chore:(deps): bump the dev-dependencies group across 1 directory with 206 updates

[dependabot]

Bumps the dev-dependencies group with 206 updates in the / directory:

Package	From	To
dotenv	17.2.3	18.0.5
handlebars	4.7.8	4.7.10
joi	18.0.2	18.2.9
js-yaml	4.1.1	5.4.3
lucide-react	0.563.0	1.52.0
openai	6.16.0	7.28.0
opencc-js	1.0.5	1.4.2
p-limit	7.2.0	7.3.3
pg	8.17.2	8.23.1
@types/pg	8.16.0	8.23.1
playwright-core	1.57.0	1.63.0
react	19.2.4	19.3.0
@types/react	19.2.10	19.3.0
react-dom	19.2.4	19.3.0
@types/react-dom	19.2.3	19.3.0
sharp	0.34.5	0.35.5
ws	8.19.0	8.22.0
@types/ws	8.18.1	8.18.2
zod	4.3.6	4.6.5
zod-to-json-schema	3.25.1	3.25.2
@eslint/js	9.39.2	10.0.1
@tailwindcss/cli	4.1.18	4.3.3
@types/node	25.0.10	26.6.4
@types/pg	8.16.0	8.23.1
@types/react	19.2.10	19.3.0
@types/react-dom	19.2.3	19.3.0
@types/ws	8.18.1	8.18.2
autoprefixer	10.4.23	10.6.1
eslint	9.39.2	10.12.0
nodemon	3.1.11	3.1.14
postcss	8.5.6	8.5.29
prettier	3.8.1	3.9.9
tailwindcss	4.1.18	4.3.3
tsx	4.21.0	4.23.15
typescript	5.9.3	7.0.2
typescript-eslint	8.54.0	8.71.1
vitest	4.0.18	5.0.3
@babel/helper-string-parser	7.27.1	7.29.7
@babel/helper-validator-identifier	7.28.5	7.29.7
@babel/parser	7.28.6	7.29.9
@babel/types	7.28.6	7.29.8
@dabh/diagnostics	2.0.8	2.0.9
@emnapi/runtime	1.8.1	1.11.3
@eslint-community/eslint-utils	4.9.1	4.10.1
@eslint/config-array	0.21.1	0.23.5
@eslint/config-helpers	0.4.2	0.7.0
@eslint/core	0.17.0	1.2.1
@eslint/object-schema	2.1.7	3.0.5
@eslint/plugin-kit	0.4.1	0.7.3
@hapi/tlds	1.1.4	1.1.7
@humanfs/core	0.19.1	0.19.2
@humanfs/node	0.16.7	0.16.8
@iconify-json/simple-icons	1.2.68	1.2.99
@img/colour	1.0.0	1.1.0
@img/sharp-darwin-arm64	0.34.5	0.35.5
@img/sharp-darwin-x64	0.34.5	0.35.5
@img/sharp-libvips-darwin-arm64	1.2.4	1.3.4
@img/sharp-libvips-darwin-x64	1.2.4	1.3.4
@img/sharp-libvips-linux-arm64	1.2.4	1.3.4
@img/sharp-libvips-linux-arm	1.2.4	1.3.4
@img/sharp-libvips-linux-ppc64	1.2.4	1.3.4
@img/sharp-libvips-linux-riscv64	1.2.4	1.3.4
@img/sharp-libvips-linux-s390x	1.2.4	1.3.4
@img/sharp-libvips-linux-x64	1.2.4	1.3.4
@img/sharp-libvips-linuxmusl-arm64	1.2.4	1.3.4
@img/sharp-libvips-linuxmusl-x64	1.2.4	1.3.4
@img/sharp-linux-arm64	0.34.5	0.35.5
@img/sharp-linux-arm	0.34.5	0.35.5
@img/sharp-linux-ppc64	0.34.5	0.35.5
@img/sharp-linux-riscv64	0.34.5	0.35.5
@img/sharp-linux-s390x	0.34.5	0.35.5
@img/sharp-linux-x64	0.34.5	0.35.5
@img/sharp-linuxmusl-arm64	0.34.5	0.35.5
@img/sharp-linuxmusl-x64	0.34.5	0.35.5
@img/sharp-wasm32	0.34.5	0.35.5
@img/sharp-win32-arm64	0.34.5	0.35.5
@img/sharp-win32-ia32	0.34.5	0.35.5
@img/sharp-win32-x64	0.34.5	0.35.5
@jridgewell/sourcemap-codec	1.5.5	1.6.0
@octokit/app	16.1.2	16.1.4
@octokit/auth-app	8.1.2	8.3.1
@octokit/auth-oauth-app	9.0.3	9.0.5
@octokit/auth-oauth-device	8.0.3	8.0.5
@octokit/auth-oauth-user	6.0.2	6.0.4
@octokit/auth-unauthenticated	7.0.3	7.0.5
@octokit/core	7.0.6	7.0.8
@octokit/endpoint	11.0.2	11.0.5
@octokit/graphql	9.0.3	9.0.5
@octokit/oauth-app	8.0.3	8.0.4
@octokit/oauth-methods	6.0.2	6.0.5
@octokit/plugin-retry	8.0.3	8.1.1
@octokit/plugin-throttling	11.0.3	11.0.5
@octokit/request-error	7.1.0	7.1.2
@octokit/request	10.0.7	10.0.16
@parcel/watcher-android-arm64	2.5.6	2.5.1
@parcel/watcher-darwin-arm64	2.5.6	2.5.1
@parcel/watcher-darwin-x64	2.5.6	2.5.1
@parcel/watcher-freebsd-x64	2.5.6	2.5.1
@parcel/watcher-linux-arm-glibc	2.5.6	2.5.1
@parcel/watcher-linux-arm-musl	2.5.6	2.5.1
@parcel/watcher-linux-arm64-glibc	2.5.6	2.5.1
@parcel/watcher-linux-arm64-musl	2.5.6	2.5.1
@parcel/watcher-linux-x64-glibc	2.5.6	2.5.1
@parcel/watcher-linux-x64-musl	2.5.6	2.5.1
@parcel/watcher-win32-arm64	2.5.6	2.5.1
@parcel/watcher-win32-ia32	2.5.6	2.5.1
@parcel/watcher-win32-x64	2.5.6	2.5.1
@parcel/watcher	2.5.6	2.5.1
@tailwindcss/node	4.1.18	4.3.3
@tailwindcss/oxide-android-arm64	4.1.18	4.3.3
@tailwindcss/oxide-darwin-arm64	4.1.18	4.3.3
@tailwindcss/oxide-darwin-x64	4.1.18	4.3.3
@tailwindcss/oxide-freebsd-x64	4.1.18	4.3.3
@tailwindcss/oxide-linux-arm-gnueabihf	4.1.18	4.3.3
@tailwindcss/oxide-linux-arm64-gnu	4.1.18	4.3.3
@tailwindcss/oxide-linux-arm64-musl	4.1.18	4.3.3
@tailwindcss/oxide-linux-x64-gnu	4.1.18	4.3.3
@tailwindcss/oxide-linux-x64-musl	4.1.18	4.3.3
@tailwindcss/oxide-wasm32-wasi	4.1.18	4.3.3
@tailwindcss/oxide-win32-arm64-msvc	4.1.18	4.3.3
@tailwindcss/oxide-win32-x64-msvc	4.1.18	4.3.3
@tailwindcss/oxide	4.1.18	4.3.3
@tsconfig/node10	1.0.12	1.0.13
@types/aws-lambda	8.10.160	8.10.164
@types/hast	3.0.4	3.0.5
@types/markdown-it	14.1.2	14.2.0
@typescript-eslint/eslint-plugin	8.54.0	8.71.1
@typescript-eslint/parser	8.54.0	8.71.1
@typescript-eslint/project-service	8.54.0	8.71.1
@typescript-eslint/scope-manager	8.54.0	8.71.1
@typescript-eslint/tsconfig-utils	8.54.0	8.71.1
@typescript-eslint/type-utils	8.54.0	8.71.1
@typescript-eslint/types	8.54.0	8.71.1
@typescript-eslint/typescript-estree	8.54.0	8.71.1
@typescript-eslint/utils	8.54.0	8.71.1
@typescript-eslint/visitor-keys	8.54.0	8.71.1
@ungap/structured-clone	1.3.0	1.4.0
@vitest/mocker	4.0.18	5.0.3
@vitest/spy	4.0.18	5.0.3
@vue/devtools-api	7.7.9	7.7.10
@vue/devtools-kit	7.7.9	7.7.10
@vue/devtools-shared	7.7.9	7.7.10
acorn-walk	8.3.4	8.3.5
acorn	8.15.0	8.19.0
ajv	6.12.6	6.15.0
algoliasearch	5.47.0	5.59.0
balanced-match	1.0.2	4.0.4
baseline-browser-mapping	2.9.18	2.11.27
brace-expansion	1.1.12	5.0.12
browserslist	4.28.1	4.29.3
caniuse-lite	1.0.30001766	1.0.30001815
chai	6.2.2	6.3.0
color-convert	2.0.1	3.1.3
color-name	1.1.4	2.1.0
copy-anything	4.0.5	4.1.5
detect-libc	2.1.2	1.0.3
electron-to-chromium	1.5.279	1.5.451
enhanced-resolve	5.18.4	5.26.0
es-module-lexer	1.7.0	2.3.2
es-object-atoms	1.1.1	1.1.2
eslint-scope	8.4.0	9.1.2
espree	10.4.0	11.2.0
expect-type	1.3.0	1.4.0
file-entry-cache	8.0.0	11.1.5
flat-cache	4.0.1	6.1.23
flatted	3.3.3	3.4.4
form-data	4.0.5	4.0.6
hasown	2.0.2	2.0.4
jiti	2.6.1	2.7.0
keyv	4.5.4	5.6.0
lightningcss-android-arm64	1.30.2	1.32.0
lightningcss-darwin-arm64	1.30.2	1.32.0
lightningcss-darwin-x64	1.30.2	1.32.0
lightningcss-freebsd-x64	1.30.2	1.32.0
lightningcss-linux-arm-gnueabihf	1.30.2	1.32.0
lightningcss-linux-arm64-gnu	1.30.2	1.32.0
lightningcss-linux-arm64-musl	1.30.2	1.32.0
lightningcss-linux-x64-gnu	1.30.2	1.32.0
lightningcss-linux-x64-musl	1.30.2	1.32.0
lightningcss-win32-arm64-msvc	1.30.2	1.32.0
lightningcss-win32-x64-msvc	1.30.2	1.32.0
lightningcss	1.30.2	1.32.0
micromark-util-types	2.0.2	2.0.3
minimatch	3.1.2	10.2.6
nanoid	3.3.11	3.3.20
node-releases	2.0.27	2.0.57
obug	2.1.1	2.2.1
pg-cloudflare	1.3.0	1.4.1
pg-connection-string	2.10.1	2.14.1
pg-pool	3.11.0	3.14.0
pg-protocol	1.11.0	1.16.1
picomatch	2.3.1	2.3.2
preact	10.28.2	10.29.8
property-information	7.1.0	7.2.0
sax	1.4.4	1.6.1
scheduler	0.27.0	0.28.0
semver	7.7.3	7.8.5
source-map-js	1.2.1	1.2.2
std-env	3.10.0	4.3.0
tabbable	6.4.0	6.5.0
tapable	2.3.0	2.3.3
tinybench	2.9.0	6.2.1
tinyexec	1.0.2	1.3.1
tinyglobby	0.2.15	0.2.17
toad-cache	3.7.0	3.7.4
ts-api-utils	2.4.0	2.5.0
undici-types	7.16.0	8.9.0
update-browserslist-db	1.2.3	1.3.4
vue	3.5.27	3.5.43
why-is-node-running	2.3.0	3.2.1

Updates dotenv from 17.2.3 to 18.0.5

Changelog

Sourced from dotenv's changelog.

18.0.5 (2026-09-30)

Changed

• Fix missing typescript module declaration (#1068)
• Improve performance for large .env files (#1066)

18.0.4 (2026-09-25)

Changed

• import dotenv/config should default quiet: true (#1063)

18.0.3 (2026-09-22)

Changed

• Patch DOTENV_QUIET setting when inside .env file (#1059)

18.0.2 (2026-09-21)

Changed

• Patch additional edge cases for the fast parser (#1056)

18.0.1 (2026-09-18)

Changed

• Handle file urls in config logging (#1054)

18.0.0 (2026-09-17)

Added

• NEW: Dotenv now has a CLI. (#1022)

$ dotenv run -- node index.js
◇ injected env (2) from .env
Hello Dotenv

• NEW: Dotenv now has a fast parser thanks to @​homanp of superagent.sh. Pass config({ fast: true }), flag --fast, or set DOTENV_FAST=true to opt-in to ~2x faster character-scanner parser. (#1010)

$ dotenv run --fast -- node index.js
◇ injected env (2) from .env
Hello Dotenv
</tr></table> 

... (truncated)

Commits

• 05215e0 18.0.5
• 25bdd0a changelog
• 2d640d2 Merge pull request #1066 from AyanAta42/master
• c84e2b4 Merge pull request #1068 from matzehecht/fix-typescript
• 570146a Optimize fast parser comment scanning
• 4aa0665 add typescript module declaration for dotenv/config
• f1380ec Bound fast parser comment scans to the current line
• a626f72 add link
• b36a142 video links
• 86804c0 18.0.4
• Additional commits viewable in compare view

Updates handlebars from 4.7.8 to 4.7.10

Release notes

Sourced from handlebars's releases.

v4.7.10

• security: Sanitize the source map URL when minifying - f37c599
• security: Iterate lazily in #each and strip whitespace in linear time - 812c226
• security: Escape <!-- and <script in precompiled output - 609d1b1 GHSA-xw65-4hp5-5hc7
• security: Don't trust special properties on context data - ceec388 GHSA-p8wg-vrv2-v86f
• security: Only compile partials that are template strings - c28ee7a
• security: Only dispatch known node types in the Compiler and Visitor - 7d501a5
• security: Validate AST values in the compiler instead of the parser - 703fdcc GHSA-8r5x-fm3f-whwj
• Clarify that --root does not restrict filesystem access - 0fcf25c
• Bump minimist to ^1.2.8 - ea8ed82
• Fix Ruby component publishing documentation - d069c1c
• Fix Composer component definition - 6714e07

Compatibility notes:

• {{#each}} iterates iterables such as Map, Set and generators lazily, like for...of, instead of copying them into an array first. Values added to the iterable while the block renders are now visited too.

Commits

v4.7.9

• fix: enable shell mode for spawn to resolve Windows EINVAL issue - e0137c2
• fix type "RuntimeOptions" also accepting string partials - eab1d14
• feat(types): set hash to be a Record<string, any> - de4414d
• fix non-contiguous program indices - 4512766
• refactor: rename i to startPartIndex - e497a35
• security: fix security issues - 68d8df5
  • GHSA-2w6w-674q-4c4q
  • GHSA-3mfm-83xf-c92r
  • GHSA-xhpv-hc6g-r9c6
  • GHSA-xjpj-3mr7-gcpf
  • GHSA-9cx6-37pm-9jff
  • GHSA-2qvq-rjwj-gvw9
  • GHSA-7rx3-28cr-v5wh
  • GHSA-442j-39wm-28r2

Commits

Changelog

Sourced from handlebars's changelog.

v4.7.10 - October 5th, 2026

• security: Sanitize the source map URL when minifying - f37c599
• security: Iterate lazily in #each and strip whitespace in linear time - 812c226
• security: Escape <!-- and <script in precompiled output - 609d1b1 GHSA-xw65-4hp5-5hc7
• security: Don't trust special properties on context data - ceec388 GHSA-p8wg-vrv2-v86f
• security: Only compile partials that are template strings - c28ee7a
• security: Only dispatch known node types in the Compiler and Visitor - 7d501a5
• security: Validate AST values in the compiler instead of the parser - 703fdcc GHSA-8r5x-fm3f-whwj
• Clarify that --root does not restrict filesystem access - 0fcf25c
• Bump minimist to ^1.2.8 - ea8ed82
• Fix Ruby component publishing documentation - d069c1c
• Fix Composer component definition - 6714e07

Compatibility notes:

• {{#each}} iterates iterables such as Map, Set and generators lazily, like for...of, instead of copying them into an array first. Values added to the iterable while the block renders are now visited too.

Commits

v4.7.9 - March 26th, 2026

• fix: enable shell mode for spawn to resolve Windows EINVAL issue - e0137c2
• fix type "RuntimeOptions" also accepting string partials - eab1d14
• feat(types): set hash to be a Record<string, any> - de4414d
• fix non-contiguous program indices - 4512766
• refactor: rename i to startPartIndex - e497a35
• security: fix security issues - 68d8df5

Commits

Commits

• 45ce152 v4.7.10
• e47b236 Update release notes
• f37c599 Sanitize the source map URL when minifying
• 812c226 Iterate lazily in #each and strip whitespace in linear time
• 609d1b1 Escape <!-- and <script in precompiled output
• ceec388 Don't trust special properties on context data
• c28ee7a Only compile partials that are template strings
• 7d501a5 Only dispatch known node types in the Compiler and Visitor
• 703fdcc Validate AST values in the compiler instead of the parser
• 0fcf25c Clarify that --root does not restrict filesystem access
• Additional commits viewable in compare view

Updates joi from 18.0.2 to 18.2.9

Commits

• fc3f3bc 18.2.9
• e7791cb Merge pull request #3152 from hapijs/chore/3151-cleanup
• 7363128 chore: cleanup for #3151
• 03a9543 Merge pull request #3151 from carfeii/fix/messages-flat-code-proto-pollution
• 5b8333c Reject proto as a flat messages() code, closing a sibling of GHSA-gg4h-3h...
• e30b50e 18.2.8
• 1c9dede Merge pull request #3149 from hapijs/chore/optimize-schema-creation
• cdad986 chore: optimize schema creation
• 057dff2 18.2.7
• a14051a Merge pull request #3148 from hapijs/chore/optimize-large-arrays
• Additional commits viewable in compare view

Updates js-yaml from 4.1.1 to 5.4.3

Changelog

Sourced from js-yaml's changelog.

[5.4.3] - 2026-10-06

Fixed

• Fixed loading a whitespace-only block scalar followed by a less indented line, #802.

[5.4.2] - 2026-09-13

Fixed

• forceQuotes no longer quotes non-string scalars, #798.

[5.4.1] - 2026-08-26

Changed

• Hard-limit merge sequence size to 100.

Security

• Count empty mappings in merge sequences toward maxTotalMergeKeys to limit CPU usage, #797.

[5.4.0] - 2026-08-25

Added

• Added the scalarStyleRules dumper option to customize string formatting. See Scalar styling for details.

Changed

• [breaking] Flattened the low-level AST node style representation. Scalar and collection nodes now use SCALAR_STYLE and COLLECTION_STYLE values; explicit tags use the separate tagged property. Alias nodes now contain only kind and anchor. This only affects code that directly constructs or edits AST nodes.
• [breaking] The sortKeys option was rewritten using AST mutation to avoid side effects.
• Reworked scalar style selection. This can change formatting without changing loaded values; in particular, whitespace-only strings are now double-quoted.

Fixed

• Accept a byte order mark at the start of each document in a stream, #791.
• Produce valid flow mappings with quoteFlowKeys and flowSkipColonSpace, including alias and property-only keys, #786.
• Preserve empty scalar items when converting block sequences to flow style.
• Do not apply the 1024-character simple-key limit to flow mapping keys.
• Count Unicode code points, rather than UTF-16 code units, for the 1024-character simple-key limit.
• Add an explicit document-end marker after keep-chomped block scalars when needed to preserve trailing newlines.

... (truncated)

Commits

• 7832624 5.4.3 released
• 0cbb471 Fix whitespace-only block scalar followed by a less indented line, close #802
• 30108cc Parse the first block mapping key once (#800)
• 494400b 5.4.2 released
• 6d8adb4 Fix forceQuotes quoting non-string scalars, #798
• e5a3ba0 5.4.1 released
• e54dea3 Hard-limit merge sequence size to 100
• dfd3a29 Cleanup 6a8e05f, #797
• 6a8e05f fix: count empty merge sources against maxTotalMergeKeys (#797)
• 6b4ff5e 5.4.0 released
• Additional commits viewable in compare view

Updates lucide-react from 0.563.0 to 1.52.0

Release notes

Sourced from lucide-react's releases.

Version 1.52.0

What's Changed

• fix(icons): changed wifi-cog icon by @​karsa-mistmere in lucide-icons/lucide#4952

Full Changelog: lucide-icons/lucide@1.51.0...1.52.0

Version 1.51.0

What's Changed

• fix(site): persist icon customizer by @​karsa-mistmere in lucide-icons/lucide#4944
• chore(deps): Upgrade to vite 8 by @​ericfennis in lucide-icons/lucide#4950
• feat(icons): added rugby-ball icon by @​dev-mralph in lucide-icons/lucide#3496
• chore(deps): bump the react-deps group across 1 directory with 3 updates by @​dependabot[bot] in lucide-icons/lucide#4951
• fix(react-native): stop forwarding arbitrary rest props to child shape elements by @​cipherprofessor in lucide-icons/lucide#4903
• test(lucide-solid): add Vite and SolidStart integration fixtures by @​ericfennis in lucide-icons/lucide#4884
• feat(icons): add door-closed-cog icon by @​ajaxjiang96 in lucide-icons/lucide#4905
• feat(icons): add text-align-justify-* icons by @​HectorZaGa in lucide-icons/lucide#4942
• chore(deps): bump pnpm/action-setup from 6.0.10 to 6.1.0 in the github-actions group across 1 directory by @​dependabot[bot] in lucide-icons/lucide#4939
• chore(deps): Upgrade to vitest 5 by @​ericfennis in lucide-icons/lucide#4953
• feat(icons): added wind-arrow-up icon by @​jamesgpearce in lucide-icons/lucide#4501
• fix(github/actions): move to daily release flow by @​karsa-mistmere in lucide-icons/lucide#4911
• feat(@​lucide/solid): Support for Solid 2.0 RC by @​davedbase in lucide-icons/lucide#4751
• chore(deps-dev): bump the angular-deps group across 1 directory with 10 updates by @​dependabot[bot] in lucide-icons/lucide#4954
• chore(deps): bump nuxt from 4.4.8 to 4.5.1 by @​dependabot[bot] in lucide-icons/lucide#4949
• feat(icons): added armenian-dram icon by @​Elawphant in lucide-icons/lucide#4456
• feat(icons): add kazakh-tenge icon by @​hkayrad in lucide-icons/lucide#4925

New Contributors

• @​dev-mralph made their first contribution in lucide-icons/lucide#3496
• @​cipherprofessor made their first contribution in lucide-icons/lucide#4903
• @​HectorZaGa made their first contribution in lucide-icons/lucide#4942
• @​jamesgpearce made their first contribution in lucide-icons/lucide#4501
• @​davedbase made their first contribution in lucide-icons/lucide#4751
• @​Elawphant made their first contribution in lucide-icons/lucide#4456
• @​hkayrad made their first contribution in lucide-icons/lucide#4925

Full Changelog: lucide-icons/lucide@1.50.0...1.51.0

Version 1.50.0

What's Changed

• fix(shared): escape attribute values in buildLucideSvg by @​Saadanjum0 in lucide-icons/lucide#4940
• fix(github/actions): use canonical metadata instructions for PR suggestions by @​karsa-mistmere in lucide-icons/lucide#4910
• fix(icons): replaced nut & nut-off with compliant designs by @​karsa-mistmere in lucide-icons/lucide#4840
• chore(deps-dev): bump @​angular/router from 22.1.7 to 22.2.0 by @​dependabot[bot] in lucide-icons/lucide#4945
• chore(deps): bump next from 16.3.4 to 16.3.6 by @​dependabot[bot] in lucide-icons/lucide#4946
• chore(deps-dev): bump the svelte-deps group with 2 updates by @​dependabot[bot] in lucide-icons/lucide#4918
• test(integrations): add Vue integration fixtures for Vite, Nuxt and Vike by @​ericfennis in lucide-icons/lucide#4882
• feat(svelte): export context subpath by @​vugarbbakhishov-hub in lucide-icons/lucide#4927
• fix(lucide-preact): add Preact v11 compatibility by @​JoviDeCroock in lucide-icons/lucide#4924
• feat(icons): added layout-grid-circles icon by @​karsa-mistmere in lucide-icons/lucide#4567

... (truncated)

Commits

• 98331e2 chore(deps): bump the react-deps group across 1 directory with 3 updates (#4951)
• 09aa9c5 chore(deps): Upgrade to vite 8 (#4950)
• e042fec fix(packages): declare @types/react as an optional peer dependency (#4892)
• f06ac67 chore(typchecking): More typecheck jobs for all packages (#4885)
• 94e4cb9 chore(dependencies): Update dependencies (#4806)
• 99d25bd feat(packages): extract icon build logic into @lucide/shared (#4409)
• 75b5516 chore(dev): upgrade ESLint to latest compatible stack (v10) (#4378)
• 0f8d48b test(packages): updates unit test snapshots with face-slightly-smiling (#4676)
• f229f83 chore(depedencies): Update dependencies (#4553)
• 5ff536e ci(release.yml): Fix workflow and remove version scripts in package scripts...
• Additional commits viewable in compare view

Updates openai from 6.16.0 to 7.28.0

Release notes

Sourced from openai's releases.

v7.28.0

7.28.0 (2026-10-02)

Features

• api: add custom voice creation and agent session events (#2858) (11b9283)

v7.27.0

7.27.0 (2026-10-01)

Features

• agents: prepare hosted files and download result artifacts (#2855) (7b5a9e0)

v7.26.0

7.26.0 (2026-10-01)

Features

• collect final output from beta Agents streams (#2850) (71d2412)
• agents: [1/n] parse typed output from agent streams (#2853) (95b197b)
• api: Add agent session trace listing (#2845) (c6dd4c7)
• beta: bind typed application functions to Agents tools (#2852) (6198ba0)

Bug Fixes

• api: allow original image detail in Chat Completions (#2851) (a3c1af5)
• api: correct the eval run cancellation endpoint (#2847) (2f77415)
• deps-dev: bump @​swc/core from 1.16.1 to 1.16.2 (#2827) (ff26e64)
• deps-dev: bump puppeteer from 25.10.0 to 25.11.0 in /ecosystem-tests/browser-direct-import (#2823) (53f8877)
• deps-dev: bump puppeteer from 25.10.0 to 25.11.0 in /ecosystem-tests/ts-browser-webpack (#2830) (2ac0cf2)
• deps-dev: bump webpack from 5.110.3 to 5.111.1 in /ecosystem-tests/ts-browser-webpack (#2828) (89de47a)
• deps-dev: bump wrangler from 4.131.1 to 4.135.0 in /ecosystem-tests/cloudflare-worker (#2824) (8c2e159)
• deps-dev: update Vercel CLI to remove legacy proxy dependencies (#2835) (94395e8)
• deps-dev: upgrade Vitest and migrate performance benchmarks (#2831) (a1421b1)
• deps: bump @​azure/identity from 4.13.2 to 4.13.3 (#2825) (bfa2dec)
• deps: bump dotenv from 17.4.2 to 18.0.1 (#2822) (6d0a62c)
• deps: bump zod from 4.5.4 to 4.6.5 (#2829) (d2e9a06)
• responses: refresh credentials on WebSocket reconnects (#2856) (0afb3da)
• responses: reserve lane IDs across WebSocket session replacements (#2842) (8b5e176)

Chores

• api: retain WebRTC Live session transport types (#2846) (9798c93)

... (truncated)

Changelog

Sourced from openai's changelog.

7.28.0 (2026-10-02)

Features

• api: add custom voice creation and agent session events (#2858) (11b9283)

7.27.0 (2026-10-01)

Features

• agents: prepare hosted files and download result artifacts (#2855) (7b5a9e0)

7.26.0 (2026-10-01)

Features

• collect final output from beta Agents streams (#2850) (71d2412)
• agents: [1/n] parse typed output from agent streams (#2853) (95b197b)
• api: Add agent session trace listing (#2845) (c6dd4c7)
• beta: bind typed application functions to Agents tools (#2852) (6198ba0)

Bug Fixes

• api: allow original image detail in Chat Completions (#2851) (a3c1af5)
• api: correct the eval run cancellation endpoint (#2847) (2f77415)
• deps-dev: bump @​swc/core from 1.16.1 to 1.16.2 (#2827) (ff26e64)
• deps-dev: bump puppeteer from 25.10.0 to 25.11.0 in /ecosystem-tests/browser-direct-import (#2823) (53f8877)
• deps-dev: bump puppeteer from 25.10.0 to 25.11.0 in /ecosystem-tests/ts-browser-webpack (#2830) (2ac0cf2)
• deps-dev: bump webpack from 5.110.3 to 5.111.1 in /ecosystem-tests/ts-browser-webpack (#2828) (89de47a)
• deps-dev: bump wrangler from 4.131.1 to 4.135.0 in /ecosystem-tests/cloudflare-worker (#2824) (8c2e159)
• deps-dev: update Vercel CLI to remove legacy proxy dependencies (#2835) (94395e8)
• deps-dev: upgrade Vitest and migrate performance benchmarks (#2831) (a1421b1)
• deps: bump @​azure/identity from 4.13.2 to 4.13.3 (#2825) (bfa2dec)
• deps: bump dotenv from 17.4.2 to 18.0.1 (#2822) (6d0a62c)
• deps: bump zod from 4.5.4 to 4.6.5 (#2829) (d2e9a06)
• responses: refresh credentials on WebSocket reconnects (

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 85581858-82e4-43e7-94f9-01f4a24a3b60

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}