chore(deps-dev): Bump the minor-and-patch group across 1 directory with 10 updates

[dependabot]

Bumps the minor-and-patch group with 10 updates in the / directory:

Package	From	To
@anthropic-ai/sdk	0.100.1	0.115.0
@arethetypeswrong/cli	0.18.3	0.18.5
@biomejs/biome	2.4.16	2.5.5
@google/genai	2.7.0	2.13.0
@types/node	25.9.1	25.9.5
@vitest/coverage-v8	4.1.7	4.1.10
openai	6.39.1	6.49.0
publint	0.3.21	0.3.22
vite	8.0.14	8.1.5
vitest	4.1.7	4.1.10

Updates @anthropic-ai/sdk from 0.100.1 to 0.115.0

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk: v0.115.0

0.115.0 (2026-07-24)

Full Changelog: sdk-v0.114.0...sdk-v0.115.0

Features

• api: add claude-opus-5 model (cdd3606)
• api: add tool addition/removal blocks and tool_change events (cdd3606)
• api: expand client-side fallback credit token types and add server-side fallbacks default option (cdd3606)

Bug Fixes

• client: release abort listeners when requests settle (#1129) (b85e902)

sdk: v0.114.0

0.114.0 (2026-07-23)

Full Changelog: sdk-v0.113.0...sdk-v0.114.0

Features

• api: add new stop reason 'model_context_window_exceeded' (1ec71c1)

sdk: v0.113.0

0.113.0 (2026-07-22)

Full Changelog: sdk-v0.112.5...sdk-v0.113.0

Features

• api: add support for Managed Agents model effort, initial session events, and threads delta streaming (83fef1e)

sdk: v0.112.5

0.112.5 (2026-07-21)

Full Changelog: sdk-v0.112.4...sdk-v0.112.5

Chores

• api: add support for new refusal category (479efe8)
• internal: codegen related update (830fb74)

sdk: v0.112.4

0.112.4 (2026-07-20)

Full Changelog: sdk-v0.112.3...sdk-v0.112.4

Bug Fixes

... (truncated)

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.115.0 (2026-07-24)

Full Changelog: sdk-v0.114.0...sdk-v0.115.0

Features

• api: add claude-opus-5 model (cdd3606)
• api: add tool addition/removal blocks and tool_change events (cdd3606)
• api: expand client-side fallback credit token types and add server-side fallbacks default option (cdd3606)

Bug Fixes

• client: release abort listeners when requests settle (#1129) (b85e902)

0.114.0 (2026-07-23)

Full Changelog: sdk-v0.113.0...sdk-v0.114.0

Features

• api: add new stop reason 'model_context_window_exceeded' (1ec71c1)

0.113.0 (2026-07-22)

Full Changelog: sdk-v0.112.5...sdk-v0.113.0

Features

• api: add support for Managed Agents model effort, initial session events, and threads delta streaming (83fef1e)

0.112.5 (2026-07-21)

Full Changelog: sdk-v0.112.4...sdk-v0.112.5

Chores

• api: add support for new refusal category (479efe8)
• internal: codegen related update (830fb74)

0.112.4 (2026-07-20)

Full Changelog: sdk-v0.112.3...sdk-v0.112.4

Bug Fixes

• aws: preserve AWS options and auth mode across withOptions() (#214) (3f7665c)

Chores

... (truncated)

Commits

• 3b45cd3 chore: release main
• f298e9a feat(api): add claude-opus-5 model
• ce8e54b fix(client): release abort listeners when requests settle (#1129)
• 2d314b4 chore: release main
• 3d051df feat(api): add new stop reason 'model_context_window_exceeded'
• 4414d47 chore: release main
• 1ec5566 feat(api): add support for Managed Agents model effort, initial session event...
• c58a55b chore: release main
• 2fb7da5 chore(api): add support for new refusal category
• d6ffc3c chore(internal): codegen related update
• Additional commits viewable in compare view

Updates @arethetypeswrong/cli from 0.18.3 to 0.18.5

Changelog

Sourced from @​arethetypeswrong/cli's changelog.

0.18.5

Patch Changes

• Updated dependencies [c4be7e8]
  • @​arethetypeswrong/core@​0.18.5

0.18.4

Patch Changes

• Updated dependencies [644fab1]
  • @​arethetypeswrong/core@​0.18.4

Commits

• See full diff in compare view

Updates @biomejs/biome from 2.4.16 to 2.5.5

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.5

2.5.5

Patch Changes

• #10972 ab8c21b Thanks @​ematipico! - Fixed useExhaustiveSwitchCases for unions of bigint literals. The rule now reports missing bigint cases and compares bigint literals by value, including binary, octal, hexadecimal, and separator-containing spellings. For example, this switch now reports the missing 2n case:

  declare const value: 1n | 2n;
  switch (value) {
    case 1n:
      break;
  }

• #10972 ab8c21b Thanks @​ematipico! - Fixed false positives in noBaseToString and useNullishCoalescing when member, stringification, or nullish inference cannot complete. These rules now suppress diagnostics instead of reporting from partial type information. For example, neither expression is reported when a recursive type cannot be fully resolved:

  type Recursive = Recursive;
  declare const value: Recursive;
  String(value);
  value || "fallback";

• #10977 0bf7486 Thanks @​ematipico! - Fixed #10922: the action useSortedAttributes no longer triggers for HTML instructions.

• #10957 cf263c4 Thanks @​dyc3! - Fixed noThenProperty failing to detect Object.fromEntries, Object.defineProperty, and Reflect.defineProperty calls with comments between their tokens.

• #10983 edc0ed7 Thanks @​ayaangazali! - Fixed #10980: useAriaPropsSupportedByRole no longer reports false positives when the attribute that determines an element's implicit ARIA role is written as a shorthand attribute, such as <a {href} aria-label="..."> in Astro and Svelte files.

  Shorthand attributes are now taken into account when computing the implicit role, so the anchor above correctly resolves to the link role instead of generic.

• #10889 89526e3 Thanks @​denbezrukov! - Fixed CSS formatter casing for syntax-owned names while preserving author-defined names, including scoped keyframes and container scroll-state queries.

  - A:HOVER { COLOR: INITIAL; }
  + A:hover { color: initial; }
  - @KEYFRAMES :GLOBAL KeepFrames { FROM { COLOR: RED; } }
  + @keyframes :GLOBAL KeepFrames { from { color: RED; } }
  - @CONTAINER scroll-state((SCROLLED: TOP) AND (STUCK)) { A:HOVER { COLOR: RED; } }
  + @container scroll-state((SCROLLED: TOP) AND (STUCK)) { A:hover { color: RED; } }

• #10964 794ccd0 Thanks @​denbezrukov! - Fixed CSS formatting for comments between declaration values and !important.

  -a { color: /* before */ /* after */ red !important; }
  +a { color: /* before */ red /* after */ !important; }

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.5

Patch Changes

• #10972 ab8c21b Thanks @​ematipico! - Fixed useExhaustiveSwitchCases for unions of bigint literals. The rule now reports missing bigint cases and compares bigint literals by value, including binary, octal, hexadecimal, and separator-containing spellings. For example, this switch now reports the missing 2n case:

  declare const value: 1n | 2n;
  switch (value) {
    case 1n:
      break;
  }

• #10972 ab8c21b Thanks @​ematipico! - Fixed false positives in noBaseToString and useNullishCoalescing when member, stringification, or nullish inference cannot complete. These rules now suppress diagnostics instead of reporting from partial type information. For example, neither expression is reported when a recursive type cannot be fully resolved:

  type Recursive = Recursive;
  declare const value: Recursive;
  String(value);
  value || "fallback";

• #10977 0bf7486 Thanks @​ematipico! - Fixed #10922: the action useSortedAttributes no longer triggers for HTML instructions.

• #10957 cf263c4 Thanks @​dyc3! - Fixed noThenProperty failing to detect Object.fromEntries, Object.defineProperty, and Reflect.defineProperty calls with comments between their tokens.

• #10983 edc0ed7 Thanks @​ayaangazali! - Fixed #10980: useAriaPropsSupportedByRole no longer reports false positives when the attribute that determines an element's implicit ARIA role is written as a shorthand attribute, such as <a {href} aria-label="..."> in Astro and Svelte files.

  Shorthand attributes are now taken into account when computing the implicit role, so the anchor above correctly resolves to the link role instead of generic.

• #10889 89526e3 Thanks @​denbezrukov! - Fixed CSS formatter casing for syntax-owned names while preserving author-defined names, including scoped keyframes and container scroll-state queries.

  - A:HOVER { COLOR: INITIAL; }
  + A:hover { color: initial; }
  - @KEYFRAMES :GLOBAL KeepFrames { FROM { COLOR: RED; } }
  + @keyframes :GLOBAL KeepFrames { from { color: RED; } }
  - @CONTAINER scroll-state((SCROLLED: TOP) AND (STUCK)) { A:HOVER { COLOR: RED; } }
  + @container scroll-state((SCROLLED: TOP) AND (STUCK)) { A:hover { color: RED; } }

• #10964 794ccd0 Thanks @​denbezrukov! - Fixed CSS formatting for comments between declaration values and !important.

  -a { color: /* before */ /* after */ red !important; }
  +a { color: /* before */ red /* after */ !important; }

... (truncated)

Commits

• 412a0e9 ci: release (#10948)
• b3b12b3 feat(lint): add noNegationInEqualityCheck rule (#10915)
• 9a66bc7 chore: add latitude to sponsors (#10947)
• bfc3f3d ci: release (#10887)
• 9e1999f chore: revert the revert
• 0b0fd8d chore: revert
• 0afa35a ci: release (#10817)
• 3447b2f feat(useDomQuerySelector): add ignore option (#10835)
• e649198 ci: release (#10747)
• 4a32b63 feat(lint): add ignorePrimitives option to useNullishCoalescing (#10798)
• Additional commits viewable in compare view

Updates @google/genai from 2.7.0 to 2.13.0

Release notes

Sourced from @​google/genai's releases.

v2.13.0

2.13.0 (2026-07-21)

Features

• A new field custom_vocabulary is added to Live API(f32ec0a)
• add model selector (b5d70da)
• interaction-api: add queued status to interaction proto (1b7dd39)
• make ASR fields public in v1main and Interactions (08ef3eb)

v2.12.0

2.12.0 (2026-07-15)

Features

• Add AntigravityAgentConfig to OpenAPI schema overlays and regenerate SDKs. (872aa26)
• Add history config. (8666bc2)
• Add support for preserve custom headers for gaos (f96662a)
• add trigger resource (43e0137)
• Add Triggers resource to GoogleGenAI client. (8d520cd)
• interactions: add CodeMenderAgentConfig (4469a85)
• Populate per-modality prompt token count in embedding responses for gemini-embedding-2 (163bf72)

v2.11.0

2.11.0 (2026-07-09)

Features

• Add environment_id in network config (85fe0a5)
• Add response_format and Translation_config in GenerationConfig (3f3b7bc)
• add retrieval result step and new fields to maps and search results (ecfdc69)
• Add Tool.exa_ai_search for Gemini Enterprise API (3f3b7bc)
• support Function declarations during Agent Creation (824badf)
• voice consent signature types across all SDK languages. (5fb5354)

Bug Fixes

• interactions: accept both dict and list[dict] for transform (67d2f68)

Code Refactoring

• interactions: remove cached_content, presence_penalty, and frequency_penalty; expose safety_settings and labels (0f414be)

v2.10.0

2.10.0 (2026-06-24)

... (truncated)

Changelog

Sourced from @​google/genai's changelog.

2.13.0 (2026-07-21)

Features

• A new field custom_vocabulary is added to message .google.cloud.aiplatform.v1beta1.BidiGenerateContentSetup (f32ec0a)
• add model selector (b5d70da)
• interaction-api: add queued status to interaction proto (1b7dd39)
• make ASR fields public in v1main and Interactions (08ef3eb)

2.12.0 (2026-07-15)

Features

• Add AntigravityAgentConfig to OpenAPI schema overlays and regenerate SDKs. (872aa26)
• Add history config. (8666bc2)
• Add support for preserve custom headers for gaos (f96662a)
• add trigger resource (43e0137)
• Add Triggers resource to GoogleGenAI client. (8d520cd)
• interactions: add CodeMenderAgentConfig (4469a85)
• Populate per-modality prompt token count in embedding responses for gemini-embedding-2 (163bf72)

2.11.0 (2026-07-09)

Features

• Add environment_id in network config (85fe0a5)
• Add response_format and Translation_config in GenerationConfig (3f3b7bc)
• add retrieval result step and new fields to maps and search results (ecfdc69)
• Add Tool.exa_ai_search for Gemini Enterprise API (3f3b7bc)
• support Function declarations during Agent Creation (824badf)
• voice consent signature types across all SDK languages. (5fb5354)

Bug Fixes

• interactions: accept both dict and list[dict] for transform (67d2f68)

Code Refactoring

• interactions: remove cached_content, presence_penalty, and frequency_penalty; expose safety_settings and labels (0f414be)

2.10.0 (2026-06-24)

Features

... (truncated)

Commits

• ebf3eb4 chore(main): release 2.13.0 (#1783)
• 1b7dd39 feat(interaction-api): add queued status to interaction proto
• bcad1c4 feat: Add environments service to GenAI SDK.
• 08ef3eb feat: make ASR fields public in v1main and Interactions
• ca3eca5 feat: Add environments service to GenAI SDK.
• 0b8f01f chore: internal change
• 04e0cb9 chore: internal change
• b5d70da feat: add model selector
• 0ce2aab No public description
• f32ec0a feat: A new field custom_vocabulary is added to message `.google.cloud.aipl...
• Additional commits viewable in compare view

Updates @types/node from 25.9.1 to 25.9.5

Commits

• See full diff in compare view

Updates @vitest/coverage-v8 from 4.1.7 to 4.1.10

Release notes

Sourced from @​vitest/coverage-v8's releases.

v4.1.10

   🐞 Bug Fixes

• browser: Check fs access in builtin commands [backport to v4]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (claude-opus-4-8) in vitest-dev/vitest#10680 (5c18d)
• vm: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4]  -  by @​SveLil and @​hi-ogawa in vitest-dev/vitest#10661 (bae52)

    View changes on GitHub

v4.1.9

🐞 Bug Fixes

• Fix importOriginal with optimizer and query import [backport to v4] - by Hiroshi Ogawa, David Harris, Codexand Vladimir in vitest-dev/vitest#10546 (a5180)
• browser:
  • Wait for orchestrator readiness before resolving browser sessions [backport to v4] - by Vladimir and Séamus O'Connor in vitest-dev/vitest#10555 (7fb29)
  • Wait for iframe tester readiness before preparing [backport to v4] - by Vladimir and Séamus O'Connor in vitest-dev/vitest#10497 and vitest-dev/vitest#10556 (fbc62)
• mocker:
  • Hoist vi.mock() for vite-plus/test imports [backport to v4] - by Hiroshi Ogawa, LongYinan, Claude Opus 4.8 and Vladimir in vitest-dev/vitest#10548 (2c955)
• pool:
  • Prevent test run hang on worker crash [backport to v4] - by Ari Perkkiö and Jattioui Ismail in vitest-dev/vitest#10543 and vitest-dev/vitest#10564 (934b0)

View changes on GitHub

v4.1.8

   🐞 Bug Fixes

• browser:
  • Disable client cdp API when allowWrite/allowExec: false [backport to v4]  -  by @​hi-ogawa and Codex in vitest-dev/vitest#10450 (e4067)
  • Remove orphaned Playwright route when same module is mocked via multiple ids [backport to v4]  -  by @​toxik and @​Zelys-DFKH in vitest-dev/vitest#10474 (675b4)

    View changes on GitHub

Commits

• db616d2 chore: release v4.1.10 (#10718)
• a7a61e7 chore: release v4.1.9 (#10598)
• e61f2dd chore: release v4.1.8
• e4067b3 fix(browser): disable client cdp API when allowWrite/allowExec: false [ba...
• See full diff in compare view

Updates openai from 6.39.1 to 6.49.0

Release notes

Sourced from openai's releases.

v6.49.0

6.49.0 (2026-07-23)

Full Changelog: v6.48.0...v6.49.0

Features

• api: accept None for prompt_cache_key/safety_identifier (c54a7f3)
• api: add support for spend_limit admin apis (e8238b0)
• helpers: add standard schema support (#1997) (4ced1a8)
• helpers: add zod realtime function helper (#1996) (ee59911)
• stlc: configurable CI runner and private-production-repo support in workflow templates (967a66b)
• zod: support schema definitions (#1993) (eb04567)

Bug Fixes

• address code scanning findings (#2007) (2706888)
• address remaining Dependabot alerts (#2005) (6ab3428)
• azure: normalize endpoint trailing slashes (#1995) (39a15b4)
• ci: restore explicit TypeScript SDK runner selection (fe79401)
• runTools: sanitize replayed messages (#1990) (a60cc25)
• stream: handle audio completion markers (#1991) (bd86817)
• zod: escape schema definition refs before strict validation (bff2b10)
• zod: infer parsed tool callback arguments (#1992) (83cdb79)
• zod: preserve schema types while escaping refs (cb7e195)

Chores

• exclude Brewfile from language detection (#2006) (9bec333)
• refresh more ecosystem test dependencies (#2003) (3cafa55)

v6.48.0

6.48.0 (2026-07-17)

Full Changelog: v6.47.0...v6.48.0

Features

• api: /organization/projects/{project_id}/service_accounts/{service_account_id}/api_keys" endpoint (9133b54)
• api: manual updates (34acd23)
• api: manual updates (3188968)

Bug Fixes

• normalize header names before appending (#1941) (18e8c29)

... (truncated)

Changelog

Sourced from openai's changelog.

6.49.0 (2026-07-23)

Full Changelog: v6.48.0...v6.49.0

Features

• api: accept None for prompt_cache_key/safety_identifier (c54a7f3)
• api: add support for spend_limit admin apis (e8238b0)
• helpers: add standard schema support (#1997) (4ced1a8)
• helpers: add zod realtime function helper (#1996) (ee59911)
• stlc: configurable CI runner and private-production-repo support in workflow templates (967a66b)
• zod: support schema definitions (#1993) (eb04567)

Bug Fixes

• address code scanning findings (#2007) (2706888)
• address remaining Dependabot alerts (#2005) (6ab3428)
• azure: normalize endpoint trailing slashes (#1995) (39a15b4)
• ci: restore explicit TypeScript SDK runner selection (fe79401)
• runTools: sanitize replayed messages (#1990) (a60cc25)
• stream: handle audio completion markers (#1991) (bd86817)
• zod: escape schema definition refs before strict validation (bff2b10)
• zod: infer parsed tool callback arguments (#1992) (83cdb79)
• zod: preserve schema types while escaping refs (cb7e195)

Chores

• exclude Brewfile from language detection (#2006) (9bec333)
• refresh more ecosystem test dependencies (#2003) (3cafa55)

6.48.0 (2026-07-17)

Full Changelog: v6.47.0...v6.48.0

Features

• api: /organization/projects/{project_id}/service_accounts/{service_account_id}/api_keys" endpoint (9133b54)
• api: manual updates (34acd23)
• api: manual updates (3188968)

Bug Fixes

• normalize header names before appending (#1941) (18e8c29)

Chores

... (truncated)

Commits

• 04671d2 release: 6.49.0 (#2004)
• 4ced1a8 feat(helpers): add standard schema support (#1997)
• eb04567 feat(zod): support schema definitions (#1993)
• 83cdb79 fix(zod): infer parsed tool callback arguments (#1992)
• a60cc25 fix(runTools): sanitize replayed messages (#1990)
• bd86817 fix(stream): handle audio completion markers (#1991)
• ee59911 feat(helpers): add zod realtime function helper (#1996)
• 39a15b4 fix(azure): normalize endpoint trailing slashes (#1995)
• 2706888 fix: address code scanning findings (#2007)
• 9bec333 chore: exclude Brewfile from language detection (#2006)
• Additional commits viewable in compare view

Updates publint from 0.3.21 to 0.3.22

Changelog

Sourced from publint's changelog.

0.3.22

Patch Changes

• #241 7740a62 - Support npm v12 and pnpm v11

• cad0425 - Relax git url regex for repository validation

• #244 393ac4d - Recognize more common internal files for the USE_FILES suggestion.

• #242 4a8dc75 - Refactor supported package manager handling from @publint/pack

Commits

• See full diff in compare view

Updates vite from 8.0.14 to 8.1.5

Release notes

Sourced from vite's releases.

v8.1.5

Please refer to CHANGELOG.md for details.

v8.1.4

Please refer to CHANGELOG.md for details.

v8.1.3

Please refer to CHANGELOG.md for details.

v8.1.2

Please refer to CHANGELOG.md for details.

v8.1.1

Please refer to CHANGELOG.md for details.

create-vite@8.1.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.1.0

Please refer to CHANGELOG.md for details.

v8.1.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.1.0-beta.0

Please refer to CHANGELOG.md for details.

v8.1.0-beta.0

Please refer to CHANGELOG.md for details.

v8.0.16

Please refer to CHANGELOG.md for details.

v8.0.15

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.1.5 (2026-07-16)

Bug Fixes

• bundled-dev: avoid duplicated buildEnd (#22931) (8100320)
• client: overlay error message format align rolldown (#22869) (5a72b87)
• deps: update all non-major dependencies (#22921) (fef682d)
• deps: update rolldown-related dependencies (#22922) (3c345e4)
• module-runner: don't crash stack-trace source mapping when globalThis.Buffer is absent (#22945) (f8b38e3)
• optimizer: respect importer module format for dynamic import interop with CJS deps (#22951) (6c08c39)
• ssr: scope switch-case declarations to the switch, not the function (#22893) (b59a73f)

Documentation

• build: fix incorrect @default for build.cssMinify (#22948) (c88c236)
• build: fix incorrect @default for build.lib.formats (#22911) (369ed60)

Tests

• avoid scanner scanning all files under __tests__ (#22912) (c961cae)

8.1.4 (2026-07-09)

Features

• legacy: prefer oxc as minifier (fix #21973) (#22468) (ab5dafa)

Bug Fixes

• build: add workaround for building on stackblitz (#22840) (575c32c)
• build: keep import.meta.url in preload function as-is (#22839) (f1f90ed)
• deps: update all non-major dependencies (#22865) (d4295a9)
• deps: update rolldown-related dependencies (#22866) (7cf07e4)
• html: avoid backtracking in import-only check (#22848) (b5868c0)
• optimizer: avoid optimizer run for transform request before init (#22852) (72a5e21)
• ssr: align named export function call stacktrace column with Node (#22829) (173a1b6)
• strip pure CSS chunk imports when chunkImportMap is enabled (#22841) (648bd04)

Documentation

• fix incorrect @default for server.cors (#22859) (70435b2)

Miscellaneous Chores

• deps: update dependency postcss-modules to v9 (#22867) (a9539d6)

Code Refactoring

• eliminate ineffectiveDynamicImport warn (#22876) (ea22fb3)

Tests

... (truncated)

Commits

• 5e7fe12 release: v8.1.5
• 6c08c39 fix(optimizer): respect importer module format for dynam...

  Description has been truncated