Skip to content

build(deps): bump the npm-minor-patch group across 2 directories with 14 updates - #554

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/e2e/npm-minor-patch-186cc38a8d
Open

build(deps): bump the npm-minor-patch group across 2 directories with 14 updates#554
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/e2e/npm-minor-patch-186cc38a8d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 23, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-minor-patch group with 1 update in the /e2e directory: @types/node.
Bumps the npm-minor-patch group with 12 updates in the /frontend directory:

Package From To
@ai-sdk/openai 4.0.36 4.0.44
@assistant-ui/react 0.15.13 0.15.15
@assistant-ui/react-ai-sdk 1.4.5 1.4.6
@assistant-ui/react-markdown 0.14.10 0.14.11
@tanstack/react-virtual 3.14.9 3.14.10
dompurify 3.4.13 3.4.14
@vitejs/plugin-react 6.0.5 6.1.0
concurrently 10.0.4 10.0.5
globals 17.9.0 17.11.0
typescript-eslint 8.66.0 8.67.0
vite 8.2.1 8.2.2
vitest 4.1.10 4.1.11

Updates @types/node from 26.1.2 to 26.2.0

Commits

Updates @types/node from 26.1.2 to 26.2.0

Commits

Updates @ai-sdk/openai from 4.0.36 to 4.0.44

Changelog

Sourced from @​ai-sdk/openai's changelog.

4.0.44

Patch Changes

  • e6087c9: fix: handle empty string tool call IDs
  • Updated dependencies [e6087c9]
    • @​ai-sdk/provider-utils@​5.0.28

4.0.43

Patch Changes

  • a062795: fix(openai): support built-in and provider-defined tools in the Responses allowedTools option

    allowedTools emitted every allow-list entry as { type: 'function', name }, but OpenAI identifies built-in tools by type. Allow-listing a declared provider-defined tool (web search, image generation, MCP, custom, ...) therefore failed with Tool choice '<name>' not found in 'tools' parameter. Entries are now derived from the declared tool, including the MCP server label and custom tool name.

    Tools that OpenAI cannot allow-list (the tool search tool, deferred tools, and namespaced tools) are dropped from the allow-list with a warning, and an error is thrown if that would leave the allow-list empty rather than silently sending an unrestricted request.

    Ambiguous names are now reported instead of resolved silently. A name that matches both a declared tool and another tool's provider tool name resolves to the declared tool and warns; a provider tool name shared by several tools in the same request (two MCP servers, for example) is dropped with a warning. A name that matches no declared tool keeps its existing behavior and is now warned about.

4.0.42

Patch Changes

  • b6fff2e: feat(provider/openai): support explicit Responses compaction triggers

4.0.41

Patch Changes

  • 59d6def: Reconstruct provider-executed shell calls when continuing OpenAI Responses with storage disabled.

4.0.40

Patch Changes

  • e19a4a6: Avoid duplicate MCP approval request references when continuing stored OpenAI Responses.

4.0.39

Patch Changes

... (truncated)

Commits

Updates @assistant-ui/react from 0.15.13 to 0.15.15

Release notes

Sourced from @​assistant-ui/react's releases.

@​assistant-ui/react@​0.15.15

Patch Changes

  • #6071 c3fd447 - feat: host assistant-cloud thread lists on AISDKThreads via RemoteThreadList (@​okisdev)

    AISDKThreads({ cloud }) uses RemoteThreadList and remounts each thread like useChatRuntime. Cloud history withFormat resolves persistence per call so one adapter can serve many threads. useExternalHistory waits for threadListItem.remoteId instead of latching on the first empty paint.

  • #5872 f9529bf - feat: move useAssistantTransportRuntime into core/react (@​okisdev)

  • #5872 f9529bf - fix: persist data message parts in aui/v0 cloud history (@​okisdev)

  • #5839 24a1af7 - fix: validate MCP App resource responses (@​Kinfe123)

  • #5817 dab7b7a - fix: dispose sandbox frames when bridge setup fails (@​Kinfe123)

  • #6005 4326079 - feat: move useCloudThreadListRuntime into core/react and drop the unused react copy of the aui/v0 codec (@​okisdev)

  • #5952 3e2fa6e - fix: await assistant transport response callbacks and cancel unfinished responses when they fail (@​Kinfe123)

  • #5990 f439663 - fix: keep bottom follow through a content-growth undershoot (@​okisdev)

  • #5891 a20c2ef - fix: refresh live completion results after their data source changes (@​Kinfe123)

  • #5406 f2c37ec - fix: keep MCP App error replies reliable when error callbacks throw (@​Kinfe123)

  • #5981 f28ffae - fix: isolate MCP App notification callback errors (@​rupic-app)

  • #5942 285392a - fix: isolate assistant transport lifecycle callback failures (@​Kinfe123)

  • #5959 9d920cc - fix: InMemoryThreadList restarts with a fresh thread when the last one is deleted, notifies the new onDelete callback, and applies deletes batch-safely; the export is now sourced from the core store entry (@​okisdev)

  • #5618 82e2bde - fix: top-anchor turn clears skip turns that are still valid (@​Yonom)

  • #6037 f5b39d4 - feat: add RemoteThreadListAdapter.unstable_useAdapters so the RemoteThreadList store entry can load per-thread history without rendering unstable_Provider (@​okisdev)

  • #6020 26f40c1 - feat: add a RemoteThreadList store entry so any AssistantClient host can run a remote thread list from a RemoteThreadListAdapter and a thread factory (@​okisdev)

  • #5992 adcfe01 - fix: preserve bottom follow through viewport clicks and cancel stale auto-scroll frames (@​rupic-app)

  • #5499 5dff06c - fix: keep Escape-to-stop-speaking active when message action bars are hidden by moving the shortcut to ThreadPrimitive.Root; custom compositions must mount the root to enable it (@​Kinfe123)

  • #6058 837ef1b - fix: render system messages safely when editing components are omitted (@​rupic-app)

  • #5914 0d2e23f - feat: new threads.selectionChanged event carrying threadId and previousThreadId; deprecate threadListItem.switchedTo/switchedAway in its favor. Un-deprecate the semantically meaningful events (thread.runStart, thread.runEnd, thread.initialize, composer.send, composer.attachmentAdd). (@​Yonom)

    The new event fires in situations where the deprecated pair did not, so the selection-driven defaults (scrollToBottomOnThreadSwitch, unstable_focusOnThreadSwitched) now engage there too: InMemoryThreadList emits on selection changes (it previously emitted no switch events at all), switchToNewThread() emits for the newly created thread, and runtimes that resolve a deep-linked threadId/initialThreadId after mount (useRemoteThreadListRuntime) emit when the deep link resolves, with the initial placeholder thread as previousThreadId.

  • #5838 2a512eb - fix: handle synchronous live completion failures (@​Kinfe123)

  • #5774 61d29f4 - chore: update dependencies (@​Yonom)

... (truncated)

Changelog

Sourced from @​assistant-ui/react's changelog.

0.15.15

Patch Changes

  • #6071 c3fd447 - feat: host assistant-cloud thread lists on AISDKThreads via RemoteThreadList (@​okisdev)

    AISDKThreads({ cloud }) uses RemoteThreadList and remounts each thread like useChatRuntime. Cloud history withFormat resolves persistence per call so one adapter can serve many threads. useExternalHistory waits for threadListItem.remoteId instead of latching on the first empty paint.

  • #5872 f9529bf - feat: move useAssistantTransportRuntime into core/react (@​okisdev)

  • #5872 f9529bf - fix: persist data message parts in aui/v0 cloud history (@​okisdev)

  • #5839 24a1af7 - fix: validate MCP App resource responses (@​Kinfe123)

  • #5817 dab7b7a - fix: dispose sandbox frames when bridge setup fails (@​Kinfe123)

  • #6005 4326079 - feat: move useCloudThreadListRuntime into core/react and drop the unused react copy of the aui/v0 codec (@​okisdev)

  • #5952 3e2fa6e - fix: await assistant transport response callbacks and cancel unfinished responses when they fail (@​Kinfe123)

  • #5990 f439663 - fix: keep bottom follow through a content-growth undershoot (@​okisdev)

  • #5891 a20c2ef - fix: refresh live completion results after their data source changes (@​Kinfe123)

  • #5406 f2c37ec - fix: keep MCP App error replies reliable when error callbacks throw (@​Kinfe123)

  • #5981 f28ffae - fix: isolate MCP App notification callback errors (@​rupic-app)

  • #5942 285392a - fix: isolate assistant transport lifecycle callback failures (@​Kinfe123)

  • #5959 9d920cc - fix: InMemoryThreadList restarts with a fresh thread when the last one is deleted, notifies the new onDelete callback, and applies deletes batch-safely; the export is now sourced from the core store entry (@​okisdev)

  • #5618 82e2bde - fix: top-anchor turn clears skip turns that are still valid (@​Yonom)

  • #6037 f5b39d4 - feat: add RemoteThreadListAdapter.unstable_useAdapters so the RemoteThreadList store entry can load per-thread history without rendering unstable_Provider (@​okisdev)

  • #6020 26f40c1 - feat: add a RemoteThreadList store entry so any AssistantClient host can run a remote thread list from a RemoteThreadListAdapter and a thread factory (@​okisdev)

  • #5992 adcfe01 - fix: preserve bottom follow through viewport clicks and cancel stale auto-scroll frames (@​rupic-app)

  • #5499 5dff06c - fix: keep Escape-to-stop-speaking active when message action bars are hidden by moving the shortcut to ThreadPrimitive.Root; custom compositions must mount the root to enable it (@​Kinfe123)

  • #6058 837ef1b - fix: render system messages safely when editing components are omitted (@​rupic-app)

  • #5914 0d2e23f - feat: new threads.selectionChanged event carrying threadId and previousThreadId; deprecate threadListItem.switchedTo/switchedAway in its favor. Un-deprecate the semantically meaningful events (thread.runStart, thread.runEnd, thread.initialize, composer.send, composer.attachmentAdd). (@​Yonom)

    The new event fires in situations where the deprecated pair did not, so the selection-driven defaults (scrollToBottomOnThreadSwitch, unstable_focusOnThreadSwitched) now engage there too: InMemoryThreadList emits on selection changes (it previously emitted no switch events at all), switchToNewThread() emits for the newly created thread, and runtimes that resolve a deep-linked threadId/initialThreadId after mount (useRemoteThreadListRuntime) emit when the deep link resolves, with the initial placeholder thread as previousThreadId.

  • #5838 2a512eb - fix: handle synchronous live completion failures (@​Kinfe123)

... (truncated)

Commits
  • 4db781c chore: update versions (#5832)
  • 837ef1b fix(core): fall back for system message edits (#6058)
  • f5b39d4 feat(core): add RemoteThreadListAdapter.unstable_useAdapters (#6037)
  • 26f40c1 feat(core): add RemoteThreadList store entry (#6020)
  • 3d68b16 fix(core): derive composer canCancel from the in-flight run (#6023)
  • 5dff06c fix(react): keep escape stop speaking active (#5499)
  • 7748e15 feat(core): host remote thread runtimeHooks as keyed tap resources (#6014)
  • d8ed21e refactor: move useAssistantTransportRuntime into core (#6007)
  • 3e2fa6e fix(react): cancel transport responses after callback failures (#5952)
  • 4326079 refactor: move useCloudThreadListRuntime into core (#6005)
  • Additional commits viewable in compare view

Updates @assistant-ui/react-ai-sdk from 1.4.5 to 1.4.6

Release notes

Sourced from @​assistant-ui/react-ai-sdk's releases.

@​assistant-ui/react-ai-sdk@​1.4.6

Patch Changes

Changelog

Sourced from @​assistant-ui/react-ai-sdk's changelog.

1.4.6

Patch Changes

Commits

Updates @assistant-ui/react-markdown from 0.14.10 to 0.14.11

Release notes

Sourced from @​assistant-ui/react-markdown's releases.

@​assistant-ui/react-markdown@​0.14.11

Patch Changes

Changelog

Sourced from @​assistant-ui/react-markdown's changelog.

0.14.11

Patch Changes

Commits

Updates @tanstack/react-virtual from 3.14.9 to 3.14.10

Release notes

Sourced from @​tanstack/react-virtual's releases.

@​tanstack/react-virtual@​3.14.10

Patch Changes

Changelog

Sourced from @​tanstack/react-virtual's changelog.

3.14.10

Patch Changes

Commits

Updates ai from 7.0.64 to 7.0.70

Changelog

Sourced from ai's changelog.

7.0.70

Patch Changes

  • 9566914: Stop multi-step text generation for client tool approval even when a provider-executed tool has a deferred result.
  • b181020: fix: reject streamObject result promises and report failed completion when the provider stream errors
  • 7054073: Filter preliminary tool outputs when ignoreIncompleteToolCalls is enabled.
  • a828527: Prevent automatic tool execution when a model call ends with an unsafe finish reason.
  • d3cc3fe: Clear partial UI message parts when a WorkflowAgent model-call step is retried.
  • Updated dependencies [e6087c9]
    • @​ai-sdk/provider-utils@​5.0.28
    • @​ai-sdk/gateway@​4.0.56

7.0.69

Patch Changes

  • Updated dependencies [1f7a464]
    • @​ai-sdk/gateway@​4.0.55

7.0.68

Patch Changes

  • Updated dependencies [257632b]
    • @​ai-sdk/gateway@​4.0.54

7.0.67

Patch Changes

  • Updated dependencies [a0b1ffc]
    • @​ai-sdk/gateway@​4.0.53

7.0.66

Patch Changes

  • 0782259: Keep chat status submitted until response content begins streaming.
  • 2fd1214: Fix declaration emit for exported values that infer an Output type.

7.0.65

Patch Changes

  • dc8caae: Avoid repeatedly cloning accumulated text in readUIMessageStream while preserving independent snapshots for mutable nested values.
  • 72ec74f: Preserve root-level JSON Schema definitions when wrapping array output schemas.
  • c5b0515: Propagate errors thrown by the Chat onFinish callback to the initiating request.
  • Updated dependencies [16650e9]

... (truncated)

Commits
  • 97a9489 Version Packages (#19085)
  • b181020 fix: settle streamObject results and report provider stream failures without ...
  • 7054073 fix: omit preliminary tool outputs when ignoring incomplete tool calls (#19084)
  • a828527 fix: prevent automatic tool execution after unsafe model finish reasons (#19066)
  • d3cc3fe fix: WorkflowAgent retries leave stale partial tool calls blocking approvals ...
  • 9566914 fix: halt programmatic tool calls for pending client tool approval (#19052)
  • 65658f3 Version Packages (#19060)
  • 2174f20 Version Packages (#19022)
  • 8a62d5a Version Packages (#18993)
  • 9ce09df Version Packages (#18869)
  • Additional commits viewable in compare view

Updates dompurify from 3.4.13 to 3.4.14

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.14

  • Fixed an issue with possible bypasses when risky tags are allow-listed, thanks @​AlirezaRouhbakhsh
  • Fixed a couple of edge cases with mixed document contexts, thanks @​fishjojo1
  • Added the SVG pointer-events and vector-effect presentation attributes to the allow-list, thanks @​Jaybhade
  • Conducted another refactoring run, removed dead branches and duplicated logic, flattened attribute validation
  • Updated the documentation in several spots, README, wiki, etc., thanks @​Akokonunes
  • Updated several development dependencies and CI workflow actions
Commits

Updates @vitejs/plugin-react from 6.0.5 to 6.1.0

Release notes

Sourced from @​vitejs/plugin-react's releases.

plugin-react@6.1.0

Add experimental native React Compiler support (#1419)

Add experimental native React Compiler support.

You can use it by installing oxc-transform-react and enabling it via the compiler option:

npm install -D oxc-transform-react
import { defineConfig } from 'vite'
import react from '@vitejs/plugin-react'
export default defineConfig({
plugins: [
react({ compiler: true })
]
})

Changelog

Sourced from @​vitejs/plugin-react's changelog.

6.1.0 (2026-08-19)

Add experimental native React Compiler support (#1419)

Add experimental native React Compiler support.

You can use it by installing oxc-transform-react and enabling it via the compiler option:

npm install -D oxc-transform-react
import { defineConfig } from 'vite'
import react from '@vitejs/plugin-react'
export default defineConfig({
plugins: [
react({ compiler: true })
]
})

Commits

Updates concurrently from 10.0.4 to 10.0.5

Release notes

Sourced from concurrently's releases.

v10.0.5

What's Changed

New Contributors

Full Changelog: open-cli-tools/concurrently@v10.0.4...v10.0.5

Commits
  • 1b8cbeb 10.0.5
  • 544dba0 docs: make linter happy
  • 667b701 deps: update several dev deps
  • f67c57c vscode: use installed TS version
  • dbb5617 fix: expand wildcards from package.json5 when package.json is missing (#608)
  • 9f90a1a fix: correctly output non-ASCII text on Windows (#604)
  • 94415cc ci: fix publishing to latest/backport
  • See full diff in compare view

Updates globals from 17.9.0 to 17.11.0

Release notes

Sourced from globals's releases.

v17.11.0

  • Add react-native globals (#337) 61eafbf

sindresorhus/globals@v17.10.0...v17.11.0

v17.10.0

  • Add GM_cookie to Greasemonkey globals (#349) f468407

sindresorhus/globals@v17.9.0...v17.10.0

Commits

Updates typescript-eslint from 8.66.0 to 8.67.0

Release notes

Sourced from typescript-eslint's releases.

v8.67.0

8.67.0 (2026-08-10)

🚀 Features

  • typescript-eslint: export basic globs for using tseslint (#12105)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.67.0 (2026-08-10)

🚀 Features

  • typescript-eslint: export basic globs for using tseslint (#12105)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Updates vite from 8.2.1 to 8.2.2

Release notes

Sourced from vite's releases.

plugin-legacy@8.2.2

Please refer to CHANGELOG.md for details.

v8.2.2

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.2.2 (2026-08-20)

Features

  • deps: widen @vitejs/devtools peer range to v0.5.0 (#23302) (495d9ff)

Bug Fixes

  • bundled-dev: handle lazy request error (#23291) (3ba026d)
  • bundled-dev: hot update through circular imports instead of reloading (#23259) (3dbddef)
  • config: resolve sourcemap paths against sourcemap location (#23239) (05a003e)
  • css: don't pass empty targets to lightningcss (#23295) (2804636)
  • define: fix match escaped dots to support $-prefixed define keys (#23249) (dcf88bd)
  • deps: update all non-major dependencies (#23217) (ba958bd)
  • deps: update rolldown-related dependencies (#23218) (83ecb2c)
  • module-runner: exclude completed modules from in-flight cycle detection (fix #22999) (#23009) (d9b10a9)
  • optimizer: close custom extension analysis bundles (#23207) (8fb7675)
  • reduce Windows 8.3-short-name detection false-positives (#23066) (02cffa9)
  • respect resolve.preserveSymlinks when resolving root (fix #23197) (#23198) (8413052)
  • ssr: rewrite computed key of destructing parameter (#23307) (9db0b61)
  • vite: update outdated upstream file links in license comments (<...

    Description has been truncated

@dependabot
build(deps): bump the npm-minor-patch group across 2 directories with…
2ecb2c9 
… 14 updates

Bumps the npm-minor-patch group with 1 update in the /e2e directory: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node).
Bumps the npm-minor-patch group with 12 updates in the /frontend directory:

| Package | From | To |
| --- | --- | --- |
| [@ai-sdk/openai](https://github.com/vercel/ai/tree/HEAD/packages/openai) | `4.0.36` | `4.0.44` |
| [@assistant-ui/react](https://github.com/assistant-ui/assistant-ui/tree/HEAD/packages/react) | `0.15.13` | `0.15.15` |
| [@assistant-ui/react-ai-sdk](https://github.com/assistant-ui/assistant-ui/tree/HEAD/packages/react-ai-sdk) | `1.4.5` | `1.4.6` |
| [@assistant-ui/react-markdown](https://github.com/assistant-ui/assistant-ui/tree/HEAD/packages/react-markdown) | `0.14.10` | `0.14.11` |
| [@tanstack/react-virtual](https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual) | `3.14.9` | `3.14.10` |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.13` | `3.4.14` |
| [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.0.5` | `6.1.0` |
| [concurrently](https://github.com/open-cli-tools/concurrently) | `10.0.4` | `10.0.5` |
| [globals](https://github.com/sindresorhus/globals) | `17.9.0` | `17.11.0` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.66.0` | `8.67.0` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.2.1` | `8.2.2` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.10` | `4.1.11` |



Updates `@types/node` from 26.1.2 to 26.2.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/node` from 26.1.2 to 26.2.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@ai-sdk/openai` from 4.0.36 to 4.0.44
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/openai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/openai@4.0.44/packages/openai)

Updates `@assistant-ui/react` from 0.15.13 to 0.15.15
- [Release notes](https://github.com/assistant-ui/assistant-ui/releases)
- [Changelog](https://github.com/assistant-ui/assistant-ui/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/assistant-ui/assistant-ui/commits/@assistant-ui/react@0.15.15/packages/react)

Updates `@assistant-ui/react-ai-sdk` from 1.4.5 to 1.4.6
- [Release notes](https://github.com/assistant-ui/assistant-ui/releases)
- [Changelog](https://github.com/assistant-ui/assistant-ui/blob/main/packages/react-ai-sdk/CHANGELOG.md)
- [Commits](https://github.com/assistant-ui/assistant-ui/commits/@assistant-ui/react-ai-sdk@1.4.6/packages/react-ai-sdk)

Updates `@assistant-ui/react-markdown` from 0.14.10 to 0.14.11
- [Release notes](https://github.com/assistant-ui/assistant-ui/releases)
- [Changelog](https://github.com/assistant-ui/assistant-ui/blob/main/packages/react-markdown/CHANGELOG.md)
- [Commits](https://github.com/assistant-ui/assistant-ui/commits/@assistant-ui/react-markdown@0.14.11/packages/react-markdown)

Updates `@tanstack/react-virtual` from 3.14.9 to 3.14.10
- [Release notes](https://github.com/TanStack/virtual/releases)
- [Changelog](https://github.com/TanStack/virtual/blob/main/packages/react-virtual/CHANGELOG.md)
- [Commits](https://github.com/TanStack/virtual/commits/@tanstack/react-virtual@3.14.10/packages/react-virtual)

Updates `ai` from 7.0.64 to 7.0.70
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@7.0.70/packages/ai)

Updates `dompurify` from 3.4.13 to 3.4.14
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.13...3.4.14)

Updates `@vitejs/plugin-react` from 6.0.5 to 6.1.0
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.1.0/packages/plugin-react)

Updates `concurrently` from 10.0.4 to 10.0.5
- [Release notes](https://github.com/open-cli-tools/concurrently/releases)
- [Commits](open-cli-tools/concurrently@v10.0.4...v10.0.5)

Updates `globals` from 17.9.0 to 17.11.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.9.0...v17.11.0)

Updates `typescript-eslint` from 8.66.0 to 8.67.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.67.0/packages/typescript-eslint)

Updates `vite` from 8.2.1 to 8.2.2
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.2.2/packages/vite)

Updates `vitest` from 4.1.10 to 4.1.11
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/vitest)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 26.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@types/node"
  dependency-version: 26.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@ai-sdk/openai"
  dependency-version: 4.0.44
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@assistant-ui/react"
  dependency-version: 0.15.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@assistant-ui/react-ai-sdk"
  dependency-version: 1.4.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@assistant-ui/react-markdown"
  dependency-version: 0.14.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@tanstack/react-virtual"
  dependency-version: 3.14.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: ai
  dependency-version: 7.0.70
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: dompurify
  dependency-version: 3.4.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: concurrently
  dependency-version: 10.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: globals
  dependency-version: 17.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: typescript-eslint
  dependency-version: 8.67.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: vite
  dependency-version: 8.2.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: vitest
  dependency-version: 4.1.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 23, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants