chore(deps): bump the prod-dependencies-minor group across 1 directory with 17 updates by dependabot[bot] · Pull Request #25 · Jason-Shen2/crest

dependabot · 2026-06-26T16:08:14Z

Bumps the prod-dependencies-minor group with 17 updates in the / directory:

Package	From	To
@anthropic-ai/sdk	`0.91.1`	`0.106.0`
@tanstack/react-virtual	`3.13.19`	`3.14.4`
css-tree	`3.1.0`	`3.2.1`
lucide-react	`1.8.0`	`1.21.0`
mermaid	`11.12.3`	`11.16.0`
monaco-yaml	`5.4.0`	`5.5.1`
onnxruntime-web	`1.26.0`	`1.27.0`
openai	`6.26.0`	`6.45.0`
overlayscrollbars	`2.14.0`	`2.16.0`
react-frame-component	`5.2.7`	`5.3.2`
semver	`7.7.3`	`7.8.5`
shell-quote	`1.8.3`	`1.9.0`
simple-icons	`16.17.0`	`16.24.0`
tailwind-merge	`3.5.0`	`3.6.0`
typebox	`1.1.38`	`1.3.0`
ws	`8.19.0`	`8.21.0`
yaml	`2.8.3`	`2.9.0`

Updates @anthropic-ai/sdk from 0.91.1 to 0.106.0

Release notes

Sourced from @anthropic-ai/sdk's releases.

sdk: v0.106.0

0.106.0 (2026-06-24)

Full Changelog: sdk-v0.105.0...sdk-v0.106.0

Features

client: add support for system.message streaming events (a7c14b7)

Bug Fixes

helpers: single source for x-stainless-helper, append semantics, and tag the fallback middleware (#107) (106bea0)

Chores

api: add support for new refusal category (b38fd01)

api: add support for sending User Profile ID in request headers (198583e)

sdk: v0.105.0

0.105.0 (2026-06-18)

Full Changelog: sdk-v0.104.2...sdk-v0.105.0

Features

api: add support for new code_execution_20260120 tool (8dc2b54)

stream: lazily parse partial tool json input (#99) (e55ceee)

Chores

internal/deps: bump swc to 1.15.40 (#97) (a1d4d75)

internal: use are the types wrong directly (#94) (3d362af)

tests: stop using deprecated models (#98) (65ae1af)

sdk: v0.104.2

0.104.2 (2026-06-15)

Full Changelog: sdk-v0.104.1...sdk-v0.104.2

Chores

api: remove retired models from API and SDKs (a942876)

sdk: v0.104.1

0.104.1 (2026-06-09)

Full Changelog: sdk-v0.104.0...sdk-v0.104.1

... (truncated)

Changelog

Sourced from @anthropic-ai/sdk's changelog.

0.106.0 (2026-06-24)

Full Changelog: sdk-v0.105.0...sdk-v0.106.0

Features

client: add support for system.message streaming events (a7c14b7)

Bug Fixes

helpers: single source for x-stainless-helper, append semantics, and tag the fallback middleware (#107) (106bea0)

Chores

api: add support for new refusal category (b38fd01)

api: add support for sending User Profile ID in request headers (198583e)

0.105.0 (2026-06-18)

Full Changelog: sdk-v0.104.2...sdk-v0.105.0

Features

api: add support for new code_execution_20260120 tool (8dc2b54)

stream: lazily parse partial tool json input (#99) (e55ceee)

Chores

internal/deps: bump swc to 1.15.40 (#97) (a1d4d75)

internal: use are the types wrong directly (#94) (3d362af)

tests: stop using deprecated models (#98) (65ae1af)

0.104.2 (2026-06-15)

Full Changelog: sdk-v0.104.1...sdk-v0.104.2

Chores

api: remove retired models from API and SDKs (a942876)

0.104.1 (2026-06-09)

Full Changelog: sdk-v0.104.0...sdk-v0.104.1

Bug Fixes

api: add frontier_llm refusal category (465e686)

... (truncated)

Commits

0ffdbfa chore: release main (#1098)
ab700dc chore: release main
a322517 feat(api): add support for new code_execution_20260120 tool
65a0106 feat(stream): lazily parse partial tool json input (#99)
384ab51 chore(tests): stop using deprecated models (#98)
a49a191 chore(internal/deps): bump swc to 1.15.40 (#97)
7ac63f3 chore(internal): use are the types wrong directly (#94)
fbee0d1 chore: release main
e984ba4 chore(api): remove retired models from API and SDKs
9a0442d chore: release main
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @anthropic-ai/sdk since your current version.

Updates @tanstack/react-virtual from 3.13.19 to 3.14.4

Release notes

Sourced from @tanstack/react-virtual's releases.

@tanstack/react-virtual@3.14.4

Patch Changes

Updated dependencies [b04f9ee, 37be284]:

@tanstack/virtual-core@3.17.2

@tanstack/react-virtual@3.14.3

Patch Changes

#1201 2ba5eb6 - Make directDomUpdates a no-op for direct DOM writes when containerRef is omitted. Previously the virtualizer still wrote item positions while never sizing the container (a broken half-state). Now omitting containerRef skips all direct writes while still skipping re-renders, letting consumers own the DOM updates themselves (e.g. in onChange).

Updated dependencies [ef69ea3]:

@tanstack/virtual-core@3.17.1

@tanstack/react-virtual@3.14.2

Patch Changes

Updated dependencies [c0b84c8, fbf3bdb]:

@tanstack/virtual-core@3.17.0

@tanstack/react-virtual@3.14.1

Patch Changes

Updated dependencies [c746841]:

@tanstack/virtual-core@3.16.1

@tanstack/react-virtual@3.14.0

Minor Changes

Add opt-in direct DOM updates for scroll positioning with directDomUpdates, directDomUpdatesMode, and containerRef. (#1180)

@tanstack/react-virtual@3.13.26

Patch Changes

Updated dependencies [fc992ab]:

@tanstack/virtual-core@3.16.0

@tanstack/react-virtual@3.13.25

Patch Changes

Replace the useReducer(() => ({}), {}) force-rerender pattern with an (#1168) incrementing number counter. Same semantics (every dispatch changes the reducer state, forcing a render); zero per-dispatch object allocation. Trivial individual cost, but eliminates one steady-state GC source on scroll-heavy apps.

Updated dependencies [99355ad, 99355ad, 99355ad, 99355ad, 99355ad, 99355ad, 99355ad]:

@tanstack/virtual-core@3.15.0

@tanstack/react-virtual@3.13.24

Patch Changes

... (truncated)

Changelog

Sourced from @tanstack/react-virtual's changelog.

3.14.4

Patch Changes

Updated dependencies [b04f9ee, 37be284]:

@tanstack/virtual-core@3.17.2

3.14.3

Patch Changes

#1201 2ba5eb6 - Make directDomUpdates a no-op for direct DOM writes when containerRef is omitted. Previously the virtualizer still wrote item positions while never sizing the container (a broken half-state). Now omitting containerRef skips all direct writes while still skipping re-renders, letting consumers own the DOM updates themselves (e.g. in onChange).

Updated dependencies [ef69ea3]:

@tanstack/virtual-core@3.17.1

3.14.2

Patch Changes

Updated dependencies [c0b84c8, fbf3bdb]:

@tanstack/virtual-core@3.17.0

3.14.1

Patch Changes

Updated dependencies [c746841]:

@tanstack/virtual-core@3.16.1

3.14.0

Minor Changes

Add opt-in direct DOM updates for scroll positioning with directDomUpdates, directDomUpdatesMode, and containerRef. (#1180)

3.13.26

Patch Changes

Updated dependencies [fc992ab]:

@tanstack/virtual-core@3.16.0

3.13.25

Patch Changes

Replace the useReducer(() => ({}), {}) force-rerender pattern with an (#1168) incrementing number counter. Same semantics (every dispatch changes the reducer state, forcing a render); zero per-dispatch object allocation.

... (truncated)

Commits

d73a538 ci: Version Packages (#1210)
75ae896 ci: Version Packages (#1202)
2ba5eb6 fix(react-virtual): make directDomUpdates a no-op without containerRef (#1201)
ef69ea3 fix(virtual-core): adjust scroll on first measurement during backward scroll ...
932c358 test(react-virtual): add e2e test for React Compiler with directDomUpdates, b...
b983b21 ci: Version Packages (#1184)
fbf3bdb feat(virtual-core): add useCachedMeasurements option to preserve sizes when...
13dec39 docs: add directDomUpdates and directDomUpdatesMode options (#1185)
c33902f ci: Version Packages (#1182)
d789c6e ci: Version Packages (#1181)
Additional commits viewable in compare view

Updates css-tree from 3.1.0 to 3.2.1

Release notes

Sourced from css-tree's releases.

3.2.1

Fixed parsing of nested function in a group in definition syntax (#358)

3.2.0
Added "sideEffects": false in package.json

Added list option to the parse() method to specify whether the parser should produce a List (by default, list: true) or an array (list: false) for node's children (e.g., SelectorList, Block, etc.)

Added support for Functional Notation in definition syntax (for now by wrapping function arguments into an implicit group when necessary, see #292)

Added support for stacked multipliers {A}? and {A,B}? according to spec in definition syntax parsing (#346)

Added math functions support in syntax matching (e.g., min(), max(), etc.) (#344)
Added onToken option to the parse() method, which can be either an array or a function:
When the value is an array, it is populated with objects { type, start, end } (token type, and its start and end offsets).
When the value is a function, it accepts type, start, end, and index parameters, and is invoked with a token API as this, enabling advanced token handling (see onToken). For example, the following demonstrates checking if all block tokens have matching pairs:
parse(css, {
    onToken(type, start, end, index) {
        if (this.isBlockOpenerTokenType(type)) {
            if (this.getBlockPairTokenIndex(index) === -1) {
                console.warn('No closing pair for', this.getTokenValue(index), this.getRangeLocation(start, end));
            }
        } else if (this.isBlockCloserTokenType(type)) {
            if (this.getBlockPairTokenIndex(index) === -1) {
                console.warn('No opening pair for', this.getTokenValue(index), this.getRangeLocation(start, end));
            }
        }
    }
});
Extended TokenStream with the following methods:

getTokenEnd(tokenIndex) – returns the token's end offset by index, complementing getTokenStart(tokenIndex)

getTokenType(tokenIndex) – returns the token's type by index

isBlockOpenerTokenType(tokenType) – returns true for <function-token>, <(-token>, <[-token>, and <{-token>

isBlockCloserTokenType(tokenType) – returns true for <)-token>, <]-token>, and <}-token>

getBlockTokenPairIndex(tokenIndex) – returns the index of the pair token for a block, or -1 if no pair exists

Changed generate() to not auto insert whitespaces between tokens for raw values (#356)

Fixed fork() to extend node definitions instead of overriding them. For example, fork({ node: { Dimension: { generate() { /* ... */ } } } }) will now update only the generate() method on the Dimension node, while inheriting all other properties from the previous syntax definition.

Bumped mdn/data to 2.27.1 and various fixes in syntaxes

Changelog

Sourced from css-tree's changelog.

3.2.1 (March 5, 2026)

Fixed parsing of nested function in a group in definition syntax (#358)

3.2.0 (March 4, 2026)
Added "sideEffects": false in package.json

Added list option to the parse() method to specify whether the parser should produce a List (by default, list: true) or an array (list: false) for node's children (e.g., SelectorList, Block, etc.)

Added support for Functional Notation in definition syntax (for now by wrapping function arguments into an implicit group when necessary, see #292)

Added support for stacked multipliers {A}? and {A,B}? according to spec in definition syntax parsing (#346)

Added math functions support in syntax matching (e.g., min(), max(), etc.) (#344)
Added onToken option to the parse() method, which can be either an array or a function:
When the value is an array, it is populated with objects { type, start, end } (token type, and its start and end offsets).
When the value is a function, it accepts type, start, end, and index parameters, and is invoked with a token API as this, enabling advanced token handling (see onToken). For example, the following demonstrates checking if all block tokens have matching pairs:
parse(css, {
    onToken(type, start, end, index) {
        if (this.isBlockOpenerTokenType(type)) {
            if (this.getBlockPairTokenIndex(index) === -1) {
                console.warn('No closing pair for', this.getTokenValue(index), this.getRangeLocation(start, end));
            }
        } else if (this.isBlockCloserTokenType(type)) {
            if (this.getBlockPairTokenIndex(index) === -1) {
                console.warn('No opening pair for', this.getTokenValue(index), this.getRangeLocation(start, end));
            }
        }
    }
});
Extended TokenStream with the following methods:

getTokenEnd(tokenIndex) – returns the token's end offset by index, complementing getTokenStart(tokenIndex)

getTokenType(tokenIndex) – returns the token's type by index

isBlockOpenerTokenType(tokenType) – returns true for <function-token>, <(-token>, <[-token>, and <{-token>

isBlockCloserTokenType(tokenType) – returns true for <)-token>, <]-token>, and <}-token>

getBlockTokenPairIndex(tokenIndex) – returns the index of the pair token for a block, or -1 if no pair exists

Changed generate() to not auto insert whitespaces between tokens for raw values (#356)

Fixed fork() to extend node definitions instead of overriding them. For example, fork({ node: { Dimension: { generate() { /* ... */ } } } }) will now update only the generate() method on the Dimension node, while inheriting all other properties from the previous syntax definition.

Bumped mdn/data to 2.27.1 and various fixes in syntaxes

Commits

8a6caba 3.2.1
7c7f9ee Fix parsing of nested function in a group in definition syntax (fixes #358)
c42fee2 3.2.0
aad332e Add Function Notation in syntax definition (#292)
264d09d Fix GitHub actions
5766a65 Fix syntax definition issues
307d8df Bump deps
c008c01 Add support for stacked multipliers {A}? and {A,B}? in definition syntax ...
20f5671 Add list option for parser (fixes #348)
39a0c72 Update nodejs versions
Additional commits viewable in compare view

Updates lucide-react from 1.8.0 to 1.21.0

Release notes

Sourced from lucide-react's releases.

Version 1.21.0

What's Changed

ci(release.yml): Remove new-version in release flow by @ericfennis in lucide-icons/lucide#4478

ci(release.yml): Fix workflow and remove version scripts in package scripts by @ericfennis in lucide-icons/lucide#4479

fix(docs): rename navigation category label by @Hsiii in lucide-icons/lucide#4483

feat(icons): added broken-bone icon by @Patolord in lucide-icons/lucide#4131

New Contributors

@Hsiii made their first contribution in lucide-icons/lucide#4483

@Patolord made their first contribution in lucide-icons/lucide#4131

Full Changelog: lucide-icons/lucide@1.20.0...1.21.0

Version 1.20.0

What's Changed

fix(icons): decreased size of arrows inside square-arrow-* icons by @jguddas in lucide-icons/lucide#3926

chore(tags): Add tags to search- icons by @jamiemlaw in lucide-icons/lucide#4099

feat(icons): added save-check icon by @Konixy in lucide-icons/lucide#3120

feat(icons): added tag-plus and tag-x icons by @adam-kov in lucide-icons/lucide#3980

feat(icons): added banknote-check icon by @mfjramirezf in lucide-icons/lucide#3956

feat(icons): added clock-arrow-in icon by @jguddas in lucide-icons/lucide#2403

feat(icons): added summary icon by @jpjacobpadilla in lucide-icons/lucide#3114

feat(icons): added user-round-arrow-in icon by @jguddas in lucide-icons/lucide#2283

feat(icons): added clock-arrow-out icon by @jguddas in lucide-icons/lucide#2404

docs(docs): fix broken Svelte package source link in README by @SRKrukowski in lucide-icons/lucide#4468

chore(deps-dev): bump @angular/compiler from 21.2.5 to 21.2.17 by @dependabot[bot] in lucide-icons/lucide#4474

chore(deps-dev): bump @angular/core from 21.2.5 to 21.2.17 by @dependabot[bot] in lucide-icons/lucide#4470

chore(deps-dev): bump vitest from 4.0.12 to 4.1.0 by @dependabot[bot] in lucide-icons/lucide#4429

chore(deps-dev): bump markdown-it from 14.1.1 to 14.2.0 by @dependabot[bot] in lucide-icons/lucide#4475

chore(deps-dev): bump @angular/common from 21.2.5 to 21.2.17 by @dependabot[bot] in lucide-icons/lucide#4471

feat(icons): added pencil-sparkles icon by @jennieboops in lucide-icons/lucide#4445

New Contributors

@Konixy made their first contribution in lucide-icons/lucide#3120

@adam-kov made their first contribution in lucide-icons/lucide#3980

@mfjramirezf made their first contribution in lucide-icons/lucide#3956

@SRKrukowski made their first contribution in lucide-icons/lucide#4468

@jennieboops made their first contribution in lucide-icons/lucide#4445

Full Changelog: lucide-icons/lucide@1.19.0...1.20.0

Version 1.19.0

What's Changed

chore(deps): upgrade pnpm to version 11.6.0 by @ericfennis in lucide-icons/lucide#4458

feat(icons): added star-* icons by @RajnishKMehta in lucide-icons/lucide#3918

chore(suggest-tags): Update metadata suggestion script by @ericfennis in lucide-icons/lucide#4462

feat(icons): added save-pen icon by @vaporvee in lucide-icons/lucide#4179

feat(icons): added wrench-off icon by @nilsjonsson in lucide-icons/lucide#4434

feat(icons): added ad icon by @jamiemlaw in lucide-icons/lucide#4323

feat(icons): added eye-dashed icon by @karsa-mistmere in lucide-icons/lucide#4415

... (truncated)

Commits

5ff536e ci(release.yml): Fix workflow and remove version scripts in package scripts...
07c885e fix(docs): fix zephyr-cloud URL in readmes
50d8af5 docs(readme): Update readme files (#4320)
653e44b feat(packages): use .mjs for ESM bundles (#4285)
See full diff in compare view

Updates mermaid from 11.12.3 to 11.16.0

Release notes

Sourced from mermaid's releases.

mermaid@11.16.0

Minor Changes

#7535 ea1c48f Thanks @ragelink! - feat(cynefin): Adds the Cynefin framework as a new diagram type (beta) to Mermaid (available as cynefin-beta). The Cynefin framework, created by Dave Snowden, is a decision-making framework that categorizes problems into five complexity domains, widely used in agile, incident management, strategy, and organizational design.

#7721 f45cc2c Thanks @notionparallax! - feat(treeView): add box-drawing character input support for treeView diagrams

#7550 f1f4d45 Thanks @DominicBurkart! - feat(xychart): add per-point text labels for xychart line plots

#7527 b4d0442 Thanks @notionparallax! - feat(treeView): Extends the existing treeView-beta diagram with features useful for representing file/directory structures.

#7793 a6f097d Thanks @SSDWGG! - feat(er): support optional ER attribute types with a ? suffix

#7772 37f2e36 Thanks @devareddy05! - feat(gantt): support multiple excludes / includes lines so long exclusion lists can be split into commented groups (#6270)

#7708 4e63e9d Thanks @txmxthy! - feat(architecture): add align row|column {ids…} directive to architecture-beta diagrams so authors can declare horizontal or vertical alignment of services explicitly.

#7760 05223be Thanks @ngdaniels! - feat(pie): Enhance Pie Chart - Enable donut chart, Set legend position, and highlight slice

#7251 216e4e9 Thanks @ydah! - feat(railroad): Add support for Railroad Diagrams (Syntax Diagrams) with four input syntaxes: IR (railroad-beta), EBNF (railroad-ebnf-beta), ABNF (railroad-abnf-beta), and PEG (railroad-peg-beta).

#7774 e5c75e6 Thanks @ngdaniels! - feat(xychart): enable rotate label on X-axis

#7791 974fa7b Thanks @knsv-bot! - feat(swimlane): add swimlane as a standalone diagram type with a dedicated layered orthogonal layout algorithm

Patch Changes

#7744 633c261 Thanks @ashishjain0512! - fix(architecture): add architecture.seed config option to make architecture diagrams render deterministically. Resolves #7729.

#7732 c8ba156 Thanks @rkdfx! - fix: tolerate leading horizontal whitespace before YAML frontmatter delimiters. Closes mermaid-js/mermaid#7613

#7314 4e4e6c4 Thanks @darshanr0107! - fix(flowchart): Prevent crash when flowchart node shape is undefined

#7762 cfd2391 Thanks @Dharya-dev! - fix(class): support styling and callbacks for generic classes

#7284 c1f116d Thanks @darshanr0107! - fix(gantt): Render gantt vertical markers without affecting row layout or chart height

#7786 72fbab1 Thanks @knsv-bot! - fix(er): allow special characters (e.g. dots) in ER diagram attribute names and types by escaping them with backticks

#7672 4887e97 Thanks @sjackson0109! - fix(flowchart): respect per-subgraph direction keyword in Dagre layout. Fixes #4648

#7734 a4c1e50 Thanks @OfirHaf! - fix(block): read block padding and sanitize config dynamically instead of at module load time

#7674 cc75089 Thanks @cyphercodes! - fix(block): respect current DOMPurify config when sanitizing labels

#7711 be2e282 Thanks @Jinacker! - fix(flowchart): render flowchart and state self-loop edges as a single SVG path.

#7781 d945968 Thanks @Dharya-dev! - fix(radar): align axis labels based on angular position to prevent clipping

#7661 2f5e9e8 Thanks @nabila401! - fix(venn): fix 3-circle venn diagram union rendering

... (truncated)

Commits

7c0cafc Version Packages: v11.16.0 (#7916)
26acd1a Merge pull request #7915 from mermaid-js/release/11.16.0
5a8eae7 Merge branch 'master' into release/11.16.0
dd5ea77 Merge pull request #7913 from mermaid-js/pebr/fix-changesets
658ee66 docs: fix missing bumps of @mermaid-js/parser
04259a1 docs: fix author and commit on examples changeset
c9dcfb1 docs: update changeset diagram scopes
a34dab9 docs: remove swimlane/cynefin bugfix changesets
e81f31f docs: remove local-editor changeset
7223f03 Minor correction
Additional commits viewable in compare view

Updates monaco-yaml from 5.4.0 to 5.5.1

Release notes

Sourced from monaco-yaml's releases.

v5.5.0

What's Changed

39b2e9e Update to yaml-language-server 1.23.0

d472fd9 Make optional features togglable

33c426a Implement code lens support

fbe60fd Implement rename support

fbe60fd Declare and implement new language service options

Full Changelog: remcohaszing/monaco-yaml@v5.4.1...v5.5.0

v5.4.1

What's Changed

d095257 Add getOptions method to retrieve current configuration of monaco-yaml by @pmahdicheraghi in remcohaszing/monaco-yaml#280

187d130 Use OIDC for publishing to npm

New Contributors

@pmahdicheraghi made their first contribution in remcohaszing/monaco-yaml#280

Full Changelog: remcohaszing/monaco-yaml@v5.4.0...v5.4.1

Commits

9a15c65 5.5.1
9782fb3 Use staged publishing
9a73984 Remove useless argument form eslint in CI
cc92ff9 Use Node.js 26 in CI
4419559 Fix the dist ignore pattern
93a35d2 Cleanup disposables in tests
4abd6b7 Return real values from defaultMeta methods on ajv instances (#283)
47f405b Update lockfile
ffe35fd 5.5.0
daa5789 Stub ajv-i18n
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for monaco-yaml since your current version.

Updates onnxruntime-web from 1.26.0 to 1.27.0

Release notes

Sourced from onnxruntime-web's releases.

ONNX Runtime v1.27.0

n.b. This release is targeting ONNX 1.21. ONNX 1.22 will be supported in ORT 1.28. n.b. This changelog was generated via LLM. Only the contributor list has been verified. As always, only trust the commit history.

Announcements & Breaking Changes

CUDA 12 package files are now explicitly named as such.

CUDA 12 packages are deprecated, please move to CUDA 13 ASAP.

Security Fixes

Fixed out-of-bounds read in SoftmaxCrossEntropyLoss via label bounds validation (#28004)

Hardened OneHot input validation and output-size computation (#28014)

Added SafeInt overflow protection in Expand and capped constant-folding output sizes (#28055)

Bounded total output allocation size in Tile kernel (#28070)

Added mask/input shape consistency checks in MaxpoolWithMask::Compute (#28223)

Fixed BitShift UB for shift amounts greater than or equal to bit width (#28272)

Validated sequence bounds in GQA (seqlens_k vs cos_cache) (#28277)

Validated conv bias shape in WordConvEmbedding to prevent OOB reads (#28279)

Fixed int32 overflow in CUDA Cast and UnaryElementWise kernels for very large tensors (#28386)

Fixed out-of-bounds read in CropBase scale handling (#28399)

Fixed rank-underflow bug in Inverse kernel trailing-dimension indexing (#28400)

Added sparse tensor external file path validation and additional external-path hardening (#28408, #28709, #28725)

Switched remaining torch.load() calls to weights_only=True (#28421)

Added CPU cache-indirection beam-index validation (#28486)

Added additional overflow/bounds checks and test coverage in runtime buffers (#28713, #28747)

New Features

Execution Provider Plugin API

Added zero-copy I/O for plugin EPs with HOST_ACCESSIBLE memory (#28037)

Added OrtEp::OnSessionInitializationEnd() callback (#28319)

Added plugin EP session-options getters (#28377)

Added CUDA Plugin EP provider options for streams and external allocators (#28603)

Core APIs & Runtime

Added support for ONNX overloaded functions (IR v10+) (#28275)

Added FLOAT8E8M0 datatype support in ONNX Runtime (#28381)

Added CPU Cast support for FLOAT8E8M0 (#28435)

Added kOrtEpDevice_EpMetadataKey_OSDriverVersion example and docs (#28282)

Quantization & Training Tooling

Added calibration cache support to quantize_static (#28221)

... (truncated)

Commits

8f0278c [CUDA] Optimize QMoE SoftmaxTopK router for small-batch decode (#29026)
66916b0 fix: NodeJS pkging stag...
Description has been truncated

…y with 17 updates Bumps the prod-dependencies-minor group with 17 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.91.1` | `0.106.0` | | [@tanstack/react-virtual](https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual) | `3.13.19` | `3.14.4` | | [css-tree](https://github.com/csstree/csstree) | `3.1.0` | `3.2.1` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.8.0` | `1.21.0` | | [mermaid](https://github.com/mermaid-js/mermaid) | `11.12.3` | `11.16.0` | | [monaco-yaml](https://github.com/remcohaszing/monaco-yaml) | `5.4.0` | `5.5.1` | | [onnxruntime-web](https://github.com/Microsoft/onnxruntime) | `1.26.0` | `1.27.0` | | [openai](https://github.com/openai/openai-node) | `6.26.0` | `6.45.0` | | [overlayscrollbars](https://github.com/KingSora/OverlayScrollbars/tree/HEAD/packages/overlayscrollbars) | `2.14.0` | `2.16.0` | | [react-frame-component](https://github.com/ryanseddon/react-frame-component) | `5.2.7` | `5.3.2` | | [semver](https://github.com/npm/node-semver) | `7.7.3` | `7.8.5` | | [shell-quote](https://github.com/ljharb/shell-quote) | `1.8.3` | `1.9.0` | | [simple-icons](https://github.com/simple-icons/simple-icons) | `16.17.0` | `16.24.0` | | [tailwind-merge](https://github.com/dcastil/tailwind-merge) | `3.5.0` | `3.6.0` | | [typebox](https://github.com/sinclairzx81/typebox) | `1.1.38` | `1.3.0` | | [ws](https://github.com/websockets/ws) | `8.19.0` | `8.21.0` | | [yaml](https://github.com/eemeli/yaml) | `2.8.3` | `2.9.0` | Updates `@anthropic-ai/sdk` from 0.91.1 to 0.106.0 - [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases) - [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md) - [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.91.1...sdk-v0.106.0) Updates `@tanstack/react-virtual` from 3.13.19 to 3.14.4 - [Release notes](https://github.com/TanStack/virtual/releases) - [Changelog](https://github.com/TanStack/virtual/blob/main/packages/react-virtual/CHANGELOG.md) - [Commits](https://github.com/TanStack/virtual/commits/@tanstack/react-virtual@3.14.4/packages/react-virtual) Updates `css-tree` from 3.1.0 to 3.2.1 - [Release notes](https://github.com/csstree/csstree/releases) - [Changelog](https://github.com/csstree/csstree/blob/master/CHANGELOG.md) - [Commits](csstree/csstree@v3.1.0...v3.2.1) Updates `lucide-react` from 1.8.0 to 1.21.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.21.0/packages/lucide-react) Updates `mermaid` from 11.12.3 to 11.16.0 - [Release notes](https://github.com/mermaid-js/mermaid/releases) - [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@11.12.3...mermaid@11.16.0) Updates `monaco-yaml` from 5.4.0 to 5.5.1 - [Release notes](https://github.com/remcohaszing/monaco-yaml/releases) - [Commits](remcohaszing/monaco-yaml@v5.4.0...v5.5.1) Updates `onnxruntime-web` from 1.26.0 to 1.27.0 - [Release notes](https://github.com/Microsoft/onnxruntime/releases) - [Changelog](https://github.com/microsoft/onnxruntime/blob/main/docs/ReleaseManagement.md) - [Commits](microsoft/onnxruntime@v1.26.0...v1.27.0) Updates `openai` from 6.26.0 to 6.45.0 - [Release notes](https://github.com/openai/openai-node/releases) - [Changelog](https://github.com/openai/openai-node/blob/main/CHANGELOG.md) - [Commits](openai/openai-node@v6.26.0...v6.45.0) Updates `overlayscrollbars` from 2.14.0 to 2.16.0 - [Release notes](https://github.com/KingSora/OverlayScrollbars/releases) - [Changelog](https://github.com/KingSora/OverlayScrollbars/blob/master/packages/overlayscrollbars/CHANGELOG.md) - [Commits](https://github.com/KingSora/OverlayScrollbars/commits/v2.16.0/packages/overlayscrollbars) Updates `react-frame-component` from 5.2.7 to 5.3.2 - [Release notes](https://github.com/ryanseddon/react-frame-component/releases) - [Changelog](https://github.com/ryanseddon/react-frame-component/blob/master/CHANGELOG.md) - [Commits](ryanseddon/react-frame-component@v5.2.7...v5.3.2) Updates `semver` from 7.7.3 to 7.8.5 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](npm/node-semver@v7.7.3...v7.8.5) Updates `shell-quote` from 1.8.3 to 1.9.0 - [Changelog](https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md) - [Commits](ljharb/shell-quote@v1.8.3...v1.9.0) Updates `simple-icons` from 16.17.0 to 16.24.0 - [Release notes](https://github.com/simple-icons/simple-icons/releases) - [Commits](simple-icons/simple-icons@16.17.0...16.24.0) Updates `tailwind-merge` from 3.5.0 to 3.6.0 - [Release notes](https://github.com/dcastil/tailwind-merge/releases) - [Commits](dcastil/tailwind-merge@v3.5.0...v3.6.0) Updates `typebox` from 1.1.38 to 1.3.0 - [Commits](sinclairzx81/typebox@1.1.38...1.3.0) Updates `ws` from 8.19.0 to 8.21.0 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.19.0...8.21.0) Updates `yaml` from 2.8.3 to 2.9.0 - [Release notes](https://github.com/eemeli/yaml/releases) - [Commits](eemeli/yaml@v2.8.3...v2.9.0) --- updated-dependencies: - dependency-name: "@anthropic-ai/sdk" dependency-version: 0.106.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-dependencies-minor - dependency-name: "@tanstack/react-virtual" dependency-version: 3.14.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-dependencies-minor - dependency-name: css-tree dependency-version: 3.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-dependencies-minor - dependency-name: lucide-react dependency-version: 1.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-dependencies-minor - dependency-name: mermaid dependency-version: 11.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-dependencies-minor - dependency-name: monaco-yaml dependency-version: 5.5.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-dependencies-minor - dependency-name: onnxruntime-web dependency-version: 1.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-dependencies-minor - dependency-name: openai dependency-version: 6.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-dependencies-minor - dependency-name: overlayscrollbars dependency-version: 2.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-dependencies-minor - dependency-name: react-frame-component dependency-version: 5.3.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-dependencies-minor - dependency-name: semver dependency-version: 7.8.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-dependencies-minor - dependency-name: shell-quote dependency-version: 1.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-dependencies-minor - dependency-name: simple-icons dependency-version: 16.24.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-dependencies-minor - dependency-name: tailwind-merge dependency-version: 3.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-dependencies-minor - dependency-name: typebox dependency-version: 1.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-dependencies-minor - dependency-name: ws dependency-version: 8.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-dependencies-minor - dependency-name: yaml dependency-version: 2.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-dependencies-minor ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-06-27T12:16:01Z

Dependabot can't access a private package registry without explicit configuration. Because of this, Dependabot cannot update this pull request.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 26, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the prod-dependencies-minor group across 1 directory with 17 updates#25

chore(deps): bump the prod-dependencies-minor group across 1 directory with 17 updates#25
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/prod-dependencies-minor-f36d11e636

dependabot Bot commented on behalf of github Jun 26, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jun 27, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jun 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

sdk: v0.106.0

0.106.0 (2026-06-24)

Features

Bug Fixes

Chores

sdk: v0.105.0

0.105.0 (2026-06-18)

Features

Chores

sdk: v0.104.2

0.104.2 (2026-06-15)

Chores

sdk: v0.104.1

0.104.1 (2026-06-09)

0.106.0 (2026-06-24)

Features

Bug Fixes

Chores

0.105.0 (2026-06-18)

Features

Chores

0.104.2 (2026-06-15)

Chores

0.104.1 (2026-06-09)

Bug Fixes

@​tanstack/react-virtual@​3.14.4

Patch Changes

@​tanstack/react-virtual@​3.14.3

Patch Changes

@​tanstack/react-virtual@​3.14.2

Patch Changes

@​tanstack/react-virtual@​3.14.1

Patch Changes

@​tanstack/react-virtual@​3.14.0

Minor Changes

@​tanstack/react-virtual@​3.13.26

Patch Changes

@​tanstack/react-virtual@​3.13.25

Patch Changes

@​tanstack/react-virtual@​3.13.24

Patch Changes

3.14.4

Patch Changes

3.14.3

Patch Changes

3.14.2

Patch Changes

3.14.1

Patch Changes

3.14.0

Minor Changes

3.13.26

Patch Changes

3.13.25

Patch Changes

3.2.1

3.2.0

3.2.1 (March 5, 2026)

3.2.0 (March 4, 2026)

Version 1.21.0

What's Changed

New Contributors

Version 1.20.0

What's Changed

New Contributors

Version 1.19.0

What's Changed

mermaid@11.16.0

Minor Changes

Patch Changes

v5.5.0

What's Changed

v5.4.1

What's Changed

New Contributors

ONNX Runtime v1.27.0

Announcements & Breaking Changes

dependabot Bot commented on behalf of github Jun 26, 2026 •

edited

Loading

`@tanstack/react-virtual@3`.14.4

`@tanstack/react-virtual@3`.14.3

`@tanstack/react-virtual@3`.14.2

`@tanstack/react-virtual@3`.14.1

`@tanstack/react-virtual@3`.14.0

`@tanstack/react-virtual@3`.13.26

`@tanstack/react-virtual@3`.13.25

`@tanstack/react-virtual@3`.13.24