fix(deps): update all non-major dependencies by renovate[bot] · Pull Request #186 · meabed/pr-commit-ai-agent

renovate · 2026-02-23T01:49:12Z

This PR contains the following updates:

Package	Change	Age	Confidence
@anthropic-ai/sdk	`0.78.0` → `0.80.0`
@commitlint/cli (source)	`20.4.2` → `20.5.0`
@commitlint/config-conventional (source)	`20.4.2` → `20.5.0`
@jest/globals (source)	`30.2.0` → `30.3.0`
@types/node (source)	`25.3.0` → `25.5.0`
ai (source)	`6.0.97` → `6.0.138`
jest (source)	`30.2.0` → `30.3.0`
openai	`6.22.0` → `6.33.0`

Release Notes

anthropics/anthropic-sdk-typescript (@anthropic-ai/sdk)

`v0.80.0`

Full Changelog: sdk-v0.79.0...sdk-v0.80.0

Features

api: manual updates (dd12f1a)
api: manual updates (9c0a077)

Chores

internal: tweak CI branches (4a5819e)

`v0.79.0`

Full Changelog: sdk-v0.78.0...sdk-v0.79.0

Features

add support for filesystem memory tools (#599) (1064199)
api: chore(config): clean up model enum list (#31) (07727a6)
api: GA thinking-display-setting (4dc8df4)
tests: update mock server (e5c3be9)

Bug Fixes

docs/contributing: correct pnpm link command (16bf66c)
internal: skip tests that depend on mock server (07417e5)
zod: use v4 import path for Zod ^3.25 compatibility (#925) (c6c0ac8)

Chores

client: remove unused import (3827ab5)
internal: codegen related update (2c1fc10)
internal: improve import alias names (5b9615b)
internal: move stringifyQuery implementation to internal function (16239f3)
internal: update dependencies to address dependabot vulnerabilities (6fdea5e)
mcp-server: improve instructions (66e5363)
remove accidentally committed file (#929) (0989113)
tests: unskip tests that are now supported in steady (616a98a)

Documentation

streamline and standardize docs (#687) (dbdc5d3)

conventional-changelog/commitlint (@commitlint/cli)

`v20.5.0`

Compare Source

Bug Fixes

cli: validate that --cwd directory exists before execution (#4658) (cf80f75), closes #4595

20.4.4 (2026-03-12)

Note: Version bump only for package @commitlint/cli

20.4.3 (2026-03-03)

Bug Fixes

footer parser does not escape special chars for regex #4560 (#4634) (8ff7c7f)

20.4.2 (2026-02-19)

Note: Version bump only for package @commitlint/cli

20.4.1 (2026-02-02)

Note: Version bump only for package @commitlint/cli

`v20.4.4`

Compare Source

Note: Version bump only for package @commitlint/cli

`v20.4.3`

Compare Source

Bug Fixes

footer parser does not escape special chars for regex #4560 (#4634) (8ff7c7f)

conventional-changelog/commitlint (@commitlint/config-conventional)

`v20.5.0`

Compare Source

Note: Version bump only for package @commitlint/config-conventional

20.4.4 (2026-03-12)

Note: Version bump only for package @commitlint/config-conventional

20.4.3 (2026-03-03)

Bug Fixes

footer parser does not escape special chars for regex #4560 (#4634) (8ff7c7f)

20.4.2 (2026-02-19)

Note: Version bump only for package @commitlint/config-conventional

20.4.1 (2026-02-02)

Note: Version bump only for package @commitlint/config-conventional

`v20.4.4`

Compare Source

Note: Version bump only for package @commitlint/config-conventional

`v20.4.3`

Compare Source

Bug Fixes

footer parser does not escape special chars for regex #4560 (#4634) (8ff7c7f)

jestjs/jest (@jest/globals)

`v30.3.0`

Compare Source

Features

[jest-config] Add defineConfig and mergeConfig helpers for type-safe Jest config (#15844)
[jest-fake-timers] Add setTimerTickMode to configure how timers advance
[*] Reduce token usage when run through LLMs (3f17932)

Fixes

[jest-config] Keep CLI coverage output when using --json with --outputFile (#15918)
[jest-mock] Use Symbol from test environment (#15858)
[jest-reporters] Fix issue where console output not displayed for GHA reporter even with silent: false option (#15864)
[jest-runtime] Fix issue where user cannot utilize dynamic import despite specifying --experimental-vm-modules Node option (#15842)
[jest-test-sequencer] Fix issue where failed tests due to compilation errors not getting re-executed even with --onlyFailures CLI option (#15851)
[jest-util] Make sure process.features.require_module is false (#15867)

Chore & Maintenance

[*] Replace remaining micromatch uses with picomatch
[deps] Update to sinon/fake-timers v15
[docs] Update V30 migration guide to notify users on jest.mock() work with case-sensitive path (#15849)
Updated Twitter icon to match the latest brand guidelines (#15869)

vercel/ai (ai)

`v6.0.138`

Compare Source

Patch Changes

Updated dependencies [0db5cd8]
- @ai-sdk/gateway@3.0.80

`v6.0.137`

Compare Source

Patch Changes

Updated dependencies [3caa544]
- @ai-sdk/gateway@3.0.79

`v6.0.136`

Compare Source

Patch Changes

Updated dependencies [763e178]
- @ai-sdk/gateway@3.0.78

`v6.0.135`

Compare Source

Patch Changes

df6a330: chore(ai): remove all experimental agent events

`v6.0.134`

Compare Source

Patch Changes

ed6876b: chore(ai): remove all experimental embed events

`v6.0.133`

Compare Source

Patch Changes

055cd68: fix: publish v6 to latest npm dist tag
Updated dependencies [d99eb91]
Updated dependencies [055cd68]
- @ai-sdk/gateway@3.0.77
- @ai-sdk/provider-utils@4.0.21

`v6.0.132`

Compare Source

Patch Changes

28fd5a5: README updates

`v6.0.131`

Compare Source

Patch Changes

14f25f9: feat(ai): introduce experimental callbacks for embed function

`v6.0.130`

Compare Source

Patch Changes

Updated dependencies [25af909]
- @ai-sdk/gateway@3.0.76

`v6.0.129`

Compare Source

Patch Changes

Updated dependencies [f95e0c0]
- @ai-sdk/gateway@3.0.75

`v6.0.128`

Compare Source

Patch Changes

Updated dependencies [7324b56]
- @ai-sdk/gateway@3.0.74

`v6.0.127`

Compare Source

Patch Changes

Updated dependencies [ac0c407]
Updated dependencies [e748159]
- @ai-sdk/gateway@3.0.73

`v6.0.126`

Compare Source

Patch Changes

578615a: Remove custom User-Agent header from HttpChatTransport to fix CORS preflight failures in Safari and Firefox

`v6.0.125`

Compare Source

Patch Changes

Updated dependencies [5ffb1ad]
Updated dependencies [f5bf0c6]
- @ai-sdk/gateway@3.0.72

`v6.0.124`

Patch Changes

Updated dependencies [55ccbe2]
- @ai-sdk/gateway@3.0.71

`v6.0.122`

Compare Source

Patch Changes

Updated dependencies [ca0b430]
- @ai-sdk/gateway@3.0.70

`v6.0.121`

Compare Source

Patch Changes

Updated dependencies [efdaefc]
- @ai-sdk/gateway@3.0.69

`v6.0.120`

Compare Source

Patch Changes

78c0e26: feat(ai): pass result provider metadata across the stream

`v6.0.119`

Compare Source

Patch Changes

ab286f1: fix(ai): doStream should reflect transformed values
d68b122: feat(ai): add missing usage attributes

`v6.0.118`

Compare Source

Patch Changes

64ac0fd: fix(security): validate redirect targets in download functions to prevent SSRF bypass

Both downloadBlob and download now validate the final URL after following HTTP redirects, preventing attackers from bypassing SSRF protections via open redirects to internal/private addresses.
Updated dependencies [64ac0fd]
- @ai-sdk/provider-utils@4.0.20
- @ai-sdk/gateway@3.0.68

`v6.0.117`

Compare Source

Patch Changes

d23121f: chore(ai): add optional ChatRequestOptions to addToolApprovalResponse and addToolOutput
Updated dependencies [2589004]
- @ai-sdk/gateway@3.0.67

`v6.0.116`

Compare Source

Patch Changes

ad4cfc2: Add URL validation to downloadBlob and download to prevent blind SSRF attacks. Private/internal IP addresses, localhost, and non-HTTP protocols are now rejected before fetching.
Updated dependencies [ad4cfc2]
- @ai-sdk/provider-utils@4.0.19
- @ai-sdk/gateway@3.0.66