deps: update js-sdk to 1.6.0

[qw-in]

No description provided.

[arcjet-review]

Arcjet Review — 🟢 Low Risk

Decision: Approved

Rationale: This PR is a routine version bump of @arcjet/* SDK packages from 1.5.0 to 1.6.0 across example apps' package.json files. The dependency-changes trigger fires, but the changes are limited to first-party @arcjet packages (plus one @nosecone/next which is also Arcjet-maintained), all in /examples (non-production demos), and are a coordinated minor version bump consistent with the PR title. No source code, auth, secrets, or infrastructure is touched. Security review checklist surfaces no concerns: no hardcoded secrets, no injection surface changes, no crypto changes. Approving despite the dependency-changes trigger because the scope is narrow, internally-owned, and follows the repo's standard SDK release pattern.

Summary of Changes

Bumps @arcjet/* (and @nosecone/next) SDK dependencies from 1.5.0 to 1.6.0 across all example apps (astro, expressjs, fastify, firebase-functions, nestjs, nextjs and variants, nuxt, react-router, sveltekit, tanstack-start). No source/code changes.

Escalation Triggers

• Dependency Changes: Multiple package.json files modified to bump @arcjet/* dependencies from 1.5.0 to 1.6.0.

Notes

All bumped packages appear to be first-party @arcjet/@NoseCone packages and the version bump is consistent across every example, suggesting a coordinated SDK release. Worth confirming CI passes for each example before merge, but no manual reviewer action expected.

Path filtering: 14 files excluded by ignore paths. 14 of 28 files included in review.

_{Review: 4a9c89e2 | Model: anthropic/claude-opus-4-7 | Powered by Arcjet Review}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​@​arcjet/​decorate@​1.5.0 ⏵ 1.6.1
	npm/​@​arcjet/​env@​1.5.0 ⏵ 1.6.1
	npm/​@​nosecone/​next@​1.5.0 ⏵ 1.6.1
	npm/​@​arcjet/​nuxt@​1.5.0 ⏵ 1.6.1
	npm/​@​arcjet/​react-router@​1.5.0 ⏵ 1.6.1	+1		+1	+2
	npm/​@​arcjet/​fastify@​1.5.0 ⏵ 1.6.1	+1		+1	+2
	npm/​@​arcjet/​sveltekit@​1.5.0 ⏵ 1.6.1	+1		+1	+4
	npm/​@​arcjet/​nest@​1.5.0 ⏵ 1.6.1	+1		+1	+2
	npm/​@​arcjet/​astro@​1.5.0 ⏵ 1.6.1				+2
	npm/​@​arcjet/​node@​1.5.0 ⏵ 1.6.1	+1			+2
	npm/​@​arcjet/​inspect@​1.5.0 ⏵ 1.6.1				+2
	npm/​@​arcjet/​ip@​1.5.0 ⏵ 1.6.1				+4
	npm/​@​arcjet/​next@​1.5.0 ⏵ 1.6.1	+1			+4

View full report