build(deps): bump the dependencies group with 7 updates by dependabot[bot] · Pull Request #4 · bornBrian/allowance

dependabot · 2026-11-10T08:46:06Z

Bumps the dependencies group with 7 updates:

Package	From	To
@anthropic-ai/sdk	`1.4.0`	`1.6.0`
@channel3/sdk	`4.6.0`	`4.8.0`
next	`16.4.4`	`16.4.5`
web-push	`3.6.7`	`4.0.0`
@types/node	`24.19.2`	`26.6.6`
typescript	`5.9.3`	`7.0.2`
vitest	`4.1.12`	`5.1.0`

Updates @anthropic-ai/sdk from 1.4.0 to 1.6.0

Release notes

Sourced from @anthropic-ai/sdk's releases.

sdk-v1.6.0

Features

api: add error code for ramp limit errors

api: add error codes for External Key validation failures

api: add support for signing organization members out everywhere

Bug Fixes

client: set the name of each error to its class name

client: set the name of WorkloadIdentityError

Chores

docs: describe the type and message of API errors

internal: generate the OpenTelemetry span attribute tables

internal: tell contributors when a runtime type check belongs

Documentation

add the rules the SDKs share to CLAUDE.md

client: describe the type, message, code and details of API errors

client: list each method's errors without their descriptions

sdk-v1.5.0

Features

api: add error details types and new error type values

api: add ids filter to list workspaces

client: add error classes for HTTP statuses and API error codes, and apiMessage, errorCode and details on APIError

Bug Fixes

api: capitalize CMEK in error details type names

api: move some error details types to the resource they describe

client: reject path parameters like ";x", ".;x" and "..;x"

tools: keep the memory tool from renaming or deleting the /memories directory

Performance Improvements

streaming: decode server-sent events once per chunk

Chores

... (truncated)

Changelog

Sourced from @anthropic-ai/sdk's changelog.

1.6.0 (2026-11-05)

Features

api: add error code for ramp limit errors

api: add error codes for External Key validation failures

api: add support for signing organization members out everywhere

Bug Fixes

client: set the name of each error to its class name

client: set the name of WorkloadIdentityError

Chores

docs: describe the type and message of API errors

internal: generate the OpenTelemetry span attribute tables

internal: tell contributors when a runtime type check belongs

Documentation

add the rules the SDKs share to CLAUDE.md

client: describe the type, message, code and details of API errors

client: list each method's errors without their descriptions

1.5.0 (2026-11-04)

Features

api: add error details types and new error type values

api: add ids filter to list workspaces

client: add error classes for HTTP statuses and API error codes, and apiMessage, errorCode and details on APIError

Bug Fixes

api: capitalize CMEK in error details type names

api: move some error details types to the resource they describe

client: reject path parameters like ";x", ".;x" and "..;x"

tools: keep the memory tool from renaming or deleting the /memories directory

Performance Improvements

streaming: decode server-sent events once per chunk

... (truncated)

Commits

590e949 release: 1.6.0
479ad16 Merge pull request #1027 from anthropics/synced/published
814b3aa codegen metadata
d643d17 codegen metadata
d680c85 feat(api): add support for signing organization members out everywhere
54d8b51 codegen metadata
531c403 feat(api): add error codes for External Key validation failures
e3df3ce ci: accept notes under the title of a changelog entry file
84025bf codegen metadata
dff525d codegen metadata
Additional commits viewable in compare view

Updates @channel3/sdk from 4.6.0 to 4.8.0

Commits

See full diff in compare view

Updates next from 16.4.4 to 16.4.5

Release notes

Sourced from next's releases.

v16.4.5

This release contains security fixes for the following advisories:

Moderate

Cross-tenant sensitive information disclosure in Next.js 'use cache' when called through unstable_cache

Cache leak across root param values in nested 'use cache' functions (follow-up)

Cache poisoning of shared fallback shells in Cache Components via request-supplied placeholder route params

Cross-user cache disclosure and poisoning in Next.js use cache with binary arguments

Cross-client response injection and disclosure in self-hosted Next.js applications forwarding fetched responses

SVG rejection bypass in Next.js image optimization

HttpOnly cookie exposure through internal response header on Next.js Edge runtime routes

Commits

4e5335a v16.4.5
809be72 [lts-active] Strip internal middleware cookie headers from edge responses (#282)
2842833 [lts-active] Fix stale compressed framing for forwarded fetch responses (#281)
6596840 [lts-active] [use cache] Fix cache key when binary args are used (#280)
18eeffb [lts-active] Fix shared shell poisoning from request-supplied placeholder par...
e66e656 [lts-active] [next/image] Fix false-positive AVIF/HEIC detection (#278)
d605874 [lts-active] Fix unstable_cache leaking cold 'use cache' fills across roo...
80c96ed [lts-active] Fix outer 'use cache' entries reused across root param values ...
See full diff in compare view

Updates web-push from 3.6.7 to 4.0.0

Commits

2af7b70 4.0.0
d63be3e fix: refresh vulnerable transitive dependencies (#999)
263a7d0 feat: switch CLI to parseArgs (#968)
76739d4 Bump tinyspy from 4.0.4 to 4.0.6 (#990)
3fc06b2 Bump eslint from 10.9.1 to 10.13.0 (#1001)
b34d7d4 Bump mocha from 11.7.6 to 12.0.0 (#986)
896b46d Bump eslint from 10.8.0 to 10.9.1 (#985)
4b4b8bc Bump globals from 17.8.0 to 17.12.0 (#987)
c93e9dc Bump playwright from 1.61.1 to 1.63.0 (#979)
87de1fd docs: warn against localhost VAPID subjects (#988)
Additional commits viewable in compare view

Updates @types/node from 24.19.2 to 26.6.6

Commits

See full diff in compare view

Updates typescript from 5.9.3 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 7.0.2

https://devblogs.microsoft.com/typescript/announcing-typescript-7-0/

This tag was originally released at: https://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2

TypeScript 6.0.3

For release notes, check out the release announcement blog post.

fixed issues query for TypeScript 6.0.0 (Beta).

fixed issues query for TypeScript 6.0.1 (RC).

fixed issues query for TypeScript 6.0.2 (Stable).

fixed issues query for TypeScript 6.0.3 (Stable).

Downloads are available on:

npm

TypeScript 6.0

For release notes, check out the release announcement blog post.

fixed issues query for TypeScript 6.0.0 (Beta).

fixed issues query for TypeScript 6.0.1 (RC).

fixed issues query for TypeScript 6.0.2 (Stable).

Downloads are available on:

npm

TypeScript 6.0.1 RC

For release notes, check out the release announcement blog post.

fixed issues query for TypeScript 6.0.0 (Beta).

fixed issues query for TypeScript 6.0.1 (RC).

Downloads are available on:

npm

TypeScript 6.0 Beta

For release notes, check out the release announcement.

fixed issues query for Typescript 6.0.0 (Beta).

Downloads are available on:

npm

Commits

1e4744d Merge branch 'main' into ts7-release
a5a219cmicrosoft/typescript-go#4558
ecfe30d Update status localization
5de25b5 Hide executable name in TypeScript status
d7ce74a Show bundled TypeScript version for packaged servers
29be66a Correct TS 7 release version to 7.0.2
ed2bd1b Merge branch 'main' into ts7-release
8873075 Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...
9427131 Set up stable / nightly extension split, other prep (microsoft/typescript-go#...
d4eaca5microsoft/typescript-go#4549
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

Updates vitest from 4.1.12 to 5.1.0

Release notes

Sourced from vitest's releases.

v5.1.0

🚀 Features

Add --last-failed to run only failed tests - by @sheremet-va in vitest-dev/vitest#11558 (82f63)

Support Temporal.Instant and Temporal.ZonedDateTime in vi.setSystemTime() - by @Prajwal2246, Prajwal2246, Claude Opus 5.5 (1M context), @hi-ogawa and Codex (GPT-6) in vitest-dev/vitest#11321 (f150f)

Introduce --since-last-run flag - by @sheremet-va in vitest-dev/vitest#11516 (08bd9)

Expose per-retry/repeat attempt result - by @hi-ogawa, Codex (GPT-6) and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11232 (21be4)

Support fake timers for node:timers and node:timers/promise - by @hi-ogawa, OpenCode and Codex (GPT-6) in vitest-dev/vitest#10899 (fbe97)

Allow coverage providers to store data in fs module cache - by @AriPerkkio in vitest-dev/vitest#11747 (54a2b)

Interactively review failed snapshots - by @macarie and @hi-ogawa in vitest-dev/vitest#11325 (54e5b)

browser:

Mock modules through an import map - by @sheremet-va in vitest-dev/vitest#11534 (707f8)

Drop experimental label from trace view - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11518 (44c3c)

Introduce experimental pointer API - by @macarie in vitest-dev/vitest#10780 (5dc09)

Capture aria snapshot in trace view - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11492 (0cc39)

Show trace steps timeline on terminal on test failure - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11594 (973dc)

Add failure-only trace view mode - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11612 (d5d7d)

Enable failure-only trace view by default - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11766 (f37b6)

coverage:

V8 to support ignoreNode option - by @erickserra and @AriPerkkio in vitest-dev/vitest#11688 (e02db)

experimental:

Add trace timeline for node - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11753 (4e985)

Add message option to vi.waitFor and vi.waitUntil - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11754 (fd145)

🐞 Bug Fixes

Rerun setup files after --changed filtering - by @sheremet-va in vitest-dev/vitest#11621 (3a39c)

Return the mock to concurrent imports - by @sheremet-va in vitest-dev/vitest#11623 (1453b)

Don't fail on console log pending at teardown - by @sheremet-va in vitest-dev/vitest#11619 (a60b8)

Reference chai types in every d.ts chunk - by @sheremet-va in vitest-dev/vitest#11618 (fb150)

Detect mock factory cycles that form later - by @sheremet-va in vitest-dev/vitest#11642 (e9554)

Skip fs module cache for typed import.meta.glob - by @sheremet-va in vitest-dev/vitest#11666 (79501)

Run tests that import a deleted file - by @sheremet-va in vitest-dev/vitest#11669 (80aa1)

Keep syntax highlighting in code frames - by @sheremet-va in vitest-dev/vitest#11705 (d39f5)

Respect CLI filters when prewarming browsers - by @sheremet-va and Benjamin Tang in vitest-dev/vitest#11706 (10947)

Read cached source as utf-8 - by @juan-fernandez in vitest-dev/vitest#11682 and vitest-dev/vitest#11709 (867a5)

Inherit watch from the root config in projects - by @nstepien and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11724 (77c12)

Prefix expect.poll message to all errors - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11756 (cab58)

Support api.port 0 - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11641 (3667c)

Show attempts in test error logs of retried tests - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11696 (77a94)

Preserve rootDir in project paths - by @btea in vitest-dev/vitest#11816 (bf96d)

browser:

Change default port to 23315 - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11640 (a2ec4)

Advance fake timers in actions and expect.element - by @julienw, @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11242 (68190)

Drop trace view warning without html reporter - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11665 (e6407)

Detect shared chunks via the optimizer - by @sheremet-va in vitest-dev/vitest#11661 (e2e9c)

Clear screenshot stability timeout - by @sheremet-va in vitest-dev/vitest#11659 (fbe37)

Measure prepare duration with one clock - by @sheremet-va in vitest-dev/vitest#11667 (a3ed4)

Keep failure screenshot per attempt - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11694 (a5022)

Print trace timeline of each attempt - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11695 (27229)

... (truncated)

Commits

7a38449 chore: release v5.1.0 (#11838)
a5ec316 fix(vm): keep assignable accessor globals writable in node environment (#11834)
e46c6c1 refactor: share trace types and utils (#11825)
9e23ce5 refactor(snapshot): unify review update with SnapshotState update (#11790)
a0e33cc chore: eliminate lint error (#11822)
fd145d8 feat(experimental): add message option to vi.waitFor and vi.waitUntil (#11754)
4e98551 feat(experimental): add trace timeline for node (#11753)
bf96dad fix: preserve rootDir in project paths (#11816)
54e5b8a feat: interactively review failed snapshots (#11325)
4277075 fix(expect): keep soft .resolves/.rejects error location (#11792)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 7 updates: | Package | From | To | | --- | --- | --- | | [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `1.4.0` | `1.6.0` | | [@channel3/sdk](https://github.com/channel3-ai/channel3-ts-sdk) | `4.6.0` | `4.8.0` | | [next](https://github.com/vercel/next.js) | `16.4.4` | `16.4.5` | | [web-push](https://github.com/web-push-libs/web-push) | `3.6.7` | `4.0.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.19.2` | `26.6.6` | | [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `7.0.2` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.12` | `5.1.0` | Updates `@anthropic-ai/sdk` from 1.4.0 to 1.6.0 - [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases) - [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md) - [Commits](anthropics/anthropic-sdk-typescript@sdk-v1.4.0...sdk-v1.6.0) Updates `@channel3/sdk` from 4.6.0 to 4.8.0 - [Commits](https://github.com/channel3-ai/channel3-ts-sdk/commits) Updates `next` from 16.4.4 to 16.4.5 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.4.4...v16.4.5) Updates `web-push` from 3.6.7 to 4.0.0 - [Release notes](https://github.com/web-push-libs/web-push/releases) - [Commits](web-push-libs/web-push@v3.6.7...v4.0.0) Updates `@types/node` from 24.19.2 to 26.6.6 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `typescript` from 5.9.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v5.9.3...v7.0.2) Updates `vitest` from 4.1.12 to 5.1.0 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.1.0/packages/vitest) --- updated-dependencies: - dependency-name: "@anthropic-ai/sdk" dependency-version: 1.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@channel3/sdk" dependency-version: 4.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: next dependency-version: 16.4.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: web-push dependency-version: 4.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: "@types/node" dependency-version: 26.6.6 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dependencies - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dependencies - dependency-name: vitest dependency-version: 5.1.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 10, 2026

Navigation Menu

Repository navigation

build(deps): bump the dependencies group with 7 updates - #4

build(deps): bump the dependencies group with 7 updates#4
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-6dbe94545d

dependabot Bot commented on behalf of github Nov 10, 2026

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Nov 10, 2026

sdk-v1.6.0

Features

Bug Fixes

Chores

Documentation

sdk-v1.5.0

Features

Bug Fixes

Performance Improvements

Chores

1.6.0 (2026-11-05)

Features

Bug Fixes

Chores

Documentation

1.5.0 (2026-11-04)

Features

Bug Fixes

Performance Improvements

v16.4.5

Moderate

TypeScript 7.0.2

TypeScript 6.0.3

TypeScript 6.0

TypeScript 6.0.1 RC

TypeScript 6.0 Beta

v5.1.0

🚀 Features

🐞 Bug Fixes

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants