feat: update dependencies - #1110
Merged
Merged
Conversation
TypeScript Dependencies - @aws-sdk/client-dynamodb 3.1111.0 -> 3.1116.0 - @aws-sdk/client-api-gateway 3.1111.0 -> 3.1116.0 - @aws-sdk/client-iam 3.1111.0 -> 3.1116.0 - @aws-sdk/client-bedrock-agentcore 3.1111.0 -> 3.1116.0 - @aws-sdk/client-bedrock-runtime 3.1111.0 -> 3.1116.0 - @aws-sdk/client-s3 3.1111.0 -> 3.1116.0 - @aws-sdk/client-sts 3.1111.0 -> 3.1116.0 - @aws-sdk/credential-providers 3.1111.0 -> 3.1116.0 - @aws-sdk/credential-provider-cognito-identity 3.972.68 -> 3.972.69 - @aws-sdk/client-secrets-manager 3.1111.0 -> 3.1116.0 - @aws-sdk/rds-signer 3.1111.0 -> 3.1116.0 - @aws-lambda-powertools/logger 2.34.0 -> 2.35.0 - @aws-lambda-powertools/metrics 2.34.0 -> 2.35.0 - @aws-lambda-powertools/parameters 2.34.0 -> 2.35.0 - @aws-lambda-powertools/tracer 2.34.0 -> 2.35.0 - @aws-lambda-powertools/parser 2.34.0 -> 2.35.0 - @aws-sdk/client-appconfigdata 3.1111.0 -> 3.1116.0 - @middy/core 7.7.4 -> 7.8.0 - @swc/core 1.16.0 -> 1.16.1 - @modelcontextprotocol/inspector 2.2.0 -> 2.3.0 - @ag-ui/client 0.0.57 -> 0.0.58 - @ag-ui/core 0.0.57 -> 0.0.58 - @ag-ui/encoder 0.0.57 -> 0.0.58 - agent-chat-cli 0.3.0 -> 0.4.0 - @copilotkit/react-core 1.68.1 -> 1.69.0 - @strands-agents/sdk 1.13.0 -> 1.14.0 - @tanstack/react-router 1.170.29 -> 1.170.31 - @tanstack/router-plugin 1.168.32 -> 1.168.34 - @tanstack/router-generator 1.167.30 -> 1.167.32 - @cloudscape-design/board-components 3.0.218 -> 3.0.220 - @cloudscape-design/chat-components 1.0.162 -> 1.0.164 - @cloudscape-design/components 3.0.1347 -> 3.0.1352 - @cloudscape-design/global-styles 1.0.66 -> 1.0.67 - @tanstack/react-query 5.101.4 -> 5.102.0 - @tanstack/react-query-devtools 5.101.4 -> 5.102.0 - @types/pg 8.21.0 -> 8.23.1 - @smithy/node-http-handler 4.11.2 -> 4.11.3 - @vitest/coverage-v8 4.1.10 -> 4.1.11 - @vitest/ui 4.1.10 -> 4.1.11 - @astrojs/react 6.0.2 -> 6.0.4 - astro 7.1.1 -> 7.2.4 - aws-cdk 2.1136.0 -> 2.1138.0 - aws-cdk-lib 2.265.0 -> 2.266.0 - @biomejs/biome 2.5.8 -> 2.5.10 - mise 2026.8.6 -> 2026.8.10 - rolldown 1.2.4 -> 1.2.5 - starlight-blog 0.28.0 -> 0.29.0 - lucide-react 1.31.0 -> 1.33.0 - shadcn 4.18.0 -> 4.19.0 - vite 8.2.1 -> 8.2.2 - vitest 4.1.10 -> 4.1.11 Python Dependencies - bedrock-agentcore ==1.21.0 -> ==1.22.0 - boto3 ==1.43.72 -> ==1.43.78 - checkov ==3.3.11 -> ==3.3.13 - langchain ==1.3.15 -> ==1.3.16 - langchain-aws ==1.7.1 -> ==1.7.3 - ruff ==0.16.3 -> ==0.16.4 - strands-agents ==1.52.0 -> ==1.53.0 - strands-agents[a2a] ==1.52.0 -> ==1.53.0 - ty ==0.0.72 -> ==0.0.74 - uvicorn ==0.52.3 -> ==0.52.4 Terraform Providers - aws 6.60.0 -> 6.61.0
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #1110 +/- ##
=======================================
Coverage 88.35% 88.35%
=======================================
Files 227 227
Lines 9698 9698
Branches 2301 2301
=======================================
Hits 8569 8569
Misses 499 499
Partials 630 630 ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
added 4 commits
August 24, 2026 14:12
…nto version-update-32666429470
@copilotkit/react-core pins @ag-ui/client and @ag-ui/core to a single exact version, so bumping them to 0.0.58 installed a second copy alongside CopilotKit's 0.0.57. Generated websites then failed to compile, because the AbstractAgent passed to CopilotKitProvider came from a different module instance than the one the prop is typed against, and AbstractAgent's private _debug field makes the two declarations nominally incompatible: AguiProvider.tsx: error TS2322: Type 'Record<string, ...@Ag-ui+client@0.0.58...AbstractAgent>' is not assignable to type 'Record<string, ...@Ag-ui+client@0.0.57...AbstractAgent>'. Types have separate declarations of a private property '_debug'. Pin the three @Ag-ui packages back to 0.0.57 and record the constraint so a future dependency bump does not reintroduce the duplicate.
agent-chat-cli 0.4.0 moved from @a2a-js/sdk 0.3.x to 1.x, while the generated A2A server still uses the pinned @a2a-js/sdk 0.3.14. The 1.x client calls SendStreamingMessage, which the 0.3.x server does not implement, so the generated chat target dies on the first message: JsonRpcRequestMalformedError: Method not found: SendStreamingMessage reason: 'INVALID_PARAMS', envelopeCode: -32601 With 0.4.0 the CLI also installs its own nested @a2a-js/sdk 1.0.1 alongside the server's 0.3.14, so client and server no longer speak the same protocol major. Hold agent-chat-cli at 0.3.0, which resolves to the same @a2a-js/sdk 0.3.14 as the server, and record that the two must be bumped together.
astro 7.1.2 onwards imports parseCookie and stringifySetCookie from `cookie`, names that only exist in cookie 1+. Astro leaves `cookie` external in the prerender bundle, so the emitted `dist` entry carries that import and Node resolves it by walking up from `dist` — where astro's own copy, nested under node_modules/astro, is not an ancestor and so is unreachable. Under a hoisted node_modules the only reachable copy can be the cookie 0.7 that express depends on, which exports parse/serialize and neither of the names astro wants, so the docs build fails: Named export 'parseCookie' not found. The requested module 'cookie' is a CommonJS module, which may not support all module.exports as named exports. This broke the npm, yarn-classic and yarn-4 smoke tests while pnpm and bun, which nest rather than hoist, stayed green. astro 7.1.1 was unaffected only because it imported parse/serialize, which cookie 0.7 does provide. Declare `cookie` on the docs project so a compatible copy is always in reach. Generated code never imports it — the entry exists solely to constrain resolution — so both the pin and the declaration say why.
The notes restate details of upstream packages that shift under us, so they go stale where nobody looks. The commits that introduced each pin carry the reasoning instead. Keep the `cookie` note at its declaration site in the docs generator, where it explains a dependency the generated project never imports, and make it self-contained now that there is nothing to point at.
1 task
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
4 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Dependency Updates
TypeScript Dependencies
Python Dependencies
Terraform Providers