Skip to content

fix(deps): update all non-major dependencies#601

Open
renovate[bot] wants to merge 1 commit intodevelopmentfrom
renovate/all-minor-patch
Open

fix(deps): update all non-major dependencies#601
renovate[bot] wants to merge 1 commit intodevelopmentfrom
renovate/all-minor-patch

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Jan 14, 2026 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
@atproto/api (source) 0.18.15 → 0.19.3 age confidence dependencies minor
@graphql-codegen/cli (source) 6.1.1 → 6.1.2 age confidence devDependencies patch
@graphql-codegen/typescript (source) 5.0.7 → 5.0.8 age confidence devDependencies patch
@graphql-codegen/typescript-operations (source) 5.0.7 → 5.0.8 age confidence devDependencies patch
@types/lodash (source) 4.17.23 → 4.17.24 age confidence devDependencies patch
actions/checkout v6.0.1 → v6.0.2 age confidence action patch
eslint (source) 9.39.2 → 9.39.3 age confidence devDependencies patch
feed 5.1.0 → 5.2.0 age confidence dependencies minor
firebase-admin (source) 13.6.0 → 13.7.0 age confidence dependencies minor
fs-extra 11.3.3 → 11.3.4 age confidence dependencies patch
graphql 16.12.0 → 16.13.1 age confidence dependencies minor
jdx/mise-action v3.5.1 → v3.6.2 age confidence action minor
npm:@anthropic-ai/claude-code 2.1.7 → 2.1.69 age confidence patch
npm:@openai/codex (source) 0.80.0 → 0.107.0 age confidence minor
prettier (source) 3.7.4 → 3.8.1 age confidence devDependencies minor
rimraf 6.1.2 → 6.1.3 age confidence dependencies patch

Release Notes

bluesky-social/atproto (@​atproto/api)

v0.19.3

Compare Source

Patch Changes

v0.19.2

Compare Source

Patch Changes

v0.19.1

Compare Source

Patch Changes

v0.19.0

Compare Source

Minor Changes

v0.18.21

Compare Source

Patch Changes

v0.18.20

Compare Source

Patch Changes

v0.18.19

Compare Source

Patch Changes

v0.18.18

Compare Source

Patch Changes

v0.18.17

Compare Source

Patch Changes

v0.18.16

Compare Source

Patch Changes
dotansimha/graphql-code-generator (@​graphql-codegen/cli)

v6.1.2

Compare Source

Patch Changes
  • #​10590 e173e11 Thanks @​ya2s! - Fix GraphQL Config loading to forward nested extensions.codegen.config options
    when loading schemas/documents, matching codegen.ts behavior.
dotansimha/graphql-code-generator (@​graphql-codegen/typescript)

v5.0.8

Compare Source

Patch Changes
dotansimha/graphql-code-generator (@​graphql-codegen/typescript-operations)

v5.0.8

Compare Source

Patch Changes
actions/checkout (actions/checkout)

v6.0.2

Compare Source

eslint/eslint (eslint)

v9.39.3

Compare Source

Bug Fixes

  • 791bf8d fix: restore TypeScript 4.0 compatibility in types (#​20504) (sethamus)

Chores

jpmonette/feed (feed)

v5.2.0

Compare Source

What's Changed

New Contributors

Full Changelog: jpmonette/feed@5.1.0...5.2.0

firebase/firebase-admin-node (firebase-admin)

v13.7.0: Firebase Admin Node.js SDK v13.7.0

Compare Source

New Features
  • feat(rc): Support Rollout, Personalization, and Experiment values (#​3046)
Bug Fixes
Miscellaneous

v13.6.1: Firebase Admin Node.js SDK v13.6.1

Compare Source

Bug Fixes
  • fix: Refactor isURL() to use Built-in URL Constructor (#​3061)
  • fix(data-connect): correctly serialize strings with special characters (#​3056)
Miscellaneous
  • [chore] Release 13.6.1 (#​3063)
  • build(deps): bump jws (#​3029)
  • chore: Update release workflows for push triggers (#​3062)
  • build(deps-dev): bump lodash from 4.17.21 to 4.17.23 (#​3057)
  • build(deps-dev): bump mocha from 11.7.1 to 11.7.5 (#​3012)
  • chore: Update github actions workflows and integration test resources (#​3052)
  • chore: Rename default branch to (#​3033)
  • build(deps): bump node-forge from 1.3.1 to 1.3.2 (#​3024)
  • build(deps): bump glob from 10.4.5 to 10.5.0 (#​3019)
  • build(deps-dev): bump bcrypt and @​types/bcrypt (#​3015)
  • fix validate unit tests (#​3009)
jprichardson/node-fs-extra (fs-extra)

v11.3.4

Compare Source

  • Fix bug where calling ensureSymlink/ensureSymlinkSync with a relative srcPath would fail if the symlink already existed (#​1038, #​1064)
graphql/graphql-js (graphql)

v16.13.1

Compare Source

v16.13.1 (2026-03-04)

Docs 📝
Internal 🏠
Committers: 2

v16.13.0

Compare Source

jdx/mise-action (jdx/mise-action)

v3.6.2

Compare Source

What's Changed

New Contributors

Full Changelog: jdx/mise-action@v3.6.1...v3.6.2

v3.6.1

Compare Source

What's Changed

Full Changelog: jdx/mise-action@v3.6.0...v3.6.1

v3.6.0

Compare Source

What's Changed

New Contributors

Full Changelog: jdx/mise-action@v3.5.1...v3.6.0

anthropics/claude-code (npm:@​anthropic-ai/claude-code)

v2.1.69

Compare Source

  • Added the /claude-api skill for building applications with the Claude API and Anthropic SDK
  • Added Ctrl+U on an empty bash prompt (!) to exit bash mode, matching escape and backspace
  • Added numeric keypad support for selecting options in Claude's interview questions (previously only the number row above QWERTY worked)
  • Added optional name argument to /remote-control and claude remote-control (/remote-control My Project or --name "My Project") to set a custom session title visible in claude.ai/code
  • Added Voice STT support for 10 new languages (20 total) — Russian, Polish, Turkish, Dutch, Ukrainian, Greek, Czech, Danish, Swedish, Norwegian
  • Added effort level display (e.g., "with low effort") to the logo and spinner, making it easier to see which effort setting is active
  • Added agent name display in terminal title when using claude --agent
  • Added sandbox.enableWeakerNetworkIsolation setting (macOS only) to allow Go programs like gh, gcloud, and terraform to verify TLS certificates when using a custom MITM proxy with httpProxyPort
  • Added includeGitInstructions setting (and CLAUDE_CODE_DISABLE_GIT_INSTRUCTIONS env var) to remove built-in commit and PR workflow instructions from Claude's system prompt
  • Added /reload-plugins command to activate pending plugin changes without restarting
  • Added a one-time startup prompt suggesting Claude Code Desktop on macOS and Windows (max 3 showings, dismissible)
  • Added ${CLAUDE_SKILL_DIR} variable for skills to reference their own directory in SKILL.md content
  • Added InstructionsLoaded hook event that fires when CLAUDE.md or .claude/rules/*.md files are loaded into context
  • Added agent_id (for subagents) and agent_type (for subagents and --agent) to hook events
  • Added worktree field to status line hook commands with name, path, branch, and original repo directory when running in a --worktree session
  • Added pluginTrustMessage in managed settings to append organization-specific context to the plugin trust warning shown before installation
  • Added policy limit fetching (e.g., remote control restrictions) for Team plan OAuth users, not just Enterprise
  • Added pathPattern to strictKnownMarketplaces for regex-matching file/directory marketplace sources alongside hostPattern restrictions
  • Added plugin source type git-subdir to point to a subdirectory within a git repo
  • Added oauth.authServerMetadataUrl config option for MCP servers to specify a custom OAuth metadata discovery URL when standard discovery fails
  • Fixed a security issue where nested skill discovery could load skills from gitignored directories like node_modules
  • Fixed trust dialog silently enabling all .mcp.json servers on first run. You'll now see the per-server approval dialog as expected
  • Fixed claude remote-control crashing immediately on npm installs with "bad option: --sdk-url" (#​28334)
  • Fixed --model claude-opus-4-0 and --model claude-opus-4-1 resolving to deprecated Opus versions instead of current
  • Fixed macOS keychain corruption when using multiple OAuth MCP servers. Large OAuth metadata blobs could overflow the security -i stdin buffer, silently leaving stale credentials behind and causing repeated /login prompts.
  • Fixed .credentials.json losing subscriptionType (showing "Claude API" instead of "Claude Pro"/"Claude Max") when the profile endpoint transiently fails during token refresh (#​30185)
  • Fixed ghost dotfiles (.bashrc, HEAD, etc.) appearing as untracked files in the working directory after sandboxed Bash commands on Linux
  • Fixed Shift+Enter printing [27;2;13~ instead of inserting a newline in Ghostty over SSH
  • Fixed stash (Ctrl+S) being cleared when submitting a message while Claude is working
  • Fixed ctrl+o (transcript toggle) freezing for many seconds in long sessions with lots of file edits
  • Fixed plan mode feedback input not supporting multi-line text entry (backslash+Enter and Shift+Enter now insert newlines)
  • Fixed cursor not moving down into blank lines at the top of the input box
  • Fixed /stats crash when transcript files contain entries with missing or malformed timestamps
  • Fixed a brief hang after a streaming error on long sessions (the transcript was being fully rewritten to drop one line; it is now truncated in place)
  • Fixed --setting-sources user not blocking dynamically discovered project skills
  • Fixed duplicate CLAUDE.md, slash commands, agents, and rules when running from a worktree nested inside its main repo (e.g. claude -w)
  • Fixed plugin Stop/SessionEnd/etc hooks not firing after any /plugin operation
  • Fixed plugin hooks being silently dropped when two plugins use the same ${CLAUDE_PLUGIN_ROOT}/... command template
  • Fixed memory leak in long-running SDK/CCR sessions where conversation messages were retained unnecessarily
  • Fixed API 400 errors in forked agents (autocompact, summarization) when resuming sessions that were interrupted mid-tool-batch
  • Fixed "unexpected tool_use_id found in tool_result blocks" error when resuming conversations that start with an orphaned tool result
  • Fixed teammates accidentally spawning nested teammates via the Agent tool's name parameter
  • Fixed CLAUDE_CODE_MAX_OUTPUT_TOKENS being ignored during conversation compaction
  • Fixed /compact summary rendering as a user bubble in SDK consumers (Claude Code Remote web UI, VSCode extension)
  • Fixed voice space bar getting stuck after a failed voice activation (module loading race, cold GrowthBook)
  • Fixed worktree file copy on Windows
  • Fixed global .claude folder detection on Windows
  • Fixed symlink bypass where writing new files through a symlinked parent directory could escape the working directory in acceptEdits mode
  • Fixed sandbox prompting users to approve non-allowed domains when allowManagedDomainsOnly is enabled in managed settings — non-allowed domains are now blocked automatically with no bypass
  • Fixed interactive tools (e.g., AskUserQuestion) being silently auto-allowed when listed in a skill's allowed-tools, bypassing the permission prompt and running with empty answers
  • Fixed multi-GB memory spike when committing with large untracked binary files in the working tree
  • Fixed Escape not interrupting a running turn when the input box has draft text. Use Up arrow to pull queued messages back for editing, or Ctrl+U to clear the input line.
  • Fixed Android app crash when running local slash commands (/voice, /cost) in Remote Control sessions
  • Fixed a memory leak where old message array versions accumulated in React Compiler memoCache over long sessions
  • Fixed a memory leak where REPL render scopes accumulated over long sessions (~35MB over 1000 turns)
  • Fixed memory retention in in-process teammates where the parent's full conversation history was pinned for the teammate's lifetime, preventing GC after /clear or auto-compact
  • Fixed a memory leak in interactive mode where hook events could accumulate unboundedly during long sessions
  • Fixed hang when --mcp-config points to a corrupted file
  • Fixed slow startup when many skills/plugins are installed
  • Fixed cd <outside-dir> && <cmd> permission prompt to surface the chained command instead of only showing "Yes, allow reading from /"
  • Fixed conditional .claude/rules/*.md files (with paths: frontmatter) and nested CLAUDE.md files not loading in print mode (claude -p)
  • Fixed /clear not fully clearing all session caches, reducing memory retention in long sessions
  • Fixed terminal flicker caused by animated elements at the scrollback boundary
  • Fixed UI frame drops on macOS when using MCP servers with OAuth (regression from 2.1.x)
  • Fixed occasional frame stalls during typing caused by synchronous debug log flushes
  • Fixed TeammateIdle and TaskCompleted hooks to support {"continue": false, "stopReason": "..."} to stop the teammate, matching Stop hook behavior
  • Fixed WorktreeCreate and WorktreeRemove plugin hooks being silently ignored
  • Fixed skill descriptions with colons (e.g., "Triggers include: X, Y, Z") failing to load from SKILL.md frontmatter
  • Fixed project skills without a description: frontmatter field not appearing in Claude's available skills list
  • Fixed /context showing identical token counts for all MCP tools from a server
  • Fixed literal nul file creation on Windows when the model uses CMD-style 2>nul redirection in Git Bash
  • Fixed extra blank lines appearing below each tool call in the expanded subagent transcript view (Ctrl+O)
  • Fixed Tab/arrow keys not cycling Settings tabs when /config search box is focused but empty
  • Fixed service key OAuth sessions (CCR containers) spamming [ERROR] logs with 403s from profile-scoped endpoints
  • Fixed inconsistent color for "Remote Control active" status indicator
  • Fixed Voice waveform cursor covering the first suffix letter when dictating mid-input
  • Fixed Voice input showing all 5 spaces during warmup instead of capping at ~2 (aligning with the "keep holding…" hint)
  • Improved spinner performance by isolating the 50ms animation loop from the surrounding shell, reducing render and CPU overhead during turns
  • Improved UI rendering performance in native binaries with React Compiler
  • Improved --worktree startup by eliminating a git subprocess on the startup path
  • Improved macOS startup by eliminating redundant settings-file reloads when managed settings resolve
  • Improved macOS startup for Claude.ai enterprise/team users by skipping an unnecessary keychain lookup
  • Improved MCP -p startup by pipelining claude.ai config fetch with local connections and using a concurrency pool instead of sequential batching
  • Improved voice startup by removing imperceptible warmup pulse animations that were causing re-render stutter
  • Improved MCP binary content handling: tools returning PDFs, Office documents, or audio now save decoded bytes to disk with the correct file extension instead of dumping raw base64 into the conversation context. WebFetch also saves binary responses alongside its summary.
  • Improved memory usage in long sessions by stabilizing onSubmit across message updates
  • Improved LSP tool rendering and memory context building to no longer read entire files
  • Improved session upload and memory sync to avoid reading large files into memory before size/binary checks
  • Improved file operation performance by avoiding reading file contents for existence checks (6 sites)
  • Improved documentation to clarify that --append-system-prompt-file and --system-prompt-file work in interactive mode (the docs previously said print mode only)
  • Reduced baseline memory by ~16MB by deferring Yoga WASM preloading
  • Reduced memory footprint for SDK and CCR sessions using stream-json output
  • Reduced memory usage when resuming large sessions (including compacted history)
  • Reduced token usage on multi-agent tasks with more concise subagent final reports
  • Changed Sonnet 4.5 users on Pro/Max/Team Premium to be automatically migrated to Sonnet 4.6
  • Changed the /resume picker to show your most recent prompt instead of the first one. This also resolves some titles appearing as (session).
  • Changed claude.ai MCP connector failures to show a notification instead of silently disappearing from the tool list
  • Changed example command suggestions to be generated deterministically instead of calling Haiku
  • Changed resuming after compaction to no longer produce a preamble recap before continuing
  • [SDK] Changed task creation to no longer require the activeForm field — the spinner falls back to the task subject
  • [VSCode] Added compaction display as a collapsible "Compacted chat" card with the summary inside
  • [VSCode] The permission mode picker now respects permissions.disableBypassPermissionsMode from your effective Claude Code settings (including managed/policy settings) — when set to disable, bypass permissions mode is hidden from the picker
  • [VSCode] Fixed RTL text (Arabic, Hebrew, Persian) rendering reversed in the chat panel (regression in v2.1.63)

v2.1.68

Compare Source

  • Opus 4.6 now defaults to medium effort for Max and Team subscribers. Medium effort works well for most tasks — it's the sweet spot between speed and thoroughness. You can change this anytime with /model
  • Re-introduced the "ultrathink" keyword to enable high effort for the next turn
  • Removed Opus 4 and 4.1 from Claude Code on the first-party API — users with these models pinned are automatically moved to Opus 4.6

v2.1.67

Compare Source

v2.1.66

Compare Source

  • Reduced spurious error logging

v2.1.64

Compare Source

v2.1.63

Compare Source

  • Added /simplify and /batch bundled slash commands
  • Fixed local slash command output like /cost appearing as user-sent messages instead of system messages in the UI
  • Project configs & auto memory now shared across git worktrees of the same repository
  • Added ENABLE_CLAUDEAI_MCP_SERVERS=false env var to opt out from making claude.ai MCP servers available
  • Improved /model command to show the currently active model in the slash command menu
  • Added HTTP hooks, which can POST JSON to a URL and receive JSON instead of running a shell command
  • Fixed lis

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 0416f33 to 5d7fcb6 Compare January 15, 2026 00:57
@renovate renovate bot changed the title chore(deps): update dependency npm:@openai/codex to v0.81.0 chore(deps): update all non-major dependencies Jan 15, 2026
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 5d7fcb6 to 5f1cfde Compare January 15, 2026 04:45
@renovate renovate bot changed the title chore(deps): update all non-major dependencies fix(deps): update all non-major dependencies Jan 15, 2026
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 12 times, most recently from 2c84649 to aa7dcec Compare January 22, 2026 02:01
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 11 times, most recently from 0257627 to 7fda4e6 Compare January 29, 2026 21:15
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 3424966 to 7eb6297 Compare January 31, 2026 20:38
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 12 times, most recently from 96a0ee0 to c019854 Compare February 12, 2026 22:39
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 10 times, most recently from dbb8060 to ab3ff81 Compare February 20, 2026 01:25
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 7 times, most recently from 5f056e2 to 8793afb Compare February 24, 2026 12:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@yshrsmz yshrsmz Awaiting requested review from yshrsmz

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants