chore(deps): bump the npm-minor-and-patch group with 21 updates - #2152
Merged
zfy0701 merged 3 commits intoSep 18, 2026
Merged
Conversation
Bumps the npm-minor-and-patch group with 21 updates: | Package | From | To | | --- | --- | --- | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.13.3` | `24.13.4` | | [lint-staged](https://github.com/lint-staged/lint-staged) | `17.5.0` | `17.5.1` | | [promptfoo](https://github.com/promptfoo/promptfoo) | `0.122.2` | `0.123.0` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.0` | `5.0.1` | | [yaml](https://github.com/eemeli/yaml) | `2.9.0` | `2.9.1` | | [fastify](https://github.com/fastify/fastify) | `5.12.3` | `5.12.4` | | [lucide](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide) | `1.43.0` | `1.46.0` | | [zod](https://github.com/colinhacks/zod) | `4.6.1` | `4.6.5` | | [@anthropic-ai/sandbox-runtime](https://github.com/anthropics/sandbox-runtime) | `0.0.75` | `0.0.76` | | [@larksuiteoapi/node-sdk](https://github.com/larksuite/node-sdk) | `1.73.3` | `1.74.0` | | [microsandbox](https://github.com/superradcompany/microsandbox/tree/HEAD/sdk/node-ts) | `0.6.17` | `0.6.18` | | [@iconify-icons/logos](https://github.com/iconify/icon-sets) | `2.0.0` | `2.0.1` | | [@logto/browser](https://github.com/logto-io/js/tree/HEAD/packages/browser) | `3.0.13` | `3.0.14` | | [cronstrue](https://github.com/bradymholt/cRonstrue) | `3.24.0` | `3.26.0` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.43.0` | `1.46.0` | | [next](https://github.com/vercel/next.js) | `16.3.4` | `16.3.5` | | [posthog-js](https://github.com/PostHog/posthog-js) | `1.429.1` | `1.433.4` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.0` | | [happy-dom](https://github.com/capricorn86/happy-dom) | `20.14.3` | `20.14.5` | Updates `@types/node` from 24.13.3 to 24.13.4 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `lint-staged` from 17.5.0 to 17.5.1 - [Release notes](https://github.com/lint-staged/lint-staged/releases) - [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md) - [Commits](lint-staged/lint-staged@v17.5.0...v17.5.1) Updates `promptfoo` from 0.122.2 to 0.123.0 - [Release notes](https://github.com/promptfoo/promptfoo/releases) - [Changelog](https://github.com/promptfoo/promptfoo/blob/main/CHANGELOG.md) - [Commits](promptfoo/promptfoo@0.122.2...0.123.0) Updates `vitest` from 5.0.0 to 5.0.1 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.1/packages/vitest) Updates `yaml` from 2.9.0 to 2.9.1 - [Release notes](https://github.com/eemeli/yaml/releases) - [Commits](eemeli/yaml@v2.9.0...v2.9.1) Updates `fastify` from 5.12.3 to 5.12.4 - [Release notes](https://github.com/fastify/fastify/releases) - [Commits](https://github.com/fastify/fastify/commits/v5.12.4) Updates `lucide` from 1.43.0 to 1.46.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.46.0/packages/lucide) Updates `zod` from 4.6.1 to 4.6.5 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.6.1...v4.6.5) Updates `@anthropic-ai/sandbox-runtime` from 0.0.75 to 0.0.76 - [Release notes](https://github.com/anthropics/sandbox-runtime/releases) - [Commits](anthropics/sandbox-runtime@v0.0.75...v0.0.76) Updates `@larksuiteoapi/node-sdk` from 1.73.3 to 1.74.0 - [Commits](https://github.com/larksuite/node-sdk/commits) Updates `microsandbox` from 0.6.17 to 0.6.18 - [Release notes](https://github.com/superradcompany/microsandbox/releases) - [Commits](https://github.com/superradcompany/microsandbox/commits/v0.6.18/sdk/node-ts) Updates `@iconify-icons/logos` from 2.0.0 to 2.0.1 - [Commits](iconify/icon-sets@2.0.0...2.0.1) Updates `@logto/browser` from 3.0.13 to 3.0.14 - [Release notes](https://github.com/logto-io/js/releases) - [Changelog](https://github.com/logto-io/js/blob/master/packages/browser/CHANGELOG.md) - [Commits](https://github.com/logto-io/js/commits/@logto/react@3.0.14/packages/browser) Updates `cronstrue` from 3.24.0 to 3.26.0 - [Release notes](https://github.com/bradymholt/cRonstrue/releases) - [Changelog](https://github.com/bradymholt/cRonstrue/blob/main/CHANGELOG.md) - [Commits](bradymholt/cRonstrue@v3.24.0...v3.26.0) Updates `lucide-react` from 1.43.0 to 1.46.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.46.0/packages/lucide-react) Updates `next` from 16.3.4 to 16.3.5 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.3.4...v16.3.5) Updates `posthog-js` from 1.429.1 to 1.433.4 - [Release notes](https://github.com/PostHog/posthog-js/releases) - [Changelog](https://github.com/PostHog/posthog-js/blob/main/CHANGELOG.md) - [Commits](https://github.com/PostHog/posthog-js/compare/posthog-js@1.429.1...posthog-js@1.433.4) Updates `react` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react) Updates `@types/react` from 19.2.18 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `react-dom` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom) Updates `@types/react` from 19.2.18 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `happy-dom` from 20.14.3 to 20.14.5 - [Release notes](https://github.com/capricorn86/happy-dom/releases) - [Commits](capricorn86/happy-dom@v20.14.3...v20.14.5) --- updated-dependencies: - dependency-name: "@types/node" dependency-version: 24.13.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: lint-staged dependency-version: 17.5.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: promptfoo dependency-version: 0.123.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: vitest dependency-version: 5.0.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: yaml dependency-version: 2.9.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: fastify dependency-version: 5.12.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: lucide dependency-version: 1.46.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: zod dependency-version: 4.6.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: "@anthropic-ai/sandbox-runtime" dependency-version: 0.0.76 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: "@larksuiteoapi/node-sdk" dependency-version: 1.74.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: microsandbox dependency-version: 0.6.18 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: "@iconify-icons/logos" dependency-version: 2.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: "@logto/browser" dependency-version: 3.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: cronstrue dependency-version: 3.26.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: lucide-react dependency-version: 1.46.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: next dependency-version: 16.3.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: posthog-js dependency-version: 1.433.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: react dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: react-dom dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: happy-dom dependency-version: 20.14.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
lucide-react 1.46 renamed `book-marked` to `book-bookmark` and `building-2` to `building-complex`. The old names survive only as deprecated top-level exports — the canonical `icons` map that `lucideIcon()` reads no longer carries them, so all 30 call sites resolved to `undefined` and rendered nothing at all, the same silent blanking `icon-names.test.ts` was written for after `trash-2`. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
The group bump raised the spec to ^24.13.4 while 24.13.5 was already published. Every importer that declares `@types/node` locked 24.13.4, while `message` and `activation-policy` — which declare none — had their vitest resolved against the newest, 24.13.5. The two vitest instances gave `scripts/vitest-github-reporters.js` and the configs consuming it structurally distinct `Reporter` types, so typecheck failed with TS2769. Matching the latest patch collapses the tree to one resolution. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
![agentconnect-md-test[bot]](https://avatars.githubusercontent.com/in/4157507?s=60&v=4){kind=small}
Contributor
There was a problem hiding this comment.
Reviewed 9d16450945baa3126f5ec592297f6266a29e495e against 7d000e1ec03f6575e724269fabea55f84e0faa9a. No blocking findings. The package manifests and lockfile consistently carry the dependency updates, and the Lucide call-site renames match the new icon keys while retaining the existing icon-resolution coverage. The full GitHub workflow passed, including install, lint/format/typecheck, build, Linux and Windows unit tests, integration tests, evaluation checks, sandbox tests, and the PostgreSQL daemon-store suite.
sent by review-bot (Codex · gpt-5.6-sol) · open in session
zfy0701
deleted the
dependabot/npm_and_yarn/npm-minor-and-patch-0bfda4b303
branch
September 18, 2026 15:10
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm-minor-and-patch group with 21 updates:
24.13.324.13.417.5.017.5.10.122.20.123.05.0.05.0.12.9.02.9.15.12.35.12.41.43.01.46.04.6.14.6.50.0.750.0.761.73.31.74.00.6.170.6.182.0.02.0.13.0.133.0.143.24.03.26.01.43.01.46.016.3.416.3.51.429.11.433.419.2.819.3.019.2.1819.3.019.2.819.3.020.14.320.14.5Updates
@types/nodefrom 24.13.3 to 24.13.4Commits
Updates
lint-stagedfrom 17.5.0 to 17.5.1Release notes
Sourced from lint-staged's releases.
Changelog
Sourced from lint-staged's changelog.
Commits
f8b1ab1Merge pull request #1853 from lint-staged/changeset-release/main3b54961chore(changeset): release09317ffMerge pull request #1852 from lint-staged/fix-ambient-declarationbfcca94fix: changedefineConfigsignature fromconstto afunctionUpdates
promptfoofrom 0.122.2 to 0.123.0Release notes
Sourced from promptfoo's releases.
... (truncated)
Changelog
Sourced from promptfoo's changelog.
... (truncated)
Commits
3ec9740chore(main): release 0.123.0 (#10532)01f9e87fix(redteam): standardize target response attribution (#10862)3113c6ffix(providers): preserve WatsonX caller cancellation (#10861)bf09397fix(cli): remove retired GitHub example downloads (#10876)514769echore(deps): update node.js to v24.21.0 (#10867)607c820fix(providers): update OpenAI models and defaults (#10865)7e4e706fix(providers): prevent duplicate Realtime prompts and correct transcription ...87f40dcdocs(site): correct gateway starter requests (#10851)b67f9e0fix(providers): finish the GitHub Models retirement (#10849)38727b0docs(blog): fix retired Claude model IDs in runnable configs (#10853)Updates
vitestfrom 5.0.0 to 5.0.1Release notes
Sourced from vitest's releases.
Commits
03630a5chore: release v5.0.1 (#11275)a47d790fix(fakeTimers): forcequeueMicrotaskandnextTickintoNotFake(#11261)2ce29d5fix: warn when deprecateddeps.optimizer.webis used (#11214)ccd6d05docs: fix typecheck exclude default in documentation (#11223)91ab158fix(doctor): measure vm pools for custom environments (#11212)23dda73fix: share the server on self-referencingextends(#11034)498fbe9fix: resolve ResolvedConfig exactOptionalPropertyTypes errors (#11175)115c3f6fix: correct typos in error message and comments (#11187)7361465fix: keep metadata file when clearing the cache (#11199)972e24bfix(browser): avoid double quotes inconfig.define(#11198)Updates
yamlfrom 2.9.0 to 2.9.1Release notes
Sourced from yaml's releases.
Commits
1440ecd2.9.1c699bc5fix: Simplify line unfolding during quoted string parsing (#714)d11ce77fix: Limit recursive merge aliases (#713)c5f49f4chore: Update docs-slateUpdates
fastifyfrom 5.12.3 to 5.12.4Release notes
Sourced from fastify's releases.
Commits
Updates
lucidefrom 1.43.0 to 1.46.0Release notes
Sourced from lucide's releases.
... (truncated)
Commits
Updates
zodfrom 4.6.1 to 4.6.5Release notes
Sourced from zod's releases.
Commits
59bbc03chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump0f3f5ee4.6.5cc4cd4eRevert "Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, ref...ca0229aRevert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed w...56222cdfeat(instanceof): key the .properties() shape off the instance type (#6600)de65a5cdocs: lead the properties section with the check and add a Zod Mini tab (#6598)f1448f7docs: fold the 4.6.x patch highlights into the 4.6 post's own sectionsd2b135cdocs: add the 4.6.x patch highlights to the 4.6 post2bb0871chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump743aedb4.6.4Updates
@anthropic-ai/sandbox-runtimefrom 0.0.75 to 0.0.76Release notes
Sourced from @anthropic-ai/sandbox-runtime's releases.
Commits
c392e6cMerge pull request #528 from anthropics/release/v0.0.76dfb9589Release v0.0.76422c404Merge pull request #522 from anthropics/dcochran/resolved-ip-guardd7c4495refactor(network): order the refusal reason deterministically; small cleanups4e364cbfix(network): normalize a zoned IPv6 domain entry, and deny two more IPv6 met...37b4366fix(proxy): pin the TLS-terminate upstream cert check to the tunnel target3f162dffix(network): decode only the well-known NAT64 prefix, never the local-use /48d7bcdbbfix(network): a carried IPv4 form only adds denials, never earns an allow-lis...44575d5fix(network): decode the local-use NAT64 prefix only in its /96 layout; doc p...86b9912fix(proxy): spell an IPv4-mapped IPv6 destination as its IPv4 address before ...Updates
@larksuiteoapi/node-sdkfrom 1.73.3 to 1.74.0Commits
Updates
microsandboxfrom 0.6.17 to 0.6.18Commits
fa3e439chore: release v0.6.18 (#1543)439a88aMerge commit from fork96a821cchore: refresh npm lockfile after v0.6.17 (#1523)