chore(deps): bump the npm-version group across 7 directories with 32 updates

[dependabot]

Bumps the npm-version group with 8 updates in the /runtime/typescript directory:

Package	From	To
prettier	3.9.6	3.9.8
yaml	2.9.0	2.9.1
@types/node	26.4.1	26.6.1
dotenv	17.4.2	18.0.0
vitest	5.0.0	5.0.1
openai	7.10.0	7.18.0
@azure/identity	4.13.2	4.13.3
@anthropic-ai/sdk	0.124.0	0.127.0
@types/node	26.4.1	26.6.1
@anthropic-ai/sdk	0.124.0	0.127.0
@azure/identity	4.13.2	4.13.3
openai	7.10.0	7.18.0
prettier	3.9.6	3.9.8
yaml	2.9.0	2.9.1
@types/node	26.4.1	26.6.1

Bumps the npm-version group with 2 updates in the /schema directory: @typespec/http and @typespec/json-schema.
Bumps the npm-version group with 6 updates in the /vscode/prompty directory:

Package	From	To
@types/node	26.4.1	26.6.1
marked	18.0.11	18.0.13
@types/node	26.4.1	26.6.1
@vscode/vsce	3.9.2	4.0.0
js-yaml	5.4.1	5.4.2
mocha	12.0.0	12.0.2
typescript-eslint	8.69.0	8.70.0
js-yaml	5.4.1	5.4.2
@types/node	26.4.1	26.6.1
typescript-eslint	8.69.0	8.70.0

Bumps the npm-version group with 10 updates in the /vscode/prompty/packages/core directory:

Package	From	To
prettier	3.9.6	3.9.8
openai	7.10.0	7.18.0
@azure/identity	4.13.2	4.13.3
@anthropic-ai/sdk	0.124.0	0.127.0
js-yaml	5.4.1	5.4.2
@anthropic-ai/sdk	0.124.0	0.127.0
@azure/identity	4.13.2	4.13.3
@prompty/anthropic	2.0.0-beta.5	2.0.0
@prompty/core	2.0.0-beta.5	2.0.0
@prompty/foundry	2.0.0-beta.5	2.0.0
@prompty/openai	2.0.0-beta.5	2.0.0
js-yaml	5.4.1	5.4.2
openai	7.10.0	7.18.0
@types/vscode	1.136.0	1.138.0
prettier	3.9.6	3.9.8
@prompty/core	2.0.0-beta.5	2.0.0

Bumps the npm-version group with 4 updates in the /vscode/prompty/packages/server directory: yaml, @types/node, @prompty/core and webpack.
Bumps the npm-version group with 7 updates in the /vscode/prompty/packages/trace directory:

Package	From	To
typescript-eslint	8.69.0	8.70.0
react	19.2.8	19.3.0
@types/react	19.2.18	19.3.0
react-dom	19.2.8	19.3.0
@types/react-dom	19.2.7	19.3.0
@types/react	19.2.18	19.3.0
@types/react-dom	19.2.7	19.3.0
eslint-plugin-react-refresh	0.5.6	0.5.7
typescript-eslint	8.69.0	8.70.0
vite	8.2.2	8.3.0

Bumps the npm-version group with 5 updates in the /web directory:

Package	From	To
@astrojs/starlight	0.42.0	0.42.2
@mermaid-js/layout-elk	0.2.3	1.0.0
astro	7.3.1	7.3.3
mermaid	11.17.2	12.0.0
sass	1.104.0	1.104.1

Updates prettier from 3.9.6 to 3.9.8

Release notes

Sourced from prettier's releases.

3.9.8

• Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @​seiyab)

🔗 Changelog

3.9.7

• Support Angular 22.2
• Fix regressions in v3.9

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.8

diff

Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @​seiyab)

<!-- Input -->
If `module` is not a [`WebAssembly.Module`](https://github.com/prettier/prettier/blob/main/en-US/docs/WebAssembly/Reference/JavaScript_interface/Module) object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.7 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.8 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.

3.9.7

diff

Markdown: Prevent indentation drift in list-item code blocks (#19647, #19990 by @​Austin1serb, @​giaBaoJS)

<!-- Input -->
- [x] short first line.
  second paragraph at six spaces that wraps
  onto another line here.

<!-- Prettier 3.9.6 -->

 
short first line.
second paragraph at six spaces that wraps
    onto another line here.



<!-- Prettier 3.9.7 -->

 
short first line.
second paragraph at six spaces that wraps
onto another line here.

JavaScript: Fix embedded template literal idempotency (#19725 by @​fisker)

... (truncated)

Commits

• 4f2ab67 Release 3.9.8
• 3d82af8 Update Regex related dependencies (#20082)
• 5ec8db1 [3.9.x] Markdown: Don't let Liquid objects interrupt paragraphs (#20087)
• 5b142ed Release Release @​prettier/plugin-hermes@​0.2.3, @​prettier/plugin-oxc@​0.2.3, an...
• 0df8eb8 Bump Prettier dependency to 3.9.7
• 3cf6c8c Clean changelog_unreleased
• 0449af3 Release 3.9.7
• 43cd5b0 Allow verify markdown test with mdx parser
• ab8c911 Fix test on Node.js v26 (#19927)
• 4a5adf9 Fix tests
• Additional commits viewable in compare view

Updates yaml from 2.9.0 to 2.9.1

Release notes

Sourced from yaml's releases.

v2.9.1

• Limit recursive merge aliases (#685, #713)
• Simplify line unfolding during quoted string parsing (#714)

Commits

• 1440ecd 2.9.1
• c699bc5 fix: Simplify line unfolding during quoted string parsing (#714)
• d11ce77 fix: Limit recursive merge aliases (#713)
• c5f49f4 chore: Update docs-slate
• See full diff in compare view

Updates @types/node from 26.4.1 to 26.6.1

Commits

• See full diff in compare view

Updates dotenv from 17.4.2 to 18.0.0

Changelog

Sourced from dotenv's changelog.

18.0.0 (2026-09-17)

Added

• NEW: Dotenv now has a CLI. (#1022)

$ dotenv run -- node index.js
◇ injected env (2) from .env
Hello Dotenv

• NEW: Dotenv now has a fast parser thanks to @​homanp of superagent.sh. Pass config({ fast: true }), flag --fast, or set DOTENV_FAST=true to opt-in to ~2x faster character-scanner parser. (#1010)

$ dotenv run --fast -- node index.js
◇ injected env (2) from .env
Hello Dotenv

Changed

• Injecting message sent to stderr rather than stdout and tips removed (#1037)

Removed

• Remove tips (#1031)
• Remove skill files (#1032)
• Remove Spanish README (#1034)
• Remove .env.vault support (#1033)
• Remove preloading. Instead use cli dotenv run -- your-command (#1035)

Commits

• 2815fa8 18.0.0
• 451c6cb add spacing
• 7c7ed02 update README and changelog
• 7454f56 Merge pull request #1052 from motdotla/cli-cleanup
• f5de622 .cmd coverage
• 75289b1 changelog
• 33bd964 spawn for windows
• 2b4cc00 update changelog
• de91a69 cli cleanup
• fa8788e Merge pull request #1049 from webdevelopersrinu/fix-populate-null
• Additional commits viewable in compare view

Updates vitest from 5.0.0 to 5.0.1

Release notes

Sourced from vitest's releases.

v5.0.1

   🚀 Features

• ui:
  • Move trace attempts selector to viewer header  -  by @​hi-ogawa, Hiroshi Ogawa and Codex in vitest-dev/vitest#11189 (5dc4b)
  • Add focused trace view layout mode  -  by @​hi-ogawa, Hiroshi Ogawa, OpenCode (gpt-5.6-sol) and Codex in vitest-dev/vitest#11190 (376dc)

   🐞 Bug Fixes

• Exit 1 when vitest list fails collection  -  by @​hamed-bavar in vitest-dev/vitest#11145 and vitest-dev/vitest#11146 (6108b)
• Keep parse error details in static collection  -  by @​hamed-bavar in vitest-dev/vitest#11150 and vitest-dev/vitest#11151 (7c818)
• Avoid recursive prototype in automocking  -  by @​sheremet-va in vitest-dev/vitest#11195 (99fc5)
• Prevent false Vitest import resolution  -  by @​sheremet-va in vitest-dev/vitest#11196 (b426c)
• Keep metadata file when clearing the cache  -  by @​sheremet-va in vitest-dev/vitest#11199 (73614)
• Correct typos in error message and comments  -  by @​shinji00222 and Shinji in vitest-dev/vitest#11187 (115c3)
• Resolve ResolvedConfig exactOptionalPropertyTypes errors  -  by @​LukeAbby in vitest-dev/vitest#11175 (498fb)
• Share the server on self-referencing extends  -  by @​sheremet-va in vitest-dev/vitest#11034 (23dda)
• Warn when deprecated deps.optimizer.web is used  -  by @​im10furry in vitest-dev/vitest#11214 (2ce29)
• browser:
  • Avoid double quotes in config.define  -  by @​sheremet-va in vitest-dev/vitest#11198 (972e2)
• doctor:
  • Measure vm pools for custom environments  -  by @​sheremet-va in vitest-dev/vitest#11212 (91ab1)
• expect:
  • Correct return value in toMatchAriaSnapshot  -  by @​sheremet-va in vitest-dev/vitest#11208 (c119b)
• fakeTimers:
  • Force queueMicrotask and nextTick in toNotFake  -  by @​kingmakeruix, kingmakeruix, Hiroshi Ogawa, Codex and @​hi-ogawa in vitest-dev/vitest#11261 (a47d7)
• snapshot:
  • Report obsolete keys next to skipped tests  -  by @​hamed-bavar, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in vitest-dev/vitest#11157 and vitest-dev/vitest#11158 (17e2b)
• types:
  • Make public declarations self-contained  -  by @​ZoeySigel in vitest-dev/vitest#11141 (45546)
• ui:
  • Fix collapse/expand suite with file name search  -  by @​hi-ogawa, Hiroshi Ogawa and Codex in vitest-dev/vitest#11260 (0a712)
  • Fix explorer file summary count  -  by @​hi-ogawa, Hiroshi Ogawa, OpenCode (gpt-5.6-sol) and Codex in vitest-dev/vitest#11125 (05982)
• utils:
  • Fix deepMerge to handle prototype  -  by @​hi-ogawa, Hiroshi Ogawa and Codex in vitest-dev/vitest#11215 (4944c)

    View changes on GitHub

Commits

• 03630a5 chore: release v5.0.1 (#11275)
• a47d790 fix(fakeTimers): force queueMicrotask and nextTick in toNotFake (#11261)
• 2ce29d5 fix: warn when deprecated deps.optimizer.web is used (#11214)
• ccd6d05 docs: fix typecheck exclude default in documentation (#11223)
• 91ab158 fix(doctor): measure vm pools for custom environments (#11212)
• 23dda73 fix: share the server on self-referencing extends (#11034)
• 498fbe9 fix: resolve ResolvedConfig exactOptionalPropertyTypes errors (#11175)
• 115c3f6 fix: correct typos in error message and comments (#11187)
• 7361465 fix: keep metadata file when clearing the cache (#11199)
• 972e24b fix(browser): avoid double quotes in config.define (#11198)
• Additional commits viewable in compare view

Updates openai from 7.10.0 to 7.18.0

Release notes

Sourced from openai's releases.

v7.18.0

7.18.0 (2026-09-17)

Features

• api: add agent session model settings (#2755) (d1385bb)
• api: add audio-mini model choices (#2759) (b350d59)
• api: add managed Responses WebSocket sessions (#2760) (a38c533)
• api: add prompt-cache prewarming (#2761) (f468949)

Bug Fixes

• api: validate WebSocket results and preserve header defaults (#2763) (a7e830b)

Chores

• api: clarify incoming SIP call ID usage (#2758) (67e9d29)
• api: update image request examples (#2762) (1d244f0)

v7.17.0

7.17.0 (2026-09-16)

Features

• api: add compaction progress events (#2749) (425502d)

Bug Fixes

• ci: retry transient Deno download failures (#2752) (e39037b)
• preserve chat runner abort reasons (#2607) (eda4d0c)
• realtime: preserve native WebSocket error causes (#2715) (58fa72a)
• responses: reject function-based API keys in WebSocket constructors (#2586) (eea7618)
• runners: reject unfinished turns in streaming runTools (#2716) (937ed67)
• streaming: emit terminal SSE events missing a trailing blank line (#2726) (94d6418)
• zod: omit impossible optional branch in strict schemas (#2751) (2b4c2c7)

Chores

• update lint tooling and tailor anti-slop for the SDK (#2753) (21a03c2)

Documentation

• examples: preserve split UTF-8 in raw stream consumer (#2714) (f44152a)

... (truncated)

Changelog

Sourced from openai's changelog.

7.18.0 (2026-09-17)

Features

• api: add agent session model settings (#2755) (d1385bb)
• api: add audio-mini model choices (#2759) (b350d59)
• api: add managed Responses WebSocket sessions (#2760) (a38c533)
• api: add prompt-cache prewarming (#2761) (f468949)

Bug Fixes

• api: validate WebSocket results and preserve header defaults (#2763) (a7e830b)

Chores

• api: clarify incoming SIP call ID usage (#2758) (67e9d29)
• api: update image request examples (#2762) (1d244f0)

7.17.0 (2026-09-16)

Features

• api: add compaction progress events (#2749) (425502d)

Bug Fixes

• ci: retry transient Deno download failures (#2752) (e39037b)
• preserve chat runner abort reasons (#2607) (eda4d0c)
• realtime: preserve native WebSocket error causes (#2715) (58fa72a)
• responses: reject function-based API keys in WebSocket constructors (#2586) (eea7618)
• runners: reject unfinished turns in streaming runTools (#2716) (937ed67)
• streaming: emit terminal SSE events missing a trailing blank line (#2726) (94d6418)
• zod: omit impossible optional branch in strict schemas (#2751) (2b4c2c7)

Chores

• update lint tooling and tailor anti-slop for the SDK (#2753) (21a03c2)

Documentation

• examples: preserve split UTF-8 in raw stream consumer (#2714) (f44152a)

7.16.0 (2026-09-15)

... (truncated)

Commits

• d16697f release: 7.18.0 (#2757)
• a7e830b fix(api): validate WebSocket results and preserve header defaults (#2763)
• a38c533 feat(api): add managed Responses WebSocket sessions (#2760)
• 1d244f0 chore(api): update image request examples (#2762)
• f468949 feat(api): add prompt-cache prewarming (#2761)
• b350d59 feat(api): add audio-mini model choices (#2759)
• 1f9a7af test(x509): stabilize retry budget timing (#2756)
• 67e9d29 chore(api): clarify incoming SIP call ID usage (#2758)
• d1385bb feat(api): add agent session model settings (#2755)
• 0118f6c release: 7.17.0 (#2750)
• Additional commits viewable in compare view

Updates @azure/identity from 4.13.2 to 4.13.3

Changelog

Sourced from @​azure/identity's changelog.

4.13.3 (2026-09-10)

Features Added

• Bumped the minimum @azure/msal-node dependency to ^6.0.0 to provide Azure Arc user-assigned managed identity support. #39927

Bugs Fixed

• Fixed AzurePipelinesCredential to include only relevant details in error messages and logs when the OIDC token request fails. #39774
• Fixed InteractiveBrowserCredential failing to authenticate when the user's default browser is already running and only permits a single instance. The browser is no longer launched with newInstance, which on macOS passed open --new. #39814
• Fixed an issue where DefaultAzureCredential does not pass constructor options to ManagedIdentityCredential when selected through AZURE_TOKEN_CREDENTIALS. #39927

Other Changes

• Preserve caught errors as the cause when wrapping them. #39423

Commits

• b9b7a5d [Identity] Azure Arc Support (#39927)
• ce47dbc [ESLint] Restore no-useless-assignment recommended rule to error (#39784)
• b87e82b [ESLint] Restore preserve-caught-error recommended rule to error (#39580)
• 817a3a3 [identity] Don't force a new browser instance when opening the auth page (#39...
• 85d4f76 [identity] Response format Azure Pipelines Credential (#39774)
• 83f3dac Restore Identity 4.13.2 GA
• fcb12a4 [identity] Don't force a new browser instance when opening the auth page (#39...
• 96a244f [ESLint] Restore no-useless-assignment recommended rule to error (#39784)
• 2e6883d [Identity] Unify changelog (#39816)
• ae994a8 [identity] Response format Azure Pipelines Credential (#39774)
• Additional commits viewable in compare view

Updates @anthropic-ai/sdk from 0.124.0 to 0.127.0

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk: v0.127.0

0.127.0 (2026-09-18)

Full Changelog: sdk-v0.126.0...sdk-v0.127.0

Features

• api: add group with display_name to rate limits, deprecate group_type (2575d97)
• tools: add compactBeforeNextTurn() to the tool runner (#682) (9f75ca6)

Bug Fixes

• BetaMessageStream: stop coercing a null compaction_delta content into "null" (#655) (dbd6845)
• client: don't retry requests whose body is a stream or iterator (eebc1b9)
• client: join multiple anthropic-beta values with a comma and no space (#638) (e0cb1ff)
• client: make pagination exports on the client namespace type-only (5adea1f)
• internal: drop jest from tsconfig types (60588af)
• middleware: echo a streamed compaction summary in the fallback continuation (#657) (2e0f004)
• tools: keep $defs when transformJSONSchema root is a $ref (#687) (57a9f30)

Performance Improvements

• client: skip formatting request details when debug logging is off (2b29ed2)

Chores

• ci: publish releases from Node 24 with its bundled npm (6b3c6f5)
• docs: add descriptions for enum values and path parameters (cb254c4)
• docs: clarify the compaction tool_changes and tool change descriptions (5a695eb)
• internal: build the sub-packages with TypeScript 6.0.3 (8a69ff5)
• internal: build with TypeScript 6.0.3 and typescript-eslint 8.58.0 (01f3ee6)
• internal: keep lib/internal out of the published exports map (763fb43)
• internal: re-export pagination classes with a plain export list (c77bdc3)
• internal: share a single Simplify type util (31d5e75)
• internal: switch unit tests from jest to vitest (110542d, 788c9c6)

sdk: v0.126.0

0.126.0 (2026-09-15)

Full Changelog: sdk-v0.125.0...sdk-v0.126.0

Features

• api: add auto mode tool permissions for Managed Agents (7829b43)
• api: add compaction parameter and signed compaction blocks (beta) (05fd878)
• api: add enum types for workspace data-residency geo fields (89c5920)
• api: add thinking_mismatch_allowed entries to input_transformations (beta) (1f32871)

... (truncated)

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.127.0 (2026-09-18)

Full Changelog: sdk-v0.126.0...sdk-v0.127.0

Features

• api: add group with display_name to rate limits, deprecate group_type (2575d97)
• tools: add compactBeforeNextTurn() to the tool runner (#682) (9f75ca6)

Bug Fixes

• BetaMessageStream: stop coercing a null compaction_delta content into "null" (#655) (dbd6845)
• client: don't retry requests whose body is a stream or iterator (eebc1b9)
• client: join multiple anthropic-beta values with a comma and no space (#638) (e0cb1ff)
• client: make pagination exports on the client namespace type-only (5adea1f)
• internal: drop jest from tsconfig types (60588af)
• middleware: echo a streamed compaction summary in the fallback continuation (#657) (2e0f004)
• tools: keep $defs when transformJSONSchema root is a $ref (#687) (57a9f30)

Performance Improvements

• client: skip formatting request details when debug logging is off (2b29ed2)

Chores

• ci: publish releases from Node 24 with its bundled npm (6b3c6f5)
• docs: add descriptions for enum values and path parameters (cb254c4)
• docs: clarify the compaction tool_changes and tool change descriptions (5a695eb)
• internal: build the sub-packages with TypeScript 6.0.3 (8a69ff5)
• internal: build with TypeScript 6.0.3 and typescript-eslint 8.58.0 (01f3ee6)
• internal: keep lib/internal out of the published exports map (763fb43)
• internal: re-export pagination classes with a plain export list (c77bdc3)
• internal: share a single Simplify type util (31d5e75)
• internal: switch unit tests from jest to vitest (110542d, 788c9c6)

0.126.0 (2026-09-15)

Full Changelog: sdk-v0.125.0...sdk-v0.126.0

Features

• api: add auto mode tool permissions for Managed Agents (7829b43)
• api: add compaction parameter and signed compaction blocks (beta) (05fd878)
• api: add enum types for workspace data-residency geo fields (89c5920)
• api: add thinking_mismatch_allowed entries to input_transformations (beta) (1f32871)
• api: add url_sources to the web fetch tool (ee23dd2)
• api: add workspace_id parameter to user profiles methods (f5b9fb7)

... (truncated)

Commits

• 3c5d9c0 Merge pull request #1203 from anthropics/release-please--branches--main--chan...
• 7c57af8 docs(changelog): list the jest-to-vitest switch once in 0.127.0
• 1b93f4e chore: release main
• 2575d97 feat(api): add group with display_name to rate limits, deprecate group_type
• 83fcfad codegen metadata
• 64ca3d3 codegen metadata
• cb254c4 chore(docs): add descriptions for enum values and path parameters
• eebc1b9 fix(client): don't retry requests whose body is a stream or iterator
• 518eda2 codegen metadata
• 8a69ff5 chore(internal): build the sub-packages with TypeScript 6.0.3
• Additional commits viewable in compare view

Updates @types/node from 26.4.1 to 26.6.1

Commits

• See full diff in compare view

Updates @anthropic-ai/sdk from 0.124.0 to 0.127.0

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk: v0.127.0

0.127.0 (2026-09-18)

Full Changelog: sdk-v0.126.0...sdk-v0.127.0

Features

• api: add group with display_name to rate limits, deprecate group_type (2575d97)
• tools: add compactBeforeNextTurn() to the tool runner (#682) (9f75ca6)

Bug Fixes

• BetaMessageStream: stop coercing a null compaction_delta content into "null" (#655) (dbd6845)
• client: don't retry requests whose body is a stream or iterator (eebc1b9)
• client: join multiple anthropic-beta values with a comma and no space (#638) (

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.