Skip to content

chore(widget)(deps): bump the dependencies group across 1 directory with 10 updates#71

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/apps/widget/dependencies-69b1d7d469
Open

chore(widget)(deps): bump the dependencies group across 1 directory with 10 updates#71
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/apps/widget/dependencies-69b1d7d469

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown

Bumps the dependencies group with 10 updates in the /apps/widget directory:

Package From To
@convex-dev/agent 0.1.16 0.6.4
@vapi-ai/web 2.5.2 2.6.1
convex 1.25.4 1.42.3
jotai 2.20.1 2.20.2
lucide-react 0.475.0 0.577.0
next 16.2.6 16.2.10
react 19.2.4 19.2.7
react-dom 19.2.4 19.2.7
react-hook-form 7.81.0 7.82.0
zod 3.25.67 3.25.76

Updates @convex-dev/agent from 0.1.16 to 0.6.4

Changelog

Sourced from @​convex-dev/agent's changelog.

0.6.4

  • Fix streaming UI message dedupe (#281)
  • chore(deltas): delete legacy TextStreamPart streaming path (#275)
  • fix(react): Fix O(n²) lag streaming long tool-input deltas (#190) (#270)
  • fix(mapping): preserve tool messages in multi-step history (#200) (#272)
  • fix: Stops a cleanup task from canceling itself (#285)

0.6.3

  • Update types for ctx args to be more compatible with convex 1.41

0.6.2

  • fix: persist final step when saveStreamDeltas.returnImmediately is true (#266)
  • fix: handle tool validation errors in stopWhen and willContinue (#241)

0.6.1

  • Fix bundled package

0.6.0

  • Tool approval support: needsApproval in createTool, agent.approveToolCall(), agent.denyToolCall()
  • Auto-deny unresolved tool approvals when a new generation starts
  • Fix unhandled rejection in DeltaStreamer on transaction teardown

Note on versioning: This release jumps from 0.3.2 to 0.6.0, skipping versions 0.4.0 and 0.5.0. This is intentional and aligns the @convex-dev/agent package version with the AI SDK v6 major version for clearer compatibility signaling. Going forward, the minor version of this package will track the AI SDK major version to make it easier for developers to identify which version of the AI SDK is supported.

  • Breaking: Requires AI SDK v6 and drops support for AI SDK v5. Projects pinned to v5 must upgrade their AI SDK dependencies before updating to this version.
  • Aligns this package's message and tool invocation types with the AI SDK v6 APIs to reduce casting/adapter code when integrating with the core SDK.
  • Updates internal helpers to use the AI SDK v6 request/response shapes and error handling semantics.
  • Migration from 0.3.x:
    • Update your AI SDK dependency to v6 in package.json and reinstall dependencies.
    • Rebuild and run your type checker to surface any call sites that depend on the old AI SDK v5 types or message shapes.
    • Review any custom integrations that relied on deprecated v5-only helpers and update them to the new AI SDK v6-compatible APIs.
    • See Vercel's v6 migration guide

... (truncated)

Commits

Updates @vapi-ai/web from 2.5.2 to 2.6.1

Release notes

Sourced from @​vapi-ai/web's releases.

v2.6.1

What's Changed

New Contributors

Full Changelog: VapiAI/client-sdk-web@v2.5.3...v2.6.1

v2.5.3

What's Changed

Full Changelog: VapiAI/client-sdk-web@v2.5.2...v2.5.3

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​vapi-ai/web since your current version.


Updates convex from 1.25.4 to 1.42.3

Changelog

Sourced from convex's changelog.

1.42.3

  • Fixed a bug where the codegen would not sort module paths in an order consistent with other platforms when running on Windows. This completes a fix that was only partially applied in 1.42.2.

1.42.2

  • Mutations and actions can now read the raw authentication token used in the request by accessing authToken in ctx.meta.getRequestMetadata().
  • Fixed a circular import in convex/browser that caused issues when using the ConvexHttpClient in some JavaScript environments.
  • Fixed a bug in ConvexProviderWithClerk that caused the Convex client to ignore session changes in some situations.
  • Fixed a bug where the codegen would not sort module paths in an order consistent with other platforms when running on Windows.
  • When running npx convex dev outside a Convex project, the CLI now returns an error message immediately instead of first asking the user to select a project and then failing later.

1.42.1

  • Fixed an issue where the CLI would be unable to find the tsgo binary in newer versions of @typescript/native-preview.
  • Added a new initialAuthTokenReuse option to ConvexReactClient that prevents extra function calls when users re-authenticate.

1.42.0

  • Added a new npx convex project create command that can be used to create new projects programmatically.
  • Added a new --names-only flag to npx convex env list (and npx convex env default list). This flag shows the names of the env vars that are set, without the values. It can be useful to let AI coding agents know the variables that are set on a deployment, without giving them the actual values.
  • Added a new useStaleSnapshot option to the arguments for runQuery. This is an advanced feature that can be used to allow mutations to avoid optimistic concurrency control (OCC) conflicts in some cases where they can commit even though they depend on conflicting reads. This change allows us to improve the performance of some of the official Convex components, including Workpool.
  • Improved the documentation of db.* methods to more clearly explain the difference between the old APIs without table names (e.g. db.get(userId)) and the new APIs with table names (e.g. db.get("users", userId)).

... (truncated)

Commits

Updates jotai from 2.20.1 to 2.20.2

Release notes

Sourced from jotai's releases.

v2.20.2

This release fixes a regression in some edge case introduced in v2.18.1.

What's Changed

Full Changelog: pmndrs/jotai@v2.20.1...v2.20.2

Commits
  • 5c4ca26 v2.20.2
  • bc273fd fix(vanilla): subscriber not notified after nested store.set and sub/unsub in...
  • d8ed488 fix(workflow): ecosystem-ci (#3356)
  • 937d048 fix(ci): pin downlevel-dts typescript to fix build failure (#3355)
  • See full diff in compare view

Updates lucide-react from 0.475.0 to 0.577.0

Release notes

Sourced from lucide-react's releases.

Version 0.577.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@0.576.0...0.577.0

Version 0.576.0

What's Changed

Full Changelog: lucide-icons/lucide@0.575.0...0.576.0

Version 0.575.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@0.573.0...0.575.0

Version 0.574.0

What's Changed

New Contributors

... (truncated)

Commits
  • f6c0d06 chore(deps): bump rollup from 4.53.3 to 4.59.0 (#4106)
  • 67c0485 feat(scripts): added helper script to automatically update OpenCollective bac...
  • b6ed43d feat(packages): Added aria-hidden fallback for decorative icons to all packag...
  • 076e0bb chore(dependencies): Update dependencies (#3809)
  • 80d6f73 fix(icons): Rename fingerprint icon to fingerprint-pattern (#3767)
  • 1cfb3ff chore(deps-dev): bump vite from 6.3.5 to 6.3.6 (#3611)
  • e71198d chore: icon alias improvements (#2861)
  • 3e644fd chore(scripts): Refactor scripts to typescript (#3316)
  • 19fa01b build(deps-dev): bump vite from 6.3.2 to 6.3.4 (#3181)
  • 03eb862 use implicit return in react package (#2325)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for lucide-react since your current version.


Updates next from 16.2.6 to 16.2.10

Release notes

Sourced from next's releases.

v16.2.10

Contains no changes except publishing @next/swc-wasm-web which was accidentally not published since 16.2.4.

v16.2.9

Empty release to ensure next@latest points at a stable release. Next.js only allows publishing with Trusted Publishing enabled. In order to fix NPM dist-tags, we have to release a new version. Updating dist-tags is not possible with Trusted Publishing.

v16.2.8

Release with no changes in an attempt to fix next@latest pointing at a prerelease version.

v16.2.7

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • Backport documentation fixes for v16.2 (#93804)
  • [backport] Patch playwright-core to resolve _finishedPromise on requestFailed (#93920)
  • [backport] Fix dev mode hydration failure when page is served from HTTP cache (#93492)
  • [backport] Fix catch-all router.query corruption with basePath + rewrites (#93917)
  • [backport] Encode non-ASCII characters in cache tags at construction (#93918)
  • [backport] Fix server action forwarding loop with middleware rewrites (#93919)
  • [backport] Turbopack: switch from base40 to base38 hash encoding (#93932)
  • [ci] Disable hanging node 24 typescript tests on 16.2 backport branch (#94164)
  • [backport] Fix "type: module" in project dir when using standalone or adapters (#94050)
  • [backport] Propagate adapter preferred regions (#94200)
  • [16.2.x] Don't drop FormData entries (#94240)
  • [backport] feat(turbopack): add LocalPathOrProjectPath PostCSS config resolution (#94284)

Credits

Huge thanks to @​eps1lon, @​icyJoseph, @​unstubbable, @​mischnic, @​bgw, @​timneutkens, and @​lukesandberg for helping!

Commits

Updates react from 19.2.4 to 19.2.7

Release notes

Sourced from react's releases.

19.2.7 (June 1st, 2026)

React Server Components

19.2.6 (May 6th, 2026)

React Server Components

19.2.5 (April 8th, 2026)

React Server Components

Changelog

Sourced from react's changelog.

19.2.7 (June 1, 2026)

React Server Components

19.2.6 (May 6, 2026)

React Server Components

19.2.5 (March 18, 2026)

React Server Components

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react since your current version.


Updates react-dom from 19.2.4 to 19.2.7

Release notes

Sourced from react-dom's releases.

19.2.7 (June 1st, 2026)

React Server Components

19.2.6 (May 6th, 2026)

React Server Components

19.2.5 (April 8th, 2026)

React Server Components

Changelog

Sourced from react-dom's changelog.

19.2.7 (June 1, 2026)

React Server Components

19.2.6 (May 6, 2026)

React Server Components

19.2.5 (March 18, 2026)

React Server Components

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react-dom since your current version.


Updates react-hook-form from 7.81.0 to 7.82.0

Release notes

Sourced from react-hook-form's releases.

Version 7.82.0

🚀 feat: add opt-in delayError option for setValue (#13337)

setValue("firstName", "Bill", {
  delayError: 500, // delay validation error updates by 500ms
  shouldValidate: true
});

⚡ perf: improve getDirtyFields performance (#13590)

  • Improved dirty field calculation, especially for larger forms and deeply nested values.

🐞 fix: expose resetDefaultValues through form context (#13598)

const { resetDefaultValues } = useFormContext();
resetDefaultValues();

🐞 fix: setValue with shouldDirty now correctly updates dirty state when the form is disabled (#13594) 🐞 fix: preserve dirtyFields boolean values for registered array fields (#13586) 🐞 fix: restore FieldArray component export (#13596) 🧪 test: migrate test suite to Playwright and improve delayError test reliability (#13589)

thanks to @​candymask0712, @​wanxiankai, @​a-y-ibrahim, @​ankit1324 & @​abnud11

Changelog

Sourced from react-hook-form's changelog.

[7.82.0] - 2026-07-18

Added

  • Opt-in delayError option for setValue to delay validation error updates

Fixed

  • Expose resetDefaultValues through form context
  • setValue with shouldDirty not updating dirty state correctly when the form is disabled
  • Preserve dirtyFields boolean values for registered array fields
  • Restore FieldArray component export

Performance

  • Improve getDirtyFields performance, especially for larger forms and deeply nested values
Commits
  • 553d290 7.82.0
  • 2791e4f 🐞 fix: prevent stale _setValid() calls from overwriting isValid/isValidating ...
  • 521adfc 🤦🏻‍♂️ fix: expose resetDefaultValues through form context (#13598)
  • 2f7c1c5 🤧 fix FieldArray component export (#13596)
  • 9378288 🐞 fix #13592 setValue with shouldDirty not marking dirty state when form is d...
  • 65599cc 🚗 perf: improve get dirty fields (#13590)
  • 142f299 🖲️ chore: upgrade pnpm to v11 (#13587)
  • 673aae4 🤖 build(deps-dev): bump vite from 5.4.11 to 6.4.3 in /app (#13534)
  • 11bd6df 🥗 migrate to playwright & fix delay error feature (#13589)
  • 95da27a ⏳ feat: add opt-in delayError option for setValue (#13337)
  • Additional commits viewable in compare view

Updates zod from 3.25.67 to 3.25.76

Release notes

Sourced from zod's releases.

v3.25.76

Commits:

  • 91c9ca6385bef38278605294498af06c89b9aa68 fix: cleanup _idmap of $ZodRegistry (#4837)
  • 9cce1c5779aea32d00226a931a7f67d3e2529d58 docs: fix typo in flattenError example on error-formatting page (#4819) (#4833)
  • a3560aeb6c3a8675a932601be79cfae897eec9d9 v3.25.76 (#4838)
  • 50606616c0d291caf3210a7521da51271b918333 Release 3.25.76
  • 7baee4e17f86f4017e09e12b0acdee36a5b1c087 Update index.mdx (#4831)

v3.25.75

Commits:

  • c5f349b6c4e76f879eba9fd350dd79950fcb02f9 Fix z.undefined() behavior in toJSONSchema

v3.25.74

Commits:

  • ae0dbe1f79b2421f6d91ec0796295763436b26e2 Partial record
  • 39c5f71c92b9c4c39fc0a59b9375204fa140eaf0 3.25.74

v3.25.73

Commits:

  • 1021d3c230d41d600698a6d98b9db86c19f56904 v3.25.73 (#4822)

v3.25.72

Commits:

  • 4a4dac7cfb787162eeb79165d39bbb4830d4a6de Warn about id uniqueness check on Metadata page (#4782)
  • 7a5838dc0da967e15a217bf5abdd81f725da46c4 feat(locale): Add Esperanto (eo) locale (#4743)
  • 36fe14e1472f2a7cd71415841be8832fc4e9acc5 Fix optionality of schemas (#4769)
  • 20c8c4b67b508d653012808f69c43c7cfe5b39e3 Fix re-export bug
  • 8b0df10c8757a5fbd75bd65128ae183d764b3304 3.25.72

v3.25.71

Commits:

  • 66a0f34bfc746acddbfb68426b8b1b3f1d3d1727 Move source to /src (#4808)
  • 2a15f44606fd66335c6ebc1f91d702bb6bc95693 3.25.71

v3.25.70

Commits:

  • bd81c7cfaa03f61365d1c708c7e0f1cac54ea9ca Add ecosystem listing to homepage
  • 1ddb9719564e644722852193930a09d54f720443 Add Mobb to sponsors
  • 30ba440859f5b9184817f578626ff85d484aec27 Clean up ecosystem.mdx
  • 0ef1b85b5923a1a06a2afab47dbad249d105a997 Add svelte-jsonschema-form to form integrations (#4784)
  • 14715f147363e88e73190bb6ddbdf008914f0b19 docs: fix Lambda spelling (#4804)
  • f6da030188ea30defc025bbc672e5a81fbe93078 Add back src (#4806)
  • 364200a67c9f74ef252dbfa65ea93aab8fb15c06 Revert "Add back src (#4806)"

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(widget)(deps): bump the dependencies group across 1 directory w…
63cfefe 
…ith 10 updates

Bumps the dependencies group with 10 updates in the /apps/widget directory:

| Package | From | To |
| --- | --- | --- |
| [@convex-dev/agent](https://github.com/get-convex/agent) | `0.1.16` | `0.6.4` |
| [@vapi-ai/web](https://github.com/VapiAI/client-sdk-web) | `2.5.2` | `2.6.1` |
| [convex](https://github.com/get-convex/convex-backend/tree/HEAD/npm-packages/convex) | `1.25.4` | `1.42.3` |
| [jotai](https://github.com/pmndrs/jotai) | `2.20.1` | `2.20.2` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `0.475.0` | `0.577.0` |
| [next](https://github.com/vercel/next.js) | `16.2.6` | `16.2.10` |
| [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.4` | `19.2.7` |
| [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.4` | `19.2.7` |
| [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.81.0` | `7.82.0` |
| [zod](https://github.com/colinhacks/zod) | `3.25.67` | `3.25.76` |



Updates `@convex-dev/agent` from 0.1.16 to 0.6.4
- [Changelog](https://github.com/get-convex/agent/blob/main/CHANGELOG.md)
- [Commits](get-convex/agent@v0.1.16...v0.6.4)

Updates `@vapi-ai/web` from 2.5.2 to 2.6.1
- [Release notes](https://github.com/VapiAI/client-sdk-web/releases)
- [Changelog](https://github.com/VapiAI/client-sdk-web/blob/main/RELEASE.md)
- [Commits](VapiAI/client-sdk-web@v2.5.2...v2.6.1)

Updates `convex` from 1.25.4 to 1.42.3
- [Release notes](https://github.com/get-convex/convex-backend/releases)
- [Changelog](https://github.com/get-convex/convex-backend/blob/main/npm-packages/convex/CHANGELOG.md)
- [Commits](https://github.com/get-convex/convex-backend/commits/HEAD/npm-packages/convex)

Updates `jotai` from 2.20.1 to 2.20.2
- [Release notes](https://github.com/pmndrs/jotai/releases)
- [Commits](pmndrs/jotai@v2.20.1...v2.20.2)

Updates `lucide-react` from 0.475.0 to 0.577.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/0.577.0/packages/lucide-react)

Updates `next` from 16.2.6 to 16.2.10
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.2.6...v16.2.10)

Updates `react` from 19.2.4 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react)

Updates `react-dom` from 19.2.4 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react-dom)

Updates `react-hook-form` from 7.81.0 to 7.82.0
- [Release notes](https://github.com/react-hook-form/react-hook-form/releases)
- [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md)
- [Commits](react-hook-form/react-hook-form@v7.81.0...v7.82.0)

Updates `zod` from 3.25.67 to 3.25.76
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v3.25.67...v3.25.76)

---
updated-dependencies:
- dependency-name: "@convex-dev/agent"
  dependency-version: 0.6.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@vapi-ai/web"
  dependency-version: 2.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: convex
  dependency-version: 1.42.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: jotai
  dependency-version: 2.20.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: lucide-react
  dependency-version: 0.577.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: next
  dependency-version: 16.2.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: react
  dependency-version: 19.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: react-dom
  dependency-version: 19.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: react-hook-form
  dependency-version: 7.82.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: zod
  dependency-version: 3.25.76
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added app:widget Relates to apps/widget automated Created automatically by a bot dependencies Pull requests that update a dependency file labels Jul 20, 2026
@dependabot
dependabot Bot requested a review from RISHII7 as a code owner July 20, 2026 03:37
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file automated Created automatically by a bot app:widget Relates to apps/widget labels Jul 20, 2026
@vercel

vercel Bot commented Jul 20, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
echo-widget Error Error Jul 20, 2026 3:38am
1 Skipped Deployment
Project Deployment Actions Updated (UTC)
echo Skipped Skipped Jul 20, 2026 3:38am

@vercel
vercel Bot temporarily deployed to Preview – echo July 20, 2026 03:37 Inactive
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@RISHII7 RISHII7 Awaiting requested review from RISHII7 RISHII7 is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

app:widget Relates to apps/widget automated Created automatically by a bot dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants