chore(deps): bump the npm-version group across 7 directories with 20 updates

[dependabot]

Bumps the npm-version group with 4 updates in the /runtime/typescript directory: yaml, @types/node, openai and @anthropic-ai/sdk.
Bumps the npm-version group with 2 updates in the /schema directory: @typespec/http and @typespec/json-schema.
Bumps the npm-version group with 5 updates in the /vscode/prompty directory:

Package	From	To
@types/node	26.4.1	26.5.1
marked	18.0.11	18.0.13
@types/node	26.4.1	26.5.1
js-yaml	5.4.1	5.4.2
mocha	12.0.0	12.0.1
typescript-eslint	8.69.0	8.70.0
js-yaml	5.4.1	5.4.2
@types/node	26.4.1	26.5.1
typescript-eslint	8.69.0	8.70.0

Bumps the npm-version group with 4 updates in the /vscode/prompty/packages/core directory: openai, @anthropic-ai/sdk, js-yaml and @types/vscode.
Bumps the npm-version group with 2 updates in the /vscode/prompty/packages/server directory: yaml and @types/node.
Bumps the npm-version group with 6 updates in the /vscode/prompty/packages/trace directory:

Package	From	To
typescript-eslint	8.69.0	8.70.0
react	19.2.8	19.3.0
@types/react	19.2.18	19.3.0
react-dom	19.2.8	19.3.0
@types/react-dom	19.2.7	19.3.0
@types/react	19.2.18	19.3.0
@types/react-dom	19.2.7	19.3.0
typescript-eslint	8.69.0	8.70.0
vite	8.2.2	8.3.0

Bumps the npm-version group with 4 updates in the /web directory: @mermaid-js/layout-elk, astro, mermaid and sass.

Updates yaml from 2.9.0 to 2.9.1

Release notes

Sourced from yaml's releases.

v2.9.1

• Limit recursive merge aliases (#685, #713)
• Simplify line unfolding during quoted string parsing (#714)

Commits

• 1440ecd 2.9.1
• c699bc5 fix: Simplify line unfolding during quoted string parsing (#714)
• d11ce77 fix: Limit recursive merge aliases (#713)
• c5f49f4 chore: Update docs-slate
• See full diff in compare view

Updates @types/node from 26.4.1 to 26.5.1

Commits

• See full diff in compare view

Updates openai from 7.10.0 to 7.15.0

Release notes

Sourced from openai's releases.

v7.15.0

7.15.0 (2026-09-10)

Features

• api: add Agents API (#2719) (20a47f9)

v7.14.0

7.14.0 (2026-09-10)

Features

• api: Add Live API (c037ba7)

Bug Fixes

• deps-dev: bump joi from 18.2.3 to 18.2.5 in /ecosystem-tests/vercel-edge (#2702) (029b805)
• deps: bump next from 15.5.23 to 15.5.25 in /ecosystem-tests/vercel-edge (#2703) (e9446db)
• deps: bump sharp from 0.35.3 to 0.35.4 in /ecosystem-tests/vercel-edge (#2704) (ca95705)
• deps: update remaining tooling and fixture patches (#2712) (bcaabee)

v7.13.0

7.13.0 (2026-09-09)

Features

• api: Add API key expiration controls (#2708) (b416806)

v7.12.1

7.12.1 (2026-09-09)

Includes the GPT Image 2.5 support from 7.12.0, which was not published to npm.

Features

• api: add GPT Image 2.5 models and image options (#2705) (6500a16)

Bug Fixes

• ci: run Cloudflare example regressions before release (#2706) (c5cc31c)

v7.12.0

7.12.0 (2026-09-08)

... (truncated)

Changelog

Sourced from openai's changelog.

7.15.0 (2026-09-10)

Features

• api: add Agents API (#2719) (20a47f9)

7.14.0 (2026-09-10)

Features

• api: Add Live API (c037ba7)

Bug Fixes

• deps-dev: bump joi from 18.2.3 to 18.2.5 in /ecosystem-tests/vercel-edge (#2702) (029b805)
• deps: bump next from 15.5.23 to 15.5.25 in /ecosystem-tests/vercel-edge (#2703) (e9446db)
• deps: bump sharp from 0.35.3 to 0.35.4 in /ecosystem-tests/vercel-edge (#2704) (ca95705)
• deps: update remaining tooling and fixture patches (#2712) (bcaabee)

7.13.0 (2026-09-09)

Features

• api: Add API key expiration controls (#2708) (b416806)

7.12.1 (2026-09-09)

Includes the GPT Image 2.5 support from 7.12.0, which was not published to npm.

Features

• api: add GPT Image 2.5 models and image options (#2705) (6500a16)

Bug Fixes

• ci: run Cloudflare example regressions before release (#2706) (c5cc31c)

7.12.0 (2026-09-08)

Features

• api: add GPT Image 2.5 models and image options (#2705) (6500a16)

... (truncated)

Commits

• 50eb4b2 release: 7.15.0 (#2720)
• 20a47f9 feat(api): add Agents API (#2719)
• c1f88cd release: 7.14.0 (#2711)
• c037ba7 feat(api) Add Live API (#2718)
• fe2d6a3 test: reduce CI subprocess and validation overhead (#2713)
• bcaabee fix(deps): update remaining tooling and fixture patches (#2712)
• 029b805 fix(deps-dev): bump joi from 18.2.3 to 18.2.5 in /ecosystem-tests/vercel-edge...
• e9446db fix(deps): bump next from 15.5.23 to 15.5.25 in /ecosystem-tests/vercel-edge ...
• ca95705 fix(deps): bump sharp from 0.35.3 to 0.35.4 in /ecosystem-tests/vercel-edge (...
• a661a7d release: 7.13.0 (#2710)
• Additional commits viewable in compare view

Updates @anthropic-ai/sdk from 0.124.0 to 0.125.0

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk: v0.125.0

0.125.0 (2026-09-10)

Full Changelog: sdk-v0.124.0...sdk-v0.125.0

Features

• api: add auto mode tool permissions for Managed Agents (7f5e2c6)
• api: add content_too_large web_fetch tool error code (f06416e)
• api: add the user-profiles-2026-09-04 beta value and external_user_details to user profiles (318d42d)
• api: support mounting public GitHub repositories without an authorization_token in Managed Agents sessions (9e2d945)

Chores

• client: clean up the unused idempotency request option (4ce2772)
• docs: correct the environment scope field description (835c677)
• internal: restore package version (b43a7f6)
• internal: stop stamping the package version into generated files (80ace5e)
• tests: restore empty test package marker files (4f27519)

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.125.0 (2026-09-10)

Full Changelog: sdk-v0.124.0...sdk-v0.125.0

Features

• api: add auto mode tool permissions for Managed Agents (7f5e2c6)
• api: add content_too_large web_fetch tool error code (f06416e)
• api: add the user-profiles-2026-09-04 beta value and external_user_details to user profiles (318d42d)
• api: support mounting public GitHub repositories without an authorization_token in Managed Agents sessions (9e2d945)

Chores

• client: clean up the unused idempotency request option (4ce2772)
• docs: correct the environment scope field description (835c677)
• internal: restore package version (b43a7f6)
• internal: stop stamping the package version into generated files (80ace5e)
• tests: restore empty test package marker files (4f27519)

Commits

• 135f71e Merge pull request #1184 from anthropics/release-please--branches--main--chan...
• 415537b chore: release main
• 7f5e2c6 feat(api): add auto mode tool permissions for Managed Agents
• 9e2d945 feat(api): support mounting public GitHub repositories without an authorizati...
• 96ecb87 environments: the worker runs on the work item's session token alone when one...
• 318d42d feat(api): add the user-profiles-2026-09-04 beta value and external_user_deta...
• 835c677 chore(docs): correct the environment scope field description
• 4ce2772 chore(client): clean up the unused idempotency request option
• f06416e feat(api): add content_too_large web_fetch tool error code
• b43a7f6 chore(internal): restore package version
• Additional commits viewable in compare view

Updates @types/node from 26.4.1 to 26.5.1

Commits

• See full diff in compare view

Updates @anthropic-ai/sdk from 0.124.0 to 0.125.0

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk: v0.125.0

0.125.0 (2026-09-10)

Full Changelog: sdk-v0.124.0...sdk-v0.125.0

Features

• api: add auto mode tool permissions for Managed Agents (7f5e2c6)
• api: add content_too_large web_fetch tool error code (f06416e)
• api: add the user-profiles-2026-09-04 beta value and external_user_details to user profiles (318d42d)
• api: support mounting public GitHub repositories without an authorization_token in Managed Agents sessions (9e2d945)

Chores

• client: clean up the unused idempotency request option (4ce2772)
• docs: correct the environment scope field description (835c677)
• internal: restore package version (b43a7f6)
• internal: stop stamping the package version into generated files (80ace5e)
• tests: restore empty test package marker files (4f27519)

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.125.0 (2026-09-10)

Full Changelog: sdk-v0.124.0...sdk-v0.125.0

Features

• api: add auto mode tool permissions for Managed Agents (7f5e2c6)
• api: add content_too_large web_fetch tool error code (f06416e)
• api: add the user-profiles-2026-09-04 beta value and external_user_details to user profiles (318d42d)
• api: support mounting public GitHub repositories without an authorization_token in Managed Agents sessions (9e2d945)

Chores

• client: clean up the unused idempotency request option (4ce2772)
• docs: correct the environment scope field description (835c677)
• internal: restore package version (b43a7f6)
• internal: stop stamping the package version into generated files (80ace5e)
• tests: restore empty test package marker files (4f27519)

Commits

• 135f71e Merge pull request #1184 from anthropics/release-please--branches--main--chan...
• 415537b chore: release main
• 7f5e2c6 feat(api): add auto mode tool permissions for Managed Agents
• 9e2d945 feat(api): support mounting public GitHub repositories without an authorizati...
• 96ecb87 environments: the worker runs on the work item's session token alone when one...
• 318d42d feat(api): add the user-profiles-2026-09-04 beta value and external_user_deta...
• 835c677 chore(docs): correct the environment scope field description
• 4ce2772 chore(client): clean up the unused idempotency request option
• f06416e feat(api): add content_too_large web_fetch tool error code
• b43a7f6 chore(internal): restore package version
• Additional commits viewable in compare view

Updates openai from 7.10.0 to 7.15.0

Release notes

Sourced from openai's releases.

v7.15.0

7.15.0 (2026-09-10)

Features

• api: add Agents API (#2719) (20a47f9)

v7.14.0

7.14.0 (2026-09-10)

Features

• api: Add Live API (c037ba7)

Bug Fixes

• deps-dev: bump joi from 18.2.3 to 18.2.5 in /ecosystem-tests/vercel-edge (#2702) (029b805)
• deps: bump next from 15.5.23 to 15.5.25 in /ecosystem-tests/vercel-edge (#2703) (e9446db)
• deps: bump sharp from 0.35.3 to 0.35.4 in /ecosystem-tests/vercel-edge (#2704) (ca95705)
• deps: update remaining tooling and fixture patches (#2712) (bcaabee)

v7.13.0

7.13.0 (2026-09-09)

Features

• api: Add API key expiration controls (#2708) (b416806)

v7.12.1

7.12.1 (2026-09-09)

Includes the GPT Image 2.5 support from 7.12.0, which was not published to npm.

Features

• api: add GPT Image 2.5 models and image options (#2705) (6500a16)

Bug Fixes

• ci: run Cloudflare example regressions before release (#2706) (c5cc31c)

v7.12.0

7.12.0 (2026-09-08)

... (truncated)

Changelog

Sourced from openai's changelog.

7.15.0 (2026-09-10)

Features

• api: add Agents API (#2719) (20a47f9)

7.14.0 (2026-09-10)

Features

• api: Add Live API (c037ba7)

Bug Fixes

• deps-dev: bump joi from 18.2.3 to 18.2.5 in /ecosystem-tests/vercel-edge (#2702) (029b805)
• deps: bump next from 15.5.23 to 15.5.25 in /ecosystem-tests/vercel-edge (#2703) (e9446db)
• deps: bump sharp from 0.35.3 to 0.35.4 in /ecosystem-tests/vercel-edge (#2704) (ca95705)
• deps: update remaining tooling and fixture patches (#2712) (bcaabee)

7.13.0 (2026-09-09)

Features

• api: Add API key expiration controls (#2708) (b416806)

7.12.1 (2026-09-09)

Includes the GPT Image 2.5 support from 7.12.0, which was not published to npm.

Features

• api: add GPT Image 2.5 models and image options (#2705) (6500a16)

Bug Fixes

• ci: run Cloudflare example regressions before release (#2706) (c5cc31c)

7.12.0 (2026-09-08)

Features

• api: add GPT Image 2.5 models and image options (#2705) (6500a16)

... (truncated)

Commits

• 50eb4b2 release: 7.15.0 (#2720)
• 20a47f9 feat(api): add Agents API (#2719)
• c1f88cd release: 7.14.0 (#2711)
• c037ba7 feat(api) Add Live API (#2718)
• fe2d6a3 test: reduce CI subprocess and validation overhead (#2713)
• bcaabee fix(deps): update remaining tooling and fixture patches (#2712)
• 029b805 fix(deps-dev): bump joi from 18.2.3 to 18.2.5 in /ecosystem-tests/vercel-edge...
• e9446db fix(deps): bump next from 15.5.23 to 15.5.25 in /ecosystem-tests/vercel-edge ...
• ca95705 fix(deps): bump sharp from 0.35.3 to 0.35.4 in /ecosystem-tests/vercel-edge (...
• a661a7d release: 7.13.0 (#2710)
• Additional commits viewable in compare view

Updates yaml from 2.9.0 to 2.9.1

Release notes

Sourced from yaml's releases.

v2.9.1

• Limit recursive merge aliases (#685, #713)
• Simplify line unfolding during quoted string parsing (#714)

Commits

• 1440ecd 2.9.1
• c699bc5 fix: Simplify line unfolding during quoted string parsing (#714)
• d11ce77 fix: Limit recursive merge aliases (#713)
• c5f49f4 chore: Update docs-slate
• See full diff in compare view

Updates @types/node from 26.4.1 to 26.5.1

Commits

• See full diff in compare view

Updates @typespec/http from 1.15.0 to 1.16.0

Commits

• 54d93a9 Bump versions for september release (#11899)
• fd3e840 Add release notes for TypeSpec 1.16.0 (#11894)
• 6be8d0a Honor @​encode(string) on C# boolean model properties (#11882)
• b189311 Fix Agentic Triage model compatibility (#11892)
• cb51579 Prevent C# model factories from instantiating abstract unknown variants (#11878)
• f16f4d4 [http-client-java] Support request header collection prefixes (#11887)
• cb580e5 fix(http-client-csharp): restrict plugins and NuGet downloads in hosted mode ...
• 462a2b7 Fix resolution of the external dependencies. (#11742)
• 0bb43ac Fix C# ClientResult conversions for streaming events (#11858)
• febb566 Fix Agentic Triage retired model failure (#11876)
• Additional commits viewable in compare view

Updates @typespec/json-schema from 1.15.0 to 1.16.0

Release notes

Sourced from @​typespec/json-schema's releases.

typespec-stable@1.16.0

@​typespec/compiler

Features

• #11777 Add sanitizePathSegment helper to make a value coming from a TypeSpec spec safe to use as a single path segment. Path separators, drive letter separators and values only made of . are replaced with _.

  sanitizePathSegment("2021-10-01-preview"); // "2021-10-01-preview"
  sanitizePathSegment("../../etc/passwd"); // ".._.._etc_passwd"

• #11851 Add support for defining a linter ruleset in a standalone yaml file and referencing it with the file: prefix in linter.extends. This lets a repository share and version a set of linter rules without depending on a library release.

  # tspconfig.yaml
  linter:
    extends:
      - "file:../common-rules.yaml"

  # common-rules.yaml
  extends:
    - "@typespec/best-practices/recommended"
  enable:
    "@typespec/best-practices/new-rule": true
  disable:
    "@typespec/best-practices/foo": "This rule is too strict for this repository"

• #11489 Add a new experimental $provideTypeInfo library provider and program.getTypeInfo(type) API allowing libraries to contribute extra, domain-specific information about types. Unlike the $onValidate lifecycle hook, a provider never runs during compilation and must not mutate the type graph — it is invoked lazily and on demand (e.g. by the language server for hover documentation, or by tooling querying the type).

  Providers are gated by the type-info-provider compiler feature, scoped to the package that declares it: a library opts in via its own tspconfig.yaml and consumers do not need to enable anything.

  // A library exports a provider (use `defineTypeInfoProvider` for typing):
  export const $provideTypeInfo = defineTypeInfoProvider(({ program, target }) => {
    if (target.kind !== "Operation") return undefined;
    return { content: "extra info about this operation" };
  });
  // Tooling / language server queries it (merges every library's contribution):
  const info = program.getTypeInfo(type);

• #11771 Add experimental support for an extends clause on union statements to constrain every variant to a common data type.

  Enable the union-extends compiler feature in tspconfig.yaml to use the clause.

  model PetBase {

... (truncated)

Commits

• 54d93a9 Bump versions for september release (#11899)
• fd3e840 Add release notes for TypeSpec 1.16.0 (#11894)
• 6be8d0a Honor @​encode(string) on C# boolean model properties (#11882)
• b189311 Fix Agentic Triage model compatibility (#11892)
• cb51579 Prevent C# model factories from instantiating abstract unknown variants (#11878)
• f16f4d4 [http-client-java] Support request header collection prefixes (#11887)
• cb580e5 fix(http-client-csharp): restrict plugins and NuGet downloads in hosted mode ...
• 462a2b7 Fix resolution of the external dependencies. (#11742)
• 0bb43ac Fix C# ClientResult conversions for streaming events (#11858)
• febb566 Fix Agentic Triage retired model failure (#11876)
• Additional commits viewable in compare view

Updates @types/node from 26.4.1 to 26.5.1

Commits

• See full diff in compare view

Updates marked from 18.0.11 to 18.0.13

Release notes

Sourced from marked's releases.

v18.0.13

18.0.13 (2026-09-12)

Bug Fixes

• allow tabs in the thematic break that ends a list item (#4087) (afbb27c)
• avoid O(n^2) scanning in reflinkSearch (#4090) (c6a25bb)
• case fold reference link labels (#4077) (aed9336)
• drop the leading whitespace after a hard line break (#4075) (123ce04)
• match html block start conditions when ending a list item (#4072) (c2facac)
• respect raw tokens when closing link labels (#4066) (ef394f7)
• strip a tab that follows spaces in an indented code block (#4080) (dbb393d)

v18.0.12

18.0.12 (2026-09-07)

Bug Fixes

• allow a tab before the closing sequence of an ATX heading (#4084) (4417582)
• allow one more level of nested brackets in a link label (#4064) (37b28d8)
• do not add a newline to an empty code block (#4073) (23b1706)
• escape character references in autolink destinations (#4053) (8f432f0)
• reject GFM email autolink when the domain ends in _ or - (#4063) (df57534)
• reject invalid characters in HTML tag names (#4083) (300bb1d)
• remove up to the fence indentation from each content line (#4074) (0244f08)

Commits

• 634f810 chore(release): 18.0.13 [skip ci]
• 2a66071 docs: add AtlasDocs to the list of tools using Marked (#4093)
• c2facac fix: match html block start conditions when ending a list item (#4072)
• ef394f7 fix: respect raw tokens when closing link labels (#4066)
• c6a25bb fix: avoid O(n^2) scanning in reflinkSearch (#4090)
• a43c064 chore(deps-dev): bump js-yaml from 3.14.2 to 3.15.2 (#4089)
• afbb27c fix: allow tabs in the thematic break that ends a list item (#4087)
• aed9336 fix: case fold reference link labels (#4077)
• 123ce04 fix: drop the leading whitespace after a hard line break (#4075)
• dbb393d fix: strip a tab that follows spaces in an indented code block (#4080)
• Additional commits viewable in compare view

Updates @types/node from 26.4.1 to 26.5.1

Commits

• See full diff in compare view

Updates js-yaml from 5.4.1 to 5.4.2

Changelog

Sourced from js-yaml's changelog.

[5.4.2] - 2026-09-13

Fixed

• forceQuotes no longer quotes non-string scalars, #798.

Commits

• 494400b 5.4.2 released
• 6d8adb4 Fix forceQuotes quoting non-string scalars, #798
• See full diff in compare view

Updates mocha from 12.0.0 to 12.0.1

Release notes

Sourced from mocha's releases.

v12.0.1

12.0.1 (2026-09-08)

🩹 Fixes

• bump serialize-javascript to ^7.1.1 (#6278) (02558a3)
• deps: update dependency find-up to v8 (#5747) (ee11d29)
• deps: update dependency is-path-inside to v4 (#5748) (5b27e3a)
• deps: update dependency starlight-blog to ^0.29.0 (#6248) (532b82b)
• keep unknown config values from becoming test specs (#6244) (15aa7d1)
• only reject positional args that are entirely numeric (#6222) (1633779)
• reporter: split err.stack at trailing frame block so embedded stacks render once (#5997) (90f48e4)

📚 Documentation

• blog: fixup v12 blog (#6258) (6bcbee4)
• fix minor API documentation issue (#6241) (683fd10)
• publish v12 stable blog (#6249) (d5ad803)

🧹 Chores

• auto-add GitHub items to project (#5686) (d24c320)
• convert lib/runner.js to ESM (#6260) (123b2d5)
• deps: update actions/add-to-project action to v2 (#6276) (00f873b)
• deps: update actions/github-script action to v9 (#6277) (49ed525)
• deps: update dependency astro to v7.2.9 (#6223) (513bd50)
• deps: update dependency eslint to v10.9.1 (#6251) (e28b90c)
• deps: update dependency eslint-plugin-n to v18.3.0 (#6240) (3a11840)
• deps: update dependency globals to v17.11.0 (#6243) (1cf345b)
• deps: update dependency globals to v17.12.0 (#6288) (97b8df6)
• deps: update dependency js-yaml to v5.4.1 (#6247) (9593caa)
• deps: update dependency knip to v6.32.3 (#6224) (6781fa1)
• deps: update dependency knip to v6.34.0 (#6279) (85ff1b6)
• deps: update dependency rollup to v4.63.1 (#6274) (e5a779e)
• deps: update dependency serialize-javascript to v7.1.0 (#6239) (77e4d4a)
• deps: update dependency webpack to v5.110.1 (#6275) (ec436d5)
• deps: update matteogabriele/agentscan-action action to v2.5.0 (#6280) (0bb7925)
• remove unused .lintstagedrc.json (#6270) (d84fdbf)
• update spam filter (

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.