Skip to content

feat(deps): bump the production-patch-minor group across 1 directory with 20 updates - #2762

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-patch-minor-6c974f9647
Open

feat(deps): bump the production-patch-minor group across 1 directory with 20 updates#2762
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-patch-minor-6c974f9647

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-patch-minor group with 20 updates in the / directory:

Package From To
dotenv 16.4.5 16.6.1
@next/env 14.2.3 14.2.35
@vercel/functions 1.0.2 1.6.0
acorn 8.16.0 8.19.0
cjs-module-lexer 2.2.0 2.3.0
cors 2.8.5 2.8.6
esbuild 0.28.1 0.28.2
express 5.2.1 5.3.0
minimatch 10.2.5 10.2.6
source-map 0.7.6 0.8.0
zod-to-json-schema 3.25.1 3.25.2
@braintrust/bt-darwin-arm64 0.12.0 0.29.0
@braintrust/bt-darwin-x64 0.12.0 0.29.0
@braintrust/bt-linux-arm64 0.12.0 0.29.0
@braintrust/bt-linux-x64 0.12.0 0.29.0
@braintrust/bt-linux-x64-musl 0.12.0 0.29.0
@braintrust/bt-win32-arm64 0.12.0 0.29.0
@braintrust/bt-win32-x64 0.12.0 0.29.0
@audio/encode-opus 1.3.1 1.3.2
@deepseek-ai/schemastery 3.18.2 3.19.0

Updates dotenv from 16.4.5 to 16.6.1

Changelog

Sourced from dotenv's changelog.

16.6.1 (2025-06-27)

Changed

  • Default quiet to true – hiding the runtime log message (#874)
  • NOTICE: 17.0.0 will be released with quiet defaulting to false. Use config({ quiet: true }) to suppress.
  • And check out the new dotenvx. As coding workflows evolve and agents increasingly handle secrets, encrypted .env files offer a much safer way to deploy both agents and code together with secure secrets. Simply switch require('dotenv').config() for require('@dotenvx/dotenvx').config().

16.6.0 (2025-06-26)

Added

  • Default log helpful message [dotenv@16.6.0] injecting env (1) from .env (#870)
  • Use { quiet: true } to suppress
  • Aligns dotenv more closely with dotenvx.

16.5.0 (2025-04-07)

Added

  • 🎉 Added new sponsor Graphite - the AI developer productivity platform helping teams on GitHub ship higher quality software, faster.

[!TIP] Become a sponsor

The dotenvx README is viewed thousands of times DAILY on GitHub and NPM. Sponsoring dotenv is a great way to get in front of developers and give back to the developer community at the same time.

Changed

  • Remove _log method. Use _debug #862

16.4.7 (2024-12-03)

Changed

  • Ignore .tap folder when publishing. (oops, sorry about that everyone. - @​motdotla) #848

16.4.6 (2024-12-02)

Changed

  • Clean up stale dev dependencies #847
  • Various README updates clarifying usage and alternative solutions using dotenvx
Commits

Updates @next/env from 14.2.3 to 14.2.35

Commits

Updates @vercel/functions from 1.0.2 to 1.6.0

Changelog

Sourced from @​vercel/functions's changelog.

1.6.0

Minor Changes

  • Add middleware-related helper functions (#12938)

1.5.2

Patch Changes

  • [vercel/functions] add geolocation.postalCode (#12753)

1.5.1

Patch Changes

  • [@​vercel/functions] update headers doc (#12649)

1.5.0

Minor Changes

  • ipAddress: accept headers as input (#12429)

1.4.2

Patch Changes

  • [functions] decode city name (#12234)

1.4.1

Patch Changes

  • Package files in the root folder (#11982)

1.4.0

Minor Changes

  • Added OIDC Token utility functions (#11701)

1.3.0

Minor Changes

  • [functions] add getEnv method. (#11783)

1.2.0

... (truncated)

Commits

Updates acorn from 8.16.0 to 8.19.0

Commits
  • 0e0ece7 Mark version 8.19.0
  • c912cf2 Disallow additional subscripts before arrow in async arrow functions
  • f180fd7 Add Unicode v18 support (#1458)
  • ab47d42 Update test case for unexpected identifier character (#1456)
  • f53ee5f Add a contributing.md file
  • 5bd50cd Compare expression end instead of identity in parseSubscripts
  • efd7a21 Delete trailing space
  • e79ec9e Adjust dubious handling of doubleProto tracking in parseMaybeAssign
  • 93e8b90 Upgrade some dependencies with known issues
  • f065b20 Upgrade github actions to get rid of warning
  • Additional commits viewable in compare view

Updates cjs-module-lexer from 2.2.0 to 2.3.0

Release notes

Sourced from cjs-module-lexer's releases.

2.3.0

What's Changed

New Contributors

Full Changelog: nodejs/cjs-module-lexer@2.2.1...2.3.0

2.2.1

What's Changed

New Contributors

Full Changelog: nodejs/cjs-module-lexer@2.2.0...2.2.1

Commits

Updates cors from 2.8.5 to 2.8.6

Release notes

Sourced from cors's releases.

v2.8.6

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from cors's changelog.

2.8.6 / 2026-01-22

  • Improve documentation (API, context, examples...)
  • Remove additional markdown files from tarball
Commits
Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for cors since your current version.


Updates esbuild from 0.28.1 to 0.28.2

Release notes

Sourced from esbuild's releases.

v0.28.2

  • Fix tree shaking bug due to TypeScript import alias (#4507)

    This release fixes a bug that could cause esbuild to incorrectly tree-shake imports that are used in a TypeScript type alias under certain circumstances. Affected code uses a TypeScript-specific import assignment and looks something like this:

    import Base from './dep.js';
import Alias = Base.SomeType;

  • Fix CSS minification bug involving & (#4497)

    This release fixes a bug where esbuild's CSS minifier incorrectly removed a & when it was unsafe to do so. Here is an example:

    /* Original code */
.a .b {
  & .b:not(& .c) {
    color: red;
  }
}
/* Old output (with --minify) */
.a .b{.b:not(& .c){color:red}}
/* New output (with --minify) */
.a .b{& .b:not(& .c){color:red}}

    This should match <span class="a"><span class="b"><span class="b">yes</span></span></span> but not <span class="a"><span class="b">no</span></span>. The old output incorrectly matched both.

  • Avoid overwriting input files without --allow-overwrite (#4484)

    For example: esbuild input.js --outfile=input.js tells esbuild to overwrite input.js with the output of running esbuild on it. This was supposed to already be prevented by default, but it accidentally regressed in version 0.17.0 and apparently didn't have any test coverage. The error message was being printed but the input file was still being overwritten. Oops.

    This release puts the original behavior back. With this release, esbuild should now actually avoid overwriting input files unless --allow-overwrite is explicitly present. This is done by not writing out any files when a build error is encountered.

  • Fix incorrect code generated when using top-level await (#4498)

    Previously esbuild could generate code containing a syntax error in complex scenarios involving top-level await used in a dependency cycle. The problem was a missing async on one or more module wrapper closures. With this release, esbuild now uses a fixed-point iteration algorithm to correctly annotate all dependencies in the cycle as needing an async module wrapper.

  • Fix a minification bug with lowered logical assignment operators (#4508)

    This release fixes a bug that could cause esbuild to generate incorrect code for logical assignment operators when lowering them to an older target environment. Specifically the lowering process requires duplicating the left-hand side, but esbuild incorrectly failed to count the duplicate as a new usage when the left-hand side is an identifier. That then caused the minifier to believe that the left-hand side was only used once and could attempt to incorrectly inline an initializer into the first usage. This bug has now been fixed:

    // Original code
function foo() {
  let x
  bar(x ||= {})

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.28.2

  • Fix tree shaking bug due to TypeScript import alias (#4507)

    This release fixes a bug that could cause esbuild to incorrectly tree-shake imports that are used in a TypeScript type alias under certain circumstances. Affected code uses a TypeScript-specific import assignment and looks something like this:

    import Base from './dep.js';
import Alias = Base.SomeType;

  • Fix CSS minification bug involving & (#4497)

    This release fixes a bug where esbuild's CSS minifier incorrectly removed a & when it was unsafe to do so. Here is an example:

    /* Original code */
.a .b {
  & .b:not(& .c) {
    color: red;
  }
}
/* Old output (with --minify) */
.a .b{.b:not(& .c){color:red}}
/* New output (with --minify) */
.a .b{& .b:not(& .c){color:red}}

    This should match <span class="a"><span class="b"><span class="b">yes</span></span></span> but not <span class="a"><span class="b">no</span></span>. The old output incorrectly matched both.

  • Avoid overwriting input files without --allow-overwrite (#4484)

    For example: esbuild input.js --outfile=input.js tells esbuild to overwrite input.js with the output of running esbuild on it. This was supposed to already be prevented by default, but it accidentally regressed in version 0.17.0 and apparently didn't have any test coverage. The error message was being printed but the input file was still being overwritten. Oops.

    This release puts the original behavior back. With this release, esbuild should now actually avoid overwriting input files unless --allow-overwrite is explicitly present. This is done by not writing out any files when a build error is encountered.

  • Fix incorrect code generated when using top-level await (#4498)

    Previously esbuild could generate code containing a syntax error in complex scenarios involving top-level await used in a dependency cycle. The problem was a missing async on one or more module wrapper closures. With this release, esbuild now uses a fixed-point iteration algorithm to correctly annotate all dependencies in the cycle as needing an async module wrapper.

  • Fix a minification bug with lowered logical assignment operators (#4508)

    This release fixes a bug that could cause esbuild to generate incorrect code for logical assignment operators when lowering them to an older target environment. Specifically the lowering process requires duplicating the left-hand side, but esbuild incorrectly failed to count the duplicate as a new usage when the left-hand side is an identifier. That then caused the minifier to believe that the left-hand side was only used once and could attempt to incorrectly inline an initializer into the first usage. This bug has now been fixed:

    // Original code
function foo() {
  let x

... (truncated)

Commits
  • 609683d publish 0.28.2 to npm
  • 11b1fe4 add to release notes
  • ab50d91 css: fix green/blue channel swap in oklch gamut mapping (#4488)
  • 04627b6 fix #4498: async TLA checks need a worklist
  • 5c15177 disable gopls in the go folder
  • fc2ee9b css: adjust parser to allow --foo: {...}
  • 209db54 release notes for css nesting bugfix
  • c625d31 fix #4497: preserve nested ampersands during minification (#4500)
  • 34474e2 better isolation of current part in js parser
  • 07f6e8c fix #4507: import assignment tree-shaking bug
  • Additional commits viewable in compare view

Updates express from 5.2.1 to 5.3.0

Release notes

Sourced from express's releases.

v5.3.0

Highlights

🐞 Bug fixes

  • Fixed HTTP header conflict between Content-Length and Transfer-Encoding in res.send - by @​YuryShkoda in #4893

    Fixed the behavior of res.send() to prevent conflicts between Content-Length and Transfer-Encoding HTTP headers in responses. The Content-Length header in res.send() is now only added when a Transfer-Encoding header is not present, complying with the HTTP specification that states both headers should not coexist in the same response. ETag generation is unaffected by the presence of a Transfer-Encoding header - by @​cuishuang in #7459

🚀 Improvements

  • Allow conditional revalidation for QUERY requests. req.fresh previously only validated freshness for GET and HEAD requests, so QUERY responses never returned 304 despite a matching validator. Since QUERY is a safe, idempotent, and cacheable method that supports conditional requests, it is now included in the freshness check - by @​Cherry in #7366

    // QUERY /reports with If-None-Match: "12345"
app.query('/reports', (req, res) => {
  res.set('ETag', '"12345"');
  res.send(results); // now responds 304 Not Modified
});

  • Improve HTML structure in res.redirect() responses when HTML format is accepted by adding <!DOCTYPE html>, <title>, and <body> tags for better browser compatibility - by @​Bernice55231 in #5167

  • When calling app.render with options set to null, the locals object is handled correctly, preventing unexpected errors and making the method behave the same as when options is omitted or an empty object is passed - by AkaHarshit in #6903

    app.render('index', null, callback); // now works as expected

  • Upgrade content-type to ^2.0.0, bringing a faster parser (~1.5x quicker Content-Type parsing/formatting in res.send()) along with a behavior change: res.send() now keeps any existing parameters when adding the charset and no longer throws on a Content-Type that fails to parse. type-is is upgraded to ^2.1.0 as part of the same change - by @​blakeembrey in #7234

    res.set('Content-Type', 'text/plain; foo=bar').send('hey');
// -> Content-Type: text/plain; foo=bar; charset=utf-8

  • The default error handler now logs the full error object instead of only its stack trace, so nested details such as Error.cause and library-specific properties (e.g. Sequelize's parent/original) are no longer swallowed - by @​Nitin-Mohapatra in #6464

  • Upgrade content-disposition to ^2.0.1, which changes the Content-Disposition header emitted by res.download(), res.attachment(), and res.sendFile(): file names that are valid HTTP tokens are no longer wrapped in quotes. This is equivalent per RFC 6266, but applications asserting on the exact header bytes should update their expectations - by @​blakeembrey in #7233

    res.attachment('user.html');
// before -> Content-Disposition: attachment; filename="user.html"
// after  -> Content-Disposition: attachment; filename=user.html

... (truncated)

Changelog

Sourced from express's changelog.

5.3.0

🐞 Bug fixes

  • Fixed HTTP header conflict between Content-Length and Transfer-Encoding in res.send - by @​YuryShkoda in #4893

    Fixed the behavior of res.send() to prevent conflicts between Content-Length and Transfer-Encoding HTTP headers in responses. The Content-Length header in res.send() is now only added when a Transfer-Encoding header is not present, complying with the HTTP specification that states both headers should not coexist in the same response. ETag generation is unaffected by the presence of a Transfer-Encoding header - by @​cuishuang in #7459

🚀 Improvements

  • Allow conditional revalidation for QUERY requests. req.fresh previously only validated freshness for GET and HEAD requests, so QUERY responses never returned 304 despite a matching validator. Since QUERY is a safe, idempotent, and cacheable method that supports conditional requests, it is now included in the freshness check - by @​Cherry in #7366

    // QUERY /reports with If-None-Match: "12345"
app.query('/reports', (req, res) => {
  res.set('ETag', '"12345"');
  res.send(results); // now responds 304 Not Modified
});

  • Improve HTML structure in res.redirect() responses when HTML format is accepted by adding <!DOCTYPE html>, <title>, and <body> tags for better browser compatibility - by @​Bernice55231 in #5167

  • When calling app.render with options set to null, the locals object is handled correctly, preventing unexpected errors and making the method behave the same as when options is omitted or an empty object is passed - by AkaHarshit in #6903

    app.render('index', null, callback); // now works as expected

  • Upgrade content-type to ^2.0.0, bringing a faster parser (~1.5x quicker Content-Type parsing/formatting in res.send()) along with a behavior change: res.send() now keeps any existing parameters when adding the charset and no longer throws on a Content-Type that fails to parse. type-is is upgraded to ^2.1.0 as part of the same change - by @​blakeembrey in #7234

    res.set('Content-Type', 'text/plain; foo=bar').send('hey');
// -> Content-Type: text/plain; foo=bar; charset=utf-8

  • The default error handler now logs the full error object instead of only its stack trace, so nested details such as Error.cause and library-specific properties (e.g. Sequelize's parent/original) are no longer swallowed - by @​Nitin-Mohapatra in #6464

  • Upgrade content-disposition to ^2.0.1, which changes the Content-Disposition header emitted by res.download(), res.attachment(), and res.sendFile(): file names that are valid HTTP tokens are no longer wrapped in quotes. This is equivalent per RFC 6266, but applications asserting on the exact header bytes should update their expectations - by @​blakeembrey in #7233

    res.attachment('user.html');
// before -> Content-Disposition: attachment; filename="user.html"
// after  -> Content-Disposition: attachment; filename=user.html

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for express since your current version.


Updates minimatch from 10.2.5 to 10.2.6

Commits

Updates source-map from 0.7.6 to 0.8.0

Changelog

Sourced from source-map's changelog.

0.8.0

Commits
Maintainer changes

This version was pushed to npm by hmanilla, a new releaser for source-map since your current version.


Updates zod-to-json-schema from 3.25.1 to 3.25.2

Changelog

Sourced from zod-to-json-schema's changelog.

Changelog

Version Change
3.25.2 Bumps the peer dependency of Zod 3 to 3.25.28 - Versions before patch 13 caused OOM issues and versions between that and 28 removed the /v3 import alias.
3.25.1 Fixes large install size due to accidental inclusion of test files. Thanks, Felix Mosheev!
3.25.0 Adds support for v3.25 and v3 through v4 (import { z } from "zod/v3"). Big thank you to both Andrey Gubanovs and especially to Faïz Hernawan Abdillah, whose more minimal implementation was merged. This will likely be the final release of zod-to-json-schema, as v4 now supports JSON schema natively.
3.24.6 Removed use of instanceOf to check for optional properties as differing package versions could produce intermittent bugs. Added OpenAiAnyType to work around their schema restrictions.
3.24.5 Update .npmignore to drop 2 mb of test files. Thanks Misha Kaletsky!
3.24.4 Added options to set the value of additionalProperties in objects and record
3.24.3 Adds postProcess callback option
3.24.2 Restructured internals to remove circular dependencies which apparently might cause some build systems to whine a bit. Big thanks to Víctor Hernández for the fix.
3.24.1 Adds OpenAI target
3.24.0 Implements new string checks (jwt, base64url, cidr ipv4/v6), matching the new Zod version
3.23.5 Module import hotfix by Enzo Monjardín. Thanks!
3.23.4 Fixes branded regex property names and a weird edgecase in arrays. Thanks to Isaiah Marc Sanchez and Mitchell Merry!
3.23.3 More tests (Thanks Brett Zamir!), removed dead code
3.23.2 Lazily loads Emoji regex to avoid incompatibility with some environments. Thanks Jacob Lee!
3.23.1 Best-effort RegEx flag support by Spappz! Some minor fixes and additions, such as the title option.
3.23.0 Adds support for base64, date, time, duration and nanoid string validations. A ...

Description has been truncated

@dependabot
feat(deps): bump the production-patch-minor group across 1 directory …
78fe68b 
…with 20 updates

Bumps the production-patch-minor group with 20 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [dotenv](https://github.com/motdotla/dotenv) | `16.4.5` | `16.6.1` |
| [@next/env](https://github.com/vercel/next.js/tree/HEAD/packages/next-env) | `14.2.3` | `14.2.35` |
| [@vercel/functions](https://github.com/vercel/vercel/tree/HEAD/packages/functions) | `1.0.2` | `1.6.0` |
| [acorn](https://github.com/acornjs/acorn) | `8.16.0` | `8.19.0` |
| [cjs-module-lexer](https://github.com/nodejs/cjs-module-lexer) | `2.2.0` | `2.3.0` |
| [cors](https://github.com/expressjs/cors) | `2.8.5` | `2.8.6` |
| [esbuild](https://github.com/evanw/esbuild) | `0.28.1` | `0.28.2` |
| [express](https://github.com/expressjs/express) | `5.2.1` | `5.3.0` |
| [minimatch](https://github.com/isaacs/minimatch) | `10.2.5` | `10.2.6` |
| [source-map](https://github.com/mozilla/source-map) | `0.7.6` | `0.8.0` |
| [zod-to-json-schema](https://github.com/StefanTerdell/zod-to-json-schema) | `3.25.1` | `3.25.2` |
| [@braintrust/bt-darwin-arm64](https://github.com/braintrustdata/bt) | `0.12.0` | `0.29.0` |
| [@braintrust/bt-darwin-x64](https://github.com/braintrustdata/bt) | `0.12.0` | `0.29.0` |
| [@braintrust/bt-linux-arm64](https://github.com/braintrustdata/bt) | `0.12.0` | `0.29.0` |
| [@braintrust/bt-linux-x64](https://github.com/braintrustdata/bt) | `0.12.0` | `0.29.0` |
| [@braintrust/bt-linux-x64-musl](https://github.com/braintrustdata/bt) | `0.12.0` | `0.29.0` |
| [@braintrust/bt-win32-arm64](https://github.com/braintrustdata/bt) | `0.12.0` | `0.29.0` |
| [@braintrust/bt-win32-x64](https://github.com/braintrustdata/bt) | `0.12.0` | `0.29.0` |
| [@audio/encode-opus](https://github.com/audiojs/encode/tree/HEAD/packages/encode-opus) | `1.3.1` | `1.3.2` |
| [@deepseek-ai/schemastery](https://github.com/deepseek-ai/deepseek-harness/tree/HEAD/vendor/schemastery) | `3.18.2` | `3.19.0` |



Updates `dotenv` from 16.4.5 to 16.6.1
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v16.4.5...v16.6.1)

Updates `@next/env` from 14.2.3 to 14.2.35
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](https://github.com/vercel/next.js/commits/v14.2.35/packages/next-env)

Updates `@vercel/functions` from 1.0.2 to 1.6.0
- [Release notes](https://github.com/vercel/vercel/releases)
- [Changelog](https://github.com/vercel/vercel/blob/main/packages/functions/CHANGELOG.md)
- [Commits](https://github.com/vercel/vercel/commits/@vercel/functions@1.6.0/packages/functions)

Updates `acorn` from 8.16.0 to 8.19.0
- [Commits](acornjs/acorn@8.16.0...8.19.0)

Updates `cjs-module-lexer` from 2.2.0 to 2.3.0
- [Release notes](https://github.com/nodejs/cjs-module-lexer/releases)
- [Changelog](https://github.com/nodejs/cjs-module-lexer/blob/main/CHANGELOG.md)
- [Commits](nodejs/cjs-module-lexer@2.2.0...2.3.0)

Updates `cors` from 2.8.5 to 2.8.6
- [Release notes](https://github.com/expressjs/cors/releases)
- [Changelog](https://github.com/expressjs/cors/blob/master/HISTORY.md)
- [Commits](expressjs/cors@v2.8.5...v2.8.6)

Updates `esbuild` from 0.28.1 to 0.28.2
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](evanw/esbuild@v0.28.1...v0.28.2)

Updates `express` from 5.2.1 to 5.3.0
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](expressjs/express@v5.2.1...v5.3.0)

Updates `minimatch` from 10.2.5 to 10.2.6
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v10.2.5...v10.2.6)

Updates `source-map` from 0.7.6 to 0.8.0
- [Release notes](https://github.com/mozilla/source-map/releases)
- [Changelog](https://github.com/mozilla/source-map/blob/master/CHANGELOG.md)
- [Commits](mozilla/source-map@0.7.6...v0.8.0)

Updates `zod-to-json-schema` from 3.25.1 to 3.25.2
- [Release notes](https://github.com/StefanTerdell/zod-to-json-schema/releases)
- [Changelog](https://github.com/StefanTerdell/zod-to-json-schema/blob/master/changelog.md)
- [Commits](https://github.com/StefanTerdell/zod-to-json-schema/commits)

Updates `@braintrust/bt-darwin-arm64` from 0.12.0 to 0.29.0
- [Release notes](https://github.com/braintrustdata/bt/releases)
- [Commits](braintrustdata/bt@v0.12.0...v0.29.0)

Updates `@braintrust/bt-darwin-x64` from 0.12.0 to 0.29.0
- [Release notes](https://github.com/braintrustdata/bt/releases)
- [Commits](braintrustdata/bt@v0.12.0...v0.29.0)

Updates `@braintrust/bt-linux-arm64` from 0.12.0 to 0.29.0
- [Release notes](https://github.com/braintrustdata/bt/releases)
- [Commits](braintrustdata/bt@v0.12.0...v0.29.0)

Updates `@braintrust/bt-linux-x64` from 0.12.0 to 0.29.0
- [Release notes](https://github.com/braintrustdata/bt/releases)
- [Commits](braintrustdata/bt@v0.12.0...v0.29.0)

Updates `@braintrust/bt-linux-x64-musl` from 0.12.0 to 0.29.0
- [Release notes](https://github.com/braintrustdata/bt/releases)
- [Commits](braintrustdata/bt@v0.12.0...v0.29.0)

Updates `@braintrust/bt-win32-arm64` from 0.12.0 to 0.29.0
- [Release notes](https://github.com/braintrustdata/bt/releases)
- [Commits](braintrustdata/bt@v0.12.0...v0.29.0)

Updates `@braintrust/bt-win32-x64` from 0.12.0 to 0.29.0
- [Release notes](https://github.com/braintrustdata/bt/releases)
- [Commits](braintrustdata/bt@v0.12.0...v0.29.0)

Updates `@audio/encode-opus` from 1.3.1 to 1.3.2
- [Release notes](https://github.com/audiojs/encode/releases)
- [Commits](https://github.com/audiojs/encode/commits/HEAD/packages/encode-opus)

Updates `@deepseek-ai/schemastery` from 3.18.2 to 3.19.0
- [Release notes](https://github.com/deepseek-ai/deepseek-harness/releases)
- [Commits](https://github.com/deepseek-ai/deepseek-harness/commits/HEAD/vendor/schemastery)

---
updated-dependencies:
- dependency-name: dotenv
  dependency-version: 16.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-patch-minor
- dependency-name: "@next/env"
  dependency-version: 14.2.35
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-patch-minor
- dependency-name: "@vercel/functions"
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-patch-minor
- dependency-name: acorn
  dependency-version: 8.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-patch-minor
- dependency-name: cjs-module-lexer
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-patch-minor
- dependency-name: cors
  dependency-version: 2.8.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-patch-minor
- dependency-name: esbuild
  dependency-version: 0.28.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-patch-minor
- dependency-name: express
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-patch-minor
- dependency-name: minimatch
  dependency-version: 10.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-patch-minor
- dependency-name: source-map
  dependency-version: 0.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-patch-minor
- dependency-name: zod-to-json-schema
  dependency-version: 3.25.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-patch-minor
- dependency-name: "@braintrust/bt-darwin-arm64"
  dependency-version: 0.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-patch-minor
- dependency-name: "@braintrust/bt-darwin-x64"
  dependency-version: 0.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-patch-minor
- dependency-name: "@braintrust/bt-linux-arm64"
  dependency-version: 0.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-patch-minor
- dependency-name: "@braintrust/bt-linux-x64"
  dependency-version: 0.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-patch-minor
- dependency-name: "@braintrust/bt-linux-x64-musl"
  dependency-version: 0.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-patch-minor
- dependency-name: "@braintrust/bt-win32-arm64"
  dependency-version: 0.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-patch-minor
- dependency-name: "@braintrust/bt-win32-x64"
  dependency-version: 0.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-patch-minor
- dependency-name: "@audio/encode-opus"
  dependency-version: 1.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-patch-minor
- dependency-name: "@deepseek-ai/schemastery"
  dependency-version: 3.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-patch-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 9, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants