Skip to content

chore(deps): bump the production-minor-patch group across 1 directory with 11 updates - #899

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-minor-patch-5da3575790
Open

chore(deps): bump the production-minor-patch group across 1 directory with 11 updates#899
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-minor-patch-5da3575790

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 16, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-minor-patch group with 11 updates in the / directory:

Package From To
pg 8.22.0 8.23.0
posthog-node 5.45.2 5.48.1
jose 6.2.3 6.2.8
@rollup/rollup-linux-x64-gnu 4.62.2 4.62.4
@neon-rs/load 0.1.82 0.2.6
@anthropic-ai/claude-agent-sdk 0.3.212 0.3.226
@anthropic-ai/sdk 0.111.0 0.116.0
@clerk/nextjs 7.5.17 7.7.1
next 15.5.21 15.5.23
tsx 4.23.0 4.23.11
vite 8.1.4 8.2.1

Updates pg from 8.22.0 to 8.23.0

Changelog

Sourced from pg's changelog.

pg@8.23.0

Commits

Updates posthog-node from 5.45.2 to 5.48.1

Release notes

Sourced from posthog-node's releases.

posthog-node@5.48.1

5.48.1

Patch Changes

  • #4346 4751b33 Thanks @​marandaneto! - Enforce configured request timeouts while consuming Capture V1 response bodies. (2026-08-06)

  • #4423 64ba193 Thanks @​marandaneto! - Use Node's zlib gzip implementation for Node SDK payloads to avoid sustained memory growth from frequent Web Streams compression. (2026-08-06)

  • Updated dependencies [64ba193]:

    • @​posthog/core@​1.46.9

posthog-node@5.48.0

5.48.0

Minor Changes

  • #4342 fa3457f Thanks @​haacked! - Support the starts_with, not_starts_with, ends_with, and not_ends_with property filter operators in feature flag local evaluation. Matching is case-insensitive and mirrors icontains, so flags using these operators no longer fall back to remote evaluation. (2026-08-05)

posthog-node@5.47.11

5.47.11

Patch Changes

  • #4380 3c40b6c Thanks @​marandaneto! - Keep request timeouts active through response body consumption and clarify eventual event UUID deduplication semantics. (2026-08-05)
  • Updated dependencies [3c40b6c]:
    • @​posthog/core@​1.46.8

posthog-node@5.47.10

5.47.10

Patch Changes

  • #4287 d3c4538 Thanks @​posthog! - Keep $referring_domain and canonical utm_*/campaign parameters on minimal $feature_flag_called events. Previously the minimal allowlist stripped every campaign parameter, so a flag-called event landing first in a session could set the session's UTM attribution and channel type to NULL in web analytics. (2026-08-04)
  • Updated dependencies [d3c4538]:
    • @​posthog/core@​1.46.7

posthog-node@5.47.9

5.47.9

Patch Changes

  • #4350 facb4c1 Thanks @​marandaneto! - Fix enableExceptionAutocapture suppressing Node's default crash on unhandled promise rejections; fatal rejections in strict or warn-with-error-code mode and rejections handled by another unhandledRejection listener are no longer captured. (2026-08-04)

posthog-node@5.47.8

... (truncated)

Changelog

Sourced from posthog-node's changelog.

5.48.1

Patch Changes

  • #4346 4751b33 Thanks @​marandaneto! - Enforce configured request timeouts while consuming Capture V1 response bodies. (2026-08-06)

  • #4423 64ba193 Thanks @​marandaneto! - Use Node's zlib gzip implementation for Node SDK payloads to avoid sustained memory growth from frequent Web Streams compression. (2026-08-06)

  • Updated dependencies [64ba193]:

    • @​posthog/core@​1.46.9

5.48.0

Minor Changes

  • #4342 fa3457f Thanks @​haacked! - Support the starts_with, not_starts_with, ends_with, and not_ends_with property filter operators in feature flag local evaluation. Matching is case-insensitive and mirrors icontains, so flags using these operators no longer fall back to remote evaluation. (2026-08-05)

5.47.11

Patch Changes

  • #4380 3c40b6c Thanks @​marandaneto! - Keep request timeouts active through response body consumption and clarify eventual event UUID deduplication semantics. (2026-08-05)
  • Updated dependencies [3c40b6c]:
    • @​posthog/core@​1.46.8

5.47.10

Patch Changes

  • #4287 d3c4538 Thanks @​posthog! - Keep $referring_domain and canonical utm_*/campaign parameters on minimal $feature_flag_called events. Previously the minimal allowlist stripped every campaign parameter, so a flag-called event landing first in a session could set the session's UTM attribution and channel type to NULL in web analytics. (2026-08-04)
  • Updated dependencies [d3c4538]:
    • @​posthog/core@​1.46.7

5.47.9

Patch Changes

  • #4350 facb4c1 Thanks @​marandaneto! - Fix enableExceptionAutocapture suppressing Node's default crash on unhandled promise rejections; fatal rejections in strict or warn-with-error-code mode and rejections handled by another unhandledRejection listener are no longer captured. (2026-08-04)

5.47.8

Patch Changes

... (truncated)

Commits
  • 886ef7b chore: update versions and lockfile [version bump]
  • 4751b33 fix(node): enforce Capture V1 response body timeouts (#4346)
  • 64ba193 fix(node): use zlib for payload compression (#4423)
  • d69f041 chore: update versions and lockfile [version bump]
  • fa3457f feat(node): support starts_with and ends_with in local evaluation (#4342)
  • 4575585 chore: update versions and lockfile [version bump]
  • 32434e4 feat(react-native): add push notification support (#4415)
  • 09752b9 chore: update versions and lockfile [version bump]
  • 323f1c8 chore: update versions and lockfile [version bump]
  • d3c4538 fix(core): keep session-attribution props on minimal $feature_flag_called eve...
  • Additional commits viewable in compare view

Updates jose from 6.2.3 to 6.2.8

Release notes

Sourced from jose's releases.

v6.2.8

Fixes

  • enforce a single recipient when decrypting dir and ECDH-ES (505c383)
  • reject a non-string "alg" in EmbeddedJWK (714f870)

Refactor

  • index the JWS and JWE registries without a wrapper (925f3bb)
  • name the "alg" source in unsupported algorithm failures (1500459)

v6.2.7

Fixes

  • require own JOSE properties for presence checks (90ab09c)

Refactor

v6.2.6

Fixes

  • types: accept host CryptoKey declarations (b48a15b)

v6.2.5

Fixes

  • compare claim values for falsy validation options (eb86956)
  • forward key management parameters for a single JWE recipient (2d4f801)
  • handle a zero-length JWE additional authenticated data (16ca398)
  • reject a generateKeyPair crv option the algorithm does not imply (76364e9)
  • reject an unencoded payload in the JWS Compact Serialization (01d053f)
  • reject characters outside the Base64URL alphabet (0ebb971), references #879
  • reject duplicate "crit" values when producing (31d60e1)
  • reject invalid UTF-8 in JOSE Headers and JWT Claims Sets (5df3fed)
  • reject truncated ASN.1 key data (7a16c66)
  • surface non-ASCII token segments as JOSE errors (194fe11)
  • types: correct JWK and CryptoKey types (62a196d)
  • types: correct key resolver and JWT header types (e95f8c4)
  • validate the clockTolerance and currentDate options are finite (ab2f18d)

Documentation

  • correct subpaths and API documentation (2daec38)
  • document consumer-supplied type parameters (9e9f66c)
  • stop claiming the JWK "use" parameter is used during import (47a07b2)
  • update CHANGELOG.md (fc51bf5)

Refactor

... (truncated)

Changelog

Sourced from jose's changelog.

6.2.8 (2026-08-03)

Fixes

  • enforce a single recipient when decrypting dir and ECDH-ES (505c383)
  • reject a non-string "alg" in EmbeddedJWK (714f870)

Refactor

  • index the JWS and JWE registries without a wrapper (925f3bb)
  • name the "alg" source in unsupported algorithm failures (1500459)

6.2.7 (2026-08-01)

Fixes

  • require own JOSE properties for presence checks (90ab09c)

Refactor

6.2.6 (2026-07-31)

Fixes

  • types: accept host CryptoKey declarations (b48a15b)

6.2.5 (2026-07-29)

Fixes

  • compare claim values for falsy validation options (eb86956)
  • forward key management parameters for a single JWE recipient (2d4f801)
  • handle a zero-length JWE additional authenticated data (16ca398)
  • reject a generateKeyPair crv option the algorithm does not imply (76364e9)
  • reject an unencoded payload in the JWS Compact Serialization (01d053f)
  • reject characters outside the Base64URL alphabet (0ebb971), references #879
  • reject duplicate "crit" values when producing (31d60e1)
  • reject invalid UTF-8 in JOSE Headers and JWT Claims Sets (5df3fed)
  • reject truncated ASN.1 key data (7a16c66)
  • surface non-ASCII token segments as JOSE errors (194fe11)
  • types: correct JWK and CryptoKey types (62a196d)
  • types: correct key resolver and JWT header types (e95f8c4)
  • validate the clockTolerance and currentDate options are finite (ab2f18d)

Documentation

  • correct subpaths and API documentation (2daec38)
  • document consumer-supplied type parameters (9e9f66c)

... (truncated)

Commits
  • 8b768eb chore(release): 6.2.8
  • 1500459 refactor: name the "alg" source in unsupported algorithm failures
  • 714f870 fix: reject a non-string "alg" in EmbeddedJWK
  • 925f3bb refactor: index the JWS and JWE registries without a wrapper
  • 505c383 fix: enforce a single recipient when decrypting dir and ECDH-ES
  • 514831d chore(deps): bump the actions group with 3 updates
  • 45965db chore: cleanup after release
  • 60b941f chore(release): 6.2.7
  • 90ab09c fix: require own JOSE properties for presence checks
  • 767d7f1 refactor: reduce bundle size
  • Additional commits viewable in compare view

Updates @rollup/rollup-linux-x64-gnu from 4.62.2 to 4.62.4

Release notes

Sourced from @​rollup/rollup-linux-x64-gnu's releases.

v4.62.4

4.62.4

2026-08-01

Bug Fixes

  • Resolve a regression when using Rollup on older Linux distributions (#6467)

Pull Requests

v4.62.3

4.62.3

2026-07-26

Bug Fixes

  • Sanitize illegal characters preserved modules input base (#6439)

Pull Requests

... (truncated)

Changelog

Sourced from @​rollup/rollup-linux-x64-gnu's changelog.

4.62.4

2026-08-01

Bug Fixes

  • Resolve a regression when using Rollup on older Linux distributions (#6467)

Pull Requests

4.62.3

2026-07-26

Bug Fixes

  • Sanitize illegal characters preserved modules input base (#6439)

Pull Requests

... (truncated)

Commits

Updates @neon-rs/load from 0.1.82 to 0.2.6

Commits
  • 8043a58 v0.2.6
  • 0213f55 Fix prepack script to not overwrite package.json
  • 5d8a3fb Clean up @​neon-rs/cli dependencies and build scripts
  • 78e1825 v0.2.5
  • 06871b2 Add cargo-messages to verdaccio proxy isolated packages
  • 5e63fde Add missing repository field to @​neon-rs/manifest package.json
  • d571d23 v0.2.4
  • 936c08c Fix repository URLs to match GitHub org for npm provenance
  • 817a885 v0.2.3
  • 7803686 Switch to npm OIDC trusted publishing and revert versions to 0.2.2
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​neon-rs/load since your current version.


Updates @anthropic-ai/claude-agent-sdk from 0.3.212 to 0.3.226

Release notes

Sourced from @​anthropic-ai/claude-agent-sdk's releases.

v0.3.226

What's changed

  • Updated to parity with Claude Code v2.1.226

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.226
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.226
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.226
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.226

v0.3.225

What's changed

  • Fixed background subagents in headless/SDK sessions never resuming when a background shell command or Monitor they left running completed, so the subagent never saw the result

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.225
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.225
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.225
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.225

v0.3.224

What's changed

  • Added crossSessionInbound and dialogExpiry settings: cross-session messages sent to a session running with bypassed permissions are held for your approval, and messages to other sessions auto-deliver
  • Added subkind: 'peer-send-message' to the task-notification member of SDKMessageOrigin, marking a notification raised by a cross-session SendMessage
  • Added source: 'archive' plugin config variant to Settings, with url and optional sha256, for installing plugins from a zip over HTTPS
  • Added sandbox credential-masking fields to Settings: decode: 'jwt' with maskClaims, extract/onExtractNoMatch on envVars, and awsPairs/sigv4 for AWS SigV4 re-signing
  • Fixed long (>200 char) project paths resolving to another project's session directory under a shared sanitized prefix; session list/get/rename/tag/fork/delete and /resume no longer cross projects

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.224
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.224
# or
</tr></table>

... (truncated)

Changelog

Sourced from @​anthropic-ai/claude-agent-sdk's changelog.

0.3.226

  • Updated to parity with Claude Code v2.1.226

0.3.225

  • Fixed background subagents in headless/SDK sessions never resuming when a background shell command or Monitor they left running completed, so the subagent never saw the result

0.3.224

  • Added crossSessionInbound and dialogExpiry settings: cross-session messages sent to a session running with bypassed permissions are held for your approval, and messages to other sessions auto-deliver
  • Added subkind: 'peer-send-message' to the task-notification member of SDKMessageOrigin, marking a notification raised by a cross-session SendMessage
  • Added source: 'archive' plugin config variant to Settings, with url and optional sha256, for installing plugins from a zip over HTTPS
  • Added sandbox credential-masking fields to Settings: decode: 'jwt' with maskClaims, extract/onExtractNoMatch on envVars, and awsPairs/sigv4 for AWS SigV4 re-signing
  • Fixed long (>200 char) project paths resolving to another project's session directory under a shared sanitized prefix; session list/get/rename/tag/fork/delete and /resume no longer cross projects

0.3.223

  • Added resumeDropsTurn option: with resumeSessionAt, declares the turn a truncating resume intends to drop; the CLI refuses the resume if anything else would be discarded
  • Result messages for repeated 529 overload failures now include api_error_status: 529, so SDK consumers can detect overload terminations structurally instead of matching message text
  • Bare headless (-p / SDK query() without canUseTool) now emits system/permission_denied stream events when a tool call is auto-denied
  • Documented usage vs modelUsage on stream-json results: usage is main-loop-only and per-turn; modelUsage is cumulative, covers all query-pipeline calls, and is the field for cost accounting

0.3.222

  • Fixed query({ sessionStore, resume }) not carrying user settings.json (apiKeyHelper, env, hooks, permissions) into the resumed subprocess

0.3.221

  • Improved skills option validation: malformed names (delimiters or control characters) and wildcard-form names are rejected with a clear error; use skills: 'all' to enable every skill
  • Fixed external MCP servers passed via the mcpServers option not being connected before the first turn, which caused the model to emit tool calls as literal text

0.3.220

  • Updated to parity with Claude Code v2.1.220

0.3.219

  • Added opt-in cancel_queued to the interrupt control request (capability interrupt_cancel_queued_v1): cancels queued and pending-dispatch messages alongside the abort
  • Added fast_mode_disabled_reason to result and init messages so SDK hosts can explain why fast mode is off
  • Added DirectoryAdded lifecycle hook event to the control protocol, fired when a new working directory is registered mid-session
  • Fixed the initialize response reporting fast_mode_state from the spawn-time model after a model switch
  • Added sandbox.network.strictAllowlist to SDK settings types for deterministically denying non-allowlisted hosts in sandboxed commands
  • Added workflowSizeGuideline to SDK settings types for setting the advisory dynamic-workflow size guideline

0.3.218

  • SkillToolOutput now reports background: true when a forked skill was dispatched as a detached background agent
  • Fixed the result event's api_error_status reporting null for rate-limit and overloaded errors delivered mid-stream; it now reports 429/529
  • Added canonicalModel and provider to each modelUsage entry in result messages so downstream billing can look up the correct rate table for costUSD

... (truncated)

Commits

Updates @anthropic-ai/sdk from 0.111.0 to 0.116.0

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk: v0.116.0

0.116.0 (2026-08-07)

Full Changelog: sdk-v0.115.0...sdk-v0.116.0

Features

  • api: add mid-conversation-tool-changes-2026-07-01 beta (70e04f6)
  • api: add support for session budgets, advisor tool, pinned inference location and skills auto-loading from GitHub (1336a4a)
  • tools: make bash timeout and abort errors matchable by class (#259) (201b12e)

Bug Fixes

  • client: use hardcoded User-Agent strings instead of constructor names (0b97f04)

Chores

  • api: remove retired Claude Opus 4.1 models (11b685c)
  • docs: small updates to descriptions (413cc5f)
  • docs: updates to a few documentation strings (c38a1de)
  • internal/deps: bump @​babel/core and @​babel/helpers to 7.29.7 (#261) (3164934)
  • internal/deps: install tsc-multi from the npm registry (#265) (c787f90)
  • internal: codegen related update (73b3d61)

sdk: v0.115.0

0.115.0 (2026-07-24)

Full Changelog: sdk-v0.114.0...sdk-v0.115.0

Features

  • api: add claude-opus-5 model (cdd3606)
  • api: add tool addition/removal blocks and tool_change events (cdd3606)
  • api: expand client-side fallback credit token types and add server-side fallbacks default option (cdd3606)

Bug Fixes

  • client: release abort listeners when requests settle (#1129) (b85e902)

sdk: v0.114.0

0.114.0 (2026-07-23)

Full Changelog: sdk-v0.113.0...sdk-v0.114.0

Features

  • api: add new stop reason 'model_context_window_exceeded' (1ec71c1)

... (truncated)

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.116.0 (2026-08-07)

Full Changelog: sdk-v0.115.0...sdk-v0.116.0

Features

  • api: add mid-conversation-tool-changes-2026-07-01 beta (70e04f6)
  • api: add support for session budgets, advisor tool, pinned inference location and skills auto-loading from GitHub (1336a4a)
  • tools: make bash timeout and abort errors matchable by class (#259) (201b12e)

Bug Fixes

  • client: use hardcoded User-Agent strings instead of constructor names (0b97f04)

Chores

  • api: remove retired Claude Opus 4.1 models (11b685c)
  • docs: small updates to descriptions (413cc5f)
  • docs: updates to a few documentation strings (c38a1de)
  • internal/deps: bump @​babel/core and @​babel/helpers to 7.29.7 (#261) (3164934)
  • internal/deps: install tsc-multi from the npm registry (#265) (c787f90)
  • internal: codegen related update (73b3d61)

0.115.0 (2026-07-24)

Full Changelog: sdk-v0.114.0...sdk-v0.115.0

Features

  • api: add claude-opus-5 model (cdd3606)
  • api: add tool addition/removal blocks and tool_change events (cdd3606)
  • api: expand client-side fallback credit token types and add server-side fallbacks default option (cdd3606)

Bug Fixes

  • client: release abort listeners when requests settle (#1129) (b85e902)

0.114.0 (2026-07-23)

Full Changelog: sdk-v0.113.0...sdk-v0.114.0

Features

  • api: add new stop reason 'model_context_window_exceeded' (1ec71c1)

0.113.0 (2026-07-22)

... (truncated)

Commits
  • ed02a89 chore: release main
  • d72ff6a feat(api): add support for session budgets, advisor tool, pinned inference lo...
  • dbfed51 chore(internal/deps): refresh provider package dev tooling to mirror-availabl...
  • b7e95bf chore(docs): updates to a few documentation strings
  • 9efb7bd chore(api): remove retired Claude Opus 4.1 models
  • 342d422 chore(internal/deps): install tsc-multi from the npm registry (#265)
  • 501955c chore(internal/deps): bump @​babel/core and @​babel/helpers to 7.29.7 (#261)
  • 6641c5e feat(tools): make bash timeout and abort errors matchable by class (#259)

@dependabot
chore(deps): bump the production-minor-patch group across 1 directory…
cfad0ef 
… with 11 updates

Bumps the production-minor-patch group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.22.0` | `8.23.0` |
| [posthog-node](https://github.com/PostHog/posthog-js/tree/HEAD/packages/node) | `5.45.2` | `5.48.1` |
| [jose](https://github.com/panva/jose) | `6.2.3` | `6.2.8` |
| [@rollup/rollup-linux-x64-gnu](https://github.com/rollup/rollup) | `4.62.2` | `4.62.4` |
| [@neon-rs/load](https://github.com/neon-bindings/neon-rs) | `0.1.82` | `0.2.6` |
| [@anthropic-ai/claude-agent-sdk](https://github.com/anthropics/claude-agent-sdk-typescript) | `0.3.212` | `0.3.226` |
| [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.111.0` | `0.116.0` |
| [@clerk/nextjs](https://github.com/clerk/javascript/tree/HEAD/packages/nextjs) | `7.5.17` | `7.7.1` |
| [next](https://github.com/vercel/next.js) | `15.5.21` | `15.5.23` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.0` | `4.23.11` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.1.4` | `8.2.1` |



Updates `pg` from 8.22.0 to 8.23.0
- [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md)
- [Commits](https://github.com/brianc/node-postgres/commits/pg@8.23.0/packages/pg)

Updates `posthog-node` from 5.45.2 to 5.48.1
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/packages/node/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/commits/posthog-node@5.48.1/packages/node)

Updates `jose` from 6.2.3 to 6.2.8
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](panva/jose@v6.2.3...v6.2.8)

Updates `@rollup/rollup-linux-x64-gnu` from 4.62.2 to 4.62.4
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.62.2...v4.62.4)

Updates `@neon-rs/load` from 0.1.82 to 0.2.6
- [Release notes](https://github.com/neon-bindings/neon-rs/releases)
- [Commits](neon-bindings/neon-rs@v0.1.82...v0.2.6)

Updates `@anthropic-ai/claude-agent-sdk` from 0.3.212 to 0.3.226
- [Release notes](https://github.com/anthropics/claude-agent-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/claude-agent-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/claude-agent-sdk-typescript@v0.3.212...v0.3.226)

Updates `@anthropic-ai/sdk` from 0.111.0 to 0.116.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.111.0...sdk-v0.116.0)

Updates `@clerk/nextjs` from 7.5.17 to 7.7.1
- [Release notes](https://github.com/clerk/javascript/releases)
- [Changelog](https://github.com/clerk/javascript/blob/main/packages/nextjs/CHANGELOG.md)
- [Commits](https://github.com/clerk/javascript/commits/@clerk/nextjs@7.7.1/packages/nextjs)

Updates `next` from 15.5.21 to 15.5.23
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v15.5.21...v15.5.23)

Updates `tsx` from 4.23.0 to 4.23.11
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.0...v4.23.11)

Updates `vite` from 8.1.4 to 8.2.1
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.2.1/packages/vite)

---
updated-dependencies:
- dependency-name: pg
  dependency-version: 8.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: posthog-node
  dependency-version: 5.48.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: jose
  dependency-version: 6.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: "@rollup/rollup-linux-x64-gnu"
  dependency-version: 4.62.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: "@neon-rs/load"
  dependency-version: 0.2.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@anthropic-ai/claude-agent-sdk"
  dependency-version: 0.3.226
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.116.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@clerk/nextjs"
  dependency-version: 7.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: next
  dependency-version: 15.5.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: tsx
  dependency-version: 4.23.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: vite
  dependency-version: 8.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Aug 16, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: supply-chain. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 16, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 16, 2026 22:09
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 16, 2026
@changeset-bot

changeset-bot Bot commented Aug 16, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: cfad0ef

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants