chore(deps)(deps): bump the production-dependencies group across 1 directory with 11 updates by dependabot[bot] · Pull Request #446 · boringstack-xyz/boringstack

dependabot · 2026-09-11T07:48:30Z

Bumps the production-dependencies group with 11 updates in the /apps/api directory:

Package	From	To
@anthropic-ai/sdk	`0.122.0`	`0.123.0`
@opentelemetry/auto-instrumentations-node	`0.79.0`	`0.80.0`
@opentelemetry/exporter-trace-otlp-http	`0.221.0`	`0.222.0`
@opentelemetry/resources	`2.10.0`	`2.11.0`
@opentelemetry/sdk-node	`0.221.0`	`0.222.0`
@sentry/bun	`10.72.0`	`10.73.0`
nodemailer	`9.1.1`	`10.0.0`
openai	`7.8.0`	`7.10.0`
otpauth	`9.5.1`	`9.5.2`
resend	`6.25.0`	`6.26.0`
stripe	`22.6.0`	`22.6.1`

Updates @anthropic-ai/sdk from 0.122.0 to 0.123.0

Release notes

Sourced from @anthropic-ai/sdk's releases.

sdk: v0.123.0

0.123.0 (2026-09-01)

Full Changelog: sdk-v0.122.0...sdk-v0.123.0

Features

api: beta user profiles: add external_user_onboarded_at, remove relationship in favor of access_type (3efb1a1)

api: manual updates (c6f0bda)

api: organization compliance settings, user-profile order_by, memory-store and toolset schema updates (8e2f0c2)

Bug Fixes

keep credential file access out of non-Node bundles (ab6a4b2)

Chores

internal: codegen related update (788ea8b)

Documentation

changelog: detail the beta files/skills GA-shape change (#1175) (4951de0)

Changelog

Sourced from @anthropic-ai/sdk's changelog.

0.123.0 (2026-09-01)

Full Changelog: sdk-v0.122.0...sdk-v0.123.0

Features

api: beta user profiles: add external_user_onboarded_at, remove relationship in favor of access_type (3efb1a1)

api: manual updates (c6f0bda)

api: organization compliance settings, user-profile order_by, memory-store and toolset schema updates (8e2f0c2)

Bug Fixes

keep credential file access out of non-Node bundles (ab6a4b2)

Chores

internal: codegen related update (788ea8b)

Documentation

changelog: detail the beta files/skills GA-shape change (#1175) (4951de0)

Commits

4140e0e chore: release main (#1172)
4951de0 docs(changelog): detail the beta files/skills GA-shape change (#1175)
See full diff in compare view

Updates @opentelemetry/auto-instrumentations-node from 0.79.0 to 0.80.0

Release notes

Sourced from @opentelemetry/auto-instrumentations-node's releases.

auto-instrumentations-node: v0.80.0

0.80.0 (2026-08-31)

Features

deps: update deps matching '@opentelemetry/*' (#3716) (015582a)

Dependencies

The following workspace dependencies were updated

dependencies

@opentelemetry/instrumentation-amqplib bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-aws-lambda bumped from ^0.73.0 to ^0.74.0

@opentelemetry/instrumentation-aws-sdk bumped from ^0.76.0 to ^0.77.0

@opentelemetry/instrumentation-bunyan bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-cassandra-driver bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-connect bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-cucumber bumped from ^0.37.0 to ^0.38.0

@opentelemetry/instrumentation-dataloader bumped from ^0.38.0 to ^0.39.0

@opentelemetry/instrumentation-dns bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-express bumped from ^0.69.0 to ^0.70.0

@opentelemetry/instrumentation-fs bumped from ^0.40.0 to ^0.41.0

@opentelemetry/instrumentation-generic-pool bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-graphql bumped from ^0.69.0 to ^0.70.0

@opentelemetry/instrumentation-hapi bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-host-metrics bumped from ^0.4.0 to ^0.5.0

@opentelemetry/instrumentation-ioredis bumped from ^0.69.0 to ^0.70.0

@opentelemetry/instrumentation-kafkajs bumped from ^0.30.0 to ^0.31.0

@opentelemetry/instrumentation-knex bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-koa bumped from ^0.69.0 to ^0.70.0

@opentelemetry/instrumentation-lru-memoizer bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-memcached bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-mongodb bumped from ^0.74.0 to ^0.75.0

@opentelemetry/instrumentation-mongoose bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-mysql bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-mysql2 bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-nestjs-core bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-net bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-openai bumped from ^0.19.0 to ^0.20.0

@opentelemetry/instrumentation-oracledb bumped from ^0.46.0 to ^0.47.0

@opentelemetry/instrumentation-pg bumped from ^0.73.0 to ^0.74.0

@opentelemetry/instrumentation-pino bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-redis bumped from ^0.69.0 to ^0.70.0

@opentelemetry/instrumentation-restify bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-router bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-runtime-node bumped from ^0.34.0 to ^0.35.0

@opentelemetry/instrumentation-socket.io bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-tedious bumped from ^0.40.0 to ^0.41.0

... (truncated)

Changelog

Sourced from @opentelemetry/auto-instrumentations-node's changelog.

0.80.0 (2026-08-31)

Features

deps: update deps matching '@opentelemetry/*' (#3716) (015582a)

Dependencies

The following workspace dependencies were updated

dependencies

@opentelemetry/instrumentation-amqplib bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-aws-lambda bumped from ^0.73.0 to ^0.74.0

@opentelemetry/instrumentation-aws-sdk bumped from ^0.76.0 to ^0.77.0

@opentelemetry/instrumentation-bunyan bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-cassandra-driver bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-connect bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-cucumber bumped from ^0.37.0 to ^0.38.0

@opentelemetry/instrumentation-dataloader bumped from ^0.38.0 to ^0.39.0

@opentelemetry/instrumentation-dns bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-express bumped from ^0.69.0 to ^0.70.0

@opentelemetry/instrumentation-fs bumped from ^0.40.0 to ^0.41.0

@opentelemetry/instrumentation-generic-pool bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-graphql bumped from ^0.69.0 to ^0.70.0

@opentelemetry/instrumentation-hapi bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-host-metrics bumped from ^0.4.0 to ^0.5.0

@opentelemetry/instrumentation-ioredis bumped from ^0.69.0 to ^0.70.0

@opentelemetry/instrumentation-kafkajs bumped from ^0.30.0 to ^0.31.0

@opentelemetry/instrumentation-knex bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-koa bumped from ^0.69.0 to ^0.70.0

@opentelemetry/instrumentation-lru-memoizer bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-memcached bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-mongodb bumped from ^0.74.0 to ^0.75.0

@opentelemetry/instrumentation-mongoose bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-mysql bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-mysql2 bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-nestjs-core bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-net bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-openai bumped from ^0.19.0 to ^0.20.0

@opentelemetry/instrumentation-oracledb bumped from ^0.46.0 to ^0.47.0

@opentelemetry/instrumentation-pg bumped from ^0.73.0 to ^0.74.0

@opentelemetry/instrumentation-pino bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-redis bumped from ^0.69.0 to ^0.70.0

@opentelemetry/instrumentation-restify bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-router bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-runtime-node bumped from ^0.34.0 to ^0.35.0

@opentelemetry/instrumentation-socket.io bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-tedious bumped from ^0.40.0 to ^0.41.0

@opentelemetry/instrumentation-undici bumped from ^0.31.0 to ^0.32.0

... (truncated)

Commits

932fc96 chore: release main (#3638)
015582a feat(deps): update deps matching '@opentelemetry/*' (#3716)
See full diff in compare view

Updates @opentelemetry/exporter-trace-otlp-http from 0.221.0 to 0.222.0

Release notes

Sourced from @opentelemetry/exporter-trace-otlp-http's releases.

experimental/v0.222.0

0.222.0

💥 Breaking Changes
fix(sdk-node)!: fail-fast on Propagator creation from config file #6930 @trentm

fix(sdk-node)!: fail-fast on MeterProvider creation from config file #6954 @trentm

fix(sdk-node)!: fail-fast on TracerProvider creation from config file #6962 @trentm
fix(sdk-node)!: fail-fast on Resource creation from config file #6989 @trentm
This also breaks some usage of startNodeSDK() for environment-based config, i.e. when not using a config file. For example with OTEL_NODE_RESOURCE_DETECTORS=all, it results in an error message and a no-op SDK. (This does not impact users of new NodeSDK() -- the currently recommended mechanism to start an SDK using this package.)
Could not create OpenTelemetry SDK from configuration, SDK will not be setup: unknown ExperimentalResourceDetector name in configuration: "container"
🚀 Features

feat(sdk-logs): deprecate SdkLogRecord in favor of ReadWriteLogRecord #6939 @pichlermarc

🐛 Bug Fixes

fix(instrumentation-http): redact sensitive query parameters on incoming (server) spans; add redactedQueryParamsServer config option @dyladan

fix(sdk-node): support headers_list when creating OTLP exporters from declarative configuration #6953 @JacksonWeber

📚 Documentation

docs(sdk-logs): mark logger configuration as experimental #6996 @LarryHu0217

docs(configuration): document the ConfigModel suffix naming convention for exported types #6612 @vedantchalke36

🏠 Internal

refactor(sampler-jaeger-remote): remove axios dependency and use fetch to get the sampler configuration from Jaeger API #6963 @david-luna

Commits

0b72a81 chore: prepare next release (#7044)
a9c5338 ci: roll prerelease changelog into one final release changelog (#7045)
f41805e chore: prepare next release (#7042)
b85eb28 chore(instrumentation-http): fix lint errors (#7039)
3f92530 ci: support pre-releases and major version bumps in release workflow (#7035)
82a5831 docs(otlp-exporter-base): document HTTP exporter options (#6735)
e086dec Merge commit from fork
59dac70 chore(deps): update jamesives/github-pages-deploy-action action to v4.9.0 (#7...
d0ce753 chore: add @maryliag to maintainers (#7024)
03469a1 chore(deps): update open-telemetry/shared-workflows action to v0.10.0 (#7032)
Additional commits viewable in compare view

Updates @opentelemetry/resources from 2.10.0 to 2.11.0

Release notes

Sourced from @opentelemetry/resources's releases.

v2.11.0

2.11.0

🚀 Features

feat(context-async-hooks): implement attach() on AsyncLocalStorageContextManager #6845 @pichlermarc

On Node.js 25.9+, delegates to AsyncLocalStorage.withScope() returning a native RunScope. On older Node.js, falls back to enterWith() with a manual disposable wrapper.

feat(sdk-trace): allow configuring the force flush timeout per call #6929 @LarryHu0217

🐛 Bug Fixes

fix(sdk-metrics): ignore Infinity in exponential histograms #7015 @mwear

🏠 Internal

perf(sdk-metrics): reuse a single DataView for exponential histogram bit reads #6998 @mwear

chore(ci): run documentation tests on a weekly schedule #6920 @LarryHu0217

feat(ci): support pre-releases and major version bumps in the release workflow #6768 @pichlermarc

chore(resources): Ensure that multiple uses of serviceInstanceIdDetector.detect() return the same value for service.instance.id

Changelog

Sourced from @opentelemetry/resources's changelog.

2.11.0

🚀 Features

feat(context-async-hooks): implement attach() on AsyncLocalStorageContextManager #6845 @pichlermarc

On Node.js 25.9+, delegates to AsyncLocalStorage.withScope() returning a native RunScope. On older Node.js, falls back to enterWith() with a manual disposable wrapper.

feat(sdk-trace): allow configuring the force flush timeout per call #6929 @LarryHu0217

🐛 Bug Fixes

fix(sdk-trace-base): avoid a Webpack self-reference error in CommonJS output #6981 @sansynx

fix(sdk-metrics): ignore Infinity in exponential histograms #7015 @mwear

🏠 Internal

perf(sdk-metrics): reuse a single DataView for exponential histogram bit reads #6998 @mwear

chore(ci): run documentation tests on a weekly schedule #6920 @LarryHu0217

feat(ci): support pre-releases and major version bumps in the release workflow #6768 @pichlermarc

chore(resources): Ensure that multiple uses of serviceInstanceIdDetector.detect() return the same value for service.instance.id

Commits

0b72a81 chore: prepare next release (#7044)
a9c5338 ci: roll prerelease changelog into one final release changelog (#7045)
f41805e chore: prepare next release (#7042)
b85eb28 chore(instrumentation-http): fix lint errors (#7039)
3f92530 ci: support pre-releases and major version bumps in release workflow (#7035)
82a5831 docs(otlp-exporter-base): document HTTP exporter options (#6735)
e086dec Merge commit from fork
59dac70 chore(deps): update jamesives/github-pages-deploy-action action to v4.9.0 (#7...
d0ce753 chore: add @maryliag to maintainers (#7024)
03469a1 chore(deps): update open-telemetry/shared-workflows action to v0.10.0 (#7032)
Additional commits viewable in compare view

Updates @opentelemetry/sdk-node from 0.221.0 to 0.222.0

Release notes

Sourced from @opentelemetry/sdk-node's releases.

experimental/v0.222.0

0.222.0

💥 Breaking Changes
fix(sdk-node)!: fail-fast on Propagator creation from config file #6930 @trentm

fix(sdk-node)!: fail-fast on MeterProvider creation from config file #6954 @trentm

fix(sdk-node)!: fail-fast on TracerProvider creation from config file #6962 @trentm
fix(sdk-node)!: fail-fast on Resource creation from config file #6989 @trentm
This also breaks some usage of startNodeSDK() for environment-based config, i.e. when not using a config file. For example with OTEL_NODE_RESOURCE_DETECTORS=all, it results in an error message and a no-op SDK. (This does not impact users of new NodeSDK() -- the currently recommended mechanism to start an SDK using this package.)
Could not create OpenTelemetry SDK from configuration, SDK will not be setup: unknown ExperimentalResourceDetector name in configuration: "container"
🚀 Features

feat(sdk-logs): deprecate SdkLogRecord in favor of ReadWriteLogRecord #6939 @pichlermarc

🐛 Bug Fixes

fix(instrumentation-http): redact sensitive query parameters on incoming (server) spans; add redactedQueryParamsServer config option @dyladan

fix(sdk-node): support headers_list when creating OTLP exporters from declarative configuration #6953 @JacksonWeber

📚 Documentation

docs(sdk-logs): mark logger configuration as experimental #6996 @LarryHu0217

docs(configuration): document the ConfigModel suffix naming convention for exported types #6612 @vedantchalke36

🏠 Internal

refactor(sampler-jaeger-remote): remove axios dependency and use fetch to get the sampler configuration from Jaeger API #6963 @david-luna

Commits

0b72a81 chore: prepare next release (#7044)
a9c5338 ci: roll prerelease changelog into one final release changelog (#7045)
f41805e chore: prepare next release (#7042)
b85eb28 chore(instrumentation-http): fix lint errors (#7039)
3f92530 ci: support pre-releases and major version bumps in release workflow (#7035)
82a5831 docs(otlp-exporter-base): document HTTP exporter options (#6735)
e086dec Merge commit from fork
59dac70 chore(deps): update jamesives/github-pages-deploy-action action to v4.9.0 (#7...
d0ce753 chore: add @maryliag to maintainers (#7024)
03469a1 chore(deps): update open-telemetry/shared-workflows action to v0.10.0 (#7032)
Additional commits viewable in compare view

Updates @sentry/bun from 10.72.0 to 10.73.0

Release notes

Sourced from @sentry/bun's releases.

10.73.0

Important Changes
feat(v10/nextjs): Add @sentry/nextjs/config entry point (#23766)

withSentryConfig is now available from @sentry/nextjs/config, the path it moves to in v11. Importing it from @sentry/nextjs still works on v10 but logs a warning once, so you can change your next.config file today and upgrade to v11 without touching it again.
// next.config.mjs
- import { withSentryConfig } from '@sentry/nextjs';
+ import { withSentryConfig } from '@sentry/nextjs/config';
Other Changes

feat(v10/node): Deprecate shouldHandleError on setupExpressErrorHandler and setupFasitfyErrorHandler (#23734)

fix(v10/cloudflare): Instrument Durable Object handlers installed as read-only properties (#23769)

test(v10/nextjs): Drop nextjs-16-cf-workers canary variant (#23775)

Bundle size 📦

Path Size

@sentry/browser 27.1 KB

@sentry/browser - with treeshaking flags 25.58 KB

@sentry/browser (incl. Tracing) 45.54 KB

@sentry/browser (incl. Tracing + Span Streaming) 47.28 KB

@sentry/browser (incl. Tracing, Profiling) 50.17 KB

@sentry/browser (incl. Tracing, Replay) 83.87 KB

@sentry/browser (incl. Tracing, Replay) - with treeshaking flags 73.74 KB

@sentry/browser (incl. Tracing, Replay with Canvas) 88.49 KB

@sentry/browser (incl. Tracing, Replay, Feedback) 100.83 KB

@sentry/browser (incl. Feedback) 43.87 KB

@sentry/browser (incl. sendFeedback) 31.78 KB

@sentry/browser (incl. FeedbackAsync) 36.79 KB

@sentry/browser (incl. Metrics) 28.16 KB

@sentry/browser (incl. Logs) 28.38 KB

@sentry/browser (incl. Metrics & Logs) 29.06 KB

@sentry/react 28.86 KB

@sentry/react (incl. Tracing) 47.74 KB

@sentry/vue 32.4 KB

@sentry/vue (incl. Tracing) 47.46 KB

@sentry/svelte 27.12 KB

CDN Bundle 29.43 KB

... (truncated)

Changelog

Sourced from @sentry/bun's changelog.

10.73.0

Important Changes
feat(v10/nextjs): Add @sentry/nextjs/config entry point (#23766)

withSentryConfig is now available from @sentry/nextjs/config, the path it moves to in v11. Importing it from @sentry/nextjs still works on v10 but logs a warning once, so you can change your next.config file today and upgrade to v11 without touching it again.
// next.config.mjs
- import { withSentryConfig } from '@sentry/nextjs';
+ import { withSentryConfig } from '@sentry/nextjs/config';
Other Changes

feat(v10/node): Deprecate shouldHandleError on setupExpressErrorHandler and setupFasitfyErrorHandler (#23734)

fix(v10/cloudflare): Instrument Durable Object handlers installed as read-only properties (#23769)

test(v10/nextjs): Drop nextjs-16-cf-workers canary variant (#23775)

Commits

f109d92 release: 10.73.0
1a3e04e meta(changelog): Update changelog for 10.73.0 (#23778)
da8d769 test(v10/nextjs): Drop nextjs-16-cf-workers canary variant (#23775)
bea4d38 feat(v10/node): Deprecate shouldHandleError on setupExpressErrorHandler a...
605caaf feat(v10/nextjs): Add @sentry/nextjs/config entry point (#23766)
da17307 fix(v10/cloudflare): Instrument Durable Object handlers installed as read-onl...
2c4ca38 Merge branch 'release/10.72.0' into v10
See full diff in compare view

Updates nodemailer from 9.1.1 to 10.0.0

Release notes

Sourced from nodemailer's releases.

v10.0.0

10.0.0 (2026-09-03)

⚠ BREAKING CHANGES

Node.js 20 or newer is required. The Node.js 6 syntax compatibility check and the .npmignore file are gone.

Features

keep the @types/nodemailer type layout working (1cc5356)

migrate to TypeScript with ES module and CommonJS builds (f7cbf83)

Bug Fixes

apply the other keys of a configuration object next to its url (29610f9)

dkim: canonicalize raw messages the way verifiers do (2c84b11)

keep a transporter assignable to the plain Transporter type (8bf55fb)

shared: keep a colon in the user name of a connection or proxy url (6acf4b6)

shared: refuse URL hosts the legacy parser would truncate (17a5068)

shared: resolve hostnames when the runtime has no interface table (8b03240)

smtp-connection: clear the timers of a connection dropped before the greeting (01dcaa0)

smtp-connection: keep an incomplete server reply out of lastServerResponse (1a6e427)

smtp-pool: free the pool slot when the proxy socket can not be opened (204a344)

well-known: keep nodemailer/lib/well-known/services.json available (367730c)

Changelog

Sourced from nodemailer's changelog.

10.0.0 (2026-09-03)

⚠ BREAKING CHANGES

Node.js 20 or newer is required. The Node.js 6 syntax compatibility check and the .npmignore file are gone.

Features

keep the @types/nodemailer type layout working (1cc5356)

migrate to TypeScript with ES module and CommonJS builds (f7cbf83)

Bug Fixes

apply the other keys of a configuration object next to its url (29610f9)

dkim: canonicalize raw messages the way verifiers do (2c84b11)

keep a transporter assignable to the plain Transporter type (8bf55fb)

shared: keep a colon in the user name of a connection or proxy url (6acf4b6)

shared: refuse URL hosts the legacy parser would truncate (17a5068)

shared: resolve hostnames when the runtime has no interface table (8b03240)

smtp-connection: clear the timers of a connection dropped before the greeting (01dcaa0)

smtp-connection: keep an incomplete server reply out of lastServerResponse (1a6e427)

smtp-pool: free the pool slot when the proxy socket can not be opened (204a344)

well-known: keep nodemailer/lib/well-known/services.json available (367730c)

Commits

2ee030c chore(master): release 10.0.0 (#1852)
8bf55fb fix: keep a transporter assignable to the plain Transporter type
62202a8 docs: mark 10.x as the supported security line
d9316d1 refactor(punycode): write the RFC 3490 separators as escape sequences
d1d3fb5 test(dkim): cover the signing failure path
1a6e427 fix(smtp-connection): keep an incomplete server reply out of lastServerResponse
70b2197 test(dkim): skip the mailauth verification where mailauth does not load
7c1ca6d test: cover the mailer, the transports and the utility modules
29610f9 fix: apply the other keys of a configuration object next to its url
6acf4b6 fix(shared): keep a colon in the user name of a connection or proxy url
Additional commits viewable in compare view

Updates openai from 7.8.0 to 7.10.0

Release notes

Sourced from openai's releases.

v7.10.0

7.10.0 (2026-09-03)

Features

api: add gpt-6-astra and related features (#2582) (94ecdc4)

Documentation

add canonical SDK security model (#2566) (e6a7468)

v7.9.0

7.9.0 (2026-09-02)

Features

api: update usage APIs and documentation (#2565) (4908505)

Bug Fixes

api: prevent Responses WebSockets from following redirects (#2513) (0a4fb1b)

load CommonJS under browser export conditions (#2507) (222f3d7)

restore monthly Node version review (#2553) (15dc890)

support Jest 28 CommonJS package imports (#2511) (eea2292)

Chores

deps-dev: bump browserslist to 4.28.7 across ecosystem tests (#2554) (a408e0b)

raise custom-code budget to 4,000 lines (#2562) (82c5b2d)

Changelog

Sourced from openai's changelog.

7.10.0 (2026-09-03)

Features

api: add gpt-6-astra and related features (#2582) (94ecdc4)

Documentation

add canonical SDK security model (#2566) (e6a7468)

7.9.0 (2026-09-02)

Features

api: update usage APIs and documentation (#2565) (4908505)

Bug Fixes

api: prevent Responses WebSockets from following redirects (#2513) (0a4fb1b)

load CommonJS under browser export conditions (#2507) (222f3d7)

restore monthly Node version review (#2553) (15dc890)

support Jest 28 CommonJS package imports (#2511) (eea2292)

Chores

deps-dev: bump browserslist to 4.28.7 across ecosystem tests (#2554) (a408e0b)

raise custom-code budget to 4,000 lines (#2562) (82c5b2d)

Commits

c22b09b release: 7.10.0 (#2575)
94ecdc4 feat(api): add gpt-6-astra and related features (#2582)
e6a7468 docs: add canonical SDK security model (#2566)
3cf755e release: 7.9.0 (#2510)
4908505 feat(api): update usage APIs and documentation (#2565)
82c5b2d chore: raise custom-code budget to 4,000 lines (#2562)
a408e0b chore(deps-dev): bump browserslist to 4.28.7 across ecosystem tests (#2554)
15dc890 fix: restore monthly Node version review (#2553)
eea2292 fix: support Jest 28 CommonJS package imports (#2511)
0a4fb1b fix(api): prevent Responses WebSockets from following redirects (#2513)
Additional commits viewable in compare view

Updates otpauth from 9.5.1 to 9.5.2

Release notes

Sourced from otpauth's releases.

v9.5.2

What's Changed

Bump the github-actions-all group across 1 directory with 7 updates by @dependabot[bot] in hectorm/otpauth#711

Full Changelog: hectorm/otpauth@v9.5.1...v9.5.2

Commits

5a0cb60 9.5.2
94f1fcc Update QuickJS version to 2026-06-04
fac0c5c Update hectorm/ghaction-setup-quickjs
88bdce0 Harden and align hex/base32 secret decoding
c431143 Bump the github-actions-all group across 1 directory with 7 updates (#711)
b6e3a62 Update dependencies
See full diff in compare view

Updates resend from 6.25.0 to 6.26.0

Release notes

Sourced from resend's releases.

v6.26.0

What's Changed

feat(webhooks): add events.replay() by @gabrielmfern in resend/resend-node#1087

Full Changelog: resend/resend-node@v6.25.0...v6.26.0

Commits

c61ccca feat(webhooks): add events.replay() (#1087)
See full diff in compare view

Updates stripe from 22.6.0 to 22.6.1

Release notes

Sourced from stripe's releases.

v22.6.1

#2831 Use cryptographically secure boundaries for multipart file uploads

#2836 update OtherString docstring

#2835 Fix request coercion for GET and DELETE parameters

Fixes serialization of schema-coerced values, including Decimal, in GET and DELETE query parameters.

#2829 Harden API requestor code against malicious URLs

See the changelog for more details.

Changelog

Sourced from stripe's changelog.

22.6.1 - 2026-09-01

#2831 Use cryptographically secure boundaries for multipart file uploads

#2836 update OtherString docstring

#2835 Fix request coercion for GET and DELETE parameters

Fixes serialization of schema-coerced values, including Decimal, in GET and DELETE query param...
Description has been truncated

…rectory with 11 updates Bumps the production-dependencies group with 11 updates in the /apps/api directory: | Package | From | To | | --- | --- | --- | | [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.122.0` | `0.123.0` | | [@opentelemetry/auto-instrumentations-node](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/auto-instrumentations-node) | `0.79.0` | `0.80.0` | | [@opentelemetry/exporter-trace-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.221.0` | `0.222.0` | | [@opentelemetry/resources](https://github.com/open-telemetry/opentelemetry-js) | `2.10.0` | `2.11.0` | | [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.221.0` | `0.222.0` | | [@sentry/bun](https://github.com/getsentry/sentry-javascript) | `10.72.0` | `10.73.0` | | [nodemailer](https://github.com/nodemailer/nodemailer) | `9.1.1` | `10.0.0` | | [openai](https://github.com/openai/openai-node) | `7.8.0` | `7.10.0` | | [otpauth](https://github.com/hectorm/otpauth) | `9.5.1` | `9.5.2` | | [resend](https://github.com/resend/resend-node) | `6.25.0` | `6.26.0` | | [stripe](https://github.com/stripe/stripe-node) | `22.6.0` | `22.6.1` | Updates `@anthropic-ai/sdk` from 0.122.0 to 0.123.0 - [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases) - [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md) - [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.122.0...sdk-v0.123.0) Updates `@opentelemetry/auto-instrumentations-node` from 0.79.0 to 0.80.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/auto-instrumentations-node/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/auto-instrumentations-node-v0.80.0/packages/auto-instrumentations-node) Updates `@opentelemetry/exporter-trace-otlp-http` from 0.221.0 to 0.222.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.221.0...experimental/v0.222.0) Updates `@opentelemetry/resources` from 2.10.0 to 2.11.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.10.0...v2.11.0) Updates `@opentelemetry/sdk-node` from 0.221.0 to 0.222.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.221.0...experimental/v0.222.0) Updates `@sentry/bun` from 10.72.0 to 10.73.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.73.0/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@10.72.0...10.73.0) Updates `nodemailer` from 9.1.1 to 10.0.0 - [Release notes](https://github.com/nodemailer/nodemailer/releases) - [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md) - [Commits](nodemailer/nodemailer@v9.1.1...v10.0.0) Updates `openai` from 7.8.0 to 7.10.0 - [Release notes](https://github.com/openai/openai-node/releases) - [Changelog](https://github.com/openai/openai-node/blob/main/CHANGELOG.md) - [Commits](openai/openai-node@v7.8.0...v7.10.0) Updates `otpauth` from 9.5.1 to 9.5.2 - [Release notes](https://github.com/hectorm/otpauth/releases) - [Commits](hectorm/otpauth@v9.5.1...v9.5.2) Updates `resend` from 6.25.0 to 6.26.0 - [Release notes](https://github.com/resend/resend-node/releases) - [Changelog](https://github.com/resend/resend-node/blob/canary/CHANGELOG.md) - [Commits](resend/resend-node@v6.25.0...v6.26.0) Updates `stripe` from 22.6.0 to 22.6.1 - [Release notes](https://github.com/stripe/stripe-node/releases) - [Changelog](https://github.com/stripe/stripe-node/blob/master/CHANGELOG.md) - [Commits](stripe/stripe-node@v22.6.0...v22.6.1) --- updated-dependencies: - dependency-name: "@anthropic-ai/sdk" dependency-version: 0.123.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/auto-instrumentations-node" dependency-version: 0.80.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/exporter-trace-otlp-http" dependency-version: 0.222.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/resources" dependency-version: 2.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/sdk-node" dependency-version: 0.222.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@sentry/bun" dependency-version: 10.73.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: nodemailer dependency-version: 10.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: openai dependency-version: 7.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: otpauth dependency-version: 9.5.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: resend dependency-version: 6.26.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: stripe dependency-version: 22.6.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-09-11T08:19:36Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 11, 2026

dependabot Bot requested a review from agjs as a code owner September 11, 2026 07:48

dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 11, 2026

agjs mentioned this pull request Sep 11, 2026

chore(deps): consolidate eligible runtime, API, UI and docs updates #448

Merged

8 tasks done

agjs closed this Sep 11, 2026

dependabot Bot deleted the dependabot/bun/apps/api/production-dependencies-97ffdd6703 branch September 11, 2026 08:19

Navigation Menu

Repository navigation

chore(deps)(deps): bump the production-dependencies group across 1 directory with 11 updates - #446

chore(deps)(deps): bump the production-dependencies group across 1 directory with 11 updates#446
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/apps/api/production-dependencies-97ffdd6703

dependabot Bot commented on behalf of github Sep 11, 2026

Uh oh!

dependabot Bot commented on behalf of github Sep 11, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Path	Size
`@sentry/browser`	27.1 KB
`@sentry/browser` - with treeshaking flags	25.58 KB
`@sentry/browser` (incl. Tracing)	45.54 KB
`@sentry/browser` (incl. Tracing + Span Streaming)	47.28 KB
`@sentry/browser` (incl. Tracing, Profiling)	50.17 KB
`@sentry/browser` (incl. Tracing, Replay)	83.87 KB
`@sentry/browser` (incl. Tracing, Replay) - with treeshaking flags	73.74 KB
`@sentry/browser` (incl. Tracing, Replay with Canvas)	88.49 KB
`@sentry/browser` (incl. Tracing, Replay, Feedback)	100.83 KB
`@sentry/browser` (incl. Feedback)	43.87 KB
`@sentry/browser` (incl. sendFeedback)	31.78 KB
`@sentry/browser` (incl. FeedbackAsync)	36.79 KB
`@sentry/browser` (incl. Metrics)	28.16 KB
`@sentry/browser` (incl. Logs)	28.38 KB
`@sentry/browser` (incl. Metrics & Logs)	29.06 KB
`@sentry/react`	28.86 KB
`@sentry/react` (incl. Tracing)	47.74 KB
`@sentry/vue`	32.4 KB
`@sentry/vue` (incl. Tracing)	47.46 KB
`@sentry/svelte`	27.12 KB
CDN Bundle	29.43 KB

Conversation

dependabot Bot commented on behalf of github Sep 11, 2026

sdk: v0.123.0

0.123.0 (2026-09-01)

Features

Bug Fixes

Chores

Documentation

0.123.0 (2026-09-01)

Features

Bug Fixes

Chores

Documentation

auto-instrumentations-node: v0.80.0

0.80.0 (2026-08-31)

Features

Dependencies

0.80.0 (2026-08-31)

Features

Dependencies

experimental/v0.222.0

0.222.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

📚 Documentation

🏠 Internal

v2.11.0

2.11.0

🚀 Features

🐛 Bug Fixes

🏠 Internal

2.11.0

🚀 Features

🐛 Bug Fixes

🏠 Internal

experimental/v0.222.0

0.222.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

📚 Documentation

🏠 Internal

10.73.0

Important Changes

Other Changes

Bundle size 📦

10.73.0

Important Changes

Other Changes

v10.0.0

10.0.0 (2026-09-03)

⚠ BREAKING CHANGES

Features

Bug Fixes

10.0.0 (2026-09-03)

⚠ BREAKING CHANGES

Features

Bug Fixes

v7.10.0

7.10.0 (2026-09-03)

Features

Documentation

v7.9.0

7.9.0 (2026-09-02)

Features

Bug Fixes

Chores

7.10.0 (2026-09-03)

Features

Documentation

7.9.0 (2026-09-02)

Features

Bug Fixes

Chores

v9.5.2

What's Changed

v6.26.0

What's Changed

v22.6.1