deps: bump the minor-and-patch group with 24 updates

[dependabot]

Bumps the minor-and-patch group with 24 updates:

Package	From	To
@anthropic-ai/sdk	0.121.0	0.123.0
@contentauth/c2pa-node	0.9.1	0.9.3
@google/genai	2.19.0	2.21.0
@opentelemetry/api-logs	0.221.0	0.222.0
@opentelemetry/exporter-logs-otlp-http	0.221.0	0.222.0
@opentelemetry/resources	2.10.0	2.11.0
@opentelemetry/sdk-logs	0.221.0	0.222.0
@slack/bolt	5.0.0	5.1.0
@slack/web-api	8.1.0	8.1.1
@workos-inc/node	10.12.0	10.13.0
@workos-inc/widgets	1.17.0	1.17.2
express-rate-limit	8.6.2	8.7.0
mammoth	1.12.1	1.12.2
multer	2.2.0	2.3.0
openai	7.8.0	7.9.0
posthog-node	5.51.3	5.51.6
resend	6.24.0	6.25.0
stripe	22.6.0	22.6.1
svix	2.1.0	2.3.0
undici	8.10.0	8.10.1
zod	4.4.3	4.5.4
mint	4.2.836	4.2.866
puppeteer	25.9.0	25.10.0
tsx	4.23.12	4.23.13

Updates @anthropic-ai/sdk from 0.121.0 to 0.123.0

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk: v0.123.0

0.123.0 (2026-09-01)

Full Changelog: sdk-v0.122.0...sdk-v0.123.0

Features

• api: beta user profiles: add external_user_onboarded_at, remove relationship in favor of access_type (3efb1a1)
• api: manual updates (c6f0bda)
• api: organization compliance settings, user-profile order_by, memory-store and toolset schema updates (8e2f0c2)

Bug Fixes

• keep credential file access out of non-Node bundles (ab6a4b2)

Chores

• internal: codegen related update (788ea8b)

Documentation

• changelog: detail the beta files/skills GA-shape change (#1175) (4951de0)

sdk: v0.122.0

0.122.0 (2026-08-27)

Full Changelog: sdk-v0.121.0...sdk-v0.122.0

Features

• api: beta files/skills namespaces use GA shapes; drop dated beta header pins (45d693a)

Bug Fixes

• client: classify cross-realm DOMException abort/timeout errors correctly (1bd6395)
• client: use configured logger for SSE parse errors (80eeaf7)
• sessions: make event accumulator forward-compatible with new event types (#410) (2d084fd)
• tools: let read return a view_range of a file over the size cap (#427) (56b3260)
• uploads: default bare Blob filename on skills endpoints (#422) (e111649)
• webhooks: require headers to be passed to unwrap() (3230804)

Chores

• internal: codegen related update (c2f327a)

... (truncated)

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.123.0 (2026-09-01)

Full Changelog: sdk-v0.122.0...sdk-v0.123.0

Features

• api: beta user profiles: add external_user_onboarded_at, remove relationship in favor of access_type (3efb1a1)
• api: manual updates (c6f0bda)
• api: organization compliance settings, user-profile order_by, memory-store and toolset schema updates (8e2f0c2)

Bug Fixes

• keep credential file access out of non-Node bundles (ab6a4b2)

Chores

• internal: codegen related update (788ea8b)

Documentation

• changelog: detail the beta files/skills GA-shape change (#1175) (4951de0)

0.122.0 (2026-08-27)

Full Changelog: sdk-v0.121.0...sdk-v0.122.0

Features

• api: beta files/skills namespaces use GA shapes; drop dated beta header pins (45d693a)

  The beta Files and Skills namespaces (client.beta.files, client.beta.skills) no longer send the files-api-2025-04-14 / skills-2025-10-02 headers and return the same shapes as client.files / client.skills (with Beta-prefixed type names). Requests that still send those headers on raw HTTP keep receiving the beta shapes.

  Changes in the beta namespaces:

  • client.beta.skills.delete() now deletes a Skill together with all of its versions (previously refused while any version existed). It returns BetaDeletedSkill (was SkillDeleteResponse).
  • Beta Messages type BetaSkill (the {type, skill_id, version} entry in BetaContainer.skills) is renamed BetaContainerSkill; the request-side BetaSkillParams keeps its name. BetaSkill now names the Skill object returned by client.beta.skills.create() / retrieve() / list() (replacing SkillCreateResponse / SkillRetrieveResponse / SkillListResponse), and skill versions are BetaSkillVersion / BetaDeletedSkillVersion (replacing Version*Response).
  • client.beta.files.list() returns a BetaFileMetadataPageCursor (PageCursor<BetaFileMetadata> with data / next_page) and FileListParams paginates with page / ids (was BetaFileMetadataPage, a Page<BetaFileMetadata> with data, has_more, first_id, last_id and before_id / after_id); for await auto-pagination is unchanged. BetaSkill uses display_name (was display_title, also in SkillCreateParams) and latest_version_id (was latest_version), and BetaSkillVersion is addressed by its skver_… id (the Unix-timestamp version field is gone).

  Migration guides: Migrate from files-api-2025-04-14 · Migrate from skills-2025-10-02

Bug Fixes

• client: classify cross-realm DOMException abort/timeout errors correctly (1bd6395)
• client: use configured logger for SSE parse errors (80eeaf7)
• sessions: make event accumulator forward-compatible with new event types (#410) (2d084fd)
• tools: let read return a view_range of a file over the size cap (#427) (56b3260)
• uploads: default bare Blob filename on skills endpoints (#422) (e111649)

... (truncated)

Commits

• 4140e0e chore: release main (#1172)
• 4951de0 docs(changelog): detail the beta files/skills GA-shape change (#1175)
• 7f3898c chore: release main
• 956ccb5 docs(api): clarify pagination on the organization rate-limit list endpoints
• 2131d80 fix(tools): let read return a view_range of a file over the size cap (#427)
• f830c8f fix(aws,bedrock): prefer env credentials over AWS_PROFILE (#436)
• 4d50ddf test(ecosystem): expect cross-realm timeout errors to classify correctly
• acdd669 fix(client): classify cross-realm DOMException abort/timeout errors correctly
• 0a14622 test(tools): pin that read, edit and the memory tool preserve CRLF and CR lin...
• 17035de docs: document TypeScript 5.0 as the minimum supported version
• Additional commits viewable in compare view

Updates @contentauth/c2pa-node from 0.9.1 to 0.9.3

Changelog

Sourced from @​contentauth/c2pa-node's changelog.

0.9.3

Patch Changes

• 4abe0a1: Switch fs-extra import from namespace import to default import.

0.9.2

Patch Changes

• afccc92: Update c2pa-rs from 0.90.15->0.90.16
• f9553a7: Remove redundant archive-metadata assertion filtering
• Updated dependencies [afccc92]
  • @​contentauth/c2pa-types@​0.7.4
  • @​contentauth/c2pa-utilities@​0.2.2

Commits

• a6c835d chore: version packages (#209)
• 4abe0a1 fix(c2pa-node): Switch fs-extra to default import from namespace import (#208)
• 29549b7 chore: version packages (#206)
• f9553a7 fix: Remove redundant archive-metadata assertion filtering (#205)
• See full diff in compare view

Updates @google/genai from 2.19.0 to 2.21.0

Release notes

Sourced from @​google/genai's releases.

v2.21.0

2.21.0 (2026-09-02)

Features

• Add Gemini 3.8 Flash model to SDKs and update Flash model descriptions (4a969fe)

v2.20.0

2.20.0 (2026-08-31)

Features

• Add support for the audio/webm MIME type. (b0e3c5f)
• Add translation_config SDK support for GEAP. (3e1d923)
• add Video Understanding support to the Interactions API (6ddbeba)

Bug Fixes

• Don't set redundant Content-Length on file upload requests (2f5cc7a)
• Don't set redundant Content-Length on file upload requests (2f5cc7a), refs #1718
• expose ProcessingCallStep and ProcessingResultStep in Interactions SDK (b6f8db5)
• Quote setupComplete key in LiveClientMessage (4467faf)

Changelog

Sourced from @​google/genai's changelog.

2.21.0 (2026-09-02)

Features

• Add Gemini 3.8 Flash model to SDKs and update Flash model descriptions (4a969fe)

2.20.0 (2026-08-31)

Features

• Add support for the audio/webm MIME type. (b0e3c5f)
• Add translation_config SDK support for GEAP. (3e1d923)
• add Video Understanding support to the Interactions API (6ddbeba)

Bug Fixes

• Don't set redundant Content-Length on file upload requests (2f5cc7a)
• Don't set redundant Content-Length on file upload requests (2f5cc7a), refs #1718
• expose ProcessingCallStep and ProcessingResultStep in Interactions SDK (b6f8db5)
• Quote setupComplete key in LiveClientMessage (4467faf)

Commits

• 27af897 chore(main): release 2.21.0 (#1915)
• 4a969fe feat: Add Gemini 3.8 Flash model to SDKs and update Flash model descriptions
• 8233d41 chore: docs
• 7fe15a6 chore(main): release 2.20.0 (#1899)
• b0e3c5f feat: Add support for the audio/webm MIME type.
• 3e1d923 feat: Add translation_config SDK support for GEAP.
• b6f8db5 fix: expose ProcessingCallStep and ProcessingResultStep in Interactions SDK
• 4467faf fix: Quote setupComplete key in LiveClientMessage
• 6ddbeba feat: add Video Understanding support to the Interactions API
• 6a44ab0 chore: keep config as the last method parameter
• Additional commits viewable in compare view

Updates @opentelemetry/api-logs from 0.221.0 to 0.222.0

Release notes

Sourced from @​opentelemetry/api-logs's releases.

experimental/v0.222.0

0.222.0

💥 Breaking Changes

• fix(sdk-node)!: fail-fast on Propagator creation from config file #6930 @​trentm
• fix(sdk-node)!: fail-fast on MeterProvider creation from config file #6954 @​trentm
• fix(sdk-node)!: fail-fast on TracerProvider creation from config file #6962 @​trentm
• fix(sdk-node)!: fail-fast on Resource creation from config file #6989 @​trentm

  • This also breaks some usage of startNodeSDK() for environment-based config, i.e. when not using a config file. For example with OTEL_NODE_RESOURCE_DETECTORS=all, it results in an error message and a no-op SDK. (This does not impact users of new NodeSDK() -- the currently recommended mechanism to start an SDK using this package.)

    Could not create OpenTelemetry SDK from configuration, SDK will not be setup: unknown ExperimentalResourceDetector name in configuration: "container"

🚀 Features

• feat(sdk-logs): deprecate SdkLogRecord in favor of ReadWriteLogRecord #6939 @​pichlermarc

🐛 Bug Fixes

• fix(instrumentation-http): redact sensitive query parameters on incoming (server) spans; add redactedQueryParamsServer config option @​dyladan
• fix(sdk-node): support headers_list when creating OTLP exporters from declarative configuration #6953 @​JacksonWeber

📚 Documentation

• docs(sdk-logs): mark logger configuration as experimental #6996 @​LarryHu0217
• docs(configuration): document the ConfigModel suffix naming convention for exported types #6612 @​vedantchalke36

🏠 Internal

• refactor(sampler-jaeger-remote): remove axios dependency and use fetch to get the sampler configuration from Jaeger API #6963 @​david-luna

Commits

• 0b72a81 chore: prepare next release (#7044)
• a9c5338 ci: roll prerelease changelog into one final release changelog (#7045)
• f41805e chore: prepare next release (#7042)
• b85eb28 chore(instrumentation-http): fix lint errors (#7039)
• 3f92530 ci: support pre-releases and major version bumps in release workflow (#7035)
• 82a5831 docs(otlp-exporter-base): document HTTP exporter options (#6735)
• e086dec Merge commit from fork
• 59dac70 chore(deps): update jamesives/github-pages-deploy-action action to v4.9.0 (#7...
• d0ce753 chore: add @​maryliag to maintainers (#7024)
• 03469a1 chore(deps): update open-telemetry/shared-workflows action to v0.10.0 (#7032)
• Additional commits viewable in compare view

Updates @opentelemetry/exporter-logs-otlp-http from 0.221.0 to 0.222.0

Release notes

Sourced from @​opentelemetry/exporter-logs-otlp-http's releases.

experimental/v0.222.0

0.222.0

💥 Breaking Changes

• fix(sdk-node)!: fail-fast on Propagator creation from config file #6930 @​trentm
• fix(sdk-node)!: fail-fast on MeterProvider creation from config file #6954 @​trentm
• fix(sdk-node)!: fail-fast on TracerProvider creation from config file #6962 @​trentm
• fix(sdk-node)!: fail-fast on Resource creation from config file #6989 @​trentm

  • This also breaks some usage of startNodeSDK() for environment-based config, i.e. when not using a config file. For example with OTEL_NODE_RESOURCE_DETECTORS=all, it results in an error message and a no-op SDK. (This does not impact users of new NodeSDK() -- the currently recommended mechanism to start an SDK using this package.)

    Could not create OpenTelemetry SDK from configuration, SDK will not be setup: unknown ExperimentalResourceDetector name in configuration: "container"

🚀 Features

• feat(sdk-logs): deprecate SdkLogRecord in favor of ReadWriteLogRecord #6939 @​pichlermarc

🐛 Bug Fixes

• fix(instrumentation-http): redact sensitive query parameters on incoming (server) spans; add redactedQueryParamsServer config option @​dyladan
• fix(sdk-node): support headers_list when creating OTLP exporters from declarative configuration #6953 @​JacksonWeber

📚 Documentation

• docs(sdk-logs): mark logger configuration as experimental #6996 @​LarryHu0217
• docs(configuration): document the ConfigModel suffix naming convention for exported types #6612 @​vedantchalke36

🏠 Internal

• refactor(sampler-jaeger-remote): remove axios dependency and use fetch to get the sampler configuration from Jaeger API #6963 @​david-luna

Commits

• 0b72a81 chore: prepare next release (#7044)
• a9c5338 ci: roll prerelease changelog into one final release changelog (#7045)
• f41805e chore: prepare next release (#7042)
• b85eb28 chore(instrumentation-http): fix lint errors (#7039)
• 3f92530 ci: support pre-releases and major version bumps in release workflow (#7035)
• 82a5831 docs(otlp-exporter-base): document HTTP exporter options (#6735)
• e086dec Merge commit from fork
• 59dac70 chore(deps): update jamesives/github-pages-deploy-action action to v4.9.0 (#7...
• d0ce753 chore: add @​maryliag to maintainers (#7024)
• 03469a1 chore(deps): update open-telemetry/shared-workflows action to v0.10.0 (#7032)
• Additional commits viewable in compare view

Updates @opentelemetry/resources from 2.10.0 to 2.11.0

Release notes

Sourced from @​opentelemetry/resources's releases.

v2.11.0

2.11.0

🚀 Features

• feat(context-async-hooks): implement attach() on AsyncLocalStorageContextManager #6845 @​pichlermarc
  • On Node.js 25.9+, delegates to AsyncLocalStorage.withScope() returning a native RunScope. On older Node.js, falls back to enterWith() with a manual disposable wrapper.
• feat(sdk-trace): allow configuring the force flush timeout per call #6929 @​LarryHu0217

🐛 Bug Fixes

• fix(sdk-metrics): ignore Infinity in exponential histograms #7015 @​mwear

🏠 Internal

• perf(sdk-metrics): reuse a single DataView for exponential histogram bit reads #6998 @​mwear
• chore(ci): run documentation tests on a weekly schedule #6920 @​LarryHu0217
• feat(ci): support pre-releases and major version bumps in the release workflow #6768 @​pichlermarc
• chore(resources): Ensure that multiple uses of serviceInstanceIdDetector.detect() return the same value for service.instance.id

Changelog

Sourced from @​opentelemetry/resources's changelog.

2.11.0

🚀 Features

• feat(context-async-hooks): implement attach() on AsyncLocalStorageContextManager #6845 @​pichlermarc
  • On Node.js 25.9+, delegates to AsyncLocalStorage.withScope() returning a native RunScope. On older Node.js, falls back to enterWith() with a manual disposable wrapper.
• feat(sdk-trace): allow configuring the force flush timeout per call #6929 @​LarryHu0217

🐛 Bug Fixes

• fix(sdk-trace-base): avoid a Webpack self-reference error in CommonJS output #6981 @​sansynx
• fix(sdk-metrics): ignore Infinity in exponential histograms #7015 @​mwear

🏠 Internal

• perf(sdk-metrics): reuse a single DataView for exponential histogram bit reads #6998 @​mwear
• chore(ci): run documentation tests on a weekly schedule #6920 @​LarryHu0217
• feat(ci): support pre-releases and major version bumps in the release workflow #6768 @​pichlermarc
• chore(resources): Ensure that multiple uses of serviceInstanceIdDetector.detect() return the same value for service.instance.id

Commits

• 0b72a81 chore: prepare next release (#7044)
• a9c5338 ci: roll prerelease changelog into one final release changelog (#7045)
• f41805e chore: prepare next release (#7042)
• b85eb28 chore(instrumentation-http): fix lint errors (#7039)
• 3f92530 ci: support pre-releases and major version bumps in release workflow (#7035)
• 82a5831 docs(otlp-exporter-base): document HTTP exporter options (#6735)
• e086dec Merge commit from fork
• 59dac70 chore(deps): update jamesives/github-pages-deploy-action action to v4.9.0 (#7...
• d0ce753 chore: add @​maryliag to maintainers (#7024)
• 03469a1 chore(deps): update open-telemetry/shared-workflows action to v0.10.0 (#7032)
• Additional commits viewable in compare view

Updates @opentelemetry/sdk-logs from 0.221.0 to 0.222.0

Release notes

Sourced from @​opentelemetry/sdk-logs's releases.

experimental/v0.222.0

0.222.0

💥 Breaking Changes

• fix(sdk-node)!: fail-fast on Propagator creation from config file #6930 @​trentm
• fix(sdk-node)!: fail-fast on MeterProvider creation from config file #6954 @​trentm
• fix(sdk-node)!: fail-fast on TracerProvider creation from config file #6962 @​trentm
• fix(sdk-node)!: fail-fast on Resource creation from config file #6989 @​trentm

  • This also breaks some usage of startNodeSDK() for environment-based config, i.e. when not using a config file. For example with OTEL_NODE_RESOURCE_DETECTORS=all, it results in an error message and a no-op SDK. (This does not impact users of new NodeSDK() -- the currently recommended mechanism to start an SDK using this package.)

    Could not create OpenTelemetry SDK from configuration, SDK will not be setup: unknown ExperimentalResourceDetector name in configuration: "container"

🚀 Features

• feat(sdk-logs): deprecate SdkLogRecord in favor of ReadWriteLogRecord #6939 @​pichlermarc

🐛 Bug Fixes

• fix(instrumentation-http): redact sensitive query parameters on incoming (server) spans; add redactedQueryParamsServer config option @​dyladan
• fix(sdk-node): support headers_list when creating OTLP exporters from declarative configuration #6953 @​JacksonWeber

📚 Documentation

• docs(sdk-logs): mark logger configuration as experimental #6996 @​LarryHu0217
• docs(configuration): document the ConfigModel suffix naming convention for exported types #6612 @​vedantchalke36

🏠 Internal

• refactor(sampler-jaeger-remote): remove axios dependency and use fetch to get the sampler configuration from Jaeger API #6963 @​david-luna

Commits

• 0b72a81 chore: prepare next release (#7044)
• a9c5338 ci: roll prerelease changelog into one final release changelog (#7045)
• f41805e chore: prepare next release (#7042)
• b85eb28 chore(instrumentation-http): fix lint errors (#7039)
• 3f92530 ci: support pre-releases and major version bumps in release workflow (#7035)
• 82a5831 docs(otlp-exporter-base): document HTTP exporter options (#6735)
• e086dec Merge commit from fork
• 59dac70 chore(deps): update jamesives/github-pages-deploy-action action to v4.9.0 (#7...
• d0ce753 chore: add @​maryliag to maintainers (#7024)
• 03469a1 chore(deps): update open-telemetry/shared-workflows action to v0.10.0 (#7032)
• Additional commits viewable in compare view

Updates @slack/bolt from 5.0.0 to 5.1.0

Changelog

Sourced from @​slack/bolt's changelog.

5.1.0

Minor Changes

• 6cf7b0c: Enforce a configurable request body size limit in HTTPReceiver and ExpressReceiver to prevent unauthenticated large-body denial-of-service attempts. Both receivers previously buffered the entire request body into memory before signature verification, so a flood of large invalid requests could exhaust memory and crash a publicly exposed app.

  Both receivers now reject request bodies larger than a new bodyLimit option with an HTTP 413 response before the whole body is buffered. The limit is enforced on the bytes actually received (not the Content-Length header, which a client controls) and applies even when signatureVerification is false. It defaults to 4194304 (4 MB); pass a different number of bytes, a bytes-style string like '4mb', or Infinity to disable it (not recommended in production).

  This is a security fix with a minor behavioral change: requests with bodies larger than 4 MB are now rejected with 413 by default (previously unbounded). Apps that legitimately receive larger payloads can raise bodyLimit on the receiver.

Patch Changes

• b9acd4f: Fix AwsEventV1.multiValueQueryStringParameters to allow null, matching the actual AWS API Gateway payload and the @types/aws-lambda APIGatewayProxyEvent type. This resolves the type error when passing an APIGatewayProxyEvent directly to the handler returned by AwsLambdaReceiver.

Commits

• ffbe0b6 chore: release (#3020)
• 6cf7b0c feat(receivers): add configurable bodyLimit to cap request body size (#3057)
• 08d52ee chore(deps-dev): bump @​changesets/cli from 2.30.0 to 3.0.1 (#3067)
• f7a7379 chore(deps-dev): update serverless requirement from ^4.41.0 to ^4.41.1 in /ex...
• 0542410 chore(deps-dev): bump @​changesets/get-release-plan from 4.0.15 to 4.0.16 (#3066)
• 278eb5b chore(deps-dev): bump @​changesets/config from 3.1.3 to 3.1.4 (#3063)
• b4d97d8 chore(deps-dev): bump @​changesets/assemble-release-plan from 6.0.9 to 6.0.10 ...
• d374244 chore(deps-dev): bump @​changesets/get-dependents-graph from 2.1.3 to 2.1.4 (#...
• 9ae4bde ci: allow Dependabot to update the changesets toolchain (#3061)
• e973b79 chore(deps): bump @​slack/web-api from 8.0.0 to 8.1.1 (#3059)
• Additional commits viewable in compare view

Updates @slack/web-api from 8.1.0 to 8.1.1

Release notes

Sourced from @​slack/web-api's releases.

@​slack/web-api@​8.1.1

Patch Changes

• 0ee1d99: fix: revert internal packages requiring esm loading for backward compatible support (#2711)

Commits

• e026671 chore: release (#2719)
• 0ee1d99 ci: adjust outputs of changeset releases to reattempt most recent releases (#...
• 05502d9 chore: release (#2713)
• 11b81e1 chore(deps): bump changesets/action from 1.9.0 to 2.1.1 (#2714)
• 7a3d149 chore(deps-dev): bump @​changesets/cli from 2.31.1 to 3.0.1 (#2716)
• 67f8a74 chore(deps-dev): bump @​biomejs/biome from 2.5.8 to 2.5.10 (#2717)
• aef66ac fix: revert internal packages requiring esm loading for backward compatible s...
• See full diff in compare view

Updates @workos-inc/node from 10.12.0 to 10.13.0

Release notes

Sourced from @​workos-inc/node's releases.

v10.13.0

10.13.0 (2026-08-31)

Features

• Add Agent Blueprints API support (#1687) (364e223)
• Add Waitlists API support (#1689) (0faa84f)

Changelog

Sourced from @​workos-inc/node's changelog.

10.13.0 (2026-08-31)

Features

• Add Agent Blueprints API support (#1687) (364e223)
• Add Waitlists API support (#1689) (0faa84f)

Commits

• 183714b chore(main): release 10.13.0 (#1688)
• 0faa84f feat: Add Waitlists API support (#1689)
• 364e223 feat: Add Agent Blueprints API support (#1687)
• See full diff in compare view

Updates @workos-inc/widgets from 1.17.0 to 1.17.2

Commits

• See full diff in compare view

Updates express-rate-limit from 8.6.2 to 8.7.0

Release notes

Sourced from express-rate-limit's releases.

v8.7.0

You can view the changelog here.

Commits

• 48db09e 8.7.0
• dce5871 v8.7.0 changelog
• 2f08044 Add inspect.software health badge (#673)
• a29757c feat: add retryAfter option (#661)
• 146e88b chore: rename license
• 5cfb8e8 ci: drop top-level id-token: write from the workflow token (#676)
• 062bbdd fix: re-wrap license.md so GitHub recognizes it as MIT (#675)
• 514772d chore(deps-dev): bump mintlify in the development-dependencies group (#674)
• 4f06c8a chore(deps-dev): bump the development-dependencies group with 2 updates (#671)
• 83356a5 chore(deps): bump ip-address from 10.4.0 to 10.5.0 (#672)
• Additional commits viewable in compare view

Updates mammoth from 1.12.1 to 1.12.2

Changelog

Sourced from mammoth's changelog.

1.12.2Description has been truncated

[bokelley]

Reviewed the grouped minor/patch dependency updates; CI is green.

[aao-secretariat]

Ladon does not review bot-authored PRs.