Skip to content

chore(deps): bump the npm-minor-and-patch group across 1 directory with 38 updates #656

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

chore(deps): bump the npm-minor-and-patch group across 1 directory with 38 updates #656

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -55,8 +55,8 @@
"version": "node scripts/version.mjs"
},
"devDependencies": {
"@changesets/cli": "^3.0.1",
"@eslint-react/eslint-plugin": "^5.18.6",
"@changesets/cli": "^3.0.2",
"@eslint-react/eslint-plugin": "^5.19.0",
"@eslint/js": "^10.0.1",
"cross-env": "^10.1.0",
"eslint": "^10.9.1",
Expand All @@ -67,7 +67,7 @@
"prettier-plugin-organize-imports": "^4.3.0",
"railway": "^3.11.0",
"typescript": "~5.9.3",
"typescript-eslint": "^8.68.0"
"typescript-eslint": "^8.70.0"
},
"lint-staged": {
"*.{js,jsx,ts,tsx,json,md}": "prettier --write --cache --cache-location .prettiercache --cache-strategy content --config .prettierrc"
Expand Down
14 changes: 7 additions & 7 deletions packages/frontend/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -23,25 +23,25 @@
"test": "cross-env NODE_OPTIONS=--conditions=trueforge-dev tsx --test \"tests/**/*.test.ts\""
},
"dependencies": {
"@assistant-ui/core": "0.2.22",
"@assistant-ui/react": "0.14.27",
"@assistant-ui/store": "0.2.21",
"@assistant-ui/core": "0.3.17",
"@assistant-ui/react": "0.15.18",
"@assistant-ui/store": "0.3.12",

@cursor cursor Bot Sep 10, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Assistant-ui bump is inconsistent

High Severity

package.json now pins @assistant-ui/core 0.3.17, @assistant-ui/react 0.15.18, and @assistant-ui/store 0.3.12, but workspace overrides still force 0.2.22 / 0.14.27 / 0.2.21, the lockfile still records those old specifiers, and @truefoundry/trueforge-ui optional peers remain ^0.2.22 / ^0.14.24. Local installs never exercise the new 0.15 APIs, pnpm install can fail under trustLockfile, and published consumers would resolve breaking 0.3/0.15 releases that this repo did not test.

Additional Locations (2)
Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit 2079f15. Configure here.

@cursor cursor Bot Sep 11, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Assistant-ui upgrade splits runtime copies

High Severity

@assistant-ui/core / store / react jump to 0.3.17 / 0.3.12 / 0.15.18 while @truefoundry/assistant-ui-runtime@0.1.36 still depends on core@0.2.22 and store@0.2.21. That yields two physical copies (or Vite dedupe forcing 0.3 onto 0.2-compiled runtime). Duplicate assistant-ui context already causes empty threads with no error; 0.3 also dropped zustand and changed the accessor API, so the chat runtime can fail at boot.

Additional Locations (1)
Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit 7fb549d. Configure here.

"@truefoundry/assistant-ui-runtime": "0.1.36",
"@truefoundry/trueforge-sdk": "workspace:*",
"@truefoundry/trueforge-ui": "workspace:*",
"monaco-editor": "^0.52.0",
"monaco-editor": "^0.56.0",

@cursor cursor Bot Sep 10, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Monaco 0.56 export break

Medium Severity

monaco-editor jumped from ^0.52.0 to ^0.56.0. 0.56 rewrote the package exports map so deep esm/vs/... worker specifiers no longer resolve. vite-plugin-monaco-editor-esm and the monacoeditorwork public-path rewrite can fail to load workers, breaking the editor or falling back to the main thread.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit 5794f77. Configure here.

"react": "^19.2.4",
"react-dom": "^19.2.4",
"react-router-dom": "^7.18.2",
"react-router-dom": "^7.18.3",
"thinking-orbs": "^0.3.1"
},
"devDependencies": {
"@types/react": "^19.2.17",
"@types/react-dom": "^19.2.2",
"@types/react-dom": "^19.2.7",
"@vitejs/plugin-react": "^4.7.0",
"cross-env": "^10.1.0",
"tailwindcss": "4.3.3",
"tsx": "^4.16.2",
"tsx": "^4.23.13",
"typescript": "^5.9.3",
"vite": "^6.3.5",
"vite-plugin-compression2": "^2.5.3",
Expand Down
32 changes: 16 additions & 16 deletions packages/trueforge-core/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -99,33 +99,33 @@
"pack:dry": "pnpm pack --dry-run"
},
"dependencies": {
"@ai-sdk/alibaba": "^2.0.37",
"@ai-sdk/anthropic": "^4.0.44",
"@ai-sdk/google": "^4.0.53",
"@ai-sdk/moonshotai": "^3.0.41",
"@ai-sdk/openai": "^4.0.49",
"@ai-sdk/openai-compatible": "^3.0.39",
"@ai-sdk/provider": "^4.0.8",
"@ai-sdk/provider-utils": "^5.0.32",
"@daytona/sdk": "^0.204.1",
"@hono/zod-openapi": "^1.6.1",
"@ai-sdk/alibaba": "^2.0.41",
"@ai-sdk/anthropic": "^4.0.49",
"@ai-sdk/google": "^4.0.64",
"@ai-sdk/moonshotai": "^3.0.45",
"@ai-sdk/openai": "^4.0.60",
"@ai-sdk/openai-compatible": "^3.0.44",
"@ai-sdk/provider": "^4.0.10",
"@ai-sdk/provider-utils": "^5.0.36",
"@daytona/sdk": "^0.210.0",
"@hono/zod-openapi": "^1.6.3",
"@modelcontextprotocol/sdk": "^1.30.0",
"@nats-io/nats-core": "3.0.2",
"@nats-io/nats-core": "3.4.0",
"@opentelemetry/api": "^1.9.1",
"@opentelemetry/core": "^2.10.0",
"ai": "^7.0.82",
"@opentelemetry/core": "^2.11.0",
"ai": "^7.0.93",
"dedent": "^1.7.2",
"openai": "^7.5.0",
"openai": "^7.10.0",
"ulid": "^3.0.2",
"winston": "^3.19.0",
"ws": "^8.21.3",
"zod": "^4.4.3"
"zod": "^4.5.4"

@cursor cursor Bot Sep 9, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Published packages lack a changeset

Low Severity

Dependency versions that ship in published packages changed, but this PR adds no .changeset/*.md. Run pnpm changeset for @truefoundry/trueforge-core, @truefoundry/trueforge, and @truefoundry/trueforge-ui.

Additional Locations (2)
Fix in Cursor Fix in Web

Triggered by project rule: TrueForge review rules

Reviewed by Cursor Bugbot for commit 8027e00. Configure here.

},
"peerDependencies": {
"redis": "^5.10.0"
},
"devDependencies": {
"@swc/core": "^1.16.1",
"@swc/core": "^1.16.2",
"@swc/jest": "^0.2.39",
"@types/jest": "^29.5.14",
"@types/node": "^24.13.3",
Expand Down
24 changes: 12 additions & 12 deletions packages/trueforge-ui/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -90,38 +90,38 @@
}
},
"dependencies": {
"@assistant-ui/core": "0.2.22",
"@assistant-ui/react": "0.14.27",
"@openuidev/react-headless": "^0.9.4",
"@openuidev/react-lang": "^0.2.9",
"@openuidev/react-ui": "^0.13.2",
"@assistant-ui/core": "0.3.17",
"@assistant-ui/react": "0.15.18",
Comment thread
cursor[bot] marked this conversation as resolved.
"@openuidev/react-headless": "^0.9.13",
"@openuidev/react-lang": "^0.2.15",
"@openuidev/react-ui": "^0.13.10",
"@truefoundry/assistant-ui-runtime": "0.1.36",
"@truefoundry/trueforge-sdk": "workspace:*",
"chart.js": "^4.5.1",
"clsx": "^2.1.1",
"lucide-react": "^0.562.0",
"lucide-react": "^0.577.0",
"monaco-editor": "^0.56.0",
"partial-json": "^0.1.7",
"react-chartjs-2": "^5.3.1",
"react-markdown": "^10.1.0",
"react-resizable-panels": "^4.12.3",
"react-router-dom": "^6 || ^7",
"react-resizable-panels": "^4.12.4",
"react-router-dom": "^7",

@cursor cursor Bot Sep 9, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Router range drops v6 support

Medium Severity

react-router-dom on the published @truefoundry/trueforge-ui package changed from ^6 || ^7 to ^7. Hosts still on React Router v6 will now resolve a second v7 copy or fail peer installation, which can break withRouter URL sync.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit 7776308. Configure here.

"react-syntax-highlighter": "^16.1.1",
"remark-gfm": "^4.0.1",
"tailwind-merge": "^3.6.0",
"thinking-orbs": "^0.3.1",
"truefoundry-gateway-sdk": "^0.4.2",
"zod": "^4.4.3"
"zod": "^4.5.4"

@cursor cursor Bot Sep 9, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Published packages missing changeset

Low Severity

Runtime dependency ranges that ship in published packages changed, but this PR adds no .changeset/*.md. Run pnpm changeset and bump @truefoundry/trueforge-ui, @truefoundry/trueforge-core, and @truefoundry/trueforge.

Additional Locations (2)
Fix in Cursor Fix in Web

Triggered by project rule: TrueForge review rules

Reviewed by Cursor Bugbot for commit 7776308. Configure here.

},
"devDependencies": {
"@eslint/js": "^9.39.0",
"@tailwindcss/cli": "^4.3.2",
"@testing-library/dom": "^10.0.0",
"@testing-library/jest-dom": "^6.6.3",
"@testing-library/react": "^16.3.2",
"@testing-library/react": "^16.3.3",
"@types/node": "^20",
"@types/react": "^19.2.17",
"@types/react-dom": "^19.2.0",
"@types/react-dom": "^19.2.7",
"@types/react-syntax-highlighter": "^15.5.13",
"@vitest/coverage-v8": "^4.1.10",
"esbuild-plugin-svgr": "3.1.1",
Expand All @@ -135,7 +135,7 @@
"tailwindcss": "^4.3.2",
"tsup": "^8.5.0",
"typescript": "^5.9.3",
"typescript-eslint": "^8.46.0",
"typescript-eslint": "^8.70.0",
"vite-plugin-svgr": "^5.2.0",
"vitest": "^4.1.9"
}
Expand Down
22 changes: 11 additions & 11 deletions packages/trueforge/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -60,31 +60,31 @@
"typecheck": "pnpm run build:gen && tsc --noEmit && tsc --noEmit -p tests/db/tsconfig.json && tsc --noEmit -p tests/unit/tsconfig.json"
},
"dependencies": {
"@anthropic-ai/sandbox-runtime": "0.0.71",
"@daytona/sdk": "^0.204.1",
"@anthropic-ai/sandbox-runtime": "0.0.75",
"@daytona/sdk": "^0.210.0",
"@hono/node-server": "^2.1.1",
"@hono/swagger-ui": "^0.2.2",
"@hono/zod-openapi": "^1.6.1",
"@hono/swagger-ui": "^0.6.1",
"@hono/zod-openapi": "^1.6.3",
"@modelcontextprotocol/sdk": "^1.30.0",
"@truefoundry/trueforge-core": "workspace:*",
"@truefoundry/trueforge-sdk": "workspace:*",
"better-sqlite3": "^13.0.3",
"cron-parser": "^5.4.0",
"env-paths": "^4.0.0",
"hono": "^4.13.5",
"jose": "^6.2.10",
"hono": "^4.13.7",
"jose": "^6.2.12",
"kysely": "^0.29.5",
"openid-client": "^6.8.7",
"openid-client": "^6.8.8",
"pg": "^8.23.0",
"redis": "^5.12.1",
"ulid": "^3.0.2",
"undici": "7.29.0",
"undici": "7.29.1",
"winston": "^3.19.0",
"yaml": "^2.9.0",
"zod": "^4.4.3"
"zod": "^4.5.4"
},
"devDependencies": {
"@swc/core": "^1.16.1",
"@swc/core": "^1.16.2",
"@swc/jest": "^0.2.39",
"@types/better-sqlite3": "^7.6.13",
"@types/jest": "^29.5.14",
Expand All @@ -93,7 +93,7 @@
"cross-env": "^10.1.0",
"jest": "^29.7.0",
"tsup": "^8.5.1",
"tsx": "^4.23.12",
"tsx": "^4.23.13",
"typescript": "^7.0.2"
}
}
Loading
Loading