Skip to content

Bump the npm group with 5 updates - #684

Merged
ilvalerione merged 1 commit into
4.xfrom
dependabot/npm_and_yarn/npm-2f17f73218
Oct 7, 2026
Merged

ilvalerione merged 1 commit into
4.xfrom
dependabot/npm_and_yarn/npm-2f17f73218

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 7, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm group with 5 updates:

Package From To
@ai-sdk/react 4.0.121 4.0.130
@copilotkit/react-core 1.74.0 1.76.0
@copilotkit/runtime 1.74.0 1.76.0
ai 7.0.118 7.0.127
vite 8.3.1 8.3.2

Updates @ai-sdk/react from 4.0.121 to 4.0.130

Changelog

Sourced from @​ai-sdk/react's changelog.

4.0.130

Patch Changes

  • 8f05086: fix(react): prevent streamed chat updates from starving navigation transitions
  • Updated dependencies [158a718]
  • Updated dependencies [bb8d33e]
  • Updated dependencies [3ff0f54]
  • Updated dependencies [284dc11]
  • Updated dependencies [ba8afe9]
    • ai@7.0.127
    • @​ai-sdk/mcp@​2.0.66

4.0.129

Patch Changes

  • Updated dependencies [4f3d236]
    • ai@7.0.126

4.0.128

Patch Changes

  • Updated dependencies [ff3dcef]
  • Updated dependencies [4d0500e]
    • ai@7.0.125
    • @​ai-sdk/mcp@​2.0.65

4.0.127

Patch Changes

  • Updated dependencies [8c65988]
  • Updated dependencies [527a163]
    • ai@7.0.124
    • @​ai-sdk/provider@​4.0.21
    • @​ai-sdk/provider-utils@​5.0.53
    • @​ai-sdk/mcp@​2.0.64

4.0.126

Patch Changes

  • 193d284: fix(react): deduplicate automatic stream resumption for shared Chat instances
  • ede5b89: chore: migrate package builds from tsup to tsdown
  • Updated dependencies [05cdac6]
  • Updated dependencies [4514fc1]
  • Updated dependencies [ede5b89]
  • Updated dependencies [2a625cf]

... (truncated)

Commits

Updates @copilotkit/react-core from 1.74.0 to 1.76.0

Release notes

Sourced from @​copilotkit/react-core's releases.

v1.76.0

Features

  • feat: AG-UI 1.0 for CopilotKit (#7270) (7693a04)

Fixes

  • fix(runtime): stop reusing per-response provider ids as message ids (#7522) (5832fff)
  • fix(web-inspector): fit and scale the Inspector on small screens (#7529) (5135c56)
  • fix(runtime): prefix MCP tools whose names collide instead of dropping them (#7495) (c7c4538)

v1.75.2

Fixes

  • fix(react-core): use new run IDs for standard interrupt resumes (#7001) (081e745)
  • fix(vue): stop cloning run state six times per row for message slots (#7525) (bd39b04)

v1.75.1

Features

  • feat(angular)!: render A2UI without Lit and support web component cat… (#7504) (b3d1aad)

Fixes

  • fix(core): distinguish Intelligence replay errors from live failures (#7353) (278a78d)
  • fix(mcp-apps-renderer): follow the host page's dark theme (#7467) (2476de1)
  • fix(runtime): forward imported backend thread identity (#7489) (5fd09ab)
  • fix: PE-440 onboarding docs gaps; un-deprecate sdk-js/langgraph (#7518) (7a7a500)
  • fix(react-core): compare purity-scan entry keys with forward slashes (#7445) (a1fbc07)

Breaking Changes

  • feat(angular)!: render A2UI without Lit and support web component cat… (#7504) (b3d1aad)

v1.75.0

Features

  • feat(react-core): add transformMessages to CopilotChatMessageView (#7488) (eb460b3)

Fixes

  • fix(core): keep the reconnect cursor when a control frame repeats an old checkpoint (#7490) (d3c36bb)
  • fix(runtime): enforce basePath segment boundary in single-route mode (#7341) (15437bb)

Upgrade notes

  • @copilotkit/react-core now requires @tanstack/react-virtual ^3.14.13 (#7488). A 3.13.x entry already in your lockfile satisfied the old ^3.13.0 range and keeps a one-frame scroll twitch in long chats. If your lockfile has an older version, update it (e.g. pnpm update @tanstack/react-virtual).
Changelog

Sourced from @​copilotkit/react-core's changelog.

1.76.0 - 2026-09-30

Features

  • feat: AG-UI 1.0 for CopilotKit (#7270) (7693a04)

Fixes

  • fix(runtime): stop reusing per-response provider ids as message ids (#7522) (5832fff)
  • fix(web-inspector): fit and scale the Inspector on small screens (#7529) (5135c56)
  • fix(runtime): prefix MCP tools whose names collide instead of dropping them (#7495) (c7c4538)

1.75.2 - 2026-09-30

Fixes

  • fix(react-core): use new run IDs for standard interrupt resumes (#7001) (081e745)
  • fix(vue): stop cloning run state six times per row for message slots (#7525) (bd39b04)

1.75.1 - 2026-09-29

Features

  • feat(angular)!: render A2UI without Lit and support web component cat… (#7504) (b3d1aad)

Fixes

  • fix(core): distinguish Intelligence replay errors from live failures (#7353) (278a78d)
  • fix(mcp-apps-renderer): follow the host page's dark theme (#7467) (2476de1)
  • fix(runtime): forward imported backend thread identity (#7489) (5fd09ab)
  • fix: PE-440 onboarding docs gaps; un-deprecate sdk-js/langgraph (#7518) (7a7a500)
  • fix(react-core): compare purity-scan entry keys with forward slashes (#7445) (a1fbc07)

Breaking Changes

  • feat(angular)!: render A2UI without Lit and support web component cat… (#7504) (b3d1aad)

1.75.0 - 2026-09-28

Features

  • feat(react-core): add transformMessages to CopilotChatMessageView (#7488) (eb460b3)

Fixes

  • fix(core): keep the reconnect cursor when a control frame repeats an old checkpoint (#7490) (d3c36bb)
  • fix(runtime): enforce basePath segment boundary in single-route mode (#7341) (15437bb)

Upgrade notes

... (truncated)

Commits
  • 50e71df chore: release monorepo v1.76.0 (#7547)
  • 7fd2407 fix(showcase): restore bounded PocketBase result capacity (#7549)
  • 46c4530 Merge branch 'main' into contextablemark/restart-pocketbase-capacity
  • 8324c3e fix(showcase): restore atomic PocketBase observation persistence (#7548)
  • 419580e fix(showcase): connect selected results to atomic PocketBase persistence (#7550)
  • d3fe3bc fix(showcase): use atomic persistence for selected fleet observations
  • f58c1fe test(showcase): remove PocketBase capacity harness machinery
  • b81025f test(showcase): simplify PocketBase observation regressions
  • 9994aef test(showcase): make evidence cleanup faults independent of runner privileges
  • 9e512bf docs(showcase): clarify local capacity test Docker contexts
  • Additional commits viewable in compare view

Updates @copilotkit/runtime from 1.74.0 to 1.76.0

Release notes

Sourced from @​copilotkit/runtime's releases.

v1.76.0

Features

  • feat: AG-UI 1.0 for CopilotKit (#7270) (7693a04)

Fixes

  • fix(runtime): stop reusing per-response provider ids as message ids (#7522) (5832fff)
  • fix(web-inspector): fit and scale the Inspector on small screens (#7529) (5135c56)
  • fix(runtime): prefix MCP tools whose names collide instead of dropping them (#7495) (c7c4538)

v1.75.2

Fixes

  • fix(react-core): use new run IDs for standard interrupt resumes (#7001) (081e745)
  • fix(vue): stop cloning run state six times per row for message slots (#7525) (bd39b04)

v1.75.1

Features

  • feat(angular)!: render A2UI without Lit and support web component cat… (#7504) (b3d1aad)

Fixes

  • fix(core): distinguish Intelligence replay errors from live failures (#7353) (278a78d)
  • fix(mcp-apps-renderer): follow the host page's dark theme (#7467) (2476de1)
  • fix(runtime): forward imported backend thread identity (#7489) (5fd09ab)
  • fix: PE-440 onboarding docs gaps; un-deprecate sdk-js/langgraph (#7518) (7a7a500)
  • fix(react-core): compare purity-scan entry keys with forward slashes (#7445) (a1fbc07)

Breaking Changes

  • feat(angular)!: render A2UI without Lit and support web component cat… (#7504) (b3d1aad)

v1.75.0

Features

  • feat(react-core): add transformMessages to CopilotChatMessageView (#7488) (eb460b3)

Fixes

  • fix(core): keep the reconnect cursor when a control frame repeats an old checkpoint (#7490) (d3c36bb)
  • fix(runtime): enforce basePath segment boundary in single-route mode (#7341) (15437bb)

Upgrade notes

  • @copilotkit/react-core now requires @tanstack/react-virtual ^3.14.13 (#7488). A 3.13.x entry already in your lockfile satisfied the old ^3.13.0 range and keeps a one-frame scroll twitch in long chats. If your lockfile has an older version, update it (e.g. pnpm update @tanstack/react-virtual).
Changelog

Sourced from @​copilotkit/runtime's changelog.

1.76.0 - 2026-09-30

Features

  • feat: AG-UI 1.0 for CopilotKit (#7270) (7693a04)

Fixes

  • fix(runtime): stop reusing per-response provider ids as message ids (#7522) (5832fff)
  • fix(web-inspector): fit and scale the Inspector on small screens (#7529) (5135c56)
  • fix(runtime): prefix MCP tools whose names collide instead of dropping them (#7495) (c7c4538)

1.75.2 - 2026-09-30

Fixes

  • fix(react-core): use new run IDs for standard interrupt resumes (#7001) (081e745)
  • fix(vue): stop cloning run state six times per row for message slots (#7525) (bd39b04)

1.75.1 - 2026-09-29

Features

  • feat(angular)!: render A2UI without Lit and support web component cat… (#7504) (b3d1aad)

Fixes

  • fix(core): distinguish Intelligence replay errors from live failures (#7353) (278a78d)
  • fix(mcp-apps-renderer): follow the host page's dark theme (#7467) (2476de1)
  • fix(runtime): forward imported backend thread identity (#7489) (5fd09ab)
  • fix: PE-440 onboarding docs gaps; un-deprecate sdk-js/langgraph (#7518) (7a7a500)
  • fix(react-core): compare purity-scan entry keys with forward slashes (#7445) (a1fbc07)

Breaking Changes

  • feat(angular)!: render A2UI without Lit and support web component cat… (#7504) (b3d1aad)

1.75.0 - 2026-09-28

Features

  • feat(react-core): add transformMessages to CopilotChatMessageView (#7488) (eb460b3)

Fixes

  • fix(core): keep the reconnect cursor when a control frame repeats an old checkpoint (#7490) (d3c36bb)
  • fix(runtime): enforce basePath segment boundary in single-route mode (#7341) (15437bb)

Upgrade notes

... (truncated)

Commits
  • 50e71df chore: release monorepo v1.76.0 (#7547)
  • 7fd2407 fix(showcase): restore bounded PocketBase result capacity (#7549)
  • 46c4530 Merge branch 'main' into contextablemark/restart-pocketbase-capacity
  • 8324c3e fix(showcase): restore atomic PocketBase observation persistence (#7548)
  • 419580e fix(showcase): connect selected results to atomic PocketBase persistence (#7550)
  • d3fe3bc fix(showcase): use atomic persistence for selected fleet observations
  • f58c1fe test(showcase): remove PocketBase capacity harness machinery
  • b81025f test(showcase): simplify PocketBase observation regressions
  • 9994aef test(showcase): make evidence cleanup faults independent of runner privileges
  • 9e512bf docs(showcase): clarify local capacity test Docker contexts
  • Additional commits viewable in compare view

Updates ai from 7.0.118 to 7.0.127

Changelog

Sourced from ai's changelog.

7.0.127

Patch Changes

  • 158a718: feat(ai): select and rank eligible deferred tools via 'search()' callback in tool search
  • bb8d33e: fix(ai): cancel merged UI message streams when the consumer disconnects
  • 284dc11: fix(ai): accept unchanged tool approval inputs created in another JavaScript realm
  • ba8afe9: feat(ai): add a configurable maxResults for number of tools returned in tool search
  • Updated dependencies [d1bb9e8]
    • @​ai-sdk/gateway@​4.0.103

7.0.126

Patch Changes

  • 4f3d236: fix: clear tool approvals when addToolOutput runs

7.0.125

Patch Changes

  • ff3dcef: feat(ai): add convertDataPart to agent UI stream helpers

7.0.124

Patch Changes

  • 8c65988: feat(ai): add telemetry to speech generation and transcription, including provider usage propagation and experimental streaming lifecycle callbacks
  • Updated dependencies [8c65988]
  • Updated dependencies [e25994e]
  • Updated dependencies [527a163]
  • Updated dependencies [e74afc5]
    • @​ai-sdk/provider@​4.0.21
    • @​ai-sdk/provider-utils@​5.0.53
    • @​ai-sdk/gateway@​4.0.102

7.0.123

Patch Changes

  • 05cdac6: fix(ai): keep idle UI message streams open with optional SSE heartbeats
  • 4514fc1: fix(ai): prune all tool content when retaining zero trailing messages
  • ede5b89: chore: migrate package builds from tsup to tsdown
  • 2a625cf: fix(ai): preserve partial reasoning tags when streamed text parts end
  • 50a26d5: fix(ai): ignore pending tool approvals superseded by user messages
  • Updated dependencies [040033b]
  • Updated dependencies [ede5b89]
    • @​ai-sdk/gateway@​4.0.101
    • @​ai-sdk/provider@​4.0.20

... (truncated)

Commits
  • eb77f09 Version Packages (#21908)
  • 284dc11 fix: accept structurally identical cross-realm tool approval inputs (#21810)
  • bb8d33e fix: propagate createUIMessageStream consumer cancellation to merged streams ...
  • 158a718 feat(ai): select and rank eligible deferred tools via 'search()' callback in ...
  • ba8afe9 feat(ai): add a configurable maxResults for number of tools returned in tool ...
  • 45e1fbc Version Packages (#21880)
  • ce87e49 Version Packages (#21868)
  • 4f3d236 fix: clear tool approvals when addToolOutput runs (#21879)
  • ff3dcef feat(ai): add convertDataPart to agent UI stream helpers (#21816)
  • eb93c81 Version Packages (#21822)
  • Additional commits viewable in compare view

Updates vite from 8.3.1 to 8.3.2

Release notes

Sourced from vite's releases.

v8.3.2

Bug Fixes

  • build: preload CSS correctly when renderBuiltUrl returns URLs with queries (#23611) (64e0a21)
  • bundled-dev: serve lazy chunk sourcemaps (#23026) (eb7aa9a)
  • bundled-dev: serve the rolldown runtime from the installed rolldown (#23568) (bc598a6)
  • deps: update all non-major dependencies (#23601) (9944fa6)
  • deps: update rolldown-related dependencies (#23602) (88c1741)
  • html: resolve percent-encoded srcset urls (#23609) (53f1ce7)
  • limit size of object and array printing via forwardConsole (#23565) (e64a587)
  • merge build.rolldownOptions.output.minify correctly (#23536) (bba3bb8)
  • optimize-deps: avoid "unsupported" warnings for browser:false mappings (#23590) (5e4b9ca)
  • optimizer: preserve excluded optional peer require fallbacks (#23600) (a2bd6fa)
  • pass queries to renderBuiltUrl (#23586) (744269e)
  • server: handle file watcher errors without crashing (#23503) (6894f5c)
  • server: release previous environments after initialization (#23499) (5a3a010)
  • ssr: encode whitespace in module runner sourceURL (#23513) (bbc8812)
  • worker: align worker urls in client and server when using terser (#23614) (24bd331)

Performance Improvements

  • avoid encoding intermediate source maps (#23461) (89574f6)
  • build: avoid quadratic link scan in the preload helper (#23510) (cf5c028)
  • only register time middleware when debug logging is enabled (#23621) (94d0080)

Documentation

  • fix dead og-image PNG links in vite6/vite7 changelog entries (#23594) (1929b4c)

Miscellaneous Chores

Code Refactoring

Tests

  • bundled-dev: accept a rolldown dev runtime with no helper imports (#23606) (634745d)
Changelog

Sourced from vite's changelog.

8.3.2 (2026-10-01)

Bug Fixes

  • build: preload CSS correctly when renderBuiltUrl returns URLs with queries (#23611) (64e0a21)
  • bundled-dev: serve lazy chunk sourcemaps (#23026) (eb7aa9a)
  • bundled-dev: serve the rolldown runtime from the installed rolldown (#23568) (bc598a6)
  • deps: update all non-major dependencies (#23601) (9944fa6)
  • deps: update rolldown-related dependencies (#23602) (88c1741)
  • html: resolve percent-encoded srcset urls (#23609) (53f1ce7)
  • limit size of object and array printing via forwardConsole (#23565) (e64a587)
  • merge build.rolldownOptions.output.minify correctly (#23536) (bba3bb8)
  • optimize-deps: avoid "unsupported" warnings for browser:false mappings (#23590) (5e4b9ca)
  • optimizer: preserve excluded optional peer require fallbacks (#23600) (a2bd6fa)
  • pass queries to renderBuiltUrl (#23586) (744269e)
  • server: handle file watcher errors without crashing (#23503) (6894f5c)
  • server: release previous environments after initialization (#23499) (5a3a010)
  • ssr: encode whitespace in module runner sourceURL (#23513) (bbc8812)
  • worker: align worker urls in client and server when using terser (#23614) (24bd331)

Performance Improvements

  • avoid encoding intermediate source maps (#23461) (89574f6)
  • build: avoid quadratic link scan in the preload helper (#23510) (cf5c028)
  • only register time middleware when debug logging is enabled (#23621) (94d0080)

Documentation

  • fix dead og-image PNG links in vite6/vite7 changelog entries (#23594) (1929b4c)

Miscellaneous Chores

Code Refactoring

Tests

  • bundled-dev: accept a rolldown dev runtime with no helper imports (#23606) (634745d)
Commits
  • 1003321 release: v8.3.2 (#23623)
  • 24bd331 fix(worker): align worker urls in client and server when using terser (#23614)
  • 94d0080 perf: only register time middleware when debug logging is enabled (#23621)
  • 89574f6 perf: avoid encoding intermediate source maps (#23461)
  • 5a3a010 fix(server): release previous environments after initialization (#23499)
  • 1929b4c docs: fix dead og-image PNG links in vite6/vite7 changelog entries (#23594)
  • 6894f5c fix(server): handle file watcher errors without crashing (#23503)
  • cf5c028 perf(build): avoid quadratic link scan in the preload helper (#23510)
  • bba3bb8 fix: merge build.rolldownOptions.output.minify correctly (#23536)
  • 5e4b9ca fix(optimize-deps): avoid "unsupported" warnings for browser:false mappings (...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [@ai-sdk/react](https://github.com/vercel/ai/tree/HEAD/packages/react) | `4.0.121` | `4.0.130` |
| [@copilotkit/react-core](https://github.com/CopilotKit/CopilotKit) | `1.74.0` | `1.76.0` |
| [@copilotkit/runtime](https://github.com/CopilotKit/CopilotKit) | `1.74.0` | `1.76.0` |
| [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `7.0.118` | `7.0.127` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.1` | `8.3.2` |


Updates `@ai-sdk/react` from 4.0.121 to 4.0.130
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/react@4.0.130/packages/react)

Updates `@copilotkit/react-core` from 1.74.0 to 1.76.0
- [Release notes](https://github.com/CopilotKit/CopilotKit/releases)
- [Changelog](https://github.com/CopilotKit/CopilotKit/blob/main/CHANGELOG.md)
- [Commits](CopilotKit/CopilotKit@v1.74.0...v1.76.0)

Updates `@copilotkit/runtime` from 1.74.0 to 1.76.0
- [Release notes](https://github.com/CopilotKit/CopilotKit/releases)
- [Changelog](https://github.com/CopilotKit/CopilotKit/blob/main/CHANGELOG.md)
- [Commits](CopilotKit/CopilotKit@v1.74.0...v1.76.0)

Updates `ai` from 7.0.118 to 7.0.127
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@7.0.127/packages/ai)

Updates `vite` from 8.3.1 to 8.3.2
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.3.2/packages/vite)

---
updated-dependencies:
- dependency-name: "@ai-sdk/react"
  dependency-version: 4.0.130
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@copilotkit/react-core"
  dependency-version: 1.76.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@copilotkit/runtime"
  dependency-version: 1.76.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: ai
  dependency-version: 7.0.127
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: vite
  dependency-version: 8.3.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 7, 2026
@ilvalerione
ilvalerione merged commit 61fc1c7 into 4.x Oct 7, 2026
13 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/npm-2f17f73218 branch October 7, 2026 12:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant