170.23

Patch Changes

  • #7952 95dec51 - bail out of Link re-renders when the resolved href and active state are unchanged

1.170.22

Patch Changes

  • #7992 ea3a665 - retain mounted UI during revalidation

  • Updated dependencies [ea3a665]:

    • @​tanstack/router-core@​1.171.19

1.170.21

Patch Changes

  • #7961 697ebb6 - Prevent a blank frame before zero-delay initial pending UI by using a component-scoped React transition for match publication. Pending timing, boundary selection, and rendered matches continue to come from the router core.

  • #7970 2435885 - createFileRoute does not rely on FileRoute class

  • #7971 86bf510 - clean intersection observer options in link component

  • #7967 6aefb33 - Preserve path params in their raw string form while matching routes so structured values returned by params.parse produce stable match IDs and do not reuse stale loader data.

    RouterCore.getMatchedRoutes() now returns [matchedRoutes, rawParams, foundRoute] instead of an object.

  • Updated dependencies [84db4a8, 9cac62a, 6aefb33]:

    • @​tanstack/router-core@​1.171.18
    • @​tanstack/history@​1.162.1

1.170.20

Patch Changes

  • Updated dependencies [b2908c6]:
    • @​tanstack/router-core@​1.171.17

1.170.19

Patch Changes

  • #7805 45c4ad8 - Rewrite match loading around a lane-based scheduler that tracks each navigation, preload, and background reload as an ordered unit of work. This fixes pending/redirect/retry state leaking between overlapping navigations, restores correct SSR status codes for redirects, errors, and not-found responses, and closes hydration gaps where the client re-ran work the server had already completed.
    • Invalidation now retires matching active preloads so older speculative loader results cannot become fresh cache data after invalidation.
    • Route headers() now only runs on the server, matching the documented behavior — it is no longer invoked during client-side asset projection.

... (truncated)

Commits

Updates better-sqlite3 from 13.0.1 to 13.0.3

Release notes

Sourced from better-sqlite3's releases.

v13.0.3

What's Changed

Full Changelog: WiseLibs/better-sqlite3@v13.0.2...v13.0.3

v13.0.2

What's Changed

New Contributors

Full Changelog: WiseLibs/better-sqlite3@v13.0.1...v13.0.2

Commits

Updates lucide-react from 1.27.0 to 1.30.0

Release notes

Sourced from lucide-react's releases.

Version 1.30.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.29.0...1.30.0

Version 1.29.0

What's Changed

Full Changelog: lucide-icons/lucide@1.28.0...1.29.0

Version 1.28.0

What's Changed

Full Changelog: lucide-icons/lucide@1.27.0...1.28.0

Commits

Updates shiki from 4.3.1 to 4.4.2

Release notes

Sourced from shiki's releases.

v4.4.2

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub

v4.4.1

   🚀 Features

    View changes on GitHub

v4.4.0

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…5 updates

Bumps the prod-minor-patch group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@ax-llm/ax](https://github.com/ax-llm/ax) | `23.0.5` | `23.0.11` |
| [@tanstack/react-router](https://github.com/TanStack/router/tree/HEAD/packages/react-router) | `1.170.18` | `1.170.23` |
| [better-sqlite3](https://github.com/WiseLibs/better-sqlite3) | `13.0.1` | `13.0.3` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.27.0` | `1.30.0` |
| [shiki](https://github.com/shikijs/shiki/tree/HEAD/packages/shiki) | `4.3.1` | `4.4.2` |



Updates `@ax-llm/ax` from 23.0.5 to 23.0.11
- [Release notes](https://github.com/ax-llm/ax/releases)
- [Changelog](https://github.com/ax-llm/ax/blob/main/CHANGELOG.md)
- [Commits](ax-llm/ax@23.0.5...23.0.11)

Updates `@tanstack/react-router` from 1.170.18 to 1.170.23
- [Release notes](https://github.com/TanStack/router/releases)
- [Changelog](https://github.com/TanStack/router/blob/main/packages/react-router/CHANGELOG.md)
- [Commits](https://github.com/TanStack/router/commits/@tanstack/react-router@1.170.23/packages/react-router)

Updates `better-sqlite3` from 13.0.1 to 13.0.3
- [Release notes](https://github.com/WiseLibs/better-sqlite3/releases)
- [Commits](WiseLibs/better-sqlite3@v13.0.1...v13.0.3)

Updates `lucide-react` from 1.27.0 to 1.30.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.30.0/packages/lucide-react)

Updates `shiki` from 4.3.1 to 4.4.2
- [Release notes](https://github.com/shikijs/shiki/releases)
- [Commits](https://github.com/shikijs/shiki/commits/v4.4.2/packages/shiki)

---
updated-dependencies:
- dependency-name: "@ax-llm/ax"
  dependency-version: 23.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-minor-patch
- dependency-name: "@tanstack/react-router"
  dependency-version: 1.170.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-minor-patch
- dependency-name: better-sqlite3
  dependency-version: 13.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-minor-patch
- dependency-name: lucide-react
  dependency-version: 1.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-patch
- dependency-name: shiki
  dependency-version: 4.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update JavaScript code labels Aug 11, 2026
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​tanstack/​react-router@​1.170.18 ⏵ 1.170.2376 +110087 +498 +1100
Updatedshiki@​4.3.1 ⏵ 4.4.2100 +110077 +198 +1100
Updatedlucide-react@​1.27.0 ⏵ 1.30.0100 +110098 +196 +180
Updated@​ax-llm/​ax@​23.0.5 ⏵ 23.0.1192 +1100100 +196100
Updatedbetter-sqlite3@​13.0.1 ⏵ 13.0.399 +110010093 +1100

View full report

@haasonsaas
haasonsaas merged commit 8315f42 into main Aug 11, 2026
5 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/prod-minor-patch-eeeb25e88c branch August 11, 2026 16:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update JavaScript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant