chore(deps): bump the prod-minor group across 1 directory with 5 updates by dependabot[bot] · Pull Request #76 · vilaca/factory

dependabot · 2026-09-28T04:55:05Z

Bumps the prod-minor group with 5 updates in the / directory:

Package	From	To
@anthropic-ai/sdk	`0.120.0`	`0.128.0`
@huggingface/inference	`4.13.28`	`4.13.30`
@modelcontextprotocol/sdk	`1.30.0`	`1.30.1`
google-auth-library	`11.0.2`	`11.1.0`
react	`19.2.8`	`19.3.0`

Updates @anthropic-ai/sdk from 0.120.0 to 0.128.0

Release notes

Sourced from @anthropic-ai/sdk's releases.

sdk: v0.128.0

0.128.0 (2026-09-22)

Full Changelog: sdk-v0.127.0...sdk-v0.128.0

Features

api: add support for claude-opus-5-5, inline tool definitions and MCP tool-list pinning (beta) (eff2748)

Bug Fixes

api: share one evaluated_permission enum across Managed Agents events (0c1cc0f)

tools: addTools() takes effect straight away (#773) (1ccdad0)

tools: leave reply-only params off the tool runner's compaction request (#769) (8afc336)

Chores

docs: add descriptions to the Dreams API reference (ea4ddd1)

docs: add descriptions to the User Profiles API reference (ea4ddd1)

docs: add memory store descriptions to the Managed Agents API reference (ea4ddd1)

docs: improve descriptions in the Dreams API reference (971c54a)

docs: simplify the session thread agent type description (ccf71a2)

docs: update diagnostics field descriptions on beta messages (c0b8746)

internal: add property-based tests for partial JSON parsing (#776) (3ffac09)

sdk: v0.127.0

0.127.0 (2026-09-18)

Full Changelog: sdk-v0.126.0...sdk-v0.127.0

Features

api: add group with display_name to rate limits, deprecate group_type (2575d97)

tools: add compactBeforeNextTurn() to the tool runner (#682) (9f75ca6)

Bug Fixes

BetaMessageStream: stop coercing a null compaction_delta content into "null" (#655) (dbd6845)

client: don't retry requests whose body is a stream or iterator (eebc1b9)

client: join multiple anthropic-beta values with a comma and no space (#638) (e0cb1ff)

client: make pagination exports on the client namespace type-only (5adea1f)

internal: drop jest from tsconfig types (60588af)

middleware: echo a streamed compaction summary in the fallback continuation (#657) (2e0f004)

tools: keep $defs when transformJSONSchema root is a $ref (#687) (57a9f30)

Performance Improvements

... (truncated)

Changelog

Sourced from @anthropic-ai/sdk's changelog.

0.128.0 (2026-09-22)

Full Changelog: sdk-v0.127.0...sdk-v0.128.0

Features

api: add support for claude-opus-5-5, inline tool definitions and MCP tool-list pinning (beta) (eff2748)

Bug Fixes

api: share one evaluated_permission enum across Managed Agents events (0c1cc0f)

tools: addTools() takes effect straight away (#773) (1ccdad0)

tools: leave reply-only params off the tool runner's compaction request (#769) (8afc336)

Chores

docs: add descriptions to the Dreams API reference (ea4ddd1)

docs: add descriptions to the User Profiles API reference (ea4ddd1)

docs: add memory store descriptions to the Managed Agents API reference (ea4ddd1)

docs: improve descriptions in the Dreams API reference (971c54a)

docs: simplify the session thread agent type description (ccf71a2)

docs: update diagnostics field descriptions on beta messages (c0b8746)

internal: add property-based tests for partial JSON parsing (#776) (3ffac09)

0.127.0 (2026-09-18)

Full Changelog: sdk-v0.126.0...sdk-v0.127.0

Features

api: add group with display_name to rate limits, deprecate group_type (2575d97)

tools: add compactBeforeNextTurn() to the tool runner (#682) (9f75ca6)

Bug Fixes

BetaMessageStream: stop coercing a null compaction_delta content into "null" (#655) (dbd6845)

client: don't retry requests whose body is a stream or iterator (eebc1b9)

client: join multiple anthropic-beta values with a comma and no space (#638) (e0cb1ff)

client: make pagination exports on the client namespace type-only (5adea1f)

internal: drop jest from tsconfig types (60588af)

middleware: echo a streamed compaction summary in the fallback continuation (#657) (2e0f004)

tools: keep $defs when transformJSONSchema root is a $ref (#687) (57a9f30)

Performance Improvements

client: skip formatting request details when debug logging is off (2b29ed2)

... (truncated)

Commits

1926adb Merge pull request #1208 from anthropics/release-please--branches--main--chan...
162c8b1 chore: release main
3ffac09 chore(internal): add property-based tests for partial JSON parsing (#776)
e40ce27 test(ecosystem): check that unused imports tree-shake to nothing
1ccdad0 fix(tools): addTools() takes effect straight away (#773)
8afc336 fix(tools): leave reply-only params off the tool runner's compaction request ...
eff2748 feat(api): add support for claude-opus-5-5, inline tool definitions and MCP t...
06e5f9b codegen metadata
0c1cc0f fix(api): share one evaluated_permission enum across Managed Agents events
c0b8746 chore(docs): update diagnostics field descriptions on beta messages
Additional commits viewable in compare view

Updates @huggingface/inference from 4.13.28 to 4.13.30

Commits

2366bb0 🔖 @huggingface/inference 4.13.30
6f432b1 [Inference Providers] deepinfra: add text-to-image support (#2397)
f177886 🔖 @huggingface/inference 4.13.29
e93fe94 ✨ [Inference Providers] Add MiniMax H3 support to Novita (#2470)
a8bf495 🔖 @huggingface/tasks 0.21.46
a16fdf8 Add GLiFormer download tracking (#2500)
ef1c579 add RX 5600 XT to AMD GPU hardware list (#2498)
d39455a Fix collection test (#2499)
436925d 🔖 @huggingface/hub 2.17.2
b4cfe27 fix(hub): don't cache a failed xet token refresh (#2494)
Additional commits viewable in compare view

Updates @modelcontextprotocol/sdk from 1.30.0 to 1.30.1

Release notes

Sourced from @modelcontextprotocol/sdk's releases.

1.30.1

What's Changed

[v1.x] fix(server): read HTTP request bodies with a size limit and bound JSON-RPC batch length by @maxisbey in modelcontextprotocol/typescript-sdk#2717

fix(auth): preserve resource URI without trailing slash (#1968) by @MukundaKatta in modelcontextprotocol/typescript-sdk#1972

chore: bump version to 1.30.1 by @claude[bot] in modelcontextprotocol/typescript-sdk#2848

New Contributors

@MukundaKatta made their first contribution in modelcontextprotocol/typescript-sdk#1972

Full Changelog: modelcontextprotocol/typescript-sdk@1.30.0...1.30.1

Commits

289ac2c chore: bump version to 1.30.1 (#2848)
12b4256 fix(auth): preserve resource URI without trailing slash (#1968) (#1972)
a9f6eb7 [v1.x] fix(server): read HTTP request bodies with a size limit and bound JSON...
See full diff in compare view

Updates google-auth-library from 11.0.2 to 11.1.0

Release notes

Sourced from google-auth-library's releases.

google-auth-library: v11.1.0

11.1.0 (2026-09-15)

Features

PNPM workspace (#8973) (1ea27c9)

Changelog

Sourced from google-auth-library's changelog.

11.1.0 (2026-09-15)

Features

PNPM workspace (#8973) (1ea27c9)

Commits

3cc13fe chore: release main (#9295)
3ff5ae9 chore: update .nycrc, Contributing.md, and .gitignore across packages (#9144)
1ea27c9 feat: PNPM workspace (#8973)
de587e3 chore: linter eslint fix (#9088)
See full diff in compare view

Updates react from 19.2.8 to 19.3.0

Release notes

Sourced from react's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)

Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

Enable Trusted Types API integration (@rickhanlonii #35816)

Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)

Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@hoxyq, @eps1lon: #37104, #37203, #37491)

All Changes

React

Fast Refresh Fixes

Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@sophiebits #36965)

Fix Fast Refresh so edits to a memo() comparison function take effect (@sophiebits #36964)

Fix Fast Refresh crash when an edit changes the kind of a component's type (@sophiebits #36963)

Unify hot reload type resolution for Fast Refresh (@sophiebits #36962)

Fix Fast Refresh to remount correctly when an edit changes the component kind (@sophiebits #36950)

Double invoke effects in StrictMode after Fast Refresh (@eps1lon #35962)

Performance Track Fixes

Prevent crash when accessing $$typeof in Performance Tracks (@eps1lon #35679)

Handle non-string function names in Performance Tracks (@eps1lon #35659)

Use minus (-) instead of en dash for removed props in Performance Tracks (@eps1lon #35649)

Handle arrays with bigints in deep objects in Performance Tracks (@eps1lon #35648)

Don't enumerate typed array props in Performance Tracks in DEV (@UditDewan #36913)

Bail out of diffing wide objects and arrays in Performance Tracks (@eps1lon #34742)

Clear potentially large performance measures in DEV (@hoxyq #34803)

Fix missing else branch for renders with no props change in Performance Tracks (@hoxyq #34837)

Activity Fixes

Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@sophiebits #36947)

Hide portal contents when an Activity is hidden (@acdlite #35091)

Prevent metadata hoisting in hidden <Activity> trees (@ronnakamoto #34983)

Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@acdlite #35074)

Don't unhide a node if a direct parent Offscreen is still hidden (@sebmarkbage #34821)

Don't show internal <Offscreen> component in error messages (@rickhanlonii #35763)

Warn in DEV when a component appears to have been unblocked by a conditional use() (@hoxyq, @eps1lon: #37104, #37203, #37491)

Render transitions independently instead of entangling them into a single render (@acdlite #37290)

... (truncated)

Changelog

Sourced from react's changelog.

19.3.0 (September 9, 2026)

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)

Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

Enable Trusted Types API integration (@rickhanlonii #35816)

Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)

Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@hoxyq, @eps1lon: #37104, #37203, #37491)

All Changes

React

Fast Refresh Fixes

Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@sophiebits #36965)

Fix Fast Refresh so edits to a memo() comparison function take effect (@sophiebits #36964)

Fix Fast Refresh crash when an edit changes the kind of a component's type (@sophiebits #36963)

Unify hot reload type resolution for Fast Refresh (@sophiebits #36962)

Fix Fast Refresh to remount correctly when an edit changes the component kind (@sophiebits #36950)

Double invoke effects in StrictMode after Fast Refresh (@eps1lon #35962)

Performance Track Fixes

Prevent crash when accessing $$typeof in Performance Tracks (@eps1lon #35679)

Handle non-string function names in Performance Tracks (@eps1lon #35659)

Use minus (-) instead of en dash for removed props in Performance Tracks (@eps1lon #35649)

Handle arrays with bigints in deep objects in Performance Tracks (@eps1lon #35648)

Don't enumerate typed array props in Performance Tracks in DEV (@UditDewan #36913)

Bail out of diffing wide objects and arrays in Performance Tracks (@eps1lon #34742)

Clear potentially large performance measures in DEV (@hoxyq #34803)

Fix missing else branch for renders with no props change in Performance Tracks (@hoxyq #34837)

Activity Fixes

Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@sophiebits #36947)

Hide portal contents when an Activity is hidden (@acdlite #35091)

Prevent metadata hoisting in hidden <Activity> trees (@ronnakamoto #34983)

Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@acdlite #35074)

Don't unhide a node if a direct parent Offscreen is still hidden (@sebmarkbage #34821)

Don't show internal <Offscreen> component in error messages (@rickhanlonii #35763)

Warn in DEV when a component appears to have been unblocked by a conditional use() (@hoxyq, @eps1lon: #37104, #37203, #37491)

Render transitions independently instead of entangling them into a single render (@acdlite #37290)

Fix hang when updating a dehydrated boundary inside a hidden tree (@gaearon #37135)

Don't reacquire Host Singletons during dev effect validation (@gnoff #37113)

Only remove properties from Host Singletons on release (@gnoff #37112)

... (truncated)

Commits

2dc7da7 [test] Bump Jest to 30.4 (#37382)
4f93894 docs: remove stale parentType param from validateChildKeys JSDoc (#36928)
dbc3750 Update required references to GitHub repo (#36752)
900ae09 [flow] Bump flow to v0.317.0 (#36701)
fbb1370 [flow] Bump flow to v0.307.1 (#36199)
56922cf [react-native-renderer] Delete Paper (legacy) renderer (#36285)
74568e8 [Flight] Transport AggregateErrors.errors (#36156)
e66ef64 [tests] remove withoutStack from assertConsole helpers (#35498)
db71391 [Fiber] Instrument the lazy initializer thenable in all cases (#35521)
3e1abcc [tests] Require exact error messages in assertConsole helpers (#35497)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the prod-minor group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.120.0` | `0.128.0` | | [@huggingface/inference](https://github.com/huggingface/huggingface.js) | `4.13.28` | `4.13.30` | | [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.30.0` | `1.30.1` | | [google-auth-library](https://github.com/googleapis/google-cloud-node/tree/HEAD/core/packages/google-auth-library-nodejs) | `11.0.2` | `11.1.0` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` | Updates `@anthropic-ai/sdk` from 0.120.0 to 0.128.0 - [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases) - [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md) - [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.120.0...sdk-v0.128.0) Updates `@huggingface/inference` from 4.13.28 to 4.13.30 - [Release notes](https://github.com/huggingface/huggingface.js/releases) - [Commits](huggingface/huggingface.js@inference-v4.13.28...inference-v4.13.30) Updates `@modelcontextprotocol/sdk` from 1.30.0 to 1.30.1 - [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases) - [Commits](modelcontextprotocol/typescript-sdk@1.30.0...1.30.1) Updates `google-auth-library` from 11.0.2 to 11.1.0 - [Release notes](https://github.com/googleapis/google-cloud-node/releases) - [Changelog](https://github.com/googleapis/google-cloud-node/blob/main/core/packages/google-auth-library-nodejs/CHANGELOG.md) - [Commits](https://github.com/googleapis/google-cloud-node/commits/google-auth-library-v11.1.0/core/packages/google-auth-library-nodejs) Updates `react` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react) --- updated-dependencies: - dependency-name: "@anthropic-ai/sdk" dependency-version: 0.128.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-minor - dependency-name: "@huggingface/inference" dependency-version: 4.13.30 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-minor - dependency-name: "@modelcontextprotocol/sdk" dependency-version: 1.30.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-minor - dependency-name: google-auth-library dependency-version: 11.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-minor - dependency-name: react dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-minor ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 28, 2026

Navigation Menu

chore(deps): bump the prod-minor group across 1 directory with 5 updates - #76

chore(deps): bump the prod-minor group across 1 directory with 5 updates#76
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/prod-minor-8e405752c5

dependabot Bot commented on behalf of github Sep 28, 2026

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 28, 2026

sdk: v0.128.0

0.128.0 (2026-09-22)

Features

Bug Fixes

Chores

sdk: v0.127.0

0.127.0 (2026-09-18)

Features

Bug Fixes

Performance Improvements

0.128.0 (2026-09-22)

Features

Bug Fixes

Chores

0.127.0 (2026-09-18)

Features

Bug Fixes

Performance Improvements

1.30.1

What's Changed

New Contributors

google-auth-library: v11.1.0

11.1.0 (2026-09-15)

Features

11.1.0 (2026-09-15)

Features

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

Notable changes

All Changes

React

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

Notable changes

All Changes

React

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants