Skip to content

Bump the npm_and_yarn group across 9 directories with 10 updates#2

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/npm_and_yarn-61c5ce6f24
Open

Bump the npm_and_yarn group across 9 directories with 10 updates#2
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/npm_and_yarn-61c5ce6f24

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Feb 19, 2026

Bumps the npm_and_yarn group with 9 updates in the / directory:

Package From To
lodash 4.17.21 4.17.23
ai 5.0.0 5.0.52
diff 5.2.0 5.2.2
express 4.19.2 4.22.0
axios 1.7.4 1.13.5
nanoid 5.0.7 5.0.9
systeminformation 5.23.4 5.30.8
next 14.2.13 15.5.10
@anthropic-ai/claude-code 1.0.128 2.1.47

Bumps the npm_and_yarn group with 3 updates in the /backend directory: ai, diff and express.
Bumps the npm_and_yarn group with 1 update in the /common directory: ai.
Bumps the npm_and_yarn group with 1 update in the /evals directory: @anthropic-ai/claude-code.
Bumps the npm_and_yarn group with 5 updates in the /npm-app directory:

Package From To
ai 5.0.0 5.0.52
diff 8.0.2 8.0.3
axios 1.7.4 1.13.5
nanoid 5.0.7 5.0.9
systeminformation 5.23.4 5.30.8

Bumps the npm_and_yarn group with 1 update in the /npm-app/release directory: tar.
Bumps the npm_and_yarn group with 1 update in the /npm-app/release-staging directory: tar.
Bumps the npm_and_yarn group with 1 update in the /sdk directory: diff.
Bumps the npm_and_yarn group with 1 update in the /web directory: next.

Updates lodash from 4.17.21 to 4.17.23

Commits

Updates ai from 5.0.0 to 5.0.52

Commits
  • 63d5f66 Version Packages (#8895)
  • 930399b Backport: fix(ai): download files when intermediate file cannot be downloaded...
  • 7ca78f1 Backport: feat(provider/gateway): Add new Qwen models to Gateway model string...
  • 1cfc209 Backport: feat(provider/openai): OpenAILanguageModelOptions type (#8858)
  • 347b7ec ci: rename v5.0 branch to release-v*
  • 85909a9 Backport: chore(ai): update test message (#8875)
  • c56822d Backport: fix(ai): update uiMessageChunkSchema to satisfy the `UIMessageChu...
  • 1461adf Backport: chore(examples): remove redundant OpenAI reasoning examples (#8871)
  • 6bd07df Version Packages (#8853)
  • a45d61a ci(release): remove incorrect changeset bump for @ai-sdk/baseten
  • Additional commits viewable in compare view

Updates diff from 5.2.0 to 5.2.2

Changelog

Sourced from diff's changelog.

v5.2.2 - January 2026

Only change from 5.2.0 is a backport of the fix to GHSA-73rr-hh4g-fpgx.

v5.2.1 (deprecated)

Accidental release - do not use.

Commits

Updates express from 4.19.2 to 4.22.0

Release notes

Sourced from express's releases.

4.22.0

Important: Security

What's Changed

Full Changelog: expressjs/express@4.21.2...4.22.0

4.21.2

What's Changed

Full Changelog: expressjs/express@4.21.1...4.21.2

4.21.1

What's Changed

Full Changelog: expressjs/express@4.21.0...4.21.1

4.21.0

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from express's changelog.

4.22.0 / 2025-12-01

4.21.2 / 2024-11-06

  • deps: path-to-regexp@0.1.12
    • Fix backtracking protection
  • deps: path-to-regexp@0.1.11
    • Throws an error on invalid path values

4.21.1 / 2024-10-08

4.21.0 / 2024-09-11

  • Deprecate res.location("back") and res.redirect("back") magic string
  • deps: serve-static@1.16.2
    • includes send@0.19.0
  • deps: finalhandler@1.3.1
  • deps: qs@6.13.0

4.20.0 / 2024-09-10

  • deps: serve-static@0.16.0
    • Remove link renderization in html while redirecting
  • deps: send@0.19.0
    • Remove link renderization in html while redirecting
  • deps: body-parser@0.6.0
    • add depth option to customize the depth level in the parser
    • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)
  • Remove link renderization in html while using res.redirect
  • deps: path-to-regexp@0.1.10
    • Adds support for named matching groups in the routes using a regex
    • Adds backtracking protection to parameters without regexes defined
  • deps: encodeurl@~2.0.0
    • Removes encoding of \, |, and ^ to align better with URL spec
  • Deprecate passing options.maxAge and options.expires to res.clearCookie
    • Will be ignored in v5, clearCookie will set a cookie with an expires in the past to instruct clients to delete the cookie
Commits

Updates axios from 1.7.4 to 1.13.5

Release notes

Sourced from axios's releases.

v1.13.5

Release 1.13.5

Highlights

  • Security: Fixed a potential Denial of Service issue involving the __proto__ key in mergeConfig. (PR #7369)
  • Bug fix: Resolved an issue where AxiosError could be missing the status field on and after v1.13.3. (PR #7368)

Changes

Security

  • Fix Denial of Service via __proto__ key in mergeConfig. (PR #7369)

Fixes

  • Fix/5657. (PR #7313)
  • Ensure status is present in AxiosError on and after v1.13.3. (PR #7368)

Features / Improvements

  • Add input validation to isAbsoluteURL. (PR #7326)
  • Refactor: bump minor package versions. (PR #7356)

Documentation

  • Clarify object-check comment. (PR #7323)
  • Fix deprecated Buffer constructor usage and README formatting. (PR #7371)

CI / Maintenance

  • Chore: fix issues with YAML. (PR #7355)
  • CI: update workflow YAMLs. (PR #7372)
  • CI: fix run condition. (PR #7373)
  • Dev deps: bump karma-sourcemap-loader from 0.3.8 to 0.4.0. (PR #7360)
  • Chore(release): prepare release 1.13.5. (PR #7379)

New Contributors

Full Changelog: axios/axios@v1.13.4...v1.13.5

v1.13.4

Overview

The release addresses issues discovered in v1.13.3 and includes significant CI/CD improvements.

Full Changelog: v1.13.3...v1.13.4

What's New in v1.13.4

Bug Fixes

  • fix: issues with version 1.13.3 (#7352) (ee90dfc)
    • Fixed issues discovered in v1.13.3 release

... (truncated)

Changelog

Sourced from axios's changelog.

Changelog

1.13.3 (2026-01-20)

Bug Fixes

  • http2: Use port 443 for HTTPS connections by default. (#7256) (d7e6065)
  • interceptor: handle the error in the same interceptor (#6269) (5945e40)
  • main field in package.json should correspond to cjs artifacts (#5756) (7373fbf)
  • package.json: add 'bun' package.json 'exports' condition. Load the Node.js build in Bun instead of the browser build (#5754) (b89217e)
  • silentJSONParsing=false should throw on invalid JSON (#7253) (#7257) (7d19335)
  • turn AxiosError into a native error (#5394) (#5558) (1c6a86d)
  • types: add handlers to AxiosInterceptorManager interface (#5551) (8d1271b)
  • types: restore AxiosError.cause type from unknown to Error (#7327) (d8233d9)
  • unclear error message is thrown when specifying an empty proxy authorization (#6314) (6ef867e)

Features

Reverts

  • Revert "fix: silentJSONParsing=false should throw on invalid JSON (#7253) (#7…" (#7298) (a4230f5), closes #7253 #7 #7298
  • deps: bump peter-evans/create-pull-request from 7 to 8 in the github-actions group (#7334) (2d6ad5e)

Contributors to this release

... (truncated)

Commits
  • 29f7542 chore(release): prepare release 1.13.5 (#7379)
  • 431c3a3 ci: fix run condition (#7373)
  • 9ff3a78 ci: update ymls (#7372)
  • 265b712 docs: fix deprecated Buffer constructor and formatting issues in README (#7371)
  • 475e75a feat: add input validation to isAbsoluteURL (#7326)
  • 28c7215 fix: Denial of Service via proto Key in mergeConfig (#7369)
  • 04cf019 docs: clarify object check comment (#7323)
  • 696fa75 fix: status is missing in AxiosError on and after v1.13.3 (#7368)
  • 569f028 fix: added a option to choose between legacy and the new request/response int...
  • 44b7c9f chore(deps-dev): bump karma-sourcemap-loader (#7360)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for axios since your current version.


Updates nanoid from 5.0.7 to 5.0.9

Release notes

Sourced from nanoid's releases.

5.0.9

  • Fixed a way to break Nano ID by passing non-integer size (by @​myndzi).

5.0.8

Changelog

Sourced from nanoid's changelog.

5.0.9

  • Fixed a way to break Nano ID by passing non-integer size (by @​myndzi).

5.0.8

Commits

Updates systeminformation from 5.23.4 to 5.30.8

Release notes

Sourced from systeminformation's releases.

v5.30.8

Full Changelog: sebhildebrandt/systeminformation@v5.30.7...v5.30.8

v5.30.7

Full Changelog: sebhildebrandt/systeminformation@v5.30.6...v5.30.7

v5.30.6

Full Changelog: sebhildebrandt/systeminformation@v5.30.5...v5.30.6

v5.30.5

Full Changelog: sebhildebrandt/systeminformation@v5.30.4...v5.30.5

v5.30.4

Full Changelog: sebhildebrandt/systeminformation@v5.30.3...v5.30.4

v5.30.3

Full Changelog: sebhildebrandt/systeminformation@v5.30.2...v5.30.3

v5.30.2

Full Changelog: sebhildebrandt/systeminformation@v5.30.1...v5.30.2

v5.30.1

Full Changelog: sebhildebrandt/systeminformation@v5.30.0...v5.30.1

v5.30.0

Full Changelog: sebhildebrandt/systeminformation@v5.29.1...v5.30.0

v5.29.1

Full Changelog: sebhildebrandt/systeminformation@v5.29.0...v5.29.1

v5.29.0

Full Changelog: sebhildebrandt/systeminformation@v5.28.10...v5.29.0

Changelog

Sourced from systeminformation's changelog.

Changelog

Major Changes - Version 5

New Functions

  • audio() detailed audio information
  • bluetoothDevices() detailed information detected bluetooth devices
  • dockerImages() detailed information docker images
  • dockerVolumes() detailed information docker volumes
  • printers() detailed printer information
  • usb() detailed USB information
  • wifiInterfaces() detected Wi-Fi interfaces
  • wifiConnections() active Wi-Fi connections

Breaking Changes

Be aware, that the new version 5.x is NOT fully backward compatible to version 4.x ...

We had to make several interface changes to keep systeminformation as consistent as possible. We highly recommend to go through the complete list and adapt your own code to be again compatible to the new version 5.

Function Old New (V5) Comments
unsupported values -1 null values which are unknown orunsupported on platform
battery() hasbatterycyclecountischargingdesignedcapacitymaxcapacityacconnectedtimeremaining hasBatterycycleCountisChargingdesignedCapacitymaxCapacityacConnectedtimeRemaining pascalCase conformity
blockDevices() fstype fsType pascalCase conformity
cpu() speedminspeedmax speedMinspeedMax pascalCase conformity
cpu().speedcpu().speedMincpu().speedMax string values now returningnumerical values better value handling
cpuCurrentspeed() cpuCurrentSpeed() function name changedpascalCase conformity
currentLoad() avgloadcurrentloadcurrentload_usercurrentload_systemcurrentload_nicecurrentload_idlecurrentload_irqraw_currentload avgLoadcurrentLoadcurrentLoadUsercurrentLoadSystemcurrentLoadNicecurrentLoadIdlecurrentLoadIrqrawCurrentLoad pascalCase conformity
dockerContainerStats() mem_usagemem_limitmem_percentcpu_percentcpu_statsprecpu_statsmemory_stats memUsagememLimitmemPercentcpuPercentcpuStatsprecpuStatsmemoryStats pascalCase conformity
dockerContainerProcesses() pid_host pidHost pascalCase conformity
graphics().display pixeldepthresolutionxresolutionysizexsizey pixelDepthresolutionXresolutionYsizeXsizeY pascalCase conformity
networkConnections() localaddresslocalportpeeraddresspeerport localAddresslocalPortpeerAddresspeerPort pascalCase conformity
networkInterfaces() carrier_changes carrierChanges pascalCase conformity
processes() mem_vszmem_rsspcpupcpuupcpuspmem memVszmemRsscpucpuucpusmem pascalCase conformityrenamed attributes
processLoad() result as object result as array of objects function now allows to provide more thanone process (as a comma separated list)
services() pcpupmem cpumem renamed attributes
vbox() HPETPAEAPICX2APICACPIIOAPICbiosAPICmodeTRC hpetpaeapicx2ApicacpiioApicbiosApicModertc pascalCase conformity

Other Improvements and Changes

  • baseboard(): added memMax, memSlots
  • bios(): added language and features (linux)
  • blockDevices() added raid group member (linux)
  • cpu(): extended AMD processor list

... (truncated)

Commits
  • 612d97e 5.30.8
  • 22242aa wifiNetworks() fixed CWE-78 command injection issue (linux)
  • 41c7ea4 5.30.7
  • f4ff1d9 networkInterfaces() fixed getWindowsIEEE8021x issue (windows)
  • ea02021 5.30.6
  • 53cca2f graphics() improved nvidia-smi detection (windows)
  • 5231c64 fix nvidia-smi folder search (windows)
  • 42bc5a7 5.30.5
  • 505d327 networkInterfaces() fix uppercase iface names (linux)
  • 06e47be 5.30.4
  • Additional commits viewable in compare view

Updates next from 14.2.13 to 15.5.10

Release notes

Sourced from next's releases.

v15.5.10

Please refer the following changelogs for more information about this security release:

v15.4.11

Please see this changelog for more information about this security patch.

v15.3.9

Please see this changelog for more information about this security patch.

v15.2.9

Please see this changelog for more information about this security patch.

v15.1.12

Please see this changelog for more information about this security patch.

v15.0.8

Please see this changelog for more information about this security patch.

Commits

Updates @anthropic-ai/claude-code from 1.0.128 to 2.1.47

Release notes

Sourced from @​anthropic-ai/claude-code's releases.

v2.1.47

What's changed

  • Fixed FileWriteTool line counting to preserve intentional trailing blank lines instead of stripping them with trimEnd().
  • Fixed Windows terminal rendering bugs caused by os.EOL (\r\n) in display code — line counts now show correct values instead of always showing 1 on Windows.
  • Improved VS Code plan preview: auto-updates as Claude iterates, enables commenting only when the plan is ready for review, and keeps the preview open when rejecting so Claude can revise.
  • Fixed a bug where bold and colored text in markdown output could shift to the wrong characters on Windows due to \r\n line endings.
  • anthropics/claude-code#26188
  • Improved memory usage in long-running sessions by releasing API stream buffers, agent context, and skill state after use
  • Improved startup performance by deferring SessionStart hook execution, reducing time-to-interactive by ~500ms.
  • Fixed an issue where bash tool output was silently discarded on Windows when using MSYS2 or Cygwin shells.
  • Improved performance of @ file mentions - file suggestions now appear faster by pre-warming the index on startup and using session-based caching with background refresh.
  • Improved memory usage by trimming agent task message history after tasks complete
  • Improved memory usage during long agent sessions by eliminating O(n²) message accumulation in progress updates
  • Fixed the bash permission classifier to validate that returned match descriptions correspond to actual input rules, preventing hallucinated descriptions from incorrectly granting permissions
  • anthropics/claude-code#26044
  • anthropics/claude-code#25834
  • Search patterns in collapsed tool results are now displayed in quotes for clarity
  • anthropics/claude-code#17600
  • Use ctrl+f to kill all background agents instead of double-pressing ESC. Background agents now continue running when you press ESC to cancel the main thread, giving you more control over agent lifecycle.
  • Fixed API 400 errors ("thinking blocks cannot be modified") that occurred in sessions with concurrent agents, caused by interleaved streaming content blocks preventing proper message merging.
  • Simplified teammate navigation to use only Shift+Down (with wrapping) instead of both Shift+Up and Shift+Down.
  • Fixed an issue where a single file write/edit error would abort all other parallel file write/edit operations. Independent file mutations now complete even when a sibling fails.
  • Added last_assistant_message field to Stop and SubagentStop hook inputs, providing the final assistant response text so hooks can access it without parsing transcript files.
  • Fixed custom session titles set via /renameanthropics/claude-code#23610
  • Fixed collapsed read/search hint text overflowing on narrow terminals by truncating from the start.
  • Fixed an issue where bash commands with backslash-newline continuation lines (e.g., long commands split across multiple lines with \) would produce spurious empty arguments, potentially breaking command execution.
  • Fixed built-in slash commands (/help, /model, /compactanthropics/claude-code#22020
  • Fixed MCP servers not appearing in the MCP Management Dialog after deferred loading
  • Fixed session name persisting in status bar after /clearanthropics/claude-code#26082
  • Fixed crash when a skill's name or description in SKILL.md frontmatter is a bare number (e.g., name: 3000anthropics/claude-code#25837
  • anthropics/claude-code#25721
  • Added chat:newlineanthropics/claude-code#26075
  • Added added_dirs to the statusline JSON workspace section, exposing directories added via /add-diranthropics/claude-code#26096
  • Fixed claude doctoranthropics/claude-code#26033
  • anthropics/claude-code#25990
  • anthropics/claude-code#26023
  • anthropics/claude-code#25935
  • anthropics/claude-code#26012
  • anthropics/claude-code#25957
  • anthropics/claude-code#26084
  • Fixed custom agent model field in .claude/agents/*.mdanthropics/claude-code#26064
  • anthropics/claude-code#26061
  • Fixed alwaysThinkingEnabled: trueanthropics/claude-code#26074
  • Fixed tool_decisionanthropics/claude-code#26059
  • anthropics/claude-code#26121
  • anthropics/claude-code#26123
  • anthropics/claude-code#26123
  • Fixed /resume <session-id>anthropics/claude-code#25920
  • anthropics/claude-code#25909

... (truncated)

Changelog

Sourced from @​anthropic-ai/claude-code's changelog.

2.1.47

  • Fixed FileWriteTool line counting to preserve intentional trailing blank lines instead of stripping them with trimEnd().
  • Fixed Windows terminal rendering bugs caused by os.EOL (\r\n) in display code — line counts now show correct values instead of always showing 1 on Windows.
  • Improved VS Code plan preview: auto-updates as Claude iterates, enables commenting only when the plan is ready for review, and keeps the preview open when rejecting so Claude can revise.
  • Fixed a bug where bold and colored text in markdown output could shift to the wrong characters on Windows due to \r\n line endings.
  • anthropics/claude-code#26188
  • Improved memory usage in long-running sessions by releasing API stream buffers, agent context, and skill state after use
  • Improved startup performance by deferring SessionStart hook execution, reducing time-to-interactive by ~500ms.
  • Fixed an issue where bash tool output was silently discarded on Windows when using MSYS2 or Cygwin shells.
  • Improved performance of @ file mentions - file suggestions now appear faster by pre-warming the index on startup and using session-based caching with background refresh.
  • Improved memory usage by trimming agent task message history after tasks complete
  • Improved memory usage during long agent sessions by eliminating O(n²) message accumulation in progress updates
  • Fixed the bash permission classifier to validate that returned match descriptions correspond to actual input rules, preventing hallucinated descriptions from incorrectly granting permissions
  • anthropics/claude-code#26044
  • anthropics/claude-code#25834
  • Search patterns in collapsed tool results are now displayed in quotes for clarity
  • anthropics/claude-code#17600
  • Use ctrl+f to kill all background agents instead of double-pressing ESC. Background agents now continue running when you press ESC to cancel the main thread, giving you more control over agent lifecycle.
  • Fixed API 400 errors ("thinking blocks cannot be modified") that occurred in sessions with concurrent agents, caused by interleaved streaming content blocks preventing proper message merging.
  • Simplified teammate navigation to use only Shift+Down (with wrapping) instead of both Shift+Up and Shift+Down.
  • Fixed an issue where a single file write/edit error would abort all other parallel file write/edit operations. Independent file mutations now complete even when a sibling fails.
  • Added last_assistant_message field to Stop and SubagentStop hook inputs, providing the final assistant response text so hooks can access it without parsing transcript files.
  • Fixed custom session titles set via /renameanthropics/claude-code#23610
  • Fixed collapsed read/search hint text overflowing on narrow terminals by truncating from the start.
  • Fixed an issue where bash commands with backslash-newline continuation lines (e.g., long commands split across multiple lines with \) would produce spurious empty arguments, potentially breaking command execution.
  • Fixed built-in slash commands (/help, /model, /compactanthropics/claude-code#22020
  • Fixed MCP servers not appearing in the MCP Management Dialog after deferred loading
  • Fixed session name persisting in status bar after /clearanthropics/claude-code#26082
  • Fixed crash when a skill's name or description in SKILL.md frontmatter is a bare number (e.g., name: 3000anthropics/claude-code#25837
  • anthropics/claude-code#25721
  • Added chat:newlineanthropics/claude-code#26075
  • Added added_dirs to the statusline JSON workspace section, exposing directories added via /add-diranthropics/claude-code#26096
  • Fixed claude doctoranthropics/claude-code#26033
  • anthropics/claude-code#25990
  • anthropics/claude-code#26023
  • anthropics/claude-code#25935
  • anthropics/claude-code#26012
  • anthropics/claude-code#25957
  • anthropics/claude-code#26084
  • Fixed custom agent model field in .claude/agents/*.mdanthropics/claude-code#26064
  • anthropics/claude-code#26061
  • Fixed alwaysThinkingEnabled: trueanthropics/claude-code#26074
  • Fixed tool_decisionanthropics/claude-code#26059
  • anthropics/claude-code#26121
  • anthropics/claude-code#26123
  • anthropics/claude-code#26123
  • Fixed /resume <session-id>anthropics/claude-code#25920
  • anthropics/claude-code#25909
  • Fixed React crash (error #31) when a skill's argument-hint in SKILL.md frontmatter uses YAML sequence syntax (e.g., [topic: foo | bar]anthropics/claude-code#25826

... (truncated)

Commits
Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates ai from 5.0.0 to 5.0.52

Commits

@dependabot
Bump the npm_and_yarn group across 9 directories with 10 updates
564dcc2 
Bumps the npm_and_yarn group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.17.23` |
| [ai](https://github.com/vercel/ai) | `5.0.0` | `5.0.52` |
| [diff](https://github.com/kpdecker/jsdiff) | `5.2.0` | `5.2.2` |
| [express](https://github.com/expressjs/express) | `4.19.2` | `4.22.0` |
| [axios](https://github.com/axios/axios) | `1.7.4` | `1.13.5` |
| [nanoid](https://github.com/ai/nanoid) | `5.0.7` | `5.0.9` |
| [systeminformation](https://github.com/sebhildebrandt/systeminformation) | `5.23.4` | `5.30.8` |
| [next](https://github.com/vercel/next.js) | `14.2.13` | `15.5.10` |
| [@anthropic-ai/claude-code](https://github.com/anthropics/claude-code) | `1.0.128` | `2.1.47` |

Bumps the npm_and_yarn group with 3 updates in the /backend directory: [ai](https://github.com/vercel/ai), [diff](https://github.com/kpdecker/jsdiff) and [express](https://github.com/expressjs/express).
Bumps the npm_and_yarn group with 1 update in the /common directory: [ai](https://github.com/vercel/ai).
Bumps the npm_and_yarn group with 1 update in the /evals directory: [@anthropic-ai/claude-code](https://github.com/anthropics/claude-code).
Bumps the npm_and_yarn group with 5 updates in the /npm-app directory:

| Package | From | To |
| --- | --- | --- |
| [ai](https://github.com/vercel/ai) | `5.0.0` | `5.0.52` |
| [diff](https://github.com/kpdecker/jsdiff) | `8.0.2` | `8.0.3` |
| [axios](https://github.com/axios/axios) | `1.7.4` | `1.13.5` |
| [nanoid](https://github.com/ai/nanoid) | `5.0.7` | `5.0.9` |
| [systeminformation](https://github.com/sebhildebrandt/systeminformation) | `5.23.4` | `5.30.8` |

Bumps the npm_and_yarn group with 1 update in the /npm-app/release directory: [tar](https://github.com/isaacs/node-tar).
Bumps the npm_and_yarn group with 1 update in the /npm-app/release-staging directory: [tar](https://github.com/isaacs/node-tar).
Bumps the npm_and_yarn group with 1 update in the /sdk directory: [diff](https://github.com/kpdecker/jsdiff).
Bumps the npm_and_yarn group with 1 update in the /web directory: [next](https://github.com/vercel/next.js).


Updates `lodash` from 4.17.21 to 4.17.23
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.21...4.17.23)

Updates `ai` from 5.0.0 to 5.0.52
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/compare/ai@5.0.0...ai@5.0.52)

Updates `diff` from 5.2.0 to 5.2.2
- [Changelog](https://github.com/kpdecker/jsdiff/blob/master/release-notes.md)
- [Commits](kpdecker/jsdiff@v5.2.0...v5.2.2)

Updates `express` from 4.19.2 to 4.22.0
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/4.22.0/History.md)
- [Commits](expressjs/express@4.19.2...4.22.0)

Updates `axios` from 1.7.4 to 1.13.5
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.7.4...v1.13.5)

Updates `nanoid` from 5.0.7 to 5.0.9
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](ai/nanoid@5.0.7...5.0.9)

Updates `systeminformation` from 5.23.4 to 5.30.8
- [Release notes](https://github.com/sebhildebrandt/systeminformation/releases)
- [Changelog](https://github.com/sebhildebrandt/systeminformation/blob/master/CHANGELOG.md)
- [Commits](sebhildebrandt/systeminformation@v5.23.4...v5.30.8)

Updates `next` from 14.2.13 to 15.5.10
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v14.2.13...v15.5.10)

Updates `@anthropic-ai/claude-code` from 1.0.128 to 2.1.47
- [Release notes](https://github.com/anthropics/claude-code/releases)
- [Changelog](https://github.com/anthropics/claude-code/blob/main/CHANGELOG.md)
- [Commits](https://github.com/anthropics/claude-code/commits/v2.1.47)

Updates `ai` from 5.0.0 to 5.0.52
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/compare/ai@5.0.0...ai@5.0.52)

Updates `diff` from 5.2.0 to 5.2.2
- [Changelog](https://github.com/kpdecker/jsdiff/blob/master/release-notes.md)
- [Commits](kpdecker/jsdiff@v5.2.0...v5.2.2)

Updates `express` from 4.19.2 to 4.22.0
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/4.22.0/History.md)
- [Commits](expressjs/express@4.19.2...4.22.0)

Updates `ai` from 5.0.0 to 5.0.52
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/compare/ai@5.0.0...ai@5.0.52)

Updates `@anthropic-ai/claude-code` from 1.0.128 to 2.1.47
- [Release notes](https://github.com/anthropics/claude-code/releases)
- [Changelog](https://github.com/anthropics/claude-code/blob/main/CHANGELOG.md)
- [Commits](https://github.com/anthropics/claude-code/commits/v2.1.47)

Updates `ai` from 5.0.0 to 5.0.52
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/compare/ai@5.0.0...ai@5.0.52)

Updates `diff` from 8.0.2 to 8.0.3
- [Changelog](https://github.com/kpdecker/jsdiff/blob/master/release-notes.md)
- [Commits](kpdecker/jsdiff@v5.2.0...v5.2.2)

Updates `axios` from 1.7.4 to 1.13.5
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.7.4...v1.13.5)

Updates `nanoid` from 5.0.7 to 5.0.9
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](ai/nanoid@5.0.7...5.0.9)

Updates `systeminformation` from 5.23.4 to 5.30.8
- [Release notes](https://github.com/sebhildebrandt/systeminformation/releases)
- [Changelog](https://github.com/sebhildebrandt/systeminformation/blob/master/CHANGELOG.md)
- [Commits](sebhildebrandt/systeminformation@v5.23.4...v5.30.8)

Updates `tar` from 6.2.1 to 7.5.9
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v6.2.1...v7.5.9)

Updates `tar` from 6.2.1 to 7.5.9
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v6.2.1...v7.5.9)

Updates `diff` from 8.0.2 to 8.0.3
- [Changelog](https://github.com/kpdecker/jsdiff/blob/master/release-notes.md)
- [Commits](kpdecker/jsdiff@v5.2.0...v5.2.2)

Updates `next` from 14.2.13 to 15.5.10
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v14.2.13...v15.5.10)

---
updated-dependencies:
- dependency-name: lodash
  dependency-version: 4.17.23
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: ai
  dependency-version: 5.0.52
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: diff
  dependency-version: 5.2.2
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: express
  dependency-version: 4.22.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: axios
  dependency-version: 1.13.5
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: nanoid
  dependency-version: 5.0.9
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: systeminformation
  dependency-version: 5.30.8
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 15.5.10
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@anthropic-ai/claude-code"
  dependency-version: 2.1.47
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: ai
  dependency-version: 5.0.52
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: diff
  dependency-version: 5.2.2
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: express
  dependency-version: 4.22.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: ai
  dependency-version: 5.0.52
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@anthropic-ai/claude-code"
  dependency-version: 2.1.47
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: ai
  dependency-version: 5.0.52
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: diff
  dependency-version: 8.0.3
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: axios
  dependency-version: 1.13.5
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: nanoid
  dependency-version: 5.0.9
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: systeminformation
  dependency-version: 5.30.8
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: tar
  dependency-version: 7.5.9
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: tar
  dependency-version: 7.5.9
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: diff
  dependency-version: 8.0.3
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 15.5.10
  dependency-type: direct:production
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Feb 19, 2026
@dependabot dependabot bot mentioned this pull request Feb 19, 2026
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants