deps(npm)(deps): bump the javascript-minor-and-patch group in /web with 5 updates

[dependabot]

Bumps the javascript-minor-and-patch group in /web with 5 updates:

Package	From	To
@anthropic-ai/sdk	0.120.0	0.122.0
stripe	22.5.0	22.6.0
@testing-library/react	16.3.2	16.3.3
@types/node	26.3.0	26.4.0
@vitejs/plugin-react	6.1.0	6.1.1

Updates @anthropic-ai/sdk from 0.120.0 to 0.122.0

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk: v0.122.0

0.122.0 (2026-08-27)

Full Changelog: sdk-v0.121.0...sdk-v0.122.0

Features

• api: beta files/skills namespaces use GA shapes; drop dated beta header pins (45d693a)

Bug Fixes

• client: classify cross-realm DOMException abort/timeout errors correctly (1bd6395)
• client: use configured logger for SSE parse errors (80eeaf7)
• sessions: make event accumulator forward-compatible with new event types (#410) (2d084fd)
• tools: let read return a view_range of a file over the size cap (#427) (56b3260)
• uploads: default bare Blob filename on skills endpoints (#422) (e111649)
• webhooks: require headers to be passed to unwrap() (3230804)

Chores

• internal: codegen related update (c2f327a)

Documentation

• api: clarify pagination on the organization rate-limit list endpoints (d6015b9)
• document TypeScript 5.0 as the minimum supported version (788e721)

sdk: v0.121.0

0.121.0 (2026-08-26)

Full Changelog: sdk-v0.120.0...sdk-v0.121.0

Features

• api: add updates thinking display mode (beta) (22274ea)
• api: add missing anthropic-beta values (0779f02)
• api: add support for Organization API endpoints (8b61e7a)
• helpers: support Standard Schema for structured outputs and tools (7880078)

Bug Fixes

• tools: keep the tool runner going on pause_turn (#288) (f040dc9)
• types: don't reference NodeJS.ProcessEnv from published types (#367) (fd38dfd)

Chores

... (truncated)

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.122.0 (2026-08-27)

Full Changelog: sdk-v0.121.0...sdk-v0.122.0

Features

• api: beta files/skills namespaces use GA shapes; drop dated beta header pins (45d693a)

Bug Fixes

• client: classify cross-realm DOMException abort/timeout errors correctly (1bd6395)
• client: use configured logger for SSE parse errors (80eeaf7)
• sessions: make event accumulator forward-compatible with new event types (#410) (2d084fd)
• tools: let read return a view_range of a file over the size cap (#427) (56b3260)
• uploads: default bare Blob filename on skills endpoints (#422) (e111649)
• webhooks: require headers to be passed to unwrap() (3230804)

Chores

• internal: codegen related update (c2f327a)

Documentation

• api: clarify pagination on the organization rate-limit list endpoints (d6015b9)
• document TypeScript 5.0 as the minimum supported version (788e721)

0.121.0 (2026-08-26)

Full Changelog: sdk-v0.120.0...sdk-v0.121.0

Features

• api: add updates thinking display mode (beta) (22274ea)
• api: add missing anthropic-beta values (0779f02)
• api: add support for Organization API endpoints (8b61e7a)
• helpers: support Standard Schema for structured outputs and tools (7880078)

Bug Fixes

• tools: keep the tool runner going on pause_turn (#288) (f040dc9)
• types: don't reference NodeJS.ProcessEnv from published types (#367) (fd38dfd)

Chores

• docs: clarify skill version latest support and memory version retention (7405a69)

... (truncated)

Commits

• 7f3898c chore: release main
• 956ccb5 docs(api): clarify pagination on the organization rate-limit list endpoints
• 2131d80 fix(tools): let read return a view_range of a file over the size cap (#427)
• f830c8f fix(aws,bedrock): prefer env credentials over AWS_PROFILE (#436)
• 4d50ddf test(ecosystem): expect cross-realm timeout errors to classify correctly
• acdd669 fix(client): classify cross-realm DOMException abort/timeout errors correctly
• 0a14622 test(tools): pin that read, edit and the memory tool preserve CRLF and CR lin...
• 17035de docs: document TypeScript 5.0 as the minimum supported version
• 2f95d8a fix(client): use configured logger for SSE parse errors
• 33f5103 feat(api): beta files/skills namespaces use GA shapes; drop dated beta header...
• Additional commits viewable in compare view

Updates stripe from 22.5.0 to 22.6.0

Release notes

Sourced from stripe's releases.

v22.6.0

This release changes the pinned API version to 2026-08-26.dahlia.

• #2801 Add discriminatedUnion kind to V2RuntimeSchema coercion

  • Adds runtime support for coercing int64/decimal fields within discriminated union variants in V2 API requests and responses.
  • ⚠️ Throws when serializing a discriminated union parameter whose discriminator is missing or is not a string. This avoids skipping coercion entirely which could silently truncate int64 fields above Number.MAX_SAFE_INTEGER.

• #2818 Add new EventNotificationHandler class for better thin event management

  • We've been putting a lot of time into rethinking the event handling experience in the SDKs. This new class is the culmination of that effort.
  • They're designed for a tight coupling with both StripeClient and the fully-typed nature of thin events. This delivers painless event destination upgrades, in-editor checks for common mistakes, and better code modularity.
  • Now that we've released thin event notifications for v1 objects, these new handlers are our recommended path for all integrations using thin event notifications.
  • See more detailed docs here: https://docs.stripe.com/webhooks/event-notification-handlers

• #2815 correctly throw connection errors if the server drops while sending the HTTP response body

  • This change results in new exceptions being thrown instead of hanging indefinitely
  • in an effort to make this change backwards compatible, it doesn't affect a case that was already throwing an error: if the stripe API sends invalid JSON, we were treating it as an API error instead of a connection error.
    • In the next major version, we'll change the exception thrown from StripeAPIError to StripeConnectionError and document it accordingly.

• #2812 Update generated code

  • Add support for new resource Billing.FeedbackOption
  • Add support for create, deactivate, list, retrieve, and update methods on resource Billing.FeedbackOption
  • Add support for payment_method_settings on AccountSession.components and AccountSessionCreateParams.components
  • Add support for feedback_options on BillingPortal.Configuration.features.subscription_cancel.cancellation_reason, BillingPortal.ConfigurationCreateParams.features.subscription_cancel.cancellation_reason, and BillingPortal.ConfigurationUpdateParams.features.subscription_cancel.cancellation_reason
  • Add support for new value customer_update on enums BillingPortal.Session.flow.type and BillingPortal.SessionCreateParams.flow_data.type
  • Add support for customer_update on BillingPortal.Session.flow
  • Add support for funding_source_group on Charge.payment_method_details.card.wallet.link and Charge.payment_method_details.link
  • Add support for funding_types_blocked on Checkout.Session.payment_method_options.card.restrictions and Checkout.SessionCreateParams.payment_method_options.card.restrictions
  • Add support for metadata on ConfirmationToken
  • Add support for active_entitlements and customer_portal on CustomerSession.components and CustomerSessionCreateParams.components
  • Add support for country on FinancialConnections.Session.filters
  • Add support for frozen_fields on InvoiceItem
  • Add support for billie on Invoice.payment_settings.payment_method_options, InvoiceCreateParams.payment_settings.payment_method_options, InvoiceUpdateParams.payment_settings.payment_method_options, Subscription.payment_settings.payment_method_options, SubscriptionCreateParams.payment_settings.payment_method_options, and SubscriptionUpdateParams.payment_settings.payment_method_options
  • Add support for new value billie on enums Invoice.payment_settings.payment_method_types, InvoiceCreateParams.payment_settings.payment_method_types, InvoiceUpdateParams.payment_settings.payment_method_types, Subscription.payment_settings.payment_method_types, SubscriptionCreateParams.payment_settings.payment_method_types, and SubscriptionUpdateParams.payment_settings.payment_method_types
  • ⚠️ Remove support for cryptogram on PaymentAttemptRecord.payment_method_details.card.three_d_secure and PaymentRecord.payment_method_details.card.three_d_secure
  • Add support for new value touch_n_go on enums PaymentIntent.allowed_payment_method_types, PaymentIntentConfirmParams.allowed_payment_method_types, PaymentIntentCreateParams.allowed_payment_method_types, PaymentIntentUpdateParams.allowed_payment_method_types, SetupIntent.allowed_payment_method_types, SetupIntentConfirmParams.allowed_payment_method_types, SetupIntentCreateParams.allowed_payment_method_types, and SetupIntentUpdateParams.allowed_payment_method_types
  • Change PaymentIntent.allowed_payment_method_types and SetupIntent.allowed_payment_method_types to be required
  • Add support for application_fee_amount, application_fee_percent, on_behalf_of, and transfer_data on PaymentLinkUpdateParams
  • Add support for feedback_option on Subscription.cancellation_details, SubscriptionCancelParams.cancellation_details, and SubscriptionUpdateParams.cancellation_details
  • Add support for igic on Tax.Registration.country_options.at, Tax.Registration.country_options.be, Tax.Registration.country_options.bg, Tax.Registration.country_options.cy, Tax.Registration.country_options.cz, Tax.Registration.country_options.de, Tax.Registration.country_options.dk, Tax.Registration.country_options.ee, Tax.Registration.country_options.es, Tax.Registration.country_options.fi, Tax.Registration.country_options.fr, Tax.Registration.country_options.gr, Tax.Registration.country_options.hr, Tax.Registration.country_options.hu, Tax.Registration.country_options.ie, Tax.Registration.country_options.it, Tax.Registration.country_options.lt, Tax.Registration.country_options.lu, Tax.Registration.country_options.lv, Tax.Registration.country_options.mt, Tax.Registration.country_options.nl, Tax.Registration.country_options.pl, Tax.Registration.country_options.pt, Tax.Registration.country_options.ro, Tax.Registration.country_options.se, Tax.Registration.country_options.si, Tax.Registration.country_options.sk, Tax.RegistrationCreateParams.country_options.at, Tax.RegistrationCreateParams.country_options.be, Tax.RegistrationCreateParams.country_options.bg, Tax.RegistrationCreateParams.country_options.cy, Tax.RegistrationCreateParams.country_options.cz, Tax.RegistrationCreateParams.country_options.de, Tax.RegistrationCreateParams.country_options.dk, Tax.RegistrationCreateParams.country_options.ee, Tax.RegistrationCreateParams.country_options.es, Tax.RegistrationCreateParams.country_options.fi, Tax.RegistrationCreateParams.country_options.fr, Tax.RegistrationCreateParams.country_options.gr, Tax.RegistrationCreateParams.country_options.hr, Tax.RegistrationCreateParams.country_options.hu, Tax.RegistrationCreateParams.country_options.ie, Tax.RegistrationCreateParams.country_options.it, Tax.RegistrationCreateParams.country_options.lt, Tax.RegistrationCreateParams.country_options.lu, Tax.RegistrationCreateParams.country_options.lv, Tax.RegistrationCreateParams.country_options.mt, Tax.RegistrationCreateParams.country_options.nl, Tax.RegistrationCreateParams.country_options.pl, Tax.RegistrationCreateParams.country_options.pt, Tax.RegistrationCreateParams.country_options.ro, Tax.RegistrationCreateParams.country_options.se, Tax.RegistrationCreateParams.country_options.si, and Tax.RegistrationCreateParams.country_options.sk
  • Add support for new value 2026-08-26.dahlia on enum WebhookEndpointCreateParams.api_version
  • Add support for error codes authentication_failure, capability_not_active, expired_payment_method, incorrect_postal_code, invalid_canceled_subscription_fields, and payment_method_restricted on Invoice.last_finalization_error, PaymentIntent.last_payment_error, SetupAttempt.setup_error, SetupIntent.last_setup_error, StripeError, and Terminal.Reader.action.api_error

See the changelog for more details.

v22.6.0-alpha.2

• #2810 Update generated code for private-preview
  • Add support for new resources Billing.FeedbackOption and PaymentPlan
  • ⚠️ Remove support for resource Billing.FeedbackOptions
  • Add support for create, list, retrieve, and update methods on resource PaymentPlan
  • Add support for update method on resource V2.MoneyManagement.Transaction

... (truncated)

Changelog

Sourced from stripe's changelog.

22.6.0 - 2026-08-26

This release changes the pinned API version to 2026-08-26.dahlia.

• #2801 Add discriminatedUnion kind to V2RuntimeSchema coercion

  • Adds runtime support for coercing int64/decimal fields within discriminated union variants in V2 API requests and responses.
  • ⚠️ Throws when serializing a discriminated union parameter whose discriminator is missing or is not a string. This avoids skipping coercion entirely which could silently truncate int64 fields above Number.MAX_SAFE_INTEGER.

• #2818 Add new EventNotificationHandler class for better thin event management

  • We've been putting a lot of time into rethinking the event handling experience in the SDKs. This new class is the culmination of that effort.
  • They're designed for a tight coupling with both StripeClient and the fully-typed nature of thin events. This delivers painless event destination upgrades, in-editor checks for common mistakes, and better code modularity.
  • Now that we've released thin event notifications for v1 objects, these new handlers are our recommended path for all integrations using thin event notifications.
  • See more detailed docs here: https://docs.stripe.com/webhooks/event-notification-handlers

• #2815 correctly throw connection errors if the server drops while sending the HTTP response body

  • This change results in new exceptions being thrown instead of hanging indefinitely
  • in an effort to make this change backwards compatible, it doesn't affect a case that was already throwing an error: if the stripe API sends invalid JSON, we were treating it as an API error instead of a connection error.
    • In the next major version, we'll change the exception thrown from StripeAPIError to StripeConnectionError and document it accordingly.

• #2812 Update generated code

  • Add support for new resource Billing.FeedbackOption
  • Add support for create, deactivate, list, retrieve, and update methods on resource Billing.FeedbackOption
  • Add support for payment_method_settings on AccountSession.components and AccountSessionCreateParams.components
  • Add support for feedback_options on BillingPortal.Configuration.features.subscription_cancel.cancellation_reason, BillingPortal.ConfigurationCreateParams.features.subscription_cancel.cancellation_reason, and BillingPortal.ConfigurationUpdateParams.features.subscription_cancel.cancellation_reason
  • Add support for new value customer_update on enums BillingPortal.Session.flow.type and BillingPortal.SessionCreateParams.flow_data.type
  • Add support for customer_update on BillingPortal.Session.flow
  • Add support for funding_source_group on Charge.payment_method_details.card.wallet.link and Charge.payment_method_details.link
  • Add support for funding_types_blocked on Checkout.Session.payment_method_options.card.restrictions and Checkout.SessionCreateParams.payment_method_options.card.restrictions
  • Add support for metadata on ConfirmationToken
  • Add support for active_entitlements and customer_portal on CustomerSession.components and CustomerSessionCreateParams.components
  • Add support for country on FinancialConnections.Session.filters
  • Add support for frozen_fields on InvoiceItem
  • Add support for billie on Invoice.payment_settings.payment_method_options, InvoiceCreateParams.payment_settings.payment_method_options, InvoiceUpdateParams.payment_settings.payment_method_options, Subscription.payment_settings.payment_method_options, SubscriptionCreateParams.payment_settings.payment_method_options, and SubscriptionUpdateParams.payment_settings.payment_method_options
  • Add support for new value billie on enums Invoice.payment_settings.payment_method_types, InvoiceCreateParams.payment_settings.payment_method_types, InvoiceUpdateParams.payment_settings.payment_method_types, Subscription.payment_settings.payment_method_types, SubscriptionCreateParams.payment_settings.payment_method_types, and SubscriptionUpdateParams.payment_settings.payment_method_types
  • ⚠️ Remove support for cryptogram on PaymentAttemptRecord.payment_method_details.card.three_d_secure and PaymentRecord.payment_method_details.card.three_d_secure
  • Add support for new value touch_n_go on enums PaymentIntent.allowed_payment_method_types, PaymentIntentConfirmParams.allowed_payment_method_types, PaymentIntentCreateParams.allowed_payment_method_types, PaymentIntentUpdateParams.allowed_payment_method_types, SetupIntent.allowed_payment_method_types, SetupIntentConfirmParams.allowed_payment_method_types, SetupIntentCreateParams.allowed_payment_method_types, and SetupIntentUpdateParams.allowed_payment_method_types
  • Change PaymentIntent.allowed_payment_method_types and SetupIntent.allowed_payment_method_types to be required
  • Add support for application_fee_amount, application_fee_percent, on_behalf_of, and transfer_data on PaymentLinkUpdateParams
  • Add support for feedback_option on Subscription.cancellation_details, SubscriptionCancelParams.cancellation_details, and SubscriptionUpdateParams.cancellation_details
  • Add support for igic on Tax.Registration.country_options.at, Tax.Registration.country_options.be, Tax.Registration.country_options.bg, Tax.Registration.country_options.cy, Tax.Registration.country_options.cz, Tax.Registration.country_options.de, Tax.Registration.country_options.dk, Tax.Registration.country_options.ee, Tax.Registration.country_options.es, Tax.Registration.country_options.fi, Tax.Registration.country_options.fr, Tax.Registration.country_options.gr, Tax.Registration.country_options.hr, Tax.Registration.country_options.hu, Tax.Registration.country_options.ie, Tax.Registration.country_options.it, Tax.Registration.country_options.lt, Tax.Registration.country_options.lu, Tax.Registration.country_options.lv, Tax.Registration.country_options.mt, Tax.Registration.country_options.nl, Tax.Registration.country_options.pl, Tax.Registration.country_options.pt, Tax.Registration.country_options.ro, Tax.Registration.country_options.se, Tax.Registration.country_options.si, Tax.Registration.country_options.sk, Tax.RegistrationCreateParams.country_options.at, Tax.RegistrationCreateParams.country_options.be, Tax.RegistrationCreateParams.country_options.bg, Tax.RegistrationCreateParams.country_options.cy, Tax.RegistrationCreateParams.country_options.cz, Tax.RegistrationCreateParams.country_options.de, Tax.RegistrationCreateParams.country_options.dk, Tax.RegistrationCreateParams.country_options.ee, Tax.RegistrationCreateParams.country_options.es, Tax.RegistrationCreateParams.country_options.fi, Tax.RegistrationCreateParams.country_options.fr, Tax.RegistrationCreateParams.country_options.gr, Tax.RegistrationCreateParams.country_options.hr, Tax.RegistrationCreateParams.country_options.hu, Tax.RegistrationCreateParams.country_options.ie, Tax.RegistrationCreateParams.country_options.it, Tax.RegistrationCreateParams.country_options.lt, Tax.RegistrationCreateParams.country_options.lu, Tax.RegistrationCreateParams.country_options.lv, Tax.RegistrationCreateParams.country_options.mt, Tax.RegistrationCreateParams.country_options.nl, Tax.RegistrationCreateParams.country_options.pl, Tax.RegistrationCreateParams.country_options.pt, Tax.RegistrationCreateParams.country_options.ro, Tax.RegistrationCreateParams.country_options.se, Tax.RegistrationCreateParams.country_options.si, and Tax.RegistrationCreateParams.country_options.sk
  • Add support for new value 2026-08-26.dahlia on enum WebhookEndpointCreateParams.api_version
  • Add support for error codes authentication_failure, capability_not_active, expired_payment_method, incorrect_postal_code, invalid_canceled_subscription_fields, and payment_method_restricted on Invoice.last_finalization_error, PaymentIntent.last_payment_error, SetupAttempt.setup_error, SetupIntent.last_setup_error, StripeError, and Terminal.Reader.action.api_error

Commits

• 2f64e7a Bump version to 22.6.0
• e127ca5 Update generated code (#2812)
• d076317 Add discriminatedUnion kind to V2RuntimeSchema coercion (#2801)
• cd421c5 Add .preHandle method to EventNotificationHandler (#2823)
• 6639421 Add new EventNotificationHandler class for better thin event management (#2...
• 6ffa3a8 correctly throw connection errors if the server drops while sending the HTTP ...
• dec0b47 Add better documentation for setting maxNetworkRetires to 0 (#2816)
• 8adba1d Bump picomatch from 2.3.1 to 2.3.2 (#2637)
• See full diff in compare view

Updates @testing-library/react from 16.3.2 to 16.3.3

Release notes

Sourced from @​testing-library/react's releases.

v16.3.3

16.3.3 (2026-08-27)

Bug Fixes

• Avoid act() re-entrant when dispatching events (#1468) (20ce75f)

Commits

• 20ce75f fix: Avoid act() re-entrant when dispatching events (#1468)
• be9d81d docs: fix typos in comments and types (#1446)
• See full diff in compare view

Updates @types/node from 26.3.0 to 26.4.0

Commits

• See full diff in compare view

Updates @vitejs/plugin-react from 6.1.0 to 6.1.1

Release notes

Sourced from @​vitejs/plugin-react's releases.

plugin-react@6.1.1

Add compiler.logDiagnostics option

Recoverable React Compiler diagnostics are no longer logged by default. Set compiler.logDiagnostics to true to log them through Vite. Fatal diagnostics are always logged and fail the transform.

Respect environment sourcemap option for React Compiler transform when builder.sharedPlugins is enabled (#1439)

The React Compiler transform was using the top-level sourcemap option instead of the environment sourcemap option. This caused a problem when the experimental builder.sharedPlugins was enabled.

Changelog

Sourced from @​vitejs/plugin-react's changelog.

6.1.1 (2026-08-28)

Add compiler.logDiagnostics option

Recoverable React Compiler diagnostics are no longer logged by default. Set compiler.logDiagnostics to true to log them through Vite. Fatal diagnostics are always logged and fail the transform.

Respect environment sourcemap option for React Compiler transform when builder.sharedPlugins is enabled (#1439)

The React Compiler transform was using the top-level sourcemap option instead of the environment sourcemap option. This caused a problem when the experimental builder.sharedPlugins was enabled.

Commits

• 04cac50 release: plugin-react@6.1.1 (#1440)
• 82d35ab fix(react): respect environment sourcemap option when builder.sharedPlugins...
• 397e847 fix(react): make logging diagnostics an opt-in for React Compiler (#1431)
• 61006e6 fix(deps): update all non-major dependencies (#1433)
• e2a649c chore: use deps.neverBundle instead of external in tsdown config (#1430)
• fb2d6f3 fix(deps): update all non-major dependencies (#1427)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies, javascript. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.