Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 6, 2026

Bumps the dependencies group with 17 updates in the / directory:

Package From To
@google/genai 1.37.0 1.40.0
@modelcontextprotocol/sdk 1.25.2 1.26.0
clipboardy 5.0.2 5.2.1
commander 14.0.2 14.0.3
dotenv 17.2.3 17.2.4
inquirer 13.2.0 13.2.2
openai 6.16.0 6.18.0
osc-progress 0.2.0 0.3.0
shiki 3.21.0 3.22.0
zod 4.3.5 4.3.6
@biomejs/biome 2.3.11 2.3.14
@types/node 25.0.9 25.2.1
@vitest/coverage-v8 4.0.17 4.0.18
devtools-protocol 0.0.1568893 0.0.1580600
esbuild 0.27.2 0.27.3
puppeteer-core 24.35.0 24.37.2
vitest 4.0.17 4.0.18

Updates @google/genai from 1.37.0 to 1.40.0

Release notes

Sourced from @​google/genai's releases.

v1.40.0

1.40.0 (2026-02-04)

Features

v1.39.0

1.39.0 (2026-01-30)

Features

  • Add include_input query parameter to Get Interaction endpoint. (84bc7f4)
  • Add registerFiles for you can use gcs files with mldev. (7acf3e0)
  • Support distillation tuning (c9a2e72)
  • Support OSS Tuning in GenAI SDK (258f211)

Bug Fixes

  • Add metadata in batch inlined response (0e95bb7)

v1.38.0

1.38.0 (2026-01-20)

Features

  • Add ModelArmorConfig support for prompt and response sanitization via the Model Armor service (be65c24)
  • Allow custom endpoints for authentication with Vertex AI in Typescript (891e32d), closes #1137
  • Update data types from discovery doc. (a16a180)
  • Update data types from discovery doc. (a4eaa8c)
Changelog

Sourced from @​google/genai's changelog.

1.40.0 (2026-02-04)

Features

  • Update data types from discovery doc. (bad81a7)

1.39.0 (2026-01-30)

Features

  • Add include_input query parameter to Get Interaction endpoint. (84bc7f4)
  • Add registerFiles for you can use gcs files with mldev. (7acf3e0)
  • Support distillation tuning (c9a2e72)
  • Support OSS Tuning in GenAI SDK (258f211)

Bug Fixes

  • Add metadata in batch inlined response (0e95bb7)

1.38.0 (2026-01-20)

Features

  • Add ModelArmorConfig support for prompt and response sanitization via the Model Armor service (be65c24)
  • Allow custom endpoints for authentication with Vertex AI in Typescript (891e32d), closes #1137
  • Update data types from discovery doc. (a16a180)
  • Update data types from discovery doc. (a4eaa8c)
Commits
  • 5e4d3a4 chore(main): release 1.40.0 (#1299)
  • 3b4e641 No public description
  • bad81a7 feat: Update data types from discovery doc.
  • 307a6cc chore: Make the second interaction stateful by linking it to the first.
  • 9e4e88f chore: pull in the generator change
  • 1b5ec62 chore(main): release 1.39.0 (#1284)
  • 22f271f chore: Support root object conversion for Go SDK. Add response-level root obj...
  • 0e95bb7 fix: Add metadata in batch inlined response
  • 258f211 feat: Support OSS Tuning in GenAI SDK
  • d78f185 chore: Update interactions
  • Additional commits viewable in compare view

Updates @modelcontextprotocol/sdk from 1.25.2 to 1.26.0

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

v1.26.0

Addresses "Sharing server/transport instances can leak cross-client response data" in this GHSA GHSA-345p-7cg4-v4c7

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@v1.25.3...v1.26.0

v1.25.3

What's Changed

Full Changelog: modelcontextprotocol/typescript-sdk@v1.25.2...v1.25.3

Commits
  • fe9c07b chore: bump version to 1.26.0 (#1479)
  • 4f01e7e fix: add non-null assertions for optional setupServer fields in stateful test
  • a05be17 Merge commit from fork
  • 50d9fa3 Fix #1430: Client Credentials providers scopes support (backported) (#1442)
  • aa81a66 fix(deps): resolve npm audit vulnerabilities and bump dependencies (v1.x back...
  • 6aba065 chore: bump v1.25.3 for backport fixes (#1412)
  • 6e8f7e1 fix: prevent Hono from overriding global Response object (v1.x) (#1411)
  • 12ae856 [v1.x backport] Use correct schema for client sampling validation when tools ...
  • See full diff in compare view

Updates clipboardy from 5.0.2 to 5.2.1

Release notes

Sourced from clipboardy's releases.

v5.2.1

  • Fix large input truncation on Windows 0316533

sindresorhus/clipboardy@v5.2.0...v5.2.1

v5.2.0

  • Add image support (macOS-only) 9f869f8
  • Gracefully handle missing fallback binaries in bundled environments fb77713
  • Improve performance on WSL 13a90d7
  • Improve error message for headless Linux environments bb17453

sindresorhus/clipboardy@v5.1.0...v5.2.0

v5.1.0

  • Improve PowerShell handling ea0b2d6

sindresorhus/clipboardy@v5.0.2...v5.1.0

Commits
  • 8702b75 5.2.1
  • 0316533 Fix large input truncation on Windows
  • 3aabac4 5.2.0
  • 9f869f8 Add image support (macOS-only)
  • fb77713 Gracefully handle missing fallback binaries in bundled environments
  • 13a90d7 Improve performance on WSL
  • bb17453 Improve error message for headless Linux environments
  • b860e04 Add FAQ about headless Linux environments
  • 627cbfa 5.1.0
  • ea0b2d6 Improve PowerShell handling
  • See full diff in compare view

Updates commander from 14.0.2 to 14.0.3

Release notes

Sourced from commander's releases.

v14.0.3

Added

  • Release Policy document (#2462)

Changes

  • old major versions now supported for 12 months instead of just previous major version, to give predictable end-of-life date (#2462)
  • clarify typing for deprecated callback parameter to .outputHelp() (#2427)
  • simple readability improvements to README (#2465)
Changelog

Sourced from commander's changelog.

[14.0.3] (2026-01-31)

Added

  • Release Policy document (#2462)

Changes

  • old major versions now supported for 12 months instead of just previous major version, to give predictable end-of-life date (#2462)
  • clarify typing for deprecated callback parameter to .outputHelp() (#2427)
  • simple readability improvements to README (#2465)
Commits

Updates dotenv from 17.2.3 to 17.2.4

Changelog

Sourced from dotenv's changelog.

17.2.4 (2026-02-05)

Changed

  • Make DotenvPopulateInput accept NodeJS.ProcessEnv type (#915)
  • Give back to dotenv by checking out my newest project vestauth. It is auth for agents. Thank you for using my software.
Commits

Updates inquirer from 13.2.0 to 13.2.2

Release notes

Sourced from inquirer's releases.

[email protected]

  • Typescript disallow type: 'list' unless there's a plugin installed under that name. (list was replaced by select and marked as deprecated for a few released, v13.0.0 removed the alias.)

[email protected]

  • Regression: previous answers weren't provided to the validate functions as the second arguments.
Commits
  • dc4c581 chore: Publish new release
  • 3713139 fix(inquirer): remove deprecated 'list' type from TypeScript types (#1977)
  • 093b7d6 chore(deps-dev): Bump the testing group with 3 updates (#1970)
  • 76f9a07 chore(deps-dev): Bump the linting group with 3 updates (#1971)
  • 41f6d8b chore(deps-dev): Bump oxfmt in the formatting group (#1972)
  • 58ec12e chore(deps-dev): Bump turbo from 2.7.5 to 2.7.6 in the build group (#1973)
  • 4b56992 chore(deps-dev): Bump @​types/node in the types group (#1974)
  • cb47974 chore: Publish new release
  • 52b2936 fix(inquirer): pass previous answers to validate function (#1969)
  • 5239f13 chore(deps-dev): Bump the linting group across 1 directory with 5 updates (#1...
  • Additional commits viewable in compare view

Updates openai from 6.16.0 to 6.18.0

Release notes

Sourced from openai's releases.

v6.18.0

6.18.0 (2026-02-05)

Full Changelog: v6.17.0...v6.18.0

Features

  • api: image generation actions for responses; ResponseFunctionCallArgumentsDoneEvent.name (d373c32)

Bug Fixes

  • client: avoid memory leak with abort signals (b449f36)
  • client: avoid removing abort listener too early (1c045f7)
  • client: undo change to web search Find action (8259b45)
  • client: update type for find_in_page action (9aa8d98)

Chores

  • client: do not parse responses with empty content-length (4a118fa)
  • client: restructure abort controller binding (a4d7151)
  • internal: fix pagination internals not accepting option promises (6677905)

v6.17.0

6.17.0 (2026-01-28)

Full Changelog: v6.16.0...v6.17.0

Features

Bug Fixes

  • api: mark assistants as deprecated (3ae2a14)

Chores

  • ci: upgrade actions/github-script (4ea73d3)
  • internal: update actions/checkout version (f163b77)
  • internal: upgrade babel, qs, js-yaml (2e2f3c6)
Changelog

Sourced from openai's changelog.

6.18.0 (2026-02-05)

Full Changelog: v6.17.0...v6.18.0

Features

  • api: image generation actions for responses; ResponseFunctionCallArgumentsDoneEvent.name (d373c32)

Bug Fixes

  • client: avoid memory leak with abort signals (b449f36)
  • client: avoid removing abort listener too early (1c045f7)
  • client: undo change to web search Find action (8259b45)
  • client: update type for find_in_page action (9aa8d98)

Chores

  • client: do not parse responses with empty content-length (4a118fa)
  • client: restructure abort controller binding (a4d7151)
  • internal: fix pagination internals not accepting option promises (6677905)

6.17.0 (2026-01-28)

Full Changelog: v6.16.0...v6.17.0

Features

Bug Fixes

  • api: mark assistants as deprecated (3ae2a14)

Chores

  • ci: upgrade actions/github-script (4ea73d3)
  • internal: update actions/checkout version (f163b77)
  • internal: upgrade babel, qs, js-yaml (2e2f3c6)
Commits
  • 69d2b01 release: 6.18.0
  • bf5a096 chore(internal): fix pagination internals not accepting option promises
  • aa24028 fix(client): avoid removing abort listener too early
  • 6ae89c6 chore(client): restructure abort controller binding
  • e70fa06 fix(client): undo change to web search Find action
  • 3fd4d03 codegen metadata
  • f4e6a09 codegen metadata
  • 4391e45 fix(client): update type for find_in_page action
  • a05e900 chore(client): do not parse responses with empty content-length
  • 243f44d fix(client): avoid memory leak with abort signals
  • Additional commits viewable in compare view

Updates osc-progress from 0.2.0 to 0.3.0

Release notes

Sourced from osc-progress's releases.

0.3.0

Added

  • Throttled/deduped OSC progress updates (default).
  • Stalled/paused state support (setPaused, stallAfterMs).
  • Completion/error helpers (done, fail) with delayed clear (clearDelayMs).
  • Optional auto-clear on process exit (autoClearOnExit).
  • Controller cleanup via dispose().

Changed

  • createOscProgressController now returns an extended controller with pause/done/fail helpers.
  • Controller updates are throttled by default (behavior change).
Changelog

Sourced from osc-progress's changelog.

0.3.0 - Unreleased

Added

  • Throttled/deduped OSC progress updates (default).
  • Stalled/paused state support (setPaused, stallAfterMs).
  • Completion/error helpers (done, fail) with delayed clear (clearDelayMs).
  • Optional auto-clear on process exit (autoClearOnExit).
  • Controller cleanup via dispose().

Changed

  • createOscProgressController now returns an extended controller with pause/done/fail helpers.
  • Controller updates are throttled by default (behavior change).
Commits

Updates shiki from 3.21.0 to 3.22.0

Release notes

Sourced from shiki's releases.

v3.22.0

   🚀 Features

    View changes on GitHub
Commits

Updates zod from 4.3.5 to 4.3.6

Release notes

Sourced from zod's releases.

v4.3.6

Commits:

  • 9977fb0868432461de265a773319e80a90ba3e37 Add brand.dev to sponsors
  • f4b7bae3468f6188b8f004e007d722148fc91d77 Update pullfrog.yml (#5634)
  • 251d7163a0ac7740fee741428d913e3c55702ace Clean up workflow_call
  • edd4132466da0f5065a8e051b599d01fdd1081d8 fix: add missing User-agent to robots.txt and allow all (#5646)
  • 85db85e9091d0706910d60c7eb2e9c181edd87bd fix: typo in codec.test.ts file (#5628)
  • cbf77bb12bdfda2e054818e79001f5cb3798ce76 Avoid non null assertion (#5638)
  • dfbbf1c1ae0c224b8131d80ddf0a264262144086 Avoid re-exported star modules (#5656)
  • 762e911e5773f949452fd6dd4e360f2362110e8e Generalize numeric key handling
  • ca3c8629c0c2715571f70b44c2433cad3db7fe4e v4.3.6
Commits

Updates @biomejs/biome from 2.3.11 to 2.3.14

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.3.14

2.3.14

Patch Changes

  • #8921 29e2435 Thanks @​siketyan! - Fixed #8759: The useConsistentTypeDefinitions rule no longer converts empty object type declarations into interfaces, as it will conflict with the noEmptyInterface rule and can cause an infinite loop when both rules are enabled.

  • #8928 ccaeac4 Thanks @​taga3s! - Added the nursery rule useGlobalThis. This rule enforces using globalThis over window, self and global.

  • #8602 9a18daa Thanks @​dyc3! - Added the new nursery rule noVueArrowFuncInWatch. This rule forbids using arrow functions in watchers in Vue components, because arrow functions do not give access to the component instance (via this), while regular functions do.

  • #8905 9b1eea8 Thanks @​ryan-m-walker! - Fixed #8428: Improved parsing recovery when encountering qualified rules inside CSS @page at-rule blocks.

  • #8900 f788cff Thanks @​mdevils! - Fixed #8802: useExhaustiveDependencies now correctly suggests dependencies without including callback-scoped variables or method names.

    When accessing object properties with a callback-scoped variable, only the object path is suggested:

    // Now correctly suggests `props.value` instead of `props.value[day]`
    useMemo(() => {
      return WeekdayValues.filter((day) => props.value[day]);
    }, [props.value]);

    When calling methods on objects, only the object is suggested as a dependency:

    // Now correctly suggests `props.data` instead of `props.data.forEach`
    useMemo(() => {
      props.data.forEach((item) => console.log(item));
    }, [props.data]);
  • #8913 e1e20ea Thanks @​dyc3! - Fixed #8363: HTML parser no longer crashes when encountering a < character followed by a digit in text content (e.g., <12 months). The parser now correctly emits an "Unescaped < bracket character" error instead of treating <12 as a tag name and crashing.

  • #8910 2fb63a4 Thanks @​dyc3! - Fixed #8774: Type aliases with generic parameters that have extends constraints now properly indent comments after the equals sign.

    Previously, comments after the = in type aliases with extends constraints were not indented:

    -type A<B, C extends D> = // Some comment
    -undefined;
    +type A<B, C extends D> =
    +    // Some comment
    +    undefined;
  • #8916 ea4bd04 Thanks @​ryan-m-walker! - Fixed #4013, where comments in member chains caused unnecessary line breaks.

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.3.14

Patch Changes

  • #8921 29e2435 Thanks @​siketyan! - Fixed #8759: The useConsistentTypeDefinitions rule no longer converts empty object type declarations into interfaces, as it will conflict with the noEmptyInterface rule and can cause an infinite loop when both rules are enabled.

  • #8928 ccaeac4 Thanks @​taga3s! - Added the nursery rule useGlobalThis. This rule enforces using globalThis over window, self and global.

  • #8602 9a18daa Thanks @​dyc3! - Added the new nursery rule noVueArrowFuncInWatch. This rule forbids using arrow functions in watchers in Vue components, because arrow functions do not give access to the component instance (via this), while regular functions do.

  • #8905 9b1eea8 Thanks @​ryan-m-walker! - Fixed #8428: Improved parsing recovery when encountering qualified rules inside CSS @page at-rule blocks.

  • #8900 f788cff Thanks @​mdevils! - Fixed #8802: useExhaustiveDependencies now correctly suggests dependencies without including callback-scoped variables or method names.

    When accessing object properties with a callback-scoped variable, only the object path is suggested:

    // Now correctly suggests `props.value` instead of `props.value[day]`
    useMemo(() => {
      return WeekdayValues.filter((day) => props.value[day]);
    }, [props.value]);

    When calling methods on objects, only the object is suggested as a dependency:

    // Now correctly suggests `props.data` instead of `props.data.forEach`
    useMemo(() => {
      props.data.forEach((item) => console.log(item));
    }, [props.data]);
  • #8913 e1e20ea Thanks @​dyc3! - Fixed #8363: HTML parser no longer crashes when encountering a < character followed by a digit in text content (e.g., <12 months). The parser now correctly emits an "Unescaped < bracket character" error instead of treating <12 as a tag name and crashing.

  • #8910 2fb63a4 Thanks @​dyc3! - Fixed #8774: Type aliases with generic parameters that have extends constraints now properly indent comments after the equals sign.

    Previously, comments after the = in type aliases with extends constraints were not indented:

    -type A<B, C extends D> = // Some comment
    -undefined;
    +type A<B, C extends D> =
    +    // Some comment
    +    undefined;
  • #8916 ea4bd04 Thanks @​ryan-m-walker! - Fixed #4013, where comments in member chains caused unnecessary line breaks.

    // Before

... (truncated)

Commits

Updates @types/node from 25.0.9 to 25.2.1

Commits

Updates @vitest/coverage-v8 from 4.0.17 to 4.0.18

Release notes

Sourced from @​vitest/coverage-v8's releases.

v4.0.18

   🚀 Experimental Features

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates devtools-protocol from 0.0.1568893 to 0.0.1580600

Commits

Updates esbuild from 0.27.2 to 0.27.3

Release notes

Sourced from esbuild's releases.

v0.27.3

  • Preserve URL fragments in data URLs (#4370)

    Consider the following HTML, CSS, and SVG:

    • index.html:

      <!DOCTYPE html>
      <html>
        <head><link rel="stylesheet" href="icons.css"></head>
        <body><div class="triangle"></div></body>
      </html>
    • icons.css:

      .triangle {
        width: 10px;
        height: 10px;
        background: currentColor;
        clip-path: url(./triangle.svg#x);
      }
    • triangle.svg:

      <svg xmlns="http://www.w3.org/2000/svg">
        <defs>
          <clipPath id="x">
            <path d="M0 0H10V10Z"/>
          </clipPath>
        </defs>
      </svg>

    The CSS uses a URL fragment (the #x) to reference the clipPath element in the SVG file. Previously esbuild's CSS bundler didn't preserve the URL fragment when bundling the SVG using the dataurl loader, which broke the bundled CSS. With this release, esbuild will now preserve the URL fragment in the bundled CSS:

    /* icons.css */
    .triangle {
      width: 10px;
      height: 10px;
      background: currentColor;
      clip-path: url('data:image/svg+xml,<svg xmlns="http://www.w3.org/2000/svg"><defs><clipPath id="x"><path d="M0 0H10V10Z"/></clipPath></defs></svg>#x');
    }

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.27.3

  • Preserve URL fragments in data URLs (#4370)

    Consider the following HTML, CSS, and SVG:

    • index.html:

      <!DOCTYPE html>
      <html>
        <head><link rel="stylesheet" href="icons.css"></head>
        <body><div class="triangle"></div></body>
      </html>
    • icons.css:

      .triangle {
        width: 10px;
        height: 10px;
        background: currentColor;
        clip-path: url(./triangle.svg#x);
      }
    • triangle.svg:

      <svg xmlns="http://www.w3.org/2000/svg">
        <defs>
          <clipPath id="x">
            <path d="M0 0H10V10Z"/>
          </clipPath>
        </defs>
      </svg>

    The CSS uses a URL fragment (the #x) to reference the clipPath element in the SVG file. Previously esbuild's CSS bundler didn't preserve the URL fragment when bundling the SVG using the dataurl loader, which broke the bundled CSS. With this release, esbuild will now preserve the URL fragment in the bundled CSS:

    /* icons.css */
    .triangle {
      width: 10px;
      height: 10px;
      background: currentColor;
      clip-path: url('data:image/svg+xml,<svg xmlns="http://www.w3.org/2000/svg"><defs><clipPath id="x"><path d="M0 0H10V10Z"/></clipPath></defs></svg>#x');
    }

... (truncated)

Commits
  • 9129e00 publish 0.27.3 to npm
  • e20e411 small fix to release notes
  • 0dc0f2d fix #4322: parse and print CSS @scope rules
  • 55fe391 update firefox css gradient support
  • 2c35297 update gradient lowering transfor...

    Description has been truncated

…pdates

Bumps the dependencies group with 17 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@google/genai](https://github.com/googleapis/js-genai) | `1.37.0` | `1.40.0` |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.25.2` | `1.26.0` |
| [clipboardy](https://github.com/sindresorhus/clipboardy) | `5.0.2` | `5.2.1` |
| [commander](https://github.com/tj/commander.js) | `14.0.2` | `14.0.3` |
| [dotenv](https://github.com/motdotla/dotenv) | `17.2.3` | `17.2.4` |
| [inquirer](https://github.com/SBoudrias/Inquirer.js) | `13.2.0` | `13.2.2` |
| [openai](https://github.com/openai/openai-node) | `6.16.0` | `6.18.0` |
| [osc-progress](https://github.com/steipete/osc-progress) | `0.2.0` | `0.3.0` |
| [shiki](https://github.com/shikijs/shiki/tree/HEAD/packages/shiki) | `3.21.0` | `3.22.0` |
| [zod](https://github.com/colinhacks/zod) | `4.3.5` | `4.3.6` |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.3.11` | `2.3.14` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.0.9` | `25.2.1` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.0.17` | `4.0.18` |
| [devtools-protocol](https://github.com/ChromeDevTools/devtools-protocol) | `0.0.1568893` | `0.0.1580600` |
| [esbuild](https://github.com/evanw/esbuild) | `0.27.2` | `0.27.3` |
| [puppeteer-core](https://github.com/puppeteer/puppeteer) | `24.35.0` | `24.37.2` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.0.17` | `4.0.18` |



Updates `@google/genai` from 1.37.0 to 1.40.0
- [Release notes](https://github.com/googleapis/js-genai/releases)
- [Changelog](https://github.com/googleapis/js-genai/blob/main/CHANGELOG.md)
- [Commits](googleapis/js-genai@v1.37.0...v1.40.0)

Updates `@modelcontextprotocol/sdk` from 1.25.2 to 1.26.0
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@v1.25.2...v1.26.0)

Updates `clipboardy` from 5.0.2 to 5.2.1
- [Release notes](https://github.com/sindresorhus/clipboardy/releases)
- [Commits](sindresorhus/clipboardy@v5.0.2...v5.2.1)

Updates `commander` from 14.0.2 to 14.0.3
- [Release notes](https://github.com/tj/commander.js/releases)
- [Changelog](https://github.com/tj/commander.js/blob/master/CHANGELOG.md)
- [Commits](tj/commander.js@v14.0.2...v14.0.3)

Updates `dotenv` from 17.2.3 to 17.2.4
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](https://github.com/motdotla/dotenv/commits)

Updates `inquirer` from 13.2.0 to 13.2.2
- [Release notes](https://github.com/SBoudrias/Inquirer.js/releases)
- [Commits](https://github.com/SBoudrias/Inquirer.js/compare/[email protected]@13.2.2)

Updates `openai` from 6.16.0 to 6.18.0
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/master/CHANGELOG.md)
- [Commits](openai/openai-node@v6.16.0...v6.18.0)

Updates `osc-progress` from 0.2.0 to 0.3.0
- [Release notes](https://github.com/steipete/osc-progress/releases)
- [Changelog](https://github.com/steipete/osc-progress/blob/main/CHANGELOG.md)
- [Commits](steipete/osc-progress@v0.2.0...v0.3.0)

Updates `shiki` from 3.21.0 to 3.22.0
- [Release notes](https://github.com/shikijs/shiki/releases)
- [Commits](https://github.com/shikijs/shiki/commits/v3.22.0/packages/shiki)

Updates `zod` from 4.3.5 to 4.3.6
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.3.5...v4.3.6)

Updates `@biomejs/biome` from 2.3.11 to 2.3.14
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/[email protected]/packages/@biomejs/biome)

Updates `@types/node` from 25.0.9 to 25.2.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@vitest/coverage-v8` from 4.0.17 to 4.0.18
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.18/packages/coverage-v8)

Updates `devtools-protocol` from 0.0.1568893 to 0.0.1580600
- [Commits](ChromeDevTools/devtools-protocol@v0.0.1568893...v0.0.1580600)

Updates `esbuild` from 0.27.2 to 0.27.3
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](evanw/esbuild@v0.27.2...v0.27.3)

Updates `puppeteer-core` from 24.35.0 to 24.37.2
- [Release notes](https://github.com/puppeteer/puppeteer/releases)
- [Changelog](https://github.com/puppeteer/puppeteer/blob/main/CHANGELOG.md)
- [Commits](puppeteer/puppeteer@puppeteer-core-v24.35.0...puppeteer-core-v24.37.2)

Updates `vitest` from 4.0.17 to 4.0.18
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.18/packages/vitest)

---
updated-dependencies:
- dependency-name: "@google/genai"
  dependency-version: 1.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: clipboardy
  dependency-version: 5.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: commander
  dependency-version: 14.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: dotenv
  dependency-version: 17.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: inquirer
  dependency-version: 13.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: openai
  dependency-version: 6.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: osc-progress
  dependency-version: 0.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: shiki
  dependency-version: 3.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: zod
  dependency-version: 4.3.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@biomejs/biome"
  dependency-version: 2.3.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@types/node"
  dependency-version: 25.2.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.0.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: devtools-protocol
  dependency-version: 0.0.1580600
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: esbuild
  dependency-version: 0.27.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: puppeteer-core
  dependency-version: 24.37.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: vitest
  dependency-version: 4.0.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Feb 6, 2026
@steipete
Copy link
Owner

steipete commented Feb 6, 2026

Closing: doing consolidated deps update; prefer one curated bump vs dependabot batch.

@steipete steipete closed this Feb 6, 2026
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 6, 2026

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot bot deleted the dependabot/npm_and_yarn/dependencies-42d2eeb5ed branch February 6, 2026 23:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant