chore(deps): bump the production-minor-patch group across 1 directory with 8 updates by dependabot[bot] · Pull Request #72 · QuintinBotes/warden

dependabot · 2026-07-27T20:48:31Z

Bumps the production-minor-patch group with 8 updates in the / directory:

Package	From	To
@anthropic-ai/sdk	`0.110.0`	`0.115.0`
js-yaml	`5.2.1`	`5.2.2`
react	`19.2.7`	`19.2.8`
react-dom	`19.2.7`	`19.2.8`
jose	`6.2.3`	`6.2.4`
playwright	`1.61.1`	`1.62.0`
lighthouse	`13.4.0`	`13.4.1`
next	`16.2.10`	`16.2.12`

Updates @anthropic-ai/sdk from 0.110.0 to 0.115.0

Release notes

Sourced from @anthropic-ai/sdk's releases.

sdk: v0.115.0

0.115.0 (2026-07-24)

Full Changelog: sdk-v0.114.0...sdk-v0.115.0

Features

api: add claude-opus-5 model (cdd3606)

api: add tool addition/removal blocks and tool_change events (cdd3606)

api: expand client-side fallback credit token types and add server-side fallbacks default option (cdd3606)

Bug Fixes

client: release abort listeners when requests settle (#1129) (b85e902)

sdk: v0.114.0

0.114.0 (2026-07-23)

Full Changelog: sdk-v0.113.0...sdk-v0.114.0

Features

api: add new stop reason 'model_context_window_exceeded' (1ec71c1)

sdk: v0.113.0

0.113.0 (2026-07-22)

Full Changelog: sdk-v0.112.5...sdk-v0.113.0

Features

api: add support for Managed Agents model effort, initial session events, and threads delta streaming (83fef1e)

sdk: v0.112.5

0.112.5 (2026-07-21)

Full Changelog: sdk-v0.112.4...sdk-v0.112.5

Chores

api: add support for new refusal category (479efe8)

internal: codegen related update (830fb74)

sdk: v0.112.4

0.112.4 (2026-07-20)

Full Changelog: sdk-v0.112.3...sdk-v0.112.4

Bug Fixes

... (truncated)

Changelog

Sourced from @anthropic-ai/sdk's changelog.

0.115.0 (2026-07-24)

Full Changelog: sdk-v0.114.0...sdk-v0.115.0

Features

api: add claude-opus-5 model (cdd3606)

api: add tool addition/removal blocks and tool_change events (cdd3606)

api: expand client-side fallback credit token types and add server-side fallbacks default option (cdd3606)

Bug Fixes

client: release abort listeners when requests settle (#1129) (b85e902)

0.114.0 (2026-07-23)

Full Changelog: sdk-v0.113.0...sdk-v0.114.0

Features

api: add new stop reason 'model_context_window_exceeded' (1ec71c1)

0.113.0 (2026-07-22)

Full Changelog: sdk-v0.112.5...sdk-v0.113.0

Features

api: add support for Managed Agents model effort, initial session events, and threads delta streaming (83fef1e)

0.112.5 (2026-07-21)

Full Changelog: sdk-v0.112.4...sdk-v0.112.5

Chores

api: add support for new refusal category (479efe8)

internal: codegen related update (830fb74)

0.112.4 (2026-07-20)

Full Changelog: sdk-v0.112.3...sdk-v0.112.4

Bug Fixes

aws: preserve AWS options and auth mode across withOptions() (#214) (3f7665c)

Chores

... (truncated)

Commits

3b45cd3 chore: release main
f298e9a feat(api): add claude-opus-5 model
ce8e54b fix(client): release abort listeners when requests settle (#1129)
2d314b4 chore: release main
3d051df feat(api): add new stop reason 'model_context_window_exceeded'
4414d47 chore: release main
1ec5566 feat(api): add support for Managed Agents model effort, initial session event...
c58a55b chore: release main
2fb7da5 chore(api): add support for new refusal category
d6ffc3c chore(internal): codegen related update
Additional commits viewable in compare view

Updates js-yaml from 5.2.1 to 5.2.2

Changelog

Sourced from js-yaml's changelog.

[5.2.2] - 2026-07-24

Fixed

Quote flow scalars where a colon precedes a flow indicator, #773.

Security

Avoid exponential parsing time for nested flow sequence pairs.

Commits

3c29559 5.2.2 released
3e5240f parser: avoid reparsing flow sequence pair keys
bd7ebb2 fix: quote flow scalars where a colon precedes a flow indicator (#773)
See full diff in compare view

Updates react from 19.2.7 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

Performance improvements when decoding (#37087 by @eps1lon)

Commits

1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
See full diff in compare view

Updates react-dom from 19.2.7 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

Performance improvements when decoding (#37087 by @eps1lon)

Commits

1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
See full diff in compare view

Updates jose from 6.2.3 to 6.2.4

Release notes

Sourced from jose's releases.

v6.2.4

Documentation

update README.md and SECURITY.md to reflect passed EOL dates (2a84032)

Refactor

normalize JWK export members from runtime quirks (386a3eb)

Changelog

Sourced from jose's changelog.

6.2.4 (2026-07-21)

Documentation

update README.md and SECURITY.md to reflect passed EOL dates (2a84032)

Refactor

normalize JWK export members from runtime quirks (386a3eb)

Commits

3ced677 chore(release): 6.2.4
9725456 chore: bump packages
386a3eb refactor: normalize JWK export members from runtime quirks
f86dbef chore: bump packages
990c670 test: update electron expectations
0bbe2d0 chore: fix broken links for undici
294c40c test: update electron expectations
a378068 chore(deps): bump the actions group with 2 updates
b299ce2 chore(deps-dev): bump undici
f261d84 chore(deps-dev): bump tar in the npm_and_yarn group across 1 directory
Additional commits viewable in compare view

Updates playwright from 1.61.1 to 1.62.0

Release notes

Sourced from playwright's releases.

v1.62.0

🧱 New component testing model

Component testing moves to a stories and galleries model. A story wraps your component in one specific scenario — hard-coded props, mock data, providers — and a gallery page that you serve renders stories on demand. The new fixtures.mount() fixture navigates to the gallery, mounts a story by id, and returns a Locator scoped to the story's root element:
test('click should expand', async ({ mount }) => {
  const component = await mount('components/Expandable/Stateful');
  await component.getByRole('button').click();
  await expect(component.getByTestId('expanded')).toHaveValue('true');
});
Pass a story type as a template argument to type-check its props, and use update(props) / unmount() on the returned locator to re-render or tear down within a test.

🛑 Cancel operations with AbortSignal

Most operations and web-first assertions now accept a signal option that takes an AbortSignal, letting you cancel long-running actions, navigations, waits, and assertions:
const controller = new AbortController();
setTimeout(() => controller.abort(), 1000);
await page.getByRole('button', { name: 'Submit' }).click({ signal: controller.signal });
await expect(page.getByText('Done')).toBeVisible({ signal: controller.signal });
Providing a signal does not disable the default timeout; pass timeout: 0 to disable it.

🖼️ WebP screenshots

expect(page).toHaveScreenshot() and expect(locator).toHaveScreenshot() can now store snapshots in the WebP format — just give the snapshot a .webp name:
// Visual comparisons store the golden snapshot as lossless WebP.
await expect(page).toHaveScreenshot('homepage.webp');
// Standalone screenshots can trade quality for size with lossy WebP.
await page.screenshot({ path: 'homepage.webp', quality: 50 });
page.screenshot() and [locator.screenshot() (https://playwright.dev/docs/api/class-locator#locator-screenshot) also accept webp as a type, where quality 100 (the default) is lossless and lower values use lossy compression.

🧩 Custom test filtering with Reporter.preprocess()

New reporter.preprocess() hook runs after the configuration is resolved and before reporter.onBegin(), letting a reporter mark individual tests as skipped, excluded, fixed, or failing through a TestRun object:
</tr></table> 

... (truncated)

Commits

e3950d9 chore: mark v1.62.0 (#41981)
f07e0f7 cherry-pick(#41940): docs: release notes for v1.62 (#41967)
05a306c cherry-pick(#41964): Revert "feat(routeFromHar): add interceptAPIRequests opt...
2934858 fix: correct pending navigation log spacing (#41949)
4b0cc99 fix(test): unflake screencast backpressure test on slow macOS runner (#41951)
bbbae6d test: fixme WebSocket locale test in Chromium 150 (#41944)
15c4f55 fix(mcp): identify downloads explicitly (#41933)
f5fa967 fix(network): request.postData() returns null for empty string body override ...
0edafe4 fix(mcp): launch the Chrome profile that has the extension installed (#41939)
244a1ff feat(firefox): roll to r1538 (#41938)
Additional commits viewable in compare view

Updates lighthouse from 13.4.0 to 13.4.1

Release notes

Sourced from lighthouse's releases.

v13.4.1

Full Changelog

We expect this release to ship in the DevTools of Chrome 152, and to PageSpeed Insights within 2 weeks.

Core

baseline: Dynamic Baseline High calculation and feature summary improvements (#17107, #17112, #17132)

webmcp: Refined WebMCP gatherers to check document.modelContext and removed snapshot mode (#17128, #17129)

docs: Added documentation links for agentic audits (#17108)

network: Detailed error messages when fetching robots.txt or llms.txt fails (#17083)

Clients

viewer: Enabled Agentic Browsing category via PSI API (#17090)

extension: Version bump (#17094)

Deps

Upgraded dependencies, including @sentry/node to v10 (#17079, #17093, #17135)

Tests & Build

build: Minified Lightrider bundle (#17117)

tests: Added bundle size check and updated Puppeteer API tests (#17088, #17096)

devtools: Synced e2e tests from devtools-frontend (#17121)

Infrastructure & Workflow

ci: Configured npm Trusted Publishing via OIDC and consolidated release workflows (#16944, #17097, #17098, #17099, #17100)

docs: Added verification skill and documentation updates (#17091, #17109, #17137)

Changelog

Sourced from lighthouse's changelog.

13.4.1 (2026-07-20)

Full Changelog

We expect this release to ship in the DevTools of Chrome 152, and to PageSpeed Insights within 2 weeks.

Core

baseline: Dynamic Baseline High calculation and feature summary improvements (#17107, #17112, #17132)

webmcp: Refined WebMCP gatherers to check document.modelContext and removed snapshot mode (#17128, #17129)

docs: Added documentation links for agentic audits (#17108)

network: Detailed error messages when fetching robots.txt or llms.txt fails (#17083)

Clients

viewer: Enabled Agentic Browsing category via PSI API (#17090)

extension: Version bump (#17094)

Deps

Upgraded dependencies, including @sentry/node to v10 (#17079, #17093, #17135)

Tests & Build

build: Minified Lightrider bundle (#17117)

tests: Added bundle size check and updated Puppeteer API tests (#17088, #17096)

devtools: Synced e2e tests from devtools-frontend (#17121)

Infrastructure & Workflow

ci: Configured npm Trusted Publishing via OIDC and consolidated release workflows (#16944, #17097, #17098, #17099, #17100)

docs: Added verification skill and documentation updates (#17091, #17109, #17137)

Commits

1d58f5b misc(release): update Node version used in publish job (#17139)
abca8be v13.4.1 (#17138)
de07a17 misc(release): add manual google3 step to dep upgrade process (#17137)
46c73c0 deps: upgrade deps (#17135)
74cb00f core(baseline): store newest feature year in debugData, remove displayValue (...
c0b4bb4 core(webmcp): remove snapshot mode from webmcp audits (#17128)
7176d17 core(webmcp): use document.modelContext check in webmcp gatherers (#17129)
3608d82 core(baseline): report newest feature summary in displayValue (#17112)
8afe335 tests(devtools): sync e2e tests from devtools-frontend (#17121)
0ba385d misc(build): minify Lightrider bundle (#17117)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for lighthouse since your current version.

Updates next from 16.2.10 to 16.2.12

Release notes

Sourced from next's releases.

v16.2.12

What's Changed

Backport/docs fixes 16.2 - July round by @icyJoseph in vercel/next.js#96031

[Backport] Fixes to support TypeScript 7 by @lukesandberg in vercel/next.js#95831

Full Changelog: vercel/next.js@v16.2.11...v16.2.12

v16.2.11

This release contains security fixes for the following advisories:

High:

Denial of Service in App Router using Server Actions

Middleware / Proxy bypass in App Router applications using Turbopack and single locale

Server-Side Request Forgery in rewrites via attacker-controlled destination hostname

Server-Side Request Forgery in Server Actions on custom servers

Moderate:

Cache confusion of response bodies for requests with bodies

Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences

Denial of Service in the Image Optimization API using SVGs

Unauthenticated disclosure of internal Server Function endpoints

Unbounded Server Action payload in Edge runtime

Commits

2234717 v16.2.12
957f5ed [Backport] Fixes to support TypeScript 7 (#95831)
b56eb16 Backport/docs fixes 16.2 - July round (#96031)
9beca08 v16.2.11
3c48c7a [16.x] Fix Turbopack middleware matcher with i18n single locale
ac1eff3 [16.x] Improve performance of checking valid MPA form submissions
9a4651e [16.x] Enforce serverActions.bodySizeLimit for Server Actions in Edge runtime
b512063 [16.x] Set correct origin for internal redirects in custom server
d303326 [16.x] Ensure exotic rewrite param values are properly encoded
73b9487 [16.x] fix(fetch-cache): key fetch(Request, init) by the effective request
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… with 8 updates Bumps the production-minor-patch group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.110.0` | `0.115.0` | | [js-yaml](https://github.com/nodeca/js-yaml) | `5.2.1` | `5.2.2` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.2.8` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.2.8` | | [jose](https://github.com/panva/jose) | `6.2.3` | `6.2.4` | | [playwright](https://github.com/microsoft/playwright) | `1.61.1` | `1.62.0` | | [lighthouse](https://github.com/GoogleChrome/lighthouse) | `13.4.0` | `13.4.1` | | [next](https://github.com/vercel/next.js) | `16.2.10` | `16.2.12` | Updates `@anthropic-ai/sdk` from 0.110.0 to 0.115.0 - [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases) - [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md) - [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.110.0...sdk-v0.115.0) Updates `js-yaml` from 5.2.1 to 5.2.2 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@5.2.1...5.2.2) Updates `react` from 19.2.7 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react) Updates `react-dom` from 19.2.7 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom) Updates `jose` from 6.2.3 to 6.2.4 - [Release notes](https://github.com/panva/jose/releases) - [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md) - [Commits](panva/jose@v6.2.3...v6.2.4) Updates `playwright` from 1.61.1 to 1.62.0 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.61.1...v1.62.0) Updates `lighthouse` from 13.4.0 to 13.4.1 - [Release notes](https://github.com/GoogleChrome/lighthouse/releases) - [Changelog](https://github.com/GoogleChrome/lighthouse/blob/main/changelog.md) - [Commits](GoogleChrome/lighthouse@v13.4.0...v13.4.1) Updates `next` from 16.2.10 to 16.2.12 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.2.10...v16.2.12) --- updated-dependencies: - dependency-name: "@anthropic-ai/sdk" dependency-version: 0.115.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: js-yaml dependency-version: 5.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: react dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: react-dom dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: jose dependency-version: 6.2.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: playwright dependency-version: 1.62.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: lighthouse dependency-version: 13.4.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: next dependency-version: 16.2.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot requested a review from QuintinBotes as a code owner July 27, 2026 20:48

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 27, 2026

Navigation Menu

chore(deps): bump the production-minor-patch group across 1 directory with 8 updates - #72

chore(deps): bump the production-minor-patch group across 1 directory with 8 updates#72
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-minor-patch-5c4cdc2b11

dependabot Bot commented on behalf of github Jul 27, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jul 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

sdk: v0.115.0

0.115.0 (2026-07-24)

Features

Bug Fixes

sdk: v0.114.0

0.114.0 (2026-07-23)

Features

sdk: v0.113.0

0.113.0 (2026-07-22)

Features

sdk: v0.112.5

0.112.5 (2026-07-21)

Chores

sdk: v0.112.4

0.112.4 (2026-07-20)

Bug Fixes

0.115.0 (2026-07-24)

Features

Bug Fixes

0.114.0 (2026-07-23)

Features

0.113.0 (2026-07-22)

Features

0.112.5 (2026-07-21)

Chores

0.112.4 (2026-07-20)

Bug Fixes

Chores

[5.2.2] - 2026-07-24

Fixed

Security

19.2.8 (July 21st, 2026)

React Server Components

19.2.8 (July 21st, 2026)

React Server Components

v6.2.4

Documentation

Refactor

6.2.4 (2026-07-21)

Documentation

Refactor

v1.62.0

🧱 New component testing model

🛑 Cancel operations with AbortSignal

🖼️ WebP screenshots

🧩 Custom test filtering with Reporter.preprocess()

v13.4.1

Core

Clients

Deps

Tests & Build

Infrastructure & Workflow

13.4.1 (2026-07-20)

Core

Clients

Deps

Tests & Build

Infrastructure & Workflow

v16.2.12

What's Changed

v16.2.11

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 27, 2026 •

edited

Loading