chore(deps)(deps): bump the minor-and-patch group across 1 directory with 32 updates by dependabot[bot] · Pull Request #108 · archmax-ai/semantics

dependabot · 2026-10-05T04:23:39Z

Bumps the minor-and-patch group with 32 updates in the / directory:

Package	From	To
turbo	`2.10.12`	`2.11.6`
@hono/node-server	`2.1.1`	`2.1.3`
@langchain/core	`1.2.9`	`1.2.14`
@langchain/openai	`1.5.11`	`1.6.2`
@modelcontextprotocol/hono	`2.0.0-alpha.2`	`2.0.1`
@modelcontextprotocol/server	`2.0.0-beta.5`	`2.2.0`
better-auth	`1.7.3`	`1.7.7`
deepagents	`1.13.3`	`1.14.1`
hono	`4.13.7`	`4.13.12`
mongodb	`7.6.0`	`7.7.0`
mongoose	`9.9.5`	`9.10.3`
zod	`4.5.4`	`4.6.5`
@types/node	`26.5.0`	`26.6.4`
tsx	`4.23.13`	`4.23.15`
@astrojs/starlight	`0.42.0`	`0.42.5`
astro	`7.3.2`	`7.3.5`
sharp	`0.35.4`	`0.35.5`
@tanstack/react-query	`5.102.8`	`5.104.0`
@tanstack/react-router	`1.170.33`	`1.170.41`
@xyflow/react	`12.11.6`	`12.12.0`
lucide-react	`1.43.0`	`1.49.0`
react	`19.2.8`	`19.3.0`
@types/react	`19.2.18`	`19.3.0`
react-dom	`19.2.8`	`19.3.0`
@types/react-dom	`19.2.7`	`19.3.0`
@tanstack/router-plugin	`1.168.36`	`1.168.42`
@types/react	`19.2.18`	`19.3.0`
@types/react-dom	`19.2.7`	`19.3.0`
vite	`8.2.2`	`8.3.2`
@langchain/anthropic	`1.5.9`	`1.5.12`
isomorphic-git	`1.41.9`	`1.42.6`
langchain	`1.5.10`	`1.5.15`
react-day-picker	`10.0.1`	`10.0.2`
tailwind-merge	`3.6.0`	`3.7.0`

Updates turbo from 2.10.12 to 2.11.6

Release notes

Sourced from turbo's releases.

Turborepo v2.11.6

What's Changed

Changelog

chore: Release Turborepo 2.11.5 by @github-actions[bot] in vercel/turborepo#14329

fix: Upgrade standalone turbo on installer reruns by @anthonyshew in vercel/turborepo#14330

test: Deflake OpenTelemetry and PTY shutdown tests by @anthonyshew in vercel/turborepo#14331

docs: Document standalone turbo installation by @anthonyshew in vercel/turborepo#14332

ci: Install standalone turbo on Windows with PowerShell by @anthonyshew in vercel/turborepo#14334

fix: Keep Yarn patch resolutions with npm protocol selectors in prune by @anthonyshew in vercel/turborepo#14337

chore: Update with-tailwind example by @vercel-gh-bot-5[bot] in vercel/turborepo#14264

ci: Resolve latest turbo release with workflow token by @anthonyshew in vercel/turborepo#14339

chore: Update with-ultracite example by @vercel-gh-bot-5[bot] in vercel/turborepo#14335

fix: Match production MFE negative lookaheads locally by @kitfoster in vercel/turborepo#13496

docs: Add missing system environment variables and run flags by @BABTUNA in vercel/turborepo#13811

fix: Normalize task inputs consistently for affected detection and hashing by @anthonyshew in vercel/turborepo#14341

feat: Add task tags with configuration inheritance by @anthonyshew in vercel/turborepo#14342

fix: Upgrade brace-expansion to latest compatible releases by @anthonyshew in vercel/turborepo#14347

docs: Point security.txt to Vercel HackerOne program by @swarnava in vercel/turborepo#14346

test: Deflake untracked scan-scope assertions by @anthonyshew in vercel/turborepo#14348

feat: Expose task and package tags in query by @anthonyshew in vercel/turborepo#14343

feat: Filter query tasks and packages by tags by @anthonyshew in vercel/turborepo#14344

feat: Filter tasks by tags in the CLI by @anthonyshew in vercel/turborepo#14345

fix: Complete task query metadata for non-script entrypoints by @anthonyshew in vercel/turborepo#14350

fix: Infer single-package mode for query commands by @anthonyshew in vercel/turborepo#14351

New Contributors

@swarnava made their first contribution in vercel/turborepo#14346

Full Changelog: vercel/turborepo@v2.11.5...v2.11.6

Turborepo v2.11.5

What's Changed

Changelog

chore: Release Turborepo 2.11.4 by @github-actions[bot] in vercel/turborepo#14231

test: Move Python opt-in hint into filter contracts by @anthonyshew in vercel/turborepo#14228

test: Move dependency-output summary assertion into contract by @anthonyshew in vercel/turborepo#14230

test: Move dependency-output selection and validation cases to engine contracts by @anthonyshew in vercel/turborepo#14232

test: Move Cargo exclude-only scope coverage by @anthonyshew in vercel/turborepo#14238

test: Move Cargo cache-authority cases to contracts by @anthonyshew in vercel/turborepo#14240

test: Move JIT dependency graph scenario into engine contract by @anthonyshew in vercel/turborepo#14235

test: Move dependency-output hash cases into task-hash contracts by @anthonyshew in vercel/turborepo#14233

test: Move Cargo task-filter cases into crate contracts by @anthonyshew in vercel/turborepo#14239

test: Move JIT input hash timing cases into task-hash contracts by @anthonyshew in vercel/turborepo#14234

test: Move package input normalization cases into engine contracts by @anthonyshew in vercel/turborepo#14236

test: Move structured startup and JIT input cases into contracts by @anthonyshew in vercel/turborepo#14237

fix: Back off remote artifact requests during outages by @anthonyshew in vercel/turborepo#14222

... (truncated)

Commits

fcd1213 publish 2.11.6 to registry
90718d1 fix: Infer single-package mode for query commands (#14351)
a409ce5 fix: Complete task query metadata for non-script entrypoints (#14350)
bc7c148 feat: Filter tasks by tags in the CLI (#14345)
49d1607 feat: Filter query tasks and packages by tags (#14344)
fba5351 feat: Expose task and package tags in query (#14343)
b4570e0 test: Deflake untracked scan-scope assertions (#14348)
fa107aa docs: Point security.txt to Vercel HackerOne program (#14346)
0deb0e7 fix: Upgrade brace-expansion to latest compatible releases (#14347)
d44edbe feat: Add task tags with configuration inheritance (#14342)
Additional commits viewable in compare view

Updates @hono/node-server from 2.1.1 to 2.1.3

Release notes

Sourced from @hono/node-server's releases.

v2.1.3

Security fixes

serveStatic decodes the request path a second time, leading to bypass of middleware on static paths

Affects: @hono/node-server/serve-static. Fixes serveStatic decoding an already-decoded path, where a crafted request could be routed as one path and served as another, skipping middleware mounted on a static prefix. GHSA-rmxm-3fg6-px4f

serveStatic now rejects request paths that still contain % after decoding. To serve files whose names contain a literal %, set allowPercentInPath: true.

The same fix ships in hono v4.13.11.

v2.1.2

What's Changed

ci: add autofix.ci by @yusukebe in honojs/node-server#392

fix: type error in early hints and add typecheck to CI by @BlankParticle in honojs/node-server#390

chore: add better benchmarks by @BlankParticle in honojs/node-server#391

docs(readme): update the benchmark by @yusukebe in honojs/node-server#394

test(request): accept asynchronous body read errors by @usualoma in honojs/node-server#403

fix(listener): avoid mutating response headers when setting Content-Length by @usualoma in honojs/node-server#402

Full Changelog: honojs/node-server@v2.1.1...v2.1.2

Commits

720ac78 2.1.3
9821792 Merge commit from fork
35bca95 2.1.2
90a2600 fix(listener): avoid mutating response headers when setting Content-Length (#...
fe7467c test(request): accept asynchronous body read errors (#403)
64dc09e docs(readm): update the benchmark (#394)
8f505ae chore: add better benchmarks (#391)
2469b1a fix: type error in early hints and add typecheck to CI (#390)
3f958da ci: add autofix.ci (#392)
See full diff in compare view

Updates @langchain/core from 1.2.9 to 1.2.14

Release notes

Sourced from @langchain/core's releases.

@langchain/core@1.2.14

Patch Changes

#11771 bbed273 Thanks @thushanth-bengre-langchain! - Add fileMimeTypes to ModelProfile so models can advertise the MIME types they accept as generic file inputs. OpenAI Responses API models now report the file types input_file supports; Chat Completions profiles are unchanged.

@langchain/core@1.2.13

Patch Changes

#11714 a83dfb1 Thanks @ccurme! - Abbreviate long tool-call IDs when formatting chat messages as strings, keeping original messages unchanged.

@langchain/core@1.2.12

Patch Changes

#11675 030a726 Thanks @hntrl! - Preserve structured tool arguments in tracer run inputs.

@langchain/core@1.2.11

Patch Changes

#11603 fec9cd8 Thanks @thushanth-bengre-langchain! - fix(core): build streaming llmOutput.tokenUsage from the fully-accumulated chunk instead of whichever individual chunk's usage_metadata arrived last

Affects both core streaming paths — .stream()/.streamEvents() (_streamIterator) and .invoke()/.generate() when a streaming-preferring callback is attached (_generateWithCache's hasStreamingHandler branch). Previously, llmOutput.tokenUsage was overwritten by each chunk in turn, so only the last chunk carrying usage_metadata won — correct for providers that emit one cumulative total on a final chunk, but wrong for providers (e.g. @langchain/google, @langchain/anthropic) that emit usage_metadata as a per-chunk delta across multiple chunks, where the values must be summed.

Note for provider authors: this assumes each streamed chunk's usage_metadata is either a per-chunk delta or appears only on a single final chunk. A provider that instead repeats a cumulative total on every chunk will now see it summed (and inflated) in llmOutput.tokenUsage, matching the existing behavior of the correctly-working message.usage_metadata field.

Also fixes @langchain/google's invoke({streaming: true}) path (no streaming-preferring callback attached), where llmOutput was never populated at all.

#11590 ffebdc2 Thanks @thushanth-bengre-langchain! - Fix OpenAI Responses API replay under Zero Data Retention when a response contains more than one reasoning item, for both v0 and v1. In v0, the default replay path now reuses response_metadata.output directly, preserving every reasoning item's id/encrypted_content in original order. In v1, AIMessage.contentBlocks (outputVersion: "v1") is fixed the same way. additional_kwargs.reasoning is unchanged.

@langchain/core@1.2.10

Patch Changes

#10047 ff1248f Thanks @afirstenberg! - fix(core): BaseMessage.text use contentBlocks

Commits

417ddcf chore: version packages (#11749)
bbed273 feat(openai): report Responses API file MIME types in model profile (#11771)
56a7f0b chore(mcp-adapters): release adapter v2 (#11767)
51b3b7b refactor(mcp-adapters): drop config guards that only served 1.x upgrades (#11...
ab0181f feat(mcp-adapters)!: prefix tool names with the server name by default, and r...
347bc0b fix(mcp-adapters): stop cancelled discovery before acquiring another server (...
ba4e7a2 fix(mcp-adapters): return MCP tool errors as error ToolMessages (#11758)
17b6bba fix(langchain): preserve graph interrupts through tool retries (#11649)
13283cd feat(mcp-adapters): accept token AuthProviders and keep auth failures retryab...
7a02156 feat(mcp-adapters): langgraph elicitation by default (#11716)
Additional commits viewable in compare view

Updates @langchain/openai from 1.5.11 to 1.6.2

Release notes

Sourced from @langchain/openai's releases.

@langchain/openai@1.6.2

Patch Changes

#11707 4109812 Thanks @richardscarrott! - feat(openai): support additional_tools on the Responses API. An additional_tools block on a SystemMessage, either bare in content or wrapped in a non_standard block, is sent verbatim as a top-level input item preceding the message.

additional_tools cannot work anywhere else, so it now throws instead of being dropped: on Chat Completions (set useResponsesApi: true), or on any message other than a SystemMessage. Assistant messages are exempt.

#11707 4109812 Thanks @richardscarrott! - fix(openai): accept non_standard-wrapped configuration_update and mcp_approval_response blocks. Previously only a bare block in content was hoisted to a top-level Responses API input item; a wrapped block, or one on a message built with contentBlocks, was silently dropped. Chat Completions now also sends the payload of a non_standard block rather than the wrapper.

@langchain/openai@1.6.1

Patch Changes

#11771 bbed273 Thanks @thushanth-bengre-langchain! - Add fileMimeTypes to ModelProfile so models can advertise the MIME types they accept as generic file inputs. OpenAI Responses API models now report the file types input_file supports; Chat Completions profiles are unchanged.

@langchain/openai@1.6.0

Minor Changes

#11232 663b9a2 Thanks @ccurme! - feat(openai): support explicit prompt cache options and content-block breakpoints

Patch Changes

#11735 5d509ad Thanks @thushanth-bengre-langchain! - fix(openai): send promptCacheRetention: "in-memory" as "in_memory" (the API rejects the hyphenated value), and apply promptCacheKey/promptCacheRetention in the same order as promptCacheOptions: per-call option, then modelKwargs, then the constructor field. On Chat Completions, modelKwargs values are no longer dropped and now take precedence over the constructor field.

@langchain/openai@1.5.13

Patch Changes

#11590 ffebdc2 Thanks @thushanth-bengre-langchain! - Fix OpenAI Responses API replay under Zero Data Retention when a response contains more than one reasoning item, for both v0 and v1. In v0, the default replay path now reuses response_metadata.output directly, preserving every reasoning item's id/encrypted_content in original order. In v1, AIMessage.contentBlocks (outputVersion: "v1") is fixed the same way. additional_kwargs.reasoning is unchanged.

@langchain/openai@1.5.12

Patch Changes

#11560 6bd3a18 Thanks @thushanth-bengre-langchain! - Support configuration_update content blocks for changing reasoning effort mid-conversation without invalidating the cached prompt prefix.

#11588 7d6e1b0 Thanks @jacoblee93! - fix(openai): Fix base url deserialization

#11534 80c5c93 Thanks @chiliec! - Route gpt-5.6-sol to the Responses API so function tools work with reasoning.

@langchain/openai@1.5.12-rc.0

Patch Changes

#11534 80c5c93 Thanks @chiliec! - Route gpt-5.6-sol to the Responses API so function tools work with reasoning.

Commits

bc4466b chore: version packages (#11788)
4109812 feat(anthropic,openai): support tool changes in system messages (#11707)
63ca83e chore(deps): bump hono from 4.13.5 to 4.13.7 (#11786)
417ddcf chore: version packages (#11749)
bbed273 feat(openai): report Responses API file MIME types in model profile (#11771)
56a7f0b chore(mcp-adapters): release adapter v2 (#11767)
51b3b7b refactor(mcp-adapters): drop config guards that only served 1.x upgrades (#11...
ab0181f feat(mcp-adapters)!: prefix tool names with the server name by default, and r...
347bc0b fix(mcp-adapters): stop cancelled discovery before acquiring another server (...
ba4e7a2 fix(mcp-adapters): return MCP tool errors as error ToolMessages (#11758)
Additional commits viewable in compare view

Updates @modelcontextprotocol/hono from 2.0.0-alpha.2 to 2.0.1

Release notes

Sourced from @modelcontextprotocol/hono's releases.

@modelcontextprotocol/hono@2.0.1

Patch Changes

#2698 7b781ed Thanks @maxisbey! - Read Streamable HTTP request bodies with a size limit. Every SDK-owned body read — WebStandardStreamableHTTPServerTransport (and the Node transport built on it), createMcpHandler, toNodeHandler, and createMcpHonoApp's JSON pre-parse — now stops at 4 MiB by default (the limit the legacy SSE transport already uses; the Express adapter and stdio bound their reads too) and answers 413 Payload Too Large before anything is parsed. toWebRequest (when it reads the Node stream itself) now rejects once the body exceeds the limit with an error whose name is 'RequestBodyTooLargeError' and status is 413, and toNodeHandler answers that with 413; hand-wired callers of toWebRequest should handle the rejection or pass a pre-parsed body, and isLegacyRequest reports such a request as non-legacy so the modern handler answers it. JSON-RPC batch arrays are limited to 100 messages; a longer batch is answered 400 / -32600 and none of it is dispatched.

The limit is configurable with a new maxRequestBodySize option (bytes, default DEFAULT_MAX_REQUEST_BODY_SIZE = 4 MiB, exported from @modelcontextprotocol/server) on WebStandardStreamableHTTPServerTransportOptions, CreateMcpHandlerOptions (forwarded to its stateless legacy leg; isLegacyRequest and legacyStatelessFallback take the same option), CreateMcpHonoAppOptions, and ToNodeHandlerOptions / ToWebRequestOptions (the adapter's bound applies before the handler's, so raise both). The bounded reader is exported as readRequestBody for adapter authors. Hosts that pre-parse the body and pass it as parsedBody skip the SDK's read and its size limit entirely; the batch bound applies either way.

createMcpHonoApp and createMcpExpressApp now run their Host/Origin validation before the JSON body parser, so a request from a disallowed Host or Origin with an invalid JSON body is answered 403 rather than 400, and its body is not read.

Updated dependencies [6fa4227, 03842cd, 3e90449, 7b781ed, 75dc7ea, 6032170, 6a05402, 70de0c8]:

@modelcontextprotocol/server@2.1.0

@modelcontextprotocol/hono@2.0.0

Patch Changes

#2402 a400259 Thanks @felixweinberger! - First beta release of SDK v2 with support for the MCP 2026-07-28 specification revision. See the migration guides for upgrading from v1 (docs/migration/upgrade-to-v2.md) and adopting the 2026-07-28 revision (docs/migration/support-2026-07-28.md).

#2405 f172626 Thanks @mattzcarey! - Ship CommonJS builds alongside ESM. Each package now emits both .mjs/.d.mts and .cjs/.d.cts (via tsdown format: ['esm', 'cjs']), and its exports map adds a require condition so require('@modelcontextprotocol/…') works from CommonJS consumers. Output extensions are normalized across all packages (@modelcontextprotocol/core moves from .js/.d.ts to .mjs/.d.mts); the public import paths are unchanged.

#2441 561c6d8 Thanks @felixweinberger! - POSTs whose Content-Type media type is not application/json are now rejected with 415 Unsupported Media Type; the header is parsed instead of substring-matched. Previously any value merely containing the substring passed the check (for example text/plain; a=application/json), case

... (truncated)

Commits

9517506 Version Packages (#2808)
6a05402 fix(server): close StdioServerTransport when stdin ends or closes (#2494)
c4248a9 fix(client): add missing Windows env vars to DEFAULT_INHERITED_ENV_VARS (#2043)
0b403f0 chore(changesets): only bump peer dependents when out of range (#2819)
6032170 feat(server): add request-time OAuth scope challenges (#1624)
b654261 fix(client): let OAuth-derived Authorization override caller-supplied header ...
5ecc791 fix(codemod): only count real module specifiers in project-type inference (#2...
5119ee7 fix: preserve exact OAuth resource indicators (#2581)
6fa4227 fix(client): surface underlying network error via Error.cause on probe failur...
dcc0102 feat(client): add DPoP (RFC 9449) sender-constrained token support (#2629)
Additional commits viewable in compare view

Updates @modelcontextprotocol/server from 2.0.0-beta.5 to 2.2.0

Release notes

Sourced from @modelcontextprotocol/server's releases.

@modelcontextprotocol/server-legacy@2.2.0

Patch Changes

Updated dependencies [edd12e2]:

@modelcontextprotocol/core@2.2.0

@modelcontextprotocol/server@2.2.0

Patch Changes

#2885 9dd722f Thanks @claude! - Sending a notification on a closed connection no longer produces a briefly unhandled promise rejection (seen as unhandledrejection on Cloudflare Workers) in addition to the returned rejection.

#2778 e3fb9ed Thanks @vjymisal0! - Fix a stack overflow in createMcpHandler when the factory returns the same server instance for more than one request. Returning a fresh instance per request is still required.

#2651 c55efa6 Thanks @sushantkumar23! - createMcpHandler now ends a subscriptions/listen stream right after the acknowledgement when it honored none of the requested notification types, instead of holding the stream open with nothing to deliver. The client receives the acknowledgement and then the resultType: "complete" result. Streams that honor at least one type are unchanged.

Updated dependencies [edd12e2]:

@modelcontextprotocol/core@2.2.0

@modelcontextprotocol/server-legacy@2.1.0

Patch Changes

Updated dependencies [dcc0102]:

@modelcontextprotocol/core@2.1.0

@modelcontextprotocol/server@2.1.0

Minor Changes

#1624 6032170 Thanks @SamMorrowDrums! - Add request-time OAuth scope challenges for tools, resources, resource templates, and prompts. Each primitive's scopeChallenge callback receives the parsed request and verified authentication info, then either continues or returns the exact scope set for an insufficient_scope response. requireScopes provides a small helper for static all-of checks.

createMcpHandler and Streamable HTTP transports return HTTP 403 with an insufficient_scope challenge before handler execution or SSE setup. The preflight is active whenever a registered primitive carries a scopeChallenge callback — there is no handler- or transport-level configuration. The challenge's WWW-Authenticate header is built by the same formatter as the bearer-auth 401/403 answers, and its resource_metadata parameter is derived from the verified AuthInfo: requireBearerAuth / verifyBearerToken now stamp their configured resourceMetadataUrl onto the AuthInfo they return (new optional AuthInfo.resourceMetadataUrl field), with a fallback to the well-known location for an HTTP(S) RFC 8707 resource identifier; the parameter is omitted when neither is available.

Patch Changes

#2726 6fa4227 Thanks @LuckTerence! - SdkError and SdkHttpError accept standard ErrorOptions as an optional fourth constructor argument and forward it to Error, so a wrapped error is reachable through the standard Error.cause chain. Version-negotiation probe failures (SdkErrorCode.EraNegotiationFailed) now use it: the underlying TypeError: fetch failed and the DNS or socket error beneath it surface via error.cause, so pino, Sentry, and util.inspect render ENOTFOUND / ECONNREFUSED / ETIMEDOUT instead of stopping at the SdkError (#2657). The previous error.data.cause slot is still populated for compatibility but is deprecated and slated for removal; read error.cause instead.

#2654 03842cd Thanks @pshah19! - Treat request id 0 as a real id. Two guards tested a RequestId for truthiness, so the legal JSON-RPC ids 0 and '' were read as absent. Id 0 is not a corner case: the outbound request counter is zero-based, so it is the first id every peer assigns, which on the server→client leg is the first sampling/createMessage, elicitation/create, or roots/list a server sends.

... (truncated)

Commits

dd22ba2 Version Packages (#2849)
c55efa6 fix(server): close a listen stream that has honored nothing (#2651)
edd12e2 fix(client): deprecate omitting expectedIssuer and apply the SEP-2352 issuer ...
ef39308 fix(client): follow nextCursor until it is absent; stop on a repeated page (#...
9dd722f fix(core): await the notification send so a failed send is never briefly unha...
e780e13 fix(client): preserve _meta on input_required results (#2862)
a4ae2f9 docs(client): correct the registerClient deprecation citation to spec PR #285...
efebf5b docs(client): correct token endpoint TLS citation (#2768)
d992df7 chore: remove CODEOWNERS patterns that match nothing on main (#2884)
c0f7aec fix(client): inline jose types in the CommonJS declaration file (#2883)
Additional commits viewable in compare view

Updates better-auth from 1.7.3 to 1.7.7

Release notes

Sourced from better-auth's releases.

v1.7.7

better-auth

Magic Link upgrade: Upgrade servers sharing verification storage together, request new Magic Links, and restart pending OAuth/SAML sign-ins. No database migration is required. See the critical advisory for affected configurations and custom storage changes.

Bug Fixes

Fixed a critical Magic Link account-takeover vulnerability. (#11494)

Fixed ID-token sign-in ignoring the social provider’s disableSignUp setting. (#11491)

Fixed OAuth Proxy accepting sign-in state as a provider profile. (#11494) Upgrade all OAuth Proxy participants together; see the OAuth Proxy upgrade guidance.

Fixed CAPTCHA errors missing the JSON Content-Type header. (#11476)

Fixed the active organization failing to refresh after sign-in when a session hook selects the initial organization. (#11375)

Fixed rate-limit errors missing the JSON Content-Type header. (#11469)

For detailed changes, see CHANGELOG

@better-auth/oauth-provider

Features

Added optional validateRedirectUri validation for trusted deployments with dynamic OAuth redirect URIs. (#8686)

Added verifyOAuthQueryParams to verify signed authorization queries before rendering a custom consent page. (#11402)

For detailed changes, see CHANGELOG

@better-auth/drizzle-adapter

Bug Fixes

Fixed concurrent PostgreSQL requests exceeding database-backed rate limits. (#11331)

For detailed changes, see CHANGELOG

@better-auth/kysely-adapter

Bug Fixes

Fixed consumeOne deleting a record after a concurrent write invalidates its original condition. (#11495)

For detailed changes, see CHANGELOG

Contributors

Thanks to everyone who contributed to this release:

@aryan1306, @bytaesu, @gitmotion, @gustavovalverde, @lennondotw

Full changelog: v1.7.6...v1.7.7

... (truncated)

Changelog

Sourced from better-auth's changelog.

1.7.7

Patch Changes

#11476 4186e36 Thanks @bytaesu! - Return CAPTCHA errors with the correct JSON Content-Type header.

#11469 8620aa9 Thanks @aryan1306! - Return rate limit errors with a JSON Content-Type header.

#11491 55cb92e Thanks @bytaesu! - Respect social provider disableSignUp when signing in with an ID token.

#11375 69defbc Thanks @bytaesu! - Refresh the active organization after sign-in when a session hook selects the initial organization.

#11494 ac54bfd Thanks @gustavovalverde! - Isolate OAuth state cookies and each OAuth Proxy payload with purpose-specific encryption keys. The oAuthProxy options and supported configuration remain unchanged.

Upgrade all Better Auth nodes that handle the same cookie-backed OAuth or SAML relay-state flow together. Upgrade every OAuth Proxy participant, including production and preview or development deployments, in the same cutover. OAuth sign-in, account-linking, and cookie-backed SAML sign-in flows started before the upgrade must be restarted. Mixed old and new participants cannot exchange existing state or proxy payloads, and there is no fallback to the previous shared key.

#11494 ac54bfd Thanks @gustavovalverde! - Magic Link verification now accepts only records issued for Magic Link. Magic Link records and database-backed OAuth or SAML state use separate verification identifier prefixes. L...
Description has been truncated

…with 32 updates Bumps the minor-and-patch group with 32 updates in the / directory: | Package | From | To | | --- | --- | --- | | [turbo](https://github.com/vercel/turborepo) | `2.10.12` | `2.11.6` | | [@hono/node-server](https://github.com/honojs/node-server) | `2.1.1` | `2.1.3` | | [@langchain/core](https://github.com/langchain-ai/langchainjs) | `1.2.9` | `1.2.14` | | [@langchain/openai](https://github.com/langchain-ai/langchainjs) | `1.5.11` | `1.6.2` | | [@modelcontextprotocol/hono](https://github.com/modelcontextprotocol/typescript-sdk) | `2.0.0-alpha.2` | `2.0.1` | | [@modelcontextprotocol/server](https://github.com/modelcontextprotocol/typescript-sdk) | `2.0.0-beta.5` | `2.2.0` | | [better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth) | `1.7.3` | `1.7.7` | | [deepagents](https://github.com/langchain-ai/deepagentsjs) | `1.13.3` | `1.14.1` | | [hono](https://github.com/honojs/hono) | `4.13.7` | `4.13.12` | | [mongodb](https://github.com/mongodb/node-mongodb-native) | `7.6.0` | `7.7.0` | | [mongoose](https://github.com/Automattic/mongoose) | `9.9.5` | `9.10.3` | | [zod](https://github.com/colinhacks/zod) | `4.5.4` | `4.6.5` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.5.0` | `26.6.4` | | [tsx](https://github.com/privatenumber/tsx) | `4.23.13` | `4.23.15` | | [@astrojs/starlight](https://github.com/withastro/starlight/tree/HEAD/packages/starlight) | `0.42.0` | `0.42.5` | | [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.3.2` | `7.3.5` | | [sharp](https://github.com/lovell/sharp) | `0.35.4` | `0.35.5` | | [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.102.8` | `5.104.0` | | [@tanstack/react-router](https://github.com/TanStack/router/tree/HEAD/packages/react-router) | `1.170.33` | `1.170.41` | | [@xyflow/react](https://github.com/xyflow/xyflow/tree/HEAD/packages/react) | `12.11.6` | `12.12.0` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.43.0` | `1.49.0` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.0` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.7` | `19.3.0` | | [@tanstack/router-plugin](https://github.com/TanStack/router/tree/HEAD/packages/router-plugin) | `1.168.36` | `1.168.42` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.7` | `19.3.0` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.2.2` | `8.3.2` | | [@langchain/anthropic](https://github.com/langchain-ai/langchainjs) | `1.5.9` | `1.5.12` | | [isomorphic-git](https://github.com/isomorphic-git/isomorphic-git) | `1.41.9` | `1.42.6` | | [langchain](https://github.com/langchain-ai/langchainjs) | `1.5.10` | `1.5.15` | | [react-day-picker](https://github.com/gpbl/react-day-picker/tree/HEAD/packages/react-day-picker) | `10.0.1` | `10.0.2` | | [tailwind-merge](https://github.com/dcastil/tailwind-merge/tree/HEAD/packages/tailwind-merge) | `3.6.0` | `3.7.0` | Updates `turbo` from 2.10.12 to 2.11.6 - [Release notes](https://github.com/vercel/turborepo/releases) - [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md) - [Commits](vercel/turborepo@v2.10.12...v2.11.6) Updates `@hono/node-server` from 2.1.1 to 2.1.3 - [Release notes](https://github.com/honojs/node-server/releases) - [Commits](honojs/node-server@v2.1.1...v2.1.3) Updates `@langchain/core` from 1.2.9 to 1.2.14 - [Release notes](https://github.com/langchain-ai/langchainjs/releases) - [Commits](https://github.com/langchain-ai/langchainjs/compare/@langchain/core@1.2.9...@langchain/core@1.2.14) Updates `@langchain/openai` from 1.5.11 to 1.6.2 - [Release notes](https://github.com/langchain-ai/langchainjs/releases) - [Commits](https://github.com/langchain-ai/langchainjs/compare/@langchain/openai@1.5.11...@langchain/openai@1.6.2) Updates `@modelcontextprotocol/hono` from 2.0.0-alpha.2 to 2.0.1 - [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases) - [Commits](https://github.com/modelcontextprotocol/typescript-sdk/compare/@modelcontextprotocol/hono@2.0.0-alpha.2...@modelcontextprotocol/hono@2.0.1) Updates `@modelcontextprotocol/server` from 2.0.0-beta.5 to 2.2.0 - [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases) - [Commits](https://github.com/modelcontextprotocol/typescript-sdk/compare/@modelcontextprotocol/server@2.0.0-beta.5...@modelcontextprotocol/server@2.2.0) Updates `better-auth` from 1.7.3 to 1.7.7 - [Release notes](https://github.com/better-auth/better-auth/releases) - [Changelog](https://github.com/better-auth/better-auth/blob/main/packages/better-auth/CHANGELOG.md) - [Commits](https://github.com/better-auth/better-auth/commits/v1.7.7/packages/better-auth) Updates `deepagents` from 1.13.3 to 1.14.1 - [Release notes](https://github.com/langchain-ai/deepagentsjs/releases) - [Commits](https://github.com/langchain-ai/deepagentsjs/compare/deepagents@1.13.3...deepagents@1.14.1) Updates `hono` from 4.13.7 to 4.13.12 - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.13.7...v4.13.12) Updates `mongodb` from 7.6.0 to 7.7.0 - [Release notes](https://github.com/mongodb/node-mongodb-native/releases) - [Changelog](https://github.com/mongodb/node-mongodb-native/blob/main/HISTORY.md) - [Commits](mongodb/node-mongodb-native@v7.6.0...v7.7.0) Updates `mongoose` from 9.9.5 to 9.10.3 - [Release notes](https://github.com/Automattic/mongoose/releases) - [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md) - [Commits](Automattic/mongoose@9.9.5...9.10.3) Updates `zod` from 4.5.4 to 4.6.5 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.5.4...v4.6.5) Updates `@types/node` from 26.5.0 to 26.6.4 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `tsx` from 4.23.13 to 4.23.15 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.23.13...v4.23.15) Updates `@astrojs/starlight` from 0.42.0 to 0.42.5 - [Release notes](https://github.com/withastro/starlight/releases) - [Changelog](https://github.com/withastro/starlight/blob/main/packages/starlight/CHANGELOG.md) - [Commits](https://github.com/withastro/starlight/commits/@astrojs/starlight@0.42.5/packages/starlight) Updates `astro` from 7.3.2 to 7.3.5 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/astro@7.3.5/packages/astro) Updates `sharp` from 0.35.4 to 0.35.5 - [Release notes](https://github.com/lovell/sharp/releases) - [Commits](lovell/sharp@v0.35.4...v0.35.5) Updates `@tanstack/react-query` from 5.102.8 to 5.104.0 - [Release notes](https://github.com/TanStack/query/releases) - [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md) - [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.104.0/packages/react-query) Updates `@tanstack/react-router` from 1.170.33 to 1.170.41 - [Release notes](https://github.com/TanStack/router/releases) - [Changelog](https://github.com/TanStack/router/blob/main/packages/react-router/CHANGELOG.md) - [Commits](https://github.com/TanStack/router/commits/@tanstack/react-router@1.170.41/packages/react-router) Updates `@xyflow/react` from 12.11.6 to 12.12.0 - [Release notes](https://github.com/xyflow/xyflow/releases) - [Changelog](https://github.com/xyflow/xyflow/blob/main/packages/react/CHANGELOG.md) - [Commits](https://github.com/xyflow/xyflow/commits/@xyflow/react@12.12.0/packages/react) Updates `lucide-react` from 1.43.0 to 1.49.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.49.0/packages/lucide-react) Updates `react` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react) Updates `@types/react` from 19.2.18 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `react-dom` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom) Updates `@types/react-dom` from 19.2.7 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `@tanstack/router-plugin` from 1.168.36 to 1.168.42 - [Release notes](https://github.com/TanStack/router/releases) - [Changelog](https://github.com/TanStack/router/blob/main/packages/router-plugin/CHANGELOG.md) - [Commits](https://github.com/TanStack/router/commits/@tanstack/router-plugin@1.168.42/packages/router-plugin) Updates `@types/react` from 19.2.18 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `@types/react-dom` from 19.2.7 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `vite` from 8.2.2 to 8.3.2 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.3.2/packages/vite) Updates `@langchain/anthropic` from 1.5.9 to 1.5.12 - [Release notes](https://github.com/langchain-ai/langchainjs/releases) - [Commits](https://github.com/langchain-ai/langchainjs/compare/@langchain/anthropic@1.5.9...@langchain/anthropic@1.5.12) Updates `isomorphic-git` from 1.41.9 to 1.42.6 - [Release notes](https://github.com/isomorphic-git/isomorphic-git/releases) - [Commits](isomorphic-git/isomorphic-git@v1.41.9...v1.42.6) Updates `langchain` from 1.5.10 to 1.5.15 - [Release notes](https://github.com/langchain-ai/langchainjs/releases) - [Commits](https://github.com/langchain-ai/langchainjs/compare/langchain@1.5.10...langchain@1.5.15) Updates `react-day-picker` from 10.0.1 to 10.0.2 - [Release notes](https://github.com/gpbl/react-day-picker/releases) - [Changelog](https://github.com/gpbl/react-day-picker/blob/main/packages/react-day-picker/CHANGELOG.md) - [Commits](https://github.com/gpbl/react-day-picker/commits/v10.0.2/packages/react-day-picker) Updates `tailwind-merge` from 3.6.0 to 3.7.0 - [Release notes](https://github.com/dcastil/tailwind-merge/releases) - [Commits](https://github.com/dcastil/tailwind-merge/commits/tailwind-merge@3.7.0/packages/tailwind-merge) --- updated-dependencies: - dependency-name: turbo dependency-version: 2.11.6 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@hono/node-server" dependency-version: 2.1.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@langchain/core" dependency-version: 1.2.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@langchain/openai" dependency-version: 1.6.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@modelcontextprotocol/hono" dependency-version: 2.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@modelcontextprotocol/server" dependency-version: 2.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: better-auth dependency-version: 1.7.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: deepagents dependency-version: 1.14.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: hono dependency-version: 4.13.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: mongodb dependency-version: 7.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: mongoose dependency-version: 9.10.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: zod dependency-version: 4.6.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@types/node" dependency-version: 26.6.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: tsx dependency-version: 4.23.15 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@astrojs/starlight" dependency-version: 0.42.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: astro dependency-version: 7.3.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: sharp dependency-version: 0.35.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@tanstack/react-query" dependency-version: 5.104.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@tanstack/react-router" dependency-version: 1.170.41 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@xyflow/react" dependency-version: 12.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: lucide-react dependency-version: 1.49.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: react dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: react-dom dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@types/react-dom" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@tanstack/router-plugin" dependency-version: 1.168.42 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@types/react-dom" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: vite dependency-version: 8.3.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@langchain/anthropic" dependency-version: 1.5.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: isomorphic-git dependency-version: 1.42.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: langchain dependency-version: 1.5.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: react-day-picker dependency-version: 10.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: tailwind-merge dependency-version: 3.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-10-05T04:23:41Z

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

github-actions · 2026-10-05T04:31:51Z

Docker image ready

docker pull ghcr.io/archmax-ai/semantics:pr-108

dependabot · 2026-10-12T11:34:32Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot closed this Oct 12, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/minor-and-patch-c0dd8ab351 branch October 12, 2026 11:34

Navigation Menu

Repository navigation

chore(deps)(deps): bump the minor-and-patch group across 1 directory with 32 updates - #108

chore(deps)(deps): bump the minor-and-patch group across 1 directory with 32 updates#108
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-c0dd8ab351

dependabot Bot commented on behalf of github Oct 5, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Oct 5, 2026

Uh oh!

github-actions Bot commented Oct 5, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 12, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Turborepo v2.11.6

What's Changed

Changelog

New Contributors

Turborepo v2.11.5

What's Changed

Changelog

v2.1.3

Security fixes

serveStatic decodes the request path a second time, leading to bypass of middleware on static paths

v2.1.2

What's Changed

@​langchain/core@​1.2.14

Patch Changes

@​langchain/core@​1.2.13

Patch Changes

@​langchain/core@​1.2.12

Patch Changes

@​langchain/core@​1.2.11

Patch Changes

@​langchain/core@​1.2.10

Patch Changes

@​langchain/openai@​1.6.2

Patch Changes

@​langchain/openai@​1.6.1

Patch Changes

@​langchain/openai@​1.6.0

Minor Changes

Patch Changes

@​langchain/openai@​1.5.13

Patch Changes

@​langchain/openai@​1.5.12

Patch Changes

@​langchain/openai@​1.5.12-rc.0

Patch Changes

@​modelcontextprotocol/hono@​2.0.1

Patch Changes

@​modelcontextprotocol/hono@​2.0.0

Patch Changes

@​modelcontextprotocol/server-legacy@​2.2.0

Patch Changes

@​modelcontextprotocol/server@​2.2.0

Patch Changes

@​modelcontextprotocol/server-legacy@​2.1.0

Patch Changes

@​modelcontextprotocol/server@​2.1.0

Minor Changes

Patch Changes

v1.7.7

better-auth

Bug Fixes

@better-auth/oauth-provider

Features

@better-auth/drizzle-adapter

Bug Fixes

@better-auth/kysely-adapter

Bug Fixes

Contributors

1.7.7

Patch Changes

Uh oh!

dependabot Bot commented on behalf of github Oct 5, 2026

Labels

Uh oh!

github-actions Bot commented Oct 5, 2026

Docker image ready

Uh oh!

dependabot Bot commented on behalf of github Oct 12, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 5, 2026 •

edited

Loading

`serveStatic` decodes the request path a second time, leading to bypass of middleware on static paths

`@langchain/core@1`.2.14

`@langchain/core@1`.2.13

`@langchain/core@1`.2.12

`@langchain/core@1`.2.11

`@langchain/core@1`.2.10

`@langchain/openai@1`.6.2

`@langchain/openai@1`.6.1

`@langchain/openai@1`.6.0

`@langchain/openai@1`.5.13

`@langchain/openai@1`.5.12

`@langchain/openai@1`.5.12-rc.0

`@modelcontextprotocol/hono@2`.0.1

`@modelcontextprotocol/hono@2`.0.0

`@modelcontextprotocol/server-legacy@2`.2.0

`@modelcontextprotocol/server@2`.2.0

`@modelcontextprotocol/server-legacy@2`.1.0

`@modelcontextprotocol/server@2`.1.0

`better-auth`

`@better-auth/oauth-provider`

`@better-auth/drizzle-adapter`

`@better-auth/kysely-adapter`