chore(deps): bump the production-dependencies group across 1 directory with 5 updates by dependabot[bot] · Pull Request #23 · HartBrook/wingdiff

dependabot · 2026-10-19T13:03:16Z

Bumps the production-dependencies group with 5 updates in the / directory:

Package	From	To
@anthropic-ai/sdk	`0.131.0`	`1.3.0`
express	`5.2.1`	`5.3.0`
openai	`7.27.0`	`7.45.1`
react	`19.3.0`	`19.3.1`
react-dom	`19.3.0`	`19.3.1`

Updates @anthropic-ai/sdk from 0.131.0 to 1.3.0

Release notes

Sourced from @anthropic-ai/sdk's releases.

sdk-v1.3.0

Features

api: add Claude Tag endpoints for Claude Enterprise organizations

Bug Fixes

client: link the long-request error messages to the SDK documentation

Chores

client: stop sending query params hardcoded in endpoint paths

docs: improve the descriptions of the code execution tool and its encrypted results

docs: reword work queue, skill and external key descriptions

docs: update descriptions of the per-user usage and cost reports

internal: carry endpoint path query params to the request layer

internal: check the repository by owner and public name in workflows

internal: read the beta route qualifier instead of the beta=true query

internal: remove preview build upload from CI

internal: stop expecting the beta query param in tests

Documentation

update the README and the example request

sdk-v1.2.0

Features

api: add support for message threads

api: add usage and cost reports by dimension, mark older reports legacy

Bug Fixes

tools: copy the messages a tool runner is created with again

tools: restore what the tool runner does after setMessagesParams() or pushMessages() in the loop body

Chores

docs: clarify plugin content scan and validation descriptions

docs: clarify plugin served_version_pinned and updated_at

docs: fix usage and cost report examples and ending_at docs

docs: rate limit model lists vary by organization and workspace

internal: rename the version manifest to .version-manifest.json

tests: fix a retry count header test that could never fail

... (truncated)

Changelog

Sourced from @anthropic-ai/sdk's changelog.

1.3.0 (2026-10-23)

Features

api: add Claude Tag endpoints for Claude Enterprise organizations

Bug Fixes

client: link the long-request error messages to the SDK documentation

Chores

client: stop sending query params hardcoded in endpoint paths

docs: improve the descriptions of the code execution tool and its encrypted results

docs: reword work queue, skill and external key descriptions

docs: update descriptions of the per-user usage and cost reports

internal: carry endpoint path query params to the request layer

internal: check the repository by owner and public name in workflows

internal: read the beta route qualifier instead of the beta=true query

internal: remove preview build upload from CI

internal: stop expecting the beta query param in tests

Documentation

update the README and the example request

1.2.0 (2026-10-23)

Features

api: add support for message threads

api: add usage and cost reports by dimension, mark older reports legacy

Bug Fixes

tools: copy the messages a tool runner is created with again

tools: restore what the tool runner does after setMessagesParams() or pushMessages() in the loop body

Chores

docs: clarify plugin content scan and validation descriptions

docs: clarify plugin served_version_pinned and updated_at

docs: fix usage and cost report examples and ending_at docs

docs: rate limit model lists vary by organization and workspace

internal: rename the version manifest to .version-manifest.json

... (truncated)

Commits

cb5fba4 release: 1.3.0, packages/aws-sdk 1.1.1, packages/google-cloud-sdk 1.1.1
7a9f234 Merge pull request #995 from anthropics/synced/published
62ac1cb feat(api): add Claude Tag endpoints for Claude Enterprise organizations
2a3124c chore(internal): remove preview build upload from CI (#1001)
7e6e74e chore(internal): stop expecting the beta query param in tests (#1004)
50572e0 chore(docs): improve the descriptions of the code execution tool and its encr...
4771e93 docs: update the README and the example request
5c5fb00 fix(client): link the long-request error messages to the SDK documentation (#...
ea1e87c chore: tidy internal comments (#1000)
957beba chore(docs): reword work queue, skill and external key descriptions
Additional commits viewable in compare view

Updates express from 5.2.1 to 5.3.0

Release notes

Sourced from express's releases.

v5.3.0

Highlights

🐞 Bug fixes

Fixed HTTP header conflict between Content-Length and Transfer-Encoding in res.send - by @YuryShkoda in #4893

Fixed the behavior of res.send() to prevent conflicts between Content-Length and Transfer-Encoding HTTP headers in responses. The Content-Length header in res.send() is now only added when a Transfer-Encoding header is not present, complying with the HTTP specification that states both headers should not coexist in the same response. ETag generation is unaffected by the presence of a Transfer-Encoding header - by @cuishuang in #7459

Upgrade qs to ^6.16.0, which fixes CVE-2026-2391 (GHSA-w7fw-mjwx-w883), CVE-2026-82417 (GHSA-4mjr-xmp4-gh2g) and CVE-2026-82562 (GHSA-x5fp-wj9c-mxmx): arrayLimit bypasses in comma parsing and a denial of service via an attacker-controlled isBuffer - by @davetashner in #7057 and #7478, and @cyphercodes in #7305

Upgrade proxy-addr to ^2.0.8, which fixes CVE-2026-90711 - by @lazerg in #7474

🚀 Improvements
Allow conditional revalidation for QUERY requests. req.fresh previously only validated freshness for GET and HEAD requests, so QUERY responses never returned 304 despite a matching validator. Since QUERY is a safe, idempotent, and cacheable method that supports conditional requests, it is now included in the freshness check - by @Cherry in #7366
// QUERY /reports with If-None-Match: "12345"
app.query('/reports', (req, res) => {
  res.set('ETag', '"12345"');
  res.send(results); // now responds 304 Not Modified
});
Improve HTML structure in res.redirect() responses when HTML format is accepted by adding <!DOCTYPE html>, <title>, and <body> tags for better browser compatibility - by @Bernice55231 in #5167
When calling app.render with options set to null, the locals object is handled correctly, preventing unexpected errors and making the method behave the same as when options is omitted or an empty object is passed - by AkaHarshit in #6903
app.render('index', null, callback); // now works as expected
Upgrade content-type to ^2.0.0, bringing a faster parser (~1.5x quicker Content-Type parsing/formatting in res.send()) along with a behavior change: res.send() now keeps any existing parameters when adding the charset and no longer throws on a Content-Type that fails to parse. type-is is upgraded to ^2.1.0 as part of the same change - by @blakeembrey in #7234
res.set('Content-Type', 'text/plain; foo=bar').send('hey');
// -> Content-Type: text/plain; foo=bar; charset=utf-8
The default error handler now logs the full error object instead of only its stack trace, so nested details such as Error.cause and library-specific properties (e.g. Sequelize's parent/original) are no longer swallowed - by @Nitin-Mohapatra in #6464
Upgrade content-disposition to ^2.0.1, which changes the Content-Disposition header emitted by res.download(), res.attachment(), and res.sendFile(): file names that are valid HTTP tokens are no longer wrapped in quotes. This is equivalent per RFC 6266, but applications asserting on the exact header bytes should update their expectations - by @blakeembrey in #7233
res.attachment('user.html');
// before -> Content-Disposition: attachment; filename="user.html"
// after  -> Content-Disposition: attachment; filename=user.html

... (truncated)

Changelog

Sourced from express's changelog.

5.3.0

🐞 Bug fixes

Fixed HTTP header conflict between Content-Length and Transfer-Encoding in res.send - by @YuryShkoda in #4893

Fixed the behavior of res.send() to prevent conflicts between Content-Length and Transfer-Encoding HTTP headers in responses. The Content-Length header in res.send() is now only added when a Transfer-Encoding header is not present, complying with the HTTP specification that states both headers should not coexist in the same response. ETag generation is unaffected by the presence of a Transfer-Encoding header - by @cuishuang in #7459

Upgrade qs to ^6.16.0, which fixes CVE-2026-2391 (GHSA-w7fw-mjwx-w883), CVE-2026-82417 (GHSA-4mjr-xmp4-gh2g) and CVE-2026-82562 (GHSA-x5fp-wj9c-mxmx): arrayLimit bypasses in comma parsing and a denial of service via an attacker-controlled isBuffer - by @davetashner in #7057 and #7478, and @cyphercodes in #7305

Upgrade proxy-addr to ^2.0.8, which fixes CVE-2026-90711 - by @lazerg in #7474

🚀 Improvements
Allow conditional revalidation for QUERY requests. req.fresh previously only validated freshness for GET and HEAD requests, so QUERY responses never returned 304 despite a matching validator. Since QUERY is a safe, idempotent, and cacheable method that supports conditional requests, it is now included in the freshness check - by @Cherry in #7366
// QUERY /reports with If-None-Match: "12345"
app.query('/reports', (req, res) => {
  res.set('ETag', '"12345"');
  res.send(results); // now responds 304 Not Modified
});
Improve HTML structure in res.redirect() responses when HTML format is accepted by adding <!DOCTYPE html>, <title>, and <body> tags for better browser compatibility - by @Bernice55231 in #5167
When calling app.render with options set to null, the locals object is handled correctly, preventing unexpected errors and making the method behave the same as when options is omitted or an empty object is passed - by AkaHarshit in #6903
app.render('index', null, callback); // now works as expected
Upgrade content-type to ^2.0.0, bringing a faster parser (~1.5x quicker Content-Type parsing/formatting in res.send()) along with a behavior change: res.send() now keeps any existing parameters when adding the charset and no longer throws on a Content-Type that fails to parse. type-is is upgraded to ^2.1.0 as part of the same change - by @blakeembrey in #7234
res.set('Content-Type', 'text/plain; foo=bar').send('hey');
// -> Content-Type: text/plain; foo=bar; charset=utf-8
The default error handler now logs the full error object instead of only its stack trace, so nested details such as Error.cause and library-specific properties (e.g. Sequelize's parent/original) are no longer swallowed - by @Nitin-Mohapatra in #6464
Upgrade content-disposition to ^2.0.1, which changes the Content-Disposition header emitted by res.download(), res.attachment(), and res.sendFile(): file names that are valid HTTP tokens are no longer wrapped in quotes. This is equivalent per RFC 6266, but applications asserting on the exact header bytes should update their expectations - by @blakeembrey in #7233
res.attachment('user.html');
// before -> Content-Disposition: attachment; filename="user.html"
// after  -> Content-Disposition: attachment; filename=user.html

... (truncated)

Commits

cf6722b 5.3.0 (#7468)
8c2fcfc docs: fix typos and a stale API reference in lib comments (#7512)
9efc29e docs: fix pass-through typos (#7509)
2717ae3 build(deps): bump the github-actions group with 3 updates (#7499)
de77771 build(deps-dev): bump hbs from 4.3.0 to 4.3.1 (#7500)
9169cbe docs: add missing apostrophe in example (#7483)
7ef9844 build(deps-dev): bump morgan from 1.12.0 to 1.12.1 (#7493)
3b7e39f deps: bump qs minimum to 6.16.0 (#7478)
98bd4cd deps: proxy-addr@^2.0.8 (#7474)
9a34acf fix(res.send): preserve ETag generation with Transfer-Encoding (#7459)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for express since your current version.

Updates openai from 7.27.0 to 7.45.1

Release notes

Sourced from openai's releases.

v7.45.1

7.45.1 (2026-10-27)

Bug Fixes

api: clarify prompt cache breakpoint TTL behavior (#3057) (60224b3)

vertex: support google-auth-library v11 (#3046) (381709f)

v7.45.0

7.45.0 (2026-10-26)

Features

api: add gpt-6.1-terra model identifier (#3054) (f8120e5)

Bug Fixes

deps-dev: bump @cloudflare/workers-types from 5.20261011.1 to 5.20261018.1 in /ecosystem-tests/cloudflare-worker (#3037) (5185d2c)

deps-dev: bump @types/node from 26.6.4 to 26.6.5 (#3036) (a768d48)

deps-dev: bump fast-uri from 3.1.7 to 3.1.9 in /ecosystem-tests/ts-browser-webpack (#3052) (369d4fe)

deps-dev: bump fast-uri from 3.1.7 to 3.1.9 in /ecosystem-tests/vercel-edge (#3032) (5c02484)

deps-dev: bump puppeteer from 25.13.0 to 25.14.0 in /ecosystem-tests/browser-direct-import (#3035) (834ba3d)

deps-dev: bump puppeteer from 25.13.0 to 25.14.0 in /ecosystem-tests/ts-browser-webpack (#3048) (64abe79)

deps-dev: bump ts-jest from 29.4.14 to 29.4.15 in /ecosystem-tests/cloudflare-worker (#3038) (83cc173)

deps-dev: bump ts-jest from 29.4.14 to 29.4.15 in /ecosystem-tests/node-ts-cjs (#3041) (a12706d)

deps-dev: bump ts-jest from 29.4.14 to 29.4.15 in /ecosystem-tests/node-ts-cjs-web (#3043) (c129750)

deps-dev: bump ts-jest from 29.4.14 to 29.4.15 in /ecosystem-tests/node-ts-esm (#3044) (ac9ee21)

deps-dev: bump ts-jest from 29.4.14 to 29.4.15 in /ecosystem-tests/node-ts-esm-auto (#3045) (9489f4d)

deps-dev: bump ts-jest from 29.4.14 to 29.4.15 in /ecosystem-tests/node-ts-esm-web (#3047) (c502053)

deps-dev: bump ts-jest from 29.4.14 to 29.4.15 in /ecosystem-tests/vercel-edge (#3049) (b6c7bff)

deps-dev: bump vitest from 5.0.3 to 5.0.5 (#3042) (d4b8a2d)

deps-dev: bump wrangler from 4.149.0 to 4.151.1 in /ecosystem-tests/cloudflare-worker (#3039) (24e750e)

deps: bump undici from 7.30.0 to 7.30.1 in /ecosystem-tests/node-ts-cjs (#3053) (364f0cb)

deps: bump undici from 8.11.2 to 8.12.2 (#3033) (e63e09c)

v7.44.0

7.44.0 (2026-10-25)

Features

api: add delegation controls and prompt cache lifetimes and scheduled automations via client.beta.agents.automations, including invocation endpoints and the automations agent-tool variant (#3029) (d8931e7)

api: expand Live Decision item and question types. Breaking change in a minor release. Live Decision item events now include messages and function/custom-tool calls and outputs. DecisionItemCreatedEvent.item and DecisionItemCreateEvent.item are unions, so callers that directly access item.content or item.role may no longer compile. For both event types, use if ('content' in event.item) before accessing message fields, and handle tool-item variants separately. Message items may omit type, so checking only item.type === 'message' can skip valid messages. This release also updates image-model documentation: gpt-image-1 was shut down on October 23, 2026; replace explicit selections with gpt-image-2.5-sunburst or gpt-image-2.5-flare. The documented default for Responses image-generation tools is now gpt-image-2; specify a supported model explicitly when you need a particular model. (#3034) (7562cd2)

Performance Improvements

... (truncated)

Changelog

Sourced from openai's changelog.

7.45.1 (2026-10-27)

Bug Fixes

api: clarify prompt cache breakpoint TTL behavior (#3057) (60224b3)

vertex: support google-auth-library v11 (#3046) (381709f)

7.45.0 (2026-10-26)

Features

api: add gpt-6.1-terra model identifier (#3054) (f8120e5)

Bug Fixes

deps-dev: bump @cloudflare/workers-types from 5.20261011.1 to 5.20261018.1 in /ecosystem-tests/cloudflare-worker (#3037) (5185d2c)

deps-dev: bump @types/node from 26.6.4 to 26.6.5 (#3036) (a768d48)

deps-dev: bump fast-uri from 3.1.7 to 3.1.9 in /ecosystem-tests/ts-browser-webpack (#3052) (369d4fe)

deps-dev: bump fast-uri from 3.1.7 to 3.1.9 in /ecosystem-tests/vercel-edge (#3032) (5c02484)

deps-dev: bump puppeteer from 25.13.0 to 25.14.0 in /ecosystem-tests/browser-direct-import (#3035) (834ba3d)

deps-dev: bump puppeteer from 25.13.0 to 25.14.0 in /ecosystem-tests/ts-browser-webpack (#3048) (64abe79)

deps-dev: bump ts-jest from 29.4.14 to 29.4.15 in /ecosystem-tests/cloudflare-worker (#3038) (83cc173)

deps-dev: bump ts-jest from 29.4.14 to 29.4.15 in /ecosystem-tests/node-ts-cjs (#3041) (a12706d)

deps-dev: bump ts-jest from 29.4.14 to 29.4.15 in /ecosystem-tests/node-ts-cjs-web (#3043) (c129750)

deps-dev: bump ts-jest from 29.4.14 to 29.4.15 in /ecosystem-tests/node-ts-esm (#3044) (ac9ee21)

deps-dev: bump ts-jest from 29.4.14 to 29.4.15 in /ecosystem-tests/node-ts-esm-auto (#3045) (9489f4d)

deps-dev: bump ts-jest from 29.4.14 to 29.4.15 in /ecosystem-tests/node-ts-esm-web (#3047) (c502053)

deps-dev: bump ts-jest from 29.4.14 to 29.4.15 in /ecosystem-tests/vercel-edge (#3049) (b6c7bff)

deps-dev: bump vitest from 5.0.3 to 5.0.5 (#3042) (d4b8a2d)

deps-dev: bump wrangler from 4.149.0 to 4.151.1 in /ecosystem-tests/cloudflare-worker (#3039) (24e750e)

deps: bump undici from 7.30.0 to 7.30.1 in /ecosystem-tests/node-ts-cjs (#3053) (364f0cb)

deps: bump undici from 8.11.2 to 8.12.2 (#3033) (e63e09c)

7.44.0 (2026-10-25)

Features

api: add delegation controls and prompt cache lifetimes and scheduled automations via client.beta.agents.automations, including invocation endpoints and the automations agent-tool variant (#3029) (d8931e7)

api: expand Live Decision item and question types. Breaking change in a minor release. Live Decision item events now include messages and function/custom-tool calls and outputs. DecisionItemCreatedEvent.item and DecisionItemCreateEvent.item are unions, so callers that directly access item.content or item.role may no longer compile. For both event types, use if ('content' in event.item) before accessing message fields, and handle tool-item variants separately. Message items may omit type, so checking only item.type === 'message' can skip valid messages. This release also updates image-model documentation: gpt-image-1 was shut down on October 23, 2026; replace explicit selections with gpt-image-2.5-sunburst or gpt-image-2.5-flare. The documented default for Responses image-generation tools is now gpt-image-2; specify a supported model explicitly when you need a particular model. (#3034) (7562cd2)

Performance Improvements

agents: reuse action checks between stream events (#3028) (8e32d2d)

... (truncated)

Commits

4e95fe2 release: 7.45.1 (#3055)
60224b3 fix(api): clarify prompt cache breakpoint TTL behavior (#3057)
381709f fix(vertex): support google-auth-library v11 (#3046)
af8336b release: 7.45.0 (#3051)
f8120e5 feat(api): add gpt-6.1-terra model identifier (#3054)
cd0d140 test: remove redundant ecosystem CLI retry subprocesses (#3030)
8f92abc test: parallelize packed Undici consumer installs (#3031)
364f0cb fix(deps): bump undici from 7.30.0 to 7.30.1 in /ecosystem-tests/node-ts-cjs ...
d4b8a2d fix(deps-dev): bump vitest from 5.0.3 to 5.0.5 (#3042)
369d4fe fix(deps-dev): bump fast-uri from 3.1.7 to 3.1.9 in /ecosystem-tests/ts-brows...
Additional commits viewable in compare view

Updates react from 19.3.0 to 19.3.1

Release notes

Sourced from react's releases.

19.3.1 (October 14th, 2026)

React Server Components

Improve transport protocol (#37845 by @unstubbable and @eps1lon)

Commits

61aa00d [19.3.x][Flight] Improve transport protocol (#37845)
See full diff in compare view

Updates react-dom from 19.3.0 to 19.3.1

Release notes

Sourced from react-dom's releases.

19.3.1 (October 14th, 2026)

React Server Components

Improve transport protocol (#37845 by @unstubbable and @eps1lon)

Commits

61aa00d [19.3.x][Flight] Improve transport protocol (#37845)
See full diff in compare view

github-actions · 2026-11-02T14:22:09Z

⊕ Entity-level changes

apps/server/package.json

Status	Type	Name
Δ	property	@anthropic-ai/sdk

@anthropic-ai/sdk

- "@anthropic-ai/sdk": "^0.131.0",
+ "@anthropic-ai/sdk": "^1.3.0",

apps/web/package.json

Status	Type	Name
Δ	property	react
Δ	property	react-dom

react

- "react": "^19.3.0",
+ "react": "^19.3.1",

react-dom

- "react-dom": "^19.3.0",
+ "react-dom": "^19.3.1",

package-lock.json

Status	Type	Name
Δ	property	@anthropic-ai/sdk
Δ	property	@anthropic-ai/sdk
Δ	property	react
Δ	property	react-dom
Δ	property	version
Δ	property	resolved
Δ	property	integrity
Δ	property	license
+	property	@opentelemetry/api
+	object	node_modules/@opentelemetry/api
+	property	version
+	property	resolved
+	property	integrity
+	property	license
+	object	engines
+	property	node
-	object	node_modules/body-parser/node_modules/content-type
-	property	version
-	property	resolved
-	property	integrity
-	property	license
-	object	engines
-	property	node
-	object	funding
-	property	type
-	property	url
Δ	property	version
Δ	property	resolved
Δ	property	integrity
Δ	property	version
Δ	property	resolved
Δ	property	integrity
Δ	object	engines
Δ	property	node
→	object	funding
→	property	type
→	property	url
Δ	property	version
Δ	property	resolved
Δ	property	integrity
Δ	property	body-parser
Δ	property	content-disposition
Δ	property	content-type
Δ	property	proxy-addr
Δ	property	qs
Δ	property	type-is
-	object	node_modules/negotiator/node_modules/content-type
-	property	version
-	property	resolved
-	property	integrity
-	property	license
-	object	engines
-	property	node
-	object	funding
-	property	type
-	property	url
Δ	property	version
Δ	property	resolved
Δ	property	integrity
+	property	google-auth-library
+	object	google-auth-library
+	property	optional
Δ	property	version
Δ	property	resolved
Δ	property	integrity
Δ	property	version
Δ	property	resolved
Δ	property	integrity
Δ	property	react
-	object	node_modules/type-is/node_modules/content-type
-	property	version
-	property	resolved
-	property	integrity
-	property	license
-	object	engines
-	property	node

@anthropic-ai/sdk

- "@anthropic-ai/sdk": "^0.131.0",
+ "@anthropic-ai/sdk": "^1.3.0",

@anthropic-ai/sdk

- "@anthropic-ai/sdk": "^0.131.0",
+ "@anthropic-ai/sdk": "^1.3.0",

react

- "react": "^19.3.0",
+ "react": "^19.3.1",

react-dom

- "react-dom": "^19.3.0",
+ "react-dom": "^19.3.1",

version

- "version": "0.131.0",
+ "version": "1.3.0",

resolved

- "resolved": "https://registry.npmjs.org/@anthropic-ai/sdk/-/sdk-0.131.0.tgz",
+ "resolved": "https://registry.npmjs.org/@anthropic-ai/sdk/-/sdk-1.3.0.tgz",

integrity

- "integrity": "sha512-9+PepoU7qVMmM70jSahdnfcMHAvAnzhMOLv2W9WjRLO+OG/MAiBETkwKZqv7KIJ1Cj5h8eZ019bHzZaq+Mbepw==",
+ "integrity": "sha512-k7z9BlLLPxfZH+ov7dS6EnaN/wiZeV8YNT1LZfrpAHIy7oY7pHr4UzirF9f2OlHtFEnRBOX+AZQ91Y5fK+TPTw==",

license

- "license": "MIT",
+ "license": "Apache-2.0",

version

- "version": "1.1.0",
+ "version": "2.0.1",

resolved

- "resolved": "https://registry.npmjs.org/content-disposition/-/content-disposition-1.1.0.tgz",
+ "resolved": "https://registry.npmjs.org/content-disposition/-/content-disposition-2.0.1.tgz",

integrity

- "integrity": "sha512-5jRCH9Z/+DRP7rkvY83B+yGIGX96OYdJmzngqnw2SBSxqCFPd0w2km3s5iawpGX8krnwSGmF0FW5Nhr0Hfai3g==",
+ "integrity": "sha512-e+H0ZXHSWYrENhQzw1LPuP4oF5MzVKmDU6d3hxlvaPEYLLg62MxtQNPRx4SYSuYJSBUgnQIG4HIN2tEtNv7Dog==",

version

- "version": "1.0.5",
+ "version": "2.1.0",

resolved

- "resolved": "https://registry.npmjs.org/content-type/-/content-type-1.0.5.tgz",
+ "resolved": "https://registry.npmjs.org/content-type/-/content-type-2.1.0.tgz",

integrity

- "integrity": "sha512-nTjqfcBFEipKdXCv4YDQWCfmcLZKm81ldF0pAopTvyrFGVbcR6P/VAAd5G7N+0tTr8QqiU0tFadD6FK4NtJwOA==",
+ "integrity": "sha512-mj7UPXE0jaqaOsukNZRUEfEi2AcL7C/vwmwcHV0O97eO1E1pxBZuyjlZrx5seTaNBg1U6+o35wpa35Qfcc+7ag==",

engines

- "engines": {
- "node": ">= 0.6"
- }
+ "engines": {
+ "node": ">=18"
+ },

node

- "node": ">= 0.6"
+ "node": ">=18"

moved from /packages/node_modules~~1type-is~~1node_modules~1content-type

moved from /packages/node_modules~~1type-is~~1node_modules~1content-type/funding

version

- "version": "5.2.1",
+ "version": "5.3.0",

resolved

- "resolved": "https://registry.npmjs.org/express/-/express-5.2.1.tgz",
+ "resolved": "https://registry.npmjs.org/express/-/express-5.3.0.tgz",

integrity

- "integrity": "sha512-hIS4idWWai69NezIdRt2xFVofaF4j+6INOpJlVOLDO8zXGpUVEVzIYk12UUi2JzjEzWL3IOAxcTubgz9Po0yXw==",
+ "integrity": "sha512-qCqy1xSoaugxOD4IVHb1ZWdkvCF2W3aE2okKouWj8VwJ+ztskSiXoBnCSJqfKT+cVPJhuJqe9YLbY425+Zh00g==",

body-parser

- "body-parser": "^2.2.1",
+ "body-parser": "^2.3.0",

content-disposition

- "content-disposition": "^1.0.0",
+ "content-disposition": "^2.0.1",

content-type

- "content-type": "^1.0.5",
+ "content-type": "^2.0.0",

proxy-addr

- "proxy-addr": "^2.0.7",
+ "proxy-addr": "^2.0.8",

qs

- "qs": "^6.14.0",
+ "qs": "^6.16.0",

type-is

- "type-is": "^2.0.1",
+ "type-is": "^2.1.0",

version

- "version": "7.27.0",
+ "version": "7.45.1",

resolved

- "resolved": "https://registry.npmjs.org/openai/-/openai-7.27.0.tgz",
+ "resolved": "https://registry.npmjs.org/openai/-/openai-7.45.1.tgz",

integrity

- "integrity": "sha512-QDo1FvnRDZn15YwGVOhT9vpyypDiLphkd/7a4mcURWf5upMoEetgA6o4DJeII+ZZkC6m6DvlilCwii3+ynDcTw==",
+ "integrity": "sha512-mutrJXwhJIMZ24Lab2COFtNp44OcpZSnV4O2O7q38wAHUa2m2fQqUO5pj1XS3PqLfOTeODBUS9YoadqDnnGk5A==",

version

- "version": "19.3.0",
+ "version": "19.3.1",

resolved

- "resolved": "https://registry.npmjs.org/react/-/react-19.3.0.tgz",
+ "resolved": "https://registry.npmjs.org/react/-/react-19.3.1.tgz",

integrity

- "integrity": "sha512-E8LUcbtBWt20bbl2YoHfx4ZDBdxVTfOKtCZn9cDSJ4l6/nuoApcpIBcj47t2wZoVX8g2ZHuMHbiShgCR1T5Sog==",
+ "integrity": "sha512-QNhWdt7nrgVWWQG58QuGsAR3jv3Hbe4mb4vz7w2csnHavciZJgda1CPNaldF6eVxv90ud3jUXpKlHL69gO38yw==",

version

- "version": "19.3.0",
+ "version": "19.3.1",

resolved

- "resolved": "https://registry.npmjs.org/react-dom/-/react-dom-19.3.0.tgz",
+ "resolved": "https://registry.npmjs.org/react-dom/-/react-dom-19.3.1.tgz",

integrity

- "integrity": "sha512-JDk8dgif51OjFoDE70+OT9ICyYr+69HlmihNwp1+Nsfbna3t5sIiCa9ZJktDmQ4/1b/rn26hIAR2uYXDMr5r0Q==",
+ "integrity": "sha512-Y0bARz53lhEC1NMCASs0/j+faB/zqt3R8hpvg1e8+61ZVJ4UL0UdC4cBbXfZMcIuhrfgeILTLe+ZeBCavQPtKQ==",

react

- "react": "^19.3.0"
+ "react": "^19.3.1"

package.json

Status	Type	Name
Δ	property	@anthropic-ai/sdk

@anthropic-ai/sdk

- "@anthropic-ai/sdk": "^0.131.0",
+ "@anthropic-ai/sdk": "^1.3.0",

Summary: 11 added, 39 modified, 27 deleted, 3 moved across 4 files

_{⊕ entity-level diff by sem · add it to your repo in 2 minutes}

…y with 5 updates Bumps the production-dependencies group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.131.0` | `1.3.0` | | [express](https://github.com/expressjs/express) | `5.2.1` | `5.3.0` | | [openai](https://github.com/openai/openai-node) | `7.27.0` | `7.45.1` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.3.0` | `19.3.1` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.3.0` | `19.3.1` | Updates `@anthropic-ai/sdk` from 0.131.0 to 1.3.0 - [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases) - [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md) - [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.131.0...sdk-v1.3.0) Updates `express` from 5.2.1 to 5.3.0 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@v5.2.1...v5.3.0) Updates `openai` from 7.27.0 to 7.45.1 - [Release notes](https://github.com/openai/openai-node/releases) - [Changelog](https://github.com/openai/openai-node/blob/main/CHANGELOG.md) - [Commits](openai/openai-node@v7.27.0...v7.45.1) Updates `react` from 19.3.0 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react) Updates `react-dom` from 19.3.0 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom) --- updated-dependencies: - dependency-name: "@anthropic-ai/sdk" dependency-version: 0.135.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: express dependency-version: 5.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: openai dependency-version: 7.34.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: react dependency-version: 19.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: react-dom dependency-version: 19.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot requested a review from HartBrook as a code owner October 19, 2026 13:03

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 19, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-09a35da9e5 branch 2 times, most recently from 74e49e9 to 965f080 Compare October 29, 2026 14:59

dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-09a35da9e5 branch from 965f080 to b5904e5 Compare November 2, 2026 14:21

dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-09a35da9e5 branch from b5904e5 to e79ae52 Compare November 2, 2026 15:26

Navigation Menu

Repository navigation

chore(deps): bump the production-dependencies group across 1 directory with 5 updates - #23

chore(deps): bump the production-dependencies group across 1 directory with 5 updates#23
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-09a35da9e5

dependabot Bot commented on behalf of github Oct 19, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Nov 2, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

sdk-v1.3.0

Features

Bug Fixes

Chores

Documentation

sdk-v1.2.0

Features

Bug Fixes

Chores

1.3.0 (2026-10-23)

Features

Bug Fixes

Chores

Documentation

1.2.0 (2026-10-23)

Features

Bug Fixes

Chores

v5.3.0

Highlights

🐞 Bug fixes

🚀 Improvements

5.3.0

🐞 Bug fixes

🚀 Improvements

v7.45.1

7.45.1 (2026-10-27)

Bug Fixes

v7.45.0

7.45.0 (2026-10-26)

Features

Bug Fixes

v7.44.0

7.44.0 (2026-10-25)

Features

Performance Improvements

7.45.1 (2026-10-27)

Bug Fixes

7.45.0 (2026-10-26)

Features

Bug Fixes

7.44.0 (2026-10-25)

Features

Performance Improvements

19.3.1 (October 14th, 2026)

React Server Components

19.3.1 (October 14th, 2026)

React Server Components

Uh oh!

github-actions Bot commented Nov 2, 2026

⊕ Entity-level changes

apps/server/package.json

apps/web/package.json

package-lock.json

package.json

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 19, 2026 •

edited

Loading