chore(deps): bump the production-minor-patch group across 1 directory with 8 updates by dependabot[bot] · Pull Request #99 · corespeed-io/lore

dependabot · 2026-09-07T04:34:33Z

Bumps the production-minor-patch group with 8 updates in the / directory:

Package	From	To
@ast-grep/napi	`0.45.1`	`0.45.3`
@opentelemetry/api-logs	`0.221.0`	`0.222.0`
@opentelemetry/instrumentation	`0.221.0`	`0.222.0`
@opentelemetry/sdk-logs	`0.221.0`	`0.222.0`
@opentelemetry/sdk-trace-base	`2.10.0`	`2.11.0`
jose	`6.2.9`	`6.2.10`
next	`16.3.1`	`16.3.4`
zod	`4.4.3`	`4.5.4`

Updates @ast-grep/napi from 0.45.1 to 0.45.3

Release notes

Sourced from @ast-grep/napi's releases.

0.45.3

chore(deps): update dependency dprint to v0.57.0 [#2916](https://github.com/ast-grep/ast-grep/issues/2916)

feat: add min-severity cli [#2917](https://github.com/ast-grep/ast-grep/issues/2917)

fix(outline): anchor fallback signatures to names [#2913](https://github.com/ast-grep/ast-grep/issues/2913)

feat(outline): add Markdown heading support [#2912](https://github.com/ast-grep/ast-grep/issues/2912)

chore(deps): update dependency oxlint to v1.80.0 [#2908](https://github.com/ast-grep/ast-grep/issues/2908)

chore(deps): update dependency @ast-grep/napi to v0.45.2 [#2906](https://github.com/ast-grep/ast-grep/issues/2906)

feat: add min-severity cli (#2917) [#2720](https://github.com/ast-grep/ast-grep/issues/2720)

fix: ast-grep-ignore must be at first be the frist alphabet to take effect [#2909](https://github.com/ast-grep/ast-grep/issues/2909)

chore: update tree-sitter 0.27 bb74529

fix: fix clippy c6b32d7

0.45.2

chore(deps): update astral-sh/setup-uv action to v10 [#2892](https://github.com/ast-grep/ast-grep/issues/2892)

chore(deps): update rust crate terminal-light to v1.9.1 [#2905](https://github.com/ast-grep/ast-grep/issues/2905)

chore(deps): update dependency web-tree-sitter to v0.26.13 [#2903](https://github.com/ast-grep/ast-grep/issues/2903)

chore(deps): update rust crate tree-sitter to v0.26.13 [#2904](https://github.com/ast-grep/ast-grep/issues/2904)

chore(deps): update dependency dprint to v0.56.1 [#2901](https://github.com/ast-grep/ast-grep/issues/2901)

chore(deps): update dependency @napi-rs/cli to v3.8.6 [#2882](https://github.com/ast-grep/ast-grep/issues/2882)

fix(deps): update rust-wasm-bindgen monorepo [#2878](https://github.com/ast-grep/ast-grep/issues/2878)

chore(deps): update dependency dprint to v0.56.0 [#2896](https://github.com/ast-grep/ast-grep/issues/2896)

chore(deps): update dependency oxlint to v1.79.0 [#2897](https://github.com/ast-grep/ast-grep/issues/2897)

chore(deps): update dependency @ast-grep/napi to v0.45.1 [#2876](https://github.com/ast-grep/ast-grep/issues/2876)

chore(deps): update dependency web-tree-sitter to v0.26.12 [#2880](https://github.com/ast-grep/ast-grep/issues/2880)

fix: exit quietly on broken pipe instead of erroring [#2887](https://github.com/ast-grep/ast-grep/issues/2887)

feat(outline): extract embedded language symbols [#2883](https://github.com/ast-grep/ast-grep/issues/2883)

chore(deps): update dependency oxlint to v1.78.0 [#2888](https://github.com/ast-grep/ast-grep/issues/2888)

feat: add namedChildren support to wasm [#2893](https://github.com/ast-grep/ast-grep/issues/2893)

feat: add namedChildren to napi [#2893](https://github.com/ast-grep/ast-grep/issues/2893)

feat: add named_children to pyo3 4dc0d36

fix: bump down napi 61f1b98

chore: bump deps 912da32

Changelog

Sourced from @ast-grep/napi's changelog.

0.45.3

chore(deps): update dependency dprint to v0.57.0 [#2916](https://github.com/ast-grep/ast-grep/issues/2916)

feat: add min-severity cli [#2917](https://github.com/ast-grep/ast-grep/issues/2917)

fix(outline): anchor fallback signatures to names [#2913](https://github.com/ast-grep/ast-grep/issues/2913)

feat(outline): add Markdown heading support [#2912](https://github.com/ast-grep/ast-grep/issues/2912)

chore(deps): update dependency oxlint to v1.80.0 [#2908](https://github.com/ast-grep/ast-grep/issues/2908)

chore(deps): update dependency @ast-grep/napi to v0.45.2 [#2906](https://github.com/ast-grep/ast-grep/issues/2906)

feat: add min-severity cli (#2917) [#2720](https://github.com/ast-grep/ast-grep/issues/2720)

fix: ast-grep-ignore must be at first be the frist alphabet to take effect [#2909](https://github.com/ast-grep/ast-grep/issues/2909)

chore: update tree-sitter 0.27 bb74529

fix: fix clippy c6b32d7

0.45.2

23 August 2026

chore(deps): update astral-sh/setup-uv action to v10 [#2892](https://github.com/ast-grep/ast-grep/issues/2892)

chore(deps): update rust crate terminal-light to v1.9.1 [#2905](https://github.com/ast-grep/ast-grep/issues/2905)

chore(deps): update dependency web-tree-sitter to v0.26.13 [#2903](https://github.com/ast-grep/ast-grep/issues/2903)

chore(deps): update rust crate tree-sitter to v0.26.13 [#2904](https://github.com/ast-grep/ast-grep/issues/2904)

chore(deps): update dependency dprint to v0.56.1 [#2901](https://github.com/ast-grep/ast-grep/issues/2901)

chore(deps): update dependency @napi-rs/cli to v3.8.6 [#2882](https://github.com/ast-grep/ast-grep/issues/2882)

fix(deps): update rust-wasm-bindgen monorepo [#2878](https://github.com/ast-grep/ast-grep/issues/2878)

chore(deps): update dependency dprint to v0.56.0 [#2896](https://github.com/ast-grep/ast-grep/issues/2896)

chore(deps): update dependency oxlint to v1.79.0 [#2897](https://github.com/ast-grep/ast-grep/issues/2897)

chore(deps): update dependency @ast-grep/napi to v0.45.1 [#2876](https://github.com/ast-grep/ast-grep/issues/2876)

chore(deps): update dependency web-tree-sitter to v0.26.12 [#2880](https://github.com/ast-grep/ast-grep/issues/2880)

fix: exit quietly on broken pipe instead of erroring [#2887](https://github.com/ast-grep/ast-grep/issues/2887)

feat(outline): extract embedded language symbols [#2883](https://github.com/ast-grep/ast-grep/issues/2883)

chore(deps): update dependency oxlint to v1.78.0 [#2888](https://github.com/ast-grep/ast-grep/issues/2888)

feat: add namedChildren support to wasm [#2893](https://github.com/ast-grep/ast-grep/issues/2893)

feat: add namedChildren to napi [#2893](https://github.com/ast-grep/ast-grep/issues/2893)

feat: add named_children to pyo3 4dc0d36

fix: bump down napi 61f1b98

chore: bump deps 912da32

Commits

979c143 0.45.3
d76ca48 chore(deps): update dependency dprint to v0.57.0 (#2916)
8f94fd1 feat: add min-severity cli (#2917)
bb74529 chore: update tree-sitter 0.27
a95d846 fix: ast-grep-ignore must be at first be the frist alphabet to take effect
c6b32d7 fix: fix clippy
9b4fa64 fix(outline): anchor fallback signatures to names (#2913)
6cf4957 feat(outline): add Markdown heading support (#2912)
d045852 chore(deps): update dependency oxlint to v1.80.0 (#2908)
40dab3c chore(deps): update dependency @ast-grep/napi to v0.45.2 (#2906)
Additional commits viewable in compare view

Updates @opentelemetry/api-logs from 0.221.0 to 0.222.0

Release notes

Sourced from @opentelemetry/api-logs's releases.

experimental/v0.222.0

0.222.0

💥 Breaking Changes
fix(sdk-node)!: fail-fast on Propagator creation from config file #6930 @trentm

fix(sdk-node)!: fail-fast on MeterProvider creation from config file #6954 @trentm

fix(sdk-node)!: fail-fast on TracerProvider creation from config file #6962 @trentm
fix(sdk-node)!: fail-fast on Resource creation from config file #6989 @trentm
This also breaks some usage of startNodeSDK() for environment-based config, i.e. when not using a config file. For example with OTEL_NODE_RESOURCE_DETECTORS=all, it results in an error message and a no-op SDK. (This does not impact users of new NodeSDK() -- the currently recommended mechanism to start an SDK using this package.)
Could not create OpenTelemetry SDK from configuration, SDK will not be setup: unknown ExperimentalResourceDetector name in configuration: "container"
🚀 Features

feat(sdk-logs): deprecate SdkLogRecord in favor of ReadWriteLogRecord #6939 @pichlermarc

🐛 Bug Fixes

fix(instrumentation-http): redact sensitive query parameters on incoming (server) spans; add redactedQueryParamsServer config option @dyladan

fix(sdk-node): support headers_list when creating OTLP exporters from declarative configuration #6953 @JacksonWeber

📚 Documentation

docs(sdk-logs): mark logger configuration as experimental #6996 @LarryHu0217

docs(configuration): document the ConfigModel suffix naming convention for exported types #6612 @vedantchalke36

🏠 Internal

refactor(sampler-jaeger-remote): remove axios dependency and use fetch to get the sampler configuration from Jaeger API #6963 @david-luna

Commits

0b72a81 chore: prepare next release (#7044)
a9c5338 ci: roll prerelease changelog into one final release changelog (#7045)
f41805e chore: prepare next release (#7042)
b85eb28 chore(instrumentation-http): fix lint errors (#7039)
3f92530 ci: support pre-releases and major version bumps in release workflow (#7035)
82a5831 docs(otlp-exporter-base): document HTTP exporter options (#6735)
e086dec Merge commit from fork
59dac70 chore(deps): update jamesives/github-pages-deploy-action action to v4.9.0 (#7...
d0ce753 chore: add @maryliag to maintainers (#7024)
03469a1 chore(deps): update open-telemetry/shared-workflows action to v0.10.0 (#7032)
Additional commits viewable in compare view

Updates @opentelemetry/instrumentation from 0.221.0 to 0.222.0

Release notes

Sourced from @opentelemetry/instrumentation's releases.

experimental/v0.222.0

0.222.0

💥 Breaking Changes
fix(sdk-node)!: fail-fast on Propagator creation from config file #6930 @trentm

fix(sdk-node)!: fail-fast on MeterProvider creation from config file #6954 @trentm

fix(sdk-node)!: fail-fast on TracerProvider creation from config file #6962 @trentm
fix(sdk-node)!: fail-fast on Resource creation from config file #6989 @trentm
This also breaks some usage of startNodeSDK() for environment-based config, i.e. when not using a config file. For example with OTEL_NODE_RESOURCE_DETECTORS=all, it results in an error message and a no-op SDK. (This does not impact users of new NodeSDK() -- the currently recommended mechanism to start an SDK using this package.)
Could not create OpenTelemetry SDK from configuration, SDK will not be setup: unknown ExperimentalResourceDetector name in configuration: "container"
🚀 Features

feat(sdk-logs): deprecate SdkLogRecord in favor of ReadWriteLogRecord #6939 @pichlermarc

🐛 Bug Fixes

fix(instrumentation-http): redact sensitive query parameters on incoming (server) spans; add redactedQueryParamsServer config option @dyladan

fix(sdk-node): support headers_list when creating OTLP exporters from declarative configuration #6953 @JacksonWeber

📚 Documentation

docs(sdk-logs): mark logger configuration as experimental #6996 @LarryHu0217

docs(configuration): document the ConfigModel suffix naming convention for exported types #6612 @vedantchalke36

🏠 Internal

refactor(sampler-jaeger-remote): remove axios dependency and use fetch to get the sampler configuration from Jaeger API #6963 @david-luna

Commits

0b72a81 chore: prepare next release (#7044)
a9c5338 ci: roll prerelease changelog into one final release changelog (#7045)
f41805e chore: prepare next release (#7042)
b85eb28 chore(instrumentation-http): fix lint errors (#7039)
3f92530 ci: support pre-releases and major version bumps in release workflow (#7035)
82a5831 docs(otlp-exporter-base): document HTTP exporter options (#6735)
e086dec Merge commit from fork
59dac70 chore(deps): update jamesives/github-pages-deploy-action action to v4.9.0 (#7...
d0ce753 chore: add @maryliag to maintainers (#7024)
03469a1 chore(deps): update open-telemetry/shared-workflows action to v0.10.0 (#7032)
Additional commits viewable in compare view

Updates @opentelemetry/sdk-logs from 0.221.0 to 0.222.0

Release notes

Sourced from @opentelemetry/sdk-logs's releases.

experimental/v0.222.0

0.222.0

💥 Breaking Changes
fix(sdk-node)!: fail-fast on Propagator creation from config file #6930 @trentm

fix(sdk-node)!: fail-fast on MeterProvider creation from config file #6954 @trentm

fix(sdk-node)!: fail-fast on TracerProvider creation from config file #6962 @trentm
fix(sdk-node)!: fail-fast on Resource creation from config file #6989 @trentm
This also breaks some usage of startNodeSDK() for environment-based config, i.e. when not using a config file. For example with OTEL_NODE_RESOURCE_DETECTORS=all, it results in an error message and a no-op SDK. (This does not impact users of new NodeSDK() -- the currently recommended mechanism to start an SDK using this package.)
Could not create OpenTelemetry SDK from configuration, SDK will not be setup: unknown ExperimentalResourceDetector name in configuration: "container"
🚀 Features

feat(sdk-logs): deprecate SdkLogRecord in favor of ReadWriteLogRecord #6939 @pichlermarc

🐛 Bug Fixes

fix(instrumentation-http): redact sensitive query parameters on incoming (server) spans; add redactedQueryParamsServer config option @dyladan

fix(sdk-node): support headers_list when creating OTLP exporters from declarative configuration #6953 @JacksonWeber

📚 Documentation

docs(sdk-logs): mark logger configuration as experimental #6996 @LarryHu0217

docs(configuration): document the ConfigModel suffix naming convention for exported types #6612 @vedantchalke36

🏠 Internal

refactor(sampler-jaeger-remote): remove axios dependency and use fetch to get the sampler configuration from Jaeger API #6963 @david-luna

Commits

0b72a81 chore: prepare next release (#7044)
a9c5338 ci: roll prerelease changelog into one final release changelog (#7045)
f41805e chore: prepare next release (#7042)
b85eb28 chore(instrumentation-http): fix lint errors (#7039)
3f92530 ci: support pre-releases and major version bumps in release workflow (#7035)
82a5831 docs(otlp-exporter-base): document HTTP exporter options (#6735)
e086dec Merge commit from fork
59dac70 chore(deps): update jamesives/github-pages-deploy-action action to v4.9.0 (#7...
d0ce753 chore: add @maryliag to maintainers (#7024)
03469a1 chore(deps): update open-telemetry/shared-workflows action to v0.10.0 (#7032)
Additional commits viewable in compare view

Updates @opentelemetry/sdk-trace-base from 2.10.0 to 2.11.0

Release notes

Sourced from @opentelemetry/sdk-trace-base's releases.

v2.11.0

2.11.0

🚀 Features

feat(context-async-hooks): implement attach() on AsyncLocalStorageContextManager #6845 @pichlermarc

On Node.js 25.9+, delegates to AsyncLocalStorage.withScope() returning a native RunScope. On older Node.js, falls back to enterWith() with a manual disposable wrapper.

feat(sdk-trace): allow configuring the force flush timeout per call #6929 @LarryHu0217

🐛 Bug Fixes

fix(sdk-metrics): ignore Infinity in exponential histograms #7015 @mwear

🏠 Internal

perf(sdk-metrics): reuse a single DataView for exponential histogram bit reads #6998 @mwear

chore(ci): run documentation tests on a weekly schedule #6920 @LarryHu0217

feat(ci): support pre-releases and major version bumps in the release workflow #6768 @pichlermarc

chore(resources): Ensure that multiple uses of serviceInstanceIdDetector.detect() return the same value for service.instance.id

Changelog

Sourced from @opentelemetry/sdk-trace-base's changelog.

2.11.0

🚀 Features

feat(context-async-hooks): implement attach() on AsyncLocalStorageContextManager #6845 @pichlermarc

On Node.js 25.9+, delegates to AsyncLocalStorage.withScope() returning a native RunScope. On older Node.js, falls back to enterWith() with a manual disposable wrapper.

feat(sdk-trace): allow configuring the force flush timeout per call #6929 @LarryHu0217

🐛 Bug Fixes

fix(sdk-trace-base): avoid a Webpack self-reference error in CommonJS output #6981 @sansynx

fix(sdk-metrics): ignore Infinity in exponential histograms #7015 @mwear

🏠 Internal

perf(sdk-metrics): reuse a single DataView for exponential histogram bit reads #6998 @mwear

chore(ci): run documentation tests on a weekly schedule #6920 @LarryHu0217

feat(ci): support pre-releases and major version bumps in the release workflow #6768 @pichlermarc

chore(resources): Ensure that multiple uses of serviceInstanceIdDetector.detect() return the same value for service.instance.id

Commits

0b72a81 chore: prepare next release (#7044)
a9c5338 ci: roll prerelease changelog into one final release changelog (#7045)
f41805e chore: prepare next release (#7042)
b85eb28 chore(instrumentation-http): fix lint errors (#7039)
3f92530 ci: support pre-releases and major version bumps in release workflow (#7035)
82a5831 docs(otlp-exporter-base): document HTTP exporter options (#6735)
e086dec Merge commit from fork
59dac70 chore(deps): update jamesives/github-pages-deploy-action action to v4.9.0 (#7...
d0ce753 chore: add @maryliag to maintainers (#7024)
03469a1 chore(deps): update open-telemetry/shared-workflows action to v0.10.0 (#7032)
Additional commits viewable in compare view

Updates jose from 6.2.9 to 6.2.10

Release notes

Sourced from jose's releases.

v6.2.10

Fixes

jose: consume serialization members once (9bee285)

jose: reject empty protected and JWE AAD members (8da4145)

jose: validate serialized header values (b711d8f)

jwe: conceal invalid decrypted CEK lengths (41fafe0)

jwe: enforce AES-GCM tag boundaries (9a5b744)

jwe: validate explicit encryption parameters (7a02697)

jwk: accept empty octet-sequence keys (3f871e7)

jwk: normalize key resolution inputs (f54ee7b)

jwks: enforce verification key metadata (f9ba510)

jwks: order overlapping remote reloads (9a1a913)

jwks: reject invalid remote duration values (7bdb9e5)

jwk: validate ext and key_ops parameters (4d91c37)

jws: reject mixed payload encoding modes (dc69713)

jws: validate unencoded payload strings (541f282)

jwt: enforce explicit verification policies (b347182)

jwt: prevent replacing protected headers (ae07d09)

jwt: reject invalid duration inputs (282f9aa)

jwt: validate builder claim values (ea03f83)

jwt: validate unsecured protected headers (230c14e)

key: validate generation and import options (15d880e)

reject mixed b64 modes for empty General JWS payloads (61a2ef7)

x509: reject DER truncated past its outer length (d8db9f6)

Documentation

jwks: correct cache timestamp units (01a44d9)

Refactor

jose: share binary input validation (eedb124)

jose: share compact token processing internals (85e30ed)

jwe: consolidate CBC decryption failures (1ee6f61)

jwe: specialize compact processing (a998927)

jwe: streamline single-recipient encryption (290aaa6)

jwks: compact JWK Set shape validation (930c7df), references Array#every

jwks: compact local key selection (4cb5ae5)

jwks: compact remote resolver state (ef5eaf4)

jws: specialize compact processing (021abf4)

jwt: compact claim validation helpers (f390683)

jwt: consolidate replicated claim checks (7dd5591)

jwt: share producer claim state (52ba159)

key: compact JWK algorithm selection (a6b29da)

key: compact secret length parsing (cc03be8)

Changelog

Sourced from jose's changelog.

6.2.10 (2026-08-21)

Fixes

jose: consume serialization members once (9bee285)

jose: reject empty protected and JWE AAD members (8da4145)

jose: validate serialized header values (b711d8f)

jwe: conceal invalid decrypted CEK lengths (41fafe0)

jwe: enforce AES-GCM tag boundaries (9a5b744)

jwe: validate explicit encryption parameters (7a02697)

jwk: accept empty octet-sequence keys (3f871e7)

jwk: normalize key resolution inputs (f54ee7b)

jwks: enforce verification key metadata (f9ba510)

jwks: order overlapping remote reloads (9a1a913)

jwks: reject invalid remote duration values (7bdb9e5)

jwk: validate ext and key_ops parameters (4d91c37)

jws: reject mixed payload encoding modes (dc69713)

jws: validate unencoded payload strings (541f282)

jwt: enforce explicit verification policies (b347182)

jwt: prevent replacing protected headers (ae07d09)

jwt: reject invalid duration inputs (282f9aa)

jwt: validate builder claim values (ea03f83)

jwt: validate unsecured protected headers (230c14e)

key: validate generation and import options (15d880e)

reject mixed b64 modes for empty General JWS payloads (61a2ef7)

x509: reject DER truncated past its outer length (d8db9f6)

Documentation

jwks: correct cache timestamp units (01a44d9)

Refactor

jose: share binary input validation (eedb124)

jose: share compact token processing internals (85e30ed)

jwe: consolidate CBC decryption failures (1ee6f61)

jwe: specialize compact processing (a998927)

jwe: streamline single-recipient encryption (290aaa6)

jwks: compact JWK Set shape validation (930c7df), references Array#every

jwks: compact local key selection (4cb5ae5)

jwks: compact remote resolver state (ef5eaf4)

jws: specialize compact processing (021abf4)

jwt: compact claim validation helpers (f390683)

jwt: consolidate replicated claim checks (7dd5591)

jwt: share producer claim state (52ba159)

key: compact JWK algorithm selection (a6b29da)

key: compact secret length parsing (cc03be8)

Commits

3eab152 chore(release): 6.2.10
021abf4 refactor(jws): specialize compact processing
a998927 refactor(jwe): specialize compact processing
eedb124 refactor(jose): share binary input validation
52ba159 refactor(jwt): share producer claim state
85e30ed refactor(jose): share compact token processing internals
0bd81d2 test(jose): cover hidden critical-header options
9cf7876 test(jose): reject callable object impostors
f23cafd test(jose): preserve resolved key data properties
1ee6f61 refactor(jwe): consolidate CBC decryption failures
Additional commits viewable in compare view

Updates next from 16.3.1 to 16.3.4

Release notes

Sourced from next's releases.

v16.3.4

Follow-up release to v16.3.3 re-enabling AVIF Image Optimization (#97949).

The following bug fixes have been backported. It does not include all pending features/changes on canary.

testmode: Fix infinite recursion in testmode passthrough fetch (#97691)

Fix build error when aliasing typescript to @typescript/typescript6 (#97997)

Fix unset crossOrigin in Turbopack manifests (#97930)

Credits

Huge thanks to @eps1lon, @mischnic, and @timneutkens for helping!

v16.3.3

This release contains security fixes for the following advisories:

Critical:

Unauthenticated Remote Code Execution on windows-hosted servers

Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used

v16.3.2

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

[backport] Scope app-entry export validation to files inside the app directory (#97357)

[backport] Fix catch-all index page being served for every other slug (#97416)

[16.3] Turbopack: don't trace embedded WASM loader helpers (#97353) (#97463)

[16.3] Turbopack: retain conditions when replacing resolve request keys (#97453)

[16.3.x] Fix Turbopack worker chunk loading with asset prefix (#97419)

[16.3.x] Authenticate Turborepo remote caching with OIDC instead of a static PAT (#97603)

Credits

Huge thanks to @lubieowoce, @unstubbable, @timneutkens, @mischnic, and @eps1lon for helping!

Commits

299180d v16.3.4
12e173d [16.3.x] Re-enable AVIF image optimization and require sharp 0.35.4 (#97949)
5d9022e [backport] Fix unset crossOrigin in Turbopack manifests (#97930)
d8f4560 [16.3.x] Fix build error when aliasing typescript to @typescript/typescript6 ...
656aebf [16.3] testmode: Fix infinite recursion in testmode passthrough fetch (#97691)
f37c1d6 [16.3.x] ci: remove pull_request_stats workflow (#97975)
a9a1cb7 v16.3.3
968b9fc [16.3.x] Fix ISR misses with backslashes in segments when deployed on Windows
3a15b4a [16.3.x] [next/image]: disable avif image optimization
7378b51 Backport/docs fixes 16.3 (#97649)
Additional commits viewable in compare view

Updates zod from 4.4.3 to 4.5.4

Release notes

Sourced from zod's releases.

v4.5.4

Commits:

84e416fbf4740527bbc8f319634f4e1b065bb42c fix(v4): stop the cycle walk from firing a default factory (#6500)

e8e206fa33ac5fe7ce20a2beb12d57b1cb3df653 4.5.4

v4.5.3

Commits:

e6b6ab347675cd2bd54b1bdbed16f98c59be82a9 docs(blog): widen the z.compile example to a 20-property schema

87d6464418582bb96fc665a01f852ca6da324ad0 fix(docs): drop the OG description when the title wraps past two lines

99fce394a026823e602b9c30d8d5d9f5f1932ce7 bench(v4): z.compile() against zod-compiler (#6499)

e3a695b6bf3f0d591ea682816e3cdaea04b0f967 docs(v4): record the email regex and container output-shape findings under Open

7e24a24288183ce02554f1ded7775d0650a7b7e6 docs(blog): drop the reading time and put a GitHub link in the navbar

eab51ff3592b2d11d863f4ee4d5452f31a3de1b6 fix(v4): emit record numeric keys as strings in toJSONSchema (

… with 8 updates Bumps the production-minor-patch group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@ast-grep/napi](https://github.com/ast-grep/ast-grep) | `0.45.1` | `0.45.3` | | [@opentelemetry/api-logs](https://github.com/open-telemetry/opentelemetry-js) | `0.221.0` | `0.222.0` | | [@opentelemetry/instrumentation](https://github.com/open-telemetry/opentelemetry-js) | `0.221.0` | `0.222.0` | | [@opentelemetry/sdk-logs](https://github.com/open-telemetry/opentelemetry-js) | `0.221.0` | `0.222.0` | | [@opentelemetry/sdk-trace-base](https://github.com/open-telemetry/opentelemetry-js) | `2.10.0` | `2.11.0` | | [jose](https://github.com/panva/jose) | `6.2.9` | `6.2.10` | | [next](https://github.com/vercel/next.js) | `16.3.1` | `16.3.4` | | [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.5.4` | Updates `@ast-grep/napi` from 0.45.1 to 0.45.3 - [Release notes](https://github.com/ast-grep/ast-grep/releases) - [Changelog](https://github.com/ast-grep/ast-grep/blob/main/CHANGELOG.md) - [Commits](ast-grep/ast-grep@0.45.1...0.45.3) Updates `@opentelemetry/api-logs` from 0.221.0 to 0.222.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.221.0...experimental/v0.222.0) Updates `@opentelemetry/instrumentation` from 0.221.0 to 0.222.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.221.0...experimental/v0.222.0) Updates `@opentelemetry/sdk-logs` from 0.221.0 to 0.222.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.221.0...experimental/v0.222.0) Updates `@opentelemetry/sdk-trace-base` from 2.10.0 to 2.11.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.10.0...v2.11.0) Updates `jose` from 6.2.9 to 6.2.10 - [Release notes](https://github.com/panva/jose/releases) - [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md) - [Commits](panva/jose@v6.2.9...v6.2.10) Updates `next` from 16.3.1 to 16.3.4 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.3.1...v16.3.4) Updates `zod` from 4.4.3 to 4.5.4 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.4.3...v4.5.4) --- updated-dependencies: - dependency-name: "@ast-grep/napi" dependency-version: 0.45.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: "@opentelemetry/api-logs" dependency-version: 0.222.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: "@opentelemetry/instrumentation" dependency-version: 0.222.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: "@opentelemetry/sdk-logs" dependency-version: 0.222.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: "@opentelemetry/sdk-trace-base" dependency-version: 2.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: jose dependency-version: 6.2.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: next dependency-version: 16.3.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: zod dependency-version: 4.5.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 7, 2026

Navigation Menu

Uh oh!

chore(deps): bump the production-minor-patch group across 1 directory with 8 updates - #99

chore(deps): bump the production-minor-patch group across 1 directory with 8 updates#99
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/production-minor-patch-537a097db0

dependabot Bot commented on behalf of github Sep 7, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 7, 2026

0.45.3

0.45.2

0.45.3

0.45.2

experimental/v0.222.0

0.222.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

📚 Documentation

🏠 Internal

experimental/v0.222.0

0.222.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

📚 Documentation

🏠 Internal

experimental/v0.222.0

0.222.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

📚 Documentation

🏠 Internal

v2.11.0

2.11.0

🚀 Features

🐛 Bug Fixes

🏠 Internal

2.11.0

🚀 Features

🐛 Bug Fixes

🏠 Internal

v6.2.10

Fixes

Documentation

Refactor

6.2.10 (2026-08-21)

Fixes

Documentation

Refactor

v16.3.4

Credits

v16.3.3

v16.3.2

Core Changes

Credits

v4.5.4

Commits:

v4.5.3

Commits:

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants