Skip to content

Bump the npm-minor-patch group across 1 directory with 3 updates - #48

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-patch-5ea5833a6c
Open

Bump the npm-minor-patch group across 1 directory with 3 updates#48
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-patch-5ea5833a6c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 6, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-minor-patch group with 3 updates in the / directory: @vercel/connect, eve and tsx.

Updates @vercel/connect from 0.3.3 to 0.6.0

Release notes

Sourced from @​vercel/connect's releases.

@​vercel/connect@​0.6.0

Minor Changes

  • 8bd3687: Add connectDiscordCredentials to the eve integration, resolving Discord bot tokens and application IDs from app-scoped Connect credentials while verifying forwarded interactions with Vercel OIDC.

@​vercel/connect@​0.5.0

Minor Changes

  • 72d6d55: Add connectPhotonCredentials for resolving app-scoped Photon project credentials from a Vercel Connect connector.
  • 9ac74f0: Adding getConnectorMetadata() to @vercel/connect SDK

@​vercel/connect@​0.4.3

Patch Changes

  • f999343: Add token exchange subjects to ConnectTokenParams.
  • 726c7b4: Add experimental_startInstallation for creating Vercel Connect installation requests.
    • @​vercel/oidc@​3.8.1
Changelog

Sourced from @​vercel/connect's changelog.

0.6.0

Minor Changes

  • 8bd3687: Add connectDiscordCredentials to the eve integration, resolving Discord bot tokens and application IDs from app-scoped Connect credentials while verifying forwarded interactions with Vercel OIDC.

0.5.0

Minor Changes

  • 72d6d55: Add connectPhotonCredentials for resolving app-scoped Photon project credentials from a Vercel Connect connector.
  • 9ac74f0: Adding getConnectorMetadata() to @vercel/connect SDK

0.4.3

Patch Changes

  • f999343: Add token exchange subjects to ConnectTokenParams.
  • 726c7b4: Add experimental_startInstallation for creating Vercel Connect installation requests.
    • @​vercel/oidc@​3.8.1

0.4.2

Patch Changes

  • 0be0e28: Adding support for authorization mode override via env var.

0.4.1

Patch Changes

  • dad41da: Test Connect against a recent stable Eve and AI SDK 7 release.

0.4.0

Minor Changes

  • c636d67: Add optional claims field to ConnectTokenResponse for allow-listed upstream OAuth token claims
Commits

Updates eve from 0.24.4 to 0.29.5

Release notes

Sourced from eve's releases.

eve@0.29.5

Patch Changes

  • c0dc572: Rename the TUI /new command to /reset so session reset uses the same name across the client, HTTP, channel, and TUI APIs.
  • 3dce30a: Add manual session compaction through custom-channel helpers, the eve HTTP client, and the eve dev TUI's /compact command. Compaction preserves the session, queues behind an active turn, and does not send synthetic model input.
  • 910805e: Make a single Esc cancel the running turn in the eve dev TUI when no message is queued. Queued messages still use Esc to steer the oldest message into the next turn.
  • 9c51755: Connection search and discovered connection tools now use the same defineDynamic and defineTool pipeline as authored tools. Dynamic tool maps now reject entries that omit defineTool instead of accepting unsupported raw objects.
  • 84aa671: Clarify the dev TUI’s /add flow with consistent integration categories and category-specific browsing labels. MCP connections are now named explicitly, and the flow more clearly explains channels, extensions, and observability integrations.
  • 0c28eb7: Allow declared subagents to export defineDynamic from agent.ts. Session and turn resolvers can now return an agent configuration to expose it or nil to omit it from direct and Workflow delegation.
  • f3bb60d: Add manual session-context clearing through custom-channel helpers, the eve HTTP client, and the eve dev TUI's /clear command. Clearing removes model-message history while preserving the session, agent configuration, durable state, limits, and sandbox.
  • ac7d3c6: Add /cancel to the eve dev TUI. The command cooperatively cancels a running turn from either the live streaming input or the idle prompt while preserving the session and settled context.

eve@0.29.4

Patch Changes

  • e90a8c2: Launch local or deployed eve applications as stable ACP v1 agents with eve acp [url], including streamed messages, tool activity, human input, cancellation, concurrent sessions, and verified Vercel authentication.
  • cec672d: Add guided Discord setup through eve add channel/discord, including Vercel Connect provisioning, trigger attachment, interactions endpoint configuration, slash-command registration, and channel scaffolding.
  • ed328e7: Render registry item titles with their exact registry-provided casing by loading manifests for each page of catalog results.
  • c875a67: Update the generated AGENTS.md to direct coding agents to the eve registry for discovering and installing integrations.
  • 5153b13: Add JSON output to eve registry list and eve registry search for scripts that inspect registry catalogs.
  • 155d46a: Connection registry items now configure their Vercel Connect connector during eve add, and registry setup commands close their IPC channel after reporting an outcome so /add returns instead of remaining stuck.
  • 6f3daca: Add ClientSession.snapshot() for reading a finite, cursor-consistent session event prefix that can hydrate server-rendered applications.
  • 67bfc76: Resolve sandbox skill roots and seed-file paths through the same $HOME resolver the file tools use, so the skills location is spelled once instead of twice.
  • a5acde8: Ensure exiting the dev TUI shuts down its owned server and any surviving workflow processes before the CLI exits. Persisted workflow messages now reach the ready worker during restart instead of being rejected while the file watcher starts.
  • 731464f: Give the local trace spool's on-disk layout a single owner: the shared trace reader now exposes the listing and segment-read primitives that eve traces and the /traces viewer both use, and payload formatting is shared between the detail panel and the conversation view.
  • f7ba3b3: Derive the /traces conversation viewer's line geometry from one prefix-sum helper so scroll, click, and wheel math cannot disagree, and reset the view through a single factory when the viewed trace changes.
  • 3f4bb9c: The /traces viewer now follows your terminal's colors instead of forcing a hardcoded black/grey truecolor palette. It probes the terminal's default background (OSC 11) and derives its card surfaces from your own theme — subtly elevated bands on dark and light backgrounds alike, with red bands for failures, and card titles that invert to black on light backgrounds so they stay legible. Terminals that don't answer the probe get a clean gutter-rail rendering drawn entirely with the shared TUI theme.
  • f5d0533: Derive the dev TUI's slash-command suggestion window from the command registry instead of a hand-maintained constant, and collapse the duplicated cursor step in the terminal line-wrap loop.

eve@0.29.3

Patch Changes

  • 22bfa02: Add guided Photon setup through eve add channel/photon-imessage, including project creation, phone registration, Vercel Connect or portable credentials, and channel scaffolding.
  • 0c0de19: Add an opt-in experimental steering policy to Chat SDK sends that cancels an active turn before delivering its replacement message.
  • b00a79d: Add photonIMessageChannel, a first-class Photon iMessage channel with lazy credentials, Vercel OIDC webhook verification, and automatic eve session routing.
  • 495e93b: Resolve leading $HOME paths in the built-in read_file, write_file, glob, and grep tools so agents can directly access packaged skill references advertised in their prompt.
  • bf01952: Local trace spans now capture model and tool payloads: the system prompt, prompt messages, and response text/reasoning/tool calls on model spans, and call arguments/results on tool spans, each capped at 32 KB with provider transport metadata stripped. Set EVE_TRACES_CONTENT=off to keep payloads out of the spool.
  • 680db59: Provider-executed tool calls (like a gateway's web_search) now show up in local traces: their calls and results are captured on the model span and the /traces viewer renders them as tool cards, with oversized outputs truncated to stay valid JSON.
  • 7ab6d8a: Terminal text wrapping in the dev TUI is now linear-time, so views rendering large single-line payloads (long tool results, big JSON) no longer stall on every repaint.
  • 52cee9c: Consolidate the three Vercel CLI subprocess runners onto one shared lifecycle. A vercel lookup killed by a signal (for example Ctrl-C during setup) now reports a cancellation failure instead of resolving as a success with truncated output.
  • 7703448: The local trace spool reader behind eve traces moved into a shared internal module; command behavior is unchanged.
  • 2d87acb: Subagent turn spans now record the dispatch that created them — agent.parent.session.id, agent.parent.turn.id, agent.parent.call_id, and agent.subagent.name — so a parent turn that fans out to several children can be attributed to the exact tool call behind each one.
  • 3c846bc: The /traces viewer supports drag-to-select: dragging with the mouse highlights text and releasing copies it to the clipboard (OSC 52 with tmux passthrough, plus the platform clipboard command) with a confirmation toast. Clicks now act on release so drags never toggle cards, and Esc cancels an in-flight selection.
  • 3645c6e: The /traces viewer frame breathes: padding rows around the title and above the footer hints, the copy toast floats top-right as a small surface with a left edge bar, and the scroll wheel scrolls the attributes drawer when the pointer is over it.
  • 8858403: The local tracing subsystem (spool writer/reader, retention, the zero-config local OTel runtime, and agent span capture) moved from src/harness into its own src/tracing module; no behavior change.
  • 9adb455: Adds a /traces command to the dev TUI: a full-screen live viewer over the local trace spool that re-tells each trace as a chat-style conversation — system prompt, user and assistant messages, and tool calls render as expandable cards (arrow keys or mouse click to expand/collapse), with a right-side metadata drawer. Subagent turns are badged with their dispatch lineage (subagent:<name>), and the viewer opens on the trace containing the current session — including windowed sessions and subagent children recorded into a parent's trace. Expanded cards scroll line-by-line so content taller than the viewport is fully readable. Model spans with errors, token usage, or tool calls (but no text) now appear as cards instead of disappearing. Terminal escape sequences in trace payloads are stripped at render time. Tool-call arguments and results are captured without stripping domain-level providerOptions/providerMetadata keys. A single prompt message over 32 KiB is truncated at the text level so the serialized JSON stays parseable. Local spans capture system prompt, prompt messages, responses, reasoning, and tool arguments/results (EVE_TRACES_CONTENT=off to disable); long conversations truncate oldest messages first with an omission marker.
  • 275271d: Subagent runs now record into the trace of the session that dispatched them instead of a disconnected trace of their own, and eve traces resolves either session id to it. Local traces also open a real agent.session root span rather than a synthesized parent, so an authored OTel sampler's root rule decides whether a session is sampled, and a session long enough to outgrow one trace rolls into numbered windows that eve traces <session-id> lists oldest first. Rows whose lifetime outlives the worker that opened them — agent.session and agent.turn — now show the extent of their descendants instead of 0ms.

... (truncated)

Changelog

Sourced from eve's changelog.

0.29.5

Patch Changes

  • c0dc572: Rename the TUI /new command to /reset so session reset uses the same name across the client, HTTP, channel, and TUI APIs.
  • 3dce30a: Add manual session compaction through custom-channel helpers, the eve HTTP client, and the eve dev TUI's /compact command. Compaction preserves the session, queues behind an active turn, and does not send synthetic model input.
  • 910805e: Make a single Esc cancel the running turn in the eve dev TUI when no message is queued. Queued messages still use Esc to steer the oldest message into the next turn.
  • 9c51755: Connection search and discovered connection tools now use the same defineDynamic and defineTool pipeline as authored tools. Dynamic tool maps now reject entries that omit defineTool instead of accepting unsupported raw objects.
  • 84aa671: Clarify the dev TUI’s /add flow with consistent integration categories and category-specific browsing labels. MCP connections are now named explicitly, and the flow more clearly explains channels, extensions, and observability integrations.
  • 0c28eb7: Allow declared subagents to export defineDynamic from agent.ts. Session and turn resolvers can now return an agent configuration to expose it or nil to omit it from direct and Workflow delegation.
  • f3bb60d: Add manual session-context clearing through custom-channel helpers, the eve HTTP client, and the eve dev TUI's /clear command. Clearing removes model-message history while preserving the session, agent configuration, durable state, limits, and sandbox.
  • ac7d3c6: Add /cancel to the eve dev TUI. The command cooperatively cancels a running turn from either the live streaming input or the idle prompt while preserving the session and settled context.

0.29.4

Patch Changes

  • e90a8c2: Launch local or deployed eve applications as stable ACP v1 agents with eve acp [url], including streamed messages, tool activity, human input, cancellation, concurrent sessions, and verified Vercel authentication.
  • cec672d: Add guided Discord setup through eve add channel/discord, including Vercel Connect provisioning, trigger attachment, interactions endpoint configuration, slash-command registration, and channel scaffolding.
  • ed328e7: Render registry item titles with their exact registry-provided casing by loading manifests for each page of catalog results.
  • c875a67: Update the generated AGENTS.md to direct coding agents to the eve registry for discovering and installing integrations.
  • 5153b13: Add JSON output to eve registry list and eve registry search for scripts that inspect registry catalogs.
  • 155d46a: Connection registry items now configure their Vercel Connect connector during eve add, and registry setup commands close their IPC channel after reporting an outcome so /add returns instead of remaining stuck.
  • 6f3daca: Add ClientSession.snapshot() for reading a finite, cursor-consistent session event prefix that can hydrate server-rendered applications.
  • 67bfc76: Resolve sandbox skill roots and seed-file paths through the same $HOME resolver the file tools use, so the skills location is spelled once instead of twice.
  • a5acde8: Ensure exiting the dev TUI shuts down its owned server and any surviving workflow processes before the CLI exits. Persisted workflow messages now reach the ready worker during restart instead of being rejected while the file watcher starts.
  • 731464f: Give the local trace spool's on-disk layout a single owner: the shared trace reader now exposes the listing and segment-read primitives that eve traces and the /traces viewer both use, and payload formatting is shared between the detail panel and the conversation view.
  • f7ba3b3: Derive the /traces conversation viewer's line geometry from one prefix-sum helper so scroll, click, and wheel math cannot disagree, and reset the view through a single factory when the viewed trace changes.
  • 3f4bb9c: The /traces viewer now follows your terminal's colors instead of forcing a hardcoded black/grey truecolor palette. It probes the terminal's default background (OSC 11) and derives its card surfaces from your own theme — subtly elevated bands on dark and light backgrounds alike, with red bands for failures, and card titles that invert to black on light backgrounds so they stay legible. Terminals that don't answer the probe get a clean gutter-rail rendering drawn entirely with the shared TUI theme.
  • f5d0533: Derive the dev TUI's slash-command suggestion window from the command registry instead of a hand-maintained constant, and collapse the duplicated cursor step in the terminal line-wrap loop.

0.29.3

Patch Changes

  • 22bfa02: Add guided Photon setup through eve add channel/photon-imessage, including project creation, phone registration, Vercel Connect or portable credentials, and channel scaffolding.
  • 0c0de19: Add an opt-in experimental steering policy to Chat SDK sends that cancels an active turn before delivering its replacement message.
  • b00a79d: Add photonIMessageChannel, a first-class Photon iMessage channel with lazy credentials, Vercel OIDC webhook verification, and automatic eve session routing.
  • 495e93b: Resolve leading $HOME paths in the built-in read_file, write_file, glob, and grep tools so agents can directly access packaged skill references advertised in their prompt.
  • bf01952: Local trace spans now capture model and tool payloads: the system prompt, prompt messages, and response text/reasoning/tool calls on model spans, and call arguments/results on tool spans, each capped at 32 KB with provider transport metadata stripped. Set EVE_TRACES_CONTENT=off to keep payloads out of the spool.
  • 680db59: Provider-executed tool calls (like a gateway's web_search) now show up in local traces: their calls and results are captured on the model span and the /traces viewer renders them as tool cards, with oversized outputs truncated to stay valid JSON.
  • 7ab6d8a: Terminal text wrapping in the dev TUI is now linear-time, so views rendering large single-line payloads (long tool results, big JSON) no longer stall on every repaint.
  • 52cee9c: Consolidate the three Vercel CLI subprocess runners onto one shared lifecycle. A vercel lookup killed by a signal (for example Ctrl-C during setup) now reports a cancellation failure instead of resolving as a success with truncated output.
  • 7703448: The local trace spool reader behind eve traces moved into a shared internal module; command behavior is unchanged.
  • 2d87acb: Subagent turn spans now record the dispatch that created them — agent.parent.session.id, agent.parent.turn.id, agent.parent.call_id, and agent.subagent.name — so a parent turn that fans out to several children can be attributed to the exact tool call behind each one.
  • 3c846bc: The /traces viewer supports drag-to-select: dragging with the mouse highlights text and releasing copies it to the clipboard (OSC 52 with tmux passthrough, plus the platform clipboard command) with a confirmation toast. Clicks now act on release so drags never toggle cards, and Esc cancels an in-flight selection.
  • 3645c6e: The /traces viewer frame breathes: padding rows around the title and above the footer hints, the copy toast floats top-right as a small surface with a left edge bar, and the scroll wheel scrolls the attributes drawer when the pointer is over it.

... (truncated)

Commits

Updates tsx from 4.23.1 to 4.23.5

Release notes

Sourced from tsx's releases.

v4.23.5

4.23.5 (2026-08-02)

Bug Fixes

  • detect the Node inspector enabled via NODE_OPTIONS (3c1d051)

This release is also available on:

v4.23.4

4.23.4 (2026-08-02)

Bug Fixes

  • cli: allow async process.once() signal handlers to finish (#827) (2afc7bb)

This release is also available on:

v4.23.3

4.23.3 (2026-08-02)

Bug Fixes

  • preserve listenerCount overload semantics (#823) (b6574d4)

This release is also available on:

v4.23.2

4.23.2 (2026-08-02)

Bug Fixes

  • watch: exit with 128 + signal number when interrupted (#820) (0b00bc8)

This release is also available on:

Commits
  • c55004d test: remove legacy PTY retry
  • e368161 chore(deps): update pty-spawn to 1.1.1
  • 8d39496 ci: validate GitHub Actions workflows
  • 6fe724e test: clean up timed-out PTY attempts
  • e0a0536 ci: skip unused Windows Node cache
  • 6d6dd84 ci: remove broken lock automation
  • 3c1d051 fix: detect the Node inspector enabled via NODE_OPTIONS
  • 40380a4 ci: lock down the release toolchain
  • f217b6b ci: restrict releases to public repository
  • 2afc7bb fix(cli): allow async process.once() signal handlers to finish (#827)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the npm-minor-patch group across 1 directory with 3 updates
12a4431 
Bumps the npm-minor-patch group with 3 updates in the / directory: [@vercel/connect](https://github.com/vercel/vercel/tree/HEAD/packages/connect), [eve](https://github.com/vercel/eve/tree/HEAD/packages/eve) and [tsx](https://github.com/privatenumber/tsx).


Updates `@vercel/connect` from 0.3.3 to 0.6.0
- [Release notes](https://github.com/vercel/vercel/releases)
- [Changelog](https://github.com/vercel/vercel/blob/main/packages/connect/CHANGELOG.md)
- [Commits](https://github.com/vercel/vercel/commits/@vercel/connect@0.6.0/packages/connect)

Updates `eve` from 0.24.4 to 0.29.5
- [Release notes](https://github.com/vercel/eve/releases)
- [Changelog](https://github.com/vercel/eve/blob/main/packages/eve/CHANGELOG.md)
- [Commits](https://github.com/vercel/eve/commits/eve@0.29.5/packages/eve)

Updates `tsx` from 4.23.1 to 4.23.5
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.1...v4.23.5)

---
updated-dependencies:
- dependency-name: "@vercel/connect"
  dependency-version: 0.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: eve
  dependency-version: 0.29.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: tsx
  dependency-version: 4.23.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 6, 2026
@dependabot
dependabot Bot requested a review from paulieb89 as a code owner August 6, 2026 05:25
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 6, 2026
@vercel

vercel Bot commented Aug 6, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
evolve Ready Ready Preview Aug 6, 2026 5:25am

Request Review

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@paulieb89 paulieb89 Awaiting requested review from paulieb89 paulieb89 is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants